Every CVE Search/ Get API key

CVE-2026-43501

ipv6: rpl: reserve mac_len headroom when recompressed SRH grows

9.8 CriticalPublic exploitFix available

In the Linux kernel, the following vulnerability has been resolved:

ipv6: rpl: reserve mac_len headroom when recompressed SRH grows

ipv6_rpl_srh_rcv() decompresses an RFC 6554 Source Routing Header, swaps the next segment into ipv6_hdr->daddr, recompresses, then pulls the old header and pushes the new one plus the IPv6 header back. The recompressed header can be larger than the received one when the swap reduces the common-prefix length the segments share with daddr (CmprI=0, CmprE>0, seg[0][0] != daddr[0] gives the maximum +8 bytes).

pskb_expand_head() was gated on segments_left == 0, so on earlier segments the push consumed unchecked headroom. Once skb_push() leaves fewer than skb->mac_len bytes in front of data, skb_mac_header_rebuild()'s call to:

skb_set_mac_header(skb, -skb->mac_len);

will store (data - head) - mac_len into the u16 mac_header field, which wraps to ~65530, and the following memmove() writes mac_len bytes ~64KiB past skb->head.

A single AF_INET6/SOCK_RAW/IPV6_HDRINCL packet over lo with a two segment type-3 SRH (CmprI=0, CmprE=15) reaches headroom 8 after one pass; KASAN reports a 14-byte OOB write in ipv6_rthdr_rcv.

Fix this by expanding the head whenever the remaining room is less than the push size plus mac_len, and request that much extra so the rebuilt MAC header fits afterwards.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.73%Up 0.7 points since May 22, 2026
90%50%10%1%

What each source reports

CVE List Score used 9.8

ipv6: rpl: reserve mac_len headroom when recompressed SRH grows

In the Linux kernel, the following vulnerability has been resolved:

ipv6: rpl: reserve mac_len headroom when recompressed SRH grows

ipv6_rpl_srh_rcv() decompresses an RFC 6554 Source Routing Header, swaps the next segment into ipv6_hdr->daddr, recompresses, then pulls the old header and pushes the new one plus the IPv6 header back. The recompressed header can be larger than the received one when the swap reduces the common-prefix length the segments share with daddr (CmprI=0, CmprE>0, seg[0][0] != daddr[0] gives the maximum +8 bytes).

pskb_expand_head() was gated on segments_left == 0, so on earlier segments the push consumed unchecked headroom. Once skb_push() leaves fewer than skb->mac_len bytes in front of data, skb_mac_header_rebuild()'s call to:

skb_set_mac_header(skb, -skb->mac_len);

will store (data - head) - mac_len into the u16 mac_header field, which wraps to ~65530, and the following memmove() writes mac_len bytes ~64KiB past skb->head.

A single AF_INET6/SOCK_RAW/IPV6_HDRINCL packet over lo with a two segment type-3 SRH (CmprI=0, CmprE=15) reaches headroom 8 after one pass; KASAN reports a 14-byte OOB write in ipv6_rthdr_rcv.

Fix this by expanding the head whenever the remaining room is less than the push size plus mac_len, and request that much extra so the rebuilt MAC header fits afterwards.

Record
CVE-2026-43501
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-131, CWE-787
Updated
2026-11-02
EUVDEUVD-2026-31276 9.8

In the Linux kernel, the following vulnerability has been resolved:

ipv6: rpl: reserve mac_len headroom when recompressed SRH grows

ipv6_rpl_srh_rcv() decompresses an RFC 6554 Source Routing Header, swaps the next segment into ipv6_hdr->daddr, recompresses, then pulls the old header and pushes the new one plus the IPv6 header back. The recompressed header can be larger than the received one when the swap reduces the common-prefix length the segments share with daddr (CmprI=0, CmprE>0, seg[0][0] != daddr[0] gives the maximum +8 bytes).

pskb_expand_head() was gated on segments_left == 0, so on earlier segments the push consumed unchecked headroom. Once skb_push() leaves fewer than skb->mac_len bytes in front of data, skb_mac_header_rebuild()'s call to:

skb_set_mac_header(skb, -skb->mac_len);

will store (data - head) - mac_len into the u16 mac_header field, which wraps to ~65530, and the following memmove() writes mac_len bytes ~64KiB past skb->head.

A single AF_INET6/SOCK_RAW/IPV6_HDRINCL packet over lo with a two segment type-3 SRH (CmprI=0, CmprE=15) reaches headroom 8 after one pass; KASAN reports a 14-byte OOB write in ipv6_rthdr_rcv.

Fix this by expanding the head whenever the remaining room is less than the push size plus mac_len, and request that much extra so the rebuilt MAC header fits afterwards.

Record
EUVD-2026-31276
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-fqx3-r8j8-73qq 9.8

In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: reserve mac_len...

In the Linux kernel, the following vulnerability has been resolved:

ipv6: rpl: reserve mac_len headroom when recompressed SRH grows

ipv6_rpl_srh_rcv() decompresses an RFC 6554 Source Routing Header, swaps the next segment into ipv6_hdr->daddr, recompresses, then pulls the old header and pushes the new one plus the IPv6 header back. The recompressed header can be larger than the received one when the swap reduces the common-prefix length the segments share with daddr (CmprI=0, CmprE>0, seg[0][0] != daddr[0] gives the maximum +8 bytes).

pskb_expand_head() was gated on segments_left == 0, so on earlier segments the push consumed unchecked headroom. Once skb_push() leaves fewer than skb->mac_len bytes in front of data, skb_mac_header_rebuild()'s call to:

skb_set_mac_header(skb, -skb->mac_len);

will store (data - head) - mac_len into the u16 mac_header field, which wraps to ~65530, and the following memmove() writes mac_len bytes ~64KiB past skb->head.

A single AF_INET6/SOCK_RAW/IPV6_HDRINCL packet over lo with a two segment type-3 SRH (CmprI=0, CmprE=15) reaches headroom 8 after one pass; KASAN reports a 14-byte OOB write in ipv6_rthdr_rcv.

Fix this by expanding the head whenever the remaining room is less than the push size plus mac_len, and request that much extra so the rebuilt MAC header fits afterwards.

Record
GHSA-fqx3-r8j8-73qq
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-131, CWE-787
Updated
2026-11-02
NVD 9.8

In the Linux kernel, the following vulnerability has been resolved:

ipv6: rpl: reserve mac_len headroom when recompressed SRH grows

ipv6_rpl_srh_rcv() decompresses an RFC 6554 Source Routing Header, swaps the next segment into ipv6_hdr->daddr, recompresses, then pulls the old header and pushes the new one plus the IPv6 header back. The recompressed header can be larger than the received one when the swap reduces the common-prefix length the segments share with daddr (CmprI=0, CmprE>0, seg[0][0] != daddr[0] gives the maximum +8 bytes).

pskb_expand_head() was gated on segments_left == 0, so on earlier segments the push consumed unchecked headroom. Once skb_push() leaves fewer than skb->mac_len bytes in front of data, skb_mac_header_rebuild()'s call to:

skb_set_mac_header(skb, -skb->mac_len);

will store (data - head) - mac_len into the u16 mac_header field, which wraps to ~65530, and the following memmove() writes mac_len bytes ~64KiB past skb->head.

A single AF_INET6/SOCK_RAW/IPV6_HDRINCL packet over lo with a two segment type-3 SRH (CmprI=0, CmprE=15) reaches headroom 8 after one pass; KASAN reports a 14-byte OOB write in ipv6_rthdr_rcv.

Fix this by expanding the head whenever the remaining room is less than the push size plus mac_len, and request that much extra so the rebuilt MAC header fits afterwards.

Record
CVE-2026-43501
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-787, CWE-131
Updated
2026-11-02
OSVBELL-CVE-2026-43501 9.8
Record
BELL-CVE-2026-43501
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 9.8

ipv6: rpl: reserve mac_len headroom when recompressed SRH grows

In the Linux kernel, the following vulnerability has been resolved:

ipv6: rpl: reserve mac_len headroom when recompressed SRH grows

ipv6_rpl_srh_rcv() decompresses an RFC 6554 Source Routing Header, swaps the next segment into ipv6_hdr->daddr, recompresses, then pulls the old header and pushes the new one plus the IPv6 header back. The recompressed header can be larger than the received one when the swap reduces the common-prefix length the segments share with daddr (CmprI=0, CmprE>0, seg[0][0] != daddr[0] gives the maximum +8 bytes).

pskb_expand_head() was gated on segments_left == 0, so on earlier segments the push consumed unchecked headroom. Once skb_push() leaves fewer than skb->mac_len bytes in front of data, skb_mac_header_rebuild()'s call to:

skb_set_mac_header(skb, -skb->mac_len);

will store (data - head) - mac_len into the u16 mac_header field, which wraps to ~65530, and the following memmove() writes mac_len bytes ~64KiB past skb->head.

A single AF_INET6/SOCK_RAW/IPV6_HDRINCL packet over lo with a two segment type-3 SRH (CmprI=0, CmprE=15) reaches headroom 8 after one pass; KASAN reports a 14-byte OOB write in ipv6_rthdr_rcv.

Fix this by expanding the head whenever the remaining room is less than the push size plus mac_len, and request that much extra so the rebuilt MAC header fits afterwards.

Record
CVE-2026-43501
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 48 moreShow less
OSVDEBIAN-CVE-2026-43501 9.8

In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows ipv6_rpl_srh_rcv() decompresses an RFC 6554 Source Routing Header, swaps the next segment into ipv6_hdr->daddr, recompresses, then pulls the old header and pushes the new one plus the IPv6 header back. The recompressed header can be larger than the received one when the swap reduces the common-prefix length the segments share with daddr (CmprI=0, CmprE>0, seg[0][0] != daddr[0] gives the maximum +8 bytes). pskb_expand_head() was gated on segments_left == 0, so on earlier segments the push consumed unchecked headroom. Once skb_push() leaves fewer than skb->mac_len bytes in front of data, skb_mac_header_rebuild()'s call to: skb_set_mac_header(skb, -skb->mac_len); will store (data - head) - mac_len into the u16 mac_header field, which wraps to ~65530, and the following memmove() writes mac_len bytes ~64KiB past skb->head. A single AF_INET6/SOCK_RAW/IPV6_HDRINCL packet over lo with a two segment type-3 SRH (CmprI=0, CmprE=15) reaches headroom 8 after one pass; KASAN reports a 14-byte OOB write in ipv6_rthdr_rcv. Fix this by expanding the head whenever the remaining room is less than the push size plus mac_len, and request that much extra so the rebuilt MAC header fits afterwards.

Record
DEBIAN-CVE-2026-43501
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:25191 8.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:25191
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:25217 8.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:25217
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:27713 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:27713
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:27731 8.7

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:27731
CVSS 3.1
8.7 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:33900 7.8

Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Record
RHSA-2026:33900
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:34094 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:34094
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:34095 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:34095
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:25191 8.8

Critical: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service (CVE-2026-31419)

  • kernel: Linux kernel: Denial of Service in erofs filesystem (CVE-2026-31467)

  • kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)

  • kernel: ALSA: 6fire: fix use-after-free on disconnect (CVE-2026-31581)

  • kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037)

  • kernel: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (CVE-2026-43501)

  • kernel: selinux: fix overlayfs mmap() and mprotect() access checks (CVE-2026-46054)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:25191
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:25217 8.8

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CVE-2026-23216)

  • kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service (CVE-2026-31419)

  • kernel: net: openvswitch: Avoid releasing netdev before teardown completes (CVE-2026-31508)

  • kernel: ALSA: 6fire: fix use-after-free on disconnect (CVE-2026-31581)

  • kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037)

  • kernel: net: mana: fix use-after-free in add_adev() error path (CVE-2026-43056)

  • kernel: netfilter: ctnetlink: ensure safe access to master conntrack (CVE-2026-43116)

  • kernel: dlm: validate length in dlm_search_rsb_tree (CVE-2026-43125)

  • kernel: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (CVE-2026-43501)

  • kernel: RDMA/rxe: Fix double free in rxe_srq_from_init (CVE-2026-45852)

  • kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (CVE-2026-46181)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:25217
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2026-43501 7.0

CVE-2026-43501 in linux - Patched by Root

Root has patched CVE-2026-43501 in the linux package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2026-43501
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2026-43501 7.0

CVE-2026-43501 in linux - Patched by Root

Root has patched CVE-2026-43501 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2026-43501
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-UBUNTU-2204-CVE-2026-43501 7.0

CVE-2026-43501 in linux - Patched by Root

Root has patched CVE-2026-43501 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2204-CVE-2026-43501
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVROOT-OS-UBUNTU-2404-CVE-2026-43501 7.0

CVE-2026-43501 in linux - Patched by Root

Root has patched CVE-2026-43501 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2404-CVE-2026-43501
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVRXSA-2026:25217 8.8

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CVE-2026-23216)

  • kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service (CVE-2026-31419)

  • kernel: net: openvswitch: Avoid releasing netdev before teardown completes (CVE-2026-31508)

  • kernel: ALSA: 6fire: fix use-after-free on disconnect (CVE-2026-31581)

  • kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037)

  • kernel: net: mana: fix use-after-free in add_adev() error path (CVE-2026-43056)

  • kernel: netfilter: ctnetlink: ensure safe access to master conntrack (CVE-2026-43116)

  • kernel: dlm: validate length in dlm_search_rsb_tree (CVE-2026-43125)

  • kernel: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (CVE-2026-43501)

  • kernel: RDMA/rxe: Fix double free in rxe_srq_from_init (CVE-2026-45852)

  • kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (CVE-2026-46181)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RXSA-2026:25217
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-43501 9.3

In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows ipv6_rpl_srh_rcv() decompresses an RFC 6554 Source Routing Header, swaps the next segment into ipv6_hdr->daddr, recompresses, then pulls the old header and pushes the new one plus the IPv6 header back. The recompressed header can be larger than the received one when the swap reduces the common-prefix length the segments share with daddr (CmprI=0, CmprE>0, seg[0][0] != daddr[0] gives the maximum +8 bytes). pskb_expand_head() was gated on segments_left == 0, so on earlier segments the push consumed unchecked headroom. Once skb_push() leaves fewer than skb->mac_len bytes in front of data, skb_mac_header_rebuild()'s call to: skb_set_mac_header(skb, -skb->mac_len); will store (data - head) - mac_len into the u16 mac_header field, which wraps to ~65530, and the following memmove() writes mac_len bytes ~64KiB past skb->head. A single AF_INET6/SOCK_RAW/IPV6_HDRINCL packet over lo with a two segment type-3 SRH (CmprI=0, CmprE=15) reaches headroom 8 after one pass; KASAN reports a 14-byte OOB write in ipv6_rthdr_rcv. Fix this by expanding the head whenever the remaining room is less than the push size plus mac_len, and request that much extra so the rebuilt MAC header fits afterwards.

Record
UBUNTU-CVE-2026-43501
CVSS 4.0
9.3 CriticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVALSA-2026:25191 No score

Critical: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service (CVE-2026-31419)
  • kernel: Linux kernel: Denial of Service in erofs filesystem (CVE-2026-31467)
  • kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)
  • kernel: ALSA: 6fire: fix use-after-free on disconnect (CVE-2026-31581)
  • kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037)
  • kernel: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (CVE-2026-43501)
  • kernel: selinux: fix overlayfs mmap() and mprotect() access checks (CVE-2026-46054)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:25191
Updated
2026-11-02
OSVALSA-2026:25217 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CVE-2026-23216)
  • kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service (CVE-2026-31419)
  • kernel: net: openvswitch: Avoid releasing netdev before teardown completes (CVE-2026-31508)
  • kernel: ALSA: 6fire: fix use-after-free on disconnect (CVE-2026-31581)
  • kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037)
  • kernel: net: mana: fix use-after-free in add_adev() error path (CVE-2026-43056)
  • kernel: netfilter: ctnetlink: ensure safe access to master conntrack (CVE-2026-43116)
  • kernel: dlm: validate length in dlm_search_rsb_tree (CVE-2026-43125)
  • kernel: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (CVE-2026-43501)
  • kernel: RDMA/rxe: Fix double free in rxe_srq_from_init (CVE-2026-45852)
  • kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (CVE-2026-46181)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:25217
Updated
2026-11-02
OSVAZL-87077 No score

CVE-2026-43501 affecting package kernel for versions less than 6.6.141.1-1

In the Linux kernel, the following vulnerability has been resolved:

ipv6: rpl: reserve mac_len headroom when recompressed SRH grows

ipv6_rpl_srh_rcv() decompresses an RFC 6554 Source Routing Header, swaps the next segment into ipv6_hdr->daddr, recompresses, then pulls the old header and pushes the new one plus the IPv6 header back. The recompressed header can be larger than the received one when the swap reduces the common-prefix length the segments share with daddr (CmprI=0, CmprE>0, seg[0][0] != daddr[0] gives the maximum +8 bytes).

pskb_expand_head() was gated on segments_left == 0, so on earlier segments the push consumed unchecked headroom. Once skb_push() leaves fewer than skb->mac_len bytes in front of data, skb_mac_header_rebuild()'s call to:

skb_set_mac_header(skb, -skb->mac_len);

will store (data - head) - mac_len into the u16 mac_header field, which wraps to ~65530, and the following memmove() writes mac_len bytes ~64KiB past skb->head.

A single AF_INET6/SOCK_RAW/IPV6_HDRINCL packet over lo with a two segment type-3 SRH (CmprI=0, CmprE=15) reaches headroom 8 after one pass; KASAN reports a 14-byte OOB write in ipv6_rthdr_rcv.

Fix this by expanding the head whenever the remaining room is less than the push size plus mac_len, and request that much extra so the rebuilt MAC header fits afterwards.

Record
AZL-87077
Updated
2026-11-02
OSVCLSA-2026-1787935638 No score

kernel: Fix of 164 CVEs

  • wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds {CVE-2023-53582}
  • net/sched: accept TCA_STAB only for root qdisc {CVE-2024-50039}
  • bpf, sockmap: Several fixes to bpf_msg_pop_data {CVE-2024-56720}
  • net: add more sanity checks to qdisc_pkt_len_init() {CVE-2024-49948}
  • nvme-tcp: sanitize request list handling {CVE-2025-38264}
  • smb: client: fix double free of TCP_Server_Info::hostname {CVE-2025-21673}
  • net/sched: ets: Remove drr class from the active list if it changes to strict {CVE-2025-68815}
  • net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo {CVE-2026-46132}
  • RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send {CVE-2026-45856}
  • Bluetooth: hci_event: fix potential UAF in SSP passkey handlers {CVE-2026-46056}
  • bpf: Fix bpf_xdp_store_bytes proto for read-only arg {CVE-2026-45886}
  • libceph: Fix slab-out-of-bounds access in auth message processing {CVE-2026-46119}
  • nfsd: never defer requests during idmap lookup {CVE-2026-45983}
  • openvswitch: cap upcall PID array size and pre-size vport replies {CVE-2026-45840}
  • procfs: fix missing RCU protection when reading real_parent in do_task_stat() {CVE-2026-46259}
  • dm mirror: fix integer overflow in create_dirty_log() {CVE-2026-46023}
  • thermal: core: Fix thermal zone governor cleanup issues {CVE-2026-46021}
  • tcp: call sk_data_ready() after listener migration {CVE-2026-46015}
  • dm: fix a buffer overflow in ioctl processing {CVE-2026-46294}
  • Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
  • xfrm: espintcp: do not reuse an in-progress partial send {CVE-2026-52935}
  • USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() {CVE-2026-53195}
  • netfilter: nft_exthdr: fix register tracking for F_PRESENT flag {CVE-2026-53218}
  • netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920}
  • Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() {CVE-2026-53256}
  • tipc: fix double-free in tipc_buf_append() {CVE-2026-52993}
  • Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER {CVE-2026-53072}
  • netfilter: conntrack: remove sprintf usage {CVE-2026-53002}
  • smb: client: fix krb5 mount with username option {CVE-2026-31392}
  • netfilter: nft_tunnel: fix use-after-free on object destroy {CVE-2026-53212}
  • USB: serial: io_ti: fix heap overflow in get_manuf_info() {CVE-2026-53196}
  • crypto: ccp - copy IV using skcipher ivsize {CVE-2026-53016}
  • netfilter: conntrack_irc: fix possible out-of-bounds read {CVE-2026-53268}
  • IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN {CVE-2026-53176}
  • fuse: reject fuse_notify() pagecache ops on directories {CVE-2026-53168}
  • ppp: require CAP_NET_ADMIN in target netns for unattached ioctls {CVE-2026-53075}
  • xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() {CVE-2026-53239}
  • ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options {CVE-2026-53249}
  • ipv6: sit: reload inner IPv6 header after GSO offloads {CVE-2026-53228}
  • uio_hv_generic: Let userspace take care of interrupt mask {CVE-2025-40048}
  • net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove {CVE-2026-52947}
  • net: guard timestamp cmsgs to real error queue skbs {CVE-2026-53223}
  • libceph: Fix potential out-of-bounds access in crush_decode() {CVE-2026-52955}
  • libceph: Fix potential null-ptr-deref in decode_choose_args() {CVE-2026-52957}
  • netfilter: nft_ct: fix missing expect put in obj eval {CVE-2026-52970}
  • netfilter: nf_tables: always walk all pending catchall elements {CVE-2026-23278}
  • crypto: af_alg - Cap AEAD AD length to 0x80000000 {CVE-2026-52972}
  • wifi: cfg80211: advance loop vars in cfg80211_merge_profile() {CVE-2026-64174}
  • NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr {CVE-2026-53391}
  • Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock {CVE-2026-63945}
  • pNFS: Fix use-after-free in pnfs_update_layout() {CVE-2026-63800}
  • RDMA/vmw_pvrdma: Fix…
Record
CLSA-2026-1787935638
Updated
2026-11-02
OSVCLSA-2026-1788168285 No score

kernel: Fix of 193 CVEs

  • mac802154: llsec: reject frames shorter than the authentication tag {CVE-2026-68125}
  • KVM: x86/mmu: Fix use-after-free on vendor module reload {CVE-2026-68428}
  • wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper {CVE-2026-68197}
  • bpf: account for current allocated stack depth in widen_imprecise_scalars() {CVE-2025-68208}
  • tun: free page on build_skb failure in tun_xdp_one() {CVE-2026-46322}
  • smb: client: fix potential cfid UAF in smb2_query_info_compound {CVE-2025-40320}
  • net/packet: avoid fanout hook re-registration after unregister {CVE-2026-68338}
  • wifi: cfg80211: cancel sched scan results work on unregister {CVE-2026-68414}
  • binfmt_misc: set have_execfd only once the interpreter is opened {CVE-2026-68186}
  • tracing: Fix resource leak on mmiotrace trace_pipe close {CVE-2026-68175}
  • tipc: fix u16 MTU truncation in media and bearer MTU validation {CVE-2026-68297}
  • net: gro: fix double aggregation of flush-marked skbs {CVE-2026-68136}
  • bpf, sockmap: Reject unhashed UDP sockets on sockmap update {CVE-2026-68386}
  • wifi: brcmfmac: fix 802.1X-SHA256 call trace warning {CVE-2026-68304}
  • udf: fix partition descriptor append bookkeeping {CVE-2026-45991}
  • Bluetooth: SCO: fix race conditions in sco_sock_connect() {CVE-2026-43023}
  • smb: client: validate dacloffset before building DACL pointers {CVE-2026-46195}
  • smb/client: fix out-of-bounds read in symlink_data() {CVE-2026-46185}
  • net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo {CVE-2026-46132}
  • Bluetooth: hci_event: fix potential UAF in SSP passkey handlers {CVE-2026-46056}
  • RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send {CVE-2026-45856}
  • RDMA/mana: Validate rx_hash_key_len {CVE-2026-46145}
  • scsi: qla2xxx: Completely fix fcport double free {CVE-2026-43414}
  • bpf: Fix bpf_xdp_store_bytes proto for read-only arg {CVE-2026-45886}
  • libceph: Fix slab-out-of-bounds access in auth message processing {CVE-2026-46119}
  • wifi: mac80211: use safe list iteration in radar detect work {CVE-2026-46166}
  • RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads {CVE-2026-46114}
  • nfsd: never defer requests during idmap lookup {CVE-2026-45983}
  • drop_monitor: fix size calculations for 64-bit attributes {CVE-2026-68287}
  • openvswitch: cap upcall PID array size and pre-size vport replies {CVE-2026-45840}
  • procfs: fix missing RCU protection when reading real_parent in do_task_stat() {CVE-2026-46259}
  • wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() {CVE-2026-46069}
  • dm mirror: fix integer overflow in create_dirty_log() {CVE-2026-46023}
  • netfilter: nft_inner: Fix IPv6 inner_thoff desync {CVE-2026-46244}
  • drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe() {CVE-2026-68429}
  • crypto: authencesn - reject short ahash digests during instance creation {CVE-2026-46033}
  • RDMA/rxe: Fix race condition in QP timer handlers {CVE-2026-45910}
  • wifi: mac80211: remove station if connection prep fails {CVE-2026-46125}
  • tcp: call sk_data_ready() after listener migration {CVE-2026-46015}
  • scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk {CVE-2025-38289}
  • net/sched: act_ct: Only release RCU read lock after ct_ft {CVE-2026-46319}
  • dm: fix a buffer overflow in ioctl processing {CVE-2026-46294}
  • io-wq: check that the predecessor is hashed in io_wq_remove_pending() {CVE-2026-46274}
  • wifi: mac80211: drop stray 'static' from fast-RX rx_result {CVE-2026-46152}
  • io_uring/poll: fix signed comparison in io_poll_get_ownership() {CVE-2026-52933}
  • xfrm: espintcp: do not reuse an in-progress partial send {CVE-2026-52935}
  • Bluetooth: btusb: validate Realtek vendor event length {CVE-2026-68339}
  • Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() {CVE-2026-53256}
  • Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
  • netfilter: nft_exthdr: fix register tracking for F_PRESENT flag {CVE-2026-53218}
  • ipc: limit next_id…
Record
CLSA-2026-1788168285
Updated
2026-11-02
OSVLSN-0121-1 No score

Kernel Live Patch Security Notice

In the Linux kernel, the following vulnerability has been resolved: ksmbd: ipc: fix use-after-free in ipc_msg_send_request ipc_msg_send_request() waits for a generic netlink reply using an ipc_msg_table_entry on the stack.

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of share_conf in compound request smb2_get_ksmbd_tcon() reuses work->tcon in compound requests without validating tcon->t_state.

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() In DecodeQ931(), the UserUserIE code path reads a 16-bit length from the packet, then decrements it by 1 to skip the protocol discriminator byte before passing it to DecodeH323_UserInformation().

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache The NFSv4.0 replay cache uses a fixed 112-byte inline buffer (rp_ibuf.

In the Linux kernel, the following vulnerability has been resolved: media: dvb-net: fix OOB access in ULE extension header tables The ule_mandatory_ext_handlers.

It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container.)(CVE-2026-31431)

In the Linux kernel, the following vulnerability has been resolved: ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() After this commit (e2b76ab8b5c9 'ksmbd: add support for read compound'), response buffer management was changed to use dynamic iov array.

In the Linux kernel, the following vulnerability has been resolved: usbip: validate number_of_packets in usbip_pack_ret_submit() When a USB/IP client receives a RET_SUBMIT response, usbip_pack_ret_submit() unconditionally overwrites urb->number_of_packets from the network PDU. This value is subsequently used as the loop bound in usbip_recv_iso() and usbip_pad_iso() to iterate over urb->iso_frame_desc.

In the Linux kernel, the following vulnerability has been resolved: rxrpc: reject undecryptable rxkad response tickets rxkad_decrypt_ticket() decrypts the RXKAD response ticket and then parses the buffer as plaintext without checking whether crypto_skcipher_decrypt() succeeded.

In the Linux kernel, the following vulnerability has been resolved: batman-adv: hold claim backbone gateways by reference batadv_bla_add_claim() can replace claim->backbone_gw and drop the old gateway's last reference while readers still follow the pointer.

In the Linux kernel, the following vulnerability has been resolved: batman-adv: reject oversized global TT response buffers batadv_tt_prepare_tvlv_global_data() builds the allocation length for a global TT response in 16-bit temporaries.

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment smb2_get_ea() applies 4-byte alignment padding via memset() after writing each EA entry.

In the Linux kernel, the following vulnerability has been resolved: net/x25: Fix potential double free of skb When alloc_skb fails in x25_queue_rx_frame it calls kfree_skb(skb) at line 48 and returns 1 (error).

In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb.

In the Linux kernel, the following vulnerability has been resolved: ipv6: icmp: clear skb2->cb.

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix signededness bug in smb_direct_prepare_negotiation() smb_direct_prepare_negotiation() casts an unsigned __u32 value from sp->max_recv_size and req->preferred_send_size to a signed int before computing min_t(int, ...).

In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() On the receive path, __ioam6_fill_trace_data() uses trace->nodelen to decide…

Record
LSN-0121-1
Updated
2026-11-02
OSVMGASA-2026-0174 No score

Updated kernel, kmod-virtualbox & kmod-xtables-addons packages fix security vulnerabilities

Upstream kernel version 6.6.141 fixes vulnerabilities. The kmod-virtualbox & kmod-xtables-addons packages have been updated to work with this new kernel.

Record
MGASA-2026-0174
Updated
2026-11-02
OSVMGASA-2026-0177 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.141 fixes vulnerabilities. For information about the vulnerabilities see the links.

Record
MGASA-2026-0177
Updated
2026-11-02
OSVopenSUSE-SU-2026:10859-1 No score

kernel-devel-7.0.10-1.1 on GA media

These are all security issues fixed in the kernel-devel-7.0.10-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10859-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21555-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
  • CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
  • CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
  • CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
  • CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
  • CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
  • CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
  • CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
  • CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
  • CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
  • CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
  • CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
  • CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46023: dm mirror: fix integer…
Record
openSUSE-SU-2026:21555-1
Updated
2026-11-02
OSVSUSE-SU-2026:22108-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2025-38549: efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths (bsc#1248235).
  • CVE-2025-68324: scsi: imm: Fix use-after-free bug caused by unfinished delayed work (bsc#1255416).
  • CVE-2026-23303: smb: client: Don't log plaintext credentials in cifs_set_cifscreds (bsc#1260502).
  • CVE-2026-23327: cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()
  • CVE-2026-23359: bpf: Fix stack-out-of-bounds write in devmap (bsc#1260584).
  • CVE-2026-23438: net: mvpp2: guard flow control update with global_tx_fc in buffer switching (bsc#1261619).
  • CVE-2026-23444: wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure (bsc#1266307).
  • CVE-2026-31396: net: macb: fix use-after-free access to PTP clock (bsc#1261791).
  • CVE-2026-31446: ext4: fix use-after-free in update_super_work when racing with umount (bsc#1262619).
  • CVE-2026-31448: ext4: avoid infinite loops caused by residual data (bsc#1262622).
  • CVE-2026-31454: xfs: save ailp before dropping the AIL lock in push callbacks (bsc#1262624).
  • CVE-2026-31455: xfs: stop reclaim before pushing AIL during unmount (bsc#1262615).
  • CVE-2026-31464: scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() (bsc#1262656).
  • CVE-2026-31473: media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex (bsc#1262663).
  • CVE-2026-31480: tracing: Fix potential deadlock in cpu hotplug with osnoise (bsc#1262634).
  • CVE-2026-31493: RDMA/efa: Fix use of completion ctx after free (bsc#1262668).
  • CVE-2026-3150: bcache: fix cached_dev.sb_bio use-after-free and crash (bsc#1263169).
  • CVE-2026-31516: xfrm: prevent policy_hthresh.work from racing with netns teardown (bsc#1262755).
  • CVE-2026-31518: esp: fix skb leak with espintcp and async crypto (bsc#1262606).
  • CVE-2026-31546: net: bonding: fix NULL deref in bond_debug_rlb_hash_show (bsc#1263006).
  • CVE-2026-31590: KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION (bsc#1263152).
  • CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
  • CVE-2026-31613: smb: client: fix OOB reads parsing symlink error response (bsc#1263769).
  • CVE-2026-31614: smb: client: fix off-by-8 bounds check in check_wsl_eas() (bsc#1263774).
  • CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263790).
  • CVE-2026-31655: pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled (bsc#1263724).
  • CVE-2026-31671: xfrm_user: fix info leak in build_report() (bsc#1263115).
  • CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
  • CVE-2026-31678: openvswitch: defer tunnel netdev_put to RCU release (bsc#1263562).
  • CVE-2026-31703: writeback: Fix use after free in inode_switch_wbs_work_fn() (bsc#1263883).
  • CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264093).
  • CVE-2026-31767: drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode (bsc#1264124).
  • CVE-2026-43013: net/mlx5: lag: Check for LAG device before creating debugfs (bsc#1264011).
  • CVE-2026-43026: netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (bsc#1263932).
  • CVE-2026-43030: bpf: Fix regsafe() for pointers to packet (bsc#1264000).
  • CVE-2026-43040: net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero (bsc#1264091).
  • CVE-2026-43052: wifi: mac80211: check tdls flag in ieee80211_tdls_oper (bsc#1263945).
  • CVE-2026-43054: scsi: target: tcm_loop: Drain commands in target_reset handler (bsc#1264063).
  • CVE-2026-43059: Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (bsc#1264184).
  • CVE-2026-43065: ext4: always drain queued discard work in ext4_mb_release() (bsc#1264243).
  • CVE-2026-43066: ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths (bsc#1264245).
  • CVE-2026-43068: ext4: avoid…
Record
SUSE-SU-2026:22108-1
Updated
2026-11-02
OSVSUSE-SU-2026:22137-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2025-38549: efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths (bsc#1248235).
  • CVE-2025-68324: scsi: imm: Fix use-after-free bug caused by unfinished delayed work (bsc#1255416).
  • CVE-2026-23303: smb: client: Don't log plaintext credentials in cifs_set_cifscreds (bsc#1260502).
  • CVE-2026-23327: cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()
  • CVE-2026-23359: bpf: Fix stack-out-of-bounds write in devmap (bsc#1260584).
  • CVE-2026-23438: net: mvpp2: guard flow control update with global_tx_fc in buffer switching (bsc#1261619).
  • CVE-2026-23444: wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure (bsc#1266307).
  • CVE-2026-31396: net: macb: fix use-after-free access to PTP clock (bsc#1261791).
  • CVE-2026-31446: ext4: fix use-after-free in update_super_work when racing with umount (bsc#1262619).
  • CVE-2026-31448: ext4: avoid infinite loops caused by residual data (bsc#1262622).
  • CVE-2026-31454: xfs: save ailp before dropping the AIL lock in push callbacks (bsc#1262624).
  • CVE-2026-31455: xfs: stop reclaim before pushing AIL during unmount (bsc#1262615).
  • CVE-2026-31464: scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() (bsc#1262656).
  • CVE-2026-31473: media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex (bsc#1262663).
  • CVE-2026-31480: tracing: Fix potential deadlock in cpu hotplug with osnoise (bsc#1262634).
  • CVE-2026-31493: RDMA/efa: Fix use of completion ctx after free (bsc#1262668).
  • CVE-2026-3150: bcache: fix cached_dev.sb_bio use-after-free and crash (bsc#1263169).
  • CVE-2026-31516: xfrm: prevent policy_hthresh.work from racing with netns teardown (bsc#1262755).
  • CVE-2026-31518: esp: fix skb leak with espintcp and async crypto (bsc#1262606).
  • CVE-2026-31546: net: bonding: fix NULL deref in bond_debug_rlb_hash_show (bsc#1263006).
  • CVE-2026-31590: KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION (bsc#1263152).
  • CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
  • CVE-2026-31613: smb: client: fix OOB reads parsing symlink error response (bsc#1263769).
  • CVE-2026-31614: smb: client: fix off-by-8 bounds check in check_wsl_eas() (bsc#1263774).
  • CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263790).
  • CVE-2026-31655: pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled (bsc#1263724).
  • CVE-2026-31671: xfrm_user: fix info leak in build_report() (bsc#1263115).
  • CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
  • CVE-2026-31678: openvswitch: defer tunnel netdev_put to RCU release (bsc#1263562).
  • CVE-2026-31703: writeback: Fix use after free in inode_switch_wbs_work_fn() (bsc#1263883).
  • CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264093).
  • CVE-2026-31767: drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode (bsc#1264124).
  • CVE-2026-43013: net/mlx5: lag: Check for LAG device before creating debugfs (bsc#1264011).
  • CVE-2026-43026: netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (bsc#1263932).
  • CVE-2026-43030: bpf: Fix regsafe() for pointers to packet (bsc#1264000).
  • CVE-2026-43040: net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero (bsc#1264091).
  • CVE-2026-43052: wifi: mac80211: check tdls flag in ieee80211_tdls_oper (bsc#1263945).
  • CVE-2026-43054: scsi: target: tcm_loop: Drain commands in target_reset handler (bsc#1264063).
  • CVE-2026-43059: Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (bsc#1264184).
  • CVE-2026-43065: ext4: always drain queued discard work in ext4_mb_release() (bsc#1264243).
  • CVE-2026-43066: ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths (bsc#1264245).
  • CVE-2026-43068: ext4: avoid…
Record
SUSE-SU-2026:22137-1
Updated
2026-11-02
OSVSUSE-SU-2026:22433-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2025-10263: arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1266290).
  • CVE-2025-38549: efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths (bsc#1248235).
  • CVE-2025-68324: scsi: imm: Fix use-after-free bug caused by unfinished delayed work (bsc#1255416).
  • CVE-2025-68822: Input: alps - fix use-after-free bugs caused by dev3_register_work (bsc#1256668).
  • CVE-2026-23303: smb: client: Don't log plaintext credentials in cifs_set_cifscreds (bsc#1260502).
  • CVE-2026-23327: cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()
  • CVE-2026-23359: bpf: Fix stack-out-of-bounds write in devmap (bsc#1260584).
  • CVE-2026-23438: net: mvpp2: guard flow control update with global_tx_fc in buffer switching (bsc#1261619).
  • CVE-2026-23444: wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure (bsc#1266307).
  • CVE-2026-31396: net: macb: fix use-after-free access to PTP clock (bsc#1261791).
  • CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
  • CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
  • CVE-2026-31446: ext4: fix use-after-free in update_super_work when racing with umount (bsc#1262619).
  • CVE-2026-31448: ext4: avoid infinite loops caused by residual data (bsc#1262622).
  • CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
  • CVE-2026-31454: xfs: save ailp before dropping the AIL lock in push callbacks (bsc#1262624).
  • CVE-2026-31455: xfs: stop reclaim before pushing AIL during unmount (bsc#1262615).
  • CVE-2026-31464: scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() (bsc#1262656).
  • CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false
  • CVE-2026-31473: media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex (bsc#1262663).
  • CVE-2026-31480: tracing: Fix potential deadlock in cpu hotplug with osnoise (bsc#1262634).
  • CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
  • CVE-2026-31493: RDMA/efa: Fix use of completion ctx after free (bsc#1262668).
  • CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
  • CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
  • CVE-2026-31500: Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock (bsc#1262993).
  • CVE-2026-31516: xfrm: prevent policy_hthresh.work from racing with netns teardown (bsc#1262755).
  • CVE-2026-31518: esp: fix skb leak with espintcp and async crypto (bsc#1262606).
  • CVE-2026-31546: net: bonding: fix NULL deref in bond_debug_rlb_hash_show (bsc#1263006).
  • CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
  • CVE-2026-31590: KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION (bsc#1263152).
  • CVE-2026-31592: KVM: SEV: Protect all of sev_mem_enc_register_region() with kvm->lock (bsc#1263123).
  • CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
  • CVE-2026-31613: smb: client: fix OOB reads parsing symlink error response (bsc#1263769).
  • CVE-2026-31614: smb: client: fix off-by-8 bounds check in check_wsl_eas() (bsc#1263774).
  • CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263790).
  • CVE-2026-31655: pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled (bsc#1263724).
  • CVE-2026-31664: string.h: Introduce memset_after() for wiping trailing members/padding (bsc#1263578).
  • CVE-2026-31665: kABI: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
  • CVE-2026-31671: xfrm_user: fix info leak in build_report() (bsc#1263115).
  • CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock…
Record
SUSE-SU-2026:22433-1
Updated
2026-11-02
OSVSUSE-SU-2026:22458-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2025-10263: arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1266290).
  • CVE-2025-38549: efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths (bsc#1248235).
  • CVE-2025-68324: scsi: imm: Fix use-after-free bug caused by unfinished delayed work (bsc#1255416).
  • CVE-2025-68822: Input: alps - fix use-after-free bugs caused by dev3_register_work (bsc#1256668).
  • CVE-2026-23303: smb: client: Don't log plaintext credentials in cifs_set_cifscreds (bsc#1260502).
  • CVE-2026-23327: cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()
  • CVE-2026-23359: bpf: Fix stack-out-of-bounds write in devmap (bsc#1260584).
  • CVE-2026-23438: net: mvpp2: guard flow control update with global_tx_fc in buffer switching (bsc#1261619).
  • CVE-2026-23444: wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure (bsc#1266307).
  • CVE-2026-31396: net: macb: fix use-after-free access to PTP clock (bsc#1261791).
  • CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
  • CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
  • CVE-2026-31446: ext4: fix use-after-free in update_super_work when racing with umount (bsc#1262619).
  • CVE-2026-31448: ext4: avoid infinite loops caused by residual data (bsc#1262622).
  • CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
  • CVE-2026-31454: xfs: save ailp before dropping the AIL lock in push callbacks (bsc#1262624).
  • CVE-2026-31455: xfs: stop reclaim before pushing AIL during unmount (bsc#1262615).
  • CVE-2026-31464: scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() (bsc#1262656).
  • CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false
  • CVE-2026-31473: media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex (bsc#1262663).
  • CVE-2026-31480: tracing: Fix potential deadlock in cpu hotplug with osnoise (bsc#1262634).
  • CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
  • CVE-2026-31493: RDMA/efa: Fix use of completion ctx after free (bsc#1262668).
  • CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
  • CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
  • CVE-2026-31500: Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock (bsc#1262993).
  • CVE-2026-31516: xfrm: prevent policy_hthresh.work from racing with netns teardown (bsc#1262755).
  • CVE-2026-31518: esp: fix skb leak with espintcp and async crypto (bsc#1262606).
  • CVE-2026-31546: net: bonding: fix NULL deref in bond_debug_rlb_hash_show (bsc#1263006).
  • CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
  • CVE-2026-31590: KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION (bsc#1263152).
  • CVE-2026-31592: KVM: SEV: Protect all of sev_mem_enc_register_region() with kvm->lock (bsc#1263123).
  • CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
  • CVE-2026-31613: smb: client: fix OOB reads parsing symlink error response (bsc#1263769).
  • CVE-2026-31614: smb: client: fix off-by-8 bounds check in check_wsl_eas() (bsc#1263774).
  • CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263790).
  • CVE-2026-31655: pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled (bsc#1263724).
  • CVE-2026-31664: string.h: Introduce memset_after() for wiping trailing members/padding (bsc#1263578).
  • CVE-2026-31665: kABI: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
  • CVE-2026-31671: xfrm_user: fix info leak in build_report() (bsc#1263115).
  • CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock…
Record
SUSE-SU-2026:22458-1
Updated
2026-11-02
OSVSUSE-SU-2026:22598-1 No score

Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues

The following security issues were fixed:

  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22598-1
Updated
2026-11-02
OSVSUSE-SU-2026:22672-1 No score

Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues

The following security issues were fixed:

  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22672-1
Updated
2026-11-02
OSVSUSE-SU-2026:22673-1 No score

Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-32.1 fixes various security issues

The following security issues were fixed:

  • CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel() (bsc#1263118).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264094).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43437: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265127).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22673-1
Updated
2026-11-02
OSVSUSE-SU-2026:22674-1 No score

Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-34.1 fixes various security issues

The following security issues were fixed:

  • CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel() (bsc#1263118).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264094).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43437: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265127).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22674-1
Updated
2026-11-02
OSVSUSE-SU-2026:22675-1 No score

Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-35.1 fixes various security issues

The following security issues were fixed:

  • CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel() (bsc#1263118).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264094).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43437: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265127).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22675-1
Updated
2026-11-02
OSVSUSE-SU-2026:22676-1 No score

Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues

The following security issues were fixed:

  • CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel() (bsc#1263118).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264094).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43437: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265127).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22676-1
Updated
2026-11-02
OSVSUSE-SU-2026:22677-1 No score

Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues

The following security issues were fixed:

  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel() (bsc#1263118).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264094).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43437: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265127).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22677-1
Updated
2026-11-02
OSVSUSE-SU-2026:22678-1 No score

Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-44.1 fixes various security issues

The following security issues were fixed:

  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22678-1
Updated
2026-11-02
OSVSUSE-SU-2026:22679-1 No score

Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues

The following security issues were fixed:

  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22679-1
Updated
2026-11-02
OSVSUSE-SU-2026:22680-1 No score

Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-30.1 fixes various security issues

The following security issues were fixed:

  • CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel() (bsc#1263118).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264094).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43437: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265127).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22680-1
Updated
2026-11-02
OSVSUSE-SU-2026:22681-1 No score

Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-31.1 fixes various security issues

The following security issues were fixed:

  • CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel() (bsc#1263118).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264094).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43437: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265127).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22681-1
Updated
2026-11-02
OSVSUSE-SU-2026:22682-1 No score

Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues

The following security issues were fixed:

  • CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel() (bsc#1263118).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264094).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43437: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265127).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22682-1
Updated
2026-11-02
OSVSUSE-SU-2026:22683-1 No score

Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues

The following security issues were fixed:

  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel() (bsc#1263118).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264094).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43437: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265127).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22683-1
Updated
2026-11-02
OSVSUSE-SU-2026:22684-1 No score

Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues

The following security issues were fixed:

  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22684-1
Updated
2026-11-02
OSVSUSE-SU-2026:22685-1 No score

Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues

The following security issues were fixed:

  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22685-1
Updated
2026-11-02
OSVSUSE-SU-2026:22686-1 No score

Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues

The following security issues were fixed:

  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22686-1
Updated
2026-11-02
OSVSUSE-SU-2026:22687-1 No score

Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues

The following security issues were fixed:

  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22687-1
Updated
2026-11-02
OSVSUSE-SU-2026:22689-1 No score

Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-37.1 fixes various security issues

The following security issues were fixed:

  • CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel() (bsc#1263118).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264094).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43437: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265127).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22689-1
Updated
2026-11-02

Affected products

Show 2 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
kernel
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-64k
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-64k-core
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-64k-debug
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-64k-debug-core
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-64k-debug-devel
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-64k-debug-devel-matched
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-64k-debug-modules
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-64k-debug-modules-core
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-64k-debug-modules-extra
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-64k-devel
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-64k-devel-matched
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-64k-modules
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-64k-modules-core
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-64k-modules-extra
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-abi-stablelists
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-core
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-cross-headers
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-debug
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-debug-core
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-debug-devel
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-debug-devel-matched
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-debug-modules
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-debug-modules-core
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-debug-modules-extra
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-debug-uki-virt
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-devel
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-devel-matched
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-doc
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-headers
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-modules
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-modules-core
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-modules-extra
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-modules-extra-matched
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-rt
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-rt-64k
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-rt-64k-core
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-rt-64k-debug
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-rt-64k-debug-core
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-rt-64k-debug-devel
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-rt-64k-debug-modules
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-rt-64k-debug-modules-core
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-rt-64k-debug-modules-extra
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-rt-64k-devel
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-rt-64k-modules
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-rt-64k-modules-core
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-rt-64k-modules-extra
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-rt-core
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-rt-debug
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-rt-debug-core
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-rt-debug-devel
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-rt-debug-modules
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel-rt-debug-modules-core
AlmaLinux:10
From an advisory covering 7 CVEs
 before 6.12.0-211.22.1.el10_2
6.12.0-211.22.1.el10_2
kernel
Azure Linux:3
 before 6.6.141.1-1
6.6.141.1-1
linux-lts
Alpaquita:23
 6.1.174-r0 up to 6.1.175-r0
6.1.175-r0
linux-lts
Alpaquita:25
 6.12.85-r0 up to 6.12.87-r0
6.12.87-r0
linux-lts
Alpaquita:stream
 6.12.92-r1 up to 6.18.35-r1
6.18.35-r1
bpftool
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 7.0.0-284.1101.el9_2.tuxcare.11.els13
7.0.0-284.1101.el9_2.tuxcare.11.els13
kernel
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-64k
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-64k-core
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-64k-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-64k-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-64k-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-64k-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-64k-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-64k-debug-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-64k-debug-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-64k-debug-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-64k-debug-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-64k-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-64k-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-64k-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-64k-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-64k-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-64k-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-64k-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-abi-stablelists
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-core
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-cross-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-debug-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-debug-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-debug-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-debug-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-debug-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-doc
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-ipaclones-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-selftests-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-tools
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-tools-libs
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-tools-libs-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
libbpf
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.11.els13
2:1.0.0-2.el9_2.tuxcare.11.els13
libbpf-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.11.els13
2:1.0.0-2.el9_2.tuxcare.11.els13
libbpf-static
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.11.els13
2:1.0.0-2.el9_2.tuxcare.11.els13
perf
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
python3-perf
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
Kernel
Linux
 5.7.0 up to 5.10.258, 5.11.0 up to 5.15.209, 5.16.0 up to 6.1.175, 6.2.0 up to 6.6.140, 6.7.0 up to 6.12.86, 6.13.0 up to 6.18.27, 6.19.0 up to 7.0.4
5.10.2585.15.2096.1.1756.6.1406.12.866.18.277.0.4
linux
Debian:12
 before 6.1.176-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 45 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.170-16.1.170-26.1.170-36.1.172-16.1.174-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-1
6.1.176-1
linux
Debian:13
 before 6.12.86-1, plus listed versions
6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-1
Show 14 moreShow less
6.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-1~bpo12+1
6.12.86-1
linux
Debian:14
 before 7.0.4-1, plus listed versions
6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1
Show 45 moreShow less
6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1
7.0.4-1
linux-aws-hwe
Ubuntu:Pro:16.04:LTS
From an advisory covering 34 CVEs
 before 4.15.0-1195.208~16.04.1, plus listed versions
4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1
Show 45 moreShow less
4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1
4.15.0-1195.208~16.04.1
linux-aws
Ubuntu:Pro:16.04:LTS
From an advisory covering 34 CVEs
 before 4.4.0-1195.210, plus listed versions
4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18
Show 45 moreShow less
4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93
4.4.0-1195.210
linux-azure
Ubuntu:Pro:16.04:LTS
From an advisory covering 34 CVEs
 before 4.15.0-1205.220~16.04.1, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 45 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71
4.15.0-1205.220~16.04.1
linux-gcp
Ubuntu:Pro:16.04:LTS
From an advisory covering 34 CVEs
 before 4.15.0-1188.205~16.04.1, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
Show 45 moreShow less
4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1
4.15.0-1188.205~16.04.1
linux-hwe
Ubuntu:Pro:16.04:LTS
From an advisory covering 34 CVEs
 before 4.15.0-254.266~16.04.1, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 45 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1
4.15.0-254.266~16.04.1
linux
Ubuntu:Pro:16.04:LTS
From an advisory covering 34 CVEs
 before 4.4.0-284.318, plus listed versions
4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11
Show 45 moreShow less
4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96
4.4.0-284.318
linux-aws
Ubuntu:Pro:18.04:LTS
From an advisory covering 34 CVEs
 before 4.15.0-1195.208, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 45 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87
4.15.0-1195.208
linux-azure-4.15
Ubuntu:Pro:18.04:LTS
From an advisory covering 34 CVEs
 before 4.15.0-1205.220, plus listed versions
4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102
Show 45 moreShow less
4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176
4.15.0-1205.220
linux-gcp-4.15
Ubuntu:Pro:18.04:LTS
From an advisory covering 34 CVEs
 before 4.15.0-1188.205, plus listed versions
4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92
Show 45 moreShow less
4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161
4.15.0-1188.205
linux
Ubuntu:Pro:18.04:LTS
From an advisory covering 34 CVEs
 before 4.15.0-254.266, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 45 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107
4.15.0-254.266
linux-hwe-5.4
Ubuntu:Pro:18.04:LTS
From an advisory covering 34 CVEs
 before 5.4.0-234.254~18.04.1, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 45 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1
5.4.0-234.254~18.04.1
linux-oracle
Ubuntu:Pro:18.04:LTS
From an advisory covering 34 CVEs
 before 4.15.0-1158.169, plus listed versions
4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13
Show 45 moreShow less
4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88
4.15.0-1158.169
linux
Ubuntu:Pro:20.04:LTS
From an advisory covering 34 CVEs
 before 5.4.0-234.254, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 45 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110
5.4.0-234.254
linux-aws
Ubuntu:Pro:22.04:LTS
From an advisory covering 34 CVEs
 before 5.15.0-1113.120, plus listed versions
5.13.0-1005.65.15.0-1002.45.15.0-1003.55.15.0-1004.65.15.0-1005.7
Show 45 moreShow less
5.15.0-1008.105.15.0-1009.115.15.0-1011.145.15.0-1013.175.15.0-1014.185.15.0-1015.195.15.0-1017.215.15.0-1019.235.15.0-1020.245.15.0-1021.255.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.325.15.0-1030.345.15.0-1031.355.15.0-1033.375.15.0-1034.385.15.0-1035.395.15.0-1036.405.15.0-1037.415.15.0-1038.435.15.0-1039.445.15.0-1040.455.15.0-1042.475.15.0-1043.485.15.0-1044.495.15.0-1045.505.15.0-1047.525.15.0-1048.535.15.0-1049.545.15.0-1050.555.15.0-1051.565.15.0-1052.575.15.0-1053.585.15.0-1055.605.15.0-1056.615.15.0-1057.635.15.0-1060.665.15.0-1061.675.15.0-1062.685.15.0-1063.695.15.0-1064.705.15.0-1065.71
5.15.0-1113.120
linux-aws-6.8
Ubuntu:Pro:22.04:LTS
From an advisory covering 34 CVEs
 before 6.8.0-1061.64~22.04.1, plus listed versions
6.8.0-1009.9~22.04.26.8.0-1010.10~22.04.26.8.0-1011.12~22.04.16.8.0-1013.14~22.04.16.8.0-1014.15~22.04.1
Show 34 moreShow less
6.8.0-1015.16~22.04.16.8.0-1016.17~22.04.26.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1023.25~22.04.16.8.0-1024.26~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1035.37~22.04.16.8.0-1036.38~22.04.16.8.0-1039.41~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.44~22.04.16.8.0-1043.45~22.04.16.8.0-1044.46~22.04.16.8.0-1045.47~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.16.8.0-1050.53~22.04.16.8.0-1051.54~22.04.16.8.0-1052.55~22.04.16.8.0-1053.56~22.04.16.8.0-1055.58~22.04.16.8.0-1057.60~22.04.16.8.0-1060.63~22.04.1
6.8.0-1061.64~22.04.1
linux-azure
Ubuntu:Pro:22.04:LTS
From an advisory covering 34 CVEs
 before 5.15.0-1118.127, plus listed versions
5.13.0-1006.75.15.0-1001.25.15.0-1002.35.15.0-1003.45.15.0-1005.6
Show 45 moreShow less
5.15.0-1007.85.15.0-1008.95.15.0-1010.125.15.0-1012.155.15.0-1013.165.15.0-1014.175.15.0-1017.205.15.0-1019.245.15.0-1020.255.15.0-1021.265.15.0-1022.275.15.0-1023.295.15.0-1024.305.15.0-1029.365.15.0-1030.375.15.0-1031.385.15.0-1033.405.15.0-1034.415.15.0-1035.425.15.0-1036.435.15.0-1037.445.15.0-1038.455.15.0-1039.465.15.0-1040.475.15.0-1041.485.15.0-1042.495.15.0-1044.515.15.0-1045.525.15.0-1046.535.15.0-1047.545.15.0-1049.565.15.0-1050.575.15.0-1051.595.15.0-1052.605.15.0-1053.615.15.0-1054.625.15.0-1056.645.15.0-1057.655.15.0-1058.665.15.0-1059.675.15.0-1060.695.15.0-1061.705.15.0-1063.725.15.0-1064.735.15.0-1066.75
5.15.0-1118.127
linux-gcp
Ubuntu:Pro:22.04:LTS
From an advisory covering 34 CVEs
 before 5.15.0-1114.124, plus listed versions
5.13.0-1005.65.15.0-1001.35.15.0-1002.55.15.0-1003.65.15.0-1004.7
Show 45 moreShow less
5.15.0-1005.85.15.0-1006.95.15.0-1008.125.15.0-1010.155.15.0-1013.185.15.0-1016.215.15.0-1017.235.15.0-1018.245.15.0-1019.255.15.0-1021.285.15.0-1022.295.15.0-1025.325.15.0-1026.335.15.0-1027.345.15.0-1029.365.15.0-1030.375.15.0-1031.385.15.0-1032.405.15.0-1034.425.15.0-1035.435.15.0-1036.445.15.0-1037.455.15.0-1038.465.15.0-1039.475.15.0-1040.485.15.0-1041.495.15.0-1042.505.15.0-1044.525.15.0-1045.535.15.0-1046.545.15.0-1047.555.15.0-1048.565.15.0-1049.575.15.0-1051.595.15.0-1052.605.15.0-1053.615.15.0-1054.625.15.0-1055.635.15.0-1058.665.15.0-1059.675.15.0-1060.685.15.0-1062.705.15.0-1063.715.15.0-1064.725.15.0-1065.73
5.15.0-1114.124
linux-gcp-6.8
Ubuntu:Pro:22.04:LTS
From an advisory covering 34 CVEs
 before 6.8.0-1064.72~22.04.1, plus listed versions
6.8.0-1010.11~22.04.16.8.0-1011.12~22.04.16.8.0-1012.13~22.04.16.8.0-1013.14~22.04.16.8.0-1014.16~22.04.1
Show 35 moreShow less
6.8.0-1015.17~22.04.16.8.0-1016.18~22.04.16.8.0-1017.19~22.04.16.8.0-1018.20~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1024.26~22.04.16.8.0-1025.27~22.04.16.8.0-1026.28~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1034.36~22.04.26.8.0-1036.38~22.04.16.8.0-1037.39~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.45~22.04.16.8.0-1043.46~22.04.16.8.0-1044.47~22.04.16.8.0-1045.48~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.26.8.0-1048.51~22.04.16.8.0-1052.55~22.04.16.8.0-1053.56~22.04.16.8.0-1054.57~22.04.16.8.0-1058.61~22.04.16.8.0-1060.63~22.04.16.8.0-1063.69~22.04.1
6.8.0-1064.72~22.04.1
linux
Ubuntu:Pro:22.04:LTS
From an advisory covering 34 CVEs
 before 5.15.0-187.197, plus listed versions
5.13.0-19.195.15.0-17.175.15.0-18.185.15.0-22.225.15.0-23.23
Show 45 moreShow less
5.15.0-25.255.15.0-27.285.15.0-30.315.15.0-33.345.15.0-35.365.15.0-37.395.15.0-39.425.15.0-40.435.15.0-41.445.15.0-43.465.15.0-46.495.15.0-47.515.15.0-48.545.15.0-50.565.15.0-52.585.15.0-53.595.15.0-56.625.15.0-57.635.15.0-58.645.15.0-60.665.15.0-67.745.15.0-69.765.15.0-70.775.15.0-71.785.15.0-72.795.15.0-73.805.15.0-75.825.15.0-76.835.15.0-78.855.15.0-79.865.15.0-82.915.15.0-83.925.15.0-84.935.15.0-86.965.15.0-87.975.15.0-88.985.15.0-89.995.15.0-91.1015.15.0-92.1025.15.0-94.1045.15.0-97.1075.15.0-100.1105.15.0-101.1115.15.0-102.1125.15.0-105.115
5.15.0-187.197
linux-hwe-6.8
Ubuntu:Pro:22.04:LTS
From an advisory covering 34 CVEs
 before 6.8.0-136.136~22.04.1, plus listed versions
6.8.0-38.38~22.04.16.8.0-39.39~22.04.16.8.0-40.40~22.04.36.8.0-45.45~22.04.16.8.0-47.47~22.04.1
Show 30 moreShow less
6.8.0-48.48~22.04.16.8.0-49.49~22.04.16.8.0-50.51~22.04.16.8.0-51.52~22.04.16.8.0-52.53~22.04.16.8.0-57.59~22.04.16.8.0-58.60~22.04.16.8.0-59.61~22.04.16.8.0-60.63~22.04.16.8.0-64.67~22.04.16.8.0-65.68~22.04.16.8.0-78.78~22.04.16.8.0-79.79~22.04.16.8.0-83.83~22.04.16.8.0-84.84~22.04.16.8.0-85.85~22.04.16.8.0-86.87~22.04.16.8.0-87.88~22.04.16.8.0-88.89~22.04.26.8.0-90.91~22.04.16.8.0-94.96~22.04.16.8.0-100.100~22.04.16.8.0-101.101~22.04.16.8.0-106.106~22.04.16.8.0-107.107~22.04.16.8.0-110.110~22.04.16.8.0-111.111~22.04.16.8.0-117.117~22.04.16.8.0-124.124~22.04.16.8.0-134.134~22.04.1
6.8.0-136.136~22.04.1
linux-gke
Ubuntu:Pro:22.04:LTS
From an advisory covering 34 CVEs
 before 5.15.0-1110.116, plus listed versions
5.15.0-1002.25.15.0-1003.35.15.0-1004.55.15.0-1005.65.15.0-1006.7
Show 45 moreShow less
5.15.0-1008.105.15.0-1010.135.15.0-1011.145.15.0-1014.175.15.0-1015.185.15.0-1016.195.15.0-1017.205.15.0-1019.235.15.0-1020.255.15.0-1023.285.15.0-1024.295.15.0-1027.325.15.0-1028.335.15.0-1030.355.15.0-1031.365.15.0-1032.375.15.0-1033.385.15.0-1034.395.15.0-1035.405.15.0-1036.415.15.0-1037.425.15.0-1038.435.15.0-1039.445.15.0-1040.455.15.0-1041.465.15.0-1042.475.15.0-1044.495.15.0-1045.505.15.0-1046.515.15.0-1047.525.15.0-1048.535.15.0-1049.545.15.0-1050.555.15.0-1051.565.15.0-1052.575.15.0-1053.585.15.0-1054.595.15.0-1057.625.15.0-1058.635.15.0-1059.645.15.0-1060.665.15.0-1061.675.15.0-1062.685.15.0-1063.695.15.0-1064.70
5.15.0-1110.116
linux-ibm
Ubuntu:Pro:22.04:LTS
From an advisory covering 34 CVEs
 before 5.15.0-1107.111, plus listed versions
5.15.0-1002.25.15.0-1003.35.15.0-1004.45.15.0-1005.55.15.0-1007.8
Show 45 moreShow less
5.15.0-1009.115.15.0-1010.125.15.0-1012.145.15.0-1013.155.15.0-1015.175.15.0-1017.205.15.0-1018.215.15.0-1021.245.15.0-1022.255.15.0-1023.265.15.0-1025.285.15.0-1026.295.15.0-1027.305.15.0-1028.315.15.0-1029.325.15.0-1030.335.15.0-1031.345.15.0-1032.355.15.0-1033.365.15.0-1034.375.15.0-1035.385.15.0-1036.395.15.0-1037.405.15.0-1038.415.15.0-1040.435.15.0-1041.445.15.0-1042.455.15.0-1043.465.15.0-1044.475.15.0-1045.485.15.0-1046.495.15.0-1047.505.15.0-1048.515.15.0-1049.525.15.0-1050.535.15.0-1053.565.15.0-1054.575.15.0-1055.585.15.0-1056.595.15.0-1057.605.15.0-1058.615.15.0-1059.625.15.0-1060.635.15.0-1061.645.15.0-1062.65
5.15.0-1107.111
linux-ibm-6.8
Ubuntu:Pro:22.04:LTS
From an advisory covering 34 CVEs
 before 6.8.0-1061.62~22.04.1, plus listed versions
6.8.0-1008.8~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.16.8.0-1013.13~22.04.1
Show 32 moreShow less
6.8.0-1014.14~22.04.16.8.0-1015.15~22.04.16.8.0-1016.16~22.04.16.8.0-1017.17~22.04.16.8.0-1018.18~22.04.16.8.0-1019.19~22.04.16.8.0-1023.23~22.04.16.8.0-1024.24~22.04.16.8.0-1025.25~22.04.16.8.0-1026.26~22.04.16.8.0-1027.27~22.04.16.8.0-1028.28~22.04.16.8.0-1029.29~22.04.16.8.0-1030.30~22.04.16.8.0-1033.33~22.04.16.8.0-1036.36~22.04.16.8.0-1037.37~22.04.16.8.0-1038.38~22.04.16.8.0-1039.39~22.04.16.8.0-1040.40~22.04.16.8.0-1041.41~22.04.16.8.0-1042.42~22.04.16.8.0-1043.43~22.04.16.8.0-1044.44~22.04.16.8.0-1045.45~22.04.16.8.0-1049.49~22.04.16.8.0-1050.50~22.04.16.8.0-1051.51~22.04.16.8.0-1052.52~22.04.16.8.0-1055.56~22.04.16.8.0-1057.58~22.04.16.8.0-1060.61~22.04.1
6.8.0-1061.62~22.04.1
linux-aws
Ubuntu:Pro:24.04:LTS
From an advisory covering 34 CVEs
 before 6.8.0-1061.64, plus listed versions
6.5.0-1008.86.6.0-1001.16.8.0-1001.16.8.0-1006.66.8.0-1008.8
Show 43 moreShow less
6.8.0-1009.96.8.0-1010.106.8.0-1011.126.8.0-1012.136.8.0-1013.146.8.0-1014.156.8.0-1015.166.8.0-1016.176.8.0-1017.186.8.0-1018.206.8.0-1019.216.8.0-1020.226.8.0-1021.236.8.0-1023.256.8.0-1024.266.8.0-1025.276.8.0-1026.286.8.0-1027.296.8.0-1028.306.8.0-1029.316.8.0-1030.326.8.0-1031.336.8.0-1032.346.8.0-1033.356.8.0-1035.376.8.0-1036.386.8.0-1038.406.8.0-1039.416.8.0-1040.426.8.0-1041.436.8.0-1042.446.8.0-1043.456.8.0-1044.466.8.0-1045.476.8.0-1046.496.8.0-1047.506.8.0-1050.536.8.0-1051.546.8.0-1052.556.8.0-1053.566.8.0-1055.586.8.0-1057.606.8.0-1060.63
6.8.0-1061.64
linux-azure
Ubuntu:Pro:24.04:LTS
From an advisory covering 34 CVEs
 before 6.8.0-1063.71, plus listed versions
6.5.0-1007.76.6.0-1001.16.8.0-1001.16.8.0-1005.56.8.0-1006.6
Show 34 moreShow less
6.8.0-1007.76.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1012.146.8.0-1013.156.8.0-1014.166.8.0-1015.176.8.0-1016.186.8.0-1017.206.8.0-1018.216.8.0-1020.236.8.0-1021.256.8.0-1025.306.8.0-1026.316.8.0-1027.326.8.0-1028.336.8.0-1029.346.8.0-1030.356.8.0-1031.366.8.0-1034.396.8.0-1038.446.8.0-1040.466.8.0-1041.476.8.0-1042.486.8.0-1044.506.8.0-1046.526.8.0-1051.576.8.0-1052.586.8.0-1054.606.8.0-1056.626.8.0-1058.646.8.0-1059.656.8.0-1062.69
6.8.0-1063.71
linux-gcp
Ubuntu:Pro:24.04:LTS
From an advisory covering 34 CVEs
 before 6.8.0-1064.72, plus listed versions
6.5.0-1007.76.6.0-1001.16.8.0-1002.26.8.0-1005.56.8.0-1006.6
Show 45 moreShow less
6.8.0-1007.76.8.0-1008.96.8.0-1009.106.8.0-1010.116.8.0-1011.126.8.0-1012.136.8.0-1013.146.8.0-1014.166.8.0-1015.176.8.0-1016.186.8.0-1017.196.8.0-1018.206.8.0-1019.216.8.0-1020.226.8.0-1021.236.8.0-1024.266.8.0-1025.276.8.0-1026.286.8.0-1027.296.8.0-1028.306.8.0-1029.316.8.0-1030.326.8.0-1031.336.8.0-1032.346.8.0-1033.356.8.0-1034.366.8.0-1036.386.8.0-1037.396.8.0-1039.416.8.0-1040.426.8.0-1041.436.8.0-1042.456.8.0-1043.466.8.0-1044.476.8.0-1045.486.8.0-1046.496.8.0-1047.506.8.0-1048.516.8.0-1052.556.8.0-1053.566.8.0-1054.576.8.0-1055.586.8.0-1058.616.8.0-1060.636.8.0-1063.69
6.8.0-1064.72
linux
Ubuntu:Pro:24.04:LTS
From an advisory covering 34 CVEs
 before 6.8.0-136.136, plus listed versions
6.5.0-9.96.6.0-14.146.8.0-11.116.8.0-20.206.8.0-22.22
Show 45 moreShow less
6.8.0-28.286.8.0-31.316.8.0-35.356.8.0-36.366.8.0-38.386.8.0-39.396.8.0-40.406.8.0-41.416.8.0-44.446.8.0-45.456.8.0-47.476.8.0-48.486.8.0-49.496.8.0-50.516.8.0-51.526.8.0-52.536.8.0-53.556.8.0-54.566.8.0-55.576.8.0-56.586.8.0-57.596.8.0-58.606.8.0-59.616.8.0-60.636.8.0-62.656.8.0-63.666.8.0-64.676.8.0-71.716.8.0-78.786.8.0-79.796.8.0-83.836.8.0-84.846.8.0-85.856.8.0-86.876.8.0-87.886.8.0-88.896.8.0-90.916.8.0-94.966.8.0-100.1006.8.0-101.1016.8.0-106.1066.8.0-107.1076.8.0-110.1106.8.0-111.1116.8.0-117.117
6.8.0-136.136
linux-gke
Ubuntu:Pro:24.04:LTS
From an advisory covering 34 CVEs
 before 6.8.0-1059.67, plus listed versions
6.8.0-1003.56.8.0-1004.76.8.0-1005.86.8.0-1006.96.8.0-1007.10
Show 40 moreShow less
6.8.0-1008.116.8.0-1009.126.8.0-1010.136.8.0-1011.146.8.0-1012.156.8.0-1013.176.8.0-1014.186.8.0-1015.196.8.0-1016.206.8.0-1017.216.8.0-1019.236.8.0-1020.246.8.0-1021.256.8.0-1022.266.8.0-1023.276.8.0-1024.286.8.0-1025.296.8.0-1026.306.8.0-1027.316.8.0-1028.326.8.0-1029.336.8.0-1032.366.8.0-1033.376.8.0-1035.396.8.0-1036.406.8.0-1037.416.8.0-1038.436.8.0-1039.446.8.0-1040.456.8.0-1041.466.8.0-1042.476.8.0-1043.486.8.0-1044.496.8.0-1048.536.8.0-1049.546.8.0-1050.566.8.0-1051.576.8.0-1054.606.8.0-1055.616.8.0-1058.64
6.8.0-1059.67
linux-ibm
Ubuntu:Pro:24.04:LTS
From an advisory covering 34 CVEs
 before 6.8.0-1061.62, plus listed versions
6.5.0-1009.96.8.0-1001.16.8.0-1003.36.8.0-1004.46.8.0-1005.5
Show 41 moreShow less
6.8.0-1006.66.8.0-1007.76.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1011.116.8.0-1012.126.8.0-1013.136.8.0-1014.146.8.0-1015.156.8.0-1016.166.8.0-1017.176.8.0-1018.186.8.0-1019.196.8.0-1022.226.8.0-1023.236.8.0-1024.246.8.0-1025.256.8.0-1026.266.8.0-1027.276.8.0-1028.286.8.0-1029.296.8.0-1030.306.8.0-1033.336.8.0-1036.366.8.0-1037.376.8.0-1038.386.8.0-1039.396.8.0-1040.406.8.0-1041.416.8.0-1042.426.8.0-1043.436.8.0-1044.446.8.0-1045.456.8.0-1049.496.8.0-1050.506.8.0-1051.516.8.0-1052.526.8.0-1055.566.8.0-1057.586.8.0-1060.61
6.8.0-1061.62
linux-oracle
Ubuntu:Pro:24.04:LTS
From an advisory covering 34 CVEs
 before 6.8.0-1058.61, plus listed versions
6.5.0-1010.106.6.0-1001.16.8.0-1001.16.8.0-1004.46.8.0-1005.5
Show 40 moreShow less
6.8.0-1006.66.8.0-1008.86.8.0-1010.106.8.0-1011.116.8.0-1012.126.8.0-1013.136.8.0-1014.146.8.0-1015.166.8.0-1016.176.8.0-1017.186.8.0-1018.196.8.0-1019.206.8.0-1020.216.8.0-1021.226.8.0-1022.236.8.0-1023.246.8.0-1024.256.8.0-1025.266.8.0-1026.276.8.0-1027.286.8.0-1028.296.8.0-1029.306.8.0-1030.316.8.0-1032.336.8.0-1033.346.8.0-1035.366.8.0-1037.386.8.0-1038.396.8.0-1039.406.8.0-1040.416.8.0-1041.426.8.0-1042.436.8.0-1043.446.8.0-1044.456.8.0-1047.486.8.0-1049.506.8.0-1050.516.8.0-1052.536.8.0-1054.556.8.0-1057.58
6.8.0-1058.61
linux-aws
Ubuntu:Pro:26.04:LTS
From an advisory covering 34 CVEs
 before 7.0.0-1009.9, plus listed versions
6.17.0-1002.26.17.0-1003.36.19.0-1002.26.19.0-1003.37.0.0-1001.1
Show 4 moreShow less
7.0.0-1003.37.0.0-1004.47.0.0-1006.67.0.0-1008.8
7.0.0-1009.9
linux-azure
Ubuntu:Pro:26.04:LTS
From an advisory covering 34 CVEs
 before 7.0.0-1010.10, plus listed versions
6.17.0-1003.36.17.0-1004.46.19.0-1001.16.19.0-1002.27.0.0-1001.1
Show 5 moreShow less
7.0.0-1002.27.0.0-1003.37.0.0-1004.47.0.0-1007.77.0.0-1009.9
7.0.0-1010.10
linux-gcp
Ubuntu:Pro:26.04:LTS
From an advisory covering 34 CVEs
 before 7.0.0-1008.8, plus listed versions
6.17.0-1002.26.17.0-1003.36.19.0-1001.17.0.0-1001.17.0.0-1002.27.0.0-1003.37.0.0-1005.57.0.0-1007.7
7.0.0-1008.8
linux
Ubuntu:Pro:26.04:LTS
From an advisory covering 34 CVEs
 before 7.0.0-28.28, plus listed versions
6.17.0-5.56.17.0-6.66.17.0-8.86.18.0-8.86.18.0-9.9
Show 12 moreShow less
6.19.0-3.36.19.0-5.56.19.0-6.66.19.0-9.97.0.0-7.77.0.0-10.107.0.0-12.127.0.0-13.137.0.0-14.147.0.0-15.157.0.0-22.227.0.0-27.27
7.0.0-28.28
kernel
Mageia:9
From an advisory covering 12 CVEs
 before 6.6.141-1.mga9
6.6.141-1.mga9
kmod-virtualbox
Mageia:9
From an advisory covering 12 CVEs
 before 7.1.18-20.mga9
7.1.18-20.mga9
kmod-xtables-addons
Mageia:9
From an advisory covering 12 CVEs
 before 3.24-92.mga9
3.24-92.mga9
kernel-linus
Mageia:9
From an advisory covering 12 CVEs
 before 6.6.141-1.mga9
6.6.141-1.mga9
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-64k-debug-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-64k-debug-devel-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-64k-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-64k-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-64k-devel-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-debug-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-debug-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-debug-devel-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-devel-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-doc
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-rt-64k-debug-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-rt-64k-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-rt-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-tools-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-zfcpdump-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-zfcpdump-devel-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
libperf-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
perf
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
perf-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
python3-perf
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
python3-perf-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
rtla
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
rv
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-64k
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-64k-core
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-64k-debug
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-64k-debug-core
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-64k-debug-modules
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-64k-debug-modules-core
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-64k-debug-modules-extra
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-64k-modules
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-64k-modules-core
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-64k-modules-extra
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-abi-stablelists
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-core
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-debug
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-debug-core
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-debug-modules
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-debug-modules-core
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-debug-modules-extra
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-debug-uki-virt
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel-modules
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel
Rocky Linux:10
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
kernel
Rocky Linux:9
From an advisory covering 11 CVEs
 before 0:5.14.0-687.15.1.el9_8
0:5.14.0-687.15.1.el9_8
linux
Root:Debian:11
 before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
rootio-linux
Root:Debian:11
 before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
rootio-linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
rootio-linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
rootio-linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
kernel
Rocky Linux:9
From an advisory covering 11 CVEs
 before 0:5.14.0-687.15.1.el9_7.cloud.1.0
0:5.14.0-687.15.1.el9_7.cloud.1.0
kernel-default
SUSE:Linux Micro 6.0
From an advisory covering 98 CVEs
 before 6.4.0-47.1
6.4.0-47.1
kernel-default-base
SUSE:Linux Micro 6.0
From an advisory covering 98 CVEs
 before 6.4.0-47.1.21.24
6.4.0-47.1.21.24
kernel-kvmsmall
SUSE:Linux Micro 6.0
From an advisory covering 98 CVEs
 before 6.4.0-47.1
6.4.0-47.1
kernel-source
SUSE:Linux Micro 6.0
From an advisory covering 98 CVEs
 before 6.4.0-47.1
6.4.0-47.1
kernel-default
SUSE:Linux Micro 6.1
From an advisory covering 98 CVEs
 before 6.4.0-47.1
6.4.0-47.1
kernel-default-base
SUSE:Linux Micro 6.1
From an advisory covering 98 CVEs
 before 6.4.0-47.1.21.24
6.4.0-47.1.21.24
kernel-kvmsmall
SUSE:Linux Micro 6.1
From an advisory covering 98 CVEs
 before 6.4.0-47.1
6.4.0-47.1
kernel-source
SUSE:Linux Micro 6.1
From an advisory covering 98 CVEs
 before 6.4.0-47.1
6.4.0-47.1
kernel-rt
SUSE:Linux Micro 6.0
From an advisory covering 169 CVEs
 before 6.4.0-48.1
6.4.0-48.1
kernel-source-rt
SUSE:Linux Micro 6.0
From an advisory covering 169 CVEs
 before 6.4.0-48.1
6.4.0-48.1
kernel-rt
SUSE:Linux Micro 6.1
From an advisory covering 169 CVEs
 before 6.4.0-48.1
6.4.0-48.1
kernel-source-rt
SUSE:Linux Micro 6.1
From an advisory covering 169 CVEs
 before 6.4.0-48.1
6.4.0-48.1
kernel-livepatch-SLE16-RT_Update_9
SUSE:Linux Micro 6.2
From an advisory covering 20 CVEs
 before 4-160000.1.1
4-160000.1.1
kernel-livepatch-MICRO-6-0_Update_24
SUSE:Linux Micro 6.1
From an advisory covering 9 CVEs
 before 2-1.1
2-1.1
kernel-livepatch-MICRO-6-0_Update_10
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
 before 14-1.1
14-1.1
kernel-livepatch-MICRO-6-0_Update_11
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
 before 13-1.1
13-1.1
kernel-livepatch-MICRO-6-0_Update_12
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
 before 13-1.1
13-1.1
kernel-livepatch-MICRO-6-0_Update_13
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
 before 11-1.1
11-1.1
kernel-livepatch-MICRO-6-0_Update_16
SUSE:Linux Micro 6.1
From an advisory covering 24 CVEs
 before 8-1.1
8-1.1
kernel-livepatch-MICRO-6-0_Update_21
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
 before 3-1.1
3-1.1
kernel-livepatch-MICRO-6-0_Update_23
SUSE:Linux Micro 6.1
From an advisory covering 9 CVEs
 before 3-1.1
3-1.1
kernel-livepatch-MICRO-6-0_Update_8
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
 before 20-1.2
20-1.2
kernel-livepatch-MICRO-6-0_Update_9
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
 before 20-1.2
20-1.2
kernel-livepatch-MICRO-6-0_Update_14
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
 before 9-1.2
9-1.2
kernel-livepatch-MICRO-6-0_Update_17
SUSE:Linux Micro 6.1
From an advisory covering 24 CVEs
 before 7-1.1
7-1.1
kernel-livepatch-MICRO-6-0_Update_18
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
 before 6-1.1
6-1.1
kernel-livepatch-MICRO-6-0_Update_19
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
 before 4-1.1
4-1.1
kernel-livepatch-MICRO-6-0_Update_20
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
 before 3-1.1
3-1.1
kernel-livepatch-MICRO-6-0_Update_22
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
 before 3-1.1
3-1.1
kernel-livepatch-MICRO-6-0-RT_Update_13
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
 before 9-1.1
9-1.1
kernel-livepatch-MICRO-6-0-RT_Update_15
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
 before 8-1.1
8-1.1
kernel-livepatch-MICRO-6-0-RT_Update_18
SUSE:Linux Micro 6.1
From an advisory covering 24 CVEs
 before 7-1.1
7-1.1
kernel-livepatch-MICRO-6-0-RT_Update_19
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
 before 6-1.1
6-1.1
kernel-livepatch-MICRO-6-0-RT_Update_20
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
 before 4-1.1
4-1.1
kernel-livepatch-MICRO-6-0-RT_Update_21
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
 before 3-1.1
3-1.1
kernel-livepatch-MICRO-6-0-RT_Update_22
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
 before 3-1.2
3-1.2
kernel-livepatch-MICRO-6-0-RT_Update_14
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
 before 9-1.1
9-1.1
kernel-livepatch-MICRO-6-0-RT_Update_23
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
 before 3-1.1
3-1.1
kernel-livepatch-MICRO-6-0-RT_Update_24
SUSE:Linux Micro 6.1
From an advisory covering 9 CVEs
 before 2-1.1
2-1.1
kernel-livepatch-MICRO-6-0_Update_24
SUSE:Linux Micro 6.0
From an advisory covering 9 CVEs
 before 2-1.1
2-1.1
kernel-livepatch-MICRO-6-0-RT_Update_13
SUSE:Linux Micro 6.0
From an advisory covering 25 CVEs
 before 9-1.1
9-1.1
kernel-livepatch-MICRO-6-0-RT_Update_15
SUSE:Linux Micro 6.0
From an advisory covering 25 CVEs
 before 8-1.1
8-1.1
kernel-livepatch-MICRO-6-0-RT_Update_18
SUSE:Linux Micro 6.0
From an advisory covering 24 CVEs
 before 7-1.1
7-1.1
kernel-livepatch-MICRO-6-0-RT_Update_19
SUSE:Linux Micro 6.0
From an advisory covering 21 CVEs
 before 6-1.1
6-1.1
kernel-livepatch-MICRO-6-0-RT_Update_20
SUSE:Linux Micro 6.0
From an advisory covering 21 CVEs
 before 4-1.1
4-1.1
kernel-livepatch-MICRO-6-0-RT_Update_21
SUSE:Linux Micro 6.0
From an advisory covering 21 CVEs
 before 3-1.1
3-1.1
kernel-livepatch-MICRO-6-0-RT_Update_22
SUSE:Linux Micro 6.0
From an advisory covering 21 CVEs
 before 3-1.2
3-1.2
kernel-livepatch-MICRO-6-0_Update_10
SUSE:Linux Micro 6.0
From an advisory covering 25 CVEs
 before 14-1.1
14-1.1
kernel-livepatch-MICRO-6-0_Update_11
SUSE:Linux Micro 6.0
From an advisory covering 25 CVEs
 before 13-1.1
13-1.1
kernel-livepatch-MICRO-6-0_Update_12
SUSE:Linux Micro 6.0
From an advisory covering 25 CVEs
 before 13-1.1
13-1.1
kernel-livepatch-MICRO-6-0_Update_13
SUSE:Linux Micro 6.0
From an advisory covering 25 CVEs
 before 11-1.1
11-1.1
kernel-livepatch-MICRO-6-0_Update_16
SUSE:Linux Micro 6.0
From an advisory covering 24 CVEs
 before 8-1.1
8-1.1
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1111.118~20.04.1, plus listed versions
5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1
Show 45 moreShow less
5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1
5.15.0-1111.118~20.04.1
kernel-source
openSUSE:Tumbleweed
From an advisory covering 10 CVEs
 before 7.0.10-1.1
7.0.10-1.1
dtb-aarch64
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-64kb
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-azure
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-default
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-default-base
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1.160000.2.19
6.12.0-160000.37.1.160000.2.19
kernel-docs
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-kvmsmall
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-obs-build
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-obs-qa
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-rt
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-source
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-syms
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-zfcpdump
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubngtuonghung/CVE-2026-435012026-06-19
PoC in GitHubAnyone202/cybermeowfia-termux2026-07-11

History

History
RecordedChangedSources
affectedOSV
affectedOSV
affectedOSV
affected, aliases, aliases_more, referencesOSV
affected, aliases, aliases_more, referencesOSV
factsOSV
exploits
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-43501 is a critical vulnerability (CVSS 9.8) in Linux, published May 21, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.73%, the 54th percentile. Fixed in kernel 6.6.141.1-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 1,382 package rows, 1,438 versions, 4,781 references and the rest of 8 source descriptions. The JSON record has them. Also not on the record: 105 aliases. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 154 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open