Every CVE Search/ Get API key

CVE-2026-31709

smb: client: validate the whole DACL before rewriting it in cifsacl

8.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

smb: client: validate the whole DACL before rewriting it in cifsacl

build_sec_desc() and id_mode_to_cifs_acl() derive a DACL pointer from a server-supplied dacloffset and then use the incoming ACL to rebuild the chmod/chown security descriptor.

The original fix only checked that the struct smb_acl header fits before reading dacl_ptr->size or dacl_ptr->num_aces. That avoids the immediate header-field OOB read, but the rewrite helpers still walk ACEs based on pdacl->num_aces with no structural validation of the incoming DACL body.

A malicious server can return a truncated DACL that still contains a header, claims one or more ACEs, and then drive replace_sids_and_copy_aces() or set_chmod_dacl() past the validated extent while they compare or copy attacker-controlled ACEs.

Factor the DACL structural checks into validate_dacl(), extend them to validate each ACE against the DACL bounds, and use the shared validator before the chmod/chown rebuild paths. parse_dacl() reuses the same validator so the read-side parser and write-side rewrite paths agree on what constitutes a well-formed incoming DACL.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.34%Up 0.3 points since May 2, 2026
90%50%10%1%

What each source reports

CVE List Score used 8.8

smb: client: validate the whole DACL before rewriting it in cifsacl

In the Linux kernel, the following vulnerability has been resolved:

smb: client: validate the whole DACL before rewriting it in cifsacl

build_sec_desc() and id_mode_to_cifs_acl() derive a DACL pointer from a server-supplied dacloffset and then use the incoming ACL to rebuild the chmod/chown security descriptor.

The original fix only checked that the struct smb_acl header fits before reading dacl_ptr->size or dacl_ptr->num_aces. That avoids the immediate header-field OOB read, but the rewrite helpers still walk ACEs based on pdacl->num_aces with no structural validation of the incoming DACL body.

A malicious server can return a truncated DACL that still contains a header, claims one or more ACEs, and then drive replace_sids_and_copy_aces() or set_chmod_dacl() past the validated extent while they compare or copy attacker-controlled ACEs.

Factor the DACL structural checks into validate_dacl(), extend them to validate each ACE against the DACL bounds, and use the shared validator before the chmod/chown rebuild paths. parse_dacl() reuses the same validator so the read-side parser and write-side rewrite paths agree on what constitutes a well-formed incoming DACL.

Record
CVE-2026-31709
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-1288, CWE-125
Updated
2026-11-02
EUVDEUVD-2026-26518 8.8

In the Linux kernel, the following vulnerability has been resolved:

smb: client: validate the whole DACL before rewriting it in cifsacl

build_sec_desc() and id_mode_to_cifs_acl() derive a DACL pointer from a server-supplied dacloffset and then use the incoming ACL to rebuild the chmod/chown security descriptor.

The original fix only checked that the struct smb_acl header fits before reading dacl_ptr->size or dacl_ptr->num_aces. That avoids the immediate header-field OOB read, but the rewrite helpers still walk ACEs based on pdacl->num_aces with no structural validation of the incoming DACL body.

A malicious server can return a truncated DACL that still contains a header, claims one or more ACEs, and then drive replace_sids_and_copy_aces() or set_chmod_dacl() past the validated extent while they compare or copy attacker-controlled ACEs.

Factor the DACL structural checks into validate_dacl(), extend them to validate each ACE against the DACL bounds, and use the shared validator before the chmod/chown rebuild paths. parse_dacl() reuses the same validator so the read-side parser and write-side rewrite paths agree on what constitutes a well-formed incoming DACL.

Record
EUVD-2026-26518
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-8hp2-qmc6-f97h 8.8

In the Linux kernel, the following vulnerability has been resolved: smb: client: validate the...

In the Linux kernel, the following vulnerability has been resolved:

smb: client: validate the whole DACL before rewriting it in cifsacl

build_sec_desc() and id_mode_to_cifs_acl() derive a DACL pointer from a server-supplied dacloffset and then use the incoming ACL to rebuild the chmod/chown security descriptor.

The original fix only checked that the struct smb_acl header fits before reading dacl_ptr->size or dacl_ptr->num_aces. That avoids the immediate header-field OOB read, but the rewrite helpers still walk ACEs based on pdacl->num_aces with no structural validation of the incoming DACL body.

A malicious server can return a truncated DACL that still contains a header, claims one or more ACEs, and then drive replace_sids_and_copy_aces() or set_chmod_dacl() past the validated extent while they compare or copy attacker-controlled ACEs.

Factor the DACL structural checks into validate_dacl(), extend them to validate each ACE against the DACL bounds, and use the shared validator before the chmod/chown rebuild paths. parse_dacl() reuses the same validator so the read-side parser and write-side rewrite paths agree on what constitutes a well-formed incoming DACL.

Record
GHSA-8hp2-qmc6-f97h
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-125, CWE-1288
Updated
2026-11-02
NVD 8.8

In the Linux kernel, the following vulnerability has been resolved:

smb: client: validate the whole DACL before rewriting it in cifsacl

build_sec_desc() and id_mode_to_cifs_acl() derive a DACL pointer from a server-supplied dacloffset and then use the incoming ACL to rebuild the chmod/chown security descriptor.

The original fix only checked that the struct smb_acl header fits before reading dacl_ptr->size or dacl_ptr->num_aces. That avoids the immediate header-field OOB read, but the rewrite helpers still walk ACEs based on pdacl->num_aces with no structural validation of the incoming DACL body.

A malicious server can return a truncated DACL that still contains a header, claims one or more ACEs, and then drive replace_sids_and_copy_aces() or set_chmod_dacl() past the validated extent while they compare or copy attacker-controlled ACEs.

Factor the DACL structural checks into validate_dacl(), extend them to validate each ACE against the DACL bounds, and use the shared validator before the chmod/chown rebuild paths. parse_dacl() reuses the same validator so the read-side parser and write-side rewrite paths agree on what constitutes a well-formed incoming DACL.

Record
CVE-2026-31709
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-125, CWE-1288
Updated
2026-11-02
OSVBELL-CVE-2026-31709 8.8
Record
BELL-CVE-2026-31709
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 8.8

smb: client: validate the whole DACL before rewriting it in cifsacl

In the Linux kernel, the following vulnerability has been resolved:

smb: client: validate the whole DACL before rewriting it in cifsacl

build_sec_desc() and id_mode_to_cifs_acl() derive a DACL pointer from a server-supplied dacloffset and then use the incoming ACL to rebuild the chmod/chown security descriptor.

The original fix only checked that the struct smb_acl header fits before reading dacl_ptr->size or dacl_ptr->num_aces. That avoids the immediate header-field OOB read, but the rewrite helpers still walk ACEs based on pdacl->num_aces with no structural validation of the incoming DACL body.

A malicious server can return a truncated DACL that still contains a header, claims one or more ACEs, and then drive replace_sids_and_copy_aces() or set_chmod_dacl() past the validated extent while they compare or copy attacker-controlled ACEs.

Factor the DACL structural checks into validate_dacl(), extend them to validate each ACE against the DACL bounds, and use the shared validator before the chmod/chown rebuild paths. parse_dacl() reuses the same validator so the read-side parser and write-side rewrite paths agree on what constitutes a well-formed incoming DACL.

Record
CVE-2026-31709
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-06
Show 48 moreShow less
OSVDEBIAN-CVE-2026-31709 8.8

In the Linux kernel, the following vulnerability has been resolved: smb: client: validate the whole DACL before rewriting it in cifsacl build_sec_desc() and id_mode_to_cifs_acl() derive a DACL pointer from a server-supplied dacloffset and then use the incoming ACL to rebuild the chmod/chown security descriptor. The original fix only checked that the struct smb_acl header fits before reading dacl_ptr->size or dacl_ptr->num_aces. That avoids the immediate header-field OOB read, but the rewrite helpers still walk ACEs based on pdacl->num_aces with no structural validation of the incoming DACL body. A malicious server can return a truncated DACL that still contains a header, claims one or more ACEs, and then drive replace_sids_and_copy_aces() or set_chmod_dacl() past the validated extent while they compare or copy attacker-controlled ACEs. Factor the DACL structural checks into validate_dacl(), extend them to validate each ACE against the DACL bounds, and use the shared validator before the chmod/chown rebuild paths. parse_dacl() reuses the same validator so the read-side parser and write-side rewrite paths agree on what constitutes a well-formed incoming DACL.

Record
DEBIAN-CVE-2026-31709
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-2675 9.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

drm/i915/gt: Fix timeline left held on VMA alloc error

The following error has been reported sporadically by CI when a test unbinds the i915 driver on a ring submission platform:

<4> [239.330153] ------------[ cut here ]------------ <4> [239.330166] i915 0000:00:02.0: [drm] drm_WARN_ON(dev_priv->mm.shrink_count) <4> [239.330196] WARNING: CPU: 1 PID: 18570 at drivers/gpu/drm/i915/i915_gem.c:1309 i915_gem_cleanup_early+0x13e/0x150 [i915] ... <4> [239.330640] RIP: 0010:i915_gem_cleanup_early+0x13e/0x150 [i915] ... <4> [239.330942] Call Trace: <4> [239.330944] <TASK> <4> [239.330949] i915_driver_late_release+0x2b/0xa0 [i915] <4> [239.331202] i915_driver_release+0x86/0xa0 [i915] <4> [239.331482] devm_drm_dev_init_release+0x61/0x90 <4> [239.331494] devm_action_release+0x15/0x30 <4> [239.331504] release_nodes+0x3d/0x120 <4> [239.331517] devres_release_all+0x96/0xd0 <4> [239.331533] device_unbind_cleanup+0x12/0x80 <4> [239.331543] device_release_driver_internal+0x23a/0x280 <4> [239.331550] ? bus_find_device+0xa5/0xe0 <4> [239.331563] device_driver_detach+0x14/0x20 ... <4> [357.719679] ---[ end trace 0000000000000000 ]---

If the test also unloads the i915 module then that's followed with:

<3> [357.787478] ============================================================================= <3> [357.788006] BUG i915_vma (Tainted: G U W N ): Objects remaining on __kmem_cache_shutdown() <3> [357.788031] ----------------------------------------------------------------------------- <3> [357.788204] Object 0xffff888109e7f480 @offset=29824 <3> [357.788670] Allocated in i915_vma_instance+0xee/0xc10 [i915] age=292729 cpu=4 pid=2244 <4> [357.788994] i915_vma_instance+0xee/0xc10 [i915] <4> [357.789290] init_status_page+0x7b/0x420 [i915] <4> [357.789532] intel_engines_init+0x1d8/0x980 [i915] <4> [357.789772] intel_gt_init+0x175/0x450 [i915] <4> [357.790014] i915_gem_init+0x113/0x340 [i915] <4> [357.790281] i915_driver_probe+0x847/0xed0 [i915] <4> [357.790504] i915_pci_probe+0xe6/0x220 [i915] ...

Closer analysis of CI results history has revealed a dependency of the error on a few IGT tests, namely:

  • igt@api_intel_allocator@fork-simple-stress-signal,
  • igt@api_intel_allocator@two-level-inception-interruptible,
  • igt@gem_linear_blits@interruptible,
  • igt@prime_mmap_coherency@ioctl-errors, which invisibly trigger the issue, then exhibited with first driver unbind attempt.

All of the above tests perform actions which are actively interrupted with signals. Further debugging has allowed to narrow that scope down to DRM_IOCTL_I915_GEM_EXECBUFFER2, and ring_context_alloc(), specific to ring submission, in particular.

If successful then that function, or its execlists or GuC submission equivalent, is supposed to be called only once per GEM context engine, followed by raise of a flag that prevents the function from being called again. The function is expected to unwind its internal errors itself, so it may be safely called once more after it returns an error.

In case of ring submission, the function first gets a reference to the engine's legacy timeline and then allocates a VMA. If the VMA allocation fails, e.g. when i915_vma_instance() called from inside is interrupted with a signal, then ring_context_alloc() fails, leaving the timeline held referenced. On next I915_GEM_EXECBUFFER2 IOCTL, another reference to the timeline is got, and only that last one is put on successful completion. As a consequence, the legacy timeline, with its underlying engine status page's VMA object, is still held and not released on driver unbind.

Get the legacy timeline only after successful allocation of the…

Record
OESA-2026-2675
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-2676 9.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

parisc: Drop WARN_ON_ONCE() from flush_cache_vmap

I have observed warning to occassionally trigger.(CVE-2025-39781)

In the Linux kernel, the following vulnerability has been resolved:

MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits

Since commit e424054000878 ("MIPS: Tracing: Reduce the overhead of dynamic Function Tracer"), the macro UASM_i_LA_mostly has been used, and this macro can generate more than 2 instructions. At the same time, the code in ftrace assumes that no more than 2 instructions can be generated, which is why it stores them in an int[2] array. However, as previously noted, the macro UASM_i_LA_mostly (and now UASM_i_LA) causes a buffer overflow when _mcount is beyond 32 bits. This leads to corruption of the variables located in the __read_mostly section.

This corruption was observed because the variable __cpu_primary_thread_mask was corrupted, causing a hang very early during boot.

This fix prevents the corruption by avoiding the generation of instructions if they could exceed 2 instructions in length. Fortunately, insn_la_mcount is only used if the instrumented code is located outside the kernel code section, so dynamic ftrace can still be used, albeit in a more limited scope. This is still preferable to corrupting memory and/or crashing the kernel.(CVE-2025-71109)

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/pm: Disable MMIO access during SMU Mode 1 reset

During Mode 1 reset, the ASIC undergoes a reset cycle and becomes temporarily inaccessible via PCIe. Any attempt to access MMIO registers during this window (e.g., from interrupt handlers or other driver threads) can result in uncompleted PCIe transactions, leading to NMI panics or system hangs.

To prevent this, set the no_hw_access flag to true immediately after triggering the reset. This signals other driver components to skip register accesses while the device is offline.

A memory barrier smp_mb() is added to ensure the flag update is globally visible to all cores before the driver enters the sleep/wait state.

(cherry picked from commit 7edb503fe4b6d67f47d8bb0dfafb8e699bb0f8a4)(CVE-2026-23213)

In the Linux kernel, the following vulnerability has been resolved:

btrfs: reject new transactions if the fs is fully read-only

[BUG] There is a bug report where a heavily fuzzed fs is mounted with all rescue mount options, which leads to the following warnings during unmount:

BTRFS: Transaction aborted (error -22) Modules linked in: CPU: 0 UID: 0 PID: 9758 Comm: repro.out Not tainted 6.19.0-rc5-00002-gb71e635feefc #7 PREEMPT(full) Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014 RIP: 0010:find_free_extent_update_loop fs/btrfs/extent-tree.c:4208 [inline] RIP: 0010:find_free_extent+0x52f0/0x5d20 fs/btrfs/extent-tree.c:4611 Call Trace: <TASK> btrfs_reserve_extent+0x2cd/0x790 fs/btrfs/extent-tree.c:4705 btrfs_alloc_tree_block+0x1e1/0x10e0 fs/btrfs/extent-tree.c:5157 btrfs_force_cow_block+0x578/0x2410 fs/btrfs/ctree.c:517 btrfs_cow_block+0x3c4/0xa80 fs/btrfs/ctree.c:708 btrfs_search_slot+0xcad/0x2b50 fs/btrfs/ctree.c:2130 btrfs_truncate_inode_items+0x45d/0x2350 fs/btrfs/inode-item.c:499 btrfs_evict_inode+0x923/0xe70 fs/btrfs/inode.c:5628 evict+0x5f4/0xae0 fs/inode.c:837 __dentry_kill+0x209/0x660 fs/dcache.c:670 finish_dput+0xc9/0x480 fs/dcache.c:879 shrink_dcache_for_umount+0xa0/0x170 fs/dcache.c:1661 generic_shutdown_super+0x67/0x2c0 fs/super.c:621 kill_anon_super+0x3b/0x70 fs/super.c:1289 btrfs_kill_super+0x41/0x50 fs/btrfs/super.c:2127 deactivate_locked_super+0xbc/0x130 fs/super.c:474 cleanup_mnt+0x425/0x4c0 fs/namespace.c:1318 task_work_run+0x1d4/0x260 kernel/task_work.c:233 exit_task_work include/linux/task_work.h:40 [inline] …

Record
OESA-2026-2676
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:21556 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:21556
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:21706 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:21706
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:21745 7.8

Red Hat Security Advisory: kernel-rt security update

Record
RHSA-2026:21745
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:22900 8.8

Red Hat Security Advisory: kernel-rt security update

Record
RHSA-2026:22900
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:22940 8.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:22940
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:23224 8.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:23224
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:23237 8.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:23237
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:23329 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:23329
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:24343 8.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:24343
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:21556 7.8

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CVE-2025-38653)

  • kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)

  • kernel: nbd: defer config unlock in nbd_genl_connect (CVE-2025-68366)

  • kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724)

  • kernel: iommu: disable SVA when CONFIG_X86 is set (CVE-2025-71089)

  • kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392)

  • kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)

  • kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)

  • kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)

  • kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)

  • kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)

  • kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)

  • kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)

  • kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)

  • kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect() (CVE-2026-43023)

  • kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110)

  • kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)

  • kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)

  • kernel: mm/page_alloc: clear page->private in free_pages_prepare() (CVE-2026-43303)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:21556
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:21706 7.8

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)

  • kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)

  • kernel: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CVE-2025-68347)

  • kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116)

  • kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)

  • kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)

  • kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)

  • kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)

  • kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)

  • kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)

  • kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)

  • kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)

  • kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)

  • kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)

  • kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)

  • kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)

  • kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)

  • kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:21706
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:21745 7.8

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)

  • kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)

  • kernel: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CVE-2025-68347)

  • kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116)

  • kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)

  • kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)

  • kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)

  • kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)

  • kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)

  • kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)

  • kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)

  • kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)

  • kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)

  • kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)

  • kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)

  • kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)

  • kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)

  • kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:21745
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2026-31709 7.1

CVE-2026-31709 in linux - Patched by Root

Root has patched CVE-2026-31709 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2026-31709
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-13-CVE-2026-31709 7.1

CVE-2026-31709 in linux - Patched by Root

Root has patched CVE-2026-31709 in the linux package for Root:Debian:13. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-13-CVE-2026-31709
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-03
OSVROOT-OS-UBUNTU-2204-CVE-2026-31709 7.1

CVE-2026-31709 in linux - Patched by Root

Root has patched CVE-2026-31709 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2204-CVE-2026-31709
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-06
OSVROOT-OS-UBUNTU-2404-CVE-2026-31709 7.1

CVE-2026-31709 in linux - Patched by Root

Root has patched CVE-2026-31709 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2404-CVE-2026-31709
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-06
OSVUBUNTU-CVE-2026-31709 7.1

In the Linux kernel, the following vulnerability has been resolved: smb: client: validate the whole DACL before rewriting it in cifsacl build_sec_desc() and id_mode_to_cifs_acl() derive a DACL pointer from a server-supplied dacloffset and then use the incoming ACL to rebuild the chmod/chown security descriptor. The original fix only checked that the struct smb_acl header fits before reading dacl_ptr->size or dacl_ptr->num_aces. That avoids the immediate header-field OOB read, but the rewrite helpers still walk ACEs based on pdacl->num_aces with no structural validation of the incoming DACL body. A malicious server can return a truncated DACL that still contains a header, claims one or more ACEs, and then drive replace_sids_and_copy_aces() or set_chmod_dacl() past the validated extent while they compare or copy attacker-controlled ACEs. Factor the DACL structural checks into validate_dacl(), extend them to validate each ACE against the DACL bounds, and use the shared validator before the chmod/chown rebuild paths. parse_dacl() reuses the same validator so the read-side parser and write-side rewrite paths agree on what constitutes a well-formed incoming DACL.

Record
UBUNTU-CVE-2026-31709
CVSS 4.0
7.1 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVALSA-2026:21556 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CVE-2025-38653)
  • kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)
  • kernel: nbd: defer config unlock in nbd_genl_connect (CVE-2025-68366)
  • kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724)
  • kernel: iommu: disable SVA when CONFIG_X86 is set (CVE-2025-71089)
  • kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392)
  • kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)
  • kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)
  • kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)
  • kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)
  • kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)
  • kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)
  • kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)
  • kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)
  • kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect() (CVE-2026-43023)
  • kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110)
  • kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)
  • kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)
  • kernel: mm/page_alloc: clear page->private in free_pages_prepare() (CVE-2026-43303)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:21556
Updated
2026-11-02
OSVALSA-2026:21706 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)
  • kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)
  • kernel: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CVE-2025-68347)
  • kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116)
  • kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)
  • kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
  • kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)
  • kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)
  • kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)
  • kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)
  • kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)
  • kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)
  • kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)
  • kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)
  • kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)
  • kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)
  • kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)
  • kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:21706
Updated
2026-11-02
OSVALSA-2026:21745 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)
  • kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)
  • kernel: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CVE-2025-68347)
  • kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116)
  • kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)
  • kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
  • kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)
  • kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)
  • kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)
  • kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)
  • kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)
  • kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)
  • kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)
  • kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)
  • kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)
  • kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)
  • kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)
  • kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:21745
Updated
2026-11-02
OSVALSA-2026:23329 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CVE-2025-38653)
  • kernel: nbd: defer config unlock in nbd_genl_connect (CVE-2025-68366)
  • kernel: smb: client: fix OOB reads parsing symlink error response (CVE-2026-31613)
  • kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)
  • kernel: netfilter: flowtable: strictly check for maximum number of actions (CVE-2026-43329)
  • kernel: Bluetooth: hci_sync: Fix UAF in le_read_features_complete (CVE-2026-43322)
  • kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions (CVE-2026-46243)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:23329
Updated
2026-11-02
OSVAZL-85386 No score

CVE-2026-31709 affecting package kernel for versions less than 6.6.141.1-1

In the Linux kernel, the following vulnerability has been resolved:

smb: client: validate the whole DACL before rewriting it in cifsacl

build_sec_desc() and id_mode_to_cifs_acl() derive a DACL pointer from a server-supplied dacloffset and then use the incoming ACL to rebuild the chmod/chown security descriptor.

The original fix only checked that the struct smb_acl header fits before reading dacl_ptr->size or dacl_ptr->num_aces. That avoids the immediate header-field OOB read, but the rewrite helpers still walk ACEs based on pdacl->num_aces with no structural validation of the incoming DACL body.

A malicious server can return a truncated DACL that still contains a header, claims one or more ACEs, and then drive replace_sids_and_copy_aces() or set_chmod_dacl() past the validated extent while they compare or copy attacker-controlled ACEs.

Factor the DACL structural checks into validate_dacl(), extend them to validate each ACE against the DACL bounds, and use the shared validator before the chmod/chown rebuild paths. parse_dacl() reuses the same validator so the read-side parser and write-side rewrite paths agree on what constitutes a well-formed incoming DACL.

Record
AZL-85386
Updated
2026-11-05
OSVCLSA-2026-1781344094 No score

kernel: Fix of 93 CVEs

  • irqchip: Fix refcount leak in platform_irqchip_probe {CVE-2023-53610}
  • IB/hfi1: Fix a memleak in init_credit_return {CVE-2024-26839}
  • RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() {CVE-2026-23335}
  • wifi: brcmfmac: validate bsscfg indices in IF events {CVE-2026-43110}
  • wifi: rtlwifi: 8192cu: fix tid out of range in rtl92cu_tx_fill_desc() {CVE-2025-71100}
  • RDMA/core: always drop device refcount in ib_del_sub_device_and_put() {CVE-2025-71157}
  • drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table {CVE-2024-58052}
  • ionic: Fix netdev notifier unregister on failure {CVE-2024-56715}
  • uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind {CVE-2024-46739}
  • netfilter: xt_tcpmss: check remaining length before reading optlen {CVE-2026-43190}
  • usb: typec: altmodes/displayport: do not index invalid pin_assignments {CVE-2025-38391}
  • crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init {CVE-2023-52616}
  • eventpoll: defer struct eventpoll free to RCU grace period {CVE-2026-43074}
  • wifi: brcmsmac: Fix dma_free_coherent() size {CVE-2026-31661}
  • SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf {CVE-2025-71120}
  • netfilter: nf_conntrack_expect: skip expectations in other netns via proc {CVE-2026-31496}
  • platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data {CVE-2026-23370}
  • crypto: bcm - add error check in the ahash_hmac_init function {CVE-2024-56681}
  • nvme-pci: ensure we're polling a polled queue {CVE-2026-31523}
  • mmc: vub300: fix NULL-deref on disconnect {CVE-2026-31651}
  • kernel/irq/irqdomain.c: fix memory leak with using debugfs_lookup() {CVE-2023-52936}
  • ipmi: ipmb: Add check devm_kasprintf() returned value {CVE-2024-58051}
  • net: usb: pegasus: fix memory leak in update_eth_regs_async() {CVE-2026-23021}
  • ASoC: amd: fix memory leak in acp3x pdm dma ops {CVE-2026-23190}
  • udp: Deal with race between UDP socket address change and rehash {CVE-2024-57974}
  • team: avoid NETDEV_CHANGEMTU event when unregistering slave {CVE-2026-43234}
  • tcp: secure_seq: add back ports to TS offset {CVE-2026-23247}
  • udp: Fix wildcard bind conflict check when using hash2 {CVE-2026-31503}
  • netfilter: nft_set_pipapo: prevent overflow in lookup table allocation {CVE-2025-38162}
  • rxrpc: Fix recv-recv race of completed call {CVE-2025-38524}
  • netfilter: nf_tables: reject duplicate device on updates {CVE-2025-38678}
  • nf_tables: nft_dynset: fix possible stateful expression memleak in error path {CVE-2026-23399}
  • crypto: af_alg - limit RX SG extraction by receive buffer budget {CVE-2026-31677}
  • xfrm: account XFRMA_IF_ID in aevent size calculation {CVE-2026-43107}
  • KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop {CVE-2025-21839}
  • perf: Fix sample vs do_exit() {CVE-2025-38424}
  • netfilter: nf_tables: avoid chain re-validation if possible {CVE-2025-71160}
  • ksm: use range-walk function to jump over holes in scan_get_next_rmap_item {CVE-2025-68211}
  • net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime {CVE-2025-38470}
  • net: add proper RCU protection to /proc/net/ptype {CVE-2026-23255}
  • ALSA: ctxfi: Check the error for index mapping {CVE-2026-31777}
  • rseq: Fix segfault on registration when rseq_cs is non-zero {CVE-2025-38067}
  • RDMA/core: Don't expose hw_counters outside of init net namespace {CVE-2025-22089}
  • net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv {CVE-2026-22996}
  • Input: synaptics - fix crash when enabling pass-through port {CVE-2025-21746}
  • wireguard: device: use exit_rtnl callback instead of manual rtnl_lock in pre_exit {CVE-2026-31579}
  • ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use() {CVE-2025-38305}
  • driver core: fix potential NULL pointer dereference in dev_uevent() {CVE-2025-37800}
  • dm: fix NULL pointer dereference in __dm_suspend() {CVE-2025-40134}
  • net: let net.core.dev_weight always be non-zero {CVE-2025-21806}
  • exec:…
Record
CLSA-2026-1781344094
Updated
2026-11-02
OSVCLSA-2026-1783362244 No score

kernel: Fix of 122 CVEs

  • KVM: x86: Fix shadow paging use-after-free due to unexpected role {CVE-2026-46113}
  • KVM: x86: Fix shadow paging use-after-free due to unexpected GFN {CVE-2026-46113}
  • Bluetooth: bcsp: receive data only if registered {CVE-2025-40308}
  • xen/privcmd: unregister xenstore notifier on module exit {CVE-2026-31788}
  • xen/privcmd: restrict usage in unprivileged domU {CVE-2026-31788}
  • USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts {CVE-2026-43429}
  • net: usb: rtl8150: enable basic endpoint checking {CVE-2025-21708}
  • net: usb: kaweth: validate USB endpoints {CVE-2026-23312}
  • net: usb: kalmia: validate USB endpoints {CVE-2026-23365}
  • net: usb: pegasus: validate USB endpoints {CVE-2026-23290}
  • net: usb: pegasus: enable basic endpoint checking {CVE-2026-43156}
  • USB: usbcore: Introduce usb_bulk_msg_killable() {CVE-2026-43429}
  • USB: core: Add routines for endpoint checks in old drivers {CVE-2026-43156}
  • nf_tables: nft_dynset: fix possible stateful expression memleak in error path {CVE-2026-23399}
  • tpm: Cap the number of PCR banks {CVE-2025-71077}
  • clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() {CVE-2023-53704}
  • dm: fix a race condition in retrieve_deps {CVE-2023-54324}
  • ice: fix Tx scheduler error handling in XDP callback {CVE-2025-38127}
  • mlx5: fix skb leak while fifo resync and push {CVE-2023-54238}
  • mmc: vub300: fix return value check of mmc_add_host() {CVE-2022-50251}
  • bonding: annotate data-races around slave->last_rx {CVE-2026-23212}
  • RDMA/irdma: Fix data race on CQP completion stats {CVE-2023-54302}
  • bpf: cpumap: Fix memory leak in cpu_map_update_elem {CVE-2023-53441}
  • fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var {CVE-2025-38215}
  • trace/fgraph: Fix the warning caused by missing unregister notifier {CVE-2025-39829}
  • vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects {CVE-2025-39850}
  • team: prevent adding a device which is already a team device lower {CVE-2024-58071}
  • net: stmmac: move the EST lock to struct stmmac_priv {CVE-2024-38594}
  • drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too {CVE-2024-50108}
  • rxrpc: Fix handling of received connection abort {CVE-2024-58053}
  • bnxt_en: Fix out-of-bound memcpy() during ethtool -w {CVE-2025-37911}
  • scsi: storvsc: Ratelimit warning logs to prevent VM denial of service {CVE-2025-21690}
  • net: atlantic: Fix DMA mapping for PTP hwts ring {CVE-2024-26680}
  • wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop() {CVE-2024-47713}
  • drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2) {CVE-2024-49905}
  • dm: fix NULL pointer dereference in __dm_suspend() {CVE-2025-40134}
  • smb: client: validate the whole DACL before rewriting it in cifsacl {CVE-2026-31709}
  • PM: runtime: Fix a race condition related to device removal {CVE-2026-23452}
  • ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces {CVE-2026-43436}
  • nvme-pci: Fix race bug in nvme_poll_irqdisable() {CVE-2026-43448}
  • sctp: add mutual exclusion in proc_sctp_do_udp_port() {CVE-2025-22062}
  • cachefiles: fix dentry leak in cachefiles_open_file() {CVE-2024-49870}
  • mm: revert "mm: shmem: fix data-race in shmem_getattr()" {CVE-2024-53136}
  • memcg: fix soft lockup in the OOM process {CVE-2024-57977}
  • resource: fix region_intersects() vs add_memory_driver_managed() {CVE-2024-49878}
  • r8169: add tally counter fields added with RTL8125 {CVE-2024-49973}
  • svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() {CVE-2024-53215}
  • ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths {CVE-2026-43066}
  • wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band() {CVE-2025-71273}
  • net: netlink: af_netlink: Prevent empty skb by adding a check on len. {CVE-2021-47606}
  • extcon: Modify extcon device to be created after driver data is set {CVE-2022-49308}
  • tick/nohz: unexport __init-annotated tick_nohz_full_setup() {CVE-2022-49675}
  • bridge:…
Record
CLSA-2026-1783362244
Updated
2026-11-02
OSVopenSUSE-SU-2026:10793-1 No score

kernel-devel-7.0.7-1.1 on GA media

These are all security issues fixed in the kernel-devel-7.0.7-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10793-1
Updated
2026-11-02
OSVSUSE-SU-2026:24550-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68219: cifs: fix memory leak in smb3_fs_context_parse_param error path (bsc#1255222).
  • CVE-2026-31708: smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path (bsc#1264022).
  • CVE-2026-31709: smb: client: validate the whole DACL before rewriting it in cifsacl (bsc#1264024).
  • CVE-2026-43350: smb: client: require a full NFS mode SID before reading mode bits (bsc#1264985).
  • CVE-2026-46155: smb/client: fix out-of-bounds read in smb2_compound_op() (bsc#1267720).
  • CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970).
  • CVE-2026-64370: posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (bsc#1273805).
  • CVE-2026-64380: smb: client: harden POSIX SID length parsing (bsc#1273557).
  • CVE-2026-64413: netfilter: ebtables: zero chainstack array (bsc#1274082).
  • CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080).
  • CVE-2026-68186: binfmt_misc: set have_execfd only once the interpreter is opened (bsc#1274949).
  • CVE-2026-68447: drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size (bsc#1276280).
  • CVE-2026-72010: cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed (bsc#1276776).
  • CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
  • CVE-2026-72111: bpf: Reset register bounds before narrowing retval range in check_mem_access() (bsc#1277389).
  • CVE-2026-72127: netdev-genl: report NAPI thread PID in the caller's pid namespace (bsc#1277542).
  • CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663).
  • CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665).
  • CVE-2026-72318: cifs: validate DFS referral string offsets (bsc#1275939).
  • CVE-2026-72400: seg6: validate SRH length before reading fixed fields (bsc#1278030).
  • CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033).
  • CVE-2026-72416: netfilter: nft_compat: ebtables emulation must reject non-bridge targets (bsc#1278041).
  • CVE-2026-72428: bpf: Fix stack slot index in nospec checks (bsc#1278050).
  • CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103).
  • CVE-2026-74399: evm: terminate and bound the evm_xattrs read buffer (bsc#1278319).
  • CVE-2026-74565: netfilter: nf_tables: make nft_object rhltable per table (bsc#1275568).
  • CVE-2026-74613: vsock/virtio: avoid refilling the RX queue after teardown (bsc#1277903).
  • CVE-2026-74620: net/sched: act_gact, act_police: range check the fallback control action (bsc#1277044).
  • CVE-2026-74624: netfilter: nf_conntrack: defer invalid log until after unlock (bsc#1277599).
  • CVE-2026-74715: net: netfilter: Make ct zone opts configurable for bpf ct helpers (bsc#1277890).
  • CVE-2026-74720: bpf: Preserve pointer state for commuted arithmetic (bsc#1276574).
  • CVE-2026-74746: netfilter: flowtable: publish GC-visible tuple last (bsc#1278101).
  • CVE-2026-74748: netfilter: ipset: fix refcount race between list:set GC and swap (bsc#1277578).
  • CVE-2026-80572: Input: byd - synchronize timer deletion before freeing private data (bsc#1277338).
  • CVE-2026-80602: perf/x86/amd/lbr: Fix kernel address leakage (bsc#1278123).
  • CVE-2026-80637: netfilter: synproxy: fix unaligned memory access in timestamp adjustment (bsc#1278343).
  • CVE-2026-80684: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure (bsc#1277467).
  • CVE-2026-80709: s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs (bsc#1278202).
  • CVE-2026-80717: sctp: validate Adaptation Indication parameter length (bsc#1277836).
  • CVE-2026-80755: selinux: reject a permission value exceeding the class permission count (bsc#1278415).
  • CVE-2026-80757: selinux: reject a…
Record
SUSE-SU-2026:24550-1
Updated
2026-11-06
OSVSUSE-SU-2026:5091-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68219: cifs: fix memory leak in smb3_fs_context_parse_param error path (bsc#1255222).
  • CVE-2026-31708: smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path (bsc#1264022).
  • CVE-2026-31709: smb: client: validate the whole DACL before rewriting it in cifsacl (bsc#1264024).
  • CVE-2026-43350: smb: client: require a full NFS mode SID before reading mode bits (bsc#1264985).
  • CVE-2026-46155: smb/client: fix out-of-bounds read in smb2_compound_op() (bsc#1267720).
  • CVE-2026-64370: posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (bsc#1273805).
  • CVE-2026-64380: smb: client: harden POSIX SID length parsing (bsc#1273557).
  • CVE-2026-64430: NTB: epf: Avoid calling pci_irq_vector() from hardirq context (bsc#1274257).
  • CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080).
  • CVE-2026-68186: binfmt_misc: set have_execfd only once the interpreter is opened (bsc#1274949).
  • CVE-2026-68436: drm/amd/display: use kvzalloc to allocate struct dc (bsc#1276275).
  • CVE-2026-68447: drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size (bsc#1276280).
  • CVE-2026-68460: f2fs: fix potential deadlock in f2fs_balance_fs() (bsc#1276774).
  • CVE-2026-72010: cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed (bsc#1276776).
  • CVE-2026-72073: mmc: vub300: fix use-after-free on probe failure (bsc#1277157).
  • CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
  • CVE-2026-72111: bpf: Reset register bounds before narrowing retval range in check_mem_access() (bsc#1277389).
  • CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663).
  • CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665).
  • CVE-2026-72318: cifs: validate DFS referral string offsets (bsc#1275939).
  • CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033).
  • CVE-2026-72416: netfilter: nft_compat: ebtables emulation must reject non-bridge targets (bsc#1278041).
  • CVE-2026-72428: bpf: Fix stack slot index in nospec checks (bsc#1278050).
  • CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103).
  • CVE-2026-74472: ublk: reset kernel-owned dev_info fields in ublk_ctrl_add_dev() (bsc#1277785).
  • CVE-2026-74613: vsock/virtio: avoid refilling the RX queue after teardown (bsc#1277903).
  • CVE-2026-74620: net/sched: act_gact, act_police: range check the fallback control action (bsc#1277044).
  • CVE-2026-74624: netfilter: nf_conntrack: defer invalid log until after unlock (bsc#1277599).
  • CVE-2026-74715: net: netfilter: Make ct zone opts configurable for bpf ct helpers (bsc#1277890).
  • CVE-2026-74746: netfilter: flowtable: publish GC-visible tuple last (bsc#1278101).
  • CVE-2026-74748: netfilter: ipset: fix refcount race between list:set GC and swap (bsc#1277578).
  • CVE-2026-80572: Input: byd - synchronize timer deletion before freeing private data (bsc#1277338).
  • CVE-2026-80602: perf/x86/amd/lbr: Fix kernel address leakage (bsc#1278123).
  • CVE-2026-80637: netfilter: synproxy: fix unaligned memory access in timestamp adjustment (bsc#1278343).
  • CVE-2026-80717: sctp: validate Adaptation Indication parameter length (bsc#1277836).
  • CVE-2026-80755: selinux: reject a permission value exceeding the class permission count (bsc#1278415).
  • CVE-2026-80757: selinux: reject a class permission count below its inherited common (bsc#1278711).
  • CVE-2026-80808: ext4: stop retrying saturated xattr cache entries (bsc#1279795).
  • CVE-2026-80809: ocfs2: fix missing metadata reservation for large xattrs (bsc#1279606).
  • CVE-2026-80855: fuse: fix invalidate lock leak on open O_TRUNC DAX failure (bsc#1279564).
  • CVE-2026-80879: ocfs2: fix circular locking dependency…
Record
SUSE-SU-2026:5091-1
Updated
2026-11-04
OSVUSN-8488-1 No score

linux, linux-aws, linux-gcp, linux-ibm, linux-oracle, linux-realtime vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Rados block device (RBD) driver;
  • Compressed RAM block device driver;
  • Character device driver;
  • TPM device driver;
  • Hardware crypto device drivers;
  • EDAC drivers;
  • GPU drivers;
  • Greybus drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • IBM Advanced System Management driver;
  • MTD block device drivers;
  • Network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • NTB driver;
  • NVME drivers;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • Remote Processor subsystem;
  • SCSI subsystem;
  • SPI subsystem;
  • Realtek RTL8723BS SDIO drivers;
  • SM750 framebuffer staging driver;
  • Thermal drivers;
  • USB Gadget drivers;
  • USB over IP driver;
  • VFIO drivers;
  • Framebuffer layer;
  • 9P distributed file system;
  • AFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • Journaling layer for block devices (JBD2);
  • NILFS2 file system;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • SMB network file system;
  • UDF file system;
  • XFS file system;
  • Codetag library;
  • Memory management;
  • Memory Management;
  • KVM subsystem;
  • Tracing infrastructure;
  • User-space API (UAPI);
  • io_uring subsystem;
  • Locking primitives;
  • Timer subsystem;
  • Scatterlist API;
  • Heterogeneous memory management;
  • KASAN memory debugging framework;
  • Bluetooth subsystem;
  • Ethernet bridge;
  • CAIF protocol;
  • CAN network layer;
  • Ceph Core library;
  • IPv4 networking;
  • IPv6 networking;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • Packet sockets;
  • Qualcomm IPC Router (QRTR);
  • RDS protocol;
  • RxRPC session sockets;
  • SMC sockets;
  • Stream parser;
  • Landlock security;
  • SELinux security module;
  • ALSA framework;
  • Generic PCM loopback sound driver;
  • FireWire sound drivers;
  • Creative Sound Blaster X-Fi driver;
  • QCOM ASoC drivers;
  • USB sound devices;
  • Objtool; (CVE-2026-31532, CVE-2026-31574, CVE-2026-31575, CVE-2026-31576, CVE-2026-31577, CVE-2026-31578, CVE-2026-31579, CVE-2026-31580, CVE-2026-31581, CVE-2026-31582, CVE-2026-31583, CVE-2026-31584, CVE-2026-31585, CVE-2026-31586, CVE-2026-31587, CVE-2026-31588, CVE-2026-31589, CVE-2026-31590, CVE-2026-31591, CVE-2026-31592, CVE-2026-31593, CVE-2026-31594, CVE-2026-31595, CVE-2026-31596, CVE-2026-31597, CVE-2026-31598, CVE-2026-31599, CVE-2026-31600, CVE-2026-31601, CVE-2026-31602, CVE-2026-31603, CVE-2026-31604, CVE-2026-31605, CVE-2026-31606, CVE-2026-31607, CVE-2026-31608, CVE-2026-31609, CVE-2026-31610, CVE-2026-31611, CVE-2026-31612, CVE-2026-31613, CVE-2026-31614, CVE-2026-31615, CVE-2026-31616, CVE-2026-31617, CVE-2026-31618, CVE-2026-31619, CVE-2026-31620, CVE-2026-31621, CVE-2026-31622, CVE-2026-31623, CVE-2026-31624, CVE-2026-31625, CVE-2026-31626, CVE-2026-31627, CVE-2026-31628, CVE-2026-31629, CVE-2026-31686, CVE-2026-31694, CVE-2026-31696, CVE-2026-31697, CVE-2026-31698, CVE-2026-31699, CVE-2026-31700, CVE-2026-31701, CVE-2026-31702, CVE-2026-31703, CVE-2026-31704, CVE-2026-31705, CVE-2026-31706, CVE-2026-31707, CVE-2026-31708, CVE-2026-31709, CVE-2026-31710, CVE-2026-31711,…
Record
USN-8488-1
Updated
2026-11-07
OSVUSN-8488-2 No score

linux-raspi vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Rados block device (RBD) driver;
  • Compressed RAM block device driver;
  • Character device driver;
  • TPM device driver;
  • Hardware crypto device drivers;
  • EDAC drivers;
  • GPU drivers;
  • Greybus drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • IBM Advanced System Management driver;
  • MTD block device drivers;
  • Network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • NTB driver;
  • NVME drivers;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • Remote Processor subsystem;
  • SCSI subsystem;
  • SPI subsystem;
  • Realtek RTL8723BS SDIO drivers;
  • SM750 framebuffer staging driver;
  • Thermal drivers;
  • USB Gadget drivers;
  • USB over IP driver;
  • VFIO drivers;
  • Framebuffer layer;
  • 9P distributed file system;
  • AFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • Journaling layer for block devices (JBD2);
  • NILFS2 file system;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • SMB network file system;
  • UDF file system;
  • XFS file system;
  • Codetag library;
  • Memory management;
  • Memory Management;
  • KVM subsystem;
  • Tracing infrastructure;
  • User-space API (UAPI);
  • io_uring subsystem;
  • Locking primitives;
  • Timer subsystem;
  • Scatterlist API;
  • Heterogeneous memory management;
  • KASAN memory debugging framework;
  • Bluetooth subsystem;
  • Ethernet bridge;
  • CAIF protocol;
  • CAN network layer;
  • Ceph Core library;
  • IPv4 networking;
  • IPv6 networking;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • Packet sockets;
  • Qualcomm IPC Router (QRTR);
  • RDS protocol;
  • RxRPC session sockets;
  • SMC sockets;
  • Stream parser;
  • Landlock security;
  • SELinux security module;
  • ALSA framework;
  • Generic PCM loopback sound driver;
  • FireWire sound drivers;
  • Creative Sound Blaster X-Fi driver;
  • QCOM ASoC drivers;
  • USB sound devices;
  • Objtool; (CVE-2026-31532, CVE-2026-31574, CVE-2026-31575, CVE-2026-31576, CVE-2026-31577, CVE-2026-31578, CVE-2026-31579, CVE-2026-31580, CVE-2026-31581, CVE-2026-31582, CVE-2026-31583, CVE-2026-31584, CVE-2026-31585, CVE-2026-31586, CVE-2026-31587, CVE-2026-31588, CVE-2026-31589, CVE-2026-31590, CVE-2026-31591, CVE-2026-31592, CVE-2026-31593, CVE-2026-31594, CVE-2026-31595, CVE-2026-31596, CVE-2026-31597, CVE-2026-31598, CVE-2026-31599, CVE-2026-31600, CVE-2026-31601, CVE-2026-31602, CVE-2026-31603, CVE-2026-31604, CVE-2026-31605, CVE-2026-31606, CVE-2026-31607, CVE-2026-31608, CVE-2026-31609, CVE-2026-31610, CVE-2026-31611, CVE-2026-31612, CVE-2026-31613, CVE-2026-31614, CVE-2026-31615, CVE-2026-31616, CVE-2026-31617, CVE-2026-31618, CVE-2026-31619, CVE-2026-31620, CVE-2026-31621, CVE-2026-31622, CVE-2026-31623, CVE-2026-31624, CVE-2026-31625, CVE-2026-31626, CVE-2026-31627, CVE-2026-31628, CVE-2026-31629, CVE-2026-31686, CVE-2026-31694, CVE-2026-31696, CVE-2026-31697, CVE-2026-31698, CVE-2026-31699, CVE-2026-31700, CVE-2026-31701, CVE-2026-31702, CVE-2026-31703, CVE-2026-31704, CVE-2026-31705, CVE-2026-31706, CVE-2026-31707, CVE-2026-31708, CVE-2026-31709, CVE-2026-31710, CVE-2026-31711,…
Record
USN-8488-2
Updated
2026-11-07
OSVUSN-8507-1 No score

linux-nvidia vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Rados block device (RBD) driver;
  • Compressed RAM block device driver;
  • Character device driver;
  • TPM device driver;
  • Hardware crypto device drivers;
  • EDAC drivers;
  • GPU drivers;
  • Greybus drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • IBM Advanced System Management driver;
  • MTD block device drivers;
  • Network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • NTB driver;
  • NVME drivers;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • Remote Processor subsystem;
  • SCSI subsystem;
  • SPI subsystem;
  • Realtek RTL8723BS SDIO drivers;
  • SM750 framebuffer staging driver;
  • Thermal drivers;
  • USB Gadget drivers;
  • USB over IP driver;
  • VFIO drivers;
  • Framebuffer layer;
  • 9P distributed file system;
  • AFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • Journaling layer for block devices (JBD2);
  • NILFS2 file system;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • SMB network file system;
  • UDF file system;
  • XFS file system;
  • Codetag library;
  • Memory management;
  • Memory Management;
  • KVM subsystem;
  • Tracing infrastructure;
  • User-space API (UAPI);
  • io_uring subsystem;
  • Locking primitives;
  • Timer subsystem;
  • Scatterlist API;
  • Heterogeneous memory management;
  • KASAN memory debugging framework;
  • Bluetooth subsystem;
  • Ethernet bridge;
  • CAIF protocol;
  • CAN network layer;
  • Ceph Core library;
  • IPv4 networking;
  • IPv6 networking;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • Packet sockets;
  • Qualcomm IPC Router (QRTR);
  • RDS protocol;
  • RxRPC session sockets;
  • SMC sockets;
  • Stream parser;
  • Landlock security;
  • SELinux security module;
  • ALSA framework;
  • Generic PCM loopback sound driver;
  • FireWire sound drivers;
  • Creative Sound Blaster X-Fi driver;
  • QCOM ASoC drivers;
  • USB sound devices;
  • Objtool; (CVE-2026-31532, CVE-2026-31574, CVE-2026-31575, CVE-2026-31576, CVE-2026-31577, CVE-2026-31578, CVE-2026-31579, CVE-2026-31580, CVE-2026-31581, CVE-2026-31582, CVE-2026-31583, CVE-2026-31584, CVE-2026-31585, CVE-2026-31586, CVE-2026-31587, CVE-2026-31588, CVE-2026-31589, CVE-2026-31590, CVE-2026-31591, CVE-2026-31592, CVE-2026-31593, CVE-2026-31594, CVE-2026-31595, CVE-2026-31596, CVE-2026-31597, CVE-2026-31598, CVE-2026-31599, CVE-2026-31600, CVE-2026-31601, CVE-2026-31602, CVE-2026-31603, CVE-2026-31604, CVE-2026-31605, CVE-2026-31606, CVE-2026-31607, CVE-2026-31608, CVE-2026-31609, CVE-2026-31610, CVE-2026-31611, CVE-2026-31612, CVE-2026-31613, CVE-2026-31614, CVE-2026-31615, CVE-2026-31616, CVE-2026-31617, CVE-2026-31618, CVE-2026-31619, CVE-2026-31620, CVE-2026-31621, CVE-2026-31622, CVE-2026-31623, CVE-2026-31624, CVE-2026-31625, CVE-2026-31626, CVE-2026-31627, CVE-2026-31628, CVE-2026-31629, CVE-2026-31686, CVE-2026-31694, CVE-2026-31696, CVE-2026-31697, CVE-2026-31698, CVE-2026-31699, CVE-2026-31700, CVE-2026-31701, CVE-2026-31702, CVE-2026-31703, CVE-2026-31704, CVE-2026-31705, CVE-2026-31706, CVE-2026-31707, CVE-2026-31708, CVE-2026-31709, CVE-2026-31710, CVE-2026-31711,…
Record
USN-8507-1
Updated
2026-11-07
OSVUSN-8567-1 No score

linux, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-realtime, linux-realtime-6.8 vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • Power management core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • Counter interface drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • DMA engine subsystem;
  • EDAC drivers;
  • EFI core;
  • GPU drivers;
  • Greybus drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MediaTek SMI driver;
  • NVIDIA Tegra memory controller driver;
  • Fastrpc Driver;
  • IBM Advanced System Management driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Ethernet team driver;
  • MediaTek network drivers;
  • Near Field Communication (NFC) drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Broadcom BCM2835 power domain driver;
  • Generic PM domains;
  • i.MX PM domains;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • Freescale SoC drivers;
  • Microchip PolarFire SoC system controller driver;
  • SPI subsystem;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • SM750 framebuffer staging driver;
  • TCM subsystem;
  • Thermal drivers;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • USB core drivers;
  • DesignWare USB2 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Mustek MDC800 USB digital camera driver;
  • USB YUREX driver;
  • Renesas USBHS Controller drivers;
  • USB Type-C Connector System Software Interface driver;
  • VFIO drivers;
  • Framebuffer layer;
  • TSM TDX Guest driver;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS+ file system;
  • Journaling layer for block devices (JBD2);
  • Network file systems library;
  • Network…
Record
USN-8567-1
Updated
2026-11-07
OSVUSN-8569-1 No score

linux-hwe-7.0 vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43284, CVE-2026-43500, CVE-2026-45998, CVE-2026-46000)

It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43503, CVE-2026-46300)

Qualys discovered that a race condition existed in the ptrace subsystem of the Linux kernel when privileged processes are exiting. An unprivileged local attacker could use this issue to expose sensitive information. (CVE-2026-46333)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contain a memory leak when handling AppArmor notifications. A local attacker could use this to cause resource exhaustion. (CVE-2026-47326)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contain a NULL pointer dereference when handling AppArmor notifications. A local attacker could use this to cause a kernel oops. (CVE-2026-47327)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained an invalid free when handling AppArmor notifications. A local attacker could use this to corrupt kernel memory. (CVE-2026-47328)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained insufficient validation of AppArmor notification responses. A local attacker could use this to allow crafted responses to be processed. (CVE-2026-47329)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 used an uninitialized variable when handling AppArmor notifications. A local attacker could use this to cause incorrect caching of data. (CVE-2026-47330)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained an out-of-bounds (OOB) read when handling AppArmor notifications. A local attacker could use this to cause information disclosure of kernel memory. (CVE-2026-47332)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained a out-of-bounds (OOB) read when handling AppArmor notifications. A local attacker could use this to cause kernel memory corruption and, theoretically, influence processing of AppArmor policies. (CVE-2026-47333)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained incorrect holding of locks when handling AppArmor notifications. A local attacker could use this to cause a kernel panic or deadlock. (CVE-2026-47334)

Tristan Madani and Trevor Lawrence have each independently discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained a NULL pointer dereference when handling AppArmor network socket mediation. A local attacker could use this to cause a kernel oops. (CVE-2026-47337)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PSP security protocol;
  • ARM64 architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Intel…
Record
USN-8569-1
Updated
2026-11-07
OSVUSN-8574-1 No score

linux-gcp-fips vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • Power management core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • Counter interface drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • DMA engine subsystem;
  • EDAC drivers;
  • EFI core;
  • GPU drivers;
  • Greybus drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MediaTek SMI driver;
  • NVIDIA Tegra memory controller driver;
  • Fastrpc Driver;
  • IBM Advanced System Management driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Ethernet team driver;
  • MediaTek network drivers;
  • Near Field Communication (NFC) drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Broadcom BCM2835 power domain driver;
  • Generic PM domains;
  • i.MX PM domains;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • Freescale SoC drivers;
  • Microchip PolarFire SoC system controller driver;
  • SPI subsystem;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • SM750 framebuffer staging driver;
  • TCM subsystem;
  • Thermal drivers;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • USB core drivers;
  • DesignWare USB2 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Mustek MDC800 USB digital camera driver;
  • USB YUREX driver;
  • Renesas USBHS Controller drivers;
  • USB Type-C Connector System Software Interface driver;
  • VFIO drivers;
  • Framebuffer layer;
  • TSM TDX Guest driver;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS+ file system;
  • Journaling layer for block devices (JBD2);
  • Network file systems library;
  • Network…
Record
USN-8574-1
Updated
2026-11-07
OSVUSN-8574-2 No score

linux-fips, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • Power management core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • Counter interface drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • DMA engine subsystem;
  • EDAC drivers;
  • EFI core;
  • GPU drivers;
  • Greybus drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MediaTek SMI driver;
  • NVIDIA Tegra memory controller driver;
  • Fastrpc Driver;
  • IBM Advanced System Management driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Ethernet team driver;
  • MediaTek network drivers;
  • Near Field Communication (NFC) drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Broadcom BCM2835 power domain driver;
  • Generic PM domains;
  • i.MX PM domains;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • Freescale SoC drivers;
  • Microchip PolarFire SoC system controller driver;
  • SPI subsystem;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • SM750 framebuffer staging driver;
  • TCM subsystem;
  • Thermal drivers;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • USB core drivers;
  • DesignWare USB2 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Mustek MDC800 USB digital camera driver;
  • USB YUREX driver;
  • Renesas USBHS Controller drivers;
  • USB Type-C Connector System Software Interface driver;
  • VFIO drivers;
  • Framebuffer layer;
  • TSM TDX Guest driver;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS+ file system;
  • Journaling layer for block devices (JBD2);
  • Network file systems library;
  • Network…
Record
USN-8574-2
Updated
2026-11-07
OSVUSN-8574-3 No score

linux-ibm, linux-ibm-6.8, linux-nvidia-tegra, linux-xilinx vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • Power management core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • Counter interface drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • DMA engine subsystem;
  • EDAC drivers;
  • EFI core;
  • GPU drivers;
  • Greybus drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MediaTek SMI driver;
  • NVIDIA Tegra memory controller driver;
  • Fastrpc Driver;
  • IBM Advanced System Management driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Ethernet team driver;
  • MediaTek network drivers;
  • Near Field Communication (NFC) drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Broadcom BCM2835 power domain driver;
  • Generic PM domains;
  • i.MX PM domains;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • Freescale SoC drivers;
  • Microchip PolarFire SoC system controller driver;
  • SPI subsystem;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • SM750 framebuffer staging driver;
  • TCM subsystem;
  • Thermal drivers;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • USB core drivers;
  • DesignWare USB2 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Mustek MDC800 USB digital camera driver;
  • USB YUREX driver;
  • Renesas USBHS Controller drivers;
  • USB Type-C Connector System Software Interface driver;
  • VFIO drivers;
  • Framebuffer layer;
  • TSM TDX Guest driver;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS+ file system;
  • Journaling layer for block devices (JBD2);
  • Network file systems library;
  • Network…
Record
USN-8574-3
Updated
2026-11-07
OSVUSN-8595-1 No score

linux-oracle-6.8 vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • Power management core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • Counter interface drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • DMA engine subsystem;
  • EDAC drivers;
  • EFI core;
  • GPU drivers;
  • Greybus drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MediaTek SMI driver;
  • NVIDIA Tegra memory controller driver;
  • Fastrpc Driver;
  • IBM Advanced System Management driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Ethernet team driver;
  • MediaTek network drivers;
  • Near Field Communication (NFC) drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Broadcom BCM2835 power domain driver;
  • Generic PM domains;
  • i.MX PM domains;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • Freescale SoC drivers;
  • Microchip PolarFire SoC system controller driver;
  • SPI subsystem;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • SM750 framebuffer staging driver;
  • TCM subsystem;
  • Thermal drivers;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • USB core drivers;
  • DesignWare USB2 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Mustek MDC800 USB digital camera driver;
  • USB YUREX driver;
  • Renesas USBHS Controller drivers;
  • USB Type-C Connector System Software Interface driver;
  • VFIO drivers;
  • Framebuffer layer;
  • TSM TDX Guest driver;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS+ file system;
  • Journaling layer for block devices (JBD2);
  • Network file systems library;
  • Network…
Record
USN-8595-1
Updated
2026-11-07
OSVUSN-8595-2 No score

linux-aws vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • Power management core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • Counter interface drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • DMA engine subsystem;
  • EDAC drivers;
  • EFI core;
  • GPU drivers;
  • Greybus drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MediaTek SMI driver;
  • NVIDIA Tegra memory controller driver;
  • Fastrpc Driver;
  • IBM Advanced System Management driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Ethernet team driver;
  • MediaTek network drivers;
  • Near Field Communication (NFC) drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Broadcom BCM2835 power domain driver;
  • Generic PM domains;
  • i.MX PM domains;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • Freescale SoC drivers;
  • Microchip PolarFire SoC system controller driver;
  • SPI subsystem;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • SM750 framebuffer staging driver;
  • TCM subsystem;
  • Thermal drivers;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • USB core drivers;
  • DesignWare USB2 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Mustek MDC800 USB digital camera driver;
  • USB YUREX driver;
  • Renesas USBHS Controller drivers;
  • USB Type-C Connector System Software Interface driver;
  • VFIO drivers;
  • Framebuffer layer;
  • TSM TDX Guest driver;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS+ file system;
  • Journaling layer for block devices (JBD2);
  • Network file systems library;
  • Network…
Record
USN-8595-2
Updated
2026-11-07
OSVUSN-8595-3 No score

linux-aws-6.8, linux-aws-fips vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • Power management core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • Counter interface drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • DMA engine subsystem;
  • EDAC drivers;
  • EFI core;
  • GPU drivers;
  • Greybus drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MediaTek SMI driver;
  • NVIDIA Tegra memory controller driver;
  • Fastrpc Driver;
  • IBM Advanced System Management driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Ethernet team driver;
  • MediaTek network drivers;
  • Near Field Communication (NFC) drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Broadcom BCM2835 power domain driver;
  • Generic PM domains;
  • i.MX PM domains;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • Freescale SoC drivers;
  • Microchip PolarFire SoC system controller driver;
  • SPI subsystem;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • SM750 framebuffer staging driver;
  • TCM subsystem;
  • Thermal drivers;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • USB core drivers;
  • DesignWare USB2 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Mustek MDC800 USB digital camera driver;
  • USB YUREX driver;
  • Renesas USBHS Controller drivers;
  • USB Type-C Connector System Software Interface driver;
  • VFIO drivers;
  • Framebuffer layer;
  • TSM TDX Guest driver;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS+ file system;
  • Journaling layer for block devices (JBD2);
  • Network file systems library;
  • Network…
Record
USN-8595-3
Updated
2026-11-07
OSVUSN-8596-1 No score

linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • Power management core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • Counter interface drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • DMA engine subsystem;
  • EDAC drivers;
  • EFI core;
  • GPU drivers;
  • Greybus drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MediaTek SMI driver;
  • NVIDIA Tegra memory controller driver;
  • Fastrpc Driver;
  • IBM Advanced System Management driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Ethernet team driver;
  • MediaTek network drivers;
  • Near Field Communication (NFC) drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Broadcom BCM2835 power domain driver;
  • Generic PM domains;
  • i.MX PM domains;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • Freescale SoC drivers;
  • Microchip PolarFire SoC system controller driver;
  • SPI subsystem;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • SM750 framebuffer staging driver;
  • TCM subsystem;
  • Thermal drivers;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • USB core drivers;
  • DesignWare USB2 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Mustek MDC800 USB digital camera driver;
  • USB YUREX driver;
  • Renesas USBHS Controller drivers;
  • USB Type-C Connector System Software Interface driver;
  • VFIO drivers;
  • Framebuffer layer;
  • TSM TDX Guest driver;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS+ file system;
  • Journaling layer for block devices (JBD2);
  • Network file systems library;
  • Network…
Record
USN-8596-1
Updated
2026-11-07
OSVUSN-8603-1 No score

linux-azure, linux-azure-fde vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • x86 platform drivers;
  • PSP security protocol;
  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Intel NPU Driver;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Auxiliary display drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Ublk userspace block driver;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • DPLL subsystem;
  • EDAC drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • EFI core;
  • FWCTL subsystem;
  • GPIO subsystem;
  • GPU drivers;
  • Greybus drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • IOMMU subsystem;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • IBM Advanced System Management driver;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • Device tree and open firmware driver;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Chrome hardware platform drivers;
  • ACPI WMI driver;
  • Generic PM domains;
  • MediaTek PM domains;
  • Power supply drivers;
  • Remote Processor subsystem;
  • MPAM driver;
  • Amlogic Meson reset controller drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • NVIDIA Tegra Control Backbone (CBB) driver;
  • SPI subsystem;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • SM750 framebuffer staging driver;
  • TCM subsystem;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • USB Device Class drivers;
  • ULPI bus;
  • DesignWare USB2 driver;
  • USB Gadget drivers;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • USB Type-C support driver;
  • USB Type-C Port Controller Manager driver;
  • TI TPS6598x USB Power Delivery controller driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • vDPA drivers;
  • VFIO drivers;
  • Framebuffer layer;
  • TSM AMD SEV Guest driver;
  • Xen hypervisor drivers;
  • 9P distributed file system;
  • File systems infrastructure;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS+ file system;
  • HugeTLB file system;
  • Journaling layer for block devices (JBD2);
  • Network file systems…
Record
USN-8603-1
Updated
2026-11-07
OSVUSN-8606-1 No score

linux-azure, linux-azure-6.8 vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • Power management core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • RNBD block device driver;
  • Ublk userspace block driver;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Clocksource drivers;
  • Data acquisition framework and drivers;
  • Counter interface drivers;
  • CPU frequency scaling framework;
  • CPU idle management framework;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • DMA engine subsystem;
  • EDAC drivers;
  • EFI core;
  • GPIO subsystem;
  • GPU drivers;
  • Greybus drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MediaTek SMI driver;
  • NVIDIA Tegra memory controller driver;
  • Multifunction device drivers;
  • Broadcom VK accelerator driver;
  • Fastrpc Driver;
  • IBM Advanced System Management driver;
  • MMC subsystem;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Ethernet team driver;
  • MediaTek network drivers;
  • Near Field Communication (NFC) drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Broadcom BCM2835 power domain driver;
  • Generic PM domains;
  • i.MX PM domains;
  • Power supply drivers;
  • RapidIO drivers;
  • RAS (Reliability, Availability, Serviceability) subsystem;
  • Remote Processor subsystem;
  • RPMSG subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • Freescale SoC drivers;
  • MediaTek SoC drivers;
  • Microchip PolarFire SoC system controller driver;
  • Texas Instruments SoC drivers;
  • SPI subsystem;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • SM750 framebuffer staging driver;
  • TCM subsystem;
  • Thermal drivers;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • ChipIdea USB driver;
  • USB Device Class drivers;
  • ULPI bus;
  • USB core drivers;
  • DesignWare…
Record
USN-8606-1
Updated
2026-11-07
OSVUSN-8607-1 No score

linux-azure-fde vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • Power management core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • RNBD block device driver;
  • Ublk userspace block driver;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Clocksource drivers;
  • Data acquisition framework and drivers;
  • Counter interface drivers;
  • CPU frequency scaling framework;
  • CPU idle management framework;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • DMA engine subsystem;
  • EDAC drivers;
  • EFI core;
  • GPIO subsystem;
  • GPU drivers;
  • Greybus drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MediaTek SMI driver;
  • NVIDIA Tegra memory controller driver;
  • Multifunction device drivers;
  • Broadcom VK accelerator driver;
  • Fastrpc Driver;
  • IBM Advanced System Management driver;
  • MMC subsystem;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Ethernet team driver;
  • MediaTek network drivers;
  • Near Field Communication (NFC) drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Broadcom BCM2835 power domain driver;
  • Generic PM domains;
  • i.MX PM domains;
  • Power supply drivers;
  • RapidIO drivers;
  • RAS (Reliability, Availability, Serviceability) subsystem;
  • Remote Processor subsystem;
  • RPMSG subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • Freescale SoC drivers;
  • MediaTek SoC drivers;
  • Microchip PolarFire SoC system controller driver;
  • Texas Instruments SoC drivers;
  • SPI subsystem;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • SM750 framebuffer staging driver;
  • TCM subsystem;
  • Thermal drivers;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • ChipIdea USB driver;
  • USB Device Class drivers;
  • ULPI bus;
  • USB core drivers;
  • DesignWare…
Record
USN-8607-1
Updated
2026-11-07
OSVUSN-8608-1 No score

linux-azure-fips vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • Power management core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • Counter interface drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • DMA engine subsystem;
  • EDAC drivers;
  • EFI core;
  • GPU drivers;
  • Greybus drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MediaTek SMI driver;
  • NVIDIA Tegra memory controller driver;
  • Fastrpc Driver;
  • IBM Advanced System Management driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Ethernet team driver;
  • MediaTek network drivers;
  • Near Field Communication (NFC) drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Broadcom BCM2835 power domain driver;
  • Generic PM domains;
  • i.MX PM domains;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • Freescale SoC drivers;
  • Microchip PolarFire SoC system controller driver;
  • SPI subsystem;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • SM750 framebuffer staging driver;
  • TCM subsystem;
  • Thermal drivers;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • USB core drivers;
  • DesignWare USB2 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Mustek MDC800 USB digital camera driver;
  • USB YUREX driver;
  • Renesas USBHS Controller drivers;
  • USB Type-C Connector System Software Interface driver;
  • VFIO drivers;
  • Framebuffer layer;
  • TSM TDX Guest driver;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS+ file system;
  • Journaling layer for block devices (JBD2);
  • Network file systems library;
  • Network…
Record
USN-8608-1
Updated
2026-11-07
OSVUSN-8609-1 No score

linux-azure-fde-6.8 vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • Power management core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • RNBD block device driver;
  • Ublk userspace block driver;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Clocksource drivers;
  • Data acquisition framework and drivers;
  • Counter interface drivers;
  • CPU frequency scaling framework;
  • CPU idle management framework;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • DMA engine subsystem;
  • EDAC drivers;
  • EFI core;
  • GPIO subsystem;
  • GPU drivers;
  • Greybus drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MediaTek SMI driver;
  • NVIDIA Tegra memory controller driver;
  • Multifunction device drivers;
  • Broadcom VK accelerator driver;
  • Fastrpc Driver;
  • IBM Advanced System Management driver;
  • MMC subsystem;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Ethernet team driver;
  • MediaTek network drivers;
  • Near Field Communication (NFC) drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Broadcom BCM2835 power domain driver;
  • Generic PM domains;
  • i.MX PM domains;
  • Power supply drivers;
  • RapidIO drivers;
  • RAS (Reliability, Availability, Serviceability) subsystem;
  • Remote Processor subsystem;
  • RPMSG subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • Freescale SoC drivers;
  • MediaTek SoC drivers;
  • Microchip PolarFire SoC system controller driver;
  • Texas Instruments SoC drivers;
  • SPI subsystem;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • SM750 framebuffer staging driver;
  • TCM subsystem;
  • Thermal drivers;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • ChipIdea USB driver;
  • USB Device Class drivers;
  • ULPI bus;
  • USB core drivers;
  • DesignWare…
Record
USN-8609-1
Updated
2026-11-07
OSVUSN-8619-1 No score

linux-hwe-6.8 vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • Power management core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • RNBD block device driver;
  • Ublk userspace block driver;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Clocksource drivers;
  • Data acquisition framework and drivers;
  • Counter interface drivers;
  • CPU frequency scaling framework;
  • CPU idle management framework;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • DMA engine subsystem;
  • EDAC drivers;
  • EFI core;
  • GPIO subsystem;
  • GPU drivers;
  • Greybus drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MediaTek SMI driver;
  • NVIDIA Tegra memory controller driver;
  • Multifunction device drivers;
  • Broadcom VK accelerator driver;
  • Fastrpc Driver;
  • IBM Advanced System Management driver;
  • MMC subsystem;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Ethernet team driver;
  • MediaTek network drivers;
  • Near Field Communication (NFC) drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Broadcom BCM2835 power domain driver;
  • Generic PM domains;
  • i.MX PM domains;
  • Power supply drivers;
  • RapidIO drivers;
  • RAS (Reliability, Availability, Serviceability) subsystem;
  • Remote Processor subsystem;
  • RPMSG subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • Freescale SoC drivers;
  • MediaTek SoC drivers;
  • Microchip PolarFire SoC system controller driver;
  • Texas Instruments SoC drivers;
  • SPI subsystem;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • SM750 framebuffer staging driver;
  • TCM subsystem;
  • Thermal drivers;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • ChipIdea USB driver;
  • USB Device Class drivers;
  • ULPI bus;
  • USB core drivers;
  • DesignWare…
Record
USN-8619-1
Updated
2026-11-07

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-64k
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-64k-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-64k-debug
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-64k-debug-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-64k-debug-devel
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-64k-debug-devel-matched
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-64k-debug-modules
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-64k-debug-modules-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-64k-debug-modules-extra
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-64k-devel
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-64k-devel-matched
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-64k-modules
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-64k-modules-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-64k-modules-extra
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-abi-stablelists
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-cross-headers
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-debug
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-debug-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-debug-devel
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-debug-devel-matched
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-debug-modules
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-debug-modules-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-debug-modules-extra
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-debug-uki-virt
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-devel
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-devel-matched
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-doc
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-headers
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-modules
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-modules-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-modules-extra
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-64k
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-64k-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-64k-debug
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-64k-debug-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-64k-debug-devel
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-64k-debug-modules
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-64k-debug-modules-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-64k-debug-modules-extra
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-64k-devel
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-64k-modules
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-64k-modules-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-64k-modules-extra
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-debug
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-debug-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-debug-devel
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-debug-modules
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-debug-modules-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-debug-modules-extra
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-devel
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-modules
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-modules-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-modules-extra
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-tools
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-tools-libs
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-tools-libs-devel
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-uki-virt
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-uki-virt-addons
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-zfcpdump
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-zfcpdump-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-zfcpdump-devel
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel
Azure Linux:3
 before 6.6.141.1-1
6.6.141.1-1
linux-lts
Alpaquita:23
 6.1.175-r0 up to 6.1.177-r0
6.1.177-r0
linux-lts
Alpaquita:25
 6.12.85-r0 up to 6.12.87-r0
6.12.87-r0
linux-lts
Alpaquita:stream
 6.12.92-r1 up to 6.18.35-r1
6.18.35-r1
kernel
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-core
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-debug
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-debug-core
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-debug-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-debug-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-debug-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-debug-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-debug-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-debug-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-debug-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-abi-stablelists
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-core
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-cross-headers
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-debug
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-debug-core
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-debug-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-debug-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-debug-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-debug-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-debug-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-debug-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-debug-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-debug-uki-virt
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-debug-uki-virt-addons
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-doc
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-headers
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-ipaclones-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-core
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-debug
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-debug-core
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-debug-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-debug-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-debug-kvm
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-debug-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-debug-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-debug-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-debug-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-debug-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-kvm
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-core
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
Kernel
Linux
 5.12.0 up to 5.15.210, 5.16.0 up to 6.1.176, 6.2.0 up to 6.6.140, 6.7.0 up to 6.12.86, 6.13.0 up to 6.18.35, 6.19.0 up to 7.0.2
5.15.2106.1.1766.6.1406.12.866.18.357.0.2
linux
Debian:12
 before 6.1.176-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 45 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.170-16.1.170-26.1.170-36.1.172-16.1.174-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-1
6.1.176-1
linux
Debian:13
 before 6.12.86-1, plus listed versions
6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-1
Show 14 moreShow less
6.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-1~bpo12+1
6.12.86-1
linux
Debian:14
 before 7.0.3-1, plus listed versions
6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1
Show 45 moreShow less
6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1
7.0.3-1
kernel
openEuler:24.03-LTS-SP1
From an advisory covering 37 CVEs
 before 6.6.0-145.1.15.153.oe2403sp1
6.6.0-145.1.15.153.oe2403sp1
kernel
openEuler:24.03-LTS-SP3
From an advisory covering 46 CVEs
 before 6.6.0-145.3.15.146.oe2403sp3
6.6.0-145.3.15.146.oe2403sp3
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-debug-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-debug-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debug-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debug-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-doc
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-rt-64k-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-rt-64k-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-rt-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-tools-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-zfcpdump-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-zfcpdump-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
libperf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
perf
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
perf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
python3-perf
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
python3-perf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
rtla
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
rv
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-debug
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-debug-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-debug-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-debug-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-debug-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-abi-stablelists
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debug
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debug-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debug-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debug-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debug-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debug-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debug-uki-virt
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-rt-64k-debug-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-rt-64k-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel
Rocky Linux:9
From an advisory covering 19 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel
Rocky Linux:8
From an advisory covering 18 CVEs
 before 0:4.18.0-553.126.1.el8_10
0:4.18.0-553.126.1.el8_10
kernel-rt
Rocky Linux:8
From an advisory covering 18 CVEs
 before 0:4.18.0-553.126.1.rt7.467.el8_10
0:4.18.0-553.126.1.rt7.467.el8_10
linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
rootio-linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
linux
Root:Debian:13
 before 6.12.115-2.aikido.164
6.12.115-2.aikido.164
rootio-linux
Root:Debian:13
 before 6.12.115-2.aikido.164
6.12.115-2.aikido.164
linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
rootio-linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
rootio-linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
kernel-default
SUSE:Linux Micro 6.0
From an advisory covering 1056 CVEs
 before 6.4.0-159998.55.1
6.4.0-159998.55.1
kernel-default-base
SUSE:Linux Micro 6.0
From an advisory covering 1056 CVEs
 before 6.4.0-159998.55.1.159998.21.42
6.4.0-159998.55.1.159998.21.42
kernel-kvmsmall
SUSE:Linux Micro 6.0
From an advisory covering 1056 CVEs
 before 6.4.0-159998.55.1
6.4.0-159998.55.1
kernel-source
SUSE:Linux Micro 6.0
From an advisory covering 1056 CVEs
 before 6.4.0-159998.55.1
6.4.0-159998.55.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 1077 CVEs
 before 6.4.0-150700.53.90.1
6.4.0-150700.53.90.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 1077 CVEs
 before 6.4.0-150700.53.90.1
6.4.0-150700.53.90.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 1077 CVEs
 before 6.4.0-150700.53.90.1.150700.17.51.1
6.4.0-150700.53.90.1.150700.17.51.1
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 1077 CVEs
 before 6.4.0-150700.53.90.1
6.4.0-150700.53.90.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 1077 CVEs
 before 6.4.0-150700.53.90.1
6.4.0-150700.53.90.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 1077 CVEs
 before 6.4.0-150700.53.90.1
6.4.0-150700.53.90.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 1077 CVEs
 before 6.4.0-150700.53.90.1
6.4.0-150700.53.90.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 1077 CVEs
 before 6.4.0-150700.53.90.1
6.4.0-150700.53.90.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 1077 CVEs
 before 6.4.0-150700.53.90.1
6.4.0-150700.53.90.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP7
From an advisory covering 1077 CVEs
 before 6.4.0-150700.53.90.1
6.4.0-150700.53.90.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 1077 CVEs
 before 6.4.0-150700.53.90.1
6.4.0-150700.53.90.1
kernel-livepatch-SLE15-SP7_Update_24
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 1077 CVEs
 before 1-150700.15.3.1
1-150700.15.3.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 1077 CVEs
 before 6.4.0-150700.53.90.1
6.4.0-150700.53.90.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP7
From an advisory covering 1077 CVEs
 before 6.4.0-150700.53.90.1
6.4.0-150700.53.90.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP7
From an advisory covering 1077 CVEs
 before 6.4.0-150700.53.90.1
6.4.0-150700.53.90.1
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1117.124~20.04.1, plus listed versions
5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1
Show 45 moreShow less
5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1
5.15.0-1117.124~20.04.1
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
linux-azure-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
 None known
linux-azure-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1123.132~20.04.1, plus listed versions
5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1
Show 45 moreShow less
5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1
5.15.0-1123.132~20.04.1
linux-azure-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
 None known
linux-azure-fde
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
 None known
linux-azure-fde-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1122.131~20.04.1, plus listed versions
5.15.0-1019.24~20.04.1.15.15.0-1020.25~20.04.1.15.15.0-1021.26~20.04.1.15.15.0-1029.36~20.04.1.15.15.0-1030.37~20.04.1.1
Show 45 moreShow less
5.15.0-1031.38~20.04.1.15.15.0-1033.40~20.04.1.15.15.0-1034.41~20.04.1.25.15.0-1035.42~20.04.1.15.15.0-1036.43~20.04.1.15.15.0-1037.44~20.04.1.15.15.0-1038.45~20.04.1.15.15.0-1039.46~20.04.1.15.15.0-1040.47~20.04.1.15.15.0-1041.48~20.04.1.15.15.0-1042.49~20.04.1.15.15.0-1043.50~20.04.1.15.15.0-1046.53~20.04.1.15.15.0-1047.54~20.04.1.15.15.0-1049.56~20.04.1.15.15.0-1050.57~20.04.1.15.15.0-1051.59~20.04.1.15.15.0-1052.60~20.04.1.15.15.0-1053.61~20.04.1.15.15.0-1054.62~20.04.1.15.15.0-1056.64~20.04.1.15.15.0-1057.65~20.04.1.15.15.0-1058.66~20.04.2.15.15.0-1059.67~20.04.1.15.15.0-1060.69~20.04.1.15.15.0-1061.70~20.04.1.15.15.0-1063.72~20.04.1.15.15.0-1064.73~20.04.1.15.15.0-1065.74~20.04.1.15.15.0-1067.76~20.04.1.15.15.0-1068.77~20.04.1.15.15.0-1070.79~20.04.1.15.15.0-1071.80~20.04.1.15.15.0-1072.81~20.04.1.15.15.0-1073.82~20.04.1.15.15.0-1074.83~20.04.1.15.15.0-1076.85~20.04.1.15.15.0-1078.87~20.04.1.15.15.0-1081.90~20.04.1.15.15.0-1082.91~20.04.1.15.15.0-1086.95~20.04.1.15.15.0-1087.96~20.04.1.15.15.0-1088.97~20.04.1.15.15.0-1089.98~20.04.1.15.15.0-1091.100~20.04.1.1
5.15.0-1122.131~20.04.1
linux-gcp-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1
Show 7 moreShow less
5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3
 None known
linux-gcp-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1
Show 8 moreShow less
5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1
 None known
linux-gcp-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1118.128~20.04.1, plus listed versions
5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2
Show 45 moreShow less
5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.15.15.0-1065.73~20.04.15.15.0-1066.74~20.04.15.15.0-1067.75~20.04.15.15.0-1068.76~20.04.15.15.0-1069.77~20.04.15.15.0-1070.78~20.04.15.15.0-1071.79~20.04.15.15.0-1072.80~20.04.15.15.0-1073.81~20.04.15.15.0-1074.83~20.04.1
5.15.0-1118.128~20.04.1
linux-gcp-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41
 None known
linux-gke
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
 None known
linux-gke-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1
Show 13 moreShow less
5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1
 None known
linux-gkeop
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13
Show 45 moreShow less
5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77
 None known
linux-gkeop-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2
Show 40 moreShow less
5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1
 None known
linux-hwe-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1
Show 7 moreShow less
5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1
 None known
linux-hwe-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1
Show 11 moreShow less
5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1
 None known
linux-hwe-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-198.208~20.04.1, plus listed versions
5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
Show 45 moreShow less
5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1
5.15.0-198.208~20.04.1
linux-hwe-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1
Show 16 moreShow less
5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1
 None known
linux-ibm-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1111.115~20.04.1, plus listed versions
5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1
Show 45 moreShow less
5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.15.15.0-1057.60~20.04.15.15.0-1058.61~20.04.15.15.0-1059.62~20.04.15.15.0-1060.63~20.04.15.15.0-1061.64~20.04.15.15.0-1062.65~20.04.15.15.0-1063.66~20.04.15.15.0-1064.67~20.04.15.15.0-1065.68~20.04.15.15.0-1066.69~20.04.15.15.0-1067.70~20.04.15.15.0-1068.71~20.04.15.15.0-1069.72~20.04.15.15.0-1074.77~20.04.15.15.0-1075.78~20.04.15.15.0-1076.79~20.04.15.15.0-1078.81~20.04.15.15.0-1079.82~20.04.15.15.0-1080.83~20.04.15.15.0-1081.84~20.04.15.15.0-1083.86~20.04.15.15.0-1085.88~20.04.15.15.0-1086.89~20.04.15.15.0-1087.90~20.04.15.15.0-1089.92~20.04.15.15.0-1090.93~20.04.15.15.0-1091.94~20.04.15.15.0-1092.95~20.04.15.15.0-1093.96~20.04.15.15.0-1094.97~20.04.1
5.15.0-1111.115~20.04.1
linux-intel-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19
 None known
linux-intel-iotg-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1112.118~20.04.1, plus listed versions
5.15.0-1003.5~20.04.15.15.0-1008.11~20.04.15.15.0-1010.14~20.04.15.15.0-1015.20~20.04.25.15.0-1016.21~20.04.1
Show 45 moreShow less
5.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1021.26~20.04.15.15.0-1023.28~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1030.35~20.04.15.15.0-1031.36~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1040.46~20.04.15.15.0-1043.49~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1060.66~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.25.15.0-1074.80~20.04.15.15.0-1077.83~20.04.15.15.0-1078.84~20.04.15.15.0-1079.85~20.04.15.15.0-1083.89~20.04.15.15.0-1084.90~20.04.15.15.0-1085.91~20.04.15.15.0-1086.92~20.04.1
5.15.0-1112.118~20.04.1
linux-lowlatency-hwe-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-195.205~20.04.1, plus listed versions
5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
Show 45 moreShow less
5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.88~20.04.15.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.95~20.04.15.15.0-87.96~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-110.120~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1
5.15.0-195.205~20.04.1
linux-nvidia-tegra-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1070.72~20.04.1, plus listed versions
5.15.0-1009.9~20.04.15.15.0-1010.10~20.04.15.15.0-1012.12~20.04.15.15.0-1014.14~20.04.15.15.0-1015.15~20.04.1
Show 36 moreShow less
5.15.0-1016.16~20.04.15.15.0-1017.17~20.04.15.15.0-1018.18~20.04.15.15.0-1019.19~20.04.15.15.0-1020.20~20.04.15.15.0-1022.22~20.04.15.15.0-1025.25~20.04.15.15.0-1027.27~20.04.15.15.0-1030.30~20.04.15.15.0-1032.32~20.04.15.15.0-1039.39~20.04.15.15.0-1040.40~20.04.15.15.0-1041.41~20.04.15.15.0-1042.42~20.04.15.15.0-1043.43~20.04.15.15.0-1044.44~20.04.15.15.0-1045.45~20.04.15.15.0-1046.46~20.04.15.15.0-1047.47~20.04.15.15.0-1048.48~20.04.15.15.0-1049.49~20.04.15.15.0-1050.50~20.04.15.15.0-1051.51~20.04.15.15.0-1052.52~20.04.25.15.0-1053.53~20.04.15.15.0-1055.55~20.04.15.15.0-1057.57~20.04.15.15.0-1058.58~20.04.15.15.0-1060.60~20.04.15.15.0-1061.61~20.04.15.15.0-1063.63~20.04.15.15.0-1064.66~20.04.15.15.0-1065.67~20.04.15.15.0-1066.68~20.04.15.15.0-1067.69~20.04.15.15.0-1068.70~20.04.1
5.15.0-1070.72~20.04.1
linux-oem-5.10
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17
Show 21 moreShow less
5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61
 None known
linux-oem-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21
Show 7 moreShow less
5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36
 None known
linux-oem-5.14
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10
Show 30 moreShow less
5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67
 None known
linux-oem-5.6
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13
Show 24 moreShow less
5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60
 None known
linux-oracle-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-oracle-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1
Show 7 moreShow less
5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1
 None known
linux-oracle-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1114.120~20.04.1, plus listed versions
5.15.0-1007.9~20.04.15.15.0-1013.17~20.04.15.15.0-1016.20~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.1
Show 45 moreShow less
5.15.0-1019.24~20.04.15.15.0-1021.27~20.04.15.15.0-1022.28~20.04.15.15.0-1025.31~20.04.25.15.0-1027.33~20.04.15.15.0-1029.35~20.04.15.15.0-1030.36~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1041.47~20.04.15.15.0-1042.48~20.04.15.15.0-1044.50~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1047.53~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1053.59~20.04.15.15.0-1054.60~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1074.80~20.04.1
5.15.0-1114.120~20.04.1
linux-oracle-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1
 None known
linux-raspi2
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
 None known
linux-riscv
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34
Show 7 moreShow less
5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45
 None known
linux-riscv-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1
Show 8 moreShow less
5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35
 None known
linux-riscv-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1111.115~20.04.1, plus listed versions
5.15.0-1015.17~20.04.15.15.0-1017.19~20.04.15.15.0-1018.21~20.04.15.15.0-1019.22~20.04.15.15.0-1022.26~20.04.1
Show 45 moreShow less
5.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1029.33~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1032.36~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.25.15.0-1037.41~20.04.25.15.0-1038.42~20.04.25.15.0-1039.43~20.04.25.15.0-1040.44~20.04.35.15.0-1041.45~20.04.15.15.0-1043.47~20.04.15.15.0-1044.48~20.04.15.15.0-1045.49~20.04.15.15.0-1046.50~20.04.15.15.0-1047.51~20.04.15.15.0-1048.52~20.04.15.15.0-1049.53~20.04.25.15.0-1050.54~20.04.15.15.0-1051.55~20.04.15.15.0-1052.56~20.04.15.15.0-1053.57~20.04.15.15.0-1056.60~20.04.15.15.0-1057.61~20.04.15.15.0-1058.62~20.04.15.15.0-1059.63~20.04.15.15.0-1060.64~20.04.15.15.0-1061.65~20.04.15.15.0-1062.66~20.04.15.15.0-1063.67~20.04.15.15.0-1064.68~20.04.15.15.0-1065.69~20.04.15.15.0-1066.70~20.04.15.15.0-1067.71~20.04.15.15.0-1068.72~20.04.15.15.0-1069.73~20.04.15.15.0-1070.74~20.04.15.15.0-1071.75~20.04.15.15.0-1072.76~20.04.1
5.15.0-1111.115~20.04.1
linux-riscv-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1
Show 5 moreShow less
5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1
 None known
linux
Ubuntu:22.04:LTS
 before 5.15.0-198.208, plus listed versions
5.13.0-19.195.15.0-17.175.15.0-18.185.15.0-22.225.15.0-23.23
Show 45 moreShow less
5.15.0-25.255.15.0-27.285.15.0-30.315.15.0-33.345.15.0-35.365.15.0-37.395.15.0-39.425.15.0-40.435.15.0-41.445.15.0-43.465.15.0-46.495.15.0-47.515.15.0-48.545.15.0-50.565.15.0-52.585.15.0-53.595.15.0-56.625.15.0-57.635.15.0-58.645.15.0-60.665.15.0-67.745.15.0-69.765.15.0-70.775.15.0-71.785.15.0-72.795.15.0-73.805.15.0-75.825.15.0-76.835.15.0-78.855.15.0-79.865.15.0-82.915.15.0-83.925.15.0-84.935.15.0-86.965.15.0-87.975.15.0-88.985.15.0-89.995.15.0-91.1015.15.0-92.1025.15.0-94.1045.15.0-97.1075.15.0-100.1105.15.0-101.1115.15.0-102.1125.15.0-105.115
5.15.0-198.208
linux-allwinner-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1
 None known
linux-aws
Ubuntu:22.04:LTS
 before 5.15.0-1117.124, plus listed versions
5.13.0-1005.65.15.0-1002.45.15.0-1003.55.15.0-1004.65.15.0-1005.7
Show 45 moreShow less
5.15.0-1008.105.15.0-1009.115.15.0-1011.145.15.0-1013.175.15.0-1014.185.15.0-1015.195.15.0-1017.215.15.0-1019.235.15.0-1020.245.15.0-1021.255.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.325.15.0-1030.345.15.0-1031.355.15.0-1033.375.15.0-1034.385.15.0-1035.395.15.0-1036.405.15.0-1037.415.15.0-1038.435.15.0-1039.445.15.0-1040.455.15.0-1042.475.15.0-1043.485.15.0-1044.495.15.0-1045.505.15.0-1047.525.15.0-1048.535.15.0-1049.545.15.0-1050.555.15.0-1051.565.15.0-1052.575.15.0-1053.585.15.0-1055.605.15.0-1056.615.15.0-1057.635.15.0-1060.665.15.0-1061.675.15.0-1062.685.15.0-1063.695.15.0-1064.705.15.0-1065.71
5.15.0-1117.124
linux-aws-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1
Show 5 moreShow less
5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1
 None known
linux-aws-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 9 moreShow less
6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1
 None known
linux-aws-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1
Show 9 moreShow less
6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1
 None known
linux-aws-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1061.64~22.04.1, plus listed versions
6.8.0-1009.9~22.04.26.8.0-1010.10~22.04.26.8.0-1011.12~22.04.16.8.0-1013.14~22.04.16.8.0-1014.15~22.04.1
Show 34 moreShow less
6.8.0-1015.16~22.04.16.8.0-1016.17~22.04.26.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1023.25~22.04.16.8.0-1024.26~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1035.37~22.04.16.8.0-1036.38~22.04.16.8.0-1039.41~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.44~22.04.16.8.0-1043.45~22.04.16.8.0-1044.46~22.04.16.8.0-1045.47~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.16.8.0-1050.53~22.04.16.8.0-1051.54~22.04.16.8.0-1052.55~22.04.16.8.0-1053.56~22.04.16.8.0-1055.58~22.04.16.8.0-1057.60~22.04.16.8.0-1060.63~22.04.1
6.8.0-1061.64~22.04.1
linux-azure
Ubuntu:22.04:LTS
 before 5.15.0-1123.132, plus listed versions
5.13.0-1006.75.15.0-1001.25.15.0-1002.35.15.0-1003.45.15.0-1005.6
Show 45 moreShow less
5.15.0-1007.85.15.0-1008.95.15.0-1010.125.15.0-1012.155.15.0-1013.165.15.0-1014.175.15.0-1017.205.15.0-1019.245.15.0-1020.255.15.0-1021.265.15.0-1022.275.15.0-1023.295.15.0-1024.305.15.0-1029.365.15.0-1030.375.15.0-1031.385.15.0-1033.405.15.0-1034.415.15.0-1035.425.15.0-1036.435.15.0-1037.445.15.0-1038.455.15.0-1039.465.15.0-1040.475.15.0-1041.485.15.0-1042.495.15.0-1044.515.15.0-1045.525.15.0-1046.535.15.0-1047.545.15.0-1049.565.15.0-1050.575.15.0-1051.595.15.0-1052.605.15.0-1053.615.15.0-1054.625.15.0-1056.645.15.0-1057.655.15.0-1058.665.15.0-1059.675.15.0-1060.695.15.0-1061.705.15.0-1063.725.15.0-1064.735.15.0-1066.75
5.15.0-1123.132
kernel-source
openSUSE:Tumbleweed
From an advisory covering 35 CVEs
 before 7.0.7-1.1
7.0.7-1.1

History

History
RecordedChangedSources
affected, aliases, referencesOSV
affectedOSV
affectedOSV
affectedOSV
affected, aliases, referencesOSV
affected, aliases, referencesOSV
affected, facts, referencesOSV
affectedOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-31709 is a high vulnerability (CVSS 8.8) in Linux, published May 1, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 28th percentile. Fixed in kernel 6.6.141.1-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 1,147 package rows, 516 versions, 6,456 references and the rest of 24 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 8 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open