Every CVE Search/ Get API key

CVE-2026-23111

netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()

7.8 HighPublic exploitFix available

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()

nft_map_catchall_activate() has an inverted element activity check compared to its non-catchall counterpart nft_mapelem_activate() and compared to what is logically required.

nft_map_catchall_activate() is called from the abort path to re-activate catchall map elements that were deactivated during a failed transaction. It should skip elements that are already active (they don't need re-activation) and process elements that are inactive (they need to be restored). Instead, the current code does the opposite: it skips inactive elements and processes active ones.

Compare the non-catchall activate callback, which is correct:

nft_mapelem_activate(): if (nft_set_elem_active(ext, iter->genmask)) return 0; /* skip active, process inactive */

With the buggy catchall version:

nft_map_catchall_activate(): if (!nft_set_elem_active(ext, genmask)) continue; /* skip inactive, process active */

The consequence is that when a DELSET operation is aborted, nft_setelem_data_activate() is never called for the catchall element. For NFT_GOTO verdict elements, this means nft_data_hold() is never called to restore the chain->use reference count. Each abort cycle permanently decrements chain->use. Once chain->use reaches zero, DELCHAIN succeeds and frees the chain while catchall verdict elements still reference it, resulting in a use-after-free.

This is exploitable for local privilege escalation from an unprivileged user via user namespaces + nftables on distributions that enable CONFIG_USER_NS and CONFIG_NF_TABLES.

Fix by removing the negation so the check matches nft_mapelem_activate(): skip active elements, process inactive ones.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.52%Up 0.5 points since Feb 14, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.8

netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()

nft_map_catchall_activate() has an inverted element activity check compared to its non-catchall counterpart nft_mapelem_activate() and compared to what is logically required.

nft_map_catchall_activate() is called from the abort path to re-activate catchall map elements that were deactivated during a failed transaction. It should skip elements that are already active (they don't need re-activation) and process elements that are inactive (they need to be restored). Instead, the current code does the opposite: it skips inactive elements and processes active ones.

Compare the non-catchall activate callback, which is correct:

nft_mapelem_activate(): if (nft_set_elem_active(ext, iter->genmask)) return 0; /* skip active, process inactive */

With the buggy catchall version:

nft_map_catchall_activate(): if (!nft_set_elem_active(ext, genmask)) continue; /* skip inactive, process active */

The consequence is that when a DELSET operation is aborted, nft_setelem_data_activate() is never called for the catchall element. For NFT_GOTO verdict elements, this means nft_data_hold() is never called to restore the chain->use reference count. Each abort cycle permanently decrements chain->use. Once chain->use reaches zero, DELCHAIN succeeds and frees the chain while catchall verdict elements still reference it, resulting in a use-after-free.

This is exploitable for local privilege escalation from an unprivileged user via user namespaces + nftables on distributions that enable CONFIG_USER_NS and CONFIG_NF_TABLES.

Fix by removing the negation so the check matches nft_mapelem_activate(): skip active elements, process inactive ones.

Record
CVE-2026-23111
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416, CWE-672
Updated
2026-11-02
EUVDEUVD-2026-6170 7.8

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()

nft_map_catchall_activate() has an inverted element activity check compared to its non-catchall counterpart nft_mapelem_activate() and compared to what is logically required.

nft_map_catchall_activate() is called from the abort path to re-activate catchall map elements that were deactivated during a failed transaction. It should skip elements that are already active (they don't need re-activation) and process elements that are inactive (they need to be restored). Instead, the current code does the opposite: it skips inactive elements and processes active ones.

Compare the non-catchall activate callback, which is correct:

nft_mapelem_activate(): if (nft_set_elem_active(ext, iter->genmask)) return 0; /* skip active, process inactive */

With the buggy catchall version:

nft_map_catchall_activate(): if (!nft_set_elem_active(ext, genmask)) continue; /* skip inactive, process active */

The consequence is that when a DELSET operation is aborted, nft_setelem_data_activate() is never called for the catchall element. For NFT_GOTO verdict elements, this means nft_data_hold() is never called to restore the chain->use reference count. Each abort cycle permanently decrements chain->use. Once chain->use reaches zero, DELCHAIN succeeds and frees the chain while catchall verdict elements still reference it, resulting in a use-after-free.

This is exploitable for local privilege escalation from an unprivileged user via user namespaces + nftables on distributions that enable CONFIG_USER_NS and CONFIG_NF_TABLES.

Fix by removing the negation so the check matches nft_mapelem_activate(): skip active elements, process inactive ones.

Record
EUVD-2026-6170
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-jh9m-9mr6-3ghc 7.8

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix...

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()

nft_map_catchall_activate() has an inverted element activity check compared to its non-catchall counterpart nft_mapelem_activate() and compared to what is logically required.

nft_map_catchall_activate() is called from the abort path to re-activate catchall map elements that were deactivated during a failed transaction. It should skip elements that are already active (they don't need re-activation) and process elements that are inactive (they need to be restored). Instead, the current code does the opposite: it skips inactive elements and processes active ones.

Compare the non-catchall activate callback, which is correct:

nft_mapelem_activate(): if (nft_set_elem_active(ext, iter->genmask)) return 0; /* skip active, process inactive */

With the buggy catchall version:

nft_map_catchall_activate(): if (!nft_set_elem_active(ext, genmask)) continue; /* skip inactive, process active */

The consequence is that when a DELSET operation is aborted, nft_setelem_data_activate() is never called for the catchall element. For NFT_GOTO verdict elements, this means nft_data_hold() is never called to restore the chain->use reference count. Each abort cycle permanently decrements chain->use. Once chain->use reaches zero, DELCHAIN succeeds and frees the chain while catchall verdict elements still reference it, resulting in a use-after-free.

This is exploitable for local privilege escalation from an unprivileged user via user namespaces + nftables on distributions that enable CONFIG_USER_NS and CONFIG_NF_TABLES.

Fix by removing the negation so the check matches nft_mapelem_activate(): skip active elements, process inactive ones.

Record
GHSA-jh9m-9mr6-3ghc
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416, CWE-672
Updated
2026-11-02
NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()

nft_map_catchall_activate() has an inverted element activity check compared to its non-catchall counterpart nft_mapelem_activate() and compared to what is logically required.

nft_map_catchall_activate() is called from the abort path to re-activate catchall map elements that were deactivated during a failed transaction. It should skip elements that are already active (they don't need re-activation) and process elements that are inactive (they need to be restored). Instead, the current code does the opposite: it skips inactive elements and processes active ones.

Compare the non-catchall activate callback, which is correct:

nft_mapelem_activate(): if (nft_set_elem_active(ext, iter->genmask)) return 0; /* skip active, process inactive */

With the buggy catchall version:

nft_map_catchall_activate(): if (!nft_set_elem_active(ext, genmask)) continue; /* skip inactive, process active */

The consequence is that when a DELSET operation is aborted, nft_setelem_data_activate() is never called for the catchall element. For NFT_GOTO verdict elements, this means nft_data_hold() is never called to restore the chain->use reference count. Each abort cycle permanently decrements chain->use. Once chain->use reaches zero, DELCHAIN succeeds and frees the chain while catchall verdict elements still reference it, resulting in a use-after-free.

This is exploitable for local privilege escalation from an unprivileged user via user namespaces + nftables on distributions that enable CONFIG_USER_NS and CONFIG_NF_TABLES.

Fix by removing the negation so the check matches nft_mapelem_activate(): skip active elements, process inactive ones.

Record
CVE-2026-23111
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416, CWE-672
Updated
2026-11-02
OSVBELL-CVE-2026-23111 7.8
Record
BELL-CVE-2026-23111
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 7.8

netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()

nft_map_catchall_activate() has an inverted element activity check compared to its non-catchall counterpart nft_mapelem_activate() and compared to what is logically required.

nft_map_catchall_activate() is called from the abort path to re-activate catchall map elements that were deactivated during a failed transaction. It should skip elements that are already active (they don't need re-activation) and process elements that are inactive (they need to be restored). Instead, the current code does the opposite: it skips inactive elements and processes active ones.

Compare the non-catchall activate callback, which is correct:

nft_mapelem_activate(): if (nft_set_elem_active(ext, iter->genmask)) return 0; /* skip active, process inactive */

With the buggy catchall version:

nft_map_catchall_activate(): if (!nft_set_elem_active(ext, genmask)) continue; /* skip inactive, process active */

The consequence is that when a DELSET operation is aborted, nft_setelem_data_activate() is never called for the catchall element. For NFT_GOTO verdict elements, this means nft_data_hold() is never called to restore the chain->use reference count. Each abort cycle permanently decrements chain->use. Once chain->use reaches zero, DELCHAIN succeeds and frees the chain while catchall verdict elements still reference it, resulting in a use-after-free.

This is exploitable for local privilege escalation from an unprivileged user via user namespaces + nftables on distributions that enable CONFIG_USER_NS and CONFIG_NF_TABLES.

Fix by removing the negation so the check matches nft_mapelem_activate(): skip active elements, process inactive ones.

Record
CVE-2026-23111
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 45 moreShow less
OSVDEBIAN-CVE-2026-23111 7.8

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() nft_map_catchall_activate() has an inverted element activity check compared to its non-catchall counterpart nft_mapelem_activate() and compared to what is logically required. nft_map_catchall_activate() is called from the abort path to re-activate catchall map elements that were deactivated during a failed transaction. It should skip elements that are already active (they don't need re-activation) and process elements that are inactive (they need to be restored). Instead, the current code does the opposite: it skips inactive elements and processes active ones. Compare the non-catchall activate callback, which is correct: nft_mapelem_activate(): if (nft_set_elem_active(ext, iter->genmask)) return 0; /* skip active, process inactive / With the buggy catchall version: nft_map_catchall_activate(): if (!nft_set_elem_active(ext, genmask)) continue; / skip inactive, process active */ The consequence is that when a DELSET operation is aborted, nft_setelem_data_activate() is never called for the catchall element. For NFT_GOTO verdict elements, this means nft_data_hold() is never called to restore the chain->use reference count. Each abort cycle permanently decrements chain->use. Once chain->use reaches zero, DELCHAIN succeeds and frees the chain while catchall verdict elements still reference it, resulting in a use-after-free. This is exploitable for local privilege escalation from an unprivileged user via user namespaces + nftables on distributions that enable CONFIG_USER_NS and CONFIG_NF_TABLES. Fix by removing the negation so the check matches nft_mapelem_activate(): skip active elements, process inactive ones.

Record
DEBIAN-CVE-2026-23111
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-1760 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

iommu/s390: Implement blocking domain

This fixes a crash when surprise hot-unplugging a PCI device. This crash happens because during hot-unplug __iommu_group_set_domain_nofail() attaching the default domain fails when the platform no longer recognizes the device as it has already been removed and we end up with a NULL domain pointer and UAF. This is exactly the case referred to in the second comment in __iommu_device_set_domain() and just as stated there if we can instead attach the blocking domain the UAF is prevented as this can handle the already removed device. Implement the blocking domain to use this handling. With this change, the crash is fixed but we still hit a warning attempting to change DMA ownership on a blocked device.(CVE-2024-53232)

In the Linux kernel, the following vulnerability has been resolved:

iommu: Fix two issues in iommu_copy_struct_from_user()

In the review for iommu_copy_struct_to_user() helper, Matt pointed out that a NULL pointer should be rejected prior to dereferencing it: https://lore.kernel.org/all/(CVE-2025-37900)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: Avoid race in open_cached_dir with lease breaks

A pre-existing valid cfid returned from find_or_create_cached_dir might race with a lease break, meaning open_cached_dir doesn't consider it valid, and thinks it's newly-constructed. This leaks a dentry reference if the allocation occurs before the queued lease break work runs.

Avoid the race by extending holding the cfid_list_lock across find_or_create_cached_dir and when the result is checked.(CVE-2025-37954)

In the Linux kernel, the following vulnerability has been resolved:

net_sched: prio: fix a race in prio_tune()

Gerrard Tai reported a race condition in PRIO, whenever SFQ perturb timer fires at the wrong time.

The race is as follows:

CPU 0 CPU 1 [1]: lock root [2]: qdisc_tree_flush_backlog() [3]: unlock root | | [5]: lock root | [6]: rehash | [7]: qdisc_tree_reduce_backlog() | [4]: qdisc_put()

This can be abused to underflow a parent's qlen.

Calling qdisc_purge_queue() instead of qdisc_tree_flush_backlog() should fix the race, because all packets will be purged from the qdisc before releasing the lock.(CVE-2025-38083)

In the Linux kernel, the following vulnerability has been resolved:

IB/mlx5: Fix potential deadlock in MR deregistration

The issue arises when kzalloc() is invoked while holding umem_mutex or any other lock acquired under umem_mutex. This is problematic because kzalloc() can trigger fs_reclaim_aqcuire(), which may, in turn, invoke mmu_notifier_invalidate_range_start(). This function can lead to mlx5_ib_invalidate_range(), which attempts to acquire umem_mutex again, resulting in a deadlock.

The problematic flow: CPU0 | CPU1 ---------------------------------------|------------------------------------------------ mlx5_ib_dereg_mr() | → revoke_mr() | → mutex_lock(&umem_odp->umem_mutex) | | mlx5_mkey_cache_init() | → mutex_lock(&dev->cache.rb_lock) | → mlx5r_cache_create_ent_locked() | → kzalloc(GFP_KERNEL) | → fs_reclaim() | → mmu_notifier_invalidate_range_start() | → mlx5_ib_invalidate_range() | → mutex_lock(&umem_odp->umem_mutex) →…

Record
OESA-2026-1760
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-1832 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency

Under high concurrency, A tree-connection object (tcon) is freed on a disconnect path while another path still holds a reference and later executes *_put()/write on it.(CVE-2025-68817)

In the Linux kernel, the following vulnerability has been resolved:

tpm: Cap the number of PCR banks

tpm2_get_pcr_allocation() does not cap any upper limit for the number of banks. Cap the limit to eight banks so that out of bounds values coming from external I/O cause on only limited harm.(CVE-2025-71077)

In the Linux kernel, the following vulnerability has been resolved:

mm/page_alloc: change all pageblocks migrate type on coalescing

When a page is freed it coalesces with a buddy into a higher order page while possible. When the buddy page migrate type differs, it is expected to be updated to match the one of the page being freed.

However, only the first pageblock of the buddy page is updated, while the rest of the pageblocks are left unchanged.

That causes warnings in later expand() and other code paths (like below), since an inconsistency between migration type of the list containing the page and the page-owned pageblocks migration types is introduced.

[ 308.986589] ------------[ cut here ]------------ [ 308.987227] page type is 0, passed migratetype is 1 (nr=256) [ 308.987275] WARNING: CPU: 1 PID: 5224 at mm/page_alloc.c:812 expand+0x23c/0x270 [ 308.987293] Modules linked in: algif_hash(E) af_alg(E) nft_fib_inet(E) nft_fib_ipv4(E) nft_fib_ipv6(E) nft_fib(E) nft_reject_inet(E) nf_reject_ipv4(E) nf_reject_ipv6(E) nft_reject(E) nft_ct(E) nft_chain_nat(E) nf_nat(E) nf_conntrack(E) nf_defrag_ipv6(E) nf_defrag_ipv4(E) nf_tables(E) s390_trng(E) vfio_ccw(E) mdev(E) vfio_iommu_type1(E) vfio(E) sch_fq_codel(E) drm(E) i2c_core(E) drm_panel_orientation_quirks(E) loop(E) nfnetlink(E) vsock_loopback(E) vmw_vsock_virtio_transport_common(E) vsock(E) ctcm(E) fsm(E) diag288_wdt(E) watchdog(E) zfcp(E) scsi_transport_fc(E) ghash_s390(E) prng(E) aes_s390(E) des_generic(E) des_s390(E) libdes(E) sha3_512_s390(E) sha3_256_s390(E) sha_common(E) paes_s390(E) crypto_engine(E) pkey_cca(E) pkey_ep11(E) zcrypt(E) rng_core(E) pkey_pckmo(E) pkey(E) autofs4(E) [ 308.987439] Unloaded tainted modules: hmac_s390(E):2 [ 308.987650] CPU: 1 UID: 0 PID: 5224 Comm: mempig_verify Kdump: loaded Tainted: G E 6.18.0-gcc-bpf-debug #431 PREEMPT [ 308.987657] Tainted: [E]=UNSIGNED_MODULE [ 308.987661] Hardware name: IBM 3906 M04 704 (z/VM 7.3.0) [ 308.987666] Krnl PSW : 0404f00180000000 00000349976fa600 (expand+0x240/0x270) [ 308.987676] R:0 T:1 IO:0 EX:0 Key:0 M:1 W:0 P:0 AS:3 CC:3 PM:0 RI:0 EA:3 [ 308.987682] Krnl GPRS: 0000034980000004 0000000000000005 0000000000000030 000003499a0e6d88 [ 308.987688] 0000000000000005 0000034980000005 000002be803ac000 0000023efe6c8300 [ 308.987692] 0000000000000008 0000034998d57290 000002be00000100 0000023e00000008 [ 308.987696] 0000000000000000 0000000000000000 00000349976fa5fc 000002c99b1eb6f0 [ 308.987708] Krnl Code: 00000349976fa5f0: c020008a02f2 larl %r2,000003499883abd4 00000349976fa5f6: c0e5ffe3f4b5 brasl %r14,0000034997378f60 #00000349976fa5fc: af000000 mc 0,0 >00000349976fa600: a7f4ff4c brc 15,00000349976fa498 00000349976fa604: b9040026 lgr %r2,%r6 00000349976fa608: c0300088317f larl %r3,0000034998800906 00000349976fa60e: c0e5fffdb6e1 brasl %r14,00000349976b13d0 00000349976fa614: af000000 mc 0,0 [ 308.987734] Call Trace: [ 308.987738] [<00000349976fa600>] expand+0x240/0x270 [ 308.987744] ([<00000349976fa5fc>] expand+0x23c/0x270) [ 308.987749] …

Record
OESA-2026-1832
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-1833 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

timers: Fix NULL function pointer race in timer_shutdown_sync()

There is a race condition between timer_shutdown_sync() and timer expiration that can lead to hitting a WARN_ON in expire_timers().

The issue occurs when timer_shutdown_sync() clears the timer function to NULL while the timer is still running on another CPU. The race scenario looks like this:

CPU0 CPU1 <SOFTIRQ> lock_timer_base() expire_timers() base->running_timer = timer; unlock_timer_base() [call_timer_fn enter] mod_timer() ... timer_shutdown_sync() lock_timer_base() // For now, will not detach the timer but only clear its function to NULL if (base->running_timer != timer) ret = detach_if_pending(timer, base, true); if (shutdown) timer->function = NULL; unlock_timer_base() [call_timer_fn exit] lock_timer_base() base->running_timer = NULL; unlock_timer_base() ... // Now timer is pending while its function set to NULL. // next timer trigger <SOFTIRQ> expire_timers() WARN_ON_ONCE(!fn) // hit ... lock_timer_base() // Now timer will detach if (base->running_timer != timer) ret = detach_if_pending(timer, base, true); if (shutdown) timer->function = NULL; unlock_timer_base()

The problem is that timer_shutdown_sync() clears the timer function regardless of whether the timer is currently running. This can leave a pending timer with a NULL function pointer, which triggers the WARN_ON_ONCE(!fn) check in expire_timers().

Fix this by only clearing the timer function when actually detaching the timer. If the timer is running, leave the function pointer intact, which is safe because the timer will be properly detached when it finishes running.(CVE-2025-68214)

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency

Under high concurrency, A tree-connection object (tcon) is freed on a disconnect path while another path still holds a reference and later executes *_put()/write on it.(CVE-2025-68817)

In the Linux kernel, the following vulnerability has been resolved:

tpm: Cap the number of PCR banks

tpm2_get_pcr_allocation() does not cap any upper limit for the number of banks. Cap the limit to eight banks so that out of bounds values coming from external I/O cause on only limited harm.(CVE-2025-71077)

In the Linux kernel, the following vulnerability has been resolved:

mm/page_alloc: change all pageblocks migrate type on coalescing

When a page is freed it coalesces with a buddy into a higher order page while possible. When the buddy page migrate type differs, it is expected to be updated to match the one of the page being freed.

However, only the first pageblock of the buddy page is updated, while the rest of the pageblocks are left unchanged.

That causes warnings in later expand() and other code paths (like below), since an inconsistency between migration type of the list containing the page and the page-owned pageblocks migration types is introduced.

[ 308.986589] ------------[ cut here ]------------ [ 308.987227] page type is 0, passed migratetype is 1 (nr=256) [ 308.987275] WARNING: CPU: 1 PID: 5224 at mm/page_alloc.c:812 expand+0x23c/0x270 [ 308.987293] Modules linked in: algif_hash(E) af_alg(E) nft_fib_inet(E) nft_fib_ipv4(E) nft_fib_ipv6(E) nft_fib(E) nft_reject_inet(E) nf_reject_ipv4(E) nf_reject_ipv6(E) nft_reject(E) nft_ct(E) nft_chain_nat(E) nf_nat(E) nf_conntrack(E) nf_defrag_ipv6(E) nf_defrag_ipv4(E) nf_tables(E) s390_trng(E) vfio_ccw(E) mdev(E) vfio_iommu_type1(E) vfio(E) sch_fq_codel(E) drm(E) i2c_core(E) drm_panel_orientation_quirks(E) loop(E) nfnetlink(E) vsock_loopback(E) vmw_vsock_virtio_transport_common(E) vsock(E) ctcm(E) fsm(E) diag288_wdt(E) watchdog(E) zfcp(E) scsi_transport_fc(E)…

Record
OESA-2026-1833
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:10108 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:10108
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:10996 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:10996
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:18134 8.7

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:18134
CVSS 3.1
8.7 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:62639 8.1

Red Hat Security Advisory: kpatch-patch-5_14_0-427_100_1, kpatch-patch-5_14_0-427_113_1, kpatch-patch-5_14_0-427_126_1, kpatch-patch-5_14_0-427_68_2, and kpatch-patch-5_14_0-427_84_1 security update

Record
RHSA-2026:62639
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:62641 8.1

Red Hat Security Advisory: kpatch-patch-5_14_0-570_116_1, kpatch-patch-5_14_0-570_17_1, kpatch-patch-5_14_0-570_39_1, kpatch-patch-5_14_0-570_66_1, and kpatch-patch-5_14_0-570_94_1 security update

Record
RHSA-2026:62641
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:6570 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:6570
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:9112 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:9112
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:6570 7.5

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: Linux kernel (net/mlx5): Use-after-free in ECVF vports unload leads to denial of service (CVE-2025-38109)

  • kernel: Kernel: Privilege escalation or denial of service in nf_tables via inverted element activity check (CVE-2026-23111)

  • kernel: Linux kernel: Denial of Service in ice driver due to race condition during VSI rebuild (CVE-2026-23210)

  • kernel: kernel: Privilege escalation or denial of service via use-after-free in nf_tables_addchain() (CVE-2026-23231)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:6570
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2026-23111 7.8

CVE-2026-23111 in linux - Patched by Root

Root has patched CVE-2026-23111 in the linux package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2026-23111
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2026-23111 7.8

CVE-2026-23111 in linux - Patched by Root

Root has patched CVE-2026-23111 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2026-23111
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-13-CVE-2026-23111 7.8

CVE-2026-23111 in linux - Patched by Root

Root has patched CVE-2026-23111 in the linux package for Root:Debian:13. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-13-CVE-2026-23111
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVROOT-OS-UBUNTU-2204-CVE-2026-23111 7.8

CVE-2026-23111 in linux - Patched by Root

Root has patched CVE-2026-23111 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2204-CVE-2026-23111
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVROOT-OS-UBUNTU-2404-CVE-2026-23111 7.8

CVE-2026-23111 in linux - Patched by Root

Root has patched CVE-2026-23111 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2404-CVE-2026-23111
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVUBUNTU-CVE-2026-23111 7.8

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() nft_map_catchall_activate() has an inverted element activity check compared to its non-catchall counterpart nft_mapelem_activate() and compared to what is logically required. nft_map_catchall_activate() is called from the abort path to re-activate catchall map elements that were deactivated during a failed transaction. It should skip elements that are already active (they don't need re-activation) and process elements that are inactive (they need to be restored). Instead, the current code does the opposite: it skips inactive elements and processes active ones. Compare the non-catchall activate callback, which is correct: nft_mapelem_activate(): if (nft_set_elem_active(ext, iter->genmask)) return 0; /* skip active, process inactive / With the buggy catchall version: nft_map_catchall_activate(): if (!nft_set_elem_active(ext, genmask)) continue; / skip inactive, process active */ The consequence is that when a DELSET operation is aborted, nft_setelem_data_activate() is never called for the catchall element. For NFT_GOTO verdict elements, this means nft_data_hold() is never called to restore the chain->use reference count. Each abort cycle permanently decrements chain->use. Once chain->use reaches zero, DELCHAIN succeeds and frees the chain while catchall verdict elements still reference it, resulting in a use-after-free. This is exploitable for local privilege escalation from an unprivileged user via user namespaces + nftables on distributions that enable CONFIG_USER_NS and CONFIG_NF_TABLES. Fix by removing the negation so the check matches nft_mapelem_activate(): skip active elements, process inactive ones.

Record
UBUNTU-CVE-2026-23111
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVALSA-2026:18134 No score

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg (CVE-2024-56633)
  • kernel: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (CVE-2025-21839)
  • kernel: block: fix resource leak in blk_register_queue() error path (CVE-2025-37980)
  • kernel: dmaengine: idxd: fix memory leak in error handling path of idxd_alloc (CVE-2025-38015)
  • kernel: espintcp: remove encap socket caching to avoid reference leak (CVE-2025-38097)
  • kernel: bpf: fix ktls panic with sockmap (CVE-2025-38166)
  • kernel: bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem() (CVE-2025-38202)
  • kernel: bpf: Do not include stack ptr register in precision backtracking bookkeeping (CVE-2025-38279)
  • kernel: ring-buffer: Do not trigger WARN_ON() due to a commit_overrun (CVE-2025-38267)
  • kernel: phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug (CVE-2025-38275)
  • kernel: ftrace: Fix UAF when lookup kallsym after ftrace disabled (CVE-2025-38346)
  • kernel: ACPICA: fix acpi operand cache leak in dswstate.c (CVE-2025-38345)
  • kernel: nvmet: fix memory leak of bio integrity (CVE-2025-38405)
  • kernel: netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() (CVE-2025-38441)
  • kernel: net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime (CVE-2025-38470)
  • kernel: fs: writeback: fix use-after-free in __mark_inode_dirty() (CVE-2025-39866)
  • kernel: PCI/AER: Avoid NULL pointer dereference in aer_ratelimit() (CVE-2025-40034)
  • kernel: dm: fix NULL pointer dereference in __dm_suspend() (CVE-2025-40134)
  • kernel: Revert "NFSD: Remove the cap on number of operations per NFSv4 COMPOUND" (CVE-2025-40210)
  • kernel: Linux kernel MPTCP: Privilege escalation or denial of service via use-after-free in timer handling (CVE-2025-40257)
  • kernel: smb: client: fix potential cfid UAF in smb2_query_info_compound (CVE-2025-40320)
  • kernel: wifi: mac80211_hwsim: fix typo in frequency notification (CVE-2026-23040)
  • kernel: Kernel: Privilege escalation or denial of service in nf_tables via inverted element activity check (CVE-2026-23111)
  • kernel: Linux kernel: Denial of Service in ice driver due to race condition during VSI rebuild (CVE-2026-23210)
  • kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2026:18134
Updated
2026-11-02
OSVALSA-2026:6570 No score

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: Linux kernel (net/mlx5): Use-after-free in ECVF vports unload leads to denial of service (CVE-2025-38109)
  • kernel: Kernel: Privilege escalation or denial of service in nf_tables via inverted element activity check (CVE-2026-23111)
  • kernel: Linux kernel: Denial of Service in ice driver due to race condition during VSI rebuild (CVE-2026-23210)
  • kernel: kernel: Privilege escalation or denial of service via use-after-free in nf_tables_addchain() (CVE-2026-23231)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:6570
Updated
2026-11-02
OSVAZL-77483 No score

CVE-2026-23111 affecting package kernel for versions less than 6.6.126.1-1

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()

nft_map_catchall_activate() has an inverted element activity check compared to its non-catchall counterpart nft_mapelem_activate() and compared to what is logically required.

nft_map_catchall_activate() is called from the abort path to re-activate catchall map elements that were deactivated during a failed transaction. It should skip elements that are already active (they don't need re-activation) and process elements that are inactive (they need to be restored). Instead, the current code does the opposite: it skips inactive elements and processes active ones.

Compare the non-catchall activate callback, which is correct:

nft_mapelem_activate(): if (nft_set_elem_active(ext, iter->genmask)) return 0; /* skip active, process inactive */

With the buggy catchall version:

nft_map_catchall_activate(): if (!nft_set_elem_active(ext, genmask)) continue; /* skip inactive, process active */

The consequence is that when a DELSET operation is aborted, nft_setelem_data_activate() is never called for the catchall element. For NFT_GOTO verdict elements, this means nft_data_hold() is never called to restore the chain->use reference count. Each abort cycle permanently decrements chain->use. Once chain->use reaches zero, DELCHAIN succeeds and frees the chain while catchall verdict elements still reference it, resulting in a use-after-free.

This is exploitable for local privilege escalation from an unprivileged user via user namespaces + nftables on distributions that enable CONFIG_USER_NS and CONFIG_NF_TABLES.

Fix by removing the negation so the check matches nft_mapelem_activate(): skip active elements, process inactive ones.

Record
AZL-77483
Updated
2026-11-02
OSVCLSA-2026-1777633439 No score

kernel: Fix of 144 CVEs

  • crypto: algif_aead - Fix minimum RX size check for decryption {CVE-2026-31431}
  • crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl {CVE-2026-31431}
  • crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec {CVE-2026-31431}
  • crypto: authencesn - Fix src offset when decrypting in-place {CVE-2026-31431}
  • crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption {CVE-2026-31431}
  • crypto: authenc - use memcpy_sglist() instead of null skcipher {CVE-2026-31431}
  • crypto: algif_aead - snapshot IV for async AEAD requests {CVE-2026-31431}
  • crypto: algif_aead - Revert to operating out-of-place {CVE-2026-31431}
  • crypto: algif_aead - use memcpy_sglist() instead of null skcipher {CVE-2026-31431}
  • crypto: scatterwalk - Backport memcpy_sglist() {CVE-2026-31431}
  • scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() {CVE-2026-23216}
  • VMCI: Fix use-after-free when removing resource in vmci_resource_remove() {CVE-2024-46738}
  • ptp: fix integer overflow in max_vclocks_store {CVE-2024-40994}
  • xsk: Fix xsk_diag use-after-free error during socket cleanup {CVE-2023-53426}
  • net: hns3: add VLAN id validation before using {CVE-2025-71112}
  • scsi: qla2xxx: Fix improper freeing of purex item {CVE-2025-68741}
  • tracing: Consider the NULL character when validating the event length {CVE-2024-50131}
  • capabilities: fix undefined behavior in bit shift for CAP_TO_MASK {CVE-2022-49870}
  • scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() {CVE-2022-50422}
  • netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() {CVE-2026-23111}
  • team: fix check for port enabled in team_queue_override_port_prio_changed() {CVE-2025-71091}
  • i2c: piix4: Fix adapter not be removed in piix4_remove() {CVE-2022-49900}
  • libceph: replace overzealous BUG_ON in osdmap_apply_incremental() {CVE-2026-22990}
  • RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert {CVE-2025-38387}
  • ACPICA: Refuse to evaluate a method if arguments are missing {CVE-2025-38386}
  • drm/tegra: Fix a possible null pointer dereference {CVE-2025-38363}
  • ACPICA: fix acpi operand cache leak in dswstate.c {CVE-2025-38345}
  • ACPICA: fix acpi parse and parseext cache leaks {CVE-2025-38344}
  • jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() {CVE-2025-38337}
  • x86/sgx: Prevent attempts to reclaim poisoned pages {CVE-2025-38334}
  • mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). {CVE-2025-38324}
  • drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table {CVE-2025-38319}
  • fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() {CVE-2025-38312}
  • seg6: Fix validation of nexthop addresses {CVE-2025-38310}
  • bpf: Fix WARN() in get_bpf_raw_tp_regs {CVE-2025-38285}
  • atm: clip: prevent NULL deref in clip_push() {CVE-2025-38251}
  • nfsd: Initialize ssc before laundromat_work to prevent NULL dereference {CVE-2025-38231}
  • ext4: inline: fix len overflow in ext4_prepare_inline_data {CVE-2025-38222}
  • fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var {CVE-2025-38215}
  • fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var {CVE-2025-38214}
  • atm: Revert atm_account_tx() if copy_from_iter_full() fails. {CVE-2025-38190}
  • tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer {CVE-2025-38184}
  • calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). {CVE-2025-38181}
  • thunderbolt: Do not double dequeue a configuration request {CVE-2025-38174}
  • bpf: fix ktls panic with sockmap {CVE-2025-38166}
  • gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO {CVE-2025-38122}
  • net_sched: sch_sfq: fix a potential crash on gso_skb handling {CVE-2025-38115}
  • x86/iopl: Cure TIF_IO_BITMAP inconsistencies {CVE-2025-38100}
  • dma-buf: insert memory barrier before updating num_fences {CVE-2025-38095}
  • net_sched: prio: fix a race in prio_tune() {CVE-2025-38083} -…
Record
CLSA-2026-1777633439
Updated
2026-11-02
OSVCLSA-2026-1781347338 No score

kernel: Fix of 92 CVEs

  • octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c {CVE-2024-56726}
  • octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c {CVE-2024-56679}
  • USB: chipidea: fix memory leak with using debugfs_lookup() {CVE-2023-53334}
  • drivers: serial: jsm: fix some leaks in probe {CVE-2022-50312}
  • drm: amd: display: Fix memory leakage {CVE-2023-53605}
  • netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent {CVE-2026-43026}
  • net: Drop the lock in skb_may_tx_timestamp() {CVE-2026-43216}
  • nouveau/dpcd: return EBUSY for aux xfer if the device is asleep {CVE-2026-43381}
  • ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() {CVE-2026-43068}
  • net: mdio: unexport __init-annotated mdio_bus_init() {CVE-2022-49350}
  • netfilter: ipset: Rework long task execution when adding/deleting entries {CVE-2023-53549}
  • ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() {CVE-2023-53275}
  • thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash {CVE-2022-50494}
  • can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message {CVE-2026-23307}
  • usb: image: mdc800: kill download URB on timeout {CVE-2026-43425}
  • tipc: fix divide-by-zero in tipc_sk_filter_connect() {CVE-2026-43411}
  • cgroup/cpuset: Fix wrong check in update_parent_subparts_cpumask() {CVE-2023-52942}
  • net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path {CVE-2023-52703}
  • usb: typec: tcpci: fix of node refcount leak in tcpci_register_port() {CVE-2022-50246}
  • bus: mhi: host: Range check CHDBOFF and ERDBOFF {CVE-2023-53598}
  • hwmon: (coretemp) Simplify platform device handling {CVE-2023-53612}
  • scsi: mpi3mr: Avoid memcpy field-spanning write WARNING {CVE-2024-36920}
  • dm crypt: add cond_resched() to dmcrypt_write() {CVE-2023-53051}
  • xfrm: account XFRMA_IF_ID in aevent size calculation {CVE-2026-43107}
  • wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() {CVE-2024-43879}
  • RDMA/cxgb4: Fix potential null-ptr-deref in pass_establish() {CVE-2023-53335}
  • regulator: check that dummy regulator has been probed before using it {CVE-2025-22008}
  • HID: prodikeys: Check presence of pm->input_ep82 {CVE-2026-43251}
  • perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init() {CVE-2022-50510}
  • wifi: ath11k: fix dfs radar event locking {CVE-2023-52798}
  • trace/blktrace: fix memory leak with using debugfs_lookup() {CVE-2023-53408}
  • dm-verity: correctly handle dm_bufio_client_create() failure {CVE-2026-43132}
  • pstore: ram_core: fix incorrect success return when vmap() fails {CVE-2026-43124}
  • crypto: af-alg - fix NULL pointer dereference in scatterwalk {CVE-2026-43043}
  • net: use skb_header_pointer() for TCPv4 GSO frag_off check {CVE-2026-43036}
  • scsi: mpi3mr: Fix config page DMA memory leak {CVE-2023-53120}
  • net/mlx5: handle errors in mlx5_chains_create_table() {CVE-2025-21975}
  • net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx {CVE-2023-53546}
  • drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create() {CVE-2025-37852}
  • bpf: Prevent decl_tag from being referenced in func_proto arg {CVE-2022-50883}
  • arm64: set __exception_irq_entry with __irq_entry as a default {CVE-2023-54322}
  • class: fix possible memory leak in __class_register() {CVE-2022-50578}
  • ALSA: usb-audio: Stop parsing channels bits when all channels are found. {CVE-2024-27436}
  • net/mlx5: fix potential memory leak in mlx5e_init_rep_rx {CVE-2023-54106}
  • net/mlx5: E-Switch, Fix an Oops in error handling code {CVE-2023-53058}
  • scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate() {CVE-2023-53078}
  • ice: xsk: disable txq irq before flushing hw {CVE-2023-53102}
  • selinux: fix memleak in security_read_state_kernel() {CVE-2022-50201}
  • efi: runtime: Fix potential overflow of soft-reserved region size {CVE-2024-26843}
  • drm/amdgpu: Fix potential null pointer derefernce {CVE-2023-52814}
  • ata: libata-core: Fix null…
Record
CLSA-2026-1781347338
Updated
2026-11-02
OSVLSN-0119-1 No score

Kernel Live Patch Security Notice

In the Linux kernel, the following vulnerability has been resolved: btrfs: ref-verify: fix use-after-free after invalid ref action At btrfs_ref_tree_mod() after we successfully inserted the new ref entry (local variable 'ref') into the respective block entry's rbtree (local variable 'be'), if we find an unexpected action of BTRFS_DROP_DELAYED_REF, we error out and free the ref entry without removing it from the block entry's rbtree.

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() This patch fixes a NULL pointer dereference bug in brcmfmac that occurs when a high 'sd_sgentry_align' value applies (e.g. 512) and a lot of queued SKBs are sent from the pkt queue.

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix LGR and link use-after-free issue We encountered a LGR/link use-after-free issue, which manifested as the LGR/link refcnt reaching 0 early and entering the clear process, making resource access unsafe.

In the Linux kernel, the following vulnerability has been resolved: usb: cdc-acm: Check control transfer buffer size before access If the first fragment is shorter than struct usb_cdc_notification, we can't calculate an expected_size.

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() It malicious user provides a small pptable through sysfs and then a bigger pptable, it may cause buffer overflow attack in function smu_sys_set_pp_table().)(CVE-2025-21780).

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() nft_map_catchall_activate() has an inverted element activity check compared to its non-catchall counterpart nft_mapelem_activate() and compared to what is logically required. nft_map_catchall_activate() is called from the abort path to re-activate catchall map elements that were deactivated during a failed transaction.

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container.)(CVE-2026-23268)

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container.)(CVE-2026-23269)

Record
LSN-0119-1
Updated
2026-11-02
OSVMGASA-2026-0097 No score

Updated kernel, kmod-virtualbox & kmod-xtables-addons packages fix security vulnerabilities

Upstream kernel version 6.6.130 fixes bugs and vulnerabilities. The kmod-virtualbox & kmod-xtables-addons packages have been updated to work with this new kernel.

Record
MGASA-2026-0097
Updated
2026-11-02
OSVMGASA-2026-0098 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.130 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links.

Record
MGASA-2026-0098
Updated
2026-11-02
OSVopenSUSE-SU-2026:20416-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues.

The following security issues were fixed:

  • CVE-2025-39753: gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops (bsc#1249590).
  • CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
  • CVE-2025-40099: cifs: parse_dfs_referrals: prevent oob on malformed input (bsc#1252911).
  • CVE-2025-40103: smb: client: Fix refcount leak for cifs_sb_tlink (bsc#1252924).
  • CVE-2025-40230: mm: prevent poison consumption when splitting THP (bsc#1254817).
  • CVE-2025-68173: ftrace: Fix softlockup in ftrace_module_enable (bsc#1255311).
  • CVE-2025-68186: ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up (bsc#1255144).
  • CVE-2025-68292: mm/memfd: fix information leak in hugetlb folios (bsc#1255148).
  • CVE-2025-68295: smb: client: fix memory leak in cifs_construct_tcon() (bsc#1255129).
  • CVE-2025-68329: tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs (bsc#1255490).
  • CVE-2025-68371: scsi: smartpqi: Fix device resources accessed after device removal (bsc#1255572).
  • CVE-2025-68745: scsi: qla2xxx: Clear cmds after chip reset (bsc#1255721).
  • CVE-2025-68785: net: openvswitch: fix middle attribute validation in push_nsh() action (bsc#1256640).
  • CVE-2025-68810: KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslot (bsc#1256679).
  • CVE-2025-71071: iommu/mediatek: fix use-after-free on probe deferral (bsc#1256802).
  • CVE-2025-71104: KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer (bsc#1256708).
  • CVE-2025-71125: tracing: Do not register unsupported perf events (bsc#1256784).
  • CVE-2025-71134: mm/page_alloc: change all pageblocks migrate type on coalescing (bsc#1256732).
  • CVE-2025-71161: dm-verity: disable recursive forward error correction (bsc#1257174).
  • CVE-2025-71184: btrfs: tracepoints: use btrfs_root_id() to get the id of a root (bsc#1257635).
  • CVE-2025-71193: phy: qcom-qusb2: Fix NULL pointer dereference on early suspend (bsc#1257686).
  • CVE-2025-71225: md: suspend array while updating raid_disks via sysfs (bsc#1258411).
  • CVE-2026-22979: net: fix memory leak in skb_segment_list for GRO packets (bsc#1257228).
  • CVE-2026-22998: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (bsc#1257209).
  • CVE-2026-23003: ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (bsc#1257246).
  • CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1257231).
  • CVE-2026-23010: ipv6: Fix use-after-free in inet6_addr_del() (bsc#1257332).
  • CVE-2026-23017: idpf: fix error handling in the init_task on load (bsc#1257552).
  • CVE-2026-23022: idpf: fix memory leak in idpf_vc_core_deinit() (bsc#1257581).
  • CVE-2026-23023: idpf: fix memory leak in idpf_vport_rel() (bsc#1257556).
  • CVE-2026-23024: idpf: fix memory leak of flow steer list on rmmod (bsc#1257572).
  • CVE-2026-23035: net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (bsc#1257559).
  • CVE-2026-23042: idpf: fix aux device unplugging when rdma is not supported by vport (bsc#1257705).
  • CVE-2026-23047: libceph: make calc_target() set t->paused, not just clear it (bsc#1257682).
  • CVE-2026-23053: NFS: Fix a deadlock involving nfs_release_folio() (bsc#1257718).
  • CVE-2026-23057: vsock/virtio: Coalesce only linear skb (bsc#1257740).
  • CVE-2026-23064: net/sched: act_ife: avoid possible NULL deref (bsc#1257765).
  • CVE-2026-23066: rxrpc: Fix recvmsg() unconditional requeue (bsc#1257726).
  • CVE-2026-23068: spi: spi-sprd-adi: Fix double free in probe error path (bsc#1257805).
  • CVE-2026-23069: vsock/virtio: fix potential underflow in virtio_transport_get_credit() (bsc#1257755).
  • CVE-2026-23070: Octeontx2-af: Add proper checks for fwdata (bsc#1257709).
  • CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1257749).
  • CVE-2026-23083: tools: ynl-gen: use big-endian netlink attribute types (bsc#1257745).
  • CVE-2026-23084:…
Record
openSUSE-SU-2026:20416-1
Updated
2026-11-02
OSVSUSE-SU-2026:0962-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (bsc#1254992).
  • CVE-2025-39748: bpf: Forget ranges when refining tnum after JSET (bsc#1249587).
  • CVE-2025-39817: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (bsc#1249998).
  • CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
  • CVE-2025-40099: cifs: parse_dfs_referrals: prevent oob on malformed input (bsc#1252911).
  • CVE-2025-40103: smb: client: Fix refcount leak for cifs_sb_tlink (bsc#1252924).
  • CVE-2025-40201: kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths
  • CVE-2025-40253: s390/ctcm: Fix double-kfree (bsc#1255084).
  • CVE-2025-68283: libceph: replace BUG_ON with bounds check for map->max_osd (bsc#1255379).
  • CVE-2025-68295: smb: client: fix memory leak in cifs_construct_tcon() (bsc#1255129).
  • CVE-2025-68374: md: fix rcu protection in md_wakeup_thread (bsc#1255530).
  • CVE-2025-68735: drm/panthor: Prevent potential UAF in group creation (bsc#1255811).
  • CVE-2025-68736: landlock: Fix handling of disconnected directories (bsc#1255698).
  • CVE-2025-68778: btrfs: don't log conflicting inode if it's a dir moved in the current transaction (bsc#1256683).
  • CVE-2025-68785: net: openvswitch: fix middle attribute validation in push_nsh() action (bsc#1256640).
  • CVE-2025-68810: KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslot (bsc#1256679).
  • CVE-2025-71071: iommu/mediatek: fix use-after-free on probe deferral (bsc#1256802).
  • CVE-2025-71104: KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer (bsc#1256708).
  • CVE-2025-71113: crypto: af_alg - zero initialize memory allocated via sock_kmalloc (bsc#1256716).
  • CVE-2025-71125: tracing: Do not register unsupported perf events (bsc#1256784).
  • CVE-2025-71126: mptcp: reset fallback status gracefully at disconnect() time (bsc#1256755).
  • CVE-2025-71148: net/handshake: restore destructor on submit failure (bsc#1257159).
  • CVE-2025-71184: btrfs: fix NULL dereference on root when tracing inode eviction (bsc#1257635).
  • CVE-2025-71194: btrfs: fix deadlock in wait_current_trans() due to ignored transaction type (bsc#1257687).
  • CVE-2025-71225: md: suspend array while updating raid_disks via sysfs (bsc#1258411).
  • CVE-2026-22979: net: fix memory leak in skb_segment_list for GRO packets (bsc#1257228).
  • CVE-2026-22982: net: mscc: ocelot: Fix crash when adding interface under a lag (bsc#1257179).
  • CVE-2026-22998: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (bsc#1257209).
  • CVE-2026-23003: geneve: Fix incorrect inner network header offset when innerprotoinherit is set (bsc#1257246).
  • CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1257231).
  • CVE-2026-23010: ipv6: Fix use-after-free in inet6_addr_del() (bsc#1257332).
  • CVE-2026-23017: idpf: fix error handling in the init_task on load (bsc#1257552).
  • CVE-2026-23023: idpf: fix memory leak in idpf_vport_rel() (bsc#1257556).
  • CVE-2026-23035: net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (bsc#1257559).
  • CVE-2026-23053: NFS: Fix a deadlock involving nfs_release_folio() (bsc#1257718).
  • CVE-2026-23057: vsock/virtio: Coalesce only linear skb (bsc#1257740).
  • CVE-2026-23060: crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (bsc#1257735).
  • CVE-2026-23064: net/sched: act_ife: avoid possible NULL deref (bsc#1257765).
  • CVE-2026-23069: vsock/virtio: fix potential underflow in virtio_transport_get_credit() (bsc#1257755).
  • CVE-2026-23070: Octeontx2-af: Add proper checks for fwdata (bsc#1257709).
  • CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1257749).
  • CVE-2026-23083: fou: Don't allow 0 for FOU_ATTR_IPPROTO (bsc#1257745).
  • CVE-2026-23084: be2net: Fix NULL pointer…
Record
SUSE-SU-2026:0962-1
Updated
2026-11-02
OSVSUSE-SU-2026:1041-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (bsc#1254992).
  • CVE-2024-38542: RDMA/mana_ib: boundary check before installing cq callbacks (bsc#1226591).
  • CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
  • CVE-2025-39817: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (bsc#1249998).
  • CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
  • CVE-2025-40099: cifs: parse_dfs_referrals: prevent oob on malformed input (bsc#1252911).
  • CVE-2025-40103: smb: client: Fix refcount leak for cifs_sb_tlink (bsc#1252924).
  • CVE-2025-40253: s390/ctcm: Fix double-kfree (bsc#1255084).
  • CVE-2025-71066: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (bsc#1256645).
  • CVE-2025-71113: crypto: af_alg - zero initialize memory allocated via sock_kmalloc (bsc#1256716).
  • CVE-2025-71231: crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode (bsc#1258424).
  • CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1257231).
  • CVE-2026-23060: crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (bsc#1257735).
  • CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1257749).
  • CVE-2026-23089: ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() (bsc#1257790).
  • CVE-2026-23111: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (bsc#1258181).
  • CVE-2026-23141: btrfs: send: check for inline extents in range_is_hole_in_parent() (bsc#1258377).
  • CVE-2026-23191: ALSA: aloop: Fix racy access at PCM trigger (bsc#1258395).
  • CVE-2026-23204: net/sched: cls_u32: use skb_header_pointer_careful() (bsc#1258340).
  • CVE-2026-23209: macvlan: fix error recovery in macvlan_common_newlink() (bsc#1258518).
  • CVE-2026-23214: btrfs: reject new transactions if the fs is fully read-only (bsc#1258464).
  • CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1258850).
  • CVE-2026-23269: apparmor: validate DFA start states are in bounds in unpack_pdb (bsc#1259857).

The following non-security bugs were fixed:

  • Add bugnumber to existing mana change (bsc#1251971).
  • Drivers: hv: fix missing kernel-doc description for 'size' in request_arr_init() (git-fixes).
  • Drivers: hv: remove stale comment (git-fixes).
  • Drivers: hv: vmbus: Clean up sscanf format specifier in target_cpu_store() (git-fixes).
  • Drivers: hv: vmbus: Fix sysfs output format for ring buffer index (git-fixes).
  • Drivers: hv: vmbus: Fix typos in vmbus_drv.c (git-fixes).
  • PCI: hv: Correct a comment (git-fixes).
  • PCI: hv: Remove unnecessary flex array in struct pci_packet (git-fixes).
  • PCI: hv: Remove unused field pci_bus in struct hv_pcibus_device (git-fixes).
  • PCI: hv: remove unnecessary module_init/exit functions (git-fixes).
  • RDMA/mana_ib: Access remote atomic for MRs (bsc#1251135).
  • RDMA/mana_ib: Add EQ creation for rnic adapter (git-fixes).
  • RDMA/mana_ib: Add device statistics support (git-fixes).
  • RDMA/mana_ib: Add device-memory support (git-fixes).
  • RDMA/mana_ib: Add port statistics support (git-fixes).
  • RDMA/mana_ib: Add support of 4M, 1G, and 2G pages (git-fixes).
  • RDMA/mana_ib: Add support of mana_ib for RNIC and ETH nic (git-fixes).
  • RDMA/mana_ib: Adding and deleting GIDs (git-fixes).
  • RDMA/mana_ib: Allow registration of DMA-mapped memory in PDs (git-fixes).
  • RDMA/mana_ib: Configure mac address in RNIC (git-fixes).
  • RDMA/mana_ib: Create and destroy RC QP (git-fixes).
  • RDMA/mana_ib: Create and destroy UD/GSI QP (git-fixes).
  • RDMA/mana_ib: Create and destroy rnic adapter (git-fixes).
  • RDMA/mana_ib: Drain send wrs of GSI QP (git-fixes).
  • RDMA/mana_ib: Enable RoCE on port 1 (git-fixes).
  • RDMA/mana_ib: Extend…
Record
SUSE-SU-2026:1041-1
Updated
2026-11-02
OSVSUSE-SU-2026:1081-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (bsc#1254992).
  • CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
  • CVE-2025-39748: bpf: Forget ranges when refining tnum after JSET (bsc#1249587).
  • CVE-2025-39817: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (bsc#1249998).
  • CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
  • CVE-2025-40099: cifs: parse_dfs_referrals: prevent oob on malformed input (bsc#1252911).
  • CVE-2025-40103: smb: client: Fix refcount leak for cifs_sb_tlink (bsc#1252924).
  • CVE-2025-40201: kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths (bsc#1253455).
  • CVE-2025-40253: s390/ctcm: Fix double-kfree (bsc#1255084).
  • CVE-2025-68283: libceph: replace BUG_ON with bounds check for map->max_osd (bsc#1255379).
  • CVE-2025-68295: smb: client: fix memory leak in cifs_construct_tcon() (bsc#1255129).
  • CVE-2025-68374: md: fix rcu protection in md_wakeup_thread (bsc#1255530).
  • CVE-2025-68735: drm/panthor: Prevent potential UAF in group creation (bsc#1255811).
  • CVE-2025-68736: landlock: Fix handling of disconnected directories (bsc#1255698).
  • CVE-2025-68778: btrfs: don't log conflicting inode if it's a dir moved in the current transaction (bsc#1256683).
  • CVE-2025-68785: net: openvswitch: fix middle attribute validation in push_nsh() action (bsc#1256640).
  • CVE-2025-68810: KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslot (bsc#1256679).
  • CVE-2025-71066: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (bsc#1256645).
  • CVE-2025-71071: iommu/mediatek: fix use-after-free on probe deferral (bsc#1256802).
  • CVE-2025-71104: KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer (bsc#1256708).
  • CVE-2025-71113: crypto: af_alg - zero initialize memory allocated via sock_kmalloc (bsc#1256716).
  • CVE-2025-71125: tracing: Do not register unsupported perf events (bsc#1256784).
  • CVE-2025-71126: mptcp: reset fallback status gracefully at disconnect() time (bsc#1256755).
  • CVE-2025-71148: net/handshake: restore destructor on submit failure (bsc#1257159).
  • CVE-2025-71184: btrfs: fix NULL dereference on root when tracing inode eviction (bsc#1257635).
  • CVE-2025-71194: btrfs: fix deadlock in wait_current_trans() due to ignored transaction type (bsc#1257687).
  • CVE-2025-71225: md: suspend array while updating raid_disks via sysfs (bsc#1258411).
  • CVE-2026-22979: net: fix memory leak in skb_segment_list for GRO packets (bsc#1257228).
  • CVE-2026-22982: net: mscc: ocelot: Fix crash when adding interface under a lag (bsc#1257179).
  • CVE-2026-22998: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (bsc#1257209).
  • CVE-2026-23003: geneve: Fix incorrect inner network header offset when innerprotoinherit is set (bsc#1257246).
  • CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1257231).
  • CVE-2026-23010: ipv6: Fix use-after-free in inet6_addr_del() (bsc#1257332).
  • CVE-2026-23017: idpf: fix error handling in the init_task on load (bsc#1257552).
  • CVE-2026-23023: idpf: fix memory leak in idpf_vport_rel() (bsc#1257556).
  • CVE-2026-23035: net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (bsc#1257559).
  • CVE-2026-23053: NFS: Fix a deadlock involving nfs_release_folio() (bsc#1257718).
  • CVE-2026-23057: vsock/virtio: Coalesce only linear skb (bsc#1257740).
  • CVE-2026-23060: crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (bsc#1257735).
  • CVE-2026-23064: net/sched: act_ife: avoid possible NULL deref (bsc#1257765).
  • CVE-2026-23069: vsock/virtio: fix potential underflow in virtio_transport_get_credit() (bsc#1257755).
  • CVE-2026-23070: Octeontx2-af: Add proper…
Record
SUSE-SU-2026:1081-1
Updated
2026-11-02
OSVSUSE-SU-2026:1180-1 No score

Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.22 fixes various security issues

The following security issues were fixed:

  • CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253404).
  • CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256780).
  • CVE-2026-22999: net/sched: sch_qfq: do not free existing class in qfq_change_class() (bsc#1257238).
  • CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1258051).
  • CVE-2026-23111: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (bsc#1258183).
  • CVE-2026-23209: macvlan: fix error recovery in macvlan_common_newlink() (bsc#1258784).
Record
SUSE-SU-2026:1180-1
Updated
2026-11-02
OSVSUSE-SU-2026:1185-1 No score

Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.19 fixes various security issues

The following security issues were fixed:

  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252689).
  • CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253404).
  • CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256780).
  • CVE-2026-22999: net/sched: sch_qfq: do not free existing class in qfq_change_class() (bsc#1257238).
  • CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1258051).
  • CVE-2026-23111: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (bsc#1258183).
  • CVE-2026-23209: macvlan: fix error recovery in macvlan_common_newlink() (bsc#1258784).
Record
SUSE-SU-2026:1185-1
Updated
2026-11-02
OSVSUSE-SU-2026:1187-1 No score

Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.31 fixes various security issues

The following security issues were fixed:

  • CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1258051).
  • CVE-2026-23111: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (bsc#1258183).
  • CVE-2026-23209: macvlan: fix error recovery in macvlan_common_newlink() (bsc#1258784).

The following non security issue was fixed:

  • Fix NULL pointer dereference in smb2_query_server_interfaces Livepatch for to restore a null check of server->ops->query_server_interfaces that was dropped by mistake. (bsc#1259896 bsc#1259962).
Record
SUSE-SU-2026:1187-1
Updated
2026-11-02
OSVSUSE-SU-2026:1188-1 No score

Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.3 fixes various security issues

The following security issues were fixed:

  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252689).
  • CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253404).
  • CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256780).
  • CVE-2026-22999: net/sched: sch_qfq: do not free existing class in qfq_change_class() (bsc#1257238).
  • CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1258051).
  • CVE-2026-23111: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (bsc#1258183).
  • CVE-2026-23209: macvlan: fix error recovery in macvlan_common_newlink() (bsc#1258784).
Record
SUSE-SU-2026:1188-1
Updated
2026-11-02
OSVSUSE-SU-2026:1189-1 No score

Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.28 fixes various security issues

The following security issues were fixed:

  • CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256780).
  • CVE-2026-22999: net/sched: sch_qfq: do not free existing class in qfq_change_class() (bsc#1257238).
  • CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1258051).
  • CVE-2026-23111: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (bsc#1258183).
  • CVE-2026-23209: macvlan: fix error recovery in macvlan_common_newlink() (bsc#1258784).
Record
SUSE-SU-2026:1189-1
Updated
2026-11-02
OSVSUSE-SU-2026:1225-1 No score

Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.73 fixes various security issues

The following security issues were fixed:

  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252689).
  • CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253404).
  • CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256780).
  • CVE-2026-22999: net/sched: sch_qfq: do not free existing class in qfq_change_class() (bsc#1257238).
  • CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1258051).
  • CVE-2026-23111: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (bsc#1258183).
  • CVE-2026-23209: macvlan: fix error recovery in macvlan_common_newlink() (bsc#1258784).
Record
SUSE-SU-2026:1225-1
Updated
2026-11-02
OSVSUSE-SU-2026:1236-1 No score

Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.53 fixes various security issues

The following security issues were fixed:

  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252689).
  • CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253404).
  • CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256780).
  • CVE-2026-22999: net/sched: sch_qfq: do not free existing class in qfq_change_class() (bsc#1257238).
  • CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1258051).
  • CVE-2026-23111: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (bsc#1258183).
  • CVE-2026-23209: macvlan: fix error recovery in macvlan_common_newlink() (bsc#1258784).
Record
SUSE-SU-2026:1236-1
Updated
2026-11-02
OSVSUSE-SU-2026:1239-1 No score

Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.50 fixes various security issues

The following security issues were fixed:

  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252689).
  • CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253404).
  • CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256780).
  • CVE-2026-22999: net/sched: sch_qfq: do not free existing class in qfq_change_class() (bsc#1257238).
  • CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1258051).
  • CVE-2026-23111: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (bsc#1258183).
  • CVE-2026-23209: macvlan: fix error recovery in macvlan_common_newlink() (bsc#1258784).
Record
SUSE-SU-2026:1239-1
Updated
2026-11-02
OSVSUSE-SU-2026:1244-1 No score

Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.16 fixes various security issues

The following security issues were fixed:

  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252689).
  • CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253404).
  • CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256780).
  • CVE-2026-22999: net/sched: sch_qfq: do not free existing class in qfq_change_class() (bsc#1257238).
  • CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1258051).
  • CVE-2026-23111: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (bsc#1258183).
  • CVE-2026-23209: macvlan: fix error recovery in macvlan_common_newlink() (bsc#1258784).
Record
SUSE-SU-2026:1244-1
Updated
2026-11-02
OSVSUSE-SU-2026:1259-1 No score

Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.42 fixes various security issues

The following security issues were fixed:

  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252689).
  • CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253404).
  • CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256780).
  • CVE-2026-22999: net/sched: sch_qfq: do not free existing class in qfq_change_class() (bsc#1257238).
  • CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1258051).
  • CVE-2026-23111: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (bsc#1258183).
  • CVE-2026-23209: macvlan: fix error recovery in macvlan_common_newlink() (bsc#1258784).
Record
SUSE-SU-2026:1259-1
Updated
2026-11-02
OSVSUSE-SU-2026:1261-1 No score

Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.22 fixes various security issues

The following security issues were fixed:

  • CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253404).
  • CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256780).
  • CVE-2026-22999: net/sched: sch_qfq: do not free existing class in qfq_change_class() (bsc#1257238).
  • CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1258051).
  • CVE-2026-23111: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (bsc#1258183).
  • CVE-2026-23209: macvlan: fix error recovery in macvlan_common_newlink() (bsc#1258784).
Record
SUSE-SU-2026:1261-1
Updated
2026-11-02
OSVSUSE-SU-2026:1262-1 No score

Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.31 fixes various security issues

The following security issues were fixed:

  • CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1258051).
  • CVE-2026-23111: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (bsc#1258183).
  • CVE-2026-23209: macvlan: fix error recovery in macvlan_common_newlink() (bsc#1258784).

The following non security issue was fixed:

  • Fix NULL pointer dereference in smb2_query_server_interfaces Livepatch for to restore a null check of server->ops->query_server_interfaces that was dropped by mistake. (bsc#1259896 bsc#1259962).
Record
SUSE-SU-2026:1262-1
Updated
2026-11-02
OSVSUSE-SU-2026:1266-1 No score

Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.87 fixes various security issues

The following security issues were fixed:

  • CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1258051).
  • CVE-2026-23111: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (bsc#1258183).
  • CVE-2026-23209: macvlan: fix error recovery in macvlan_common_newlink() (bsc#1258784).

The following non security issue was fixed:

  • Fix NULL pointer dereference in smb2_query_server_interfaces Livepatch for to restore a null check of server->ops->query_server_interfaces that was dropped by mistake. (bsc#1259896 bsc#1259962).
Record
SUSE-SU-2026:1266-1
Updated
2026-11-02
OSVSUSE-SU-2026:1271-1 No score

Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.65 fixes various security issues

The following security issues were fixed:

  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252689).
  • CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253404).
  • CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256780).
  • CVE-2026-22999: net/sched: sch_qfq: do not free existing class in qfq_change_class() (bsc#1257238).
  • CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1258051).
  • CVE-2026-23111: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (bsc#1258183).
  • CVE-2026-23209: macvlan: fix error recovery in macvlan_common_newlink() (bsc#1258784).
Record
SUSE-SU-2026:1271-1
Updated
2026-11-02
OSVSUSE-SU-2026:1272-1 No score

Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.81 fixes various security issues

The following security issues were fixed:

  • CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256780).
  • CVE-2026-22999: net/sched: sch_qfq: do not free existing class in qfq_change_class() (bsc#1257238).
  • CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1258051).
  • CVE-2026-23111: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (bsc#1258183).
  • CVE-2026-23209: macvlan: fix error recovery in macvlan_common_newlink() (bsc#1258784).
Record
SUSE-SU-2026:1272-1
Updated
2026-11-02

Affected products

Show 2 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
kernel
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-64k
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-64k-core
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-64k-debug
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-64k-debug-core
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-64k-debug-devel
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-64k-debug-devel-matched
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-64k-debug-modules
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-64k-debug-modules-core
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-64k-debug-modules-extra
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-64k-devel
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-64k-devel-matched
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-64k-modules
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-64k-modules-core
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-64k-modules-extra
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-abi-stablelists
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-core
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-cross-headers
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-debug
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-debug-core
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-debug-devel
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-debug-devel-matched
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-debug-modules
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-debug-modules-core
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-debug-modules-extra
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-debug-uki-virt
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-devel
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-devel-matched
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-doc
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-headers
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-modules
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-modules-core
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-modules-extra
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-modules-extra-matched
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-rt
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-rt-64k
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-rt-64k-core
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-rt-64k-debug
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-rt-64k-debug-core
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-rt-64k-debug-devel
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-rt-64k-debug-modules
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-rt-64k-debug-modules-core
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-rt-64k-debug-modules-extra
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-rt-64k-devel
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-rt-64k-modules
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-rt-64k-modules-core
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-rt-64k-modules-extra
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-rt-core
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-rt-debug
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel-rt-debug-core
AlmaLinux:10
From an advisory covering 29 CVEs
 before 6.12.0-211.7.1.el10_2
6.12.0-211.7.1.el10_2
kernel
Azure Linux:3
 before 6.6.126.1-1
6.6.126.1-1
linux-lts
Alpaquita:23
 6.1.161-r0 up to 6.1.163-r0
6.1.163-r0
linux-lts
Alpaquita:25
 6.12.66-r0 up to 6.12.73-r0
6.12.73-r0
linux-lts
Alpaquita:stream
 6.12.92-r1 up to 6.18.35-r1
6.18.35-r1
kernel
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-64k
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-64k-core
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-64k-debug
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-64k-debug-core
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-64k-debug-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-64k-debug-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-64k-debug-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-64k-debug-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-64k-debug-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-64k-debug-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-64k-debug-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-64k-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-64k-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-64k-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-64k-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-64k-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-64k-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-64k-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-abi-stablelists
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-core
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-cross-headers
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-debug
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-debug-core
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-debug-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-debug-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-debug-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-debug-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-debug-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-debug-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-debug-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-debug-uki-virt
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-debug-uki-virt-addons
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-doc
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-headers
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-ipaclones-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-rt
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-rt-64k
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-rt-64k-core
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-rt-64k-debug
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-rt-64k-debug-core
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-rt-64k-debug-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
Kernel
Linux
 before 5.15.200, 5.16.0 up to 6.1.163, 6.2.0 up to 6.6.124, 6.4.0 up to 6.12.70, 6.7.0 up to 6.18.10
5.15.2006.1.1636.6.1246.12.706.18.10
linux
Debian:12
 before 6.1.164-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 42 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1
6.1.164-1
linux
Debian:13
 before 6.12.73-1, plus listed versions
6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-1
Show 7 moreShow less
6.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-1~bpo12+1
6.12.73-1
linux
Debian:14
 before 6.18.10-1, plus listed versions
6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1
Show 45 moreShow less
6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp16.14.5-1~exp1
6.18.10-1
linux-6.1
Debian:11
From an advisory covering 52 CVEs
 before 6.1.164-1~deb11u1, plus listed versions
6.1.106-3~deb11u16.1.106-3~deb11u26.1.106-3~deb11u36.1.112-1~deb11u16.1.119-1~deb11u1
Show 10 moreShow less
6.1.128-1~deb11u16.1.129-1~deb11u16.1.137-1~deb11u16.1.140-1~deb11u16.1.147-1~deb11u16.1.148-1~deb11u16.1.153-1~deb11u16.1.158-1~deb11u16.1.159-1~deb11u16.1.162-1~deb11u1
6.1.164-1~deb11u1
linux
Debian:13
From an advisory covering 53 CVEs
 before 6.12.73-1, plus listed versions
6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-1
Show 7 moreShow less
6.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-1~bpo12+1
6.12.73-1
linux
Debian:12
From an advisory covering 52 CVEs
 before 6.1.164-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 42 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1
6.1.164-1
linux-aws-hwe
Ubuntu:Pro:16.04:LTS
From an advisory covering 8 CVEs
 before 4.15.0-1191.204~16.04.1, plus listed versions
4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1
Show 45 moreShow less
4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1
4.15.0-1191.204~16.04.1
linux-azure
Ubuntu:Pro:16.04:LTS
From an advisory covering 8 CVEs
 before 4.15.0-1200.215~16.04.1, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 45 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71
4.15.0-1200.215~16.04.1
linux-hwe
Ubuntu:Pro:16.04:LTS
From an advisory covering 8 CVEs
 before 4.15.0-249.261~16.04.1, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 45 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1
4.15.0-249.261~16.04.1
linux-aws
Ubuntu:Pro:18.04:LTS
From an advisory covering 8 CVEs
 before 4.15.0-1191.204, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 45 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87
4.15.0-1191.204
linux-azure-4.15
Ubuntu:Pro:18.04:LTS
From an advisory covering 8 CVEs
 before 4.15.0-1200.215, plus listed versions
4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102
Show 45 moreShow less
4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176
4.15.0-1200.215
linux-gcp-4.15
Ubuntu:Pro:18.04:LTS
From an advisory covering 8 CVEs
 before 4.15.0-1184.201, plus listed versions
4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92
Show 45 moreShow less
4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161
4.15.0-1184.201
linux
Ubuntu:Pro:18.04:LTS
From an advisory covering 8 CVEs
 before 4.15.0-249.261, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 45 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107
4.15.0-249.261
linux-hwe-5.4
Ubuntu:Pro:18.04:LTS
From an advisory covering 8 CVEs
 before 5.4.0-227.247~18.04.1, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 45 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1
5.4.0-227.247~18.04.1
linux-oracle
Ubuntu:Pro:18.04:LTS
From an advisory covering 8 CVEs
 before 4.15.0-1153.164, plus listed versions
4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13
Show 45 moreShow less
4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88
4.15.0-1153.164
linux-aws-5.15
Ubuntu:Pro:20.04:LTS
From an advisory covering 8 CVEs
 before 5.15.0-1103.110~20.04.1, plus listed versions
5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1
Show 45 moreShow less
5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1
5.15.0-1103.110~20.04.1
linux-aws
Ubuntu:Pro:20.04:LTS
From an advisory covering 8 CVEs
 before 5.4.0-1156.166, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5
Show 45 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78
5.4.0-1156.166
linux-azure-5.15
Ubuntu:Pro:20.04:LTS
From an advisory covering 8 CVEs
 before 5.15.0-1110.119~20.04.1, plus listed versions
5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1
Show 45 moreShow less
5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1
5.15.0-1110.119~20.04.1
linux-gcp-5.15
Ubuntu:Pro:20.04:LTS
From an advisory covering 8 CVEs
 before 5.15.0-1103.112~20.04.1, plus listed versions
5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2
Show 45 moreShow less
5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.15.15.0-1065.73~20.04.15.15.0-1066.74~20.04.15.15.0-1067.75~20.04.15.15.0-1068.76~20.04.15.15.0-1069.77~20.04.15.15.0-1070.78~20.04.15.15.0-1071.79~20.04.15.15.0-1072.80~20.04.15.15.0-1073.81~20.04.15.15.0-1074.83~20.04.1
5.15.0-1103.112~20.04.1
linux-hwe-5.15
Ubuntu:Pro:20.04:LTS
From an advisory covering 8 CVEs
 before 5.15.0-173.183~20.04.1, plus listed versions
5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
Show 45 moreShow less
5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1
5.15.0-173.183~20.04.1
linux-lowlatency-hwe-5.15
Ubuntu:Pro:20.04:LTS
From an advisory covering 8 CVEs
 before 5.15.0-173.183~20.04.1, plus listed versions
5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
Show 45 moreShow less
5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.88~20.04.15.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.95~20.04.15.15.0-87.96~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-110.120~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1
5.15.0-173.183~20.04.1
linux
Ubuntu:Pro:20.04:LTS
From an advisory covering 8 CVEs
 before 5.4.0-227.247, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 45 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110
5.4.0-227.247
linux-ibm-5.15
Ubuntu:Pro:20.04:LTS
From an advisory covering 8 CVEs
 before 5.15.0-1097.100~20.04.1, plus listed versions
5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1
Show 45 moreShow less
5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.15.15.0-1057.60~20.04.15.15.0-1058.61~20.04.15.15.0-1059.62~20.04.15.15.0-1060.63~20.04.15.15.0-1061.64~20.04.15.15.0-1062.65~20.04.15.15.0-1063.66~20.04.15.15.0-1064.67~20.04.15.15.0-1065.68~20.04.15.15.0-1066.69~20.04.15.15.0-1067.70~20.04.15.15.0-1068.71~20.04.15.15.0-1069.72~20.04.15.15.0-1074.77~20.04.15.15.0-1075.78~20.04.15.15.0-1076.79~20.04.15.15.0-1078.81~20.04.15.15.0-1079.82~20.04.15.15.0-1080.83~20.04.15.15.0-1081.84~20.04.15.15.0-1083.86~20.04.15.15.0-1085.88~20.04.15.15.0-1086.89~20.04.15.15.0-1087.90~20.04.15.15.0-1089.92~20.04.15.15.0-1090.93~20.04.15.15.0-1091.94~20.04.15.15.0-1092.95~20.04.15.15.0-1093.96~20.04.15.15.0-1094.97~20.04.1
5.15.0-1097.100~20.04.1
linux-oracle-5.15
Ubuntu:Pro:20.04:LTS
From an advisory covering 8 CVEs
 before 5.15.0-1100.106~20.04.1, plus listed versions
5.15.0-1007.9~20.04.15.15.0-1013.17~20.04.15.15.0-1016.20~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.1
Show 45 moreShow less
5.15.0-1019.24~20.04.15.15.0-1021.27~20.04.15.15.0-1022.28~20.04.15.15.0-1025.31~20.04.25.15.0-1027.33~20.04.15.15.0-1029.35~20.04.15.15.0-1030.36~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1041.47~20.04.15.15.0-1042.48~20.04.15.15.0-1044.50~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1047.53~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1053.59~20.04.15.15.0-1054.60~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1074.80~20.04.1
5.15.0-1100.106~20.04.1
linux-aws
Ubuntu:Pro:22.04:LTS
From an advisory covering 8 CVEs
 before 5.15.0-1103.110, plus listed versions
5.13.0-1005.65.15.0-1002.45.15.0-1003.55.15.0-1004.65.15.0-1005.7
Show 45 moreShow less
5.15.0-1008.105.15.0-1009.115.15.0-1011.145.15.0-1013.175.15.0-1014.185.15.0-1015.195.15.0-1017.215.15.0-1019.235.15.0-1020.245.15.0-1021.255.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.325.15.0-1030.345.15.0-1031.355.15.0-1033.375.15.0-1034.385.15.0-1035.395.15.0-1036.405.15.0-1037.415.15.0-1038.435.15.0-1039.445.15.0-1040.455.15.0-1042.475.15.0-1043.485.15.0-1044.495.15.0-1045.505.15.0-1047.525.15.0-1048.535.15.0-1049.545.15.0-1050.555.15.0-1051.565.15.0-1052.575.15.0-1053.585.15.0-1055.605.15.0-1056.615.15.0-1057.635.15.0-1060.665.15.0-1061.675.15.0-1062.685.15.0-1063.695.15.0-1064.705.15.0-1065.71
5.15.0-1103.110
linux-aws-6.8
Ubuntu:Pro:22.04:LTS
From an advisory covering 8 CVEs
 before 6.8.0-1051.54~22.04.1, plus listed versions
6.8.0-1009.9~22.04.26.8.0-1010.10~22.04.26.8.0-1011.12~22.04.16.8.0-1013.14~22.04.16.8.0-1014.15~22.04.1
Show 28 moreShow less
6.8.0-1015.16~22.04.16.8.0-1016.17~22.04.26.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1023.25~22.04.16.8.0-1024.26~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1035.37~22.04.16.8.0-1036.38~22.04.16.8.0-1039.41~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.44~22.04.16.8.0-1043.45~22.04.16.8.0-1044.46~22.04.16.8.0-1045.47~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.16.8.0-1050.53~22.04.1
6.8.0-1051.54~22.04.1
linux-azure
Ubuntu:Pro:22.04:LTS
From an advisory covering 8 CVEs
 before 5.15.0-1109.118, plus listed versions
5.13.0-1006.75.15.0-1001.25.15.0-1002.35.15.0-1003.45.15.0-1005.6
Show 45 moreShow less
5.15.0-1007.85.15.0-1008.95.15.0-1010.125.15.0-1012.155.15.0-1013.165.15.0-1014.175.15.0-1017.205.15.0-1019.245.15.0-1020.255.15.0-1021.265.15.0-1022.275.15.0-1023.295.15.0-1024.305.15.0-1029.365.15.0-1030.375.15.0-1031.385.15.0-1033.405.15.0-1034.415.15.0-1035.425.15.0-1036.435.15.0-1037.445.15.0-1038.455.15.0-1039.465.15.0-1040.475.15.0-1041.485.15.0-1042.495.15.0-1044.515.15.0-1045.525.15.0-1046.535.15.0-1047.545.15.0-1049.565.15.0-1050.575.15.0-1051.595.15.0-1052.605.15.0-1053.615.15.0-1054.625.15.0-1056.645.15.0-1057.655.15.0-1058.665.15.0-1059.675.15.0-1060.695.15.0-1061.705.15.0-1063.725.15.0-1064.735.15.0-1066.75
5.15.0-1109.118
linux-gcp
Ubuntu:Pro:22.04:LTS
From an advisory covering 8 CVEs
 before 5.15.0-1103.112, plus listed versions
5.13.0-1005.65.15.0-1001.35.15.0-1002.55.15.0-1003.65.15.0-1004.7
Show 45 moreShow less
5.15.0-1005.85.15.0-1006.95.15.0-1008.125.15.0-1010.155.15.0-1013.185.15.0-1016.215.15.0-1017.235.15.0-1018.245.15.0-1019.255.15.0-1021.285.15.0-1022.295.15.0-1025.325.15.0-1026.335.15.0-1027.345.15.0-1029.365.15.0-1030.375.15.0-1031.385.15.0-1032.405.15.0-1034.425.15.0-1035.435.15.0-1036.445.15.0-1037.455.15.0-1038.465.15.0-1039.475.15.0-1040.485.15.0-1041.495.15.0-1042.505.15.0-1044.525.15.0-1045.535.15.0-1046.545.15.0-1047.555.15.0-1048.565.15.0-1049.575.15.0-1051.595.15.0-1052.605.15.0-1053.615.15.0-1054.625.15.0-1055.635.15.0-1058.665.15.0-1059.675.15.0-1060.685.15.0-1062.705.15.0-1063.715.15.0-1064.725.15.0-1065.73
5.15.0-1103.112
linux-gcp-6.8
Ubuntu:Pro:22.04:LTS
From an advisory covering 8 CVEs
 before 6.8.0-1053.56~22.04.1, plus listed versions
6.8.0-1010.11~22.04.16.8.0-1011.12~22.04.16.8.0-1012.13~22.04.16.8.0-1013.14~22.04.16.8.0-1014.16~22.04.1
Show 30 moreShow less
6.8.0-1015.17~22.04.16.8.0-1016.18~22.04.16.8.0-1017.19~22.04.16.8.0-1018.20~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1024.26~22.04.16.8.0-1025.27~22.04.16.8.0-1026.28~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1034.36~22.04.26.8.0-1036.38~22.04.16.8.0-1037.39~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.45~22.04.16.8.0-1043.46~22.04.16.8.0-1044.47~22.04.16.8.0-1045.48~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.26.8.0-1048.51~22.04.16.8.0-1052.55~22.04.1
6.8.0-1053.56~22.04.1
linux
Ubuntu:Pro:22.04:LTS
From an advisory covering 8 CVEs
 before 5.15.0-173.183, plus listed versions
5.13.0-19.195.15.0-17.175.15.0-18.185.15.0-22.225.15.0-23.23
Show 45 moreShow less
5.15.0-25.255.15.0-27.285.15.0-30.315.15.0-33.345.15.0-35.365.15.0-37.395.15.0-39.425.15.0-40.435.15.0-41.445.15.0-43.465.15.0-46.495.15.0-47.515.15.0-48.545.15.0-50.565.15.0-52.585.15.0-53.595.15.0-56.625.15.0-57.635.15.0-58.645.15.0-60.665.15.0-67.745.15.0-69.765.15.0-70.775.15.0-71.785.15.0-72.795.15.0-73.805.15.0-75.825.15.0-76.835.15.0-78.855.15.0-79.865.15.0-82.915.15.0-83.925.15.0-84.935.15.0-86.965.15.0-87.975.15.0-88.985.15.0-89.995.15.0-91.1015.15.0-92.1025.15.0-94.1045.15.0-97.1075.15.0-100.1105.15.0-101.1115.15.0-102.1125.15.0-105.115
5.15.0-173.183
linux-gke
Ubuntu:Pro:22.04:LTS
From an advisory covering 8 CVEs
 before 5.15.0-1099.105, plus listed versions
5.15.0-1002.25.15.0-1003.35.15.0-1004.55.15.0-1005.65.15.0-1006.7
Show 45 moreShow less
5.15.0-1008.105.15.0-1010.135.15.0-1011.145.15.0-1014.175.15.0-1015.185.15.0-1016.195.15.0-1017.205.15.0-1019.235.15.0-1020.255.15.0-1023.285.15.0-1024.295.15.0-1027.325.15.0-1028.335.15.0-1030.355.15.0-1031.365.15.0-1032.375.15.0-1033.385.15.0-1034.395.15.0-1035.405.15.0-1036.415.15.0-1037.425.15.0-1038.435.15.0-1039.445.15.0-1040.455.15.0-1041.465.15.0-1042.475.15.0-1044.495.15.0-1045.505.15.0-1046.515.15.0-1047.525.15.0-1048.535.15.0-1049.545.15.0-1050.555.15.0-1051.565.15.0-1052.575.15.0-1053.585.15.0-1054.595.15.0-1057.625.15.0-1058.635.15.0-1059.645.15.0-1060.665.15.0-1061.675.15.0-1062.685.15.0-1063.695.15.0-1064.70
5.15.0-1099.105
linux-ibm
Ubuntu:Pro:22.04:LTS
From an advisory covering 8 CVEs
 before 5.15.0-1097.100, plus listed versions
5.15.0-1002.25.15.0-1003.35.15.0-1004.45.15.0-1005.55.15.0-1007.8
Show 45 moreShow less
5.15.0-1009.115.15.0-1010.125.15.0-1012.145.15.0-1013.155.15.0-1015.175.15.0-1017.205.15.0-1018.215.15.0-1021.245.15.0-1022.255.15.0-1023.265.15.0-1025.285.15.0-1026.295.15.0-1027.305.15.0-1028.315.15.0-1029.325.15.0-1030.335.15.0-1031.345.15.0-1032.355.15.0-1033.365.15.0-1034.375.15.0-1035.385.15.0-1036.395.15.0-1037.405.15.0-1038.415.15.0-1040.435.15.0-1041.445.15.0-1042.455.15.0-1043.465.15.0-1044.475.15.0-1045.485.15.0-1046.495.15.0-1047.505.15.0-1048.515.15.0-1049.525.15.0-1050.535.15.0-1053.565.15.0-1054.575.15.0-1055.585.15.0-1056.595.15.0-1057.605.15.0-1058.615.15.0-1059.625.15.0-1060.635.15.0-1061.645.15.0-1062.65
5.15.0-1097.100
linux-ibm-6.8
Ubuntu:Pro:22.04:LTS
From an advisory covering 8 CVEs
 before 6.8.0-1050.50~22.04.1, plus listed versions
6.8.0-1008.8~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.16.8.0-1013.13~22.04.1
Show 26 moreShow less
6.8.0-1014.14~22.04.16.8.0-1015.15~22.04.16.8.0-1016.16~22.04.16.8.0-1017.17~22.04.16.8.0-1018.18~22.04.16.8.0-1019.19~22.04.16.8.0-1023.23~22.04.16.8.0-1024.24~22.04.16.8.0-1025.25~22.04.16.8.0-1026.26~22.04.16.8.0-1027.27~22.04.16.8.0-1028.28~22.04.16.8.0-1029.29~22.04.16.8.0-1030.30~22.04.16.8.0-1033.33~22.04.16.8.0-1036.36~22.04.16.8.0-1037.37~22.04.16.8.0-1038.38~22.04.16.8.0-1039.39~22.04.16.8.0-1040.40~22.04.16.8.0-1041.41~22.04.16.8.0-1042.42~22.04.16.8.0-1043.43~22.04.16.8.0-1044.44~22.04.16.8.0-1045.45~22.04.16.8.0-1049.49~22.04.1
6.8.0-1050.50~22.04.1
linux-oracle
Ubuntu:Pro:22.04:LTS
From an advisory covering 8 CVEs
 before 5.15.0-1100.106, plus listed versions
5.13.0-1008.105.15.0-1001.35.15.0-1002.45.15.0-1003.55.15.0-1006.8
Show 45 moreShow less
5.15.0-1007.95.15.0-1009.125.15.0-1011.155.15.0-1013.175.15.0-1016.205.15.0-1017.225.15.0-1018.235.15.0-1019.245.15.0-1021.275.15.0-1022.285.15.0-1025.315.15.0-1026.325.15.0-1027.335.15.0-1029.355.15.0-1030.365.15.0-1032.385.15.0-1033.395.15.0-1034.405.15.0-1035.415.15.0-1036.425.15.0-1037.435.15.0-1038.445.15.0-1039.455.15.0-1040.465.15.0-1041.475.15.0-1042.485.15.0-1044.505.15.0-1045.515.15.0-1046.525.15.0-1047.535.15.0-1048.545.15.0-1049.555.15.0-1050.565.15.0-1051.575.15.0-1052.585.15.0-1053.595.15.0-1054.605.15.0-1055.615.15.0-1058.645.15.0-1059.655.15.0-1060.665.15.0-1061.675.15.0-1062.685.15.0-1063.695.15.0-1064.70
5.15.0-1100.106
linux-aws
Ubuntu:Pro:24.04:LTS
From an advisory covering 8 CVEs
 before 6.8.0-1051.54, plus listed versions
6.5.0-1008.86.6.0-1001.16.8.0-1001.16.8.0-1006.66.8.0-1008.8
Show 37 moreShow less
6.8.0-1009.96.8.0-1010.106.8.0-1011.126.8.0-1012.136.8.0-1013.146.8.0-1014.156.8.0-1015.166.8.0-1016.176.8.0-1017.186.8.0-1018.206.8.0-1019.216.8.0-1020.226.8.0-1021.236.8.0-1023.256.8.0-1024.266.8.0-1025.276.8.0-1026.286.8.0-1027.296.8.0-1028.306.8.0-1029.316.8.0-1030.326.8.0-1031.336.8.0-1032.346.8.0-1033.356.8.0-1035.376.8.0-1036.386.8.0-1038.406.8.0-1039.416.8.0-1040.426.8.0-1041.436.8.0-1042.446.8.0-1043.456.8.0-1044.466.8.0-1045.476.8.0-1046.496.8.0-1047.506.8.0-1050.53
6.8.0-1051.54
linux-azure
Ubuntu:Pro:24.04:LTS
From an advisory covering 8 CVEs
 before 6.8.0-1052.58, plus listed versions
6.5.0-1007.76.6.0-1001.16.8.0-1001.16.8.0-1005.56.8.0-1006.6
Show 28 moreShow less
6.8.0-1007.76.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1012.146.8.0-1013.156.8.0-1014.166.8.0-1015.176.8.0-1016.186.8.0-1017.206.8.0-1018.216.8.0-1020.236.8.0-1021.256.8.0-1025.306.8.0-1026.316.8.0-1027.326.8.0-1028.336.8.0-1029.346.8.0-1030.356.8.0-1031.366.8.0-1034.396.8.0-1038.446.8.0-1040.466.8.0-1041.476.8.0-1042.486.8.0-1044.506.8.0-1046.526.8.0-1051.57
6.8.0-1052.58
linux-gcp
Ubuntu:Pro:24.04:LTS
From an advisory covering 8 CVEs
 before 6.8.0-1053.56, plus listed versions
6.5.0-1007.76.6.0-1001.16.8.0-1002.26.8.0-1005.56.8.0-1006.6
Show 39 moreShow less
6.8.0-1007.76.8.0-1008.96.8.0-1009.106.8.0-1010.116.8.0-1011.126.8.0-1012.136.8.0-1013.146.8.0-1014.166.8.0-1015.176.8.0-1016.186.8.0-1017.196.8.0-1018.206.8.0-1019.216.8.0-1020.226.8.0-1021.236.8.0-1024.266.8.0-1025.276.8.0-1026.286.8.0-1027.296.8.0-1028.306.8.0-1029.316.8.0-1030.326.8.0-1031.336.8.0-1032.346.8.0-1033.356.8.0-1034.366.8.0-1036.386.8.0-1037.396.8.0-1039.416.8.0-1040.426.8.0-1041.436.8.0-1042.456.8.0-1043.466.8.0-1044.476.8.0-1045.486.8.0-1046.496.8.0-1047.506.8.0-1048.516.8.0-1052.55
6.8.0-1053.56
linux
Ubuntu:Pro:24.04:LTS
From an advisory covering 8 CVEs
 before 6.8.0-107.107, plus listed versions
6.5.0-9.96.6.0-14.146.8.0-11.116.8.0-20.206.8.0-22.22
Show 41 moreShow less
6.8.0-28.286.8.0-31.316.8.0-35.356.8.0-36.366.8.0-38.386.8.0-39.396.8.0-40.406.8.0-41.416.8.0-44.446.8.0-45.456.8.0-47.476.8.0-48.486.8.0-49.496.8.0-50.516.8.0-51.526.8.0-52.536.8.0-53.556.8.0-54.566.8.0-55.576.8.0-56.586.8.0-57.596.8.0-58.606.8.0-59.616.8.0-60.636.8.0-62.656.8.0-63.666.8.0-64.676.8.0-71.716.8.0-78.786.8.0-79.796.8.0-83.836.8.0-84.846.8.0-85.856.8.0-86.876.8.0-87.886.8.0-88.896.8.0-90.916.8.0-94.966.8.0-100.1006.8.0-101.1016.8.0-106.106
6.8.0-107.107
linux-ibm
Ubuntu:Pro:24.04:LTS
From an advisory covering 8 CVEs
 before 6.8.0-1050.50, plus listed versions
6.5.0-1009.96.8.0-1001.16.8.0-1003.36.8.0-1004.46.8.0-1005.5
Show 35 moreShow less
6.8.0-1006.66.8.0-1007.76.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1011.116.8.0-1012.126.8.0-1013.136.8.0-1014.146.8.0-1015.156.8.0-1016.166.8.0-1017.176.8.0-1018.186.8.0-1019.196.8.0-1022.226.8.0-1023.236.8.0-1024.246.8.0-1025.256.8.0-1026.266.8.0-1027.276.8.0-1028.286.8.0-1029.296.8.0-1030.306.8.0-1033.336.8.0-1036.366.8.0-1037.376.8.0-1038.386.8.0-1039.396.8.0-1040.406.8.0-1041.416.8.0-1042.426.8.0-1043.436.8.0-1044.446.8.0-1045.456.8.0-1049.49
6.8.0-1050.50
linux-oracle
Ubuntu:Pro:24.04:LTS
From an advisory covering 8 CVEs
 before 6.8.0-1049.50, plus listed versions
6.5.0-1010.106.6.0-1001.16.8.0-1001.16.8.0-1004.46.8.0-1005.5
Show 35 moreShow less
6.8.0-1006.66.8.0-1008.86.8.0-1010.106.8.0-1011.116.8.0-1012.126.8.0-1013.136.8.0-1014.146.8.0-1015.166.8.0-1016.176.8.0-1017.186.8.0-1018.196.8.0-1019.206.8.0-1020.216.8.0-1021.226.8.0-1022.236.8.0-1023.246.8.0-1024.256.8.0-1025.266.8.0-1026.276.8.0-1027.286.8.0-1028.296.8.0-1029.306.8.0-1030.316.8.0-1032.336.8.0-1033.346.8.0-1035.366.8.0-1037.386.8.0-1038.396.8.0-1039.406.8.0-1040.416.8.0-1041.426.8.0-1042.436.8.0-1043.446.8.0-1044.456.8.0-1047.48
6.8.0-1049.50
linux
Ubuntu:Pro:25.10
From an advisory covering 8 CVEs
 before 6.17.0-20.20, plus listed versions
6.14.0-15.156.15.0-3.36.15.0-4.46.16.0-13.136.16.0-16.16
Show 9 moreShow less
6.17.0-3.36.17.0-4.46.17.0-5.56.17.0-6.66.17.0-7.76.17.0-8.86.17.0-12.126.17.0-14.146.17.0-19.19
6.17.0-20.20
kernel
Mageia:9
From an advisory covering 240 CVEs
 before 6.6.130-1.mga9
6.6.130-1.mga9
kmod-virtualbox
Mageia:9
From an advisory covering 240 CVEs
 before 7.1.14-15.mga9
7.1.14-15.mga9
kmod-xtables-addons
Mageia:9
From an advisory covering 240 CVEs
 before 3.24-89.mga9
3.24-89.mga9
kernel-linus
Mageia:9
From an advisory covering 240 CVEs
 before 6.6.130-1.mga9
6.6.130-1.mga9
kernel
openEuler:24.03-LTS-SP1
From an advisory covering 122 CVEs
 before 6.6.0-144.0.0.139.oe2403sp1
6.6.0-144.0.0.139.oe2403sp1
kernel
openEuler:24.03-LTS
From an advisory covering 37 CVEs
 before 6.6.0-145.0.0.128.oe2403
6.6.0-145.0.0.128.oe2403
kernel
openEuler:24.03-LTS-SP2
From an advisory covering 38 CVEs
 before 6.6.0-145.0.0.141.oe2403sp2
6.6.0-145.0.0.141.oe2403sp2
bpftool-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 11 CVEs
 before 0:7.3.0-427.121.1.el9_4
0:7.3.0-427.121.1.el9_4
kernel-64k-debug-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
kernel-64k-debug-devel
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
kernel-64k-debug-devel-matched
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
kernel-64k-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
kernel-64k-devel
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
kernel-64k-devel-matched
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
kernel-debug-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
kernel-debug-devel
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
kernel-debug-devel-matched
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
kernel-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
kernel-debuginfo-common-aarch64
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
kernel-debuginfo-common-ppc64le
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
kernel-debuginfo-common-s390x
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
kernel-debuginfo-common-x86_64
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
kernel-devel
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
kernel-devel-matched
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
kernel-doc
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
kernel-rt-debug-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
kernel-rt-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
kernel-tools-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
kernel-zfcpdump-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
kernel-zfcpdump-devel
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
kernel-zfcpdump-devel-matched
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
libperf-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
perf
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
perf-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
python3-perf-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
rtla
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
rv
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
bpftool
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 11 CVEs
 before 0:7.3.0-427.121.1.el9_4
0:7.3.0-427.121.1.el9_4
bpftool-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 11 CVEs
 before 0:7.3.0-427.121.1.el9_4
0:7.3.0-427.121.1.el9_4
kernel
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
kernel-64k
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
kernel-64k-core
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
kernel-64k-debug
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
kernel-64k-debug-core
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
kernel-64k-debug-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
kernel-64k-debug-modules
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
kernel-64k-debug-modules-core
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
kernel-64k-debug-modules-extra
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
kernel-64k-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
kernel-64k-modules
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
kernel-64k-modules-core
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
kernel-64k-modules-extra
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
kernel-abi-stablelists
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
kernel-core
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
kernel-debug
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
kernel-debug-core
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 11 CVEs
 before 0:5.14.0-427.121.1.el9_4
0:5.14.0-427.121.1.el9_4
kernel
Rocky Linux:9
From an advisory covering 4 CVEs
 before 0:5.14.0-611.47.1.el9_7
0:5.14.0-611.47.1.el9_7
linux
Root:Debian:11
 before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
rootio-linux
Root:Debian:11
 before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
rootio-linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
linux
Root:Debian:13
 before 6.12.115-2.aikido.164
6.12.115-2.aikido.164
rootio-linux
Root:Debian:13
 before 6.12.115-2.aikido.164
6.12.115-2.aikido.164
linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
rootio-linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
rootio-linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
kernel-livepatch-SLE15-SP7-RT_Update_10
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 153 CVEs
 before 1-150700.1.3.1
1-150700.1.3.1
kernel-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 153 CVEs
 before 6.4.0-150700.7.34.1
6.4.0-150700.7.34.1
kernel-source-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 153 CVEs
 before 6.4.0-150700.7.34.1
6.4.0-150700.7.34.1
kernel-syms-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 153 CVEs
 before 6.4.0-150700.7.34.1
6.4.0-150700.7.34.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 27 CVEs
 before 6.4.0-150600.23.92.1
6.4.0-150600.23.92.1
kernel-livepatch-SLE15-SP6_Update_21
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 27 CVEs
 before 1-150600.13.5.1
1-150600.13.5.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP6
From an advisory covering 27 CVEs
 before 6.4.0-150600.23.92.1
6.4.0-150600.23.92.1
kernel-64kb
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 27 CVEs
 before 6.4.0-150600.23.92.1
6.4.0-150600.23.92.1
kernel-default
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 27 CVEs
 before 6.4.0-150600.23.92.1
6.4.0-150600.23.92.1
kernel-default-base
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 27 CVEs
 before 6.4.0-150600.23.92.1.150600.12.42.2
6.4.0-150600.23.92.1.150600.12.42.2
kernel-docs
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 27 CVEs
 before 6.4.0-150600.23.92.1
6.4.0-150600.23.92.1
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 27 CVEs
 before 6.4.0-150600.23.92.1
6.4.0-150600.23.92.1
kernel-source
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 27 CVEs
 before 6.4.0-150600.23.92.1
6.4.0-150600.23.92.1
kernel-syms
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 27 CVEs
 before 6.4.0-150600.23.92.1
6.4.0-150600.23.92.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 27 CVEs
 before 6.4.0-150600.23.92.1
6.4.0-150600.23.92.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 27 CVEs
 before 6.4.0-150600.23.92.1
6.4.0-150600.23.92.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 27 CVEs
 before 6.4.0-150600.23.92.1.150600.12.42.2
6.4.0-150600.23.92.1.150600.12.42.2
kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 27 CVEs
 before 6.4.0-150600.23.92.1
6.4.0-150600.23.92.1
kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 27 CVEs
 before 6.4.0-150600.23.92.1
6.4.0-150600.23.92.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 27 CVEs
 before 6.4.0-150600.23.92.1
6.4.0-150600.23.92.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 27 CVEs
 before 6.4.0-150600.23.92.1
6.4.0-150600.23.92.1
dtb-aarch64
openSUSE:Leap 15.6
From an advisory covering 27 CVEs
 before 6.4.0-150600.23.92.1
6.4.0-150600.23.92.1
kernel-64kb
openSUSE:Leap 15.6
From an advisory covering 27 CVEs
 before 6.4.0-150600.23.92.1
6.4.0-150600.23.92.1
kernel-debug
openSUSE:Leap 15.6
From an advisory covering 27 CVEs
 before 6.4.0-150600.23.92.1
6.4.0-150600.23.92.1
kernel-default
openSUSE:Leap 15.6
From an advisory covering 27 CVEs
 before 6.4.0-150600.23.92.1
6.4.0-150600.23.92.1
kernel-default-base
openSUSE:Leap 15.6
From an advisory covering 27 CVEs
 before 6.4.0-150600.23.92.1.150600.12.42.2
6.4.0-150600.23.92.1.150600.12.42.2
kernel-docs
openSUSE:Leap 15.6
From an advisory covering 27 CVEs
 before 6.4.0-150600.23.92.1
6.4.0-150600.23.92.1
kernel-kvmsmall
openSUSE:Leap 15.6
From an advisory covering 27 CVEs
 before 6.4.0-150600.23.92.1
6.4.0-150600.23.92.1
kernel-obs-build
openSUSE:Leap 15.6
From an advisory covering 27 CVEs
 before 6.4.0-150600.23.92.1
6.4.0-150600.23.92.1
kernel-obs-qa
openSUSE:Leap 15.6
From an advisory covering 27 CVEs
 before 6.4.0-150600.23.92.1
6.4.0-150600.23.92.1
kernel-source
openSUSE:Leap 15.6
From an advisory covering 27 CVEs
 before 6.4.0-150600.23.92.1
6.4.0-150600.23.92.1
kernel-syms
openSUSE:Leap 15.6
From an advisory covering 27 CVEs
 before 6.4.0-150600.23.92.1
6.4.0-150600.23.92.1
kernel-zfcpdump
openSUSE:Leap 15.6
From an advisory covering 27 CVEs
 before 6.4.0-150600.23.92.1
6.4.0-150600.23.92.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 155 CVEs
 before 6.4.0-150700.53.34.1
6.4.0-150700.53.34.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 155 CVEs
 before 6.4.0-150700.53.34.1
6.4.0-150700.53.34.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 155 CVEs
 before 6.4.0-150700.53.34.1.150700.17.23.1
6.4.0-150700.53.34.1.150700.17.23.1
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 155 CVEs
 before 6.4.0-150700.53.34.1
6.4.0-150700.53.34.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 155 CVEs
 before 6.4.0-150700.53.34.1
6.4.0-150700.53.34.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 155 CVEs
 before 6.4.0-150700.53.34.1
6.4.0-150700.53.34.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 155 CVEs
 before 6.4.0-150700.53.34.1
6.4.0-150700.53.34.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 155 CVEs
 before 6.4.0-150700.53.34.1
6.4.0-150700.53.34.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 155 CVEs
 before 6.4.0-150700.53.34.1
6.4.0-150700.53.34.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP7
From an advisory covering 155 CVEs
 before 6.4.0-150700.53.34.1
6.4.0-150700.53.34.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 155 CVEs
 before 6.4.0-150700.53.34.1
6.4.0-150700.53.34.1
kernel-livepatch-SLE15-SP7_Update_10
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 155 CVEs
 before 1-150700.15.3.1
1-150700.15.3.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 155 CVEs
 before 6.4.0-150700.53.34.1
6.4.0-150700.53.34.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP7
From an advisory covering 155 CVEs
 before 6.4.0-150700.53.34.1
6.4.0-150700.53.34.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP7
From an advisory covering 155 CVEs
 before 6.4.0-150700.53.34.1
6.4.0-150700.53.34.1
kernel-livepatch-SLE15-SP7-RT_Update_6
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 6 CVEs
 before 4-150700.2.1
4-150700.2.1
kernel-livepatch-SLE15-SP7-RT_Update_5
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 8 CVEs
 before 5-150700.2.1
5-150700.2.1
kernel-livepatch-SLE15-SP7-RT_Update_9
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 3 CVEs
 before 2-150700.2.1
2-150700.2.1
kernel-livepatch-SLE15-SP7-RT_Update_1
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 8 CVEs
 before 13-150700.2.1
13-150700.2.1
kernel-livepatch-SLE15-SP7-RT_Update_8
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 5 CVEs
 before 3-150700.2.1
3-150700.2.1
kernel-livepatch-SLE15-SP6_Update_16
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 8 CVEs
 before 5-150600.2.1
5-150600.2.1
kernel-livepatch-SLE15-SP6_Update_12
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 8 CVEs
 before 14-150600.2.1
14-150600.2.1
kernel-livepatch-SLE15-SP6_Update_11
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 8 CVEs
 before 14-150600.2.1
14-150600.2.1
kernel-livepatch-SLE15-SP7_Update_4
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 8 CVEs
 before 8-150700.2.1
8-150700.2.1
kernel-livepatch-SLE15-SP6_Update_9
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 8 CVEs
 before 16-150600.2.1
16-150600.2.1
kernel-livepatch-SLE15-SP6_Update_17
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 6 CVEs
 before 3-150600.2.1
3-150600.2.1
kernel-livepatch-SLE15-SP7_Update_6
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 6 CVEs
 before 3-150700.2.1
3-150700.2.1
kernel-livepatch-SLE15-SP7_Update_9
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 3 CVEs
 before 2-150700.2.1
2-150700.2.1
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
dtb-aarch64
openSUSE:Leap 16.0
From an advisory covering 176 CVEs
 before 6.12.0-160000.27.1
6.12.0-160000.27.1
kernel-64kb
openSUSE:Leap 16.0
From an advisory covering 176 CVEs
 before 6.12.0-160000.27.1
6.12.0-160000.27.1
kernel-azure
openSUSE:Leap 16.0
From an advisory covering 176 CVEs
 before 6.12.0-160000.27.1
6.12.0-160000.27.1
kernel-default
openSUSE:Leap 16.0
From an advisory covering 176 CVEs
 before 6.12.0-160000.27.1
6.12.0-160000.27.1
kernel-default-base
openSUSE:Leap 16.0
From an advisory covering 176 CVEs
 before 6.12.0-160000.27.1.160000.2.8
6.12.0-160000.27.1.160000.2.8
kernel-docs
openSUSE:Leap 16.0
From an advisory covering 176 CVEs
 before 6.12.0-160000.27.1
6.12.0-160000.27.1
kernel-kvmsmall
openSUSE:Leap 16.0
From an advisory covering 176 CVEs
 before 6.12.0-160000.27.1
6.12.0-160000.27.1
kernel-obs-build
openSUSE:Leap 16.0
From an advisory covering 176 CVEs
 before 6.12.0-160000.27.1
6.12.0-160000.27.1
kernel-obs-qa
openSUSE:Leap 16.0
From an advisory covering 176 CVEs
 before 6.12.0-160000.27.1
6.12.0-160000.27.1
kernel-rt
openSUSE:Leap 16.0
From an advisory covering 176 CVEs
 before 6.12.0-160000.27.1
6.12.0-160000.27.1
kernel-source
openSUSE:Leap 16.0
From an advisory covering 176 CVEs
 before 6.12.0-160000.27.1
6.12.0-160000.27.1
kernel-syms
openSUSE:Leap 16.0
From an advisory covering 176 CVEs
 before 6.12.0-160000.27.1
6.12.0-160000.27.1
kernel-zfcpdump
openSUSE:Leap 16.0
From an advisory covering 176 CVEs
 before 6.12.0-160000.27.1
6.12.0-160000.27.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHub0xBlackash/CVE-2026-231112026-06-09
PoC in GitHubHORKimhab/CVE-2026-231112026-06-09
PoC in GitHubcriann/check-cve-2026-231112026-06-09
PoC in GitHubseguridadentrerios/CVE-2026-231112026-06-10
PoC in GitHubishankaru/CVE-2026-23111-nftables-lab2026-06-11
PoC in GitHubBaba01hacker666/CVE-2026-231112026-06-25
PoC in GitHubbakano98/cve-2026-23111-poc2026-07-01
PoC in GitHubKnz-source/CVE-2026-23111-POC-noddlenpottato2026-08-12
PoC in GitHubimeiplus/CVE-2026-23111-PoC2026-09-20
PoC in GitHubkinokopio/CVE-2026-231112026-10-19

History

History
RecordedChangedSources
affectedOSV
affectedOSV
affectedOSV
affected
affected, aliases, aliases_more, referencesOSV
factsOSV
exploits
affectedOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-23111 is a high vulnerability (CVSS 7.8) in Linux, published February 13, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.52%, the 44th percentile. Fixed in kernel 6.6.126.1-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 1,185 package rows, 1,193 versions, 2,939 references and the rest of 9 source descriptions. The JSON record has them. Also not on the record: 49 aliases. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 98 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open