Every CVE Search/ Get API key

CVE-2026-43158

xfs: fix freemap adjustments when adding xattrs to leaf blocks

8.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

xfs: fix freemap adjustments when adding xattrs to leaf blocks

xfs/592 and xfs/794 both trip this assertion in the leaf block freemap adjustment code after ~20 minutes of running on my test VMs:

ASSERT(ichdr->firstused >= ichdr->count * sizeof(xfs_attr_leaf_entry_t) + xfs_attr3_leaf_hdr_size(leaf));

Upon enabling quite a lot more debugging code, I narrowed this down to fsstress trying to set a local extended attribute with namelen=3 and valuelen=71. This results in an entry size of 80 bytes.

At the start of xfs_attr3_leaf_add_work, the freemap looks like this:

i 0 base 448 size 0 rhs 448 count 46 i 1 base 388 size 132 rhs 448 count 46 i 2 base 2120 size 4 rhs 448 count 46 firstused = 520

where "rhs" is the first byte past the end of the leaf entry array. This is inconsistent -- the entries array ends at byte 448, but freemap[1] says there's free space starting at byte 388!

By the end of the function, the freemap is in worse shape:

i 0 base 456 size 0 rhs 456 count 47 i 1 base 388 size 52 rhs 456 count 47 i 2 base 2120 size 4 rhs 456 count 47 firstused = 440

Important note: 388 is not aligned with the entries array element size of 8 bytes.

Based on the incorrect freemap, the name area starts at byte 440, which is below the end of the entries array! That's why the assertion triggers and the filesystem shuts down.

How did we end up here? First, recall from the previous patch that the freemap array in an xattr leaf block is not intended to be a comprehensive map of all free space in the leaf block. In other words, it's perfectly legal to have a leaf block with:

  • 376 bytes in use by the entries array
  • freemap[0] has [base = 376, size = 8]
  • freemap[1] has [base = 388, size = 1500]
  • the space between 376 and 388 is free, but the freemap stopped tracking that some time ago

If we add one xattr, the entries array grows to 384 bytes, and freemap[0] becomes [base = 384, size = 0]. So far, so good. But if we add a second xattr, the entries array grows to 392 bytes, and freemap[0] gets pushed up to [base = 392, size = 0]. This is bad, because freemap[1] hasn't been updated, and now the entries array and the free space claim the same space.

The fix here is to adjust all freemap entries so that none of them collide with the entries array. Note that this fix relies on commit 2a2b5932db6758 ("xfs: fix attr leaf header freemap.size underflow") and the previous patch that resets zero length freemap entries to have base = 0.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.47%Up 0.4 points since May 7, 2026
90%50%10%1%

What each source reports

CVE List Score used 8.8

xfs: fix freemap adjustments when adding xattrs to leaf blocks

In the Linux kernel, the following vulnerability has been resolved:

xfs: fix freemap adjustments when adding xattrs to leaf blocks

xfs/592 and xfs/794 both trip this assertion in the leaf block freemap adjustment code after ~20 minutes of running on my test VMs:

ASSERT(ichdr->firstused >= ichdr->count * sizeof(xfs_attr_leaf_entry_t) + xfs_attr3_leaf_hdr_size(leaf));

Upon enabling quite a lot more debugging code, I narrowed this down to fsstress trying to set a local extended attribute with namelen=3 and valuelen=71. This results in an entry size of 80 bytes.

At the start of xfs_attr3_leaf_add_work, the freemap looks like this:

i 0 base 448 size 0 rhs 448 count 46 i 1 base 388 size 132 rhs 448 count 46 i 2 base 2120 size 4 rhs 448 count 46 firstused = 520

where "rhs" is the first byte past the end of the leaf entry array. This is inconsistent -- the entries array ends at byte 448, but freemap[1] says there's free space starting at byte 388!

By the end of the function, the freemap is in worse shape:

i 0 base 456 size 0 rhs 456 count 47 i 1 base 388 size 52 rhs 456 count 47 i 2 base 2120 size 4 rhs 456 count 47 firstused = 440

Important note: 388 is not aligned with the entries array element size of 8 bytes.

Based on the incorrect freemap, the name area starts at byte 440, which is below the end of the entries array! That's why the assertion triggers and the filesystem shuts down.

How did we end up here? First, recall from the previous patch that the freemap array in an xattr leaf block is not intended to be a comprehensive map of all free space in the leaf block. In other words, it's perfectly legal to have a leaf block with:

  • 376 bytes in use by the entries array
  • freemap[0] has [base = 376, size = 8]
  • freemap[1] has [base = 388, size = 1500]
  • the space between 376 and 388 is free, but the freemap stopped tracking that some time ago

If we add one xattr, the entries array grows to 384 bytes, and freemap[0] becomes [base = 384, size = 0]. So far, so good. But if we add a second xattr, the entries array grows to 392 bytes, and freemap[0] gets pushed up to [base = 392, size = 0]. This is bad, because freemap[1] hasn't been updated, and now the entries array and the free space claim the same space.

The fix here is to adjust all freemap entries so that none of them collide with the entries array. Note that this fix relies on commit 2a2b5932db6758 ("xfs: fix attr leaf header freemap.size underflow") and the previous patch that resets zero length freemap entries to have base = 0.

Record
CVE-2026-43158
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-664
Updated
2026-11-02
EUVDEUVD-2026-27719 8.8

In the Linux kernel, the following vulnerability has been resolved:

xfs: fix freemap adjustments when adding xattrs to leaf blocks

xfs/592 and xfs/794 both trip this assertion in the leaf block freemap adjustment code after ~20 minutes of running on my test VMs:

ASSERT(ichdr->firstused >= ichdr->count * sizeof(xfs_attr_leaf_entry_t) + xfs_attr3_leaf_hdr_size(leaf));

Upon enabling quite a lot more debugging code, I narrowed this down to fsstress trying to set a local extended attribute with namelen=3 and valuelen=71. This results in an entry size of 80 bytes.

At the start of xfs_attr3_leaf_add_work, the freemap looks like this:

i 0 base 448 size 0 rhs 448 count 46 i 1 base 388 size 132 rhs 448 count 46 i 2 base 2120 size 4 rhs 448 count 46 firstused = 520

where "rhs" is the first byte past the end of the leaf entry array. This is inconsistent -- the entries array ends at byte 448, but freemap[1] says there's free space starting at byte 388!

By the end of the function, the freemap is in worse shape:

i 0 base 456 size 0 rhs 456 count 47 i 1 base 388 size 52 rhs 456 count 47 i 2 base 2120 size 4 rhs 456 count 47 firstused = 440

Important note: 388 is not aligned with the entries array element size of 8 bytes.

Based on the incorrect freemap, the name area starts at byte 440, which is below the end of the entries array! That's why the assertion triggers and the filesystem shuts down.

How did we end up here? First, recall from the previous patch that the freemap array in an xattr leaf block is not intended to be a comprehensive map of all free space in the leaf block. In other words, it's perfectly legal to have a leaf block with:

  • 376 bytes in use by the entries array
  • freemap[0] has [base = 376, size = 8]
  • freemap[1] has [base = 388, size = 1500]
  • the space between 376 and 388 is free, but the freemap stopped tracking that some time ago

If we add one xattr, the entries array grows to 384 bytes, and freemap[0] becomes [base = 384, size = 0]. So far, so good. But if we add a second xattr, the entries array grows to 392 bytes, and freemap[0] gets pushed up to [base = 392, size = 0]. This is bad, because freemap[1] hasn't been updated, and now the entries array and the free space claim the same space.

The fix here is to adjust all freemap entries so that none of them collide with the entries array. Note that this fix relies on commit 2a2b5932db6758 ("xfs: fix attr leaf header freemap.size underflow") and the previous patch that resets zero length freemap entries to have base = 0.

Record
EUVD-2026-27719
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-j4pf-wvpf-rv38 8.8

In the Linux kernel, the following vulnerability has been resolved: xfs: fix freemap adjustments...

In the Linux kernel, the following vulnerability has been resolved:

xfs: fix freemap adjustments when adding xattrs to leaf blocks

xfs/592 and xfs/794 both trip this assertion in the leaf block freemap adjustment code after ~20 minutes of running on my test VMs:

ASSERT(ichdr->firstused >= ichdr->count * sizeof(xfs_attr_leaf_entry_t) + xfs_attr3_leaf_hdr_size(leaf));

Upon enabling quite a lot more debugging code, I narrowed this down to fsstress trying to set a local extended attribute with namelen=3 and valuelen=71. This results in an entry size of 80 bytes.

At the start of xfs_attr3_leaf_add_work, the freemap looks like this:

i 0 base 448 size 0 rhs 448 count 46 i 1 base 388 size 132 rhs 448 count 46 i 2 base 2120 size 4 rhs 448 count 46 firstused = 520

where "rhs" is the first byte past the end of the leaf entry array. This is inconsistent -- the entries array ends at byte 448, but freemap[1] says there's free space starting at byte 388!

By the end of the function, the freemap is in worse shape:

i 0 base 456 size 0 rhs 456 count 47 i 1 base 388 size 52 rhs 456 count 47 i 2 base 2120 size 4 rhs 456 count 47 firstused = 440

Important note: 388 is not aligned with the entries array element size of 8 bytes.

Based on the incorrect freemap, the name area starts at byte 440, which is below the end of the entries array! That's why the assertion triggers and the filesystem shuts down.

How did we end up here? First, recall from the previous patch that the freemap array in an xattr leaf block is not intended to be a comprehensive map of all free space in the leaf block. In other words, it's perfectly legal to have a leaf block with:

  • 376 bytes in use by the entries array
  • freemap[0] has [base = 376, size = 8]
  • freemap[1] has [base = 388, size = 1500]
  • the space between 376 and 388 is free, but the freemap stopped tracking that some time ago

If we add one xattr, the entries array grows to 384 bytes, and freemap[0] becomes [base = 384, size = 0]. So far, so good. But if we add a second xattr, the entries array grows to 392 bytes, and freemap[0] gets pushed up to [base = 392, size = 0]. This is bad, because freemap[1] hasn't been updated, and now the entries array and the free space claim the same space.

The fix here is to adjust all freemap entries so that none of them collide with the entries array. Note that this fix relies on commit 2a2b5932db6758 ("xfs: fix attr leaf header freemap.size underflow") and the previous patch that resets zero length freemap entries to have base = 0.

Record
GHSA-j4pf-wvpf-rv38
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-664, CWE-787
Updated
2026-11-02
NVD 8.8

In the Linux kernel, the following vulnerability has been resolved:

xfs: fix freemap adjustments when adding xattrs to leaf blocks

xfs/592 and xfs/794 both trip this assertion in the leaf block freemap adjustment code after ~20 minutes of running on my test VMs:

ASSERT(ichdr->firstused >= ichdr->count * sizeof(xfs_attr_leaf_entry_t) + xfs_attr3_leaf_hdr_size(leaf));

Upon enabling quite a lot more debugging code, I narrowed this down to fsstress trying to set a local extended attribute with namelen=3 and valuelen=71. This results in an entry size of 80 bytes.

At the start of xfs_attr3_leaf_add_work, the freemap looks like this:

i 0 base 448 size 0 rhs 448 count 46 i 1 base 388 size 132 rhs 448 count 46 i 2 base 2120 size 4 rhs 448 count 46 firstused = 520

where "rhs" is the first byte past the end of the leaf entry array. This is inconsistent -- the entries array ends at byte 448, but freemap[1] says there's free space starting at byte 388!

By the end of the function, the freemap is in worse shape:

i 0 base 456 size 0 rhs 456 count 47 i 1 base 388 size 52 rhs 456 count 47 i 2 base 2120 size 4 rhs 456 count 47 firstused = 440

Important note: 388 is not aligned with the entries array element size of 8 bytes.

Based on the incorrect freemap, the name area starts at byte 440, which is below the end of the entries array! That's why the assertion triggers and the filesystem shuts down.

How did we end up here? First, recall from the previous patch that the freemap array in an xattr leaf block is not intended to be a comprehensive map of all free space in the leaf block. In other words, it's perfectly legal to have a leaf block with:

  • 376 bytes in use by the entries array
  • freemap[0] has [base = 376, size = 8]
  • freemap[1] has [base = 388, size = 1500]
  • the space between 376 and 388 is free, but the freemap stopped tracking that some time ago

If we add one xattr, the entries array grows to 384 bytes, and freemap[0] becomes [base = 384, size = 0]. So far, so good. But if we add a second xattr, the entries array grows to 392 bytes, and freemap[0] gets pushed up to [base = 392, size = 0]. This is bad, because freemap[1] hasn't been updated, and now the entries array and the free space claim the same space.

The fix here is to adjust all freemap entries so that none of them collide with the entries array. Note that this fix relies on commit 2a2b5932db6758 ("xfs: fix attr leaf header freemap.size underflow") and the previous patch that resets zero length freemap entries to have base = 0.

Record
CVE-2026-43158
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-787, CWE-664
Updated
2026-11-02
OSVBELL-CVE-2026-43158 8.8
Record
BELL-CVE-2026-43158
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 8.8

xfs: fix freemap adjustments when adding xattrs to leaf blocks

In the Linux kernel, the following vulnerability has been resolved:

xfs: fix freemap adjustments when adding xattrs to leaf blocks

xfs/592 and xfs/794 both trip this assertion in the leaf block freemap adjustment code after ~20 minutes of running on my test VMs:

ASSERT(ichdr->firstused >= ichdr->count * sizeof(xfs_attr_leaf_entry_t) + xfs_attr3_leaf_hdr_size(leaf));

Upon enabling quite a lot more debugging code, I narrowed this down to fsstress trying to set a local extended attribute with namelen=3 and valuelen=71. This results in an entry size of 80 bytes.

At the start of xfs_attr3_leaf_add_work, the freemap looks like this:

i 0 base 448 size 0 rhs 448 count 46 i 1 base 388 size 132 rhs 448 count 46 i 2 base 2120 size 4 rhs 448 count 46 firstused = 520

where "rhs" is the first byte past the end of the leaf entry array. This is inconsistent -- the entries array ends at byte 448, but freemap[1] says there's free space starting at byte 388!

By the end of the function, the freemap is in worse shape:

i 0 base 456 size 0 rhs 456 count 47 i 1 base 388 size 52 rhs 456 count 47 i 2 base 2120 size 4 rhs 456 count 47 firstused = 440

Important note: 388 is not aligned with the entries array element size of 8 bytes.

Based on the incorrect freemap, the name area starts at byte 440, which is below the end of the entries array! That's why the assertion triggers and the filesystem shuts down.

How did we end up here? First, recall from the previous patch that the freemap array in an xattr leaf block is not intended to be a comprehensive map of all free space in the leaf block. In other words, it's perfectly legal to have a leaf block with:

  • 376 bytes in use by the entries array
  • freemap[0] has [base = 376, size = 8]
  • freemap[1] has [base = 388, size = 1500]
  • the space between 376 and 388 is free, but the freemap stopped tracking that some time ago

If we add one xattr, the entries array grows to 384 bytes, and freemap[0] becomes [base = 384, size = 0]. So far, so good. But if we add a second xattr, the entries array grows to 392 bytes, and freemap[0] gets pushed up to [base = 392, size = 0]. This is bad, because freemap[1] hasn't been updated, and now the entries array and the free space claim the same space.

The fix here is to adjust all freemap entries so that none of them collide with the entries array. Note that this fix relies on commit 2a2b5932db6758 ("xfs: fix attr leaf header freemap.size underflow") and the previous patch that resets zero length freemap entries to have base = 0.

Record
CVE-2026-43158
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 48 moreShow less
OSVDEBIAN-CVE-2026-43158 8.8

In the Linux kernel, the following vulnerability has been resolved: xfs: fix freemap adjustments when adding xattrs to leaf blocks xfs/592 and xfs/794 both trip this assertion in the leaf block freemap adjustment code after ~20 minutes of running on my test VMs: ASSERT(ichdr->firstused >= ichdr->count * sizeof(xfs_attr_leaf_entry_t) + xfs_attr3_leaf_hdr_size(leaf)); Upon enabling quite a lot more debugging code, I narrowed this down to fsstress trying to set a local extended attribute with namelen=3 and valuelen=71. This results in an entry size of 80 bytes. At the start of xfs_attr3_leaf_add_work, the freemap looks like this: i 0 base 448 size 0 rhs 448 count 46 i 1 base 388 size 132 rhs 448 count 46 i 2 base 2120 size 4 rhs 448 count 46 firstused = 520 where "rhs" is the first byte past the end of the leaf entry array. This is inconsistent -- the entries array ends at byte 448, but freemap[1] says there's free space starting at byte 388! By the end of the function, the freemap is in worse shape: i 0 base 456 size 0 rhs 456 count 47 i 1 base 388 size 52 rhs 456 count 47 i 2 base 2120 size 4 rhs 456 count 47 firstused = 440 Important note: 388 is not aligned with the entries array element size of 8 bytes. Based on the incorrect freemap, the name area starts at byte 440, which is below the end of the entries array! That's why the assertion triggers and the filesystem shuts down. How did we end up here? First, recall from the previous patch that the freemap array in an xattr leaf block is not intended to be a comprehensive map of all free space in the leaf block. In other words, it's perfectly legal to have a leaf block with: * 376 bytes in use by the entries array * freemap[0] has [base = 376, size = 8] * freemap[1] has [base = 388, size = 1500] * the space between 376 and 388 is free, but the freemap stopped tracking that some time ago If we add one xattr, the entries array grows to 384 bytes, and freemap[0] becomes [base = 384, size = 0]. So far, so good. But if we add a second xattr, the entries array grows to 392 bytes, and freemap[0] gets pushed up to [base = 392, size = 0]. This is bad, because freemap[1] hasn't been updated, and now the entries array and the free space claim the same space. The fix here is to adjust all freemap entries so that none of them collide with the entries array. Note that this fix relies on commit 2a2b5932db6758 ("xfs: fix attr leaf header freemap.size underflow") and the previous patch that resets zero length freemap entries to have base = 0.

Record
DEBIAN-CVE-2026-43158
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-2579 9.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

bcache: fix NULL pointer in cache_set_flush()

  1. LINE#1794 - LINE#1887 is some codes about function of bch_cache_set_alloc().
  2. LINE#2078 - LINE#2142 is some codes about function of register_cache_set().
  3. register_cache_set() will call bch_cache_set_alloc() in LINE#2098.

1794 struct cache_set *bch_cache_set_alloc(struct cache_sb *sb) 1795 { ... 1860 if (!(c->devices = kcalloc(c->nr_uuids, sizeof(void *), GFP_KERNEL)) || 1861 mempool_init_slab_pool(&c->search, 32, bch_search_cache) || 1862 mempool_init_kmalloc_pool(&c->bio_meta, 2, 1863 sizeof(struct bbio) + sizeof(struct bio_vec) * 1864 bucket_pages(c)) || 1865 mempool_init_kmalloc_pool(&c->fill_iter, 1, iter_size) || 1866 bioset_init(&c->bio_split, 4, offsetof(struct bbio, bio), 1867 BIOSET_NEED_BVECS|BIOSET_NEED_RESCUER) || 1868 !(c->uuids = alloc_bucket_pages(GFP_KERNEL, c)) || 1869 !(c->moving_gc_wq = alloc_workqueue("bcache_gc", 1870 WQ_MEM_RECLAIM, 0)) || 1871 bch_journal_alloc(c) || 1872 bch_btree_cache_alloc(c) || 1873 bch_open_buckets_alloc(c) || 1874 bch_bset_sort_state_init(&c->sort, ilog2(c->btree_pages))) 1875 goto err; ^^^^^^^^ 1876 ... 1883 return c; 1884 err: 1885 bch_cache_set_unregister(c); ^^^^^^^^^^^^^^^^^^^^^^^^^^^ 1886 return NULL; 1887 } ... 2078 static const char *register_cache_set(struct cache *ca) 2079 { ... 2098 c = bch_cache_set_alloc(&ca->sb); 2099 if (!c) 2100 return err; ^^^^^^^^^^ ... 2128 ca->set = c; 2129 ca->set->cache[ca->sb.nr_this_dev] = ca; ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ ... 2138 return NULL; 2139 err: 2140 bch_cache_set_unregister(c); 2141 return err; 2142 }

(1) If LINE#1860 - LINE#1874 is true, then do 'goto err'(LINE#1875) and call bch_cache_set_unregister()(LINE#1885). (2) As (1) return NULL(LINE#1886), LINE#2098 - LINE#2100 would return. (3) As (2) has returned, LINE#2128 - LINE#2129 would do not give the value to c->cache[], it means that c->cache[] is NULL.

LINE#1624 - LINE#1665 is some codes about function of cache_set_flush(). As (1), in LINE#1885 call bch_cache_set_unregister() ---> bch_cache_set_stop() ---> closure_queue() -.-> cache_set_flush() (as below LINE#1624)

1624 static void cache_set_flush(struct closure *cl) 1625 { ... 1654 for_each_cache(ca, c, i) 1655 if (ca->alloc_thread) ^^ 1656 kthread_stop(ca->alloc_thread); ... 1665 }

(4) In LINE#1655 ca is NULL(see (3)) in cache_set_flush() then the kernel crash occurred as below: [ 846.712887] bcache: register_cache() error drbd6: cannot allocate memory [ 846.713242] bcache: register_bcache() error : failed to register device [ 846.713336] bcache: cache_set_free() Cache set 2f84bdc1-498a-4f2f-98a7-01946bf54287 unregistered [ 846.713768] BUG: unable to handle kernel NULL pointer dereference at 00000000000009f8 [ 846.714790] PGD 0 P4D 0 [ 846.715129] Oops: 0000 [#1] SMP PTI [ 846.715472] CPU: 19 PID: 5057 Comm: kworker/19:16 Kdump: loaded Tainted: G OE --------- - - 4.18.0-147.5.1.el8_1.5es.3.x86_64 #1 [ 846.716082] Hardware name: ESPAN GI-25212/X11DPL-i, BIOS 2.1 06/15/2018 [ 846.716451] Workqueue: events cache_set_flush [bcache] [ 846.716808] RIP: 0010:cache_set_flush+0xc9/0x1b0 [bcache] […

Record
OESA-2026-2579
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-2871 9.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_conntrack_expect: use expect->helper

Use expect->helper in ctnetlink and /proc to dump the helper name. Using nfct_help() without holding a reference to the master conntrack is unsafe.

Use exp->master->helper in ctnetlink path if userspace does not provide an explicit helper when creating an expectation to retain the existing behaviour. The ctnetlink expectation path holds the reference on the master conntrack and nf_conntrack_expect lock and the nfnetlink glue path refers to the master ct that is attached to the skb.(CVE-2026-31414)

In the Linux kernel, the following vulnerability has been resolved:

xfs: avoid dereferencing log items after push callbacks

After xfsaild_push_item() calls iop_push(), the log item may have been freed if the AIL lock was dropped during the push. Background inode reclaim or the dquot shrinker can free the log item while the AIL lock is not held, and the tracepoints in the switch statement dereference the log item after iop_push() returns.

Fix this by capturing the log item type, flags, and LSN before calling xfsaild_push_item(), and introducing a new xfs_ail_push_class trace event class that takes these pre-captured values and the ailp pointer instead of the log item pointer.(CVE-2026-31453)

In the Linux kernel, the following vulnerability has been resolved:

xfs: stop reclaim before pushing AIL during unmount

The unmount sequence in xfs_unmount_flush_inodes() pushed the AIL while background reclaim and inodegc are still running. This is broken independently of any use-after-free issues - background reclaim and inodegc should not be running while the AIL is being pushed during unmount, as inodegc can dirty and insert inodes into the AIL during the flush, and background reclaim can race to abort and free dirty inodes.

Reorder xfs_unmount_flush_inodes() to stop inodegc and cancel background reclaim before pushing the AIL. Stop inodegc before cancelling m_reclaim_work because the inodegc worker can re-queue m_reclaim_work via xfs_inodegc_set_reclaimable.(CVE-2026-31455)

In the Linux kernel, the following vulnerability has been resolved:

fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath

When cifs_sanitize_prepath is called with an empty string or a string containing only delimiters (e.g., "/"), the current logic attempts to check *(cursor2 - 1) before cursor2 has advanced. This results in an out-of-bounds read.

This patch adds an early exit check after stripping prepended delimiters. If no path content remains, the function returns NULL.

The bug was identified via manual audit and verified using a standalone test case compiled with AddressSanitizer, which triggered a SEGV on affected inputs.(CVE-2026-43112)

In the Linux kernel, the following vulnerability has been resolved:

xfs: remove xfs_attr_leaf_hasname

The calling convention of xfs_attr_leaf_hasname() is problematic, because it returns a NULL buffer when xfs_attr3_leaf_read fails, a valid buffer when xfs_attr3_leaf_lookup_int returns -ENOATTR or -EEXIST, and a non-NULL buffer pointer for an already released buffer when xfs_attr3_leaf_lookup_int fails with other error values.

Fix this by simply open coding xfs_attr_leaf_hasname in the callers, so that the buffer release code is done by each caller of xfs_attr3_leaf_read.(CVE-2026-43153)

In the Linux kernel, the following vulnerability has been resolved:

xfs: fix freemap adjustments when adding xattrs to leaf blocks

xfs/592 and xfs/794 both trip this assertion in the leaf block freemap adjustment code after ~20 minutes of running on my test VMs:

ASSERT(ichdr->firstused >= ichdr->count * sizeof(xfs_attr_leaf_entry_t) + xfs_attr3_leaf_hdr_size(leaf));

Upon enabling quite a lot more debugging code, I narrowed this down to fsstress trying to set a local extended attribute with…

Record
OESA-2026-2871
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:21556 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:21556
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:21557 7.5

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:21557
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2026:21706 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:21706
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:21745 7.8

Red Hat Security Advisory: kernel-rt security update

Record
RHSA-2026:21745
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:26462 7.8

Red Hat Security Advisory: kernel-rt security update

Record
RHSA-2026:26462
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:26515 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:26515
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:26535 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:26535
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:26563 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:26563
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:26570 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:26570
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:27708 8.7

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:27708
CVSS 3.1
8.7 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:27729 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:27729
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:27735 8.7

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:27735
CVSS 3.1
8.7 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:33215 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:33215
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:41236 8.8

Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Record
RHSA-2026:41236
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:21556 7.8

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CVE-2025-38653)

  • kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)

  • kernel: nbd: defer config unlock in nbd_genl_connect (CVE-2025-68366)

  • kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724)

  • kernel: iommu: disable SVA when CONFIG_X86 is set (CVE-2025-71089)

  • kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392)

  • kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)

  • kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)

  • kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)

  • kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)

  • kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)

  • kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)

  • kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)

  • kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)

  • kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect() (CVE-2026-43023)

  • kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110)

  • kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)

  • kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)

  • kernel: mm/page_alloc: clear page->private in free_pages_prepare() (CVE-2026-43303)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:21556
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:21557 7.5

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: can: j1939: j1939_session_new(): fix skb reference counting (CVE-2024-56645)

  • kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)

  • kernel: mm: thp: deny THP for files on anonymous inodes (CVE-2026-23375)

  • kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392)

  • kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)

  • kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)

  • kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)

  • kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)

  • kernel: io_uring/rsrc: reject zero-length fixed buffer import (CVE-2026-43006)

  • kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)

  • kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)

  • kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect() (CVE-2026-43023)

  • kernel: netfilter: ctnetlink: ensure safe access to master conntrack (CVE-2026-43116)

  • kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110)

  • kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)

  • kernel: Linux kernel dpaa2-switch: Kernel memory corruption via out-of-bounds write (CVE-2026-43205)

  • kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)

  • kernel: mm/page_alloc: clear page->private in free_pages_prepare() (CVE-2026-43303)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:21557
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:21706 7.8

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)

  • kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)

  • kernel: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CVE-2025-68347)

  • kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116)

  • kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)

  • kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)

  • kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)

  • kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)

  • kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)

  • kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)

  • kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)

  • kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)

  • kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)

  • kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)

  • kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)

  • kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)

  • kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)

  • kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:21706
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:21745 7.8

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)

  • kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)

  • kernel: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CVE-2025-68347)

  • kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116)

  • kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)

  • kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)

  • kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)

  • kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)

  • kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)

  • kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)

  • kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)

  • kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)

  • kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)

  • kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)

  • kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)

  • kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)

  • kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)

  • kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:21745
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2026-43158 7.0

CVE-2026-43158 in linux - Patched by Root

Root has patched CVE-2026-43158 in the linux package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2026-43158
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-UBUNTU-2204-CVE-2026-43158 7.0

CVE-2026-43158 in linux - Patched by Root

Root has patched CVE-2026-43158 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2204-CVE-2026-43158
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVROOT-OS-UBUNTU-2404-CVE-2026-43158 7.0

CVE-2026-43158 in linux - Patched by Root

Root has patched CVE-2026-43158 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2404-CVE-2026-43158
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVUBUNTU-CVE-2026-43158 7.3

In the Linux kernel, the following vulnerability has been resolved: xfs: fix freemap adjustments when adding xattrs to leaf blocks xfs/592 and xfs/794 both trip this assertion in the leaf block freemap adjustment code after ~20 minutes of running on my test VMs: ASSERT(ichdr->firstused >= ichdr->count * sizeof(xfs_attr_leaf_entry_t) + xfs_attr3_leaf_hdr_size(leaf)); Upon enabling quite a lot more debugging code, I narrowed this down to fsstress trying to set a local extended attribute with namelen=3 and valuelen=71. This results in an entry size of 80 bytes. At the start of xfs_attr3_leaf_add_work, the freemap looks like this: i 0 base 448 size 0 rhs 448 count 46 i 1 base 388 size 132 rhs 448 count 46 i 2 base 2120 size 4 rhs 448 count 46 firstused = 520 where "rhs" is the first byte past the end of the leaf entry array. This is inconsistent -- the entries array ends at byte 448, but freemap[1] says there's free space starting at byte 388! By the end of the function, the freemap is in worse shape: i 0 base 456 size 0 rhs 456 count 47 i 1 base 388 size 52 rhs 456 count 47 i 2 base 2120 size 4 rhs 456 count 47 firstused = 440 Important note: 388 is not aligned with the entries array element size of 8 bytes. Based on the incorrect freemap, the name area starts at byte 440, which is below the end of the entries array! That's why the assertion triggers and the filesystem shuts down. How did we end up here? First, recall from the previous patch that the freemap array in an xattr leaf block is not intended to be a comprehensive map of all free space in the leaf block. In other words, it's perfectly legal to have a leaf block with: * 376 bytes in use by the entries array * freemap[0] has [base = 376, size = 8] * freemap[1] has [base = 388, size = 1500] * the space between 376 and 388 is free, but the freemap stopped tracking that some time ago If we add one xattr, the entries array grows to 384 bytes, and freemap[0] becomes [base = 384, size = 0]. So far, so good. But if we add a second xattr, the entries array grows to 392 bytes, and freemap[0] gets pushed up to [base = 392, size = 0]. This is bad, because freemap[1] hasn't been updated, and now the entries array and the free space claim the same space. The fix here is to adjust all freemap entries so that none of them collide with the entries array. Note that this fix relies on commit 2a2b5932db6758 ("xfs: fix attr leaf header freemap.size underflow") and the previous patch that resets zero length freemap entries to have base = 0.

Record
UBUNTU-CVE-2026-43158
CVSS 4.0
7.3 HighCVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVALSA-2026:21556 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CVE-2025-38653)
  • kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)
  • kernel: nbd: defer config unlock in nbd_genl_connect (CVE-2025-68366)
  • kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724)
  • kernel: iommu: disable SVA when CONFIG_X86 is set (CVE-2025-71089)
  • kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392)
  • kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)
  • kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)
  • kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)
  • kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)
  • kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)
  • kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)
  • kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)
  • kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)
  • kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect() (CVE-2026-43023)
  • kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110)
  • kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)
  • kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)
  • kernel: mm/page_alloc: clear page->private in free_pages_prepare() (CVE-2026-43303)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:21556
Updated
2026-11-02
OSVALSA-2026:21557 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: can: j1939: j1939_session_new(): fix skb reference counting (CVE-2024-56645)
  • kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)
  • kernel: mm: thp: deny THP for files on anonymous inodes (CVE-2026-23375)
  • kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392)
  • kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)
  • kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)
  • kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)
  • kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)
  • kernel: io_uring/rsrc: reject zero-length fixed buffer import (CVE-2026-43006)
  • kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)
  • kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)
  • kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect() (CVE-2026-43023)
  • kernel: netfilter: ctnetlink: ensure safe access to master conntrack (CVE-2026-43116)
  • kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110)
  • kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)
  • kernel: Linux kernel dpaa2-switch: Kernel memory corruption via out-of-bounds write (CVE-2026-43205)
  • kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)
  • kernel: mm/page_alloc: clear page->private in free_pages_prepare() (CVE-2026-43303)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:21557
Updated
2026-11-02
OSVALSA-2026:21706 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)
  • kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)
  • kernel: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CVE-2025-68347)
  • kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116)
  • kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)
  • kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
  • kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)
  • kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)
  • kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)
  • kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)
  • kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)
  • kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)
  • kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)
  • kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)
  • kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)
  • kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)
  • kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)
  • kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:21706
Updated
2026-11-02
OSVALSA-2026:21745 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)
  • kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)
  • kernel: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CVE-2025-68347)
  • kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116)
  • kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)
  • kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
  • kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)
  • kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)
  • kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)
  • kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)
  • kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)
  • kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)
  • kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)
  • kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)
  • kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)
  • kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)
  • kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)
  • kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:21745
Updated
2026-11-02
OSVCLSA-2026-1780516677 No score

kernel: Fix of 135 CVEs

  • atm: lec: fix use-after-free in sock_def_readable() {CVE-2026-43050}
  • ALSA: usb-audio: Use the right limit for PCM OOB check
  • ALSA: usb-audio: Prevent excessive number of frames {CVE-2026-23208}
  • xen/privcmd: fix double free via VMA splitting {CVE-2026-31787}
  • cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path {CVE-2026-43328}
  • cpufreq: governor: Free dbs_data directly when gov->init() fails {CVE-2026-43328}
  • rcu: Fix rcu_read_unlock() deadloop due to softirq
  • rcu: Fix racy re-initialization of irq_work causing hangs
  • RDMA/efa: Fix possible deadlock {CVE-2026-31493}
  • RDMA/efa: Fix use of completion ctx after free {CVE-2026-31493}
  • RDMA/efa: Improve admin completion context state machine {CVE-2026-31493}
  • RDMA/efa: Check stored completion CTX command ID with received one {CVE-2026-31493}
  • RDMA/efa: Extend admin timeout error print
  • RDMA/efa: Properly handle unexpected AQ completions {CVE-2026-31493}
  • rcu: Fix rcu_read_unlock() deadloop due to IRQ work {CVE-2025-39744}
  • netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() {CVE-2026-23455}
  • rtnetlink: Allocate vfinfo size for VF GUIDs when supported {CVE-2025-22075}
  • kernel/printk/index.c: fix memory leak with using debugfs_lookup() {CVE-2023-53402}
  • wifi: iwlwifi: don't warn when if there is a FW error {CVE-2025-38096}
  • md/raid5-cache: fix null-ptr-deref for r5l_flush_stripe_to_raid() {CVE-2023-53210}
  • exfat: fix the infinite loop in exfat_readdir() {CVE-2024-57940}
  • af_netlink: Fix shift out of bounds in group mask calculation {CVE-2022-49197}
  • xfrm_user: fix info leak in build_mapping() {CVE-2026-43089}
  • udf: Fix preallocation discarding at indirect extent boundary {CVE-2022-48946}
  • efi: Do not import certificates from UEFI Secure Boot for T2 Macs {CVE-2022-49357}
  • kernel/resource: fix kfree() of bootmem memory again {CVE-2022-49190}
  • smb: client: fix warning in cifs_smb3_do_mount() {CVE-2023-53230}
  • sctp: Fix null-ptr-deref in reuseport_add_sock(). {CVE-2024-44935}
  • RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages {CVE-2024-50208}
  • drm/amdgpu: avoid using null object of framebuffer {CVE-2024-41093}
  • firmware: cs_dsp: Return error if block header overflows file {CVE-2024-42238}
  • ata: libata-sff: Ensure that we cannot write outside the allocated buffer {CVE-2025-21738}
  • net: hinic: fix memory leak when reading function table {CVE-2022-50438}
  • device property: fix of node refcount leak in fwnode_graph_get_next_endpoint() {CVE-2022-49752}
  • libceph: fix race between delayed_work() and ceph_monc_stop() {CVE-2024-42232}
  • usbnet: fix memory leak in error case {CVE-2022-49657}
  • hwmon: (w83791d) Convert macros to functions to avoid TOCTOU {CVE-2025-71111}
  • seccomp: Move copy_seccomp() to no failure path. {CVE-2022-50661}
  • net/mlx5: fs, lock FTE when checking if active {CVE-2024-53121}
  • nvme-pci: fix freeing of the HMB descriptor table {CVE-2024-56756}
  • leds: class: Protect brightness_show() with led_cdev->led_access mutex {CVE-2024-56587}
  • bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener {CVE-2023-52986}
  • RDMA/uverbs: Prevent integer overflow issue {CVE-2024-57890}
  • sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT {CVE-2026-23125}
  • tracing: Fix memory leak in test_gen_synth_cmd() and test_empty_synth_event() {CVE-2022-49800}
  • kprobes: Fix check for probe enabled in kill_kprobe() {CVE-2022-50266}
  • NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 {CVE-2024-26870}
  • i915/perf: Fix NULL deref bugs with drm_dbg() calls {CVE-2023-52788}
  • can: mcp251x: fix deadlock in error path of mcp251x_open {CVE-2026-23357}
  • regmap-irq: Use the new num_config_regs property in regmap_add_irq_chip_fwnode {CVE-2022-50558}
  • wifi: cfg80211: Set correct chandef when starting CAC {CVE-2024-49937}
  • netfilter: nf_tables: prevent nf_skb_duplicated corruption {CVE-2024-49952}
  • can: isotp: fix potential CAN frame reception race in isotp_rcv() {CVE-2022-48830}
  • bpf: Fix…
Record
CLSA-2026-1780516677
Updated
2026-11-02
OSVCLSA-2026-1782155469 No score

kernel: Fix of 143 CVEs

  • ice: Fix PTP NULL pointer dereference during VSI rebuild {CVE-2026-23210}
  • tracing: Add recursion protection in kernel stack trace recording {CVE-2026-23138}
  • mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() {CVE-2025-38681}
  • cpuset: fix warning when disabling remote partition {CVE-2025-71142}
  • virtio: break and reset virtio devices on device_shutdown() {CVE-2025-38064}
  • netdevsim: fix a race issue related to the operation on bpf_bound_progs list {CVE-2026-23126}
  • atm: clip: Fix potential null-ptr-deref in to_atmarpd(). {CVE-2025-38460}
  • idpf: fix error handling in the init_task on load {CVE-2026-23017}
  • rxrpc: Fix recvmsg() unconditional requeue {CVE-2026-23066}
  • block: zero non-PI portion of auto integrity buffer {CVE-2026-23007}
  • can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode {CVE-2025-38665}
  • virtio_net: Fix napi_skb_cache_put warning {CVE-2024-43835}
  • crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
  • mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() {CVE-2026-23169}
  • net: fix segmentation of forwarding fraglist GRO {CVE-2026-23154}
  • gfs2: Validate i_depth for exhash directories {CVE-2025-38710}
  • KVM: Don't clobber irqfd routing type when deassigning irqfd {CVE-2026-23198}
  • ipvlan: Make the addrs_lock be per port {CVE-2026-23103}
  • xfs: fix freemap adjustments when adding xattrs to leaf blocks {CVE-2026-43158}
  • can: mcp251xfd: fix infinite loop when xmit fails {CVE-2024-41088}
  • RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly {CVE-2025-71096}
  • RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction {CVE-2025-38161}
  • scsi: qla2xxx: Validate sp before freeing associated memory {CVE-2025-71236}
  • net/sched: netem: account for backlog updates from child qdisc {CVE-2024-56770}
  • drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat {CVE-2026-31656}
  • iavf: fix off-by-one issues in iavf_config_rss_reg() {CVE-2025-71087}
  • net/sched: ets: fix divide by zero in the offload path {CVE-2026-23379}
  • can: j1939: implement NETDEV_UNREGISTER notification handler {CVE-2025-39925}
  • ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() {CVE-2026-31531}
  • Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb {CVE-2026-31510}
  • ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() {CVE-2026-23003}
  • drm/i915/gt: Check set_default_submission() before deferencing {CVE-2026-31540}
  • mac802154: check local interfaces before deleting sdata list {CVE-2024-57948}
  • lib/buildid: use __kernel_read() for sleepable context {CVE-2026-23002}
  • scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs {CVE-2023-52808}
  • net: fix memory leak in skb_segment_list for GRO packets {CVE-2026-22979}
  • irqchip/imx-irqsteer: Handle runtime power management correctly {CVE-2024-42290}
  • io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop {CVE-2026-23113}
  • net/sched: ets: Remove drr class from the active list if it changes to strict {CVE-2025-68815}
  • net: bonding: fix NULL deref in bond_debug_rlb_hash_show {CVE-2026-31546}
  • ipvs: fix ipv4 null-ptr-deref in route error path {CVE-2025-68813}
  • openvswitch: fix lockup on tx to unregistering netdev with carrier {CVE-2025-21681}
  • net: USB: Fix wrong-direction WARNING in plusb.c {CVE-2023-52742}
  • module: Fix kernel panic when a symbol st_shndx is out of bounds {CVE-2026-31521}
  • udf: Fix preallocation discarding at indirect extent boundary {CVE-2022-48946}
  • net/mlx5: qos: Restrict RTNL area to avoid a lock cycle {CVE-2025-39947}
  • scsi: core: Wake up the error handler when final completions race against each other {CVE-2026-23110}
  • nbd: don't allow reconnect after disconnect {CVE-2025-21731}
  • nfsd: check that server is running in unlock_filesystem {CVE-2026-22989}
  • af_key: validate families in pfkey_send_migrate() {CVE-2026-31515}
  • netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() {CVE-2024-36286} -…
Record
CLSA-2026-1782155469
Updated
2026-11-02
OSVCLSA-2026-1782382498 No score

kernel: Fix of 23 CVEs

  • net/sched: fix pedit partial COW leading to page cache corruption {CVE-2026-46331}
  • net: add xmit recursion limit to tunnel xmit functions {CVE-2026-23276}
  • x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 {CVE-2026-23005}
  • wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode {CVE-2025-40321}
  • net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY {CVE-2025-37945}
  • xfs: delete attr leaf freemap entries when empty {CVE-2026-43158}
  • ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr {CVE-2025-68183}
  • crypto: af_alg - Fix incorrect boolean values in af_alg_ctx
  • scsi: hisi_sas: Grab sas_dev lock when traversing the members of sas_dev.list {CVE-2023-53627}
  • bonding: annotate data-races around slave->last_rx {CVE-2026-23212}
  • rxrpc: Fix data-race warning and potential load/store tearing {CVE-2026-23118}
  • net: phy: register phy led_triggers during probe to avoid AB-BA deadlock {CVE-2026-23368}
  • tracing: Do not register unsupported perf events {CVE-2025-71125}
  • ACPICA: Avoid walking the Namespace if start_node is NULL {CVE-2025-71118}
  • icmp: fix NULL pointer dereference in icmp_tag_validation() {CVE-2026-23398}
  • nfc: rawsock: cancel tx_work before socket teardown {CVE-2026-23372}
  • bridge: cfm: Fix race condition in peer_mep deletion {CVE-2026-23393}
  • batman-adv: reject oversized global TT response buffers {CVE-2026-31659}
  • NFC: digital: Bounds check NFC-A cascade depth in SDD response handler {CVE-2026-31622}
  • bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue {CVE-2024-36938}
  • virtiofs: use pages instead of pointer for kernel direct IO {CVE-2024-53219}
  • acct: perform last write from workqueue {CVE-2025-21846}
  • NFSD: fix race between nfsd registration and exports_proc {CVE-2025-38232}
  • atm: clip: Fix memory leak of struct clip_vcc. {CVE-2025-38546}
  • efi: Do not import certificates from UEFI Secure Boot for T2 Macs {CVE-2022-49357}
Record
CLSA-2026-1782382498
Updated
2026-11-02
OSVCLSA-2026-1782393170 No score

kernel-uek: Fix of 2 CVEs

  • net/sched: fix pedit partial COW leading to page cache corruption {CVE-2026-46331}
  • xfrm_user: fix info leak in build_mapping() {CVE-2026-43089}
  • xfs: fix freemap adjustments when adding xattrs to leaf blocks {CVE-2026-43158}
Record
CLSA-2026-1782393170
Updated
2026-11-02
OSVCLSA-2026-1783337441 No score

kernel: Fix of 17 CVEs

  • KVM: x86: Fix shadow paging use-after-free due to unexpected GFN/role {CVE-2026-46113}
  • btrfs: fix use-after-free after failure to create a snapshot {CVE-2022-48733}
  • Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold {CVE-2026-31408}
  • xfs: delete attr leaf freemap entries when empty {CVE-2026-43158}
  • net: atlantic: eliminate double free in error handling logic {CVE-2023-52664}
  • media: dvbdev: adopts refcnt to avoid UAF {CVE-2022-50274}
  • igbvf: fix double free in igbvf_probe {CVE-2021-47589}
  • scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select() {CVE-2021-47576}
  • ALSA: seq: Fix race of snd_seq_timer_open() {CVE-2021-47281}
  • net: af_key: zero aligned sockaddr tail in PF_KEY exports {CVE-2026-43088}
  • IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields {CVE-2021-47485}
  • wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads {CVE-2022-49740}
  • proc/vmcore: fix clearing user buffer by properly using clear_user()
  • staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()
  • ASoC: ops: Correct bounds check for second channel on SX controls {CVE-2022-48951}
  • ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() {CVE-2022-48951}
  • nfsd: fix use-after-free due to delegation race {CVE-2021-47506}
Record
CLSA-2026-1783337441
Updated
2026-11-02
OSVCLSA-2026-1783337794 No score

kernel: Fix of 17 CVEs

  • KVM: x86: Fix shadow paging use-after-free due to unexpected GFN/role {CVE-2026-46113}
  • btrfs: fix use-after-free after failure to create a snapshot {CVE-2022-48733}
  • Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold {CVE-2026-31408}
  • xfs: delete attr leaf freemap entries when empty {CVE-2026-43158}
  • net: atlantic: eliminate double free in error handling logic {CVE-2023-52664}
  • media: dvbdev: adopts refcnt to avoid UAF {CVE-2022-50274}
  • igbvf: fix double free in igbvf_probe {CVE-2021-47589}
  • scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select() {CVE-2021-47576}
  • ALSA: seq: Fix race of snd_seq_timer_open() {CVE-2021-47281}
  • net: af_key: zero aligned sockaddr tail in PF_KEY exports {CVE-2026-43088}
  • IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields {CVE-2021-47485}
  • wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads {CVE-2022-49740}
  • proc/vmcore: fix clearing user buffer by properly using clear_user()
  • staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()
  • ASoC: ops: Correct bounds check for second channel on SX controls {CVE-2022-48951}
  • ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() {CVE-2022-48951}
  • nfsd: fix use-after-free due to delegation race {CVE-2021-47506}
Record
CLSA-2026-1783337794
Updated
2026-11-02
OSVCLSA-2026-1783354994 No score

kernel: Fix of 17 CVEs

  • KVM: x86: Fix shadow paging use-after-free due to unexpected GFN/role {CVE-2026-46113}
  • btrfs: fix use-after-free after failure to create a snapshot {CVE-2022-48733}
  • Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold {CVE-2026-31408}
  • xfs: delete attr leaf freemap entries when empty {CVE-2026-43158}
  • net: atlantic: eliminate double free in error handling logic {CVE-2023-52664}
  • media: dvbdev: adopts refcnt to avoid UAF {CVE-2022-50274}
  • igbvf: fix double free in igbvf_probe {CVE-2021-47589}
  • scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select() {CVE-2021-47576}
  • ALSA: seq: Fix race of snd_seq_timer_open() {CVE-2021-47281}
  • net: af_key: zero aligned sockaddr tail in PF_KEY exports {CVE-2026-43088}
  • IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields {CVE-2021-47485}
  • wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads {CVE-2022-49740}
  • proc/vmcore: fix clearing user buffer by properly using clear_user()
  • staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()
  • ASoC: ops: Correct bounds check for second channel on SX controls {CVE-2022-48951}
  • ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() {CVE-2022-48951}
  • nfsd: fix use-after-free due to delegation race {CVE-2021-47506}
Record
CLSA-2026-1783354994
Updated
2026-11-02
OSVCLSA-2026-1783788671 No score

kernel: Fix of 9 CVEs

  • rtmutex: Use waiter::task instead of current in remove_waiter() {CVE-2026-43499}
  • xfs: fix freemap adjustments when adding xattrs to leaf blocks {CVE-2026-43158}
  • xfs: delete attr leaf freemap entries when empty {CVE-2026-43158}
  • ALSA: 6fire: fix use-after-free on disconnect {CVE-2026-31581}
  • brcmfmac: add subtype check for event handling in data path {CVE-2019-9503}
  • nl80211: validate beacon head {CVE-2019-16746}
  • ALSA: usb-audio: Fix UAF decrement if card has no live interfaces in card.c {CVE-2018-19824}
  • media: dvb-net: fix OOB access in ULE extension header tables {CVE-2026-31405}
  • mac80211: Reject malformed SSID elements {CVE-2019-17133}
Record
CLSA-2026-1783788671
Updated
2026-11-02
OSVCLSA-2026-1783789658 No score

kernel: Fix of 9 CVEs

  • rtmutex: Use waiter::task instead of current in remove_waiter() {CVE-2026-43499}
  • xfs: fix freemap adjustments when adding xattrs to leaf blocks {CVE-2026-43158}
  • xfs: delete attr leaf freemap entries when empty {CVE-2026-43158}
  • ALSA: 6fire: fix use-after-free on disconnect {CVE-2026-31581}
  • brcmfmac: add subtype check for event handling in data path {CVE-2019-9503}
  • nl80211: validate beacon head {CVE-2019-16746}
  • ALSA: usb-audio: Fix UAF decrement if card has no live interfaces in card.c {CVE-2018-19824}
  • media: dvb-net: fix OOB access in ULE extension header tables {CVE-2026-31405}
  • mac80211: Reject malformed SSID elements {CVE-2019-17133}
Record
CLSA-2026-1783789658
Updated
2026-11-02
OSVCLSA-2026-1785558687 No score

kernel: Fix of 16 CVEs

  • scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses
  • scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process()
  • i40e: increase max descriptors for XL710
  • e1000e: fix heap overflow in e1000_set_eeprom
  • vsock: avoid to close connected socket after the timeout
  • ext4: fix use-after-free in ext4_orphan_cleanup
  • ext4: lost matching-pair of trace in ext4_truncate
  • ext4: allow ext4_truncate() to return an error
  • net: sched: sch_teql: fix null-pointer dereference
  • drm/virtio: move drm_connector_update_edid_property() call
  • cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level()
  • cifs: serialise setting of cifsInodeInfo::oplock
  • cifs: serialise DIO and buffered IO
  • RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug {CVE-2025-38024}
  • netfilter: nf_tables: fix use-after-free in nf_tables_addchain()
  • iavf: Fix reset error handling
  • RDMA/rxe: Fix incomplete state save in rxe_requester
  • scsi: qla2xxx: Fix bsg_done() causing double free
  • nfsd: fix heap overflow in NFSv4.0 LOCK replay cache {CVE-2026-31402}
  • net: check iov bounds in memcpy_from_msg() {CVE-2018-16885}
  • md/bitmap: fix GPF in write_page caused by resize race {CVE-2026-43163}
  • RDMA/rxe: Fix lines missed in backport of Fix incomplete state save in rxe_requester
  • ip6_tunnel: clear skb2->cb[] in ip4ip6_err() {CVE-2026-43037}
  • wifi: brcmfmac: validate bsscfg indices in IF events {CVE-2026-43110}
  • xfs: fix freemap adjustments when adding xattrs to leaf blocks {CVE-2026-43158}
  • dlm: fix buffer overflow from negative len in dlm_search_rsb_tree {CVE-2026-43125}
  • RDMA/rxe: Fix double free in rxe_srq_from_init {CVE-2026-45852}
  • tcp: fix potential race in tcp_v6_syn_recv_sock() {CVE-2026-43198}
  • RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() {CVE-2026-46181}
  • net: sched: act_csum: validate nested VLAN headers {CVE-2026-31684}
  • xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete {CVE-2026-46116}
  • ALSA: aloop: Fix peer runtime UAF during format-change stop {CVE-2026-46090}
  • rtmutex: Skip remove_waiter() when waiter is not enqueued {CVE-2026-53166}
  • RDMA/rxe: Zero out index member of struct rxe_queue
Record
CLSA-2026-1785558687
Updated
2026-11-02
OSVCLSA-2026-1785561693 No score

kernel: Fix of 14 CVEs

  • scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses
  • scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process()
  • i40e: increase max descriptors for XL710
  • e1000e: fix heap overflow in e1000_set_eeprom
  • vsock: avoid to close connected socket after the timeout
  • ext4: fix use-after-free in ext4_orphan_cleanup
  • ext4: lost matching-pair of trace in ext4_truncate
  • ext4: allow ext4_truncate() to return an error
  • net: sched: sch_teql: fix null-pointer dereference
  • drm/virtio: move drm_connector_update_edid_property() call
  • cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level()
  • cifs: serialise setting of cifsInodeInfo::oplock
  • cifs: serialise DIO and buffered IO
  • RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug {CVE-2025-38024}
  • netfilter: nf_tables: fix use-after-free in nf_tables_addchain()
  • iavf: Fix reset error handling
  • RDMA/rxe: Fix incomplete state save in rxe_requester
  • scsi: qla2xxx: Fix bsg_done() causing double free
  • nfsd: fix heap overflow in NFSv4.0 LOCK replay cache {CVE-2026-31402}
  • net: check iov bounds in memcpy_from_msg() {CVE-2018-16885}
  • md/bitmap: fix GPF in write_page caused by resize race {CVE-2026-43163}
  • RDMA/rxe: Fix lines missed in backport of Fix incomplete state save in rxe_requester
  • ip6_tunnel: clear skb2->cb[] in ip4ip6_err() {CVE-2026-43037}
  • wifi: brcmfmac: validate bsscfg indices in IF events {CVE-2026-43110}
  • xfs: fix freemap adjustments when adding xattrs to leaf blocks {CVE-2026-43158}
  • dlm: fix buffer overflow from negative len in dlm_search_rsb_tree {CVE-2026-43125}
  • RDMA/rxe: Fix double free in rxe_srq_from_init {CVE-2026-45852}
  • tcp: fix potential race in tcp_v6_syn_recv_sock() {CVE-2026-43198}
  • RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() {CVE-2026-46181}
  • net: sched: act_csum: validate nested VLAN headers {CVE-2026-31684}
  • xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete {CVE-2026-46116}
  • ALSA: aloop: Fix peer runtime UAF during format-change stop {CVE-2026-46090}
  • rtmutex: Skip remove_waiter() when waiter is not enqueued {CVE-2026-53166}
  • RDMA/rxe: Zero out index member of struct rxe_queue
Record
CLSA-2026-1785561693
Updated
2026-11-02
OSVCLSA-2026-1785752193 No score

kernel: Fix of 16 CVEs

  • scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses
  • scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process()
  • i40e: increase max descriptors for XL710
  • e1000e: fix heap overflow in e1000_set_eeprom
  • vsock: avoid to close connected socket after the timeout
  • ext4: fix use-after-free in ext4_orphan_cleanup
  • ext4: lost matching-pair of trace in ext4_truncate
  • ext4: allow ext4_truncate() to return an error
  • net: sched: sch_teql: fix null-pointer dereference
  • drm/virtio: move drm_connector_update_edid_property() call
  • cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level()
  • cifs: serialise setting of cifsInodeInfo::oplock
  • cifs: serialise DIO and buffered IO
  • RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug {CVE-2025-38024}
  • netfilter: nf_tables: fix use-after-free in nf_tables_addchain()
  • iavf: Fix reset error handling
  • RDMA/rxe: Fix incomplete state save in rxe_requester
  • scsi: qla2xxx: Fix bsg_done() causing double free
  • nfsd: fix heap overflow in NFSv4.0 LOCK replay cache {CVE-2026-31402}
  • net: check iov bounds in memcpy_from_msg() {CVE-2018-16885}
  • md/bitmap: fix GPF in write_page caused by resize race {CVE-2026-43163}
  • RDMA/rxe: Fix lines missed in backport of Fix incomplete state save in rxe_requester
  • ip6_tunnel: clear skb2->cb[] in ip4ip6_err() {CVE-2026-43037}
  • wifi: brcmfmac: validate bsscfg indices in IF events {CVE-2026-43110}
  • xfs: fix freemap adjustments when adding xattrs to leaf blocks {CVE-2026-43158}
  • dlm: fix buffer overflow from negative len in dlm_search_rsb_tree {CVE-2026-43125}
  • RDMA/rxe: Fix double free in rxe_srq_from_init {CVE-2026-45852}
  • tcp: fix potential race in tcp_v6_syn_recv_sock() {CVE-2026-43198}
  • RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() {CVE-2026-46181}
  • net: sched: act_csum: validate nested VLAN headers {CVE-2026-31684}
  • xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete {CVE-2026-46116}
  • ALSA: aloop: Fix peer runtime UAF during format-change stop {CVE-2026-46090}
  • rtmutex: Skip remove_waiter() when waiter is not enqueued {CVE-2026-53166}
  • RDMA/rxe: Zero out index member of struct rxe_queue
Record
CLSA-2026-1785752193
Updated
2026-11-02
OSVCLSA-2026-1787304608 No score

kernel-uek: Fix of 34 CVEs

  • Rebased onto Oracle UEK base 5.4.17-2136.357.2.el7uek
  • sctp: don't free the ASCONF's own transport in DEL-IP processing {CVE-2026-64564}
  • ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison {CVE-2026-53309}
  • ocfs2/dlm: validate qr_numregions in dlm_match_regions() {CVE-2026-53043}
  • ixgbevf: fix use-after-free in VEPA multicast source pruning {CVE-2026-64113}
  • ipv4: raw: reject IP_HDRINCL packets with ihl < 5 {CVE-2026-64114}
  • NFSv4: include MAY_WRITE in open permission mask for O_TRUNC {CVE-2026-64298}
  • fuse: re-lock request before returning from fuse_ref_folio() {CVE-2026-64266}
  • scsi: isci: Fix use-after-free in device removal path {CVE-2026-64103}
  • crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec {CVE-2026-23060}
  • futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock {CVE-2026-53166}
  • net: af_key: zero aligned sockaddr tail in PF_KEY exports {CVE-2026-43088}
  • scsi: aic94xx: fix use-after-free in device removal path {CVE-2025-71075}
  • i2c: piix4: Fix adapter not be removed in piix4_remove() {CVE-2022-49900}
  • Bluetooth: MGMT: validate LTK enc_size on load {CVE-2026-43020}
  • ext4: convert inline data to extents when truncate exceeds inline size {CVE-2026-31452}
  • can: raw: fix ro->uniq use-after-free in raw_rcv() {CVE-2026-31532}
  • ALSA: 6fire: fix use-after-free on disconnect {CVE-2026-31581}
  • ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY {CVE-2026-31597}
  • netfilter: nf_conntrack_helper: pass helper to expect cleanup {CVE-2026-43027}
  • drm/amdgpu: Fix use-after-free race in VM acquire {CVE-2026-43370}
  • xfrm_user: fix info leak in build_mapping() {CVE-2026-43089}
  • xfs: fix freemap adjustments when adding xattrs to leaf blocks {CVE-2026-43158}
  • libceph: make decode_pool() more resilient against corrupted osdmaps {CVE-2025-71116}
  • e1000: fix OOB in e1000_tbi_should_accept() {CVE-2025-71093}
  • ALSA: usb-audio: Use correct version for UAC3 header validation {CVE-2026-23318}
  • nfnetlink_osf: validate individual option lengths in fingerprints {CVE-2026-23397}
  • Squashfs: check metadata block offset is within range {CVE-2026-23388}
  • net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled {CVE-2026-23381}
  • wifi: mac80211: fix NULL deref in mesh_matches_local() {CVE-2026-23396}
  • icmp: fix NULL pointer dereference in icmp_tag_validation() {CVE-2026-23398}
  • HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them {CVE-2026-23382}
  • net: usb: kalmia: validate USB endpoints {CVE-2026-23365}
  • wifi: radiotap: reject radiotap with unknown bits {CVE-2026-23367}
  • drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() {CVE-2026-23356}
  • batman-adv: reject oversized global TT response buffers {CVE-2026-31659}
  • drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() {CVE-2026-43206}
  • net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak {CVE-2026-43040}
  • ALSA: ctxfi: Limit PTP to a single page {CVE-2026-31602}
  • nvdimm/bus: Fix potential use after free in asynchronous initialization {CVE-2026-31399}
  • usb: class: cdc-wdm: fix reordering issue in read code path {CVE-2026-43427}
  • media: dvb-net: fix OOB access in ULE extension header tables {CVE-2026-31405}
  • sysctl: Fix data races in proc_douintvec(). {CVE-2022-49641}
  • netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() {CVE-2026-43450}
  • ALSA: caiaq: fix stack out-of-bounds read in init_card {CVE-2026-31778}
  • atm: lec: fix use-after-free in sock_def_readable() {CVE-2026-43050}
  • fs: writeback: fix use-after-free in __mark_inode_dirty() {CVE-2025-39866}
  • usb: core: config: Prevent OOB read in SS endpoint companion parsing {CVE-2025-39760}
  • crypto: lzo - Fix compression buffer overrun {CVE-2025-38068}
  • KVM: x86: Reset IRTE to host control if new route isn't postable {CVE-2025-37885}
  • vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint {CVE-2025-22083}
  • mm:…
Record
CLSA-2026-1787304608
Updated
2026-11-02
OSVCLSA-2026-1789958474 No score

Fix of 167 CVEs

  • CVE-2025-39826
    • net: rose: convert 'use' field to refcount_t {CVE-2025-39826}
  • CVE-2025-40146
    • blk-mq: fix potential deadlock while nr_requests grown {CVE-2025-40146}
  • CVE-2024-53216
    • nfsd: release svc_expkey/svc_export with rcu_work {CVE-2024-53216}
  • CVE-2026-89778
    • isofs: fix out-of-bounds page array access on empty zisofs block {CVE-2026-89778}
  • CVE-2026-23050
    • pNFS: Fix a deadlock when returning a delegation during open() {CVE-2026-23050}
  • CVE-2025-68796
    • f2fs: fix to avoid updating zero-sized extent in extent cache {CVE-2025-68796}
  • CVE-2025-68330
    • iio: accel: bmc150: Fix irq assumption regression {CVE-2025-68330}
  • CVE-2025-40333
    • f2fs: fix infinite loop in __insert_extent_tree() {CVE-2025-40333}
  • CVE-2025-40160
    • xen/events: Return -EEXIST for bound VIRQs {CVE-2025-40160}
  • CVE-2023-54047
    • drm/rockchip: dw_hdmi: cleanup drm encoder during unbind {CVE-2023-54047}
  • CVE-2025-68190
    • drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() {CVE-2025-68190}
  • CVE-2025-68188
    • tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() {CVE-2025-68188}
  • CVE-2026-89786
    • ext4: fix out-of-bounds read in ext4_read_inline_dir() {CVE-2026-89786}
  • CVE-2022-50764
    • ipv6/sit: use DEV_STATS_INC() to avoid data-races {CVE-2022-50764}
  • CVE-2026-80785
    • fbdev: serialize mode sysfs access with lock_fb_info() {CVE-2026-80785}
  • CVE-2026-80788
    • nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations {CVE-2026-80788}
  • CVE-2026-80747
    • drm/amdkfd: Add bounds check for CRAT subtype length {CVE-2026-80747}
  • CVE-2026-80907
    • drm/amdgpu: Fix UVD dpb min size calculation for H264 {CVE-2026-80907}
  • CVE-2026-80908
    • drm/amdgpu: Reject UVD message with dimensions above 4096 {CVE-2026-80908}
  • CVE-2026-80812
    • ALSA: dummy: Check card index validity at probe {CVE-2026-80812}
  • CVE-2026-80948
    • wifi: iwlwifi: dvm: fix memory leak in iwl_op_mode_dvm_start() {CVE-2026-80948}
  • CVE-2025-40137
    • f2fs: fix to truncate first page in error path of f2fs_truncate() {CVE-2025-40137}
  • CVE-2023-54150
    • drm/amd: Fix an out of bounds error in BIOS parser {CVE-2023-54150}
  • CVE-2026-89784
    • SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 {CVE-2026-89784}
  • CVE-2026-89783
    • xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full {CVE-2026-89783}
  • CVE-2026-89780
    • net: qualcomm: rmnet: restore skb->dev on deaggregated frames {CVE-2026-89780}
  • CVE-2026-89777
    • vfio/pci: clear vdev->msi_perm after freeing it on init failure {CVE-2026-89777}
  • CVE-2026-89789
    • gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free {CVE-2026-89789}
  • CVE-2025-68797
    • char: applicom: fix NULL pointer dereference in ac_ioctl {CVE-2025-68797}
  • CVE-2025-68767
    • hfsplus: Verify inode mode when loading from disk {CVE-2025-68767}
  • CVE-2026-63961
    • usb: typec: altmodes/displayport: validate count before reading Status Update VDO {CVE-2026-63961}
  • CVE-2026-63904
    • usb: usbtmc: check URB actual_length for interrupt-IN notifications {CVE-2026-63904}
  • CVE-2022-50864
    • nilfs2: fix shift-out-of-bounds due to too large exponent of block size {CVE-2022-50864}
  • CVE-2025-68771
    • ocfs2: fix kernel BUG in ocfs2_find_victim_chain {CVE-2025-68771}
  • CVE-2025-68750
    • usb: potential integer overflow in usbg_make_tpg() {CVE-2025-68750}
  • CVE-2026-80909
    • drm/amdgpu: Reject UVD message with invalid number of h265 refs {CVE-2026-80909}
  • CVE-2026-74402
    • crypto: atmel-sha204a - fix blocking and non-blocking rng logic {CVE-2026-74402} *…
Record
CLSA-2026-1789958474
Updated
2026-11-02
OSVCLSA-2026-1791132071 No score

Fix of 159 CVEs

  • CVE-2026-64375
    • proc: protect ptrace_may_access() with exec_update_lock (FD links) {CVE-2026-64375}
    • exec: Add exec_update_mutex to replace cred_guard_mutex {CVE-2026-64375}
  • CVE-2026-53266
    • netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
  • CVE-2025-39964
    • crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
  • CVE-2026-90413
    • IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413}
  • CVE-2026-53062
    • dm cache policy smq: test e->allocated under the policy lock {CVE-2026-53062}
    • dm cache policy smq: fix missing locks in invalidating cache blocks {CVE-2026-53062}
  • CVE-2026-64237
    • Input: elan_i2c - release the firmware on the short-file path {CVE-2026-64237}
    • Input: elan_i2c - validate firmware size before use {CVE-2026-64237}
  • CVE-2026-64109
    • af_unix: fix the UAF read of tail->len without losing the wakeup condition {CVE-2026-64109}
    • af_unix: Fix UAF read of tail->len in unix_stream_data_wait() {CVE-2026-64109}
  • CVE-2025-38512
    • wifi: prevent A-MSDU attacks in mesh networks {CVE-2025-38512}
  • CVE-2025-38117
    • Bluetooth: MGMT: Protect mgmt_pending list with its own lock {CVE-2025-38117}
  • CVE-2026-22980
    • nfsd: provide locking for v4_end_grace {CVE-2026-22980}
  • CVE-2023-53254
    • cacheinfo: Fix shared_cpu_map to handle shared caches at different levels {CVE-2023-53254}
  • CVE-2025-37885
    • KVM: x86: Reset IRTE to host control if new route isn't postable {CVE-2025-37885}
  • CVE-2026-23191
    • ALSA: aloop: Fix racy access at PCM trigger {CVE-2026-23191}
  • CVE-2025-37879
    • 9p/net: fix improper handling of bogus negative read/write replies {CVE-2025-37879}
  • CVE-2023-53039
    • HID: intel-ish-hid: ipc: Fix potential use-after-free in work function {CVE-2023-53039}
  • CVE-2019-12456
    • scsi: mpt3sas_ctl: fix double-fetch bug in _ctl_ioctl_main() {CVE-2019-12456}
  • CVE-2024-46812
    • drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration {CVE-2024-46812}
  • CVE-2026-31761
    • iio: gyro: mpu3050: Move iio_device_register() to correct location {CVE-2026-31761}
  • CVE-2026-53120
    • PCI: RCU-protect driver_override against pci_match_device() UAF {CVE-2026-53120}
  • CVE-2026-31598
    • ocfs2: fix possible deadlock between unlink and dio_end_io_write {CVE-2026-31598}
  • CVE-2026-43075
    • ocfs2: fix out-of-bounds write in ocfs2_write_end_inline {CVE-2026-43075}
  • CVE-2024-41013
    • xfs: don't walk off the end of a directory data block {CVE-2024-41013}
  • CVE-2026-31527
    • driver core: platform: RCU-protect driver_override against match() UAF {CVE-2026-31527}
  • CVE-2022-48744
    • net/mlx5e: Avoid field-overflowing memcpy() {CVE-2022-48744}
  • CVE-2023-53510
    • scsi: ufs: core: Fix handling of lrbp->cmd {CVE-2023-53510}
  • CVE-2026-23268
    • apparmor: fix unprivileged local user can do privileged policy management {CVE-2026-23268}
  • CVE-2026-23269
    • apparmor: validate DFA start states are in bounds in unpack_pdb {CVE-2026-23269}
  • CVE-2025-21812
    • ax25: rcu protect dev->ax25_ptr {CVE-2025-21812}
  • CVE-2026-46266
    • inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266}
  • CVE-2026-53228
    • ipv6: sit: reload inner IPv6 header after GSO offloads {CVE-2026-53228}
  • CVE-2026-53355
    • net: rds: clear i_sends on setup unwind {CVE-2026-53355}
  • CVE-2026-45970
    • bonding: alb: fix UAF in rlb_arp_recv during bond up/down {CVE-2026-45970}
  • CVE-2023-52922
    • can: bcm: Fix UAF in bcm_proc_show() {CVE-2023-52922}
  • CVE-2026-52920
    • netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920} *…
Record
CLSA-2026-1791132071
Updated
2026-11-02
OSVCLSA-2026-1791132078 No score

Fix of 160 CVEs

  • CVE-2026-64375
    • proc: protect ptrace_may_access() with exec_update_lock (FD links) {CVE-2026-64375}
    • exec: Add exec_update_mutex to replace cred_guard_mutex {CVE-2026-64375}
  • CVE-2026-53266
    • netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
  • CVE-2025-39964
    • crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
  • CVE-2026-90413
    • IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413}
  • CVE-2026-53062
    • dm cache policy smq: test e->allocated under the policy lock {CVE-2026-53062}
    • dm cache policy smq: fix missing locks in invalidating cache blocks {CVE-2026-53062}
  • CVE-2026-64237
    • Input: elan_i2c - release the firmware on the short-file path {CVE-2026-64237}
    • Input: elan_i2c - validate firmware size before use {CVE-2026-64237}
  • CVE-2026-64109
    • af_unix: fix the UAF read of tail->len without losing the wakeup condition {CVE-2026-64109}
    • af_unix: Fix UAF read of tail->len in unix_stream_data_wait() {CVE-2026-64109}
  • CVE-2025-38512
    • wifi: prevent A-MSDU attacks in mesh networks {CVE-2025-38512}
  • CVE-2025-38117
    • Bluetooth: MGMT: Protect mgmt_pending list with its own lock {CVE-2025-38117}
  • CVE-2026-22980
    • nfsd: provide locking for v4_end_grace {CVE-2026-22980}
  • CVE-2023-53254
    • cacheinfo: Fix shared_cpu_map to handle shared caches at different levels {CVE-2023-53254}
  • CVE-2025-37885
    • KVM: x86: Reset IRTE to host control if new route isn't postable {CVE-2025-37885}
  • CVE-2026-23191
    • ALSA: aloop: Fix racy access at PCM trigger {CVE-2026-23191}
  • CVE-2025-37879
    • 9p/net: fix improper handling of bogus negative read/write replies {CVE-2025-37879}
  • CVE-2023-53039
    • HID: intel-ish-hid: ipc: Fix potential use-after-free in work function {CVE-2023-53039}
  • CVE-2019-12456
    • scsi: mpt3sas_ctl: fix double-fetch bug in _ctl_ioctl_main() {CVE-2019-12456}
  • CVE-2024-46812
    • drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration {CVE-2024-46812}
  • CVE-2026-31761
    • iio: gyro: mpu3050: Move iio_device_register() to correct location {CVE-2026-31761}
  • CVE-2026-53120
    • PCI: RCU-protect driver_override against pci_match_device() UAF {CVE-2026-53120}
  • CVE-2026-31598
    • ocfs2: fix possible deadlock between unlink and dio_end_io_write {CVE-2026-31598}
  • CVE-2026-43075
    • ocfs2: fix out-of-bounds write in ocfs2_write_end_inline {CVE-2026-43075}
  • CVE-2024-41013
    • xfs: don't walk off the end of a directory data block {CVE-2024-41013}
  • CVE-2026-31527
    • driver core: platform: RCU-protect driver_override against match() UAF {CVE-2026-31527}
  • CVE-2022-48744
    • net/mlx5e: Avoid field-overflowing memcpy() {CVE-2022-48744}
  • CVE-2023-53510
    • scsi: ufs: core: Fix handling of lrbp->cmd {CVE-2023-53510}
  • CVE-2026-23268
    • apparmor: fix unprivileged local user can do privileged policy management {CVE-2026-23268}
  • CVE-2026-23269
    • apparmor: validate DFA start states are in bounds in unpack_pdb {CVE-2026-23269}
  • CVE-2025-21812
    • ax25: rcu protect dev->ax25_ptr {CVE-2025-21812}
  • CVE-2026-46266
    • inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266}
  • CVE-2026-53228
    • ipv6: sit: reload inner IPv6 header after GSO offloads {CVE-2026-53228}
  • CVE-2026-53355
    • net: rds: clear i_sends on setup unwind {CVE-2026-53355}
  • CVE-2026-45970
    • bonding: alb: fix UAF in rlb_arp_recv during bond up/down {CVE-2026-45970}
  • CVE-2023-52922
    • can: bcm: Fix UAF in bcm_proc_show() {CVE-2023-52922}
  • CVE-2026-52920
    • netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920} *…
Record
CLSA-2026-1791132078
Updated
2026-11-02
OSVopenSUSE-SU-2026:21388-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-10263: arm64: cputype: Add C1-Premium definitions (bsc#1266290).
  • CVE-2025-39894: netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm (bsc#1262430).
  • CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
  • CVE-2026-23248: perf: Make perf_pmu_unregister() useable (bsc#1259800).
  • CVE-2026-23394: Revert: "af_unix: Remove lock dance in unix_peek_fds()." (bsc#1260565).
  • CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
  • CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
  • CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
  • CVE-2026-31438: netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators (bsc#1267824).
  • CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
  • CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
  • CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
  • CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (bsc#1267816).
  • CVE-2026-31479: drm/xe: always keep track of remap prev/next (bsc#1262765).
  • CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
  • CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
  • CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
  • CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
  • CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
  • CVE-2026-31560: spi: spi-dw-dma: fix print error log when wait finish transaction (bsc#1263057).
  • CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
  • CVE-2026-31646: net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() (bsc#1263796).
  • CVE-2026-31647: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (bsc#1263581).
  • CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
  • CVE-2026-31664: xfrm: clear trailing padding in build_polexpire() (bsc#1263578).
  • CVE-2026-31665: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
  • CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
  • CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
  • CVE-2026-31674: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (bsc#1263568).
  • CVE-2026-31680: net: ipv6: flowlabel: defer exclusive option free until RCU teardown (bsc#1263563).
  • CVE-2026-31693: cifs: some missing initializations on replay (bsc#1267744).
  • CVE-2026-31743: nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy (bsc#1264067).
  • CVE-2026-31752: bridge: br_nd_send: validate ND option lengths (bsc#1264045).
  • CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
  • CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
  • CVE-2026-43014,CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010 bsc#1264012).
  • CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
  • CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
  • CVE-2026-43024: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).
  • CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934).
  • CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
  • CVE-2026-43035: net:…
Record
openSUSE-SU-2026:21388-1
Updated
2026-11-02
OSVSUSE-SU-2026:22433-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2025-10263: arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1266290).
  • CVE-2025-38549: efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths (bsc#1248235).
  • CVE-2025-68324: scsi: imm: Fix use-after-free bug caused by unfinished delayed work (bsc#1255416).
  • CVE-2025-68822: Input: alps - fix use-after-free bugs caused by dev3_register_work (bsc#1256668).
  • CVE-2026-23303: smb: client: Don't log plaintext credentials in cifs_set_cifscreds (bsc#1260502).
  • CVE-2026-23327: cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()
  • CVE-2026-23359: bpf: Fix stack-out-of-bounds write in devmap (bsc#1260584).
  • CVE-2026-23438: net: mvpp2: guard flow control update with global_tx_fc in buffer switching (bsc#1261619).
  • CVE-2026-23444: wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure (bsc#1266307).
  • CVE-2026-31396: net: macb: fix use-after-free access to PTP clock (bsc#1261791).
  • CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
  • CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
  • CVE-2026-31446: ext4: fix use-after-free in update_super_work when racing with umount (bsc#1262619).
  • CVE-2026-31448: ext4: avoid infinite loops caused by residual data (bsc#1262622).
  • CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
  • CVE-2026-31454: xfs: save ailp before dropping the AIL lock in push callbacks (bsc#1262624).
  • CVE-2026-31455: xfs: stop reclaim before pushing AIL during unmount (bsc#1262615).
  • CVE-2026-31464: scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() (bsc#1262656).
  • CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false
  • CVE-2026-31473: media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex (bsc#1262663).
  • CVE-2026-31480: tracing: Fix potential deadlock in cpu hotplug with osnoise (bsc#1262634).
  • CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
  • CVE-2026-31493: RDMA/efa: Fix use of completion ctx after free (bsc#1262668).
  • CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
  • CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
  • CVE-2026-31500: Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock (bsc#1262993).
  • CVE-2026-31516: xfrm: prevent policy_hthresh.work from racing with netns teardown (bsc#1262755).
  • CVE-2026-31518: esp: fix skb leak with espintcp and async crypto (bsc#1262606).
  • CVE-2026-31546: net: bonding: fix NULL deref in bond_debug_rlb_hash_show (bsc#1263006).
  • CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
  • CVE-2026-31590: KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION (bsc#1263152).
  • CVE-2026-31592: KVM: SEV: Protect all of sev_mem_enc_register_region() with kvm->lock (bsc#1263123).
  • CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
  • CVE-2026-31613: smb: client: fix OOB reads parsing symlink error response (bsc#1263769).
  • CVE-2026-31614: smb: client: fix off-by-8 bounds check in check_wsl_eas() (bsc#1263774).
  • CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263790).
  • CVE-2026-31655: pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled (bsc#1263724).
  • CVE-2026-31664: string.h: Introduce memset_after() for wiping trailing members/padding (bsc#1263578).
  • CVE-2026-31665: kABI: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
  • CVE-2026-31671: xfrm_user: fix info leak in build_report() (bsc#1263115).
  • CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock…
Record
SUSE-SU-2026:22433-1
Updated
2026-11-02
OSVSUSE-SU-2026:22436-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2025-10263: arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1266290).
  • CVE-2025-68822: Input: alps - fix use-after-free bugs caused by dev3_register_work (bsc#1256668).
  • CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
  • CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
  • CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
  • CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false
  • CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
  • CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
  • CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
  • CVE-2026-31500: Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock (bsc#1262993).
  • CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
  • CVE-2026-31592: KVM: SEV: Protect all of sev_mem_enc_register_region() with kvm->lock (bsc#1263123).
  • CVE-2026-31664: string.h: Introduce memset_after() for wiping trailing members/padding (bsc#1263578).
  • CVE-2026-31665: kABI: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
  • CVE-2026-31674: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (bsc#1263568).
  • CVE-2026-31680: net: ipv6: flowlabel: defer exclusive option free until RCU teardown (bsc#1263563).
  • CVE-2026-31693: cifs: some missing initializations on replay (bsc#1267744).
  • CVE-2026-31697: crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed (bsc#1264116).
  • CVE-2026-31698: crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed (bsc#1263880).
  • CVE-2026-31699: crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed (bsc#1263879).
  • CVE-2026-31752: bridge: br_nd_send: validate ND option lengths (bsc#1264045).
  • CVE-2026-31759: usb: ulpi: fix double free in ulpi_register_interface() error path (bsc#1264076).
  • CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
  • CVE-2026-43023: Bluetooth: SCO: fix race conditions in sco_sock_connect() (bsc#1264137).
  • CVE-2026-43024: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).
  • CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934).
  • CVE-2026-43035: net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak (bsc#1263996).
  • CVE-2026-43036: net: use skb_header_pointer() for TCPv4 GSO frag_off check (bsc#1263993).
  • CVE-2026-43049: HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure (bsc#1264080).
  • CVE-2026-43053: xfs: close crash window in attr dabtree inactivation (bsc#1264084).
  • CVE-2026-43074: eventpoll: defer struct eventpoll free to RCU grace period (bsc#1264263).
  • CVE-2026-43077: crypto: algif_aead - Fix minimum RX size check for decryption (bsc#1264470).
  • CVE-2026-43083: net: ioam6: fix OOB and missing lock (bsc#1264266).
  • CVE-2026-43101: ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data() (bsc#1264239).
  • CVE-2026-43112: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (bsc#1264437).
  • CVE-2026-43119: Bluetooth: hci_sync: annotate data-races around hdev->req_status (bsc#1264561).
  • CVE-2026-43158: xfs: fix freemap adjustments when adding xattrs to leaf blocks (bsc#1264595).
  • CVE-2026-43171: EFI/CPER: do not dump the entire memory region (bsc#1264549).
  • CVE-2026-43187: xfs: delete attr leaf freemap entries when empty (bsc#1264603).
  • CVE-2026-43198: tcp: fix potential race in tcp_v6_syn_recv_sock() (bsc#1264610).
  • CVE-2026-43239:…
Record
SUSE-SU-2026:22436-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-64k
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-64k-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-64k-debug
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-64k-debug-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-64k-debug-devel
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-64k-debug-devel-matched
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-64k-debug-modules
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-64k-debug-modules-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-64k-debug-modules-extra
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-64k-devel
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-64k-devel-matched
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-64k-modules
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-64k-modules-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-64k-modules-extra
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-abi-stablelists
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-cross-headers
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-debug
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-debug-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-debug-devel
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-debug-devel-matched
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-debug-modules
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-debug-modules-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-debug-modules-extra
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-debug-uki-virt
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-devel
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-devel-matched
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-doc
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-headers
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-modules
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-modules-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-modules-extra
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-64k
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-64k-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-64k-debug
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-64k-debug-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-64k-debug-devel
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-64k-debug-modules
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-64k-debug-modules-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-64k-debug-modules-extra
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-64k-devel
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-64k-modules
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-64k-modules-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-64k-modules-extra
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-debug
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-debug-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-debug-devel
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-debug-modules
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-debug-modules-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-debug-modules-extra
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-devel
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
linux-lts
Alpaquita:23
 6.1.164-r0 up to 6.1.167-r0
6.1.167-r0
linux-lts
Alpaquita:25
 6.12.74-r0 up to 6.12.80-r0
6.12.80-r0
linux-lts
Alpaquita:stream
 6.12.92-r1 up to 6.18.35-r1
6.18.35-r1
bpftool
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 7.0.0-284.1101.el9_2.tuxcare.11.els3
7.0.0-284.1101.el9_2.tuxcare.11.els3
kernel
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-64k
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-64k-core
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-64k-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-64k-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-64k-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-64k-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-64k-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-64k-debug-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-64k-debug-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-64k-debug-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-64k-debug-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-64k-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-64k-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-64k-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-64k-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-64k-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-64k-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-64k-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-abi-stablelists
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-core
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-cross-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-debug-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-debug-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-debug-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-debug-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-debug-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-doc
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-ipaclones-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-selftests-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-tools
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-tools-libs
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-tools-libs-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
kernel-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
libbpf
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.11.els3
2:1.0.0-2.el9_2.tuxcare.11.els3
libbpf-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.11.els3
2:1.0.0-2.el9_2.tuxcare.11.els3
libbpf-static
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.11.els3
2:1.0.0-2.el9_2.tuxcare.11.els3
perf
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
python3-perf
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
rtla
TuxCare:AlmaLinux:9.2
From an advisory covering 134 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els3
5.14.0-284.1101.el9_2.tuxcare.11.els3
Kernel
Linux
 2.6.12 up to 5.10.252, 5.11.0 up to 5.15.202, 5.16.0 up to 6.1.165, 6.2.0 up to 6.6.128, 6.7.0 up to 6.12.75, 6.13.0 up to 6.18.16, 6.19.0 up to 6.19.6
5.10.2525.15.2026.1.1656.6.1286.12.756.18.166.19.6
linux
Debian:12
 before 6.1.170-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 43 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1
6.1.170-1
linux
Debian:13
 before 6.12.85-1, plus listed versions
6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-1
Show 12 moreShow less
6.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-1~bpo12+1
6.12.85-1
linux
Debian:14
 before 6.19.6-1, plus listed versions
6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1
Show 45 moreShow less
6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1
6.19.6-1
kernel
openEuler:20.03-LTS-SP4
From an advisory covering 34 CVEs
 before 4.19.90-2606.1.0.0375.oe2003sp4
4.19.90-2606.1.0.0375.oe2003sp4
kernel
openEuler:22.03-LTS-SP4
From an advisory covering 14 CVEs
 before 5.10.0-321.0.0.223.oe2203sp4
5.10.0-321.0.0.223.oe2203sp4
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-debug-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-debug-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debug-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debug-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-doc
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-rt-64k-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-rt-64k-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-rt-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-tools-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-zfcpdump-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-zfcpdump-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
libperf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
perf
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
perf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
python3-perf
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
python3-perf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
rtla
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
rv
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-debug
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-debug-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-debug-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-debug-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-debug-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-abi-stablelists
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debug
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debug-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debug-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debug-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debug-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debug-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debug-uki-virt
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel
Rocky Linux:9
From an advisory covering 19 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel
Rocky Linux:10
From an advisory covering 18 CVEs
 before 0:6.12.0-211.18.1.el10_2
0:6.12.0-211.18.1.el10_2
kernel
Rocky Linux:8
From an advisory covering 18 CVEs
 before 0:4.18.0-553.126.1.el8_10
0:4.18.0-553.126.1.el8_10
kernel-rt
Rocky Linux:8
From an advisory covering 18 CVEs
 before 0:4.18.0-553.126.1.rt7.467.el8_10
0:4.18.0-553.126.1.rt7.467.el8_10
linux
Root:Debian:11
 before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
rootio-linux
Root:Debian:11
 before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
rootio-linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
rootio-linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
kernel-rt
SUSE:Linux Micro 6.0
From an advisory covering 169 CVEs
 before 6.4.0-48.1
6.4.0-48.1
kernel-source-rt
SUSE:Linux Micro 6.0
From an advisory covering 169 CVEs
 before 6.4.0-48.1
6.4.0-48.1
kernel-default
SUSE:Linux Micro 6.0
From an advisory covering 71 CVEs
 before 6.4.0-48.1
6.4.0-48.1
kernel-default-base
SUSE:Linux Micro 6.0
From an advisory covering 71 CVEs
 before 6.4.0-48.1.21.25
6.4.0-48.1.21.25
kernel-kvmsmall
SUSE:Linux Micro 6.0
From an advisory covering 71 CVEs
 before 6.4.0-48.1
6.4.0-48.1
kernel-source
SUSE:Linux Micro 6.0
From an advisory covering 71 CVEs
 before 6.4.0-48.1
6.4.0-48.1
kernel-rt
SUSE:Linux Micro 6.1
From an advisory covering 169 CVEs
 before 6.4.0-48.1
6.4.0-48.1
kernel-source-rt
SUSE:Linux Micro 6.1
From an advisory covering 169 CVEs
 before 6.4.0-48.1
6.4.0-48.1
kernel-default
SUSE:Linux Micro 6.1
From an advisory covering 71 CVEs
 before 6.4.0-48.1
6.4.0-48.1
kernel-default-base
SUSE:Linux Micro 6.1
From an advisory covering 71 CVEs
 before 6.4.0-48.1.21.25
6.4.0-48.1.21.25
kernel-kvmsmall
SUSE:Linux Micro 6.1
From an advisory covering 71 CVEs
 before 6.4.0-48.1
6.4.0-48.1
kernel-source
SUSE:Linux Micro 6.1
From an advisory covering 71 CVEs
 before 6.4.0-48.1
6.4.0-48.1
kernel-obs-build
SUSE:Linux Micro Extras 6.2
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-syms
SUSE:Linux Micro Extras 6.2
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-64kb
SUSE:Linux Micro 6.2
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-default
SUSE:Linux Micro 6.2
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-default-base
SUSE:Linux Micro 6.2
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1.160000.2.17
6.12.0-160000.36.1.160000.2.17
kernel-rt
SUSE:Linux Micro 6.2
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-source
SUSE:Linux Micro 6.2
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-64kb
SUSE:Linux Enterprise Server 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-azure
SUSE:Linux Enterprise Server 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-default
SUSE:Linux Enterprise Server 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-default-base
SUSE:Linux Enterprise Server 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1.160000.2.17
6.12.0-160000.36.1.160000.2.17
kernel-docs
SUSE:Linux Enterprise Server 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-kvmsmall
SUSE:Linux Enterprise Server 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-obs-qa
SUSE:Linux Enterprise Server 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-source
SUSE:Linux Enterprise Server 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-syms
SUSE:Linux Enterprise Server 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-64kb
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-azure
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-default
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1.160000.2.17
6.12.0-160000.36.1.160000.2.17
kernel-docs
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-kvmsmall
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-obs-qa
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-source
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-syms
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-zfcpdump
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-default
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 84 CVEs
 before 4.12.14-122.317.1
4.12.14-122.317.1
kgraft-patch-SLE12-SP5_Update_84
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 84 CVEs
 before 1-8.7.1
1-8.7.1
kernel-default
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 84 CVEs
 before 4.12.14-122.317.1
4.12.14-122.317.1
kernel-source
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 84 CVEs
 before 4.12.14-122.317.1
4.12.14-122.317.1
kernel-syms
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 84 CVEs
 before 4.12.14-122.317.1
4.12.14-122.317.1
kernel-default
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 84 CVEs
 before 4.12.14-122.317.1
4.12.14-122.317.1
kernel-source
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 84 CVEs
 before 4.12.14-122.317.1
4.12.14-122.317.1
kernel-syms
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 84 CVEs
 before 4.12.14-122.317.1
4.12.14-122.317.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 66 CVEs
 before 6.4.0-150700.53.63.1
6.4.0-150700.53.63.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 66 CVEs
 before 6.4.0-150700.53.63.1
6.4.0-150700.53.63.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 66 CVEs
 before 6.4.0-150700.53.63.1.150700.17.37.1
6.4.0-150700.53.63.1.150700.17.37.1
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 66 CVEs
 before 6.4.0-150700.53.63.1
6.4.0-150700.53.63.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 66 CVEs
 before 6.4.0-150700.53.63.1
6.4.0-150700.53.63.1
linux
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
3.11.0-12.193.12.0-1.33.12.0-2.53.12.0-2.73.12.0-3.8
Show 45 moreShow less
3.12.0-3.93.12.0-4.103.12.0-4.123.12.0-5.133.12.0-7.153.13.0-1.163.13.0-2.173.13.0-3.183.13.0-4.193.13.0-5.203.13.0-6.233.13.0-7.253.13.0-7.263.13.0-8.273.13.0-8.283.13.0-10.303.13.0-11.313.13.0-12.323.13.0-13.333.13.0-14.343.13.0-15.353.13.0-16.363.13.0-17.373.13.0-18.383.13.0-19.393.13.0-19.403.13.0-20.423.13.0-21.433.13.0-22.443.13.0-23.453.13.0-24.463.13.0-24.473.13.0-27.503.13.0-29.533.13.0-30.543.13.0-30.553.13.0-32.573.13.0-33.583.13.0-34.603.13.0-35.623.13.0-36.633.13.0-37.643.13.0-39.663.13.0-40.693.13.0-41.70
 None known
linux-aws
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9
Show 45 moreShow less
4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80
 None known
linux-azure
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2
Show 45 moreShow less
4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1
 None known
linux-lts-xenial
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1
Show 45 moreShow less
4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1
 None known
linux
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11
Show 45 moreShow less
4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96
 None known
linux-aws
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18
Show 45 moreShow less
4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93
 None known
linux-aws-hwe
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1
Show 45 moreShow less
4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1
 None known
linux-azure
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 45 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71
 None known
linux-gcp
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
Show 45 moreShow less
4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1
 None known
linux-hwe
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 45 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1
 None known
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-kvm
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15
Show 45 moreShow less
4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.674.4.0-1062.694.4.0-1063.704.4.0-1064.714.4.0-1065.724.4.0-1066.734.4.0-1068.754.4.0-1069.764.4.0-1070.774.4.0-1071.784.4.0-1075.824.4.0-1076.834.4.0-1077.84
 None known
linux-oracle
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1
Show 45 moreShow less
4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1
 None known
linux-fips
Ubuntu:Pro:FIPS-updates:16.04:LTS
 All versions, plus listed versions
4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13
Show 45 moreShow less
4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78
 None known
linux-fips
Ubuntu:Pro:FIPS:16.04:LTS
 All versions, plus listed versions
4.4.0-1001.14.4.0-1002.2
 None known
linux
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 45 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107
 None known
linux-aws
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 45 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-aws-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-4.15
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102
Show 45 moreShow less
4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1
Show 45 moreShow less
5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-4.15
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92
Show 45 moreShow less
4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gcp-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 45 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-ibm-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1
Show 45 moreShow less
5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1
 None known
linux-kvm
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8
Show 45 moreShow less
4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13
Show 45 moreShow less
4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-oracle-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1
 None known
linux-raspi-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1
Show 45 moreShow less
5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1
 None known
linux-aws-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24
Show 45 moreShow less
4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93
 None known
linux-azure-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10
Show 45 moreShow less
4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80
 None known
linux-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42
Show 45 moreShow less
4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21
Show 45 moreShow less
4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.794.15.0-2075.804.15.0-2076.814.15.0-2077.83
 None known
linux-aws-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.4
 None known
linux-azure-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.2
 None known
linux-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1011.12
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.1
 None known
linux
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 45 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110
 None known
linux-aws
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5
Show 45 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78
 None known
dtb-aarch64
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-64kb
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-azure
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-default
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-default-base
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1.160000.2.17
6.12.0-160000.36.1.160000.2.17
kernel-docs
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-kvmsmall
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-obs-build
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-obs-qa
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-rt
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-source
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-syms
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-zfcpdump
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1

History

History
RecordedChangedSources
affectedOSV
affectedOSV
affectedOSV
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-43158 is a high vulnerability (CVSS 8.8) in Linux, published May 6, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.47%, the 40th percentile. Fixed in linux-lts 6.1.167-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 1,682 package rows, 2,477 versions, 3,298 references and the rest of 11 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 34 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open