CVE-2026-43248

vhost: move vdpa group bound check to vhost_vdpa

7.8 HighFix available

What does this mean?

: 7.8v3.1, from CVE List
: 0.16%5th percentile
Fixed in: 6.1.191-r0linux-lts
Published: May 6, 2026
Modified: November 11, 2026
Weakness: CWE-787
Also known as: ALSA-2026:67470ALSA-2026:67471AZL-85782BELL-CVE-2026-43248DEBIAN-CVE-2026-43248EUVD-2026-27809GHSA-xpcf-mwvf-62v9OESA-2026-2675
Show 31 moreShow less
OESA-2026-2676RHSA-2026:67470RHSA-2026:67471RLSA-2026:67470RLSA-2026:67471ROOT-OS-DEBIAN-12-CVE-2026-43248ROOT-OS-UBUNTU-2404-CVE-2026-43248SUSE-SU-2026:22742-1SUSE-SU-2026:22769-1SUSE-SU-2026:22809-1SUSE-SU-2026:22810-1SUSE-SU-2026:22812-1SUSE-SU-2026:22835-1SUSE-SU-2026:22903-1SUSE-SU-2026:22904-1SUSE-SU-2026:3130-1SUSE-SU-2026:3166-1UBUNTU-CVE-2026-43248USN-8492-1USN-8492-2USN-8492-3USN-8492-4USN-8492-5USN-8497-1USN-8498-1USN-8499-1USN-8606-1USN-8607-1USN-8609-1USN-8619-1openSUSE-SU-2026:21388-1

In the Linux kernel, the following vulnerability has been resolved:

vhost: move vdpa group bound check to vhost_vdpa

Remove duplication by consolidating these here. This reduces the posibility of a parent driver missing them.

While we're at it, fix a bug in vdpa_sim where a valid ASID can be assigned to a group equal to ngroups, causing an out of bound write.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.16%Up 0.1 points since May 7, 2026

What each source reports

CVE List Score used 7.8

vhost: move vdpa group bound check to vhost_vdpa

In the Linux kernel, the following vulnerability has been resolved:

vhost: move vdpa group bound check to vhost_vdpa

Remove duplication by consolidating these here. This reduces the posibility of a parent driver missing them.

While we're at it, fix a bug in vdpa_sim where a valid ASID can be assigned to a group equal to ngroups, causing an out of bound write.

Record: CVE-2026-43248
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-787
Updated: 2026-11-02

EUVDEUVD-2026-27809 7.8

In the Linux kernel, the following vulnerability has been resolved:

vhost: move vdpa group bound check to vhost_vdpa

Remove duplication by consolidating these here. This reduces the posibility of a parent driver missing them.

While we're at it, fix a bug in vdpa_sim where a valid ASID can be assigned to a group equal to ngroups, causing an out of bound write.

Record: EUVD-2026-27809
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-xpcf-mwvf-62v9 7.8

In the Linux kernel, the following vulnerability has been resolved: vhost: move vdpa group bound...

In the Linux kernel, the following vulnerability has been resolved:

vhost: move vdpa group bound check to vhost_vdpa

Remove duplication by consolidating these here. This reduces the posibility of a parent driver missing them.

While we're at it, fix a bug in vdpa_sim where a valid ASID can be assigned to a group equal to ngroups, causing an out of bound write.

Record: GHSA-xpcf-mwvf-62v9
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-787
Updated: 2026-11-02

NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

vhost: move vdpa group bound check to vhost_vdpa

Remove duplication by consolidating these here. This reduces the posibility of a parent driver missing them.

While we're at it, fix a bug in vdpa_sim where a valid ASID can be assigned to a group equal to ngroups, causing an out of bound write.

Record: CVE-2026-43248
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-787
Updated: 2026-11-02

OSVBELL-CVE-2026-43248 7.8

Record: BELL-CVE-2026-43248
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-04

OSV 7.8

vhost: move vdpa group bound check to vhost_vdpa

In the Linux kernel, the following vulnerability has been resolved:

vhost: move vdpa group bound check to vhost_vdpa

Remove duplication by consolidating these here. This reduces the posibility of a parent driver missing them.

While we're at it, fix a bug in vdpa_sim where a valid ASID can be assigned to a group equal to ngroups, causing an out of bound write.

Record: CVE-2026-43248
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 36 moreShow less

OSVDEBIAN-CVE-2026-43248 7.8

In the Linux kernel, the following vulnerability has been resolved: vhost: move vdpa group bound check to vhost_vdpa Remove duplication by consolidating these here. This reduces the posibility of a parent driver missing them. While we're at it, fix a bug in vdpa_sim where a valid ASID can be assigned to a group equal to ngroups, causing an out of bound write.

Record: DEBIAN-CVE-2026-43248
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2026-2675 9.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

drm/i915/gt: Fix timeline left held on VMA alloc error

The following error has been reported sporadically by CI when a test unbinds the i915 driver on a ring submission platform:

<4> [239.330153] ------------[ cut here ]------------ <4> [239.330166] i915 0000:00:02.0: [drm] drm_WARN_ON(dev_priv->mm.shrink_count) <4> [239.330196] WARNING: CPU: 1 PID: 18570 at drivers/gpu/drm/i915/i915_gem.c:1309 i915_gem_cleanup_early+0x13e/0x150 [i915] ... <4> [239.330640] RIP: 0010:i915_gem_cleanup_early+0x13e/0x150 [i915] ... <4> [239.330942] Call Trace: <4> [239.330944] <TASK> <4> [239.330949] i915_driver_late_release+0x2b/0xa0 [i915] <4> [239.331202] i915_driver_release+0x86/0xa0 [i915] <4> [239.331482] devm_drm_dev_init_release+0x61/0x90 <4> [239.331494] devm_action_release+0x15/0x30 <4> [239.331504] release_nodes+0x3d/0x120 <4> [239.331517] devres_release_all+0x96/0xd0 <4> [239.331533] device_unbind_cleanup+0x12/0x80 <4> [239.331543] device_release_driver_internal+0x23a/0x280 <4> [239.331550] ? bus_find_device+0xa5/0xe0 <4> [239.331563] device_driver_detach+0x14/0x20 ... <4> [357.719679] ---[ end trace 0000000000000000 ]---

If the test also unloads the i915 module then that's followed with:

<3> [357.787478] ============================================================================= <3> [357.788006] BUG i915_vma (Tainted: G U W N ): Objects remaining on __kmem_cache_shutdown() <3> [357.788031] ----------------------------------------------------------------------------- <3> [357.788204] Object 0xffff888109e7f480 @offset=29824 <3> [357.788670] Allocated in i915_vma_instance+0xee/0xc10 [i915] age=292729 cpu=4 pid=2244 <4> [357.788994] i915_vma_instance+0xee/0xc10 [i915] <4> [357.789290] init_status_page+0x7b/0x420 [i915] <4> [357.789532] intel_engines_init+0x1d8/0x980 [i915] <4> [357.789772] intel_gt_init+0x175/0x450 [i915] <4> [357.790014] i915_gem_init+0x113/0x340 [i915] <4> [357.790281] i915_driver_probe+0x847/0xed0 [i915] <4> [357.790504] i915_pci_probe+0xe6/0x220 [i915] ...

Closer analysis of CI results history has revealed a dependency of the error on a few IGT tests, namely:

igt@api_intel_allocator@fork-simple-stress-signal,
igt@api_intel_allocator@two-level-inception-interruptible,
igt@gem_linear_blits@interruptible,
igt@prime_mmap_coherency@ioctl-errors, which invisibly trigger the issue, then exhibited with first driver unbind attempt.

All of the above tests perform actions which are actively interrupted with signals. Further debugging has allowed to narrow that scope down to DRM_IOCTL_I915_GEM_EXECBUFFER2, and ring_context_alloc(), specific to ring submission, in particular.

If successful then that function, or its execlists or GuC submission equivalent, is supposed to be called only once per GEM context engine, followed by raise of a flag that prevents the function from being called again. The function is expected to unwind its internal errors itself, so it may be safely called once more after it returns an error.

In case of ring submission, the function first gets a reference to the engine's legacy timeline and then allocates a VMA. If the VMA allocation fails, e.g. when i915_vma_instance() called from inside is interrupted with a signal, then ring_context_alloc() fails, leaving the timeline held referenced. On next I915_GEM_EXECBUFFER2 IOCTL, another reference to the timeline is got, and only that last one is put on successful completion. As a consequence, the legacy timeline, with its underlying engine status page's VMA object, is still held and not released on driver unbind.

Get the legacy timeline only after successful allocation of the…

Record: OESA-2026-2675
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2026-2676 9.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

parisc: Drop WARN_ON_ONCE() from flush_cache_vmap

I have observed warning to occassionally trigger.(CVE-2025-39781)

In the Linux kernel, the following vulnerability has been resolved:

MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits

Since commit e424054000878 ("MIPS: Tracing: Reduce the overhead of dynamic Function Tracer"), the macro UASM_i_LA_mostly has been used, and this macro can generate more than 2 instructions. At the same time, the code in ftrace assumes that no more than 2 instructions can be generated, which is why it stores them in an int[2] array. However, as previously noted, the macro UASM_i_LA_mostly (and now UASM_i_LA) causes a buffer overflow when _mcount is beyond 32 bits. This leads to corruption of the variables located in the __read_mostly section.

This corruption was observed because the variable __cpu_primary_thread_mask was corrupted, causing a hang very early during boot.

This fix prevents the corruption by avoiding the generation of instructions if they could exceed 2 instructions in length. Fortunately, insn_la_mcount is only used if the instrumented code is located outside the kernel code section, so dynamic ftrace can still be used, albeit in a more limited scope. This is still preferable to corrupting memory and/or crashing the kernel.(CVE-2025-71109)

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/pm: Disable MMIO access during SMU Mode 1 reset

During Mode 1 reset, the ASIC undergoes a reset cycle and becomes temporarily inaccessible via PCIe. Any attempt to access MMIO registers during this window (e.g., from interrupt handlers or other driver threads) can result in uncompleted PCIe transactions, leading to NMI panics or system hangs.

To prevent this, set the no_hw_access flag to true immediately after triggering the reset. This signals other driver components to skip register accesses while the device is offline.

A memory barrier smp_mb() is added to ensure the flag update is globally visible to all cores before the driver enters the sleep/wait state.

(cherry picked from commit 7edb503fe4b6d67f47d8bb0dfafb8e699bb0f8a4)(CVE-2026-23213)

In the Linux kernel, the following vulnerability has been resolved:

btrfs: reject new transactions if the fs is fully read-only

[BUG] There is a bug report where a heavily fuzzed fs is mounted with all rescue mount options, which leads to the following warnings during unmount:

BTRFS: Transaction aborted (error -22) Modules linked in: CPU: 0 UID: 0 PID: 9758 Comm: repro.out Not tainted 6.19.0-rc5-00002-gb71e635feefc #7 PREEMPT(full) Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014 RIP: 0010:find_free_extent_update_loop fs/btrfs/extent-tree.c:4208 [inline] RIP: 0010:find_free_extent+0x52f0/0x5d20 fs/btrfs/extent-tree.c:4611 Call Trace: <TASK> btrfs_reserve_extent+0x2cd/0x790 fs/btrfs/extent-tree.c:4705 btrfs_alloc_tree_block+0x1e1/0x10e0 fs/btrfs/extent-tree.c:5157 btrfs_force_cow_block+0x578/0x2410 fs/btrfs/ctree.c:517 btrfs_cow_block+0x3c4/0xa80 fs/btrfs/ctree.c:708 btrfs_search_slot+0xcad/0x2b50 fs/btrfs/ctree.c:2130 btrfs_truncate_inode_items+0x45d/0x2350 fs/btrfs/inode-item.c:499 btrfs_evict_inode+0x923/0xe70 fs/btrfs/inode.c:5628 evict+0x5f4/0xae0 fs/inode.c:837 __dentry_kill+0x209/0x660 fs/dcache.c:670 finish_dput+0xc9/0x480 fs/dcache.c:879 shrink_dcache_for_umount+0xa0/0x170 fs/dcache.c:1661 generic_shutdown_super+0x67/0x2c0 fs/super.c:621 kill_anon_super+0x3b/0x70 fs/super.c:1289 btrfs_kill_super+0x41/0x50 fs/btrfs/super.c:2127 deactivate_locked_super+0xbc/0x130 fs/super.c:474 cleanup_mnt+0x425/0x4c0 fs/namespace.c:1318 task_work_run+0x1d4/0x260 kernel/task_work.c:233 exit_task_work include/linux/task_work.h:40 [inline] …

Record: OESA-2026-2676
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:67470 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record: RHSA-2026:67470
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:67471 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record: RHSA-2026:67471
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:67470 7.8

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: vhost: move vdpa group bound check to vhost_vdpa (CVE-2026-43248)
kernel: security/keys: fix missed RCU read section on lookup (CVE-2026-64015)
kernel: octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (CVE-2026-63923)
kernel: Linux kernel SLIP: Out-of-bounds write due to race condition during MTU change (CVE-2026-68143)
kernel: net: qrtr: restrict socket creation to the initial network namespace (CVE-2026-68294)
kernel: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (CVE-2026-72045)
kernel: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CVE-2026-74556)

Bug Fix(es) and Enhancement(s):

gfs2: bufdata leaks [rhel-9.8.z] (JIRA:Rocky Linux-178223)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:67470
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:67471 8.8

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock() (CVE-2025-40149)
kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset (CVE-2025-68745)
kernel: drm/xe: Open-code GGTT MMIO access protection (CVE-2026-23466)
kernel: drm/xe: always keep track of remap prev/next (CVE-2026-31479)
kernel: drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CVE-2026-31566)
kernel: xfrm: hold dev ref until after transport_finish NF_HOOK (CVE-2026-31663)
kernel: drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CVE-2026-31656)
kernel: smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (CVE-2026-31539)
kernel: vhost: move vdpa group bound check to vhost_vdpa (CVE-2026-43248)
kernel: drm/i915: Fix potential overflow of shmem scatterlist length (CVE-2026-43368)
kernel: drm/amdgpu: Fix use-after-free race in VM acquire (CVE-2026-43370)
kernel: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CVE-2026-46149)
kernel: sctp: purge outqueue on stale COOKIE-ECHO handling (CVE-2026-52924)
kernel: netfilter: require Ethernet MAC header before using eth_hdr() (CVE-2026-53131)
kernel: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (CVE-2026-53246)
kernel: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (CVE-2026-53239)
kernel: af_unix: Set gc_in_progress to true in unix_gc() (CVE-2026-53361)
kernel: scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CVE-2026-63889)
kernel: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (CVE-2026-63921)
kernel: xfrm: input: hold netns during deferred transport reinjection (CVE-2026-63919)
kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink() (CVE-2026-63917)
kernel: lsm: hold cred_guard_mutex for lsm_set_self_attr() (CVE-2026-64111)
kernel: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (CVE-2026-68264)
kernel: xfrm: fix stale skb->prev after async crypto steals a GSO segment (CVE-2026-68426)
kernel: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CVE-2026-74556)

Bug Fix(es) and Enhancement(s):

[rhel-10.2.z]- Backport MSHV patches for hypervisor OOM handling (JIRA:Rocky Linux-245035)
RHIVOS - [backport] S32G Driver Enablement - ADC (JIRA:Rocky Linux-255233)
[Rocky Linux10.2z] watchdog: System can panic during reboot when pretimeout is disabled (0) (JIRA:Rocky Linux-255348)
[usb/xhci] kdump on Arrow Lake systems hangs system with dracut-initqueue Timed out errors [Rocky Linux-10.2.z] (JIRA:Rocky Linux-256731)
RHIVOS - [backport] S32G Driver Update - ADC, I2C, and eDMA (JIRA:Rocky Linux-256890)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:67471
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVROOT-OS-DEBIAN-12-CVE-2026-43248 7.3

CVE-2026-43248 in linux - Patched by Root

Root has patched CVE-2026-43248 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record: ROOT-OS-DEBIAN-12-CVE-2026-43248
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated: 2026-11-02

OSVROOT-OS-UBUNTU-2404-CVE-2026-43248 7.3

CVE-2026-43248 in linux - Patched by Root

Root has patched CVE-2026-43248 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record: ROOT-OS-UBUNTU-2404-CVE-2026-43248
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated: 2026-11-06

OSVUBUNTU-CVE-2026-43248 7.8

Record: UBUNTU-CVE-2026-43248
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-11

OSVALSA-2026:67470 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: vhost: move vdpa group bound check to vhost_vdpa (CVE-2026-43248)
kernel: security/keys: fix missed RCU read section on lookup (CVE-2026-64015)
kernel: octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (CVE-2026-63923)
kernel: Linux kernel SLIP: Out-of-bounds write due to race condition during MTU change (CVE-2026-68143)
kernel: net: qrtr: restrict socket creation to the initial network namespace (CVE-2026-68294)
kernel: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (CVE-2026-72045)
kernel: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CVE-2026-74556)

Bug Fix(es) and Enhancement(s):

gfs2: bufdata leaks [almalinux-9.8.z] (JIRA:AlmaLinux-178223)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:67470
Updated: 2026-11-02

OSVALSA-2026:67471 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock() (CVE-2025-40149)
kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset (CVE-2025-68745)
kernel: drm/xe: Open-code GGTT MMIO access protection (CVE-2026-23466)
kernel: drm/xe: always keep track of remap prev/next (CVE-2026-31479)
kernel: drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CVE-2026-31566)
kernel: xfrm: hold dev ref until after transport_finish NF_HOOK (CVE-2026-31663)
kernel: drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CVE-2026-31656)
kernel: smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (CVE-2026-31539)
kernel: vhost: move vdpa group bound check to vhost_vdpa (CVE-2026-43248)
kernel: drm/i915: Fix potential overflow of shmem scatterlist length (CVE-2026-43368)
kernel: drm/amdgpu: Fix use-after-free race in VM acquire (CVE-2026-43370)
kernel: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CVE-2026-46149)
kernel: sctp: purge outqueue on stale COOKIE-ECHO handling (CVE-2026-52924)
kernel: netfilter: require Ethernet MAC header before using eth_hdr() (CVE-2026-53131)
kernel: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (CVE-2026-53246)
kernel: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (CVE-2026-53239)
kernel: af_unix: Set gc_in_progress to true in unix_gc() (CVE-2026-53361)
kernel: scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CVE-2026-63889)
kernel: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (CVE-2026-63921)
kernel: xfrm: input: hold netns during deferred transport reinjection (CVE-2026-63919)
kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink() (CVE-2026-63917)
kernel: lsm: hold cred_guard_mutex for lsm_set_self_attr() (CVE-2026-64111)
kernel: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (CVE-2026-68264)
kernel: xfrm: fix stale skb->prev after async crypto steals a GSO segment (CVE-2026-68426)
kernel: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CVE-2026-74556)

Bug Fix(es) and Enhancement(s):

[almalinux-10.2.z]- Backport MSHV patches for hypervisor OOM handling (JIRA:AlmaLinux-245035)
RHIVOS - [backport] S32G Driver Enablement - ADC (JIRA:AlmaLinux-255233)
[AlmaLinux10.2z] watchdog: System can panic during reboot when pretimeout is disabled (0) (JIRA:AlmaLinux-255348)
[usb/xhci] kdump on Arrow Lake systems hangs system with dracut-initqueue Timed out errors [AlmaLinux-10.2.z] (JIRA:AlmaLinux-256731)
RHIVOS - [backport] S32G Driver Update - ADC, I2C, and eDMA (JIRA:AlmaLinux-256890)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:67471
Updated: 2026-11-02

OSVAZL-85782 No score

CVE-2026-43248 affecting package kernel 6.6.161.1-1

In the Linux kernel, the following vulnerability has been resolved:

vhost: move vdpa group bound check to vhost_vdpa

Remove duplication by consolidating these here. This reduces the posibility of a parent driver missing them.

While we're at it, fix a bug in vdpa_sim where a valid ASID can be assigned to a group equal to ngroups, causing an out of bound write.

Record: AZL-85782
Updated: 2026-11-05

OSVopenSUSE-SU-2026:21388-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-10263: arm64: cputype: Add C1-Premium definitions (bsc#1266290).
CVE-2025-39894: netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm (bsc#1262430).
CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
CVE-2026-23248: perf: Make perf_pmu_unregister() useable (bsc#1259800).
CVE-2026-23394: Revert: "af_unix: Remove lock dance in unix_peek_fds()." (bsc#1260565).
CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
CVE-2026-31438: netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators (bsc#1267824).
CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (bsc#1267816).
CVE-2026-31479: drm/xe: always keep track of remap prev/next (bsc#1262765).
CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
CVE-2026-31560: spi: spi-dw-dma: fix print error log when wait finish transaction (bsc#1263057).
CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
CVE-2026-31646: net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() (bsc#1263796).
CVE-2026-31647: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (bsc#1263581).
CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
CVE-2026-31664: xfrm: clear trailing padding in build_polexpire() (bsc#1263578).
CVE-2026-31665: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
CVE-2026-31674: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (bsc#1263568).
CVE-2026-31680: net: ipv6: flowlabel: defer exclusive option free until RCU teardown (bsc#1263563).
CVE-2026-31693: cifs: some missing initializations on replay (bsc#1267744).
CVE-2026-31743: nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy (bsc#1264067).
CVE-2026-31752: bridge: br_nd_send: validate ND option lengths (bsc#1264045).
CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
CVE-2026-43014,CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010 bsc#1264012).
CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
CVE-2026-43024: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).
CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934).
CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
CVE-2026-43035: net:…

Record: openSUSE-SU-2026:21388-1
Updated: 2026-11-02

OSVSUSE-SU-2026:22742-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-10263: arm64: cputype: Add C1-Premium definitions (bsc#1266290).
CVE-2025-39894: netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm (bsc#1262430).
CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
CVE-2026-23248: perf: Make perf_pmu_unregister() useable (bsc#1259800).
CVE-2026-23394: Revert: "af_unix: Remove lock dance in unix_peek_fds()." (bsc#1260565).
CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
CVE-2026-31438: netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators (bsc#1267824).
CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (bsc#1267816).
CVE-2026-31479: drm/xe: always keep track of remap prev/next (bsc#1262765).
CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
CVE-2026-31560: spi: spi-dw-dma: fix print error log when wait finish transaction (bsc#1263057).
CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
CVE-2026-31646: net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() (bsc#1263796).
CVE-2026-31647: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (bsc#1263581).
CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
CVE-2026-31664: xfrm: clear trailing padding in build_polexpire() (bsc#1263578).
CVE-2026-31665: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
CVE-2026-31674: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (bsc#1263568).
CVE-2026-31680: net: ipv6: flowlabel: defer exclusive option free until RCU teardown (bsc#1263563).
CVE-2026-31693: cifs: some missing initializations on replay (bsc#1267744).
CVE-2026-31743: nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy (bsc#1264067).
CVE-2026-31752: bridge: br_nd_send: validate ND option lengths (bsc#1264045).
CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
CVE-2026-43014,CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010 bsc#1264012).
CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
CVE-2026-43024: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).
CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934).
CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
CVE-2026-43035: net:…

Record: SUSE-SU-2026:22742-1
Updated: 2026-11-02

OSVSUSE-SU-2026:22769-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-10263: arm64: cputype: Add C1-Premium definitions (bsc#1266290).
CVE-2025-39894: netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm (bsc#1262430).
CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
CVE-2026-23248: perf: Make perf_pmu_unregister() useable (bsc#1259800).
CVE-2026-23394: Revert: "af_unix: Remove lock dance in unix_peek_fds()." (bsc#1260565).
CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
CVE-2026-31438: netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators (bsc#1267824).
CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (bsc#1267816).
CVE-2026-31479: drm/xe: always keep track of remap prev/next (bsc#1262765).
CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
CVE-2026-31560: spi: spi-dw-dma: fix print error log when wait finish transaction (bsc#1263057).
CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
CVE-2026-31646: net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() (bsc#1263796).
CVE-2026-31647: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (bsc#1263581).
CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
CVE-2026-31664: xfrm: clear trailing padding in build_polexpire() (bsc#1263578).
CVE-2026-31665: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
CVE-2026-31674: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (bsc#1263568).
CVE-2026-31680: net: ipv6: flowlabel: defer exclusive option free until RCU teardown (bsc#1263563).
CVE-2026-31693: cifs: some missing initializations on replay (bsc#1267744).
CVE-2026-31743: nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy (bsc#1264067).
CVE-2026-31752: bridge: br_nd_send: validate ND option lengths (bsc#1264045).
CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
CVE-2026-43014,CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010 bsc#1264012).
CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
CVE-2026-43024: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).
CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934).
CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
CVE-2026-43035: net:…

Record: SUSE-SU-2026:22769-1
Updated: 2026-11-02

OSVSUSE-SU-2026:22809-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2023-20585: iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 (bsc#1243603).
CVE-2026-31503: udp: Fix wildcard bind conflict check when using hash2 (bsc#1263077).
CVE-2026-43019: Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync (bsc#1264003).
CVE-2026-43057: net: mpls: error out if inner headers are not set (bsc#1264056).
CVE-2026-43092: xsk: validate MTU against usable frame size on bind (bsc#1264270).
CVE-2026-43124: pstore: ram_core: fix incorrect success return when vmap() fails (bsc#1264545).
CVE-2026-43157: octeontx2-af: CGX: fix bitmap leaks (bsc#1264624).
CVE-2026-43167: xfrm: always flush state and policy upon NETDEV_UNREGISTER event (bsc#1264580).
CVE-2026-43191: drm/amd/display: Adjust PHY FSM transition to TX_EN-to-PLL_ON for TMDS on DCN35 (bsc#1264548).
CVE-2026-43194: net: consume xmit errors of GSO frames (bsc#1264304).
CVE-2026-43199: net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (bsc#1264556).
CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
CVE-2026-43205: dpaa2-switch: validate num_ifs to prevent out-of-bounds write (bsc#1264328).
CVE-2026-43226: net/rds: No shortcut out of RDS_CONN_ERROR (bsc#1264544).
CVE-2026-43240: ima: verify the previous kernel's IMA buffer lies in addressable RAM (bsc#1264386).
CVE-2026-43248: vhost: move vdpa group bound check to vhost_vdpa (bsc#1264302).
CVE-2026-43253: iommu/amd: move wait_on_sem() out of spinlock (bsc#1260593).
CVE-2026-43294: drm: renesas: rz-du: mipi_dsi: fix kernel panic when rebooting for some panels (bsc#1264853).
CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
CVE-2026-43320: drm/amd/display: Fix dsc eDP issue (bsc#1264987).
CVE-2026-43373: net: ncsi: fix skb leak in error paths (bsc#1265079).
CVE-2026-43383: net/tcp-md5: Fix MAC comparison to be constant-time (bsc#1264744).
CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
CVE-2026-43449: nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set (bsc#1265023).
CVE-2026-43450: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (bsc#1264794).
CVE-2026-43452: netfilter: x_tables: guard option walkers against 1-byte tail reads (bsc#1265142).
CVE-2026-43465: net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (bsc#1264997).
CVE-2026-43466: net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (bsc#1264790).
CVE-2026-43468: net/mlx5: Fix deadlock between devlink lock and esw->wq (bsc#1264978).
CVE-2026-43473: scsi: mpi3mr: Add NULL checks when resetting request and reply queues (bsc#1264731).
CVE-2026-45857: scsi: csiostor: Fix dereference of null pointer rn (bsc#1266458).
CVE-2026-45858: ext4: subdivide EXT4_EXT_DATA_VALID1 (bsc#1266773).
CVE-2026-45899: ext4: drop extent cache when splitting extent fails (bsc#1266883).
CVE-2026-45920: ext4: fix dirtyclusters double decrement on fs shutdown (bsc#1266893).
CVE-2026-45987: KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2 (bsc#1267213).
CVE-2026-45997: scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails (bsc#1266740).
CVE-2026-46046: ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() (bsc#1266726).
CVE-2026-46050: md/raid10: fix deadlock with check operation and nowait requests (bsc#1266686).
CVE-2026-46051: md/raid5: fix soft lockup in retry_aligned_read() (bsc#1267360).
CVE-2026-46052: ceph: only d_add() negative dentries when they are unhashed (bsc#1267494).
CVE-2026-46059: KVM: nSVM: Always use NextRIP as vmcb02's NextRIP after first L2 VMRUN (bsc#1267495).
CVE-2026-46099: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (bsc#1266722).
CVE-2026-46161: md/raid10: fix divide-by-zero in setup_geo()…

Record: SUSE-SU-2026:22809-1
Updated: 2026-11-02

OSVSUSE-SU-2026:22810-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2023-20585: iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 (bsc#1243603).
CVE-2026-31503: udp: Fix wildcard bind conflict check when using hash2 (bsc#1263077).
CVE-2026-43019: Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync (bsc#1264003).
CVE-2026-43057: net: mpls: error out if inner headers are not set (bsc#1264056).
CVE-2026-43092: xsk: validate MTU against usable frame size on bind (bsc#1264270).
CVE-2026-43124: pstore: ram_core: fix incorrect success return when vmap() fails (bsc#1264545).
CVE-2026-43157: octeontx2-af: CGX: fix bitmap leaks (bsc#1264624).
CVE-2026-43167: xfrm: always flush state and policy upon NETDEV_UNREGISTER event (bsc#1264580).
CVE-2026-43191: drm/amd/display: Adjust PHY FSM transition to TX_EN-to-PLL_ON for TMDS on DCN35 (bsc#1264548).
CVE-2026-43194: net: consume xmit errors of GSO frames (bsc#1264304).
CVE-2026-43199: net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (bsc#1264556).
CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
CVE-2026-43205: dpaa2-switch: validate num_ifs to prevent out-of-bounds write (bsc#1264328).
CVE-2026-43226: net/rds: No shortcut out of RDS_CONN_ERROR (bsc#1264544).
CVE-2026-43240: ima: verify the previous kernel's IMA buffer lies in addressable RAM (bsc#1264386).
CVE-2026-43248: vhost: move vdpa group bound check to vhost_vdpa (bsc#1264302).
CVE-2026-43253: iommu/amd: move wait_on_sem() out of spinlock (bsc#1260593).
CVE-2026-43294: drm: renesas: rz-du: mipi_dsi: fix kernel panic when rebooting for some panels (bsc#1264853).
CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
CVE-2026-43320: drm/amd/display: Fix dsc eDP issue (bsc#1264987).
CVE-2026-43373: net: ncsi: fix skb leak in error paths (bsc#1265079).
CVE-2026-43383: net/tcp-md5: Fix MAC comparison to be constant-time (bsc#1264744).
CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
CVE-2026-43449: nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set (bsc#1265023).
CVE-2026-43450: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (bsc#1264794).
CVE-2026-43452: netfilter: x_tables: guard option walkers against 1-byte tail reads (bsc#1265142).
CVE-2026-43465: net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (bsc#1264997).
CVE-2026-43466: net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (bsc#1264790).
CVE-2026-43468: net/mlx5: Fix deadlock between devlink lock and esw->wq (bsc#1264978).
CVE-2026-43473: scsi: mpi3mr: Add NULL checks when resetting request and reply queues (bsc#1264731).
CVE-2026-45857: scsi: csiostor: Fix dereference of null pointer rn (bsc#1266458).
CVE-2026-45858: ext4: subdivide EXT4_EXT_DATA_VALID1 (bsc#1266773).
CVE-2026-45899: ext4: drop extent cache when splitting extent fails (bsc#1266883).
CVE-2026-45920: ext4: fix dirtyclusters double decrement on fs shutdown (bsc#1266893).
CVE-2026-45987: KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2 (bsc#1267213).
CVE-2026-45997: scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails (bsc#1266740).
CVE-2026-46046: ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() (bsc#1266726).
CVE-2026-46050: md/raid10: fix deadlock with check operation and nowait requests (bsc#1266686).
CVE-2026-46051: md/raid5: fix soft lockup in retry_aligned_read() (bsc#1267360).
CVE-2026-46052: ceph: only d_add() negative dentries when they are unhashed (bsc#1267494).
CVE-2026-46059: KVM: nSVM: Always use NextRIP as vmcb02's NextRIP after first L2 VMRUN (bsc#1267495).
CVE-2026-46099: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (bsc#1266722).
CVE-2026-46161: md/raid10: fix divide-by-zero in setup_geo() with…

Record: SUSE-SU-2026:22810-1
Updated: 2026-11-02

OSVSUSE-SU-2026:22812-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-10263: arm64: cputype: Add C1-Premium definitions (bsc#1266290).
CVE-2025-39894: netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm (bsc#1262430).
CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
CVE-2026-23248: perf: Make perf_pmu_unregister() useable (bsc#1259800).
CVE-2026-23394: Revert: "af_unix: Remove lock dance in unix_peek_fds()." (bsc#1260565).
CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
CVE-2026-31438: netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators (bsc#1267824).
CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (bsc#1267816).
CVE-2026-31479: drm/xe: always keep track of remap prev/next (bsc#1262765).
CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
CVE-2026-31560: spi: spi-dw-dma: fix print error log when wait finish transaction (bsc#1263057).
CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
CVE-2026-31646: net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() (bsc#1263796).
CVE-2026-31647: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (bsc#1263581).
CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
CVE-2026-31664: xfrm: clear trailing padding in build_polexpire() (bsc#1263578).
CVE-2026-31665: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
CVE-2026-31674: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (bsc#1263568).
CVE-2026-31680: net: ipv6: flowlabel: defer exclusive option free until RCU teardown (bsc#1263563).
CVE-2026-31693: cifs: some missing initializations on replay (bsc#1267744).
CVE-2026-31743: nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy (bsc#1264067).
CVE-2026-31752: bridge: br_nd_send: validate ND option lengths (bsc#1264045).
CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
CVE-2026-43014,CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010 bsc#1264012).
CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
CVE-2026-43024: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).
CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934).
CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
CVE-2026-43035: net:…

Record: SUSE-SU-2026:22812-1
Updated: 2026-11-02

OSVSUSE-SU-2026:22835-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-10263: arm64: cputype: Add C1-Premium definitions (bsc#1266290).
CVE-2025-39894: netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm (bsc#1262430).
CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
CVE-2026-23248: perf: Make perf_pmu_unregister() useable (bsc#1259800).
CVE-2026-23394: Revert: "af_unix: Remove lock dance in unix_peek_fds()." (bsc#1260565).
CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
CVE-2026-31438: netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators (bsc#1267824).
CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (bsc#1267816).
CVE-2026-31479: drm/xe: always keep track of remap prev/next (bsc#1262765).
CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
CVE-2026-31560: spi: spi-dw-dma: fix print error log when wait finish transaction (bsc#1263057).
CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
CVE-2026-31646: net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() (bsc#1263796).
CVE-2026-31647: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (bsc#1263581).
CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
CVE-2026-31664: xfrm: clear trailing padding in build_polexpire() (bsc#1263578).
CVE-2026-31665: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
CVE-2026-31674: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (bsc#1263568).
CVE-2026-31680: net: ipv6: flowlabel: defer exclusive option free until RCU teardown (bsc#1263563).
CVE-2026-31693: cifs: some missing initializations on replay (bsc#1267744).
CVE-2026-31743: nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy (bsc#1264067).
CVE-2026-31752: bridge: br_nd_send: validate ND option lengths (bsc#1264045).
CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
CVE-2026-43014,CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010 bsc#1264012).
CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
CVE-2026-43024: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).
CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934).
CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
CVE-2026-43035: net:…

Record: SUSE-SU-2026:22835-1
Updated: 2026-11-02

OSVSUSE-SU-2026:22903-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2023-20585: iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 (bsc#1243603).
CVE-2026-31503: udp: Fix wildcard bind conflict check when using hash2 (bsc#1263077).
CVE-2026-43019: Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync (bsc#1264003).
CVE-2026-43057: net: mpls: error out if inner headers are not set (bsc#1264056).
CVE-2026-43092: xsk: validate MTU against usable frame size on bind (bsc#1264270).
CVE-2026-43124: pstore: ram_core: fix incorrect success return when vmap() fails (bsc#1264545).
CVE-2026-43157: octeontx2-af: CGX: fix bitmap leaks (bsc#1264624).
CVE-2026-43167: xfrm: always flush state and policy upon NETDEV_UNREGISTER event (bsc#1264580).
CVE-2026-43191: drm/amd/display: Adjust PHY FSM transition to TX_EN-to-PLL_ON for TMDS on DCN35 (bsc#1264548).
CVE-2026-43194: net: consume xmit errors of GSO frames (bsc#1264304).
CVE-2026-43199: net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (bsc#1264556).
CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
CVE-2026-43205: dpaa2-switch: validate num_ifs to prevent out-of-bounds write (bsc#1264328).
CVE-2026-43226: net/rds: No shortcut out of RDS_CONN_ERROR (bsc#1264544).
CVE-2026-43240: ima: verify the previous kernel's IMA buffer lies in addressable RAM (bsc#1264386).
CVE-2026-43248: vhost: move vdpa group bound check to vhost_vdpa (bsc#1264302).
CVE-2026-43253: iommu/amd: move wait_on_sem() out of spinlock (bsc#1260593).
CVE-2026-43294: drm: renesas: rz-du: mipi_dsi: fix kernel panic when rebooting for some panels (bsc#1264853).
CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
CVE-2026-43320: drm/amd/display: Fix dsc eDP issue (bsc#1264987).
CVE-2026-43373: net: ncsi: fix skb leak in error paths (bsc#1265079).
CVE-2026-43383: net/tcp-md5: Fix MAC comparison to be constant-time (bsc#1264744).
CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
CVE-2026-43449: nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set (bsc#1265023).
CVE-2026-43450: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (bsc#1264794).
CVE-2026-43452: netfilter: x_tables: guard option walkers against 1-byte tail reads (bsc#1265142).
CVE-2026-43465: net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (bsc#1264997).
CVE-2026-43466: net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (bsc#1264790).
CVE-2026-43468: net/mlx5: Fix deadlock between devlink lock and esw->wq (bsc#1264978).
CVE-2026-43473: scsi: mpi3mr: Add NULL checks when resetting request and reply queues (bsc#1264731).
CVE-2026-45857: scsi: csiostor: Fix dereference of null pointer rn (bsc#1266458).
CVE-2026-45858: ext4: subdivide EXT4_EXT_DATA_VALID1 (bsc#1266773).
CVE-2026-45899: ext4: drop extent cache when splitting extent fails (bsc#1266883).
CVE-2026-45920: ext4: fix dirtyclusters double decrement on fs shutdown (bsc#1266893).
CVE-2026-45987: KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2 (bsc#1267213).
CVE-2026-45997: scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails (bsc#1266740).
CVE-2026-46046: ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() (bsc#1266726).
CVE-2026-46050: md/raid10: fix deadlock with check operation and nowait requests (bsc#1266686).
CVE-2026-46051: md/raid5: fix soft lockup in retry_aligned_read() (bsc#1267360).
CVE-2026-46052: ceph: only d_add() negative dentries when they are unhashed (bsc#1267494).
CVE-2026-46059: KVM: nSVM: Always use NextRIP as vmcb02's NextRIP after first L2 VMRUN (bsc#1267495).
CVE-2026-46099: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (bsc#1266722).
CVE-2026-46161: md/raid10: fix divide-by-zero in setup_geo()…

Record: SUSE-SU-2026:22903-1
Updated: 2026-11-02

OSVSUSE-SU-2026:22904-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2023-20585: iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 (bsc#1243603).
CVE-2026-31503: udp: Fix wildcard bind conflict check when using hash2 (bsc#1263077).
CVE-2026-43019: Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync (bsc#1264003).
CVE-2026-43057: net: mpls: error out if inner headers are not set (bsc#1264056).
CVE-2026-43092: xsk: validate MTU against usable frame size on bind (bsc#1264270).
CVE-2026-43124: pstore: ram_core: fix incorrect success return when vmap() fails (bsc#1264545).
CVE-2026-43157: octeontx2-af: CGX: fix bitmap leaks (bsc#1264624).
CVE-2026-43167: xfrm: always flush state and policy upon NETDEV_UNREGISTER event (bsc#1264580).
CVE-2026-43191: drm/amd/display: Adjust PHY FSM transition to TX_EN-to-PLL_ON for TMDS on DCN35 (bsc#1264548).
CVE-2026-43194: net: consume xmit errors of GSO frames (bsc#1264304).
CVE-2026-43199: net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (bsc#1264556).
CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
CVE-2026-43205: dpaa2-switch: validate num_ifs to prevent out-of-bounds write (bsc#1264328).
CVE-2026-43226: net/rds: No shortcut out of RDS_CONN_ERROR (bsc#1264544).
CVE-2026-43240: ima: verify the previous kernel's IMA buffer lies in addressable RAM (bsc#1264386).
CVE-2026-43248: vhost: move vdpa group bound check to vhost_vdpa (bsc#1264302).
CVE-2026-43253: iommu/amd: move wait_on_sem() out of spinlock (bsc#1260593).
CVE-2026-43294: drm: renesas: rz-du: mipi_dsi: fix kernel panic when rebooting for some panels (bsc#1264853).
CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
CVE-2026-43320: drm/amd/display: Fix dsc eDP issue (bsc#1264987).
CVE-2026-43373: net: ncsi: fix skb leak in error paths (bsc#1265079).
CVE-2026-43383: net/tcp-md5: Fix MAC comparison to be constant-time (bsc#1264744).
CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
CVE-2026-43449: nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set (bsc#1265023).
CVE-2026-43450: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (bsc#1264794).
CVE-2026-43452: netfilter: x_tables: guard option walkers against 1-byte tail reads (bsc#1265142).
CVE-2026-43465: net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (bsc#1264997).
CVE-2026-43466: net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (bsc#1264790).
CVE-2026-43468: net/mlx5: Fix deadlock between devlink lock and esw->wq (bsc#1264978).
CVE-2026-43473: scsi: mpi3mr: Add NULL checks when resetting request and reply queues (bsc#1264731).
CVE-2026-45857: scsi: csiostor: Fix dereference of null pointer rn (bsc#1266458).
CVE-2026-45858: ext4: subdivide EXT4_EXT_DATA_VALID1 (bsc#1266773).
CVE-2026-45899: ext4: drop extent cache when splitting extent fails (bsc#1266883).
CVE-2026-45920: ext4: fix dirtyclusters double decrement on fs shutdown (bsc#1266893).
CVE-2026-45987: KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2 (bsc#1267213).
CVE-2026-45997: scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails (bsc#1266740).
CVE-2026-46046: ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() (bsc#1266726).
CVE-2026-46050: md/raid10: fix deadlock with check operation and nowait requests (bsc#1266686).
CVE-2026-46051: md/raid5: fix soft lockup in retry_aligned_read() (bsc#1267360).
CVE-2026-46052: ceph: only d_add() negative dentries when they are unhashed (bsc#1267494).
CVE-2026-46059: KVM: nSVM: Always use NextRIP as vmcb02's NextRIP after first L2 VMRUN (bsc#1267495).
CVE-2026-46099: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (bsc#1266722).
CVE-2026-46161: md/raid10: fix divide-by-zero in setup_geo() with…

Record: SUSE-SU-2026:22904-1
Updated: 2026-11-02

OSVSUSE-SU-2026:3130-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2023-20585: iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 (bsc#1243603).
CVE-2025-71302: drm/panthor: fix for dma-fence safe access rules (bsc#1264837).
CVE-2026-31479: drm/xe: always keep track of remap prev/next (bsc#1262765).
CVE-2026-31503: udp: Fix wildcard bind conflict check when using hash2 (bsc#1263077).
CVE-2026-43019: Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync (bsc#1264003).
CVE-2026-43057: net: mpls: error out if inner headers are not set (bsc#1264056).
CVE-2026-43092: xsk: validate MTU against usable frame size on bind (bsc#1264270).
CVE-2026-43124: pstore: ram_core: fix incorrect success return when vmap() fails (bsc#1264545).
CVE-2026-43157: octeontx2-af: CGX: fix bitmap leaks (bsc#1264624).
CVE-2026-43167: xfrm: always flush state and policy upon NETDEV_UNREGISTER event (bsc#1264580).
CVE-2026-43191: drm/amd/display: Adjust PHY FSM transition to TX_EN-to-PLL_ON for TMDS on DCN35 (bsc#1264548).
CVE-2026-43194: net: consume xmit errors of GSO frames (bsc#1264304).
CVE-2026-43199: net/mlx5e: Fix 'scheduling while atomic' in IPsec MAC address query (bsc#1264556).
CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
CVE-2026-43205: dpaa2-switch: validate num_ifs to prevent out-of-bounds write (bsc#1264328).
CVE-2026-43226: net/rds: No shortcut out of RDS_CONN_ERROR (bsc#1264544).
CVE-2026-43240: ima: verify the previous kernel's IMA buffer lies in addressable RAM (bsc#1264386).
CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
CVE-2026-43248: vhost: move vdpa group bound check to vhost_vdpa (bsc#1264302).
CVE-2026-43253: iommu/amd: move wait_on_sem() out of spinlock (bsc#1260593 bsc#1264419).
CVE-2026-43260: bnxt_en: Fix RSS context delete logic (bsc#1264429).
CVE-2026-43294: drm: renesas: rz-du: mipi_dsi: fix kernel panic when rebooting for some panels (bsc#1264853).
CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
CVE-2026-43320: drm/amd/display: Fix dsc eDP issue (bsc#1264987).
CVE-2026-43337: drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw() (bsc#1265112).
CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
CVE-2026-43373: net: ncsi: fix skb leak in error paths (bsc#1265079).
CVE-2026-43383: net/tcp-md5: Fix MAC comparison to be constant-time (bsc#1264744).
CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
CVE-2026-43449: nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set (bsc#1265023).
CVE-2026-43450: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (bsc#1264794).
CVE-2026-43452: netfilter: x_tables: guard option walkers against 1-byte tail reads (bsc#1265142).
CVE-2026-43465: net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (bsc#1264997).
CVE-2026-43466: net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (bsc#1264790).
CVE-2026-43468: net/mlx5: Fix deadlock between devlink lock and esw->wq (bsc#1264978).
CVE-2026-43473: scsi: mpi3mr: Add NULL checks when resetting request and reply queues (bsc#1264731).
CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
CVE-2026-45857: scsi: csiostor: Fix dereference of null pointer rn (bsc#1266458).
CVE-2026-45858: ext4: subdivide EXT4_EXT_DATA_VALID1 (bsc#1266773).
CVE-2026-45899: ext4: drop extent cache when splitting extent fails (bsc#1266883).
CVE-2026-45920: ext4: fix dirtyclusters double decrement on fs shutdown (bsc#1266893).
CVE-2026-45922: RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (bsc#1266805). -…

Record: SUSE-SU-2026:3130-1
Updated: 2026-11-02

OSVSUSE-SU-2026:3166-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2023-20585: iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 (bsc#1243603).
CVE-2025-71302: drm/panthor: fix for dma-fence safe access rules (bsc#1264837).
CVE-2026-31479: drm/xe: always keep track of remap prev/next (bsc#1262765).
CVE-2026-31503: udp: Fix wildcard bind conflict check when using hash2 (bsc#1263077).
CVE-2026-43019: Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync (bsc#1264003).
CVE-2026-43057: net: mpls: error out if inner headers are not set (bsc#1264056).
CVE-2026-43092: xsk: validate MTU against usable frame size on bind (bsc#1264270).
CVE-2026-43124: pstore: ram_core: fix incorrect success return when vmap() fails (bsc#1264545).
CVE-2026-43157: octeontx2-af: CGX: fix bitmap leaks (bsc#1264624).
CVE-2026-43167: xfrm: always flush state and policy upon NETDEV_UNREGISTER event (bsc#1264580).
CVE-2026-43191: drm/amd/display: Adjust PHY FSM transition to TX_EN-to-PLL_ON for TMDS on DCN35 (bsc#1264548).
CVE-2026-43194: net: consume xmit errors of GSO frames (bsc#1264304).
CVE-2026-43199: net/mlx5e: Fix 'scheduling while atomic' in IPsec MAC address query (bsc#1264556).
CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
CVE-2026-43205: dpaa2-switch: validate num_ifs to prevent out-of-bounds write (bsc#1264328).
CVE-2026-43226: net/rds: No shortcut out of RDS_CONN_ERROR (bsc#1264544).
CVE-2026-43240: ima: verify the previous kernel's IMA buffer lies in addressable RAM (bsc#1264386).
CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
CVE-2026-43248: vhost: move vdpa group bound check to vhost_vdpa (bsc#1264302).
CVE-2026-43253: iommu/amd: move wait_on_sem() out of spinlock (bsc#1260593 bsc#1264419).
CVE-2026-43260: bnxt_en: Fix RSS context delete logic (bsc#1264429).
CVE-2026-43294: drm: renesas: rz-du: mipi_dsi: fix kernel panic when rebooting for some panels (bsc#1264853).
CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
CVE-2026-43320: drm/amd/display: Fix dsc eDP issue (bsc#1264987).
CVE-2026-43337: drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw() (bsc#1265112).
CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
CVE-2026-43373: net: ncsi: fix skb leak in error paths (bsc#1265079).
CVE-2026-43383: net/tcp-md5: Fix MAC comparison to be constant-time (bsc#1264744).
CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
CVE-2026-43449: nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set (bsc#1265023).
CVE-2026-43450: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (bsc#1264794).
CVE-2026-43452: netfilter: x_tables: guard option walkers against 1-byte tail reads (bsc#1265142).
CVE-2026-43465: net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (bsc#1264997).
CVE-2026-43466: net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (bsc#1264790).
CVE-2026-43468: net/mlx5: Fix deadlock between devlink lock and esw->wq (bsc#1264978).
CVE-2026-43473: scsi: mpi3mr: Add NULL checks when resetting request and reply queues (bsc#1264731).
CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
CVE-2026-45857: scsi: csiostor: Fix dereference of null pointer rn (bsc#1266458).
CVE-2026-45858: ext4: subdivide EXT4_EXT_DATA_VALID1 (bsc#1266773).
CVE-2026-45899: ext4: drop extent cache when splitting extent fails (bsc#1266883).
CVE-2026-45920: ext4: fix dirtyclusters double decrement on fs shutdown (bsc#1266893).
CVE-2026-45922: RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (bsc#1266805). -…

Record: SUSE-SU-2026:3166-1
Updated: 2026-11-02

OSVUSN-8492-1 No score

linux, linux-aws, linux-aws-fips, linux-gcp, linux-gcp-fips, linux-ibm, linux-nvidia, linux-nvidia-6.8, linux-oracle, linux-realtime, linux-realtime-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
ATM drivers;
RNBD block device driver;
Ublk userspace block driver;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
CPU idle management framework;
Hardware crypto device drivers;
DMA engine subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Broadcom VK accelerator driver;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
RapidIO drivers;
RAS (Reliability, Availability, Serviceability) subsystem;
Remote Processor subsystem;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
MediaTek SoC drivers;
Texas Instruments SoC drivers;
SPI subsystem;
Greybus lights staging drivers;
Realtek RTL8723BS SDIO drivers;
UFS subsystem;
ChipIdea USB driver;
DesignWare USB3 driver;
USB over IP driver;
vDPA drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
BTRFS file system;
File systems infrastructure;
Ceph distributed file system;
Ext4 file system;
F2FS file system;
FAT file system;
GFS2 file system;
HFS+ file system;
JFS file system;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
OCFS2 file system;
Proc file system;
Pstore file system;
Diskquota system;
SMB network file system;
XFS file system;
Audit subsystem;
Memory Management;
IPv6 networking;
Netfilter;
Tracing infrastructure;
Kernel kexec() syscall;
RCU subsystem;
Scheduler infrastructure;
Scatterlist API;
9P file system network protocol;
Asynchronous Transfer Mode (ATM) subsystem;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Ceph Core library;
Networking core;
IPv4 networking;
KCM (Kernel Connection Multiplexor) sockets driver;
Multipath TCP;
NFC subsystem;
RDS protocol;
RxRPC session sockets;
Network traffic control;
SMC sockets;
Sun RPC protocol;
X.25 network layer;
XFRM subsystem;
AppArmor security module;
Simplified Mandatory Access Control Kernel framework;
SOF drivers;
USB sound devices; (CVE-2025-40005, CVE-2025-71229, CVE-2025-71231, CVE-2025-71232, CVE-2025-71233, CVE-2025-71235, CVE-2025-71236, CVE-2025-71237, CVE-2025-71238, CVE-2025-71239, CVE-2025-71265, CVE-2025-71266, CVE-2025-71267, CVE-2025-71272, CVE-2025-71273, CVE-2025-71274, CVE-2025-71286, CVE-2025-71291, CVE-2025-71292, CVE-2025-71294, CVE-2025-71295, CVE-2025-71297, CVE-2025-71304, CVE-2025-71305, CVE-2026-23100, CVE-2026-23169, CVE-2026-23220, CVE-2026-23221, CVE-2026-23222, CVE-2026-23228, CVE-2026-23229, CVE-2026-23230, CVE-2026-23233, CVE-2026-23234, CVE-2026-23235, CVE-2026-23236, CVE-2026-23237, CVE-2026-23238, CVE-2026-23241, CVE-2026-23242, CVE-2026-23243, CVE-2026-23249, CVE-2026-23266, CVE-2026-23267, CVE-2026-23272, CVE-2026-23278, CVE-2026-23392, CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402, CVE-2026-31411, CVE-2026-31418, CVE-2026-31436, CVE-2026-31448, CVE-2026-31478, CVE-2026-31607,…

Record: USN-8492-1
Updated: 2026-11-06

OSVUSN-8492-2 No score

linux-aws-6.8, linux-gcp-6.8, linux-gke, linux-gkeop, linux-ibm-6.8, linux-nvidia-lowlatency, linux-oracle-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
ATM drivers;
RNBD block device driver;
Ublk userspace block driver;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
CPU idle management framework;
Hardware crypto device drivers;
DMA engine subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Broadcom VK accelerator driver;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
RapidIO drivers;
RAS (Reliability, Availability, Serviceability) subsystem;
Remote Processor subsystem;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
MediaTek SoC drivers;
Texas Instruments SoC drivers;
SPI subsystem;
Greybus lights staging drivers;
Realtek RTL8723BS SDIO drivers;
UFS subsystem;
ChipIdea USB driver;
DesignWare USB3 driver;
USB over IP driver;
vDPA drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
BTRFS file system;
File systems infrastructure;
Ceph distributed file system;
Ext4 file system;
F2FS file system;
FAT file system;
GFS2 file system;
HFS+ file system;
JFS file system;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
OCFS2 file system;
Proc file system;
Pstore file system;
Diskquota system;
SMB network file system;
XFS file system;
Audit subsystem;
Memory Management;
IPv6 networking;
Netfilter;
Tracing infrastructure;
Kernel kexec() syscall;
RCU subsystem;
Scheduler infrastructure;
Scatterlist API;
9P file system network protocol;
Asynchronous Transfer Mode (ATM) subsystem;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Ceph Core library;
Networking core;
IPv4 networking;
KCM (Kernel Connection Multiplexor) sockets driver;
Multipath TCP;
NFC subsystem;
RDS protocol;
RxRPC session sockets;
Network traffic control;
SMC sockets;
Sun RPC protocol;
X.25 network layer;
XFRM subsystem;
AppArmor security module;
Simplified Mandatory Access Control Kernel framework;
SOF drivers;
USB sound devices; (CVE-2025-40005, CVE-2025-71229, CVE-2025-71231, CVE-2025-71232, CVE-2025-71233, CVE-2025-71235, CVE-2025-71236, CVE-2025-71237, CVE-2025-71238, CVE-2025-71239, CVE-2025-71265, CVE-2025-71266, CVE-2025-71267, CVE-2025-71272, CVE-2025-71273, CVE-2025-71274, CVE-2025-71286, CVE-2025-71291, CVE-2025-71292, CVE-2025-71294, CVE-2025-71295, CVE-2025-71297, CVE-2025-71304, CVE-2025-71305, CVE-2026-23100, CVE-2026-23169, CVE-2026-23220, CVE-2026-23221, CVE-2026-23222, CVE-2026-23228, CVE-2026-23229, CVE-2026-23230, CVE-2026-23233, CVE-2026-23234, CVE-2026-23235, CVE-2026-23236, CVE-2026-23237, CVE-2026-23238, CVE-2026-23241, CVE-2026-23242, CVE-2026-23243, CVE-2026-23249, CVE-2026-23266, CVE-2026-23267, CVE-2026-23272, CVE-2026-23278, CVE-2026-23392, CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402, CVE-2026-31411, CVE-2026-31418, CVE-2026-31436, CVE-2026-31448, CVE-2026-31478, CVE-2026-31607,…

Record: USN-8492-2
Updated: 2026-11-06

OSVUSN-8492-3 No score

linux-raspi-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
ATM drivers;
RNBD block device driver;
Ublk userspace block driver;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
CPU idle management framework;
Hardware crypto device drivers;
DMA engine subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Broadcom VK accelerator driver;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
RapidIO drivers;
RAS (Reliability, Availability, Serviceability) subsystem;
Remote Processor subsystem;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
MediaTek SoC drivers;
Texas Instruments SoC drivers;
SPI subsystem;
Greybus lights staging drivers;
Realtek RTL8723BS SDIO drivers;
UFS subsystem;
ChipIdea USB driver;
DesignWare USB3 driver;
USB over IP driver;
vDPA drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
BTRFS file system;
File systems infrastructure;
Ceph distributed file system;
Ext4 file system;
F2FS file system;
FAT file system;
GFS2 file system;
HFS+ file system;
JFS file system;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
OCFS2 file system;
Proc file system;
Pstore file system;
Diskquota system;
SMB network file system;
XFS file system;
Audit subsystem;
Memory Management;
IPv6 networking;
Netfilter;
Tracing infrastructure;
Kernel kexec() syscall;
RCU subsystem;
Scheduler infrastructure;
Scatterlist API;
9P file system network protocol;
Asynchronous Transfer Mode (ATM) subsystem;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Ceph Core library;
Networking core;
IPv4 networking;
KCM (Kernel Connection Multiplexor) sockets driver;
Multipath TCP;
NFC subsystem;
RDS protocol;
RxRPC session sockets;
Network traffic control;
SMC sockets;
Sun RPC protocol;
X.25 network layer;
XFRM subsystem;
AppArmor security module;
Simplified Mandatory Access Control Kernel framework;
SOF drivers;
USB sound devices; (CVE-2025-40005, CVE-2025-71229, CVE-2025-71231, CVE-2025-71232, CVE-2025-71233, CVE-2025-71235, CVE-2025-71236, CVE-2025-71237, CVE-2025-71238, CVE-2025-71239, CVE-2025-71265, CVE-2025-71266, CVE-2025-71267, CVE-2025-71272, CVE-2025-71273, CVE-2025-71274, CVE-2025-71286, CVE-2025-71291, CVE-2025-71292, CVE-2025-71294, CVE-2025-71295, CVE-2025-71297, CVE-2025-71304, CVE-2025-71305, CVE-2026-23100, CVE-2026-23169, CVE-2026-23220, CVE-2026-23221, CVE-2026-23222, CVE-2026-23228, CVE-2026-23229, CVE-2026-23230, CVE-2026-23233, CVE-2026-23234, CVE-2026-23235, CVE-2026-23236, CVE-2026-23237, CVE-2026-23238, CVE-2026-23241, CVE-2026-23242, CVE-2026-23243, CVE-2026-23249, CVE-2026-23266, CVE-2026-23267, CVE-2026-23272, CVE-2026-23278, CVE-2026-23392, CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402, CVE-2026-31411, CVE-2026-31418, CVE-2026-31436, CVE-2026-31448, CVE-2026-31478, CVE-2026-31607,…

Record: USN-8492-3
Updated: 2026-11-06

OSVUSN-8492-4 No score

linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
ATM drivers;
RNBD block device driver;
Ublk userspace block driver;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
CPU idle management framework;
Hardware crypto device drivers;
DMA engine subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Broadcom VK accelerator driver;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
RapidIO drivers;
RAS (Reliability, Availability, Serviceability) subsystem;
Remote Processor subsystem;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
MediaTek SoC drivers;
Texas Instruments SoC drivers;
SPI subsystem;
Greybus lights staging drivers;
Realtek RTL8723BS SDIO drivers;
UFS subsystem;
ChipIdea USB driver;
DesignWare USB3 driver;
USB over IP driver;
vDPA drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
BTRFS file system;
File systems infrastructure;
Ceph distributed file system;
Ext4 file system;
F2FS file system;
FAT file system;
GFS2 file system;
HFS+ file system;
JFS file system;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
OCFS2 file system;
Proc file system;
Pstore file system;
Diskquota system;
SMB network file system;
XFS file system;
Audit subsystem;
Memory Management;
IPv6 networking;
Netfilter;
Tracing infrastructure;
Kernel kexec() syscall;
RCU subsystem;
Scheduler infrastructure;
Scatterlist API;
9P file system network protocol;
Asynchronous Transfer Mode (ATM) subsystem;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Ceph Core library;
Networking core;
IPv4 networking;
KCM (Kernel Connection Multiplexor) sockets driver;
Multipath TCP;
NFC subsystem;
RDS protocol;
RxRPC session sockets;
Network traffic control;
SMC sockets;
Sun RPC protocol;
X.25 network layer;
XFRM subsystem;
AppArmor security module;
Simplified Mandatory Access Control Kernel framework;
SOF drivers;
USB sound devices; (CVE-2025-40005, CVE-2025-71229, CVE-2025-71231, CVE-2025-71232, CVE-2025-71233, CVE-2025-71235, CVE-2025-71236, CVE-2025-71237, CVE-2025-71238, CVE-2025-71239, CVE-2025-71265, CVE-2025-71266, CVE-2025-71267, CVE-2025-71272, CVE-2025-71273, CVE-2025-71274, CVE-2025-71286, CVE-2025-71291, CVE-2025-71292, CVE-2025-71294, CVE-2025-71295, CVE-2025-71297, CVE-2025-71304, CVE-2025-71305, CVE-2026-23100, CVE-2026-23169, CVE-2026-23220, CVE-2026-23221, CVE-2026-23222, CVE-2026-23228, CVE-2026-23229, CVE-2026-23230, CVE-2026-23233, CVE-2026-23234, CVE-2026-23235, CVE-2026-23236, CVE-2026-23237, CVE-2026-23238, CVE-2026-23241, CVE-2026-23242, CVE-2026-23243, CVE-2026-23249, CVE-2026-23266, CVE-2026-23267, CVE-2026-23272, CVE-2026-23278, CVE-2026-23392, CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402, CVE-2026-31411, CVE-2026-31418, CVE-2026-31436, CVE-2026-31448, CVE-2026-31478, CVE-2026-31607,…

Record: USN-8492-4
Updated: 2026-11-06

OSVUSN-8492-5 No score

linux-azure-fips, linux-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
ATM drivers;
RNBD block device driver;
Ublk userspace block driver;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
CPU idle management framework;
Hardware crypto device drivers;
DMA engine subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Broadcom VK accelerator driver;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
RapidIO drivers;
RAS (Reliability, Availability, Serviceability) subsystem;
Remote Processor subsystem;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
MediaTek SoC drivers;
Texas Instruments SoC drivers;
SPI subsystem;
Greybus lights staging drivers;
Realtek RTL8723BS SDIO drivers;
UFS subsystem;
ChipIdea USB driver;
DesignWare USB3 driver;
USB over IP driver;
vDPA drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
BTRFS file system;
File systems infrastructure;
Ceph distributed file system;
Ext4 file system;
F2FS file system;
FAT file system;
GFS2 file system;
HFS+ file system;
JFS file system;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
OCFS2 file system;
Proc file system;
Pstore file system;
Diskquota system;
SMB network file system;
XFS file system;
Audit subsystem;
Memory Management;
IPv6 networking;
Netfilter;
Tracing infrastructure;
Kernel kexec() syscall;
RCU subsystem;
Scheduler infrastructure;
Scatterlist API;
9P file system network protocol;
Asynchronous Transfer Mode (ATM) subsystem;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Ceph Core library;
Networking core;
IPv4 networking;
KCM (Kernel Connection Multiplexor) sockets driver;
Multipath TCP;
NFC subsystem;
RDS protocol;
RxRPC session sockets;
Network traffic control;
SMC sockets;
Sun RPC protocol;
X.25 network layer;
XFRM subsystem;
AppArmor security module;
Simplified Mandatory Access Control Kernel framework;
SOF drivers;
USB sound devices; (CVE-2025-40005, CVE-2025-71229, CVE-2025-71231, CVE-2025-71232, CVE-2025-71233, CVE-2025-71235, CVE-2025-71236, CVE-2025-71237, CVE-2025-71238, CVE-2025-71239, CVE-2025-71265, CVE-2025-71266, CVE-2025-71267, CVE-2025-71272, CVE-2025-71273, CVE-2025-71274, CVE-2025-71286, CVE-2025-71291, CVE-2025-71292, CVE-2025-71294, CVE-2025-71295, CVE-2025-71297, CVE-2025-71304, CVE-2025-71305, CVE-2026-23100, CVE-2026-23169, CVE-2026-23220, CVE-2026-23221, CVE-2026-23222, CVE-2026-23228, CVE-2026-23229, CVE-2026-23230, CVE-2026-23233, CVE-2026-23234, CVE-2026-23235, CVE-2026-23236, CVE-2026-23237, CVE-2026-23238, CVE-2026-23241, CVE-2026-23242, CVE-2026-23243, CVE-2026-23249, CVE-2026-23266, CVE-2026-23267, CVE-2026-23272, CVE-2026-23278, CVE-2026-23392, CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402, CVE-2026-31411, CVE-2026-31418, CVE-2026-31436, CVE-2026-31448, CVE-2026-31478, CVE-2026-31607,…

Record: USN-8492-5
Updated: 2026-11-06

OSVUSN-8497-1 No score

linux-lowlatency, linux-lowlatency-hwe-6.8 vulnerabilities

It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43284, CVE-2026-43500, CVE-2026-45998, CVE-2026-46000)

It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43503, CVE-2026-46300)

Qualys discovered that a race condition existed in the ptrace subsystem of the Linux kernel when privileged processes are exiting. An unprivileged local attacker could use this issue to expose sensitive information. (CVE-2026-46333)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contain a memory leak when handling AppArmor notifications. A local attacker could use this to cause resource exhaustion. (CVE-2026-47326)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contain a NULL pointer dereference when handling AppArmor notifications. A local attacker could use this to cause a kernel oops. (CVE-2026-47327)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained an invalid free when handling AppArmor notifications. A local attacker could use this to corrupt kernel memory. (CVE-2026-47328)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained insufficient validation of AppArmor notification responses. A local attacker could use this to allow crafted responses to be processed. (CVE-2026-47329)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 used an uninitialized variable when handling AppArmor notifications. A local attacker could use this to cause incorrect caching of data. (CVE-2026-47330)

Tristan Madani discovered that Ubuntu Linux kernel 6.8 contained a use- after-free (UAF) bug. A local attacker could use this to cause memory corruption and, theoretically, arbitrary code execution. (CVE-2026-47331)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained an out-of-bounds (OOB) read when handling AppArmor notifications. A local attacker could use this to cause information disclosure of kernel memory. (CVE-2026-47332)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained a out-of-bounds (OOB) read when handling AppArmor notifications. A local attacker could use this to cause kernel memory corruption and, theoretically, influence processing of AppArmor policies. (CVE-2026-47333)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained incorrect holding of locks when handling AppArmor notifications. A local attacker could use this to cause a kernel panic or deadlock. (CVE-2026-47334)

Tristan Madani discovered that Ubuntu Linux kernel 6.8 contained a NULL pointer dereference when handling AppArmor notifications. A local attacker could use this to cause a kernel panic. (CVE-2026-47335)

Tristan Madani discovered that Ubuntu Linux kernel 6.8 used an uninitialized variable when handling AppArmor AF_INET/AF_INET6 socket mediation. A local attacker could use this to influence processing of fine- grained network socket mediation. (CVE-2026-47336)

Tristan Madani and Trevor Lawrence have each independently discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained a NULL pointer dereference when handling AppArmor network socket mediation. A local attacker could use this to cause a kernel oops. (CVE-2026-47337)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture; …

Record: USN-8497-1
Updated: 2026-11-07

OSVUSN-8498-1 No score

linux-nvidia-tegra vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
ATM drivers;
RNBD block device driver;
Ublk userspace block driver;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
CPU idle management framework;
Hardware crypto device drivers;
DMA engine subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Broadcom VK accelerator driver;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
RapidIO drivers;
RAS (Reliability, Availability, Serviceability) subsystem;
Remote Processor subsystem;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
MediaTek SoC drivers;
Texas Instruments SoC drivers;
SPI subsystem;
Greybus lights staging drivers;
Realtek RTL8723BS SDIO drivers;
UFS subsystem;
ChipIdea USB driver;
DesignWare USB3 driver;
USB over IP driver;
vDPA drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
BTRFS file system;
File systems infrastructure;
Ceph distributed file system;
Ext4 file system;
F2FS file system;
FAT file system;
GFS2 file system;
HFS+ file system;
JFS file system;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
OCFS2 file system;
Proc file system;
Pstore file system;
Diskquota system;
SMB network file system;
XFS file system;
Audit subsystem;
Memory Management;
IPv6 networking;
Netfilter;
Tracing infrastructure;
Kernel kexec() syscall;
RCU subsystem;
Scheduler infrastructure;
Scatterlist API;
9P file system network protocol;
Asynchronous Transfer Mode (ATM) subsystem;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Ceph Core library;
Networking core;
IPv4 networking;
KCM (Kernel Connection Multiplexor) sockets driver;
Multipath TCP;
NFC subsystem;
RDS protocol;
RxRPC session sockets;
Network traffic control;
SMC sockets;
Sun RPC protocol;
X.25 network layer;
XFRM subsystem;
AppArmor security module;
Simplified Mandatory Access Control Kernel framework;
SOF drivers;
USB sound devices; (CVE-2025-40005, CVE-2025-71229, CVE-2025-71231, CVE-2025-71232, CVE-2025-71235, CVE-2025-71236, CVE-2025-71237, CVE-2025-71238, CVE-2025-71239, CVE-2025-71265, CVE-2025-71266, CVE-2025-71267, CVE-2025-71272, CVE-2025-71273, CVE-2025-71274, CVE-2025-71286, CVE-2025-71291, CVE-2025-71292, CVE-2025-71294, CVE-2025-71295, CVE-2025-71297, CVE-2025-71304, CVE-2025-71305, CVE-2026-23100, CVE-2026-23169, CVE-2026-23220, CVE-2026-23221, CVE-2026-23222, CVE-2026-23228, CVE-2026-23229, CVE-2026-23230, CVE-2026-23233, CVE-2026-23234, CVE-2026-23235, CVE-2026-23236, CVE-2026-23237, CVE-2026-23238, CVE-2026-23241, CVE-2026-23242, CVE-2026-23243, CVE-2026-23249, CVE-2026-23266, CVE-2026-23267, CVE-2026-23272, CVE-2026-23278, CVE-2026-23392, CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402, CVE-2026-31411, CVE-2026-31418, CVE-2026-31436, CVE-2026-31448, CVE-2026-31478, CVE-2026-31607, CVE-2026-31637,…

Record: USN-8498-1
Updated: 2026-11-06

OSVUSN-8499-1 No score

linux-xilinx vulnerabilities

It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-31431)

Record: USN-8499-1
Updated: 2026-11-07

OSVUSN-8606-1 No score

linux-azure, linux-azure-6.8 vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
Power management core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
RNBD block device driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
Data acquisition framework and drivers;
Counter interface drivers;
CPU frequency scaling framework;
CPU idle management framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
DMA engine subsystem;
EDAC drivers;
EFI core;
GPIO subsystem;
GPU drivers;
Greybus drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
IIO subsystem;
IIO ADC drivers;
InfiniBand drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
MediaTek SMI driver;
NVIDIA Tegra memory controller driver;
Multifunction device drivers;
Broadcom VK accelerator driver;
Fastrpc Driver;
IBM Advanced System Management driver;
MMC subsystem;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Ethernet team driver;
MediaTek network drivers;
Near Field Communication (NFC) drivers;
NTB driver;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
Device tree and open firmware driver;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
Broadcom BCM2835 power domain driver;
Generic PM domains;
i.MX PM domains;
Power supply drivers;
RapidIO drivers;
RAS (Reliability, Availability, Serviceability) subsystem;
Remote Processor subsystem;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
SLIMbus drivers;
Freescale SoC drivers;
MediaTek SoC drivers;
Microchip PolarFire SoC system controller driver;
Texas Instruments SoC drivers;
SPI subsystem;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
SM750 framebuffer staging driver;
TCM subsystem;
Thermal drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
ULPI bus;
USB core drivers;
DesignWare…

Record: USN-8606-1
Updated: 2026-11-07

OSVUSN-8607-1 No score

linux-azure-fde vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
Power management core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
RNBD block device driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
Data acquisition framework and drivers;
Counter interface drivers;
CPU frequency scaling framework;
CPU idle management framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
DMA engine subsystem;
EDAC drivers;
EFI core;
GPIO subsystem;
GPU drivers;
Greybus drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
IIO subsystem;
IIO ADC drivers;
InfiniBand drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
MediaTek SMI driver;
NVIDIA Tegra memory controller driver;
Multifunction device drivers;
Broadcom VK accelerator driver;
Fastrpc Driver;
IBM Advanced System Management driver;
MMC subsystem;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Ethernet team driver;
MediaTek network drivers;
Near Field Communication (NFC) drivers;
NTB driver;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
Device tree and open firmware driver;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
Broadcom BCM2835 power domain driver;
Generic PM domains;
i.MX PM domains;
Power supply drivers;
RapidIO drivers;
RAS (Reliability, Availability, Serviceability) subsystem;
Remote Processor subsystem;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
SLIMbus drivers;
Freescale SoC drivers;
MediaTek SoC drivers;
Microchip PolarFire SoC system controller driver;
Texas Instruments SoC drivers;
SPI subsystem;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
SM750 framebuffer staging driver;
TCM subsystem;
Thermal drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
ULPI bus;
USB core drivers;
DesignWare…

Record: USN-8607-1
Updated: 2026-11-07

OSVUSN-8609-1 No score

linux-azure-fde-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
Power management core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
RNBD block device driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
Data acquisition framework and drivers;
Counter interface drivers;
CPU frequency scaling framework;
CPU idle management framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
DMA engine subsystem;
EDAC drivers;
EFI core;
GPIO subsystem;
GPU drivers;
Greybus drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
IIO subsystem;
IIO ADC drivers;
InfiniBand drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
MediaTek SMI driver;
NVIDIA Tegra memory controller driver;
Multifunction device drivers;
Broadcom VK accelerator driver;
Fastrpc Driver;
IBM Advanced System Management driver;
MMC subsystem;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Ethernet team driver;
MediaTek network drivers;
Near Field Communication (NFC) drivers;
NTB driver;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
Device tree and open firmware driver;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
Broadcom BCM2835 power domain driver;
Generic PM domains;
i.MX PM domains;
Power supply drivers;
RapidIO drivers;
RAS (Reliability, Availability, Serviceability) subsystem;
Remote Processor subsystem;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
SLIMbus drivers;
Freescale SoC drivers;
MediaTek SoC drivers;
Microchip PolarFire SoC system controller driver;
Texas Instruments SoC drivers;
SPI subsystem;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
SM750 framebuffer staging driver;
TCM subsystem;
Thermal drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
ULPI bus;
USB core drivers;
DesignWare…

Record: USN-8609-1
Updated: 2026-11-07

OSVUSN-8619-1 No score

linux-hwe-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
Power management core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
RNBD block device driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
Data acquisition framework and drivers;
Counter interface drivers;
CPU frequency scaling framework;
CPU idle management framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
DMA engine subsystem;
EDAC drivers;
EFI core;
GPIO subsystem;
GPU drivers;
Greybus drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
IIO subsystem;
IIO ADC drivers;
InfiniBand drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
MediaTek SMI driver;
NVIDIA Tegra memory controller driver;
Multifunction device drivers;
Broadcom VK accelerator driver;
Fastrpc Driver;
IBM Advanced System Management driver;
MMC subsystem;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Ethernet team driver;
MediaTek network drivers;
Near Field Communication (NFC) drivers;
NTB driver;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
Device tree and open firmware driver;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
Broadcom BCM2835 power domain driver;
Generic PM domains;
i.MX PM domains;
Power supply drivers;
RapidIO drivers;
RAS (Reliability, Availability, Serviceability) subsystem;
Remote Processor subsystem;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
SLIMbus drivers;
Freescale SoC drivers;
MediaTek SoC drivers;
Microchip PolarFire SoC system controller driver;
Texas Instruments SoC drivers;
SPI subsystem;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
SM750 framebuffer staging driver;
TCM subsystem;
Thermal drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
ULPI bus;
USB core drivers;
DesignWare…

Record: USN-8619-1
Updated: 2026-11-07

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`kernel` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-64k` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-64k-core` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-64k-debug` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-64k-debug-core` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-64k-debug-devel` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-64k-debug-devel-matched` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-64k-debug-modules` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-64k-debug-modules-core` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-64k-debug-modules-extra` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-64k-devel` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-64k-devel-matched` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-64k-modules` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-64k-modules-core` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-64k-modules-extra` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-abi-stablelists` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-core` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-cross-headers` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-debug` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-debug-core` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-debug-devel` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-debug-devel-matched` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-debug-modules` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-debug-modules-core` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-debug-modules-extra` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-debug-uki-virt` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-devel` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-devel-matched` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-doc` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-headers` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-modules` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-modules-core` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-modules-extra` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-rt` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-rt-64k` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-rt-64k-core` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-rt-64k-debug` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-rt-64k-debug-core` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-rt-64k-debug-devel` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-rt-64k-debug-modules` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-rt-64k-debug-modules-core` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-rt-64k-debug-modules-extra` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-rt-64k-devel` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-rt-64k-modules` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-rt-64k-modules-core` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-rt-64k-modules-extra` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-rt-core` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-rt-debug` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-rt-debug-core` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-rt-debug-devel` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-rt-debug-modules` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-rt-debug-modules-core` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-rt-debug-modules-extra` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-rt-devel` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-rt-modules` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-rt-modules-core` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-rt-modules-extra` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-tools` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-tools-libs` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-tools-libs-devel` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-uki-virt` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-uki-virt-addons` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-zfcpdump` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-zfcpdump-core` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-zfcpdump-devel` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-zfcpdump-devel-matched` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-zfcpdump-modules` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-zfcpdump-modules-core` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel-zfcpdump-modules-extra` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`libperf` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`perf` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`python3-perf` AlmaLinux:9 From an advisory covering 7 CVEs	before 5.14.0-687.48.1.el9_8	5.14.0-687.48.1.el9_8
`kernel` Azure Linux:3	through 6.6.161.1-1	None known
`linux-lts` Alpaquita:23	6.1.189-r0 up to 6.1.191-r0	6.1.191-r0
`linux-lts` Alpaquita:25	6.12.74-r0 up to 6.12.80-r0	6.12.80-r0
`linux-lts` Alpaquita:stream	6.12.92-r1 up to 6.18.35-r1	6.18.35-r1
`Kernel` Linux	5.19.0 up to 6.1.191, 6.2.0 up to 6.6.160, 6.7.0 up to 6.12.75, 6.13.0 up to 6.18.16, 6.19.0 up to 6.19.6	6.1.1916.6.1606.12.756.18.166.19.6
`linux` Debian:12	All versions, plus listed versions 6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1 Show 45 moreShow less 6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.170-16.1.170-26.1.170-36.1.172-16.1.174-16.1.176-16.1.177-16.1.180-16.1.187-16.1.190-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+1	None known
`linux` Debian:13	before 6.12.85-1, plus listed versions 6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-1 Show 12 moreShow less 6.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-1~bpo12+1	6.12.85-1
`linux` Debian:14	before 6.19.6-1, plus listed versions 6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1 Show 45 moreShow less 6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1	6.19.6-1
`kernel` openEuler:24.03-LTS-SP1 From an advisory covering 37 CVEs	before 6.6.0-145.1.15.153.oe2403sp1	6.6.0-145.1.15.153.oe2403sp1
`kernel` openEuler:24.03-LTS-SP3 From an advisory covering 46 CVEs	before 6.6.0-145.3.15.146.oe2403sp3	6.6.0-145.3.15.146.oe2403sp3
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-64k-debug-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-64k-debug-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-64k-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-64k-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-debug-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-debug-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-doc` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-rt-64k-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-rt-64k-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-rt-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-tools-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-zfcpdump-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`libperf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`perf` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`perf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`python3-perf` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`python3-perf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`rtla` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`rv` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel` Red Hat:enterprise_linux:9::baseos From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-64k` Red Hat:enterprise_linux:9::baseos From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-64k-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-64k-debug` Red Hat:enterprise_linux:9::baseos From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-64k-debug-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-64k-debug-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-64k-debug-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-64k-debug-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-64k-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-64k-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-64k-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-abi-stablelists` Red Hat:enterprise_linux:9::baseos From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-debug` Red Hat:enterprise_linux:9::baseos From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-debug-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-debug-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-debug-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-debug-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-debug-uki-virt` Red Hat:enterprise_linux:9::baseos From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:9::baseos From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:9::baseos From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:9::baseos From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:9::baseos From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-rt-64k-debug-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-rt-64k-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-rt-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-tools` Red Hat:enterprise_linux:9::baseos From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-tools-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-tools-libs` Red Hat:enterprise_linux:9::baseos From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-uki-virt` Red Hat:enterprise_linux:9::baseos From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel-uki-virt-addons` Red Hat:enterprise_linux:9::baseos From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel` Rocky Linux:9 From an advisory covering 7 CVEs	before 0:5.14.0-687.48.1.el9_8	0:5.14.0-687.48.1.el9_8
`kernel` Rocky Linux:10 From an advisory covering 25 CVEs	before 0:6.12.0-211.55.1.el10_2	0:6.12.0-211.55.1.el10_2
`linux` Root:Debian:12	before 6.1.190-1.aikido.167	6.1.190-1.aikido.167
`rootio-linux` Root:Debian:12	before 6.1.190-1.aikido.167	6.1.190-1.aikido.167
`linux` Root:Ubuntu:24.04	before 6.8.0-149.149.aikido.91	6.8.0-149.149.aikido.91
`rootio-linux` Root:Ubuntu:24.04	before 6.8.0-149.149.aikido.91	6.8.0-149.149.aikido.91
`kernel-obs-build` SUSE:Linux Micro Extras 6.2 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-syms` SUSE:Linux Micro Extras 6.2 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-64kb` SUSE:Linux Micro 6.2 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-default` SUSE:Linux Micro 6.2 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-default-base` SUSE:Linux Micro 6.2 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1.160000.2.17	6.12.0-160000.36.1.160000.2.17
`kernel-rt` SUSE:Linux Micro 6.2 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-source` SUSE:Linux Micro 6.2 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-rt` SUSE:Linux Micro 6.0 From an advisory covering 87 CVEs	before 6.4.0-50.1	6.4.0-50.1
`kernel-source-rt` SUSE:Linux Micro 6.0 From an advisory covering 87 CVEs	before 6.4.0-50.2	6.4.0-50.2
`kernel-default` SUSE:Linux Micro 6.0 From an advisory covering 87 CVEs	before 6.4.0-50.1	6.4.0-50.1
`kernel-kvmsmall` SUSE:Linux Micro 6.0 From an advisory covering 87 CVEs	before 6.4.0-50.1	6.4.0-50.1
`kernel-source` SUSE:Linux Micro 6.0 From an advisory covering 87 CVEs	before 6.4.0-50.2	6.4.0-50.2
`kernel-default` SUSE:Linux Enterprise High Availability Extension 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-64kb` SUSE:Linux Enterprise Server 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-azure` SUSE:Linux Enterprise Server 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-default` SUSE:Linux Enterprise Server 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-default-base` SUSE:Linux Enterprise Server 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1.160000.2.17	6.12.0-160000.36.1.160000.2.17
`kernel-docs` SUSE:Linux Enterprise Server 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-kvmsmall` SUSE:Linux Enterprise Server 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-obs-qa` SUSE:Linux Enterprise Server 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-source` SUSE:Linux Enterprise Server 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-syms` SUSE:Linux Enterprise Server 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-64kb` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-azure` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-default` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-default-base` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1.160000.2.17	6.12.0-160000.36.1.160000.2.17
`kernel-docs` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-kvmsmall` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-obs-qa` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-source` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-rt` SUSE:Linux Micro 6.1 From an advisory covering 87 CVEs	before 6.4.0-50.1	6.4.0-50.1
`kernel-source-rt` SUSE:Linux Micro 6.1 From an advisory covering 87 CVEs	before 6.4.0-50.2	6.4.0-50.2
`kernel-default` SUSE:Linux Micro 6.1 From an advisory covering 87 CVEs	before 6.4.0-50.1	6.4.0-50.1
`kernel-kvmsmall` SUSE:Linux Micro 6.1 From an advisory covering 87 CVEs	before 6.4.0-50.1	6.4.0-50.1
`kernel-source` SUSE:Linux Micro 6.1 From an advisory covering 87 CVEs	before 6.4.0-50.2	6.4.0-50.2
`kernel-livepatch-SLE15-SP7-RT_Update_18` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 513 CVEs	before 1-150700.1.5.1	1-150700.1.5.1
`kernel-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 513 CVEs	before 6.4.0-150700.7.67.1	6.4.0-150700.7.67.1
`kernel-source-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 513 CVEs	before 6.4.0-150700.7.67.1	6.4.0-150700.7.67.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 513 CVEs	before 6.4.0-150700.7.67.1	6.4.0-150700.7.67.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 513 CVEs	before 6.4.0-150700.53.73.2	6.4.0-150700.53.73.2
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 513 CVEs	before 6.4.0-150700.53.73.2	6.4.0-150700.53.73.2
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 513 CVEs	before 6.4.0-150700.53.73.2.150700.17.41.4	6.4.0-150700.53.73.2.150700.17.41.4
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 513 CVEs	before 6.4.0-150700.53.73.1	6.4.0-150700.53.73.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 513 CVEs	before 6.4.0-150700.53.73.2	6.4.0-150700.53.73.2
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 513 CVEs	before 6.4.0-150700.53.73.1	6.4.0-150700.53.73.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 513 CVEs	before 6.4.0-150700.53.73.2	6.4.0-150700.53.73.2
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 513 CVEs	before 6.4.0-150700.53.73.1	6.4.0-150700.53.73.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 513 CVEs	before 6.4.0-150700.53.73.1	6.4.0-150700.53.73.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP7 From an advisory covering 513 CVEs	before 6.4.0-150700.53.73.2	6.4.0-150700.53.73.2
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 513 CVEs	before 6.4.0-150700.53.73.2	6.4.0-150700.53.73.2
`kernel-livepatch-SLE15-SP7_Update_19` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 513 CVEs	before 1-150700.15.3.4	1-150700.15.3.4
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7 From an advisory covering 513 CVEs	before 6.4.0-150700.53.73.2	6.4.0-150700.53.73.2
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP7 From an advisory covering 513 CVEs	before 6.4.0-150700.53.73.2	6.4.0-150700.53.73.2
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP7 From an advisory covering 513 CVEs	before 6.4.0-150700.53.73.2	6.4.0-150700.53.73.2
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-aws-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-aws-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less 5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1	None known
`linux-aws-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1	None known
`linux-azure-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less 5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2	None known
`linux-azure-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less 5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1	None known
`linux-azure-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1	None known
`linux-azure-fde` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less 5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1	None known
`linux-gcp-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less 5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3	None known
`linux-gcp-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less 5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1	None known
`linux-gcp-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41	None known
`linux-gke` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less 5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111	None known
`linux-gke-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less 5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1	None known
`linux-gkeop` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less 5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77	None known
`linux-gkeop-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 40 moreShow less 5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1	None known
`linux-hwe-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less 5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1	None known
`linux-hwe-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less 5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1	None known
`linux-hwe-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less 5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1	None known
`linux-intel-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19	None known
`linux-oem-5.10` Ubuntu:20.04:LTS	All versions, plus listed versions 5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17 Show 21 moreShow less 5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61	None known
`linux-oem-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21 Show 7 moreShow less 5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36	None known
`linux-oem-5.14` Ubuntu:20.04:LTS	All versions, plus listed versions 5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10 Show 30 moreShow less 5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67	None known
`linux-oem-5.6` Ubuntu:20.04:LTS	All versions, plus listed versions 5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13 Show 24 moreShow less 5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60	None known
`linux-oracle-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-oracle-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1 Show 7 moreShow less 5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1	None known
`linux-oracle-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1	None known
`linux-raspi2` Ubuntu:20.04:LTS	All versions, plus listed versions 5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6	None known
`linux-riscv` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34 Show 7 moreShow less 5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45	None known
`linux-riscv-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1 Show 8 moreShow less 5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35	None known
`linux-riscv-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1 Show 5 moreShow less 5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1	None known
`linux-allwinner-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1	None known
`linux-aws-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1 Show 5 moreShow less 5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1	None known
`linux-aws-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 9 moreShow less 6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1	None known
`linux-aws-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1 Show 9 moreShow less 6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1	None known
`linux-aws-6.8` Ubuntu:22.04:LTS	before 6.8.0-1060.63~22.04.1, plus listed versions 6.8.0-1009.9~22.04.26.8.0-1010.10~22.04.26.8.0-1011.12~22.04.16.8.0-1013.14~22.04.16.8.0-1014.15~22.04.1 Show 33 moreShow less 6.8.0-1015.16~22.04.16.8.0-1016.17~22.04.26.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1023.25~22.04.16.8.0-1024.26~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1035.37~22.04.16.8.0-1036.38~22.04.16.8.0-1039.41~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.44~22.04.16.8.0-1043.45~22.04.16.8.0-1044.46~22.04.16.8.0-1045.47~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.16.8.0-1050.53~22.04.16.8.0-1051.54~22.04.16.8.0-1052.55~22.04.16.8.0-1053.56~22.04.16.8.0-1055.58~22.04.16.8.0-1057.60~22.04.1	6.8.0-1060.63~22.04.1
`linux-azure-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2	None known
`linux-azure-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 8 moreShow less 6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1	None known
`linux-azure-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1 Show 9 moreShow less 6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1	None known
`linux-azure-6.8` Ubuntu:22.04:LTS	before 6.8.0-1063.71~22.04.1, plus listed versions 6.8.0-1008.8~22.04.16.8.0-1009.9~22.04.16.8.0-1010.10~22.04.16.8.0-1012.14~22.04.16.8.0-1013.15~22.04.1 Show 22 moreShow less 6.8.0-1014.16~22.04.16.8.0-1015.17~22.04.26.8.0-1017.20~22.04.16.8.0-1018.21~22.04.16.8.0-1020.23~22.04.16.8.0-1021.25~22.04.16.8.0-1025.30~22.04.16.8.0-1026.31~22.04.16.8.0-1027.32~22.04.16.8.0-1028.33~22.04.16.8.0-1029.34~22.04.16.8.0-1030.35~22.04.16.8.0-1031.36~22.04.16.8.0-1034.39~22.04.16.8.0-1036.42~22.04.16.8.0-1040.46~22.04.16.8.0-1041.47~22.04.16.8.0-1044.50~22.04.16.8.0-1051.57~22.04.16.8.0-1052.58~22.04.16.8.0-1059.65~22.04.16.8.0-1062.69~22.04.1	6.8.0-1063.71~22.04.1
`linux-azure-fde-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1	None known
`linux-azure-fde-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1 Show 5 moreShow less 6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1	None known
`linux-azure-fde-6.8` Ubuntu:22.04:LTS	before 6.8.0-1062.69~22.04.1, plus listed versions 6.8.0-1041.48~22.04.16.8.0-1042.49~22.04.16.8.0-1044.51~22.04.16.8.0-1046.53~22.04.16.8.0-1053.60~22.04.16.8.0-1058.65~22.04.16.8.0-1061.68~22.04.1	6.8.0-1062.69~22.04.1
`linux-gcp-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1020.22~22.04.25.19.0-1021.23~22.04.15.19.0-1022.24~22.04.15.19.0-1024.26~22.04.15.19.0-1025.27~22.04.15.19.0-1026.28~22.04.15.19.0-1027.29~22.04.15.19.0-1030.32~22.04.1	None known
`linux-gcp-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1009.9~22.04.36.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1011.11~22.04.36.2.0-1012.12~22.04.1 Show 7 moreShow less 6.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1016.18~22.04.16.2.0-1017.19~22.04.16.2.0-1018.20~22.04.16.2.0-1019.21~22.04.16.2.0-1021.23~22.04.1	None known
`linux-gcp-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1010.10~22.04.36.5.0-1011.11~22.04.16.5.0-1013.13~22.04.16.5.0-1014.14~22.04.16.5.0-1015.15~22.04.1 Show 8 moreShow less 6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1022.24~22.04.16.5.0-1023.25~22.04.16.5.0-1024.26~22.04.16.5.0-1025.27~22.04.1	None known
`linux-gcp-6.8` Ubuntu:22.04:LTS	before 6.8.0-1063.69~22.04.1, plus listed versions 6.8.0-1010.11~22.04.16.8.0-1011.12~22.04.16.8.0-1012.13~22.04.16.8.0-1013.14~22.04.16.8.0-1014.16~22.04.1 Show 34 moreShow less 6.8.0-1015.17~22.04.16.8.0-1016.18~22.04.16.8.0-1017.19~22.04.16.8.0-1018.20~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1024.26~22.04.16.8.0-1025.27~22.04.16.8.0-1026.28~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1034.36~22.04.26.8.0-1036.38~22.04.16.8.0-1037.39~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.45~22.04.16.8.0-1043.46~22.04.16.8.0-1044.47~22.04.16.8.0-1045.48~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.26.8.0-1048.51~22.04.16.8.0-1052.55~22.04.16.8.0-1053.56~22.04.16.8.0-1054.57~22.04.16.8.0-1058.61~22.04.16.8.0-1060.63~22.04.1	6.8.0-1063.69~22.04.1
`linux-hwe-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-28.29~22.04.15.19.0-32.33~22.04.15.19.0-35.36~22.04.15.19.0-38.39~22.04.15.19.0-40.41~22.04.1 Show 6 moreShow less 5.19.0-41.42~22.04.15.19.0-42.43~22.04.15.19.0-43.44~22.04.15.19.0-45.46~22.04.15.19.0-46.47~22.04.15.19.0-50.50	None known
`linux-hwe-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-25.25~22.04.26.2.0-26.26~22.04.16.2.0-31.31~22.04.16.2.0-32.32~22.04.16.2.0-33.33~22.04.1 Show 5 moreShow less 6.2.0-34.34~22.04.16.2.0-35.35~22.04.16.2.0-36.37~22.04.16.2.0-37.38~22.04.16.2.0-39.40~22.04.1	None known
`linux-hwe-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-14.14~22.04.16.5.0-15.15~22.04.16.5.0-17.17~22.04.16.5.0-18.18~22.04.16.5.0-21.21~22.04.1 Show 8 moreShow less 6.5.0-25.25~22.04.16.5.0-26.26~22.04.16.5.0-27.28~22.04.16.5.0-28.29~22.04.16.5.0-35.35~22.04.16.5.0-41.41~22.04.26.5.0-44.44~22.04.16.5.0-45.45~22.04.1	None known
`linux-hwe-6.8` Ubuntu:22.04:LTS	before 6.8.0-136.136~22.04.1, plus listed versions 6.8.0-38.38~22.04.16.8.0-39.39~22.04.16.8.0-40.40~22.04.36.8.0-45.45~22.04.16.8.0-47.47~22.04.1 Show 30 moreShow less 6.8.0-48.48~22.04.16.8.0-49.49~22.04.16.8.0-50.51~22.04.16.8.0-51.52~22.04.16.8.0-52.53~22.04.16.8.0-57.59~22.04.16.8.0-58.60~22.04.16.8.0-59.61~22.04.16.8.0-60.63~22.04.16.8.0-64.67~22.04.16.8.0-65.68~22.04.16.8.0-78.78~22.04.16.8.0-79.79~22.04.16.8.0-83.83~22.04.16.8.0-84.84~22.04.16.8.0-85.85~22.04.16.8.0-86.87~22.04.16.8.0-87.88~22.04.16.8.0-88.89~22.04.26.8.0-90.91~22.04.16.8.0-94.96~22.04.16.8.0-100.100~22.04.16.8.0-101.101~22.04.16.8.0-106.106~22.04.16.8.0-107.107~22.04.16.8.0-110.110~22.04.16.8.0-111.111~22.04.16.8.0-117.117~22.04.16.8.0-124.124~22.04.16.8.0-134.134~22.04.1	6.8.0-136.136~22.04.1
`linux-ibm-6.8` Ubuntu:22.04:LTS	before 6.8.0-1060.61~22.04.1, plus listed versions 6.8.0-1008.8~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.16.8.0-1013.13~22.04.1 Show 31 moreShow less 6.8.0-1014.14~22.04.16.8.0-1015.15~22.04.16.8.0-1016.16~22.04.16.8.0-1017.17~22.04.16.8.0-1018.18~22.04.16.8.0-1019.19~22.04.16.8.0-1023.23~22.04.16.8.0-1024.24~22.04.16.8.0-1025.25~22.04.16.8.0-1026.26~22.04.16.8.0-1027.27~22.04.16.8.0-1028.28~22.04.16.8.0-1029.29~22.04.16.8.0-1030.30~22.04.16.8.0-1033.33~22.04.16.8.0-1036.36~22.04.16.8.0-1037.37~22.04.16.8.0-1038.38~22.04.16.8.0-1039.39~22.04.16.8.0-1040.40~22.04.16.8.0-1041.41~22.04.16.8.0-1042.42~22.04.16.8.0-1043.43~22.04.16.8.0-1044.44~22.04.16.8.0-1045.45~22.04.16.8.0-1049.49~22.04.16.8.0-1050.50~22.04.16.8.0-1051.51~22.04.16.8.0-1052.52~22.04.16.8.0-1055.56~22.04.16.8.0-1057.58~22.04.1	6.8.0-1060.61~22.04.1
`linux-intel-iot-realtime` Ubuntu:22.04:LTS	All versions, plus listed versions 5.15.0-1073.75	None known
`linux-lowlatency-hwe-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.1 Show 5 moreShow less 5.19.0-1024.25~22.04.15.19.0-1025.26~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1030.30	None known
`linux-lowlatency-hwe-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1008.8~22.04.16.2.0-1009.9~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.1 Show 5 moreShow less 6.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1	None known
`linux-lowlatency-hwe-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-14.14.1~22.04.16.5.0-15.15.1.1~22.04.16.5.0-17.17.1.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.1 Show 8 moreShow less 6.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.16.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-41.41.1~22.04.16.5.0-42.42.1~22.04.16.5.0-44.44.1~22.04.16.5.0-45.45.1~22.04.1	None known
`linux-lowlatency-hwe-6.8` Ubuntu:22.04:LTS	before 6.8.0-134.134.1~22.04.1, plus listed versions 6.8.0-38.38.1~22.04.26.8.0-40.40.1~22.04.16.8.0-44.44.1~22.04.16.8.0-45.45.1~22.04.16.8.0-47.47.1~22.04.1 Show 33 moreShow less 6.8.0-48.48.3~22.04.16.8.0-49.49.1~22.04.16.8.0-50.51.1~22.04.16.8.0-51.52.1~22.04.16.8.0-52.53.1~22.04.16.8.0-54.56.1~22.04.16.8.0-55.57.1~22.04.16.8.0-56.58.1~22.04.16.8.0-57.59.1~22.04.16.8.0-58.60.1~22.04.16.8.0-59.61.1~22.04.16.8.0-60.63.1~22.04.16.8.0-62.65.1~22.04.16.8.0-63.66.1~22.04.16.8.0-64.67.1~22.04.16.8.0-65.68.1~22.04.16.8.0-78.78.1~22.04.16.8.0-79.79.1~22.04.16.8.0-83.83.1~22.04.16.8.0-84.84.1~22.04.16.8.0-85.85.1~22.04.16.8.0-86.87.1~22.04.16.8.0-87.88.1~22.04.16.8.0-88.89.1~22.04.16.8.0-90.91.1~22.04.16.8.0-94.96.1~22.04.16.8.0-100.100.1~22.04.16.8.0-101.101.1~22.04.16.8.0-106.106.1~22.04.16.8.0-107.107.1~22.04.16.8.0-110.110.1~22.04.16.8.0-111.111.1~22.04.16.8.0-117.117.1~22.04.1	6.8.0-134.134.1~22.04.1
`dtb-aarch64` openSUSE:Leap 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-64kb` openSUSE:Leap 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-azure` openSUSE:Leap 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-default` openSUSE:Leap 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-default-base` openSUSE:Leap 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1.160000.2.17	6.12.0-160000.36.1.160000.2.17
`kernel-docs` openSUSE:Leap 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-kvmsmall` openSUSE:Leap 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-obs-build` openSUSE:Leap 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-obs-qa` openSUSE:Leap 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-rt` openSUSE:Leap 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-source` openSUSE:Leap 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-syms` openSUSE:Leap 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-zfcpdump` openSUSE:Leap 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1

History

History
Recorded	Changed	Sources
Nov 11, 2026	affected	OSV
Nov 6, 2026	affected	OSV
Nov 6, 2026	affected	OSV
Nov 5, 2026	affected	OSV
Nov 4, 2026	affected	OSV
Nov 3, 2026	facts	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-43248 is a high vulnerability (CVSS 7.8) in Linux, published May 6, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.16%, the 5th percentile. Fixed in linux-lts 6.1.191-r0.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 365 package rows, 418 versions, 2,955 references and the rest of 25 source descriptions. The JSON record has them.