Every CVE Search/ Get API key

CVE-2026-43233

netfilter: nf_conntrack_h323: fix OOB read in decode_choice()

8.2 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_conntrack_h323: fix OOB read in decode_choice()

In decode_choice(), the boundary check before get_len() uses the variable len, which is still 0 from its initialization at the top of the function:

unsigned int type, ext, len = 0;
...
if (ext || (son->attr & OPEN)) {
    BYTE_ALIGN(bs);
    if (nf_h323_error_boundary(bs, len, 0))  /* len is 0 here */
        return H323_ERROR_BOUND;
    len = get_len(bs);                        /* OOB read */

When the bitstream is exactly consumed (bs->cur == bs->end), the check nf_h323_error_boundary(bs, 0, 0) evaluates to (bs->cur + 0 > bs->end), which is false. The subsequent get_len() call then dereferences *bs->cur++, reading 1 byte past the end of the buffer. If that byte has bit 7 set, get_len() reads a second byte as well.

This can be triggered remotely by sending a crafted Q.931 SETUP message with a User-User Information Element containing exactly 2 bytes of PER-encoded data ({0x08, 0x00}) to port 1720 through a firewall with the nf_conntrack_h323 helper active. The decoder fully consumes the PER buffer before reaching this code path, resulting in a 1-2 byte heap-buffer-overflow read confirmed by AddressSanitizer.

Fix this by checking for 2 bytes (the maximum that get_len() may read) instead of the uninitialized len. This matches the pattern used at every other get_len() call site in the same file, where the caller checks for 2 bytes of available data before calling get_len().

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
None
Availability
High

Exploit likelihood

0.46%Up 0.4 points since May 7, 2026
90%50%10%1%

What each source reports

CVE List Score used 8.2

netfilter: nf_conntrack_h323: fix OOB read in decode_choice()

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_conntrack_h323: fix OOB read in decode_choice()

In decode_choice(), the boundary check before get_len() uses the variable len, which is still 0 from its initialization at the top of the function:

unsigned int type, ext, len = 0;
...
if (ext || (son->attr & OPEN)) {
    BYTE_ALIGN(bs);
    if (nf_h323_error_boundary(bs, len, 0))  /* len is 0 here */
        return H323_ERROR_BOUND;
    len = get_len(bs);                        /* OOB read */

When the bitstream is exactly consumed (bs->cur == bs->end), the check nf_h323_error_boundary(bs, 0, 0) evaluates to (bs->cur + 0 > bs->end), which is false. The subsequent get_len() call then dereferences *bs->cur++, reading 1 byte past the end of the buffer. If that byte has bit 7 set, get_len() reads a second byte as well.

This can be triggered remotely by sending a crafted Q.931 SETUP message with a User-User Information Element containing exactly 2 bytes of PER-encoded data ({0x08, 0x00}) to port 1720 through a firewall with the nf_conntrack_h323 helper active. The decoder fully consumes the PER buffer before reaching this code path, resulting in a 1-2 byte heap-buffer-overflow read confirmed by AddressSanitizer.

Fix this by checking for 2 bytes (the maximum that get_len() may read) instead of the uninitialized len. This matches the pattern used at every other get_len() call site in the same file, where the caller checks for 2 bytes of available data before calling get_len().

Record
CVE-2026-43233
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
EUVDEUVD-2026-27794 8.2

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_conntrack_h323: fix OOB read in decode_choice()

In decode_choice(), the boundary check before get_len() uses the variable len, which is still 0 from its initialization at the top of the function:

unsigned int type, ext, len = 0;
...
if (ext || (son->attr & OPEN)) {
    BYTE_ALIGN(bs);
    if (nf_h323_error_boundary(bs, len, 0))  /* len is 0 here */
        return H323_ERROR_BOUND;
    len = get_len(bs);                        /* OOB read */

When the bitstream is exactly consumed (bs->cur == bs->end), the check nf_h323_error_boundary(bs, 0, 0) evaluates to (bs->cur + 0 > bs->end), which is false. The subsequent get_len() call then dereferences *bs->cur++, reading 1 byte past the end of the buffer. If that byte has bit 7 set, get_len() reads a second byte as well.

This can be triggered remotely by sending a crafted Q.931 SETUP message with a User-User Information Element containing exactly 2 bytes of PER-encoded data ({0x08, 0x00}) to port 1720 through a firewall with the nf_conntrack_h323 helper active. The decoder fully consumes the PER buffer before reaching this code path, resulting in a 1-2 byte heap-buffer-overflow read confirmed by AddressSanitizer.

Fix this by checking for 2 bytes (the maximum that get_len() may read) instead of the uninitialized len. This matches the pattern used at every other get_len() call site in the same file, where the caller checks for 2 bytes of available data before calling get_len().

Record
EUVD-2026-27794
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-qx8f-4v7p-9m35 8.2

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323...

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_conntrack_h323: fix OOB read in decode_choice()

In decode_choice(), the boundary check before get_len() uses the variable len, which is still 0 from its initialization at the top of the function:

unsigned int type, ext, len = 0;
...
if (ext || (son->attr & OPEN)) {
    BYTE_ALIGN(bs);
    if (nf_h323_error_boundary(bs, len, 0))  /* len is 0 here */
        return H323_ERROR_BOUND;
    len = get_len(bs);                        /* OOB read */

When the bitstream is exactly consumed (bs->cur == bs->end), the check nf_h323_error_boundary(bs, 0, 0) evaluates to (bs->cur + 0 > bs->end), which is false. The subsequent get_len() call then dereferences *bs->cur++, reading 1 byte past the end of the buffer. If that byte has bit 7 set, get_len() reads a second byte as well.

This can be triggered remotely by sending a crafted Q.931 SETUP message with a User-User Information Element containing exactly 2 bytes of PER-encoded data ({0x08, 0x00}) to port 1720 through a firewall with the nf_conntrack_h323 helper active. The decoder fully consumes the PER buffer before reaching this code path, resulting in a 1-2 byte heap-buffer-overflow read confirmed by AddressSanitizer.

Fix this by checking for 2 bytes (the maximum that get_len() may read) instead of the uninitialized len. This matches the pattern used at every other get_len() call site in the same file, where the caller checks for 2 bytes of available data before calling get_len().

Record
GHSA-qx8f-4v7p-9m35
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
NVD 8.2

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_conntrack_h323: fix OOB read in decode_choice()

In decode_choice(), the boundary check before get_len() uses the variable len, which is still 0 from its initialization at the top of the function:

unsigned int type, ext, len = 0;
...
if (ext || (son->attr & OPEN)) {
    BYTE_ALIGN(bs);
    if (nf_h323_error_boundary(bs, len, 0))  /* len is 0 here */
        return H323_ERROR_BOUND;
    len = get_len(bs);                        /* OOB read */

When the bitstream is exactly consumed (bs->cur == bs->end), the check nf_h323_error_boundary(bs, 0, 0) evaluates to (bs->cur + 0 > bs->end), which is false. The subsequent get_len() call then dereferences *bs->cur++, reading 1 byte past the end of the buffer. If that byte has bit 7 set, get_len() reads a second byte as well.

This can be triggered remotely by sending a crafted Q.931 SETUP message with a User-User Information Element containing exactly 2 bytes of PER-encoded data ({0x08, 0x00}) to port 1720 through a firewall with the nf_conntrack_h323 helper active. The decoder fully consumes the PER buffer before reaching this code path, resulting in a 1-2 byte heap-buffer-overflow read confirmed by AddressSanitizer.

Fix this by checking for 2 bytes (the maximum that get_len() may read) instead of the uninitialized len. This matches the pattern used at every other get_len() call site in the same file, where the caller checks for 2 bytes of available data before calling get_len().

Record
CVE-2026-43233
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
OSVBELL-CVE-2026-43233 8.2
Record
BELL-CVE-2026-43233
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSV 8.2

netfilter: nf_conntrack_h323: fix OOB read in decode_choice()

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_conntrack_h323: fix OOB read in decode_choice()

In decode_choice(), the boundary check before get_len() uses the variable len, which is still 0 from its initialization at the top of the function:

unsigned int type, ext, len = 0;
...
if (ext || (son->attr & OPEN)) {
    BYTE_ALIGN(bs);
    if (nf_h323_error_boundary(bs, len, 0))  /* len is 0 here */
        return H323_ERROR_BOUND;
    len = get_len(bs);                        /* OOB read */

When the bitstream is exactly consumed (bs->cur == bs->end), the check nf_h323_error_boundary(bs, 0, 0) evaluates to (bs->cur + 0 > bs->end), which is false. The subsequent get_len() call then dereferences *bs->cur++, reading 1 byte past the end of the buffer. If that byte has bit 7 set, get_len() reads a second byte as well.

This can be triggered remotely by sending a crafted Q.931 SETUP message with a User-User Information Element containing exactly 2 bytes of PER-encoded data ({0x08, 0x00}) to port 1720 through a firewall with the nf_conntrack_h323 helper active. The decoder fully consumes the PER buffer before reaching this code path, resulting in a 1-2 byte heap-buffer-overflow read confirmed by AddressSanitizer.

Fix this by checking for 2 bytes (the maximum that get_len() may read) instead of the uninitialized len. This matches the pattern used at every other get_len() call site in the same file, where the caller checks for 2 bytes of available data before calling get_len().

Record
CVE-2026-43233
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
Show 48 moreShow less
OSVDEBIAN-CVE-2026-43233 8.2

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() In decode_choice(), the boundary check before get_len() uses the variable len, which is still 0 from its initialization at the top of the function: unsigned int type, ext, len = 0; ... if (ext || (son->attr & OPEN)) { BYTE_ALIGN(bs); if (nf_h323_error_boundary(bs, len, 0)) /* len is 0 here / return H323_ERROR_BOUND; len = get_len(bs); / OOB read */ When the bitstream is exactly consumed (bs->cur == bs->end), the check nf_h323_error_boundary(bs, 0, 0) evaluates to (bs->cur + 0 > bs->end), which is false. The subsequent get_len() call then dereferences *bs->cur++, reading 1 byte past the end of the buffer. If that byte has bit 7 set, get_len() reads a second byte as well. This can be triggered remotely by sending a crafted Q.931 SETUP message with a User-User Information Element containing exactly 2 bytes of PER-encoded data ({0x08, 0x00}) to port 1720 through a firewall with the nf_conntrack_h323 helper active. The decoder fully consumes the PER buffer before reaching this code path, resulting in a 1-2 byte heap-buffer-overflow read confirmed by AddressSanitizer. Fix this by checking for 2 bytes (the maximum that get_len() may read) instead of the uninitialized len. This matches the pattern used at every other get_len() call site in the same file, where the caller checks for 2 bytes of available data before calling get_len().

Record
DEBIAN-CVE-2026-43233
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-2579 9.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

bcache: fix NULL pointer in cache_set_flush()

  1. LINE#1794 - LINE#1887 is some codes about function of bch_cache_set_alloc().
  2. LINE#2078 - LINE#2142 is some codes about function of register_cache_set().
  3. register_cache_set() will call bch_cache_set_alloc() in LINE#2098.

1794 struct cache_set *bch_cache_set_alloc(struct cache_sb *sb) 1795 { ... 1860 if (!(c->devices = kcalloc(c->nr_uuids, sizeof(void *), GFP_KERNEL)) || 1861 mempool_init_slab_pool(&c->search, 32, bch_search_cache) || 1862 mempool_init_kmalloc_pool(&c->bio_meta, 2, 1863 sizeof(struct bbio) + sizeof(struct bio_vec) * 1864 bucket_pages(c)) || 1865 mempool_init_kmalloc_pool(&c->fill_iter, 1, iter_size) || 1866 bioset_init(&c->bio_split, 4, offsetof(struct bbio, bio), 1867 BIOSET_NEED_BVECS|BIOSET_NEED_RESCUER) || 1868 !(c->uuids = alloc_bucket_pages(GFP_KERNEL, c)) || 1869 !(c->moving_gc_wq = alloc_workqueue("bcache_gc", 1870 WQ_MEM_RECLAIM, 0)) || 1871 bch_journal_alloc(c) || 1872 bch_btree_cache_alloc(c) || 1873 bch_open_buckets_alloc(c) || 1874 bch_bset_sort_state_init(&c->sort, ilog2(c->btree_pages))) 1875 goto err; ^^^^^^^^ 1876 ... 1883 return c; 1884 err: 1885 bch_cache_set_unregister(c); ^^^^^^^^^^^^^^^^^^^^^^^^^^^ 1886 return NULL; 1887 } ... 2078 static const char *register_cache_set(struct cache *ca) 2079 { ... 2098 c = bch_cache_set_alloc(&ca->sb); 2099 if (!c) 2100 return err; ^^^^^^^^^^ ... 2128 ca->set = c; 2129 ca->set->cache[ca->sb.nr_this_dev] = ca; ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ ... 2138 return NULL; 2139 err: 2140 bch_cache_set_unregister(c); 2141 return err; 2142 }

(1) If LINE#1860 - LINE#1874 is true, then do 'goto err'(LINE#1875) and call bch_cache_set_unregister()(LINE#1885). (2) As (1) return NULL(LINE#1886), LINE#2098 - LINE#2100 would return. (3) As (2) has returned, LINE#2128 - LINE#2129 would do not give the value to c->cache[], it means that c->cache[] is NULL.

LINE#1624 - LINE#1665 is some codes about function of cache_set_flush(). As (1), in LINE#1885 call bch_cache_set_unregister() ---> bch_cache_set_stop() ---> closure_queue() -.-> cache_set_flush() (as below LINE#1624)

1624 static void cache_set_flush(struct closure *cl) 1625 { ... 1654 for_each_cache(ca, c, i) 1655 if (ca->alloc_thread) ^^ 1656 kthread_stop(ca->alloc_thread); ... 1665 }

(4) In LINE#1655 ca is NULL(see (3)) in cache_set_flush() then the kernel crash occurred as below: [ 846.712887] bcache: register_cache() error drbd6: cannot allocate memory [ 846.713242] bcache: register_bcache() error : failed to register device [ 846.713336] bcache: cache_set_free() Cache set 2f84bdc1-498a-4f2f-98a7-01946bf54287 unregistered [ 846.713768] BUG: unable to handle kernel NULL pointer dereference at 00000000000009f8 [ 846.714790] PGD 0 P4D 0 [ 846.715129] Oops: 0000 [#1] SMP PTI [ 846.715472] CPU: 19 PID: 5057 Comm: kworker/19:16 Kdump: loaded Tainted: G OE --------- - - 4.18.0-147.5.1.el8_1.5es.3.x86_64 #1 [ 846.716082] Hardware name: ESPAN GI-25212/X11DPL-i, BIOS 2.1 06/15/2018 [ 846.716451] Workqueue: events cache_set_flush [bcache] [ 846.716808] RIP: 0010:cache_set_flush+0xc9/0x1b0 [bcache] […

Record
OESA-2026-2579
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-2674 9.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

btrfs: qgroup: fix race between quota disable and quota rescan ioctl

There's a race between a task disabling quotas and another running the rescan ioctl that can result in a use-after-free of qgroup records from the fs_info->qgroup_tree rbtree.

This happens as follows:

  1. Task A enters btrfs_ioctl_quota_rescan() -> btrfs_qgroup_rescan();

  2. Task B enters btrfs_quota_disable() and calls btrfs_qgroup_wait_for_completion(), which does nothing because at that point fs_info->qgroup_rescan_running is false (it wasn't set yet by task A);

  3. Task B calls btrfs_free_qgroup_config() which starts freeing qgroups from fs_info->qgroup_tree without taking the lock fs_info->qgroup_lock;

  4. Task A enters qgroup_rescan_zero_tracking() which starts iterating the fs_info->qgroup_tree tree while holding fs_info->qgroup_lock, but task B is freeing qgroup records from that tree without holding the lock, resulting in a use-after-free.

Fix this by taking fs_info->qgroup_lock at btrfs_free_qgroup_config(). Also at btrfs_qgroup_rescan() don't start the rescan worker if quotas were already disabled.(CVE-2025-39759)

In the Linux kernel, the following vulnerability has been resolved:

wifi: wilc1000: avoid buffer overflow in WID string configuration

Fix the following copy overflow warning identified by Smatch checker.

drivers/net/wireless/microchip/wilc1000/wlan_cfg.c:184 wilc_wlan_parse_response_frame() error: '__memcpy()' 'cfg->s[i]->str' copy overflow (512 vs 65537)

This patch introduces size check before accessing the memory buffer. The checks are base on the WID type of received data from the firmware. For WID string configuration, the size limit is determined by individual element size in 'struct wilc_cfg_str_vals' that is maintained in 'len' field of 'struct wilc_cfg_str'.(CVE-2025-39952)

In the Linux kernel, the following vulnerability has been resolved:

iio: accel: bmc150: Fix irq assumption regression

The code in bmc150-accel-core.c unconditionally calls bmc150_accel_set_interrupt() in the iio_buffer_setup_ops, such as on the runtime PM resume path giving a kernel splat like this if the device has no interrupts:

Unable to handle kernel NULL pointer dereference at virtual address 00000001 when read

PC is at bmc150_accel_set_interrupt+0x98/0x194 LR is at __pm_runtime_resume+0x5c/0x64 (...) Call trace: bmc150_accel_set_interrupt from bmc150_accel_buffer_postenable+0x40/0x108 bmc150_accel_buffer_postenable from __iio_update_buffers+0xbe0/0xcbc __iio_update_buffers from enable_store+0x84/0xc8 enable_store from kernfs_fop_write_iter+0x154/0x1b4

This bug seems to have been in the driver since the beginning, but it only manifests recently, I do not know why.

Store the IRQ number in the state struct, as this is a common pattern in other drivers, then use this to determine if we have IRQ support or not.(CVE-2025-68330)

In the Linux kernel, the following vulnerability has been resolved:

staging: most: remove broken i2c driver

The MOST I2C driver has been completely broken for five years without anyone noticing so remove the driver from staging.

Specifically, commit 723de0f9171e ("staging: most: remove device from interface structure") started requiring drivers to set the interface device pointer before registration, but the I2C driver was never updated which results in a NULL pointer dereference if anyone ever tries to probe it.(CVE-2025-68755)

In the Linux kernel, the following vulnerability has been resolved:

btrfs: fix NULL dereference on root when tracing inode eviction

When evicting an inode the first thing we do is to setup tracing for it, which implies fetching the root's id. But in btrfs_evict_inode() the root might be NULL, as implied in the…

Record
OESA-2026-2674
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:57252 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:57252
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:68531 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:68531
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:68532 7.8

Red Hat Security Advisory: kernel-rt security update

Record
RHSA-2026:68532
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:57252 7.8

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CVE-2026-43233)

  • kernel: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CVE-2026-43206)

  • kernel: drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CVE-2026-43237)

  • kernel: udf: fix partition descriptor append bookkeeping (CVE-2026-45991)

  • kernel: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CVE-2026-45878)

  • kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() (CVE-2026-46120)

  • kernel: sched/psi: fix race between file release and pressure write (CVE-2026-52991)

  • kernel: drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CVE-2026-53143)

  • kernel: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CVE-2026-53136)

  • kernel: mm/huge_memory: update file PMD counter before folio_put() (CVE-2026-53189)

  • kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CVE-2026-53329)

  • kernel: drm/i915/gem: Fix phys BO pread/pwrite with offset (CVE-2026-53356)

  • kernel: drm/amdgpu: zero-initialize GART table on allocation (CVE-2026-53374)

  • kernel: drm/i915: Fix potential UAF in TTM object purge (CVE-2026-63884)

  • kernel: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CVE-2026-64007)

  • kernel: memfd: deny writeable mappings when implying SEAL_WRITE (CVE-2026-63952)

  • kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (CVE-2026-63888)

  • kernel: drm/amdgpu: fix amdgpu_hmm_range_get_pages (CVE-2026-63879)

  • kernel: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CVE-2026-64048)

  • kernel: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CVE-2026-64219)

  • kernel: smb: client: fix double-free in SMB2_open() replay (CVE-2026-64382)

  • kernel: smb: client: mask server-provided mode to 07777 in modefromsid (CVE-2026-64379)

  • kernel: smb: client: fix query_info() replay double-free (CVE-2026-64386)

  • kernel: posix-cpu-timers: Prevent UAF caused by non-leader exec() race (CVE-2026-64560)

  • kernel: smb: client: validate DFS referral PathConsumed (CVE-2026-68343)

  • kernel: smb/client: handle overlapping allocated ranges in fallocate (CVE-2026-68388)

Bug Fix(es) and Enhancement(s):

  • kernel 5.14.0-687.5.1.el9_8 breaks wifi when using FIPS (JIRA:Rocky Linux-181065)

  • vhost: reset the vring metadata cache on vring reconfiguration [rhel-9.8.z] (JIRA:Rocky Linux-224549)

  • cifs: smb1 directory listings from xp server returning EINVAL and EIO [rhel-9.8.z] (JIRA:Rocky Linux-235811)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:57252
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:68531 7.8

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: ipvlan: Make the addrs_lock be per port (CVE-2026-23103)

  • kernel: xfrm: hold dev ref until after transport_finish NF_HOOK (CVE-2026-31663)

  • kernel: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CVE-2026-43233)

  • kernel: ipv6: prevent possible UaF in addrconf_permanent_addr() (CVE-2026-43339)

  • kernel: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (CVE-2026-46266)

  • kernel: flow_dissector: do not dissect PPPoE PFC frames (CVE-2026-46306)

  • kernel: netfilter: xt_policy: fix strict mode inbound policy matching (CVE-2026-52920)

  • kernel: ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (CVE-2026-53075)

  • kernel: ipv6: sit: reload inner IPv6 header after GSO offloads (CVE-2026-53228)

  • kernel: IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CVE-2026-53176)

  • kernel: netfilter: require Ethernet MAC header before using eth_hdr() (CVE-2026-53131)

  • kernel: netfilter: conntrack_irc: fix possible out-of-bounds read (CVE-2026-53268)

  • kernel: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (CVE-2026-53239)

  • kernel: ALSA: timer: Fix UAF at snd_timer_user_params() (CVE-2026-53192)

  • kernel: net: guard timestamp cmsgs to real error queue skbs (CVE-2026-53223)

  • kernel: ipv6: mcast: Fix use-after-free when processing MLD queries (CVE-2026-53275)

  • kernel: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CVE-2026-64002)

  • kernel: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (CVE-2026-63921)

  • kernel: xfrm: input: hold netns during deferred transport reinjection (CVE-2026-63919)

  • kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink() (CVE-2026-63917)

  • kernel: Linux kernel SLIP: Out-of-bounds write due to race condition during MTU change (CVE-2026-68143)

  • kernel: xfrm: fix stale skb->prev after async crypto steals a GSO segment (CVE-2026-68426)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:68531
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:68532 7.8

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: ipvlan: Make the addrs_lock be per port (CVE-2026-23103)

  • kernel: xfrm: hold dev ref until after transport_finish NF_HOOK (CVE-2026-31663)

  • kernel: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CVE-2026-43233)

  • kernel: ipv6: prevent possible UaF in addrconf_permanent_addr() (CVE-2026-43339)

  • kernel: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (CVE-2026-46266)

  • kernel: flow_dissector: do not dissect PPPoE PFC frames (CVE-2026-46306)

  • kernel: netfilter: xt_policy: fix strict mode inbound policy matching (CVE-2026-52920)

  • kernel: ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (CVE-2026-53075)

  • kernel: ipv6: sit: reload inner IPv6 header after GSO offloads (CVE-2026-53228)

  • kernel: IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CVE-2026-53176)

  • kernel: netfilter: require Ethernet MAC header before using eth_hdr() (CVE-2026-53131)

  • kernel: netfilter: conntrack_irc: fix possible out-of-bounds read (CVE-2026-53268)

  • kernel: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (CVE-2026-53239)

  • kernel: ALSA: timer: Fix UAF at snd_timer_user_params() (CVE-2026-53192)

  • kernel: net: guard timestamp cmsgs to real error queue skbs (CVE-2026-53223)

  • kernel: ipv6: mcast: Fix use-after-free when processing MLD queries (CVE-2026-53275)

  • kernel: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CVE-2026-64002)

  • kernel: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (CVE-2026-63921)

  • kernel: xfrm: input: hold netns during deferred transport reinjection (CVE-2026-63919)

  • kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink() (CVE-2026-63917)

  • kernel: Linux kernel SLIP: Out-of-bounds write due to race condition during MTU change (CVE-2026-68143)

  • kernel: xfrm: fix stale skb->prev after async crypto steals a GSO segment (CVE-2026-68426)

  • kernel: net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (CVE-2026-72298)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:68532
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2026-43233 7.0

CVE-2026-43233 in linux - Patched by Root

Root has patched CVE-2026-43233 in the linux package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2026-43233
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-UBUNTU-2204-CVE-2026-43233 7.0

CVE-2026-43233 in linux - Patched by Root

Root has patched CVE-2026-43233 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2204-CVE-2026-43233
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVROOT-OS-UBUNTU-2404-CVE-2026-43233 7.0

CVE-2026-43233 in linux - Patched by Root

Root has patched CVE-2026-43233 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2404-CVE-2026-43233
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVUBUNTU-CVE-2026-43233 6.3

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() In decode_choice(), the boundary check before get_len() uses the variable len, which is still 0 from its initialization at the top of the function: unsigned int type, ext, len = 0; ... if (ext || (son->attr & OPEN)) { BYTE_ALIGN(bs); if (nf_h323_error_boundary(bs, len, 0)) /* len is 0 here / return H323_ERROR_BOUND; len = get_len(bs); / OOB read */ When the bitstream is exactly consumed (bs->cur == bs->end), the check nf_h323_error_boundary(bs, 0, 0) evaluates to (bs->cur + 0 > bs->end), which is false. The subsequent get_len() call then dereferences *bs->cur++, reading 1 byte past the end of the buffer. If that byte has bit 7 set, get_len() reads a second byte as well. This can be triggered remotely by sending a crafted Q.931 SETUP message with a User-User Information Element containing exactly 2 bytes of PER-encoded data ({0x08, 0x00}) to port 1720 through a firewall with the nf_conntrack_h323 helper active. The decoder fully consumes the PER buffer before reaching this code path, resulting in a 1-2 byte heap-buffer-overflow read confirmed by AddressSanitizer. Fix this by checking for 2 bytes (the maximum that get_len() may read) instead of the uninitialized len. This matches the pattern used at every other get_len() call site in the same file, where the caller checks for 2 bytes of available data before calling get_len().

Record
UBUNTU-CVE-2026-43233
CVSS 4.0
6.3 MediumCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-11
OSVALSA-2026:57252 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CVE-2026-43233)
  • kernel: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CVE-2026-43206)
  • kernel: drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CVE-2026-43237)
  • kernel: udf: fix partition descriptor append bookkeeping (CVE-2026-45991)
  • kernel: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CVE-2026-45878)
  • kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() (CVE-2026-46120)
  • kernel: sched/psi: fix race between file release and pressure write (CVE-2026-52991)
  • kernel: drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CVE-2026-53143)
  • kernel: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CVE-2026-53136)
  • kernel: mm/huge_memory: update file PMD counter before folio_put() (CVE-2026-53189)
  • kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CVE-2026-53329)
  • kernel: drm/i915/gem: Fix phys BO pread/pwrite with offset (CVE-2026-53356)
  • kernel: drm/amdgpu: zero-initialize GART table on allocation (CVE-2026-53374)
  • kernel: drm/i915: Fix potential UAF in TTM object purge (CVE-2026-63884)
  • kernel: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CVE-2026-64007)
  • kernel: memfd: deny writeable mappings when implying SEAL_WRITE (CVE-2026-63952)
  • kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (CVE-2026-63888)
  • kernel: drm/amdgpu: fix amdgpu_hmm_range_get_pages (CVE-2026-63879)
  • kernel: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CVE-2026-64048)
  • kernel: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CVE-2026-64219)
  • kernel: smb: client: fix double-free in SMB2_open() replay (CVE-2026-64382)
  • kernel: smb: client: mask server-provided mode to 07777 in modefromsid (CVE-2026-64379)
  • kernel: smb: client: fix query_info() replay double-free (CVE-2026-64386)
  • kernel: posix-cpu-timers: Prevent UAF caused by non-leader exec() race (CVE-2026-64560)
  • kernel: smb: client: validate DFS referral PathConsumed (CVE-2026-68343)
  • kernel: smb/client: handle overlapping allocated ranges in fallocate (CVE-2026-68388)

Bug Fix(es) and Enhancement(s):

  • kernel 5.14.0-687.5.1.el9_8 breaks wifi when using FIPS (JIRA:AlmaLinux-181065)
  • vhost: reset the vring metadata cache on vring reconfiguration [almalinux-9.8.z] (JIRA:AlmaLinux-224549)
  • cifs: smb1 directory listings from xp server returning EINVAL and EIO [almalinux-9.8.z] (JIRA:AlmaLinux-235811)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:57252
Updated
2026-11-02
OSVALSA-2026:68531 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: ipvlan: Make the addrs_lock be per port (CVE-2026-23103)
  • kernel: xfrm: hold dev ref until after transport_finish NF_HOOK (CVE-2026-31663)
  • kernel: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CVE-2026-43233)
  • kernel: ipv6: prevent possible UaF in addrconf_permanent_addr() (CVE-2026-43339)
  • kernel: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (CVE-2026-46266)
  • kernel: flow_dissector: do not dissect PPPoE PFC frames (CVE-2026-46306)
  • kernel: netfilter: xt_policy: fix strict mode inbound policy matching (CVE-2026-52920)
  • kernel: ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (CVE-2026-53075)
  • kernel: ipv6: sit: reload inner IPv6 header after GSO offloads (CVE-2026-53228)
  • kernel: IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CVE-2026-53176)
  • kernel: netfilter: require Ethernet MAC header before using eth_hdr() (CVE-2026-53131)
  • kernel: netfilter: conntrack_irc: fix possible out-of-bounds read (CVE-2026-53268)
  • kernel: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (CVE-2026-53239)
  • kernel: ALSA: timer: Fix UAF at snd_timer_user_params() (CVE-2026-53192)
  • kernel: net: guard timestamp cmsgs to real error queue skbs (CVE-2026-53223)
  • kernel: ipv6: mcast: Fix use-after-free when processing MLD queries (CVE-2026-53275)
  • kernel: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CVE-2026-64002)
  • kernel: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (CVE-2026-63921)
  • kernel: xfrm: input: hold netns during deferred transport reinjection (CVE-2026-63919)
  • kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink() (CVE-2026-63917)
  • kernel: Linux kernel SLIP: Out-of-bounds write due to race condition during MTU change (CVE-2026-68143)
  • kernel: xfrm: fix stale skb->prev after async crypto steals a GSO segment (CVE-2026-68426)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:68531
Updated
2026-11-02
OSVALSA-2026:68532 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: ipvlan: Make the addrs_lock be per port (CVE-2026-23103)
  • kernel: xfrm: hold dev ref until after transport_finish NF_HOOK (CVE-2026-31663)
  • kernel: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CVE-2026-43233)
  • kernel: ipv6: prevent possible UaF in addrconf_permanent_addr() (CVE-2026-43339)
  • kernel: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (CVE-2026-46266)
  • kernel: flow_dissector: do not dissect PPPoE PFC frames (CVE-2026-46306)
  • kernel: netfilter: xt_policy: fix strict mode inbound policy matching (CVE-2026-52920)
  • kernel: ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (CVE-2026-53075)
  • kernel: ipv6: sit: reload inner IPv6 header after GSO offloads (CVE-2026-53228)
  • kernel: IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CVE-2026-53176)
  • kernel: netfilter: require Ethernet MAC header before using eth_hdr() (CVE-2026-53131)
  • kernel: netfilter: conntrack_irc: fix possible out-of-bounds read (CVE-2026-53268)
  • kernel: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (CVE-2026-53239)
  • kernel: ALSA: timer: Fix UAF at snd_timer_user_params() (CVE-2026-53192)
  • kernel: net: guard timestamp cmsgs to real error queue skbs (CVE-2026-53223)
  • kernel: ipv6: mcast: Fix use-after-free when processing MLD queries (CVE-2026-53275)
  • kernel: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CVE-2026-64002)
  • kernel: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (CVE-2026-63921)
  • kernel: xfrm: input: hold netns during deferred transport reinjection (CVE-2026-63919)
  • kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink() (CVE-2026-63917)
  • kernel: Linux kernel SLIP: Out-of-bounds write due to race condition during MTU change (CVE-2026-68143)
  • kernel: xfrm: fix stale skb->prev after async crypto steals a GSO segment (CVE-2026-68426)
  • kernel: net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (CVE-2026-72298)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:68532
Updated
2026-11-02
OSVCLSA-2026-1786350974 No score

kernel: Fix of 119 CVEs

  • KVM: x86: Check for invalid/obsolete root after making MMU pages available {CVE-2026-64561}
  • KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level {CVE-2026-63807}
  • Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak {CVE-2025-40035}
  • thunderbolt: Limit XDomain response copy to actual frame size {CVE-2026-53146}
  • drm/gud: Fix UBSAN warning {CVE-2022-50628}
  • wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads {CVE-2022-49740}
  • scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests {CVE-2023-54108}
  • fs: udf: fix OOB read in lengthAllocDescs handling {CVE-2025-40044}
  • tipc: Fix use-after-free in tipc_mon_reinit_self(). {CVE-2025-40280}
  • isofs: Fix out of bound access for corrupted isofs image {CVE-2021-47478}
  • pppoe: drop PFC frames {CVE-2026-53003}
  • nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free {CVE-2026-46304}
  • net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery {CVE-2026-43466}
  • scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails {CVE-2026-45997}
  • irqchip/gic-v3: Fix error handling in gic_populate_ppi_partitions {CVE-2022-49716}
  • drm/nouveau: fix u32 overflow in pushbuf reloc bounds check {CVE-2026-46006}
  • can: dev: can_set_termination(): allow sleeping GPIOs {CVE-2024-56625}
  • cxl/mem: Fix shutdown order {CVE-2023-52849}
  • pinctrl: check the return value of pinmux_ops::get_function_name() {CVE-2025-40030}
  • usb: usbtmc: Flush anchored URBs in usbtmc_release {CVE-2026-31758}
  • RDMA/siw: Fix potential NULL pointer dereference in header processing {CVE-2026-23242}
  • ASoC: wm_adsp: Fix NULL dereference when removing firmware controls {CVE-2026-53350}
  • net: bcmgenet: fix off-by-one in bcmgenet_put_txcb {CVE-2026-53088}
  • HID: multitouch: Check to ensure report responses match the request {CVE-2026-43047}
  • can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak {CVE-2026-23058}
  • firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle {CVE-2023-53250}
  • usb: storage: Fix memory leak in USB bulk transport {CVE-2025-68288}
  • wifi: rtw88: check for PCI upstream bridge existence {CVE-2026-46092}
  • crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed {CVE-2026-31697}
  • scsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts() {CVE-2022-48650}
  • HID: apple: avoid memory leak in apple_report_fixup() {CVE-2026-31520}
  • HID: magicmouse: avoid memory leak in magicmouse_report_fixup() {CVE-2026-31522}
  • scsi: qla2xxx: Avoid fcport pointer dereference {CVE-2023-53603}
  • RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() {CVE-2026-46178}
  • scsi: mpi3mr: Add NULL checks when resetting request and reply queues {CVE-2026-43473}
  • HID: roccat: fix use-after-free in roccat_report_event {CVE-2026-43111}
  • tap: free page on error paths in tap_get_user_xdp() {CVE-2026-46320}
  • net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode {CVE-2026-43180}
  • usb: xhci: Fix memory leak in xhci_disable_slot() {CVE-2026-43432}
  • PCI: Fix reset_method_store() memory leak {CVE-2024-56745}
  • rbd: fix null-ptr-deref when device_add_disk() fails {CVE-2026-46079}
  • net: stmmac: fix integer underflow in chain mode {CVE-2026-31649}
  • be2net: pass wrb_params in case of OS2BMC {CVE-2025-40264}
  • thunderbolt: Validate XDomain request packet size before type cast {CVE-2026-53147}
  • Input: uinput - fix circular locking dependency with ff-core {CVE-2026-31667}
  • usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency {CVE-2023-52855}
  • nbd: defer config put in recv_work {CVE-2025-68372}
  • net: hns3: using the num_tqps in the vf driver to apply for resources {CVE-2025-71064}
  • serial: imx: fix tx statemachine deadlock {CVE-2023-52456}
  • bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave() {CVE-2024-47734}
  • dm-thin: fix metadata refcount underflow {CVE-2026-46107}
  • net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering…
Record
CLSA-2026-1786350974
Updated
2026-11-02
OSVCLSA-2026-1786352940 No score

kernel: Fix of 148 CVEs

  • KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level {CVE-2026-63807}
  • KVM: x86: Check for invalid/obsolete root after making MMU pages available {CVE-2026-64561}
  • ubi: Fix use-after-free when volume resizing failed {CVE-2023-53271}
  • ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() {CVE-2025-37912}
  • wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_tx_check_aggr() {CVE-2026-53318}
  • dpll: Prevent duplicate registrations {CVE-2026-23129}
  • pinmux: fix race causing mux_owner NULL with active mux_usecount {CVE-2025-38632}
  • HID: apple: validate feature-report field count to prevent NULL pointer dereference {CVE-2025-38557}
  • thunderbolt: Limit XDomain response copy to actual frame size {CVE-2026-53146}
  • net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery {CVE-2026-43466}
  • virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false {CVE-2026-31469}
  • scsi: target: Reset t_task_cdb pointer in error case {CVE-2025-68782}
  • ubi: ubi_create_volume: Fix use-after-free when volume creation failed {CVE-2022-49388}
  • drm/xe/reg_sr: Fix leak on xa_store failure {CVE-2026-23418}
  • ASoC: soc-core: flush delayed work before removing DAIs and widgets {CVE-2026-43459}
  • md/raid10: wait barrier before returning discard request with REQ_NOWAIT {CVE-2025-40325}
  • nbd: defer config put in recv_work {CVE-2025-68372}
  • nvmet: fix race in nvmet_bio_done() leading to NULL pointer dereference {CVE-2026-23148}
  • net: hns3: using the num_tqps in the vf driver to apply for resources {CVE-2025-71064}
  • net/mlx5e: Disable MACsec offload for uplink representor profile {CVE-2025-38020}
  • serial: imx: fix tx statemachine deadlock {CVE-2023-52456}
  • dm-thin: fix metadata refcount underflow {CVE-2026-46107}
  • net/mlx5e: xsk: Fix DMA and xdp_frame leak on XDP_TX xmit failure {CVE-2026-53229}
  • drm/amdgpu: Fix use-after-free race in VM acquire {CVE-2026-43370}
  • usbnet:fix NPE during rx_complete {CVE-2025-22050}
  • platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it {CVE-2025-21645}
  • driver core: class: Fix wild pointer dereferences in API class_dev_iter_next() {CVE-2025-21810}
  • usb: atm: cxacru: fix a flaw in existing endpoint checks {CVE-2025-21916}
  • ALSA: seq: dummy: fix UMP event stack overread {CVE-2026-53241}
  • pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled {CVE-2026-31655}
  • net/mlx5: Bridge, fix the crash caused by LAG state check {CVE-2025-21970}
  • ALSA: timer: Don't take register_mutex with copy_from/to_user() {CVE-2025-23134}
  • md/raid5: validate payload size before accessing journal metadata {CVE-2026-46070}
  • nvmet-fc: move lsop put work to nvmet_fc_ls_req_op {CVE-2025-40171}
  • iommu: Fix potential memory leak in iopf_queue_remove_device() {CVE-2025-21770}
  • Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak {CVE-2025-40035}
  • scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails {CVE-2026-45997}
  • can: dev: can_set_termination(): allow sleeping GPIOs {CVE-2024-56625}
  • nvme-tcp: fix the memleak while create new ctrl failed {CVE-2024-56632}
  • ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3() {CVE-2026-46146}
  • pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains {CVE-2026-23187}
  • wifi: ath12k: Clear affinity hint before calling ath12k_pci_free_irq() in error path {CVE-2025-22128}
  • octeon_ep: Fix memory leak in octep_device_setup() {CVE-2026-23160}
  • pinctrl: check the return value of pinmux_ops::get_function_name() {CVE-2025-40030}
  • net: tun: fix tun_napi_alloc_frags() {CVE-2024-56372}
  • wifi: iwlwifi: mvm: clean up ROC on failure {CVE-2025-21906}
  • ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd {CVE-2025-40275}
  • dpll: fix xa_alloc_cyclic() error handling {CVE-2025-22016}
  • usb: usbtmc: Flush anchored URBs in usbtmc_release {CVE-2026-31758}
  • RDMA/siw: Fix potential NULL pointer dereference in header processing…
Record
CLSA-2026-1786352940
Updated
2026-11-02
OSVCLSA-2026-1786435880 No score

kernel: Fix of 9 CVEs

  • KVM: x86: Check for invalid/obsolete root after making MMU pages available {CVE-2026-64561}
  • dm cache: fix null-deref with concurrent writes in passthrough mode {CVE-2026-53064}
  • wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet {CVE-2026-53112}
  • RDMA/siw: Fix a use after free in siw_alloc_mr {CVE-2021-47012}
  • ipv6: prevent possible UaF in addrconf_permanent_addr() {CVE-2026-43339}
  • netfilter: nf_conntrack_h323: fix OOB read in decode_choice() {CVE-2026-43233}
  • Bluetooth: SMP: force responder MITM requirements before building the pairing response {CVE-2026-43334}
  • arp: use RCU protection in arp_xmit() {CVE-2025-21762}
  • vsock: fix buffer size clamping order {CVE-2026-46234}
  • net: bonding: fix use-after-free after 802.3ad slave unbind {CVE-2022-49667}
Record
CLSA-2026-1786435880
Updated
2026-11-02
OSVCLSA-2026-1786436146 No score

kernel: Fix of 8 CVEs

  • KVM: x86: Check for invalid/obsolete root after making MMU pages available {CVE-2026-64561}
  • KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level {CVE-2026-63807}
  • wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet {CVE-2026-53112}
  • ipv6: prevent possible UaF in addrconf_permanent_addr() {CVE-2026-43339}
  • netfilter: nf_conntrack_h323: fix OOB read in decode_choice() {CVE-2026-43233}
  • Bluetooth: SMP: force responder MITM requirements before building the pairing response {CVE-2026-43334}
  • bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS {CVE-2024-26589}
  • vsock: fix buffer size clamping order {CVE-2026-46234}
Record
CLSA-2026-1786436146
Updated
2026-11-02
OSVCLSA-2026-1786444011 No score

kernel: Fix of 16 CVEs

  • KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level {CVE-2026-63807}
  • KVM: x86: Check for invalid/obsolete root after making MMU pages available {CVE-2026-64561}
  • comedi: vmk80xx: fix bulk-buffer overflow {CVE-2021-47474}
  • staging: vme_user: Fix possible UAF in tsi148_dma_list_add {CVE-2022-50384}
  • net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit {CVE-2026-23277}
  • net: mana: fix use-after-free in add_adev() error path {CVE-2026-43056}
  • dm cache: fix null-deref with concurrent writes in passthrough mode {CVE-2026-53064}
  • signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads() {CVE-2026-53352}
  • wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet {CVE-2026-53112}
  • bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS {CVE-2024-26589}
  • ipv6: prevent possible UaF in addrconf_permanent_addr() {CVE-2026-43339}
  • KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation {CVE-2026-43133}
  • netfilter: nf_conntrack_h323: fix OOB read in decode_choice() {CVE-2026-43233}
  • Bluetooth: SMP: force responder MITM requirements before building the pairing response {CVE-2026-43334}
  • nbd: fix uaf in nbd_genl_connect() error path {CVE-2025-38443}
  • drm/i915/hwmon: Get rid of devm {CVE-2024-39479}
  • scsi: megaraid_sas: Fix invalid node index {CVE-2025-38239}
  • vsock: fix buffer size clamping order {CVE-2026-46234}
  • net: ena: fix shift-out-of-bounds in exponential backoff {CVE-2023-53272}
Record
CLSA-2026-1786444011
Updated
2026-11-02
OSVCLSA-2026-1791132071 No score

Fix of 159 CVEs

  • CVE-2026-64375
    • proc: protect ptrace_may_access() with exec_update_lock (FD links) {CVE-2026-64375}
    • exec: Add exec_update_mutex to replace cred_guard_mutex {CVE-2026-64375}
  • CVE-2026-53266
    • netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
  • CVE-2025-39964
    • crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
  • CVE-2026-90413
    • IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413}
  • CVE-2026-53062
    • dm cache policy smq: test e->allocated under the policy lock {CVE-2026-53062}
    • dm cache policy smq: fix missing locks in invalidating cache blocks {CVE-2026-53062}
  • CVE-2026-64237
    • Input: elan_i2c - release the firmware on the short-file path {CVE-2026-64237}
    • Input: elan_i2c - validate firmware size before use {CVE-2026-64237}
  • CVE-2026-64109
    • af_unix: fix the UAF read of tail->len without losing the wakeup condition {CVE-2026-64109}
    • af_unix: Fix UAF read of tail->len in unix_stream_data_wait() {CVE-2026-64109}
  • CVE-2025-38512
    • wifi: prevent A-MSDU attacks in mesh networks {CVE-2025-38512}
  • CVE-2025-38117
    • Bluetooth: MGMT: Protect mgmt_pending list with its own lock {CVE-2025-38117}
  • CVE-2026-22980
    • nfsd: provide locking for v4_end_grace {CVE-2026-22980}
  • CVE-2023-53254
    • cacheinfo: Fix shared_cpu_map to handle shared caches at different levels {CVE-2023-53254}
  • CVE-2025-37885
    • KVM: x86: Reset IRTE to host control if new route isn't postable {CVE-2025-37885}
  • CVE-2026-23191
    • ALSA: aloop: Fix racy access at PCM trigger {CVE-2026-23191}
  • CVE-2025-37879
    • 9p/net: fix improper handling of bogus negative read/write replies {CVE-2025-37879}
  • CVE-2023-53039
    • HID: intel-ish-hid: ipc: Fix potential use-after-free in work function {CVE-2023-53039}
  • CVE-2019-12456
    • scsi: mpt3sas_ctl: fix double-fetch bug in _ctl_ioctl_main() {CVE-2019-12456}
  • CVE-2024-46812
    • drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration {CVE-2024-46812}
  • CVE-2026-31761
    • iio: gyro: mpu3050: Move iio_device_register() to correct location {CVE-2026-31761}
  • CVE-2026-53120
    • PCI: RCU-protect driver_override against pci_match_device() UAF {CVE-2026-53120}
  • CVE-2026-31598
    • ocfs2: fix possible deadlock between unlink and dio_end_io_write {CVE-2026-31598}
  • CVE-2026-43075
    • ocfs2: fix out-of-bounds write in ocfs2_write_end_inline {CVE-2026-43075}
  • CVE-2024-41013
    • xfs: don't walk off the end of a directory data block {CVE-2024-41013}
  • CVE-2026-31527
    • driver core: platform: RCU-protect driver_override against match() UAF {CVE-2026-31527}
  • CVE-2022-48744
    • net/mlx5e: Avoid field-overflowing memcpy() {CVE-2022-48744}
  • CVE-2023-53510
    • scsi: ufs: core: Fix handling of lrbp->cmd {CVE-2023-53510}
  • CVE-2026-23268
    • apparmor: fix unprivileged local user can do privileged policy management {CVE-2026-23268}
  • CVE-2026-23269
    • apparmor: validate DFA start states are in bounds in unpack_pdb {CVE-2026-23269}
  • CVE-2025-21812
    • ax25: rcu protect dev->ax25_ptr {CVE-2025-21812}
  • CVE-2026-46266
    • inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266}
  • CVE-2026-53228
    • ipv6: sit: reload inner IPv6 header after GSO offloads {CVE-2026-53228}
  • CVE-2026-53355
    • net: rds: clear i_sends on setup unwind {CVE-2026-53355}
  • CVE-2026-45970
    • bonding: alb: fix UAF in rlb_arp_recv during bond up/down {CVE-2026-45970}
  • CVE-2023-52922
    • can: bcm: Fix UAF in bcm_proc_show() {CVE-2023-52922}
  • CVE-2026-52920
    • netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920} *…
Record
CLSA-2026-1791132071
Updated
2026-11-02
OSVCLSA-2026-1791132078 No score

Fix of 160 CVEs

  • CVE-2026-64375
    • proc: protect ptrace_may_access() with exec_update_lock (FD links) {CVE-2026-64375}
    • exec: Add exec_update_mutex to replace cred_guard_mutex {CVE-2026-64375}
  • CVE-2026-53266
    • netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
  • CVE-2025-39964
    • crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
  • CVE-2026-90413
    • IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413}
  • CVE-2026-53062
    • dm cache policy smq: test e->allocated under the policy lock {CVE-2026-53062}
    • dm cache policy smq: fix missing locks in invalidating cache blocks {CVE-2026-53062}
  • CVE-2026-64237
    • Input: elan_i2c - release the firmware on the short-file path {CVE-2026-64237}
    • Input: elan_i2c - validate firmware size before use {CVE-2026-64237}
  • CVE-2026-64109
    • af_unix: fix the UAF read of tail->len without losing the wakeup condition {CVE-2026-64109}
    • af_unix: Fix UAF read of tail->len in unix_stream_data_wait() {CVE-2026-64109}
  • CVE-2025-38512
    • wifi: prevent A-MSDU attacks in mesh networks {CVE-2025-38512}
  • CVE-2025-38117
    • Bluetooth: MGMT: Protect mgmt_pending list with its own lock {CVE-2025-38117}
  • CVE-2026-22980
    • nfsd: provide locking for v4_end_grace {CVE-2026-22980}
  • CVE-2023-53254
    • cacheinfo: Fix shared_cpu_map to handle shared caches at different levels {CVE-2023-53254}
  • CVE-2025-37885
    • KVM: x86: Reset IRTE to host control if new route isn't postable {CVE-2025-37885}
  • CVE-2026-23191
    • ALSA: aloop: Fix racy access at PCM trigger {CVE-2026-23191}
  • CVE-2025-37879
    • 9p/net: fix improper handling of bogus negative read/write replies {CVE-2025-37879}
  • CVE-2023-53039
    • HID: intel-ish-hid: ipc: Fix potential use-after-free in work function {CVE-2023-53039}
  • CVE-2019-12456
    • scsi: mpt3sas_ctl: fix double-fetch bug in _ctl_ioctl_main() {CVE-2019-12456}
  • CVE-2024-46812
    • drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration {CVE-2024-46812}
  • CVE-2026-31761
    • iio: gyro: mpu3050: Move iio_device_register() to correct location {CVE-2026-31761}
  • CVE-2026-53120
    • PCI: RCU-protect driver_override against pci_match_device() UAF {CVE-2026-53120}
  • CVE-2026-31598
    • ocfs2: fix possible deadlock between unlink and dio_end_io_write {CVE-2026-31598}
  • CVE-2026-43075
    • ocfs2: fix out-of-bounds write in ocfs2_write_end_inline {CVE-2026-43075}
  • CVE-2024-41013
    • xfs: don't walk off the end of a directory data block {CVE-2024-41013}
  • CVE-2026-31527
    • driver core: platform: RCU-protect driver_override against match() UAF {CVE-2026-31527}
  • CVE-2022-48744
    • net/mlx5e: Avoid field-overflowing memcpy() {CVE-2022-48744}
  • CVE-2023-53510
    • scsi: ufs: core: Fix handling of lrbp->cmd {CVE-2023-53510}
  • CVE-2026-23268
    • apparmor: fix unprivileged local user can do privileged policy management {CVE-2026-23268}
  • CVE-2026-23269
    • apparmor: validate DFA start states are in bounds in unpack_pdb {CVE-2026-23269}
  • CVE-2025-21812
    • ax25: rcu protect dev->ax25_ptr {CVE-2025-21812}
  • CVE-2026-46266
    • inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266}
  • CVE-2026-53228
    • ipv6: sit: reload inner IPv6 header after GSO offloads {CVE-2026-53228}
  • CVE-2026-53355
    • net: rds: clear i_sends on setup unwind {CVE-2026-53355}
  • CVE-2026-45970
    • bonding: alb: fix UAF in rlb_arp_recv during bond up/down {CVE-2026-45970}
  • CVE-2023-52922
    • can: bcm: Fix UAF in bcm_proc_show() {CVE-2023-52922}
  • CVE-2026-52920
    • netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920} *…
Record
CLSA-2026-1791132078
Updated
2026-11-02
OSVopenSUSE-SU-2026:21388-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-10263: arm64: cputype: Add C1-Premium definitions (bsc#1266290).
  • CVE-2025-39894: netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm (bsc#1262430).
  • CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
  • CVE-2026-23248: perf: Make perf_pmu_unregister() useable (bsc#1259800).
  • CVE-2026-23394: Revert: "af_unix: Remove lock dance in unix_peek_fds()." (bsc#1260565).
  • CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
  • CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
  • CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
  • CVE-2026-31438: netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators (bsc#1267824).
  • CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
  • CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
  • CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
  • CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (bsc#1267816).
  • CVE-2026-31479: drm/xe: always keep track of remap prev/next (bsc#1262765).
  • CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
  • CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
  • CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
  • CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
  • CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
  • CVE-2026-31560: spi: spi-dw-dma: fix print error log when wait finish transaction (bsc#1263057).
  • CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
  • CVE-2026-31646: net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() (bsc#1263796).
  • CVE-2026-31647: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (bsc#1263581).
  • CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
  • CVE-2026-31664: xfrm: clear trailing padding in build_polexpire() (bsc#1263578).
  • CVE-2026-31665: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
  • CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
  • CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
  • CVE-2026-31674: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (bsc#1263568).
  • CVE-2026-31680: net: ipv6: flowlabel: defer exclusive option free until RCU teardown (bsc#1263563).
  • CVE-2026-31693: cifs: some missing initializations on replay (bsc#1267744).
  • CVE-2026-31743: nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy (bsc#1264067).
  • CVE-2026-31752: bridge: br_nd_send: validate ND option lengths (bsc#1264045).
  • CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
  • CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
  • CVE-2026-43014,CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010 bsc#1264012).
  • CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
  • CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
  • CVE-2026-43024: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).
  • CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934).
  • CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
  • CVE-2026-43035: net:…
Record
openSUSE-SU-2026:21388-1
Updated
2026-11-02
OSVSUSE-SU-2026:22521-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
  • CVE-2025-71294: drm/amdgpu: fix NULL pointer issue buffer funcs (bsc#1264562).
  • CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
  • CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
  • CVE-2026-31462: drm/amdgpu: prevent immediate PASID reuse case (bsc#1262655).
  • CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
  • CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
  • CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
  • CVE-2026-31677: crypto: af_alg - limit RX SG extraction by receive buffer budget (bsc#1263560).
  • CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
  • CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
  • CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
  • CVE-2026-43079: perf/x86/intel/uncore: Skip discovery table for offline dies (bsc#1264228).
  • CVE-2026-43080: l2tp: Drop large packets with UDP encap (bsc#1264236).
  • CVE-2026-43081: net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ (bsc#1264241).
  • CVE-2026-43085: netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (bsc#1264230).
  • CVE-2026-43086: ipvs: fix NULL deref in ip_vs_add_service error path (bsc#1264286).
  • CVE-2026-43089: xfrm_user: fix info leak in build_mapping() (bsc#1264261).
  • CVE-2026-43093: xsk: tighten UMEM headroom validation to account for tailroom and min frame (bsc#1264254).
  • CVE-2026-43107: xfrm: account XFRMA_IF_ID in aevent size calculation (bsc#1264258).
  • CVE-2026-43128: RDMA/umem: Fix double dma_buf_unpin in failure path (bsc#1264612).
  • CVE-2026-43139: xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (bsc#1264294).
  • CVE-2026-43233: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (bsc#1264337).
  • CVE-2026-43238: net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() (bsc#1264320).
  • CVE-2026-43303: mm/page_alloc: clear page->private in free_pages_prepare() (bsc#1264974).
  • CVE-2026-43336: lib/crypto: chacha: Zeroize permuted_state before it leaves scope (bsc#1265113).
  • CVE-2026-43420: ceph: fix i_nlink underrun during async unlink (bsc#1264814).
  • CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).
  • CVE-2026-43472: unshare: fix unshare_fs() handling (bsc#1264748).
  • CVE-2026-43492: lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() (bsc#1265629).
  • CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
  • CVE-2026-45838: bpf: fix end-of-list detection in cgroup_storage_get_next_key() (bsc#1266396).
  • CVE-2026-45848: apparmor: fix NULL sock in aa_sock_file_perm (bsc#1266734).
  • CVE-2026-45891: net: hns3: fix double free issue for tx spare buffer (bsc#1266717).
  • CVE-2026-45912: ext4: don't cache extent during splitting extent (bsc#1266899).
  • CVE-2026-45948: ext4: fix memory leak in ext4_ext_shift_extents() (bsc#1266929).
  • CVE-2026-45985: ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O (bsc#1266700).
  • CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).
  • CVE-2026-46053: net: rds: fix MR cleanup on copy error (bsc#1267427).
  • CVE-2026-46063: x86/shstk: Prevent deadlock during shstk sigreturn (bsc#1267228).
  • CVE-2026-46065: fbdev: defio: Disconnect deferred I/O from the lifetime of struct (bsc#1267458).
  • CVE-2026-46069: wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() (bsc#1267437).
  • CVE-2026-46071: KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12 (bsc#1267591).…
Record
SUSE-SU-2026:22521-1
Updated
2026-11-02
OSVSUSE-SU-2026:22522-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
  • CVE-2025-71294: drm/amdgpu: fix NULL pointer issue buffer funcs (bsc#1264562).
  • CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
  • CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
  • CVE-2026-31462: drm/amdgpu: prevent immediate PASID reuse case (bsc#1262655).
  • CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
  • CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
  • CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
  • CVE-2026-31677: crypto: af_alg - limit RX SG extraction by receive buffer budget (bsc#1263560).
  • CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
  • CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
  • CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
  • CVE-2026-43079: perf/x86/intel/uncore: Skip discovery table for offline dies (bsc#1264228).
  • CVE-2026-43080: l2tp: Drop large packets with UDP encap (bsc#1264236).
  • CVE-2026-43081: net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ (bsc#1264241).
  • CVE-2026-43085: netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (bsc#1264230).
  • CVE-2026-43086: ipvs: fix NULL deref in ip_vs_add_service error path (bsc#1264286).
  • CVE-2026-43089: xfrm_user: fix info leak in build_mapping() (bsc#1264261).
  • CVE-2026-43093: xsk: tighten UMEM headroom validation to account for tailroom and min frame (bsc#1264254).
  • CVE-2026-43107: xfrm: account XFRMA_IF_ID in aevent size calculation (bsc#1264258).
  • CVE-2026-43128: RDMA/umem: Fix double dma_buf_unpin in failure path (bsc#1264612).
  • CVE-2026-43139: xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (bsc#1264294).
  • CVE-2026-43233: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (bsc#1264337).
  • CVE-2026-43238: net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() (bsc#1264320).
  • CVE-2026-43303: mm/page_alloc: clear page->private in free_pages_prepare() (bsc#1264974).
  • CVE-2026-43336: lib/crypto: chacha: Zeroize permuted_state before it leaves scope (bsc#1265113).
  • CVE-2026-43420: ceph: fix i_nlink underrun during async unlink (bsc#1264814).
  • CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).
  • CVE-2026-43472: unshare: fix unshare_fs() handling (bsc#1264748).
  • CVE-2026-43492: lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() (bsc#1265629).
  • CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
  • CVE-2026-45838: bpf: fix end-of-list detection in cgroup_storage_get_next_key() (bsc#1266396).
  • CVE-2026-45848: apparmor: fix NULL sock in aa_sock_file_perm (bsc#1266734).
  • CVE-2026-45891: net: hns3: fix double free issue for tx spare buffer (bsc#1266717).
  • CVE-2026-45912: ext4: don't cache extent during splitting extent (bsc#1266899).
  • CVE-2026-45948: ext4: fix memory leak in ext4_ext_shift_extents() (bsc#1266929).
  • CVE-2026-45985: ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O (bsc#1266700).
  • CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).
  • CVE-2026-46053: net: rds: fix MR cleanup on copy error (bsc#1267427).
  • CVE-2026-46063: x86/shstk: Prevent deadlock during shstk sigreturn (bsc#1267228).
  • CVE-2026-46065: fbdev: defio: Disconnect deferred I/O from the lifetime of struct (bsc#1267458).
  • CVE-2026-46069: wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() (bsc#1267437).
  • CVE-2026-46071: KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12…
Record
SUSE-SU-2026:22522-1
Updated
2026-11-02
OSVSUSE-SU-2026:22665-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
  • CVE-2025-71294: drm/amdgpu: fix NULL pointer issue buffer funcs (bsc#1264562).
  • CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
  • CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
  • CVE-2026-31462: drm/amdgpu: prevent immediate PASID reuse case (bsc#1262655).
  • CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
  • CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
  • CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
  • CVE-2026-31677: crypto: af_alg - limit RX SG extraction by receive buffer budget (bsc#1263560).
  • CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
  • CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
  • CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
  • CVE-2026-43079: perf/x86/intel/uncore: Skip discovery table for offline dies (bsc#1264228).
  • CVE-2026-43080: l2tp: Drop large packets with UDP encap (bsc#1264236).
  • CVE-2026-43081: net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ (bsc#1264241).
  • CVE-2026-43085: netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (bsc#1264230).
  • CVE-2026-43086: ipvs: fix NULL deref in ip_vs_add_service error path (bsc#1264286).
  • CVE-2026-43089: xfrm_user: fix info leak in build_mapping() (bsc#1264261).
  • CVE-2026-43093: xsk: tighten UMEM headroom validation to account for tailroom and min frame (bsc#1264254).
  • CVE-2026-43107: xfrm: account XFRMA_IF_ID in aevent size calculation (bsc#1264258).
  • CVE-2026-43128: RDMA/umem: Fix double dma_buf_unpin in failure path (bsc#1264612).
  • CVE-2026-43139: xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (bsc#1264294).
  • CVE-2026-43233: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (bsc#1264337).
  • CVE-2026-43238: net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() (bsc#1264320).
  • CVE-2026-43303: mm/page_alloc: clear page->private in free_pages_prepare() (bsc#1264974).
  • CVE-2026-43336: lib/crypto: chacha: Zeroize permuted_state before it leaves scope (bsc#1265113).
  • CVE-2026-43420: ceph: fix i_nlink underrun during async unlink (bsc#1264814).
  • CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).
  • CVE-2026-43472: unshare: fix unshare_fs() handling (bsc#1264748).
  • CVE-2026-43492: lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() (bsc#1265629).
  • CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
  • CVE-2026-45838: bpf: fix end-of-list detection in cgroup_storage_get_next_key() (bsc#1266396).
  • CVE-2026-45848: apparmor: fix NULL sock in aa_sock_file_perm (bsc#1266734).
  • CVE-2026-45891: net: hns3: fix double free issue for tx spare buffer (bsc#1266717).
  • CVE-2026-45912: ext4: don't cache extent during splitting extent (bsc#1266899).
  • CVE-2026-45948: ext4: fix memory leak in ext4_ext_shift_extents() (bsc#1266929).
  • CVE-2026-45985: ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O (bsc#1266700).
  • CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).
  • CVE-2026-46053: net: rds: fix MR cleanup on copy error (bsc#1267427).
  • CVE-2026-46063: x86/shstk: Prevent deadlock during shstk sigreturn (bsc#1267228).
  • CVE-2026-46065: fbdev: defio: Disconnect deferred I/O from the lifetime of struct (bsc#1267458).
  • CVE-2026-46069: wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() (bsc#1267437).
  • CVE-2026-46071: KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12 (bsc#1267591).…
Record
SUSE-SU-2026:22665-1
Updated
2026-11-02
OSVSUSE-SU-2026:22666-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
  • CVE-2025-71294: drm/amdgpu: fix NULL pointer issue buffer funcs (bsc#1264562).
  • CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
  • CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
  • CVE-2026-31462: drm/amdgpu: prevent immediate PASID reuse case (bsc#1262655).
  • CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
  • CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
  • CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
  • CVE-2026-31677: crypto: af_alg - limit RX SG extraction by receive buffer budget (bsc#1263560).
  • CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
  • CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
  • CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
  • CVE-2026-43079: perf/x86/intel/uncore: Skip discovery table for offline dies (bsc#1264228).
  • CVE-2026-43080: l2tp: Drop large packets with UDP encap (bsc#1264236).
  • CVE-2026-43081: net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ (bsc#1264241).
  • CVE-2026-43085: netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (bsc#1264230).
  • CVE-2026-43086: ipvs: fix NULL deref in ip_vs_add_service error path (bsc#1264286).
  • CVE-2026-43089: xfrm_user: fix info leak in build_mapping() (bsc#1264261).
  • CVE-2026-43093: xsk: tighten UMEM headroom validation to account for tailroom and min frame (bsc#1264254).
  • CVE-2026-43107: xfrm: account XFRMA_IF_ID in aevent size calculation (bsc#1264258).
  • CVE-2026-43128: RDMA/umem: Fix double dma_buf_unpin in failure path (bsc#1264612).
  • CVE-2026-43139: xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (bsc#1264294).
  • CVE-2026-43233: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (bsc#1264337).
  • CVE-2026-43238: net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() (bsc#1264320).
  • CVE-2026-43303: mm/page_alloc: clear page->private in free_pages_prepare() (bsc#1264974).
  • CVE-2026-43336: lib/crypto: chacha: Zeroize permuted_state before it leaves scope (bsc#1265113).
  • CVE-2026-43420: ceph: fix i_nlink underrun during async unlink (bsc#1264814).
  • CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).
  • CVE-2026-43472: unshare: fix unshare_fs() handling (bsc#1264748).
  • CVE-2026-43492: lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() (bsc#1265629).
  • CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
  • CVE-2026-45838: bpf: fix end-of-list detection in cgroup_storage_get_next_key() (bsc#1266396).
  • CVE-2026-45848: apparmor: fix NULL sock in aa_sock_file_perm (bsc#1266734).
  • CVE-2026-45891: net: hns3: fix double free issue for tx spare buffer (bsc#1266717).
  • CVE-2026-45912: ext4: don't cache extent during splitting extent (bsc#1266899).
  • CVE-2026-45948: ext4: fix memory leak in ext4_ext_shift_extents() (bsc#1266929).
  • CVE-2026-45985: ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O (bsc#1266700).
  • CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).
  • CVE-2026-46053: net: rds: fix MR cleanup on copy error (bsc#1267427).
  • CVE-2026-46063: x86/shstk: Prevent deadlock during shstk sigreturn (bsc#1267228).
  • CVE-2026-46065: fbdev: defio: Disconnect deferred I/O from the lifetime of struct (bsc#1267458).
  • CVE-2026-46069: wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() (bsc#1267437).
  • CVE-2026-46071: KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12…
Record
SUSE-SU-2026:22666-1
Updated
2026-11-02
OSVSUSE-SU-2026:22742-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-10263: arm64: cputype: Add C1-Premium definitions (bsc#1266290).
  • CVE-2025-39894: netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm (bsc#1262430).
  • CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
  • CVE-2026-23248: perf: Make perf_pmu_unregister() useable (bsc#1259800).
  • CVE-2026-23394: Revert: "af_unix: Remove lock dance in unix_peek_fds()." (bsc#1260565).
  • CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
  • CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
  • CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
  • CVE-2026-31438: netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators (bsc#1267824).
  • CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
  • CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
  • CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
  • CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (bsc#1267816).
  • CVE-2026-31479: drm/xe: always keep track of remap prev/next (bsc#1262765).
  • CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
  • CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
  • CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
  • CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
  • CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
  • CVE-2026-31560: spi: spi-dw-dma: fix print error log when wait finish transaction (bsc#1263057).
  • CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
  • CVE-2026-31646: net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() (bsc#1263796).
  • CVE-2026-31647: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (bsc#1263581).
  • CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
  • CVE-2026-31664: xfrm: clear trailing padding in build_polexpire() (bsc#1263578).
  • CVE-2026-31665: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
  • CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
  • CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
  • CVE-2026-31674: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (bsc#1263568).
  • CVE-2026-31680: net: ipv6: flowlabel: defer exclusive option free until RCU teardown (bsc#1263563).
  • CVE-2026-31693: cifs: some missing initializations on replay (bsc#1267744).
  • CVE-2026-31743: nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy (bsc#1264067).
  • CVE-2026-31752: bridge: br_nd_send: validate ND option lengths (bsc#1264045).
  • CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
  • CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
  • CVE-2026-43014,CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010 bsc#1264012).
  • CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
  • CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
  • CVE-2026-43024: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).
  • CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934).
  • CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
  • CVE-2026-43035: net:…
Record
SUSE-SU-2026:22742-1
Updated
2026-11-02
OSVSUSE-SU-2026:22769-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-10263: arm64: cputype: Add C1-Premium definitions (bsc#1266290).
  • CVE-2025-39894: netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm (bsc#1262430).
  • CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
  • CVE-2026-23248: perf: Make perf_pmu_unregister() useable (bsc#1259800).
  • CVE-2026-23394: Revert: "af_unix: Remove lock dance in unix_peek_fds()." (bsc#1260565).
  • CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
  • CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
  • CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
  • CVE-2026-31438: netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators (bsc#1267824).
  • CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
  • CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
  • CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
  • CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (bsc#1267816).
  • CVE-2026-31479: drm/xe: always keep track of remap prev/next (bsc#1262765).
  • CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
  • CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
  • CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
  • CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
  • CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
  • CVE-2026-31560: spi: spi-dw-dma: fix print error log when wait finish transaction (bsc#1263057).
  • CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
  • CVE-2026-31646: net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() (bsc#1263796).
  • CVE-2026-31647: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (bsc#1263581).
  • CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
  • CVE-2026-31664: xfrm: clear trailing padding in build_polexpire() (bsc#1263578).
  • CVE-2026-31665: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
  • CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
  • CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
  • CVE-2026-31674: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (bsc#1263568).
  • CVE-2026-31680: net: ipv6: flowlabel: defer exclusive option free until RCU teardown (bsc#1263563).
  • CVE-2026-31693: cifs: some missing initializations on replay (bsc#1267744).
  • CVE-2026-31743: nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy (bsc#1264067).
  • CVE-2026-31752: bridge: br_nd_send: validate ND option lengths (bsc#1264045).
  • CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
  • CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
  • CVE-2026-43014,CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010 bsc#1264012).
  • CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
  • CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
  • CVE-2026-43024: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).
  • CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934).
  • CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
  • CVE-2026-43035: net:…
Record
SUSE-SU-2026:22769-1
Updated
2026-11-02
OSVSUSE-SU-2026:22812-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-10263: arm64: cputype: Add C1-Premium definitions (bsc#1266290).
  • CVE-2025-39894: netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm (bsc#1262430).
  • CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
  • CVE-2026-23248: perf: Make perf_pmu_unregister() useable (bsc#1259800).
  • CVE-2026-23394: Revert: "af_unix: Remove lock dance in unix_peek_fds()." (bsc#1260565).
  • CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
  • CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
  • CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
  • CVE-2026-31438: netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators (bsc#1267824).
  • CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
  • CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
  • CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
  • CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (bsc#1267816).
  • CVE-2026-31479: drm/xe: always keep track of remap prev/next (bsc#1262765).
  • CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
  • CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
  • CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
  • CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
  • CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
  • CVE-2026-31560: spi: spi-dw-dma: fix print error log when wait finish transaction (bsc#1263057).
  • CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
  • CVE-2026-31646: net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() (bsc#1263796).
  • CVE-2026-31647: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (bsc#1263581).
  • CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
  • CVE-2026-31664: xfrm: clear trailing padding in build_polexpire() (bsc#1263578).
  • CVE-2026-31665: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
  • CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
  • CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
  • CVE-2026-31674: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (bsc#1263568).
  • CVE-2026-31680: net: ipv6: flowlabel: defer exclusive option free until RCU teardown (bsc#1263563).
  • CVE-2026-31693: cifs: some missing initializations on replay (bsc#1267744).
  • CVE-2026-31743: nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy (bsc#1264067).
  • CVE-2026-31752: bridge: br_nd_send: validate ND option lengths (bsc#1264045).
  • CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
  • CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
  • CVE-2026-43014,CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010 bsc#1264012).
  • CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
  • CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
  • CVE-2026-43024: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).
  • CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934).
  • CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
  • CVE-2026-43035: net:…
Record
SUSE-SU-2026:22812-1
Updated
2026-11-02
OSVSUSE-SU-2026:22835-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-10263: arm64: cputype: Add C1-Premium definitions (bsc#1266290).
  • CVE-2025-39894: netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm (bsc#1262430).
  • CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
  • CVE-2026-23248: perf: Make perf_pmu_unregister() useable (bsc#1259800).
  • CVE-2026-23394: Revert: "af_unix: Remove lock dance in unix_peek_fds()." (bsc#1260565).
  • CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
  • CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
  • CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
  • CVE-2026-31438: netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators (bsc#1267824).
  • CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
  • CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
  • CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
  • CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (bsc#1267816).
  • CVE-2026-31479: drm/xe: always keep track of remap prev/next (bsc#1262765).
  • CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
  • CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
  • CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
  • CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
  • CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
  • CVE-2026-31560: spi: spi-dw-dma: fix print error log when wait finish transaction (bsc#1263057).
  • CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
  • CVE-2026-31646: net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() (bsc#1263796).
  • CVE-2026-31647: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (bsc#1263581).
  • CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
  • CVE-2026-31664: xfrm: clear trailing padding in build_polexpire() (bsc#1263578).
  • CVE-2026-31665: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
  • CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
  • CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
  • CVE-2026-31674: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (bsc#1263568).
  • CVE-2026-31680: net: ipv6: flowlabel: defer exclusive option free until RCU teardown (bsc#1263563).
  • CVE-2026-31693: cifs: some missing initializations on replay (bsc#1267744).
  • CVE-2026-31743: nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy (bsc#1264067).
  • CVE-2026-31752: bridge: br_nd_send: validate ND option lengths (bsc#1264045).
  • CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
  • CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
  • CVE-2026-43014,CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010 bsc#1264012).
  • CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
  • CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
  • CVE-2026-43024: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).
  • CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934).
  • CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
  • CVE-2026-43035: net:…
Record
SUSE-SU-2026:22835-1
Updated
2026-11-02
OSVSUSE-SU-2026:2799-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-10263: arm64: cputype: Add C1-Ultra definitions (bsc#1266290).
  • CVE-2025-40216: io_uring/rsrc: don't rely on user vaddr alignment (bsc#1259764).
  • CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
  • CVE-2025-68822: Input: alps - fix use-after-free bugs caused by dev3_register_work (bsc#1256668).
  • CVE-2025-71294: drm/amdgpu: fix NULL pointer issue buffer funcs (bsc#1264562).
  • CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
  • CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
  • CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
  • CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
  • CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
  • CVE-2026-31462: drm/amdgpu: prevent immediate PASID reuse case (bsc#1262655).
  • CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
  • CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (bsc#1267816).
  • CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
  • CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
  • CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
  • CVE-2026-31500: Bluetooth: hci_sync: Remove remaining dependencies of hci_request (bsc#1262993).
  • CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
  • CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
  • CVE-2026-31560: spi: spi-dw-dma: fix print error log when wait finish transaction (bsc#1263057).
  • CVE-2026-31592: KVM: SEV: Protect all of sev_mem_enc_register_region() with kvm->lock (bsc#1263123).
  • CVE-2026-31593: KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU (bsc#1263124).
  • CVE-2026-31647: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (bsc#1263581).
  • CVE-2026-31664: xfrm: clear trailing padding in build_polexpire() (bsc#1263578).
  • CVE-2026-31665: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
  • CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
  • CVE-2026-31674: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (bsc#1263568).
  • CVE-2026-31677: crypto: af_alg - limit RX SG extraction by receive buffer budget (bsc#1263560).
  • CVE-2026-31680: net: ipv6: flowlabel: defer exclusive option free until RCU teardown (bsc#1263563).
  • CVE-2026-31693: cifs: some missing initializations on replay (bsc#1267744).
  • CVE-2026-31697: crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed (bsc#1264116).
  • CVE-2026-31698: crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed (bsc#1263880).
  • CVE-2026-31699: crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed (bsc#1263879).
  • CVE-2026-31752: bridge: br_nd_send: validate ND option lengths (bsc#1264045).
  • CVE-2026-31759: usb: ulpi: fix double free in ulpi_register_interface() error path (bsc#1264076).
  • CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
  • CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
  • CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
  • CVE-2026-43023: Bluetooth: SCO: fix race conditions in sco_sock_connect() (bsc#1264137).
  • CVE-2026-43024: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).
  • CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated…
Record
SUSE-SU-2026:2799-1
Updated
2026-11-02
OSVSUSE-SU-2026:2800-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-40216: io_uring/rsrc: don't rely on user vaddr alignment (bsc#1259764).
  • CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
  • CVE-2025-71294: drm/amdgpu: fix NULL pointer issue buffer funcs (bsc#1264562).
  • CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
  • CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
  • CVE-2026-31462: drm/amdgpu: prevent immediate PASID reuse case (bsc#1262655).
  • CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
  • CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
  • CVE-2026-31647: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (bsc#1263581).
  • CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
  • CVE-2026-31677: crypto: af_alg - limit RX SG extraction by receive buffer budget (bsc#1263560).
  • CVE-2026-31697: crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed (bsc#1264116).
  • CVE-2026-31698: crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed (bsc#1263880).
  • CVE-2026-31699: crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed (bsc#1263879).
  • CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
  • CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
  • CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
  • CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
  • CVE-2026-43053: xfs: close crash window in attr dabtree inactivation (bsc#1264084).
  • CVE-2026-43074: eventpoll: defer struct eventpoll free to RCU grace period (bsc#1264263).
  • CVE-2026-43079: perf/x86/intel/uncore: Skip discovery table for offline dies (bsc#1264228).
  • CVE-2026-43080: l2tp: Drop large packets with UDP encap (bsc#1264236).
  • CVE-2026-43081: net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ (bsc#1264241).
  • CVE-2026-43085: netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (bsc#1264230).
  • CVE-2026-43086: ipvs: fix NULL deref in ip_vs_add_service error path (bsc#1264286).
  • CVE-2026-43089: xfrm_user: fix info leak in build_mapping() (bsc#1264261).
  • CVE-2026-43093: xsk: tighten UMEM headroom validation to account for tailroom and min frame (bsc#1264254).
  • CVE-2026-43094: ixgbevf: add missing negotiate_features op to Hyper-V ops table (bsc#1264231).
  • CVE-2026-43107: xfrm: account XFRMA_IF_ID in aevent size calculation (bsc#1264258).
  • CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1264484).
  • CVE-2026-43128: RDMA/umem: Fix double dma_buf_unpin in failure path (bsc#1264612).
  • CVE-2026-43139: xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (bsc#1264294).
  • CVE-2026-43233: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (bsc#1264337).
  • CVE-2026-43238: net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() (bsc#1264320).
  • CVE-2026-43303: mm/page_alloc: clear page->private in free_pages_prepare() (bsc#1264974).
  • CVE-2026-43336: lib/crypto: chacha: Zeroize permuted_state before it leaves scope (bsc#1265113).
  • CVE-2026-43420: ceph: fix i_nlink underrun during async unlink (bsc#1264814).
  • CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).
  • CVE-2026-43472: unshare: fix unshare_fs() handling (bsc#1264748).
  • CVE-2026-43492: lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() (bsc#1265629).
  • CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
  • CVE-2026-45838: bpf: fix end-of-list detection in cgroup_storage_get_next_key()…
Record
SUSE-SU-2026:2800-1
Updated
2026-11-02
OSVSUSE-SU-2026:2914-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1255616).
  • CVE-2026-23255: net: add proper RCU protection to /proc/net/ptype (bsc#1259891).
  • CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
  • CVE-2026-31462: drm/amdgpu: prevent immediate PASID reuse case (bsc#1262655).
  • CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
  • CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
  • CVE-2026-31592: KVM: SEV: Protect all of sev_mem_enc_register_region() with kvm->lock (bsc#1263123).
  • CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
  • CVE-2026-31677: crypto: af_alg - limit RX SG extraction by receive buffer budget (bsc#1263560).
  • CVE-2026-31680: net: ipv6: flowlabel: defer exclusive option free until RCU teardown (bsc#1263563).
  • CVE-2026-31773: Bluetooth: SMP: derive legacy responder STK authentication from MITM state (bsc#1264039).
  • CVE-2026-31781: drm/ioc32: stop speculation on the drm_compat_ioctl path (bsc#1264033).
  • CVE-2026-43035: net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak (bsc#1263996).
  • CVE-2026-43036: net: use skb_header_pointer() for TCPv4 GSO frag_off check (bsc#1263993).
  • CVE-2026-43043: crypto: af-alg - fix NULL pointer dereference in scatterwalk (bsc#1264088).
  • CVE-2026-43047: HID: multitouch: Check to ensure report responses match the request (bsc#1264073).
  • CVE-2026-43051: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (bsc#1264065).
  • CVE-2026-43080: l2tp: Drop large packets with UDP encap (bsc#1264236).
  • CVE-2026-43089: xfrm_user: fix info leak in build_mapping() (bsc#1264261).
  • CVE-2026-43093: xsk: tighten UMEM headroom validation to account for tailroom and min frame (bsc#1264254).
  • CVE-2026-43112: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (bsc#1264437).
  • CVE-2026-43117: btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() (bsc#1264414).
  • CVE-2026-43139: xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (bsc#1264294).
  • CVE-2026-43233: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (bsc#1264337).
  • CVE-2026-43279: ALSA: usb-audio: Add sanity check for OOB writes at silencing (bsc#1264618).
  • CVE-2026-43336: lib/crypto: chacha: Zeroize permuted_state before it leaves scope (bsc#1265113).
  • CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).
  • CVE-2026-43472: unshare: fix unshare_fs() handling (bsc#1264748).
  • CVE-2026-43492: lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() (bsc#1265629).
  • CVE-2026-45840: openvswitch: cap upcall PID array size and pre-size vport replies (bsc#1266397).
  • CVE-2026-45912: ext4: don't cache extent during splitting extent (bsc#1266899).
  • CVE-2026-45948: ext4: fix memory leak in ext4_ext_shift_extents() (bsc#1266929).
  • CVE-2026-45960: hfsplus: return error when node already exists in hfs_bnode_create (bsc#1266971).
  • CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).
  • CVE-2026-46065: fbdev: defio: Disconnect deferred I/O from the lifetime of struct (bsc#1267458).
  • CVE-2026-46069: wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() (bsc#1267437).
  • CVE-2026-46082: KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0 (bsc#1267473).
  • CVE-2026-46124: isofs: validate block number from NFS file handle in isofs_export_iget (bsc#1266847).
  • CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
  • CVE-2026-46253: pstore/ram: fix buffer overflow in persistent_ram_save_old() (bsc#1267635).
  • CVE-2026-46254: AppArmor: Allow apparmor to handle unaligned dfa tables (bsc#1267637).
  • CVE-2026-46266: inet: RAW…
Record
SUSE-SU-2026:2914-1
Updated
2026-11-02
OSVUSN-8492-1 No score

linux, linux-aws, linux-aws-fips, linux-gcp, linux-gcp-fips, linux-ibm, linux-nvidia, linux-nvidia-6.8, linux-oracle, linux-realtime, linux-realtime-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • ATM drivers;
  • RNBD block device driver;
  • Ublk userspace block driver;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Clocksource drivers;
  • CPU idle management framework;
  • Hardware crypto device drivers;
  • DMA engine subsystem;
  • EFI core;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Broadcom VK accelerator driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NTB driver;
  • NVME drivers;
  • PCI subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • RapidIO drivers;
  • RAS (Reliability, Availability, Serviceability) subsystem;
  • Remote Processor subsystem;
  • RPMSG subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • MediaTek SoC drivers;
  • Texas Instruments SoC drivers;
  • SPI subsystem;
  • Greybus lights staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • UFS subsystem;
  • ChipIdea USB driver;
  • DesignWare USB3 driver;
  • USB over IP driver;
  • vDPA drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • BTRFS file system;
  • File systems infrastructure;
  • Ceph distributed file system;
  • Ext4 file system;
  • F2FS file system;
  • FAT file system;
  • GFS2 file system;
  • HFS+ file system;
  • JFS file system;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • OCFS2 file system;
  • Proc file system;
  • Pstore file system;
  • Diskquota system;
  • SMB network file system;
  • XFS file system;
  • Audit subsystem;
  • Memory Management;
  • IPv6 networking;
  • Netfilter;
  • Tracing infrastructure;
  • Kernel kexec() syscall;
  • RCU subsystem;
  • Scheduler infrastructure;
  • Scatterlist API;
  • 9P file system network protocol;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • B.A.T.M.A.N. meshing protocol;
  • Bluetooth subsystem;
  • Ethernet bridge;
  • Ceph Core library;
  • Networking core;
  • IPv4 networking;
  • KCM (Kernel Connection Multiplexor) sockets driver;
  • Multipath TCP;
  • NFC subsystem;
  • RDS protocol;
  • RxRPC session sockets;
  • Network traffic control;
  • SMC sockets;
  • Sun RPC protocol;
  • X.25 network layer;
  • XFRM subsystem;
  • AppArmor security module;
  • Simplified Mandatory Access Control Kernel framework;
  • SOF drivers;
  • USB sound devices; (CVE-2025-40005, CVE-2025-71229, CVE-2025-71231, CVE-2025-71232, CVE-2025-71233, CVE-2025-71235, CVE-2025-71236, CVE-2025-71237, CVE-2025-71238, CVE-2025-71239, CVE-2025-71265, CVE-2025-71266, CVE-2025-71267, CVE-2025-71272, CVE-2025-71273, CVE-2025-71274, CVE-2025-71286, CVE-2025-71291, CVE-2025-71292, CVE-2025-71294, CVE-2025-71295, CVE-2025-71297, CVE-2025-71304, CVE-2025-71305, CVE-2026-23100, CVE-2026-23169, CVE-2026-23220, CVE-2026-23221, CVE-2026-23222, CVE-2026-23228, CVE-2026-23229, CVE-2026-23230, CVE-2026-23233, CVE-2026-23234, CVE-2026-23235, CVE-2026-23236, CVE-2026-23237, CVE-2026-23238, CVE-2026-23241, CVE-2026-23242, CVE-2026-23243, CVE-2026-23249, CVE-2026-23266, CVE-2026-23267, CVE-2026-23272, CVE-2026-23278, CVE-2026-23392, CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402, CVE-2026-31411, CVE-2026-31418, CVE-2026-31436, CVE-2026-31448, CVE-2026-31478, CVE-2026-31607,…
Record
USN-8492-1
Updated
2026-11-06
OSVUSN-8492-2 No score

linux-aws-6.8, linux-gcp-6.8, linux-gke, linux-gkeop, linux-ibm-6.8, linux-nvidia-lowlatency, linux-oracle-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • ATM drivers;
  • RNBD block device driver;
  • Ublk userspace block driver;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Clocksource drivers;
  • CPU idle management framework;
  • Hardware crypto device drivers;
  • DMA engine subsystem;
  • EFI core;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Broadcom VK accelerator driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NTB driver;
  • NVME drivers;
  • PCI subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • RapidIO drivers;
  • RAS (Reliability, Availability, Serviceability) subsystem;
  • Remote Processor subsystem;
  • RPMSG subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • MediaTek SoC drivers;
  • Texas Instruments SoC drivers;
  • SPI subsystem;
  • Greybus lights staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • UFS subsystem;
  • ChipIdea USB driver;
  • DesignWare USB3 driver;
  • USB over IP driver;
  • vDPA drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • BTRFS file system;
  • File systems infrastructure;
  • Ceph distributed file system;
  • Ext4 file system;
  • F2FS file system;
  • FAT file system;
  • GFS2 file system;
  • HFS+ file system;
  • JFS file system;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • OCFS2 file system;
  • Proc file system;
  • Pstore file system;
  • Diskquota system;
  • SMB network file system;
  • XFS file system;
  • Audit subsystem;
  • Memory Management;
  • IPv6 networking;
  • Netfilter;
  • Tracing infrastructure;
  • Kernel kexec() syscall;
  • RCU subsystem;
  • Scheduler infrastructure;
  • Scatterlist API;
  • 9P file system network protocol;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • B.A.T.M.A.N. meshing protocol;
  • Bluetooth subsystem;
  • Ethernet bridge;
  • Ceph Core library;
  • Networking core;
  • IPv4 networking;
  • KCM (Kernel Connection Multiplexor) sockets driver;
  • Multipath TCP;
  • NFC subsystem;
  • RDS protocol;
  • RxRPC session sockets;
  • Network traffic control;
  • SMC sockets;
  • Sun RPC protocol;
  • X.25 network layer;
  • XFRM subsystem;
  • AppArmor security module;
  • Simplified Mandatory Access Control Kernel framework;
  • SOF drivers;
  • USB sound devices; (CVE-2025-40005, CVE-2025-71229, CVE-2025-71231, CVE-2025-71232, CVE-2025-71233, CVE-2025-71235, CVE-2025-71236, CVE-2025-71237, CVE-2025-71238, CVE-2025-71239, CVE-2025-71265, CVE-2025-71266, CVE-2025-71267, CVE-2025-71272, CVE-2025-71273, CVE-2025-71274, CVE-2025-71286, CVE-2025-71291, CVE-2025-71292, CVE-2025-71294, CVE-2025-71295, CVE-2025-71297, CVE-2025-71304, CVE-2025-71305, CVE-2026-23100, CVE-2026-23169, CVE-2026-23220, CVE-2026-23221, CVE-2026-23222, CVE-2026-23228, CVE-2026-23229, CVE-2026-23230, CVE-2026-23233, CVE-2026-23234, CVE-2026-23235, CVE-2026-23236, CVE-2026-23237, CVE-2026-23238, CVE-2026-23241, CVE-2026-23242, CVE-2026-23243, CVE-2026-23249, CVE-2026-23266, CVE-2026-23267, CVE-2026-23272, CVE-2026-23278, CVE-2026-23392, CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402, CVE-2026-31411, CVE-2026-31418, CVE-2026-31436, CVE-2026-31448, CVE-2026-31478, CVE-2026-31607,…
Record
USN-8492-2
Updated
2026-11-06
OSVUSN-8492-3 No score

linux-raspi-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • ATM drivers;
  • RNBD block device driver;
  • Ublk userspace block driver;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Clocksource drivers;
  • CPU idle management framework;
  • Hardware crypto device drivers;
  • DMA engine subsystem;
  • EFI core;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Broadcom VK accelerator driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NTB driver;
  • NVME drivers;
  • PCI subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • RapidIO drivers;
  • RAS (Reliability, Availability, Serviceability) subsystem;
  • Remote Processor subsystem;
  • RPMSG subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • MediaTek SoC drivers;
  • Texas Instruments SoC drivers;
  • SPI subsystem;
  • Greybus lights staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • UFS subsystem;
  • ChipIdea USB driver;
  • DesignWare USB3 driver;
  • USB over IP driver;
  • vDPA drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • BTRFS file system;
  • File systems infrastructure;
  • Ceph distributed file system;
  • Ext4 file system;
  • F2FS file system;
  • FAT file system;
  • GFS2 file system;
  • HFS+ file system;
  • JFS file system;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • OCFS2 file system;
  • Proc file system;
  • Pstore file system;
  • Diskquota system;
  • SMB network file system;
  • XFS file system;
  • Audit subsystem;
  • Memory Management;
  • IPv6 networking;
  • Netfilter;
  • Tracing infrastructure;
  • Kernel kexec() syscall;
  • RCU subsystem;
  • Scheduler infrastructure;
  • Scatterlist API;
  • 9P file system network protocol;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • B.A.T.M.A.N. meshing protocol;
  • Bluetooth subsystem;
  • Ethernet bridge;
  • Ceph Core library;
  • Networking core;
  • IPv4 networking;
  • KCM (Kernel Connection Multiplexor) sockets driver;
  • Multipath TCP;
  • NFC subsystem;
  • RDS protocol;
  • RxRPC session sockets;
  • Network traffic control;
  • SMC sockets;
  • Sun RPC protocol;
  • X.25 network layer;
  • XFRM subsystem;
  • AppArmor security module;
  • Simplified Mandatory Access Control Kernel framework;
  • SOF drivers;
  • USB sound devices; (CVE-2025-40005, CVE-2025-71229, CVE-2025-71231, CVE-2025-71232, CVE-2025-71233, CVE-2025-71235, CVE-2025-71236, CVE-2025-71237, CVE-2025-71238, CVE-2025-71239, CVE-2025-71265, CVE-2025-71266, CVE-2025-71267, CVE-2025-71272, CVE-2025-71273, CVE-2025-71274, CVE-2025-71286, CVE-2025-71291, CVE-2025-71292, CVE-2025-71294, CVE-2025-71295, CVE-2025-71297, CVE-2025-71304, CVE-2025-71305, CVE-2026-23100, CVE-2026-23169, CVE-2026-23220, CVE-2026-23221, CVE-2026-23222, CVE-2026-23228, CVE-2026-23229, CVE-2026-23230, CVE-2026-23233, CVE-2026-23234, CVE-2026-23235, CVE-2026-23236, CVE-2026-23237, CVE-2026-23238, CVE-2026-23241, CVE-2026-23242, CVE-2026-23243, CVE-2026-23249, CVE-2026-23266, CVE-2026-23267, CVE-2026-23272, CVE-2026-23278, CVE-2026-23392, CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402, CVE-2026-31411, CVE-2026-31418, CVE-2026-31436, CVE-2026-31448, CVE-2026-31478, CVE-2026-31607,…
Record
USN-8492-3
Updated
2026-11-06
OSVUSN-8492-4 No score

linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • ATM drivers;
  • RNBD block device driver;
  • Ublk userspace block driver;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Clocksource drivers;
  • CPU idle management framework;
  • Hardware crypto device drivers;
  • DMA engine subsystem;
  • EFI core;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Broadcom VK accelerator driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NTB driver;
  • NVME drivers;
  • PCI subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • RapidIO drivers;
  • RAS (Reliability, Availability, Serviceability) subsystem;
  • Remote Processor subsystem;
  • RPMSG subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • MediaTek SoC drivers;
  • Texas Instruments SoC drivers;
  • SPI subsystem;
  • Greybus lights staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • UFS subsystem;
  • ChipIdea USB driver;
  • DesignWare USB3 driver;
  • USB over IP driver;
  • vDPA drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • BTRFS file system;
  • File systems infrastructure;
  • Ceph distributed file system;
  • Ext4 file system;
  • F2FS file system;
  • FAT file system;
  • GFS2 file system;
  • HFS+ file system;
  • JFS file system;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • OCFS2 file system;
  • Proc file system;
  • Pstore file system;
  • Diskquota system;
  • SMB network file system;
  • XFS file system;
  • Audit subsystem;
  • Memory Management;
  • IPv6 networking;
  • Netfilter;
  • Tracing infrastructure;
  • Kernel kexec() syscall;
  • RCU subsystem;
  • Scheduler infrastructure;
  • Scatterlist API;
  • 9P file system network protocol;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • B.A.T.M.A.N. meshing protocol;
  • Bluetooth subsystem;
  • Ethernet bridge;
  • Ceph Core library;
  • Networking core;
  • IPv4 networking;
  • KCM (Kernel Connection Multiplexor) sockets driver;
  • Multipath TCP;
  • NFC subsystem;
  • RDS protocol;
  • RxRPC session sockets;
  • Network traffic control;
  • SMC sockets;
  • Sun RPC protocol;
  • X.25 network layer;
  • XFRM subsystem;
  • AppArmor security module;
  • Simplified Mandatory Access Control Kernel framework;
  • SOF drivers;
  • USB sound devices; (CVE-2025-40005, CVE-2025-71229, CVE-2025-71231, CVE-2025-71232, CVE-2025-71233, CVE-2025-71235, CVE-2025-71236, CVE-2025-71237, CVE-2025-71238, CVE-2025-71239, CVE-2025-71265, CVE-2025-71266, CVE-2025-71267, CVE-2025-71272, CVE-2025-71273, CVE-2025-71274, CVE-2025-71286, CVE-2025-71291, CVE-2025-71292, CVE-2025-71294, CVE-2025-71295, CVE-2025-71297, CVE-2025-71304, CVE-2025-71305, CVE-2026-23100, CVE-2026-23169, CVE-2026-23220, CVE-2026-23221, CVE-2026-23222, CVE-2026-23228, CVE-2026-23229, CVE-2026-23230, CVE-2026-23233, CVE-2026-23234, CVE-2026-23235, CVE-2026-23236, CVE-2026-23237, CVE-2026-23238, CVE-2026-23241, CVE-2026-23242, CVE-2026-23243, CVE-2026-23249, CVE-2026-23266, CVE-2026-23267, CVE-2026-23272, CVE-2026-23278, CVE-2026-23392, CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402, CVE-2026-31411, CVE-2026-31418, CVE-2026-31436, CVE-2026-31448, CVE-2026-31478, CVE-2026-31607,…
Record
USN-8492-4
Updated
2026-11-06
OSVUSN-8492-5 No score

linux-azure-fips, linux-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • ATM drivers;
  • RNBD block device driver;
  • Ublk userspace block driver;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Clocksource drivers;
  • CPU idle management framework;
  • Hardware crypto device drivers;
  • DMA engine subsystem;
  • EFI core;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Broadcom VK accelerator driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NTB driver;
  • NVME drivers;
  • PCI subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • RapidIO drivers;
  • RAS (Reliability, Availability, Serviceability) subsystem;
  • Remote Processor subsystem;
  • RPMSG subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • MediaTek SoC drivers;
  • Texas Instruments SoC drivers;
  • SPI subsystem;
  • Greybus lights staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • UFS subsystem;
  • ChipIdea USB driver;
  • DesignWare USB3 driver;
  • USB over IP driver;
  • vDPA drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • BTRFS file system;
  • File systems infrastructure;
  • Ceph distributed file system;
  • Ext4 file system;
  • F2FS file system;
  • FAT file system;
  • GFS2 file system;
  • HFS+ file system;
  • JFS file system;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • OCFS2 file system;
  • Proc file system;
  • Pstore file system;
  • Diskquota system;
  • SMB network file system;
  • XFS file system;
  • Audit subsystem;
  • Memory Management;
  • IPv6 networking;
  • Netfilter;
  • Tracing infrastructure;
  • Kernel kexec() syscall;
  • RCU subsystem;
  • Scheduler infrastructure;
  • Scatterlist API;
  • 9P file system network protocol;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • B.A.T.M.A.N. meshing protocol;
  • Bluetooth subsystem;
  • Ethernet bridge;
  • Ceph Core library;
  • Networking core;
  • IPv4 networking;
  • KCM (Kernel Connection Multiplexor) sockets driver;
  • Multipath TCP;
  • NFC subsystem;
  • RDS protocol;
  • RxRPC session sockets;
  • Network traffic control;
  • SMC sockets;
  • Sun RPC protocol;
  • X.25 network layer;
  • XFRM subsystem;
  • AppArmor security module;
  • Simplified Mandatory Access Control Kernel framework;
  • SOF drivers;
  • USB sound devices; (CVE-2025-40005, CVE-2025-71229, CVE-2025-71231, CVE-2025-71232, CVE-2025-71233, CVE-2025-71235, CVE-2025-71236, CVE-2025-71237, CVE-2025-71238, CVE-2025-71239, CVE-2025-71265, CVE-2025-71266, CVE-2025-71267, CVE-2025-71272, CVE-2025-71273, CVE-2025-71274, CVE-2025-71286, CVE-2025-71291, CVE-2025-71292, CVE-2025-71294, CVE-2025-71295, CVE-2025-71297, CVE-2025-71304, CVE-2025-71305, CVE-2026-23100, CVE-2026-23169, CVE-2026-23220, CVE-2026-23221, CVE-2026-23222, CVE-2026-23228, CVE-2026-23229, CVE-2026-23230, CVE-2026-23233, CVE-2026-23234, CVE-2026-23235, CVE-2026-23236, CVE-2026-23237, CVE-2026-23238, CVE-2026-23241, CVE-2026-23242, CVE-2026-23243, CVE-2026-23249, CVE-2026-23266, CVE-2026-23267, CVE-2026-23272, CVE-2026-23278, CVE-2026-23392, CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402, CVE-2026-31411, CVE-2026-31418, CVE-2026-31436, CVE-2026-31448, CVE-2026-31478, CVE-2026-31607,…
Record
USN-8492-5
Updated
2026-11-06
OSVUSN-8497-1 No score

linux-lowlatency, linux-lowlatency-hwe-6.8 vulnerabilities

It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43284, CVE-2026-43500, CVE-2026-45998, CVE-2026-46000)

It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43503, CVE-2026-46300)

Qualys discovered that a race condition existed in the ptrace subsystem of the Linux kernel when privileged processes are exiting. An unprivileged local attacker could use this issue to expose sensitive information. (CVE-2026-46333)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contain a memory leak when handling AppArmor notifications. A local attacker could use this to cause resource exhaustion. (CVE-2026-47326)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contain a NULL pointer dereference when handling AppArmor notifications. A local attacker could use this to cause a kernel oops. (CVE-2026-47327)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained an invalid free when handling AppArmor notifications. A local attacker could use this to corrupt kernel memory. (CVE-2026-47328)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained insufficient validation of AppArmor notification responses. A local attacker could use this to allow crafted responses to be processed. (CVE-2026-47329)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 used an uninitialized variable when handling AppArmor notifications. A local attacker could use this to cause incorrect caching of data. (CVE-2026-47330)

Tristan Madani discovered that Ubuntu Linux kernel 6.8 contained a use- after-free (UAF) bug. A local attacker could use this to cause memory corruption and, theoretically, arbitrary code execution. (CVE-2026-47331)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained an out-of-bounds (OOB) read when handling AppArmor notifications. A local attacker could use this to cause information disclosure of kernel memory. (CVE-2026-47332)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained a out-of-bounds (OOB) read when handling AppArmor notifications. A local attacker could use this to cause kernel memory corruption and, theoretically, influence processing of AppArmor policies. (CVE-2026-47333)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained incorrect holding of locks when handling AppArmor notifications. A local attacker could use this to cause a kernel panic or deadlock. (CVE-2026-47334)

Tristan Madani discovered that Ubuntu Linux kernel 6.8 contained a NULL pointer dereference when handling AppArmor notifications. A local attacker could use this to cause a kernel panic. (CVE-2026-47335)

Tristan Madani discovered that Ubuntu Linux kernel 6.8 used an uninitialized variable when handling AppArmor AF_INET/AF_INET6 socket mediation. A local attacker could use this to influence processing of fine- grained network socket mediation. (CVE-2026-47336)

Tristan Madani and Trevor Lawrence have each independently discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained a NULL pointer dereference when handling AppArmor network socket mediation. A local attacker could use this to cause a kernel oops. (CVE-2026-47337)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture; …
Record
USN-8497-1
Updated
2026-11-07
OSVUSN-8498-1 No score

linux-nvidia-tegra vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • ATM drivers;
  • RNBD block device driver;
  • Ublk userspace block driver;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Clocksource drivers;
  • CPU idle management framework;
  • Hardware crypto device drivers;
  • DMA engine subsystem;
  • EFI core;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Broadcom VK accelerator driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NTB driver;
  • NVME drivers;
  • PCI subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • RapidIO drivers;
  • RAS (Reliability, Availability, Serviceability) subsystem;
  • Remote Processor subsystem;
  • RPMSG subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • MediaTek SoC drivers;
  • Texas Instruments SoC drivers;
  • SPI subsystem;
  • Greybus lights staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • UFS subsystem;
  • ChipIdea USB driver;
  • DesignWare USB3 driver;
  • USB over IP driver;
  • vDPA drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • BTRFS file system;
  • File systems infrastructure;
  • Ceph distributed file system;
  • Ext4 file system;
  • F2FS file system;
  • FAT file system;
  • GFS2 file system;
  • HFS+ file system;
  • JFS file system;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • OCFS2 file system;
  • Proc file system;
  • Pstore file system;
  • Diskquota system;
  • SMB network file system;
  • XFS file system;
  • Audit subsystem;
  • Memory Management;
  • IPv6 networking;
  • Netfilter;
  • Tracing infrastructure;
  • Kernel kexec() syscall;
  • RCU subsystem;
  • Scheduler infrastructure;
  • Scatterlist API;
  • 9P file system network protocol;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • B.A.T.M.A.N. meshing protocol;
  • Bluetooth subsystem;
  • Ethernet bridge;
  • Ceph Core library;
  • Networking core;
  • IPv4 networking;
  • KCM (Kernel Connection Multiplexor) sockets driver;
  • Multipath TCP;
  • NFC subsystem;
  • RDS protocol;
  • RxRPC session sockets;
  • Network traffic control;
  • SMC sockets;
  • Sun RPC protocol;
  • X.25 network layer;
  • XFRM subsystem;
  • AppArmor security module;
  • Simplified Mandatory Access Control Kernel framework;
  • SOF drivers;
  • USB sound devices; (CVE-2025-40005, CVE-2025-71229, CVE-2025-71231, CVE-2025-71232, CVE-2025-71235, CVE-2025-71236, CVE-2025-71237, CVE-2025-71238, CVE-2025-71239, CVE-2025-71265, CVE-2025-71266, CVE-2025-71267, CVE-2025-71272, CVE-2025-71273, CVE-2025-71274, CVE-2025-71286, CVE-2025-71291, CVE-2025-71292, CVE-2025-71294, CVE-2025-71295, CVE-2025-71297, CVE-2025-71304, CVE-2025-71305, CVE-2026-23100, CVE-2026-23169, CVE-2026-23220, CVE-2026-23221, CVE-2026-23222, CVE-2026-23228, CVE-2026-23229, CVE-2026-23230, CVE-2026-23233, CVE-2026-23234, CVE-2026-23235, CVE-2026-23236, CVE-2026-23237, CVE-2026-23238, CVE-2026-23241, CVE-2026-23242, CVE-2026-23243, CVE-2026-23249, CVE-2026-23266, CVE-2026-23267, CVE-2026-23272, CVE-2026-23278, CVE-2026-23392, CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402, CVE-2026-31411, CVE-2026-31418, CVE-2026-31436, CVE-2026-31448, CVE-2026-31478, CVE-2026-31607, CVE-2026-31637,…
Record
USN-8498-1
Updated
2026-11-06
OSVUSN-8499-1 No score

linux-xilinx vulnerabilities

It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-31431)

It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43284, CVE-2026-43500, CVE-2026-45998, CVE-2026-46000)

It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43503, CVE-2026-46300)

Qualys discovered that a race condition existed in the ptrace subsystem of the Linux kernel when privileged processes are exiting. An unprivileged local attacker could use this issue to expose sensitive information. (CVE-2026-46333)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contain a memory leak when handling AppArmor notifications. A local attacker could use this to cause resource exhaustion. (CVE-2026-47326)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contain a NULL pointer dereference when handling AppArmor notifications. A local attacker could use this to cause a kernel oops. (CVE-2026-47327)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained an invalid free when handling AppArmor notifications. A local attacker could use this to corrupt kernel memory. (CVE-2026-47328)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained insufficient validation of AppArmor notification responses. A local attacker could use this to allow crafted responses to be processed. (CVE-2026-47329)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 used an uninitialized variable when handling AppArmor notifications. A local attacker could use this to cause incorrect caching of data. (CVE-2026-47330)

Tristan Madani discovered that Ubuntu Linux kernel 6.8 contained a use- after-free (UAF) bug. A local attacker could use this to cause memory corruption and, theoretically, arbitrary code execution. (CVE-2026-47331)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained an out-of-bounds (OOB) read when handling AppArmor notifications. A local attacker could use this to cause information disclosure of kernel memory. (CVE-2026-47332)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained a out-of-bounds (OOB) read when handling AppArmor notifications. A local attacker could use this to cause kernel memory corruption and, theoretically, influence processing of AppArmor policies. (CVE-2026-47333)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained incorrect holding of locks when handling AppArmor notifications. A local attacker could use this to cause a kernel panic or deadlock. (CVE-2026-47334)

Tristan Madani discovered that Ubuntu Linux kernel 6.8 contained a NULL pointer dereference when handling AppArmor notifications. A local attacker could use this to cause a kernel panic. (CVE-2026-47335)

Tristan Madani discovered that Ubuntu Linux kernel 6.8 used an uninitialized variable when handling AppArmor AF_INET/AF_INET6 socket mediation. A local attacker could use this to influence processing of fine- grained network socket mediation. (CVE-2026-47336)

Tristan Madani and Trevor Lawrence have each independently discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained a NULL pointer dereference when handling AppArmor network socket mediation. A local attacker could use this to cause a…

Record
USN-8499-1
Updated
2026-11-07
OSVUSN-8575-1 No score

linux, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-realtime, linux-xilinx-zynqmp vulnerabilities

Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose sensitive information (kernel memory). (CVE-2023-45896)

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Power management core;
  • DRBD Distributed Replicated Block Device drivers;
  • RNBD block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clocksource drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • CPU idle management framework;
  • Hardware crypto device drivers;
  • DMA engine subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • EFI core;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MediaTek SMI driver;
  • NVIDIA Tegra memory controller driver;
  • Multifunction device drivers;
  • IBM Advanced System Management driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • MediaTek network drivers;
  • Near Field Communication (NFC) drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Broadcom BCM2835 power domain driver;
  • Power supply drivers;
  • RapidIO drivers;
  • Remote Processor subsystem;
  • RPMSG subsystem;
  • SCSI subsystem;
  • Freescale SoC drivers;
  • Texas Instruments SoC drivers;
  • SPI subsystem;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • SM750 framebuffer staging driver;
  • TCM subsystem;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • USB core drivers;
  • DesignWare USB2 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Mustek MDC800 USB digital camera driver;
  • USB YUREX driver;
  • Renesas USBHS Controller drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • FAT file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS+ file system;
  • JFS file system;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • Proc file system;
  • Pstore file system;
  • Diskquota system;
  • SMB network file system;
  • SquashFS file system;
  • UDF file system; -…
Record
USN-8575-1
Updated
2026-11-07
OSVUSN-8575-2 No score

linux-aws, linux-aws-5.15, linux-aws-fips, linux-fips, linux-ibm, linux-nvidia vulnerabilities

Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose sensitive information (kernel memory). (CVE-2023-45896)

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Power management core;
  • DRBD Distributed Replicated Block Device drivers;
  • RNBD block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clocksource drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • CPU idle management framework;
  • Hardware crypto device drivers;
  • DMA engine subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • EFI core;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MediaTek SMI driver;
  • NVIDIA Tegra memory controller driver;
  • Multifunction device drivers;
  • IBM Advanced System Management driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • MediaTek network drivers;
  • Near Field Communication (NFC) drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Broadcom BCM2835 power domain driver;
  • Power supply drivers;
  • RapidIO drivers;
  • Remote Processor subsystem;
  • RPMSG subsystem;
  • SCSI subsystem;
  • Freescale SoC drivers;
  • Texas Instruments SoC drivers;
  • SPI subsystem;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • SM750 framebuffer staging driver;
  • TCM subsystem;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • USB core drivers;
  • DesignWare USB2 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Mustek MDC800 USB digital camera driver;
  • USB YUREX driver;
  • Renesas USBHS Controller drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • FAT file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS+ file system;
  • JFS file system;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • Proc file system;
  • Pstore file system;
  • Diskquota system;
  • SMB network file system;
  • SquashFS file system;
  • UDF file system; -…
Record
USN-8575-2
Updated
2026-11-07
OSVUSN-8575-3 No score

linux-azure, linux-oracle vulnerabilities

Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose sensitive information (kernel memory). (CVE-2023-45896)

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Power management core;
  • DRBD Distributed Replicated Block Device drivers;
  • RNBD block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clocksource drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • CPU idle management framework;
  • Hardware crypto device drivers;
  • DMA engine subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • EFI core;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MediaTek SMI driver;
  • NVIDIA Tegra memory controller driver;
  • Multifunction device drivers;
  • IBM Advanced System Management driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • MediaTek network drivers;
  • Near Field Communication (NFC) drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Broadcom BCM2835 power domain driver;
  • Power supply drivers;
  • RapidIO drivers;
  • Remote Processor subsystem;
  • RPMSG subsystem;
  • SCSI subsystem;
  • Freescale SoC drivers;
  • Texas Instruments SoC drivers;
  • SPI subsystem;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • SM750 framebuffer staging driver;
  • TCM subsystem;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • USB core drivers;
  • DesignWare USB2 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Mustek MDC800 USB digital camera driver;
  • USB YUREX driver;
  • Renesas USBHS Controller drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • FAT file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS+ file system;
  • JFS file system;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • Proc file system;
  • Pstore file system;
  • Diskquota system;
  • SMB network file system;
  • SquashFS file system;
  • UDF file system; -…
Record
USN-8575-3
Updated
2026-11-07
OSVUSN-8576-1 No score

linux-nvidia-tegra-5.15 vulnerabilities

Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose sensitive information (kernel memory). (CVE-2023-45896)

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Power management core;
  • DRBD Distributed Replicated Block Device drivers;
  • RNBD block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clocksource drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • CPU idle management framework;
  • Hardware crypto device drivers;
  • DMA engine subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • EFI core;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MediaTek SMI driver;
  • NVIDIA Tegra memory controller driver;
  • Multifunction device drivers;
  • IBM Advanced System Management driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • MediaTek network drivers;
  • Near Field Communication (NFC) drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Broadcom BCM2835 power domain driver;
  • Power supply drivers;
  • RapidIO drivers;
  • Remote Processor subsystem;
  • RPMSG subsystem;
  • SCSI subsystem;
  • Freescale SoC drivers;
  • Texas Instruments SoC drivers;
  • SPI subsystem;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • SM750 framebuffer staging driver;
  • TCM subsystem;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • USB core drivers;
  • DesignWare USB2 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Mustek MDC800 USB digital camera driver;
  • USB YUREX driver;
  • Renesas USBHS Controller drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • FAT file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS+ file system;
  • JFS file system;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • Proc file system;
  • Pstore file system;
  • Diskquota system;
  • SMB network file system;
  • SquashFS file system;
  • UDF file system; -…
Record
USN-8576-1
Updated
2026-11-07
OSVUSN-8576-2 No score

linux-nvidia-tegra, linux-nvidia-tegra-igx vulnerabilities

Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose sensitive information (kernel memory). (CVE-2023-45896)

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Power management core;
  • DRBD Distributed Replicated Block Device drivers;
  • RNBD block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clocksource drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • CPU idle management framework;
  • Hardware crypto device drivers;
  • DMA engine subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • EFI core;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MediaTek SMI driver;
  • NVIDIA Tegra memory controller driver;
  • Multifunction device drivers;
  • IBM Advanced System Management driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • MediaTek network drivers;
  • Near Field Communication (NFC) drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Broadcom BCM2835 power domain driver;
  • Power supply drivers;
  • RapidIO drivers;
  • Remote Processor subsystem;
  • RPMSG subsystem;
  • SCSI subsystem;
  • Freescale SoC drivers;
  • Texas Instruments SoC drivers;
  • SPI subsystem;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • SM750 framebuffer staging driver;
  • TCM subsystem;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • USB core drivers;
  • DesignWare USB2 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Mustek MDC800 USB digital camera driver;
  • USB YUREX driver;
  • Renesas USBHS Controller drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • FAT file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS+ file system;
  • JFS file system;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • Proc file system;
  • Pstore file system;
  • Diskquota system;
  • SMB network file system;
  • SquashFS file system;
  • UDF file system; -…
Record
USN-8576-2
Updated
2026-11-07

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-64k
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-64k-core
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-64k-debug
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-64k-debug-core
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-64k-debug-devel
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-64k-debug-devel-matched
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-64k-debug-modules
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-64k-debug-modules-core
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-64k-debug-modules-extra
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-64k-devel
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-64k-devel-matched
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-64k-modules
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-64k-modules-core
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-64k-modules-extra
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-abi-stablelists
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-core
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-cross-headers
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-debug
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-debug-core
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-debug-devel
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-debug-devel-matched
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-debug-modules
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-debug-modules-core
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-debug-modules-extra
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-debug-uki-virt
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-devel
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-devel-matched
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-doc
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-headers
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-modules
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-modules-core
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-modules-extra
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt-64k
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt-64k-core
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt-64k-debug
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt-64k-debug-core
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt-64k-debug-devel
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt-64k-debug-modules
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt-64k-debug-modules-core
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt-64k-debug-modules-extra
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt-64k-devel
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt-64k-modules
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt-64k-modules-core
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt-64k-modules-extra
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt-core
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt-debug
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt-debug-core
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt-debug-devel
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt-debug-modules
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt-debug-modules-core
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt-debug-modules-extra
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt-devel
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
linux-lts
Alpaquita:23
 6.1.164-r0 up to 6.1.167-r0
6.1.167-r0
linux-lts
Alpaquita:25
 6.12.74-r0 up to 6.12.80-r0
6.12.80-r0
linux-lts
Alpaquita:stream
 6.12.92-r1 up to 6.18.35-r1
6.18.35-r1
bpftool
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 7.0.0-284.1101.el9_2.tuxcare.11.els10
7.0.0-284.1101.el9_2.tuxcare.11.els10
kernel
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-64k
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-64k-core
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-64k-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-64k-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-64k-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-64k-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-64k-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-64k-debug-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-64k-debug-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-64k-debug-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-64k-debug-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-64k-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-64k-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-64k-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-64k-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-64k-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-64k-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-64k-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-abi-stablelists
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-core
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-cross-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-debug-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-debug-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-debug-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-debug-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-debug-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-doc
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-ipaclones-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-selftests-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-tools
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-tools-libs
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-tools-libs-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
kernel-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
libbpf
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.11.els10
2:1.0.0-2.el9_2.tuxcare.11.els10
libbpf-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.11.els10
2:1.0.0-2.el9_2.tuxcare.11.els10
libbpf-static
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.11.els10
2:1.0.0-2.el9_2.tuxcare.11.els10
perf
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
python3-perf
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
rtla
TuxCare:AlmaLinux:9.2
From an advisory covering 119 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els10
5.14.0-284.1101.el9_2.tuxcare.11.els10
Kernel
Linux
 4.15.0 up to 5.10.252, 5.11.0 up to 5.15.202, 5.16.0 up to 6.1.165, 6.2.0 up to 6.6.128, 6.7.0 up to 6.12.75, 6.13.0 up to 6.18.16, 6.19.0 up to 6.19.6
5.10.2525.15.2026.1.1656.6.1286.12.756.18.166.19.6
linux
Debian:12
 before 6.1.170-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 43 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1
6.1.170-1
linux
Debian:13
 before 6.12.85-1, plus listed versions
6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-1
Show 12 moreShow less
6.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-1~bpo12+1
6.12.85-1
linux
Debian:14
 before 6.19.6-1, plus listed versions
6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1
Show 45 moreShow less
6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1
6.19.6-1
kernel
openEuler:20.03-LTS-SP4
From an advisory covering 34 CVEs
 before 4.19.90-2606.1.0.0375.oe2003sp4
4.19.90-2606.1.0.0375.oe2003sp4
kernel
openEuler:22.03-LTS-SP4
From an advisory covering 73 CVEs
 before 5.10.0-318.0.0.221.oe2203sp4
5.10.0-318.0.0.221.oe2203sp4
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-64k-debug-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-64k-debug-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-64k-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-64k-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-64k-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-debug-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-debug-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-doc
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-rt-64k-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-rt-64k-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-rt-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-tools-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-zfcpdump-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-zfcpdump-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
libperf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
perf
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
perf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
python3-perf
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
python3-perf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
rtla
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
rv
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-64k
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-64k-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-64k-debug
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-64k-debug-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-64k-debug-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-64k-debug-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-64k-debug-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-64k-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-64k-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-64k-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-64k-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-abi-stablelists
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-debug
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-debug-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-debug-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-debug-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-debug-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-debug-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-debug-uki-virt
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel
Rocky Linux:9
From an advisory covering 26 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel
Rocky Linux:8
From an advisory covering 22 CVEs
 before 0:4.18.0-553.164.1.el8_10
0:4.18.0-553.164.1.el8_10
kernel-rt
Rocky Linux:8
From an advisory covering 23 CVEs
 before 0:4.18.0-553.164.1.rt7.505.el8_10
0:4.18.0-553.164.1.rt7.505.el8_10
linux
Root:Debian:11
 before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
rootio-linux
Root:Debian:11
 before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
rootio-linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
rootio-linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
kernel-default
SUSE:Linux Micro 6.0
From an advisory covering 89 CVEs
 before 6.4.0-49.1
6.4.0-49.1
kernel-kvmsmall
SUSE:Linux Micro 6.0
From an advisory covering 89 CVEs
 before 6.4.0-49.1
6.4.0-49.1
kernel-source
SUSE:Linux Micro 6.0
From an advisory covering 89 CVEs
 before 6.4.0-49.1
6.4.0-49.1
kernel-rt
SUSE:Linux Micro 6.0
From an advisory covering 89 CVEs
 before 6.4.0-49.1
6.4.0-49.1
kernel-source-rt
SUSE:Linux Micro 6.0
From an advisory covering 89 CVEs
 before 6.4.0-49.1
6.4.0-49.1
kernel-default
SUSE:Linux Micro 6.1
From an advisory covering 89 CVEs
 before 6.4.0-49.1
6.4.0-49.1
kernel-kvmsmall
SUSE:Linux Micro 6.1
From an advisory covering 89 CVEs
 before 6.4.0-49.1
6.4.0-49.1
kernel-source
SUSE:Linux Micro 6.1
From an advisory covering 89 CVEs
 before 6.4.0-49.1
6.4.0-49.1
kernel-rt
SUSE:Linux Micro 6.1
From an advisory covering 89 CVEs
 before 6.4.0-49.1
6.4.0-49.1
kernel-source-rt
SUSE:Linux Micro 6.1
From an advisory covering 89 CVEs
 before 6.4.0-49.1
6.4.0-49.1
kernel-obs-build
SUSE:Linux Micro Extras 6.2
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-syms
SUSE:Linux Micro Extras 6.2
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-64kb
SUSE:Linux Micro 6.2
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-default
SUSE:Linux Micro 6.2
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-default-base
SUSE:Linux Micro 6.2
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1.160000.2.17
6.12.0-160000.36.1.160000.2.17
kernel-rt
SUSE:Linux Micro 6.2
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-source
SUSE:Linux Micro 6.2
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-64kb
SUSE:Linux Enterprise Server 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-azure
SUSE:Linux Enterprise Server 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-default
SUSE:Linux Enterprise Server 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-default-base
SUSE:Linux Enterprise Server 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1.160000.2.17
6.12.0-160000.36.1.160000.2.17
kernel-docs
SUSE:Linux Enterprise Server 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-kvmsmall
SUSE:Linux Enterprise Server 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-obs-qa
SUSE:Linux Enterprise Server 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-source
SUSE:Linux Enterprise Server 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-syms
SUSE:Linux Enterprise Server 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-64kb
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-azure
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-default
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1.160000.2.17
6.12.0-160000.36.1.160000.2.17
kernel-docs
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-kvmsmall
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-obs-qa
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-source
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-syms
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-zfcpdump
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-livepatch-SLE15-SP7-RT_Update_17
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 168 CVEs
 before 1-150700.1.3.1
1-150700.1.3.1
kernel-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 168 CVEs
 before 6.4.0-150700.7.62.1
6.4.0-150700.7.62.1
kernel-source-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 168 CVEs
 before 6.4.0-150700.7.62.1
6.4.0-150700.7.62.1
kernel-syms-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 168 CVEs
 before 6.4.0-150700.7.62.1
6.4.0-150700.7.62.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 105 CVEs
 before 6.4.0-150700.53.66.1
6.4.0-150700.53.66.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 105 CVEs
 before 6.4.0-150700.53.66.1
6.4.0-150700.53.66.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 105 CVEs
 before 6.4.0-150700.53.66.1.150700.17.39.1
6.4.0-150700.53.66.1.150700.17.39.1
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 105 CVEs
 before 6.4.0-150700.53.66.1
6.4.0-150700.53.66.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 105 CVEs
 before 6.4.0-150700.53.66.1
6.4.0-150700.53.66.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 105 CVEs
 before 6.4.0-150700.53.66.2
6.4.0-150700.53.66.2
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 105 CVEs
 before 6.4.0-150700.53.66.1
6.4.0-150700.53.66.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 105 CVEs
 before 6.4.0-150700.53.66.1
6.4.0-150700.53.66.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 105 CVEs
 before 6.4.0-150700.53.66.1
6.4.0-150700.53.66.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP7
From an advisory covering 105 CVEs
 before 6.4.0-150700.53.66.1
6.4.0-150700.53.66.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 105 CVEs
 before 6.4.0-150700.53.66.1
6.4.0-150700.53.66.1
kernel-livepatch-SLE15-SP7_Update_18
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 105 CVEs
 before 1-150700.15.3.1
1-150700.15.3.1
linux-azure
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2
Show 45 moreShow less
4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1
 None known
linux-aws-hwe
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1
Show 45 moreShow less
4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1
 None known
linux-azure
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 45 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71
 None known
linux-gcp
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
Show 45 moreShow less
4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1
 None known
linux-hwe
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 45 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1
 None known
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-oracle
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1
Show 45 moreShow less
4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1
 None known
linux
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 45 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107
 None known
linux-aws
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 45 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-aws-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-4.15
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102
Show 45 moreShow less
4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1
Show 45 moreShow less
5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-4.15
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92
Show 45 moreShow less
4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gcp-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 45 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-ibm-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1
Show 45 moreShow less
5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1
 None known
linux-kvm
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8
Show 45 moreShow less
4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13
Show 45 moreShow less
4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-oracle-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1
 None known
linux-raspi-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1
Show 45 moreShow less
5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1
 None known
linux-aws-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24
Show 45 moreShow less
4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93
 None known
linux-azure-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10
Show 45 moreShow less
4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80
 None known
linux-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42
Show 45 moreShow less
4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21
Show 45 moreShow less
4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.794.15.0-2075.804.15.0-2076.814.15.0-2077.83
 None known
linux-aws-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.4
 None known
linux-azure-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.2
 None known
linux-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1011.12
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.1
 None known
linux
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 45 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110
 None known
linux-aws
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5
Show 45 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1112.119~20.04.1, plus listed versions
5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1
Show 45 moreShow less
5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1
5.15.0-1112.119~20.04.1
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8
Show 45 moreShow less
5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
linux-azure-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
 None known
linux-azure-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1117.126~20.04.1, plus listed versions
5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1
Show 45 moreShow less
5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1
5.15.0-1117.126~20.04.1
dtb-aarch64
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-64kb
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-azure
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-default
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-default-base
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1.160000.2.17
6.12.0-160000.36.1.160000.2.17
kernel-docs
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-kvmsmall
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-obs-build
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-obs-qa
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-rt
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-source
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-syms
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-zfcpdump
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1

History

History
RecordedChangedSources
affectedOSV
affectedOSV
affectedOSV
affectedOSV
affectedOSV
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-43233 is a high vulnerability (CVSS 8.2) in Linux, published May 6, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.46%, the 40th percentile. Fixed in linux-lts 6.1.167-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 688 package rows, 1,892 versions, 2,801 references and the rest of 31 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 12 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open