CVE-2026-45861

gfs2: Fix slab-use-after-free in qd_put

7.8 HighFix available

What does this mean?

: 7.8v3.1, from CVE List
: 0.19%8th percentile
Fixed in: 6.12.80-r0linux-lts
Published: May 27, 2026
Modified: November 11, 2026
Weakness: CWE-416
Also known as: ALSA-2026:75746ALSA-2026:75747AZL-88524BELL-CVE-2026-45861CLSA-2026-1788170774CLSA-2026-1788257079CLSA-2026-1788259625CLSA-2026-1792759740
Show 30 moreShow less
CLSA-2026-1792762308DEBIAN-CVE-2026-45861EUVD-2026-32327GHSA-v5c4-8mx9-g6x5OESA-2026-2582OESA-2026-3157RHSA-2026:75746RHSA-2026:75747RHSA-2026:76739RLSA-2026:75746RLSA-2026:75747ROOT-OS-UBUNTU-2404-CVE-2026-45861SUSE-SU-2026:22742-1SUSE-SU-2026:22769-1SUSE-SU-2026:22812-1SUSE-SU-2026:22835-1UBUNTU-CVE-2026-45861USN-8492-1USN-8492-2USN-8492-3USN-8492-4USN-8492-5USN-8497-1USN-8498-1USN-8499-1USN-8606-1USN-8607-1USN-8609-1USN-8619-1openSUSE-SU-2026:21388-1

In the Linux kernel, the following vulnerability has been resolved:

gfs2: Fix slab-use-after-free in qd_put

Commit a475c5dd16e5 ("gfs2: Free quota data objects synchronously") started freeing quota data objects during filesystem shutdown instead of putting them back onto the LRU list, but it failed to remove these objects from the LRU list, causing LRU list corruption. This caused use-after-free when the shrinker (gfs2_qd_shrink_scan) tried to access already-freed objects on the LRU list.

Fix this by removing qd objects from the LRU list before freeing them in qd_put().

Initial fix from Deepanshu Kartikey [email protected].

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.19%Up 0.2 points since May 28, 2026

What each source reports

CVE List Score used 7.8

gfs2: Fix slab-use-after-free in qd_put

In the Linux kernel, the following vulnerability has been resolved:

gfs2: Fix slab-use-after-free in qd_put

Fix this by removing qd objects from the LRU list before freeing them in qd_put().

Initial fix from Deepanshu Kartikey [email protected].

Record: CVE-2026-45861
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-416
Updated: 2026-11-02

EUVDEUVD-2026-32327 7.8

In the Linux kernel, the following vulnerability has been resolved:

gfs2: Fix slab-use-after-free in qd_put

Fix this by removing qd objects from the LRU list before freeing them in qd_put().

Initial fix from Deepanshu Kartikey [email protected].

Record: EUVD-2026-32327
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-v5c4-8mx9-g6x5 7.8

In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix slab-use-after...

In the Linux kernel, the following vulnerability has been resolved:

gfs2: Fix slab-use-after-free in qd_put

Fix this by removing qd objects from the LRU list before freeing them in qd_put().

Initial fix from Deepanshu Kartikey [email protected].

Record: GHSA-v5c4-8mx9-g6x5
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-416
Updated: 2026-11-02

NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

gfs2: Fix slab-use-after-free in qd_put

Fix this by removing qd objects from the LRU list before freeing them in qd_put().

Initial fix from Deepanshu Kartikey [email protected].

Record: CVE-2026-45861
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-416
Updated: 2026-11-02

OSVBELL-CVE-2026-45861 7.8

Record: BELL-CVE-2026-45861
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSV 7.8

gfs2: Fix slab-use-after-free in qd_put

In the Linux kernel, the following vulnerability has been resolved:

gfs2: Fix slab-use-after-free in qd_put

Fix this by removing qd objects from the LRU list before freeing them in qd_put().

Initial fix from Deepanshu Kartikey [email protected].

Record: CVE-2026-45861
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 35 moreShow less

OSVDEBIAN-CVE-2026-45861 7.8

In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix slab-use-after-free in qd_put Commit a475c5dd16e5 ("gfs2: Free quota data objects synchronously") started freeing quota data objects during filesystem shutdown instead of putting them back onto the LRU list, but it failed to remove these objects from the LRU list, causing LRU list corruption. This caused use-after-free when the shrinker (gfs2_qd_shrink_scan) tried to access already-freed objects on the LRU list. Fix this by removing qd objects from the LRU list before freeing them in qd_put(). Initial fix from Deepanshu Kartikey [email protected].

Record: DEBIAN-CVE-2026-45861
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2026-2582 9.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

mISDN: hfcpci: Fix warning when deleting uninitialized timer

With CONFIG_DEBUG_OBJECTS_TIMERS unloading hfcpci module leads to the following splat:

[ 250.215892] ODEBUG: assert_init not available (active state 0) object: ffffffffc01a3dc0 object type: timer_list hint: 0x0 [ 250.217520] WARNING: CPU: 0 PID: 233 at lib/debugobjects.c:612 debug_print_object+0x1b6/0x2c0 [ 250.218775] Modules linked in: hfcpci(-) mISDN_core [ 250.219537] CPU: 0 UID: 0 PID: 233 Comm: rmmod Not tainted 6.17.0-rc2-g6f713187ac98 #2 PREEMPT(voluntary) [ 250.220940] Hardware name: QEMU Ubuntu 24.04 PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 250.222377] RIP: 0010:debug_print_object+0x1b6/0x2c0 [ 250.223131] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 41 56 48 8b 14 dd a0 4e 01 9f 48 89 ee 48 c7 c7 20 46 01 9f e8 cb 84d [ 250.225805] RSP: 0018:ffff888015ea7c08 EFLAGS: 00010286 [ 250.226608] RAX: 0000000000000000 RBX: 0000000000000005 RCX: ffffffff9be93a95 [ 250.227708] RDX: 1ffff1100d945138 RSI: 0000000000000008 RDI: ffff88806ca289c0 [ 250.228993] RBP: ffffffff9f014a00 R08: 0000000000000001 R09: ffffed1002bd4f39 [ 250.230043] R10: ffff888015ea79cf R11: 0000000000000001 R12: 0000000000000001 [ 250.231185] R13: ffffffff9eea0520 R14: 0000000000000000 R15: ffff888015ea7cc8 [ 250.232454] FS: 00007f3208f01540(0000) GS:ffff8880caf5a000(0000) knlGS:0000000000000000 [ 250.233851] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.234856] CR2: 00007f32090a7421 CR3: 0000000004d63000 CR4: 00000000000006f0 [ 250.236117] Call Trace: [ 250.236599] <TASK> [ 250.236967] ? trace_irq_enable.constprop.0+0xd4/0x130 [ 250.237920] debug_object_assert_init+0x1f6/0x310 [ 250.238762] ? __pfx_debug_object_assert_init+0x10/0x10 [ 250.239658] ? __lock_acquire+0xdea/0x1c70 [ 250.240369] __try_to_del_timer_sync+0x69/0x140 [ 250.241172] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 250.242058] ? __timer_delete_sync+0xc6/0x120 [ 250.242842] ? lock_acquire+0x30/0x80 [ 250.243474] ? __timer_delete_sync+0xc6/0x120 [ 250.244262] __timer_delete_sync+0x98/0x120 [ 250.245015] HFC_cleanup+0x10/0x20 [hfcpci] [ 250.245704] __do_sys_delete_module+0x348/0x510 [ 250.246461] ? __pfx___do_sys_delete_module+0x10/0x10 [ 250.247338] do_syscall_64+0xc1/0x360 [ 250.247924] entry_SYSCALL_64_after_hwframe+0x77/0x7f

Fix this by initializing hfc_tl timer with DEFINE_TIMER macro. Also, use mod_timer instead of manual timeout update.(CVE-2025-39833)

In the Linux kernel, the following vulnerability has been resolved:

platform/x86/amd/pmc: Add support for Van Gogh SoC

The ROG Xbox Ally (non-X) SoC features a similar architecture to the Steam Deck. While the Steam Deck supports S3 (s2idle causes a crash), this support was dropped by the Xbox Ally which only S0ix suspend.

Since the handler is missing here, this causes the device to not suspend and the AMD GPU driver to crash while trying to resume afterwards due to a power hang.(CVE-2025-68334)

In the Linux kernel, the following vulnerability has been resolved:

team: Move team device type change at the end of team_port_add

Attempting to add a port device that is already up will expectedly fail, but not before modifying the team device header_ops.

In the case of the syzbot reproducer the gre0 device is already in state UP when it attempts to add it as a port device of team0, this fails but before that header_ops->create of team0 is changed from eth_header to ipgre_header in the call to team_dev_type_check_change.

Later when we end up in ipgre_header() struct ip_tunnel* points to nonsense as the private data of the device still holds a struct team.

Example sequence of iproute2 commands to reproduce the hang/BUG(): ip link add dev team0 type team ip link add dev gre0 type gre ip link set dev gre0 up ip link set dev gre0…

Record: OESA-2026-2582
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2026-3157 9.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C, Cortex-A77, Cortex-A76 & A76A may allow writes to resources owned by a higher exception level.(CVE-2025-10263)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work)

In smbd_destroy() we may destroy the memory so we better wait until post_send_credits_work is no longer pending and will never be started again.

I actually just hit the case using rxe:

WARNING: CPU: 0 PID: 138 at drivers/infiniband/sw/rxe/rxe_verbs.c:1032 rxe_post_recv+0x1ee/0x480 [rdma_rxe] ... [ 5305.686979] [ T138] smbd_post_recv+0x445/0xc10 [cifs] [ 5305.687135] [ T138] ? srso_alias_return_thunk+0x5/0xfbef5 [ 5305.687149] [ T138] ? __kasan_check_write+0x14/0x30 [ 5305.687185] [ T138] ? __pfx_smbd_post_recv+0x10/0x10 [cifs] [ 5305.687329] [ T138] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 5305.687356] [ T138] ? srso_alias_return_thunk+0x5/0xfbef5 [ 5305.687368] [ T138] ? srso_alias_return_thunk+0x5/0xfbef5 [ 5305.687378] [ T138] ? _raw_spin_unlock_irqrestore+0x11/0x60 [ 5305.687389] [ T138] ? srso_alias_return_thunk+0x5/0xfbef5 [ 5305.687399] [ T138] ? get_receive_buffer+0x168/0x210 [cifs] [ 5305.687555] [ T138] smbd_post_send_credits+0x382/0x4b0 [cifs] [ 5305.687701] [ T138] ? __pfx_smbd_post_send_credits+0x10/0x10 [cifs] [ 5305.687855] [ T138] ? __pfx___schedule+0x10/0x10 [ 5305.687865] [ T138] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 5305.687875] [ T138] ? queue_delayed_work_on+0x8e/0xa0 [ 5305.687889] [ T138] process_one_work+0x629/0xf80 [ 5305.687908] [ T138] ? srso_alias_return_thunk+0x5/0xfbef5 [ 5305.687917] [ T138] ? __kasan_check_write+0x14/0x30 [ 5305.687933] [ T138] worker_thread+0x87f/0x1570 ...

It means rxe_post_recv was called after rdma_destroy_qp(). This happened because put_receive_buffer() was triggered by ib_drain_qp() and called: queue_work(info->workqueue, &info->post_send_credits_work);(CVE-2025-39932)

In the Linux kernel, the following vulnerability has been resolved:

MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits

Since commit e424054000878 ("MIPS: Tracing: Reduce the overhead of dynamic Function Tracer"), the macro UASM_i_LA_mostly has been used, and this macro can generate more than 2 instructions. At the same time, the code in ftrace assumes that no more than 2 instructions can be generated, which is why it stores them in an int[2] array. However, as previously noted, the macro UASM_i_LA_mostly (and now UASM_i_LA) causes a buffer overflow when _mcount is beyond 32 bits. This leads to corruption of the variables located in the __read_mostly section.

This corruption was observed because the variable __cpu_primary_thread_mask was corrupted, causing a hang very early during boot.

This fix prevents the corruption by avoiding the generation of instructions if they could exceed 2 instructions in length. Fortunately, insn_la_mcount is only used if the instrumented code is located outside the kernel code section, so dynamic ftrace can still be used, albeit in a more limited scope. This is still preferable to corrupting memory and/or crashing the kernel.(CVE-2025-71109)

In the Linux kernel, the following vulnerability has been resolved:

riscv: Sanitize syscall table indexing under speculation

The syscall number is a user-controlled value used to index into the syscall table. Use array_index_nospec() to clamp this value after the bounds check to prevent speculative out-of-bounds access and subsequent data leakage via cache side channels.(CVE-2025-71203)

In the Linux kernel, the following vulnerability has been resolved: …

Record: OESA-2026-3157
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:75746 8.8

Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Record: RHSA-2026:75746
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:75747 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record: RHSA-2026:75747
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:76739 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record: RHSA-2026:76739
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:75746 8.8

Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

kernel: Linux kernel: Use-after-free in xc5000 tuner driver due to race condition (CVE-2025-39994)
kernel: gfs2: Fix unlikely race in gdlm_put_lock (CVE-2025-40242)
kernel: Linux kernel: Denial of Service in RDMA/bnxt_re driver due to race condition during QP destruction (CVE-2023-54048)
kernel: nvme-pci: fix mempool alloc size (CVE-2022-50756)
kernel: Linux kernel: Denial of Service in QFQ scheduler via child qlen manipulation (CVE-2026-23105)
kernel: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CVE-2026-45856)
kernel: gfs2: Fix slab-use-after-free in qd_put (CVE-2026-45861)
kernel: net/sched: act_ct: Only release RCU read lock after ct_ft (CVE-2026-46319)
kernel: gfs2: add some missing log locking (CVE-2026-53049)
kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000 (CVE-2026-52972)
kernel: net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CVE-2026-53230)
kernel: ipvs: clear the svc scheduler ptr early on edit (CVE-2026-53270)
kernel: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-63829)
kernel: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CVE-2026-63794)
kernel: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (CVE-2026-63992)
kernel: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (CVE-2026-63994)
kernel: vxlan: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-68432)
kernel: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-72052)
kernel: netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CVE-2026-72255)
kernel: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CVE-2026-74516)
kernel: netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CVE-2026-74569)
kernel: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CVE-2026-74669)
kernel: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (CVE-2026-74744)
kernel: netfilter: flowtable: publish GC-visible tuple last (CVE-2026-74746)
kernel: KVM: s390: vsie: zero stale crypto bits (CVE-2026-80921)
kernel: nvme-tcp: fix host memory disclosure on R2T for a read command (CVE-2026-89481)
kernel: nvme: add missing SRCU grace period in error path (CVE-2026-89972)
kernel: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CVE-2026-90227)
kernel: netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CVE-2026-97417)

Bug Fix(es) and Enhancement(s):

Rocky Linux8.10 - s390/vfio_ccw: Error path cleanups (JIRA:Rocky Linux-252194)
Rocky Linux8.10 - s390/topology: Use zero-based numbering (JIRA:Rocky Linux-252199)
[nfs rhel8.10] Disable async copy on nfsd side (JIRA:Rocky Linux-266661)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:75746
CVSS 3.1: 8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:75747 8.8

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: Linux kernel: Use-after-free in xc5000 tuner driver due to race condition (CVE-2025-39994)
kernel: gfs2: Fix unlikely race in gdlm_put_lock (CVE-2025-40242)
kernel: Linux kernel: Denial of Service in RDMA/bnxt_re driver due to race condition during QP destruction (CVE-2023-54048)
kernel: nvme-pci: fix mempool alloc size (CVE-2022-50756)
kernel: Linux kernel: Denial of Service in QFQ scheduler via child qlen manipulation (CVE-2026-23105)
kernel: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CVE-2026-45856)
kernel: gfs2: Fix slab-use-after-free in qd_put (CVE-2026-45861)
kernel: net/sched: act_ct: Only release RCU read lock after ct_ft (CVE-2026-46319)
kernel: gfs2: add some missing log locking (CVE-2026-53049)
kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000 (CVE-2026-52972)
kernel: net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CVE-2026-53230)
kernel: ipvs: clear the svc scheduler ptr early on edit (CVE-2026-53270)
kernel: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-63829)
kernel: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CVE-2026-63794)
kernel: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (CVE-2026-63992)
kernel: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (CVE-2026-63994)
kernel: vxlan: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-68432)
kernel: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-72052)
kernel: netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CVE-2026-72255)
kernel: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CVE-2026-74516)
kernel: netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CVE-2026-74569)
kernel: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CVE-2026-74669)
kernel: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (CVE-2026-74744)
kernel: netfilter: flowtable: publish GC-visible tuple last (CVE-2026-74746)
kernel: KVM: s390: vsie: zero stale crypto bits (CVE-2026-80921)
kernel: nvme-tcp: fix host memory disclosure on R2T for a read command (CVE-2026-89481)
kernel: nvme: add missing SRCU grace period in error path (CVE-2026-89972)
kernel: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CVE-2026-90227)
kernel: netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CVE-2026-97417)

Bug Fix(es) and Enhancement(s):

Rocky Linux8.10 - s390/vfio_ccw: Error path cleanups (JIRA:Rocky Linux-252194)
Rocky Linux8.10 - s390/topology: Use zero-based numbering (JIRA:Rocky Linux-252199)
[nfs rhel8.10] Disable async copy on nfsd side (JIRA:Rocky Linux-266661)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:75747
CVSS 3.1: 8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVROOT-OS-UBUNTU-2404-CVE-2026-45861 7.0

CVE-2026-45861 in linux - Patched by Root

Root has patched CVE-2026-45861 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record: ROOT-OS-UBUNTU-2404-CVE-2026-45861
CVSS 3.1: 7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-06

OSVUBUNTU-CVE-2026-45861 7.8

Record: UBUNTU-CVE-2026-45861
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-11

OSVALSA-2026:75746 No score

Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

kernel: Linux kernel: Use-after-free in xc5000 tuner driver due to race condition (CVE-2025-39994)
kernel: gfs2: Fix unlikely race in gdlm_put_lock (CVE-2025-40242)
kernel: Linux kernel: Denial of Service in RDMA/bnxt_re driver due to race condition during QP destruction (CVE-2023-54048)
kernel: nvme-pci: fix mempool alloc size (CVE-2022-50756)
kernel: Linux kernel: Denial of Service in QFQ scheduler via child qlen manipulation (CVE-2026-23105)
kernel: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CVE-2026-45856)
kernel: gfs2: Fix slab-use-after-free in qd_put (CVE-2026-45861)
kernel: net/sched: act_ct: Only release RCU read lock after ct_ft (CVE-2026-46319)
kernel: gfs2: add some missing log locking (CVE-2026-53049)
kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000 (CVE-2026-52972)
kernel: net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CVE-2026-53230)
kernel: ipvs: clear the svc scheduler ptr early on edit (CVE-2026-53270)
kernel: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-63829)
kernel: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CVE-2026-63794)
kernel: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (CVE-2026-63992)
kernel: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (CVE-2026-63994)
kernel: vxlan: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-68432)
kernel: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-72052)
kernel: netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CVE-2026-72255)
kernel: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CVE-2026-74516)
kernel: netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CVE-2026-74569)
kernel: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CVE-2026-74669)
kernel: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (CVE-2026-74744)
kernel: netfilter: flowtable: publish GC-visible tuple last (CVE-2026-74746)
kernel: KVM: s390: vsie: zero stale crypto bits (CVE-2026-80921)
kernel: nvme-tcp: fix host memory disclosure on R2T for a read command (CVE-2026-89481)
kernel: nvme: add missing SRCU grace period in error path (CVE-2026-89972)
kernel: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CVE-2026-90227)
kernel: netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CVE-2026-97417)

Bug Fix(es) and Enhancement(s):

AlmaLinux8.10 - s390/vfio_ccw: Error path cleanups (JIRA:AlmaLinux-252194)
AlmaLinux8.10 - s390/topology: Use zero-based numbering (JIRA:AlmaLinux-252199)
[nfs rhel8.10] Disable async copy on nfsd side (JIRA:AlmaLinux-266661)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:75746
Updated: 2026-11-02

OSVALSA-2026:75747 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: Linux kernel: Use-after-free in xc5000 tuner driver due to race condition (CVE-2025-39994)
kernel: gfs2: Fix unlikely race in gdlm_put_lock (CVE-2025-40242)
kernel: Linux kernel: Denial of Service in RDMA/bnxt_re driver due to race condition during QP destruction (CVE-2023-54048)
kernel: nvme-pci: fix mempool alloc size (CVE-2022-50756)
kernel: Linux kernel: Denial of Service in QFQ scheduler via child qlen manipulation (CVE-2026-23105)
kernel: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CVE-2026-45856)
kernel: gfs2: Fix slab-use-after-free in qd_put (CVE-2026-45861)
kernel: net/sched: act_ct: Only release RCU read lock after ct_ft (CVE-2026-46319)
kernel: gfs2: add some missing log locking (CVE-2026-53049)
kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000 (CVE-2026-52972)
kernel: net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CVE-2026-53230)
kernel: ipvs: clear the svc scheduler ptr early on edit (CVE-2026-53270)
kernel: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-63829)
kernel: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CVE-2026-63794)
kernel: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (CVE-2026-63992)
kernel: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (CVE-2026-63994)
kernel: vxlan: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-68432)
kernel: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-72052)
kernel: netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CVE-2026-72255)
kernel: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CVE-2026-74516)
kernel: netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CVE-2026-74569)
kernel: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CVE-2026-74669)
kernel: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (CVE-2026-74744)
kernel: netfilter: flowtable: publish GC-visible tuple last (CVE-2026-74746)
kernel: KVM: s390: vsie: zero stale crypto bits (CVE-2026-80921)
kernel: nvme-tcp: fix host memory disclosure on R2T for a read command (CVE-2026-89481)
kernel: nvme: add missing SRCU grace period in error path (CVE-2026-89972)
kernel: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CVE-2026-90227)
kernel: netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CVE-2026-97417)

Bug Fix(es) and Enhancement(s):

AlmaLinux8.10 - s390/vfio_ccw: Error path cleanups (JIRA:AlmaLinux-252194)
AlmaLinux8.10 - s390/topology: Use zero-based numbering (JIRA:AlmaLinux-252199)
[nfs rhel8.10] Disable async copy on nfsd side (JIRA:AlmaLinux-266661)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:75747
Updated: 2026-11-02

OSVAZL-88524 No score

CVE-2026-45861 affecting package kernel 6.6.161.1-1

In the Linux kernel, the following vulnerability has been resolved:

gfs2: Fix slab-use-after-free in qd_put

Fix this by removing qd objects from the LRU list before freeing them in qd_put().

Initial fix from Deepanshu Kartikey [email protected].

Record: AZL-88524
Updated: 2026-11-05

OSVCLSA-2026-1788170774 No score

kernel: Fix of 132 CVEs

sctp: fix potential deadlock on &net->sctp.addr_wq_lock {CVE-2024-0639}
sctp: delay auto_asconf init until binding the first addr {CVE-2021-23133}
netfilter: nf_log: validate MAC header was set before dumping it {CVE-2026-52942}
netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check {CVE-2026-52998}
drm/nouveau: fix u32 overflow in pushbuf reloc bounds check {CVE-2026-46006}
btrfs: fix use-after-free when attempting to join an aborted transaction {CVE-2025-21753}
btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
team: fix header_ops type confusion with non-Ethernet ports {CVE-2026-31502}
xfrm: Fix dev use-after-free in xfrm async resumption {CVE-2026-72463}
xfrm: hold dev ref until after transport_finish NF_HOOK {CVE-2026-31663}
xen/privcmd: restrict usage in unprivileged domU {CVE-2026-31788}
xen/privcmd: add IOCTL_PRIVCMD_RESTRICT {CVE-2026-31788}
Bluetooth: L2CAP: make l2cap_connect() return void {CVE-2024-36013}
btrfs: fix incorrect splitting in btrfs_drop_extent_map_range {CVE-2023-54121}
netfilter: nf_conntrack: defer invalid log until after unlock {CVE-2026-74624}
NFS: Pin the 'struct nfs_server' during a FREE_STATEID call {CVE-2026-74730}
dm cache: fix flushing uninitialized delayed_work on cache_ctr error {CVE-2024-50280}
audit: fix recursive locking deadlock in audit_dupe_exe() {CVE-2026-68096}
RDMA/rxe: Reject unknown opcodes before ICRC processing {CVE-2026-46133}
Bluetooth: bnep: reject short frames before parsing {CVE-2026-53253}
net: pull headers in qdisc_pkt_len_segs_init() {CVE-2026-53091}
inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266}
Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed {CVE-2022-50103}
btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
fanotify: fix false positive on permission events {CVE-2026-46150}
HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103}
ext4: fix e4b bitmap inconsistency reports {CVE-2026-45942}
Bluetooth: serialize accept_q access {CVE-2026-52918}
ALSA: usb-audio: Add sanity check for OOB writes at silencing {CVE-2026-43279}
RDMA/bnxt_re: zero shared page before exposing to userspace {CVE-2026-74584}
sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
ipvs: clear IPv4 options after rebasing tunnel ICMP errors {CVE-2026-74669}
wifi: cfg80211: Partial revert "wifi: cfg80211: Fix use after free for wext" {CVE-2023-53153}
net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
nfs: use nfsi->rwsem to protect traversal of the file lock list {CVE-2026-72472}
Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}
drm/amdgpu/vce: fix integer overflow in image size {CVE-2026-68108}
ALSA: seq: close a re-opened queue timer in the destructor {CVE-2026-68202}
ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() {CVE-2026-74499}
USB: serial: io_edgeport: cap received transmit credits {CVE-2026-68365}
net: slip: serialize receive against buffer reallocation {CVE-2026-68143}
wifi: cfg80211: cancel sched scan results work on unregister {CVE-2026-68414}
sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}
sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}
pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}
ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() {CVE-2026-68160}
libceph: refresh auth->authorizer_buf{,_len} after authorizer update {CVE-2026-68156}
libceph: remove debugfs files before client teardown {CVE-2026-68153}
libceph: Fix multiplication overflow in decode_new_up_state_weight() {CVE-2026-68158}
libceph: reject zero bucket types in crush_decode {CVE-2026-68154}
libceph: bound…

Record: CLSA-2026-1788170774
Updated: 2026-11-02

OSVCLSA-2026-1788257079 No score

kernel: Fix of 131 CVEs

sctp: fix potential deadlock on &net->sctp.addr_wq_lock {CVE-2024-0639}
sctp: delay auto_asconf init until binding the first addr {CVE-2021-23133}
netfilter: nf_log: validate MAC header was set before dumping it {CVE-2026-52942}
netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check {CVE-2026-52998}
drm/nouveau: fix u32 overflow in pushbuf reloc bounds check {CVE-2026-46006}
btrfs: fix use-after-free when attempting to join an aborted transaction {CVE-2025-21753}
btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
team: fix header_ops type confusion with non-Ethernet ports {CVE-2026-31502}
xfrm: Fix dev use-after-free in xfrm async resumption {CVE-2026-72463}
xfrm: hold dev ref until after transport_finish NF_HOOK {CVE-2026-31663}
xen/privcmd: restrict usage in unprivileged domU {CVE-2026-31788}
xen/privcmd: add IOCTL_PRIVCMD_RESTRICT {CVE-2026-31788}
Bluetooth: L2CAP: make l2cap_connect() return void {CVE-2024-36013}
btrfs: fix incorrect splitting in btrfs_drop_extent_map_range {CVE-2023-54121}
netfilter: nf_conntrack: defer invalid log until after unlock {CVE-2026-74624}
NFS: Pin the 'struct nfs_server' during a FREE_STATEID call {CVE-2026-74730}
dm cache: fix flushing uninitialized delayed_work on cache_ctr error {CVE-2024-50280}
audit: fix recursive locking deadlock in audit_dupe_exe() {CVE-2026-68096}
RDMA/rxe: Reject unknown opcodes before ICRC processing {CVE-2026-46133}
Bluetooth: bnep: reject short frames before parsing {CVE-2026-53253}
net: pull headers in qdisc_pkt_len_segs_init() {CVE-2026-53091}
inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266}
Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed {CVE-2022-50103}
btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
fanotify: fix false positive on permission events {CVE-2026-46150}
HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103}
ext4: fix e4b bitmap inconsistency reports {CVE-2026-45942}
Bluetooth: serialize accept_q access {CVE-2026-52918}
ALSA: usb-audio: Add sanity check for OOB writes at silencing {CVE-2026-43279}
RDMA/bnxt_re: zero shared page before exposing to userspace {CVE-2026-74584}
sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
ipvs: clear IPv4 options after rebasing tunnel ICMP errors {CVE-2026-74669}
wifi: cfg80211: Partial revert "wifi: cfg80211: Fix use after free for wext" {CVE-2023-53153}
net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
nfs: use nfsi->rwsem to protect traversal of the file lock list {CVE-2026-72472}
Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}
drm/amdgpu/vce: fix integer overflow in image size {CVE-2026-68108}
ALSA: seq: close a re-opened queue timer in the destructor {CVE-2026-68202}
ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() {CVE-2026-74499}
USB: serial: io_edgeport: cap received transmit credits {CVE-2026-68365}
net: slip: serialize receive against buffer reallocation {CVE-2026-68143}
wifi: cfg80211: cancel sched scan results work on unregister {CVE-2026-68414}
sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}
sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}
pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}
ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() {CVE-2026-68160}
libceph: refresh auth->authorizer_buf{,_len} after authorizer update {CVE-2026-68156}
libceph: remove debugfs files before client teardown {CVE-2026-68153}
libceph: Fix multiplication overflow in decode_new_up_state_weight() {CVE-2026-68158}
libceph: reject zero bucket types in crush_decode {CVE-2026-68154}
libceph: bound…

Record: CLSA-2026-1788257079
Updated: 2026-11-02

OSVCLSA-2026-1788259625 No score

kernel: Fix of 132 CVEs

sctp: fix potential deadlock on &net->sctp.addr_wq_lock {CVE-2024-0639}
sctp: delay auto_asconf init until binding the first addr {CVE-2021-23133}
netfilter: nf_log: validate MAC header was set before dumping it {CVE-2026-52942}
netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check {CVE-2026-52998}
drm/nouveau: fix u32 overflow in pushbuf reloc bounds check {CVE-2026-46006}
btrfs: fix use-after-free when attempting to join an aborted transaction {CVE-2025-21753}
btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
team: fix header_ops type confusion with non-Ethernet ports {CVE-2026-31502}
xfrm: Fix dev use-after-free in xfrm async resumption {CVE-2026-72463}
xfrm: hold dev ref until after transport_finish NF_HOOK {CVE-2026-31663}
xen/privcmd: restrict usage in unprivileged domU {CVE-2026-31788}
xen/privcmd: add IOCTL_PRIVCMD_RESTRICT {CVE-2026-31788}
Bluetooth: L2CAP: make l2cap_connect() return void {CVE-2024-36013}
btrfs: fix incorrect splitting in btrfs_drop_extent_map_range {CVE-2023-54121}
netfilter: nf_conntrack: defer invalid log until after unlock {CVE-2026-74624}
NFS: Pin the 'struct nfs_server' during a FREE_STATEID call {CVE-2026-74730}
dm cache: fix flushing uninitialized delayed_work on cache_ctr error {CVE-2024-50280}
audit: fix recursive locking deadlock in audit_dupe_exe() {CVE-2026-68096}
RDMA/rxe: Reject unknown opcodes before ICRC processing {CVE-2026-46133}
Bluetooth: bnep: reject short frames before parsing {CVE-2026-53253}
net: pull headers in qdisc_pkt_len_segs_init() {CVE-2026-53091}
inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266}
Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed {CVE-2022-50103}
btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
fanotify: fix false positive on permission events {CVE-2026-46150}
HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103}
ext4: fix e4b bitmap inconsistency reports {CVE-2026-45942}
Bluetooth: serialize accept_q access {CVE-2026-52918}
ALSA: usb-audio: Add sanity check for OOB writes at silencing {CVE-2026-43279}
RDMA/bnxt_re: zero shared page before exposing to userspace {CVE-2026-74584}
sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
ipvs: clear IPv4 options after rebasing tunnel ICMP errors {CVE-2026-74669}
wifi: cfg80211: Partial revert "wifi: cfg80211: Fix use after free for wext" {CVE-2023-53153}
net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
nfs: use nfsi->rwsem to protect traversal of the file lock list {CVE-2026-72472}
Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}
drm/amdgpu/vce: fix integer overflow in image size {CVE-2026-68108}
ALSA: seq: close a re-opened queue timer in the destructor {CVE-2026-68202}
ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() {CVE-2026-74499}
USB: serial: io_edgeport: cap received transmit credits {CVE-2026-68365}
net: slip: serialize receive against buffer reallocation {CVE-2026-68143}
wifi: cfg80211: cancel sched scan results work on unregister {CVE-2026-68414}
sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}
sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}
pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}
ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() {CVE-2026-68160}
libceph: refresh auth->authorizer_buf{,_len} after authorizer update {CVE-2026-68156}
libceph: remove debugfs files before client teardown {CVE-2026-68153}
libceph: Fix multiplication overflow in decode_new_up_state_weight() {CVE-2026-68158}
libceph: reject zero bucket types in crush_decode {CVE-2026-68154}
libceph: bound…

Record: CLSA-2026-1788259625
Updated: 2026-11-02

OSVCLSA-2026-1792759740 No score

kernel: Fix of 134 CVEs

net: skbuff: propagate shared-frag marker in skb_zerocopy()
net: bridge: stop fast-leave after deleting a port group {CVE-2026-74480}
net: ipv6: clear suppressed fib6 rule result {CVE-2026-74581}
ipvs: do not propagate one-packet flag to synced conns {CVE-2026-80714}
net: skbuff: propagate shared-frag marker through frag-transfer helpers {CVE-2026-43503}
net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow {CVE-2026-98025}
ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF {CVE-2026-98116}
sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START {CVE-2026-98130}
dm cache policy smq: check allocation under invalidate lock {CVE-2026-53265}
RDMA/siw: Bound fragmented header copies by the remaining length {CVE-2026-98323}
tty: clear cdev pointer after cdev_add() failure {CVE-2026-90334}
tty: skip cdev_del() when no cdev is registered {CVE-2026-90335}
procfs: fix missing RCU protection when reading real_parent in do_task_stat() {CVE-2026-46259}
sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL {CVE-2026-46227}
drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() {CVE-2026-46209}
drm: Remove plane hsub/vsub alignment requirement for core helpers {CVE-2026-46209}
RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path {CVE-2026-46189}
RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() {CVE-2026-46181}
scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() {CVE-2026-46149}
RDMA/rxe: Reject unknown opcodes before ICRC processing {CVE-2026-46133}
ip6_gre: Use cached t->net in ip6erspan_changelink(). {CVE-2026-46120}
libceph: Fix slab-out-of-bounds access in auth message processing {CVE-2026-46119}
Bluetooth: hci_event: fix potential UAF in SSP passkey handlers {CVE-2026-46056}
net: qrtr: ns: Fix use-after-free in driver remove() {CVE-2026-46047}
RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv {CVE-2026-46043}
gfs2: Fix use-after-free in iomap inline data write path {CVE-2026-45984}
gfs2: Add metapath_dibh helper {CVE-2026-45984}
bonding: alb: fix UAF in rlb_arp_recv during bond up/down {CVE-2026-45970}
gfs2: Fix slab-use-after-free in qd_put {CVE-2026-45861}
RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send {CVE-2026-45856}
dm: fix a buffer overflow in ioctl processing {CVE-2026-46294}
wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task {CVE-2026-46180}
netfilter: nf_log: validate MAC header was set before dumping it {CVE-2026-52942}
xfrm: espintcp: do not reuse an in-progress partial send {CVE-2026-52935}
sctp: purge outqueue on stale COOKIE-ECHO handling {CVE-2026-52924}
ipc: limit next_id allocation to the valid ID range {CVE-2026-52923}
netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920}
netfilter: nf_queue: hold bridge skb->dev while queued {CVE-2026-52912}
ipvs: clear the svc scheduler ptr early on edit {CVE-2026-53270}
netfilter: conntrack_irc: fix possible out-of-bounds read {CVE-2026-53268}
net/sched: act_api: use RCU with deferred freeing for action lifecycle {CVE-2026-53264}
Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() {CVE-2026-53256}
Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() {CVE-2026-53239}
ipv6: sit: reload inner IPv6 header after GSO offloads {CVE-2026-53228}
net: guard timestamp cmsgs to real error queue skbs {CVE-2026-53223}
USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() {CVE-2026-53195}
wifi: nl80211: reject oversized EMA RNR lists {CVE-2026-53182}
netfilter: require Ethernet MAC header before using eth_hdr() {CVE-2026-53131}
bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops {CVE-2026-53078}
ppp: require CAP_NET_ADMIN in target…

Record: CLSA-2026-1792759740
Updated: 2026-11-02

OSVCLSA-2026-1792762308 No score

kernel: Fix of 128 CVEs

net: skbuff: propagate shared-frag marker in skb_zerocopy()
net: bridge: stop fast-leave after deleting a port group {CVE-2026-74480}
net: ipv6: clear suppressed fib6 rule result {CVE-2026-74581}
net: skbuff: propagate shared-frag marker through frag-transfer helpers {CVE-2026-43503}
ALSA: virtio: reset device before deleting virtqueues {CVE-2026-98264}
ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() {CVE-2026-90033}
ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set {CVE-2026-74498}
ALSA: caiaq: Fix potential double-free at error path {CVE-2026-98066}
ASoC: Intel: avs: Disable periods-elapsed work when closing PCM {CVE-2025-40344}
ALSA: timer: drain a slave's callback before its master detaches it {CVE-2026-68201}
ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams {CVE-2026-53242}
ALSA: seq: midi: Serialize output teardown with event_input {CVE-2026-74387}
security/keys: fix missed RCU read section on lookup {CVE-2026-64015}
SUNRPC: harden gss_krb5_unwrap_v2 against short tokens {CVE-2026-89542}
sctp: fix err_chunk memory leaks in INIT handling {CVE-2026-72413}
netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() {CVE-2026-98077}
netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() {CVE-2026-74569}
mm/hugetlb: fix list corruption in allocate_file_region_entries() {CVE-2026-74518}
rcu: Fix rcu_read_unlock() deadloop due to softirq {CVE-2026-45957}
bpf: Fix potential UAF in bpf_netns_link_update_prog {CVE-2026-90393}
bpf: Fix use-after-free in offloaded map/prog info fill {CVE-2026-53089}
NFSv4.2: fix LAYOUTSTATS send buffer exhaustion {CVE-2026-90103}
uio: Fix stale info pointer in failed registration path {CVE-2026-93054}
tty: clear cdev pointer after cdev_add() failure {CVE-2026-90334}
tty: skip cdev_del() when no cdev is registered {CVE-2026-90335}
scsi: qla2xxx: Avoid double completion in async IOCB timeout {CVE-2026-89847}
scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue {CVE-2025-37861}
scsi: csiostor: Fix dereference of null pointer rn {CVE-2026-45857}
scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write {CVE-2026-74470}
wifi: brcmsmac: fix UAF in brcms_free_timer() {CVE-2026-98196}
wifi: mwifiex: validate scan response extents {CVE-2026-98185}
wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length {CVE-2026-90382}
wifi: iwlwifi: mvm: add a check on the tid coming from the firmware {CVE-2026-93791}
wifi: ath9k: fix OOB access from firmware tx status queue ID {CVE-2026-74408}
net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow {CVE-2026-98025}
net: thunderbolt: Fix frags[] overflow by bounding frame_count {CVE-2026-72157}
net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put {CVE-2026-98015}
net: stmmac: xgmac2: disable RBUE in default RX interrupt mask {CVE-2026-93830}
net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list {CVE-2026-53230}
xen/netfront: drop RX packets with a short Ethernet header {CVE-2026-98375}
veth: fix NAPI leak in XDP enable error path {CVE-2026-80613}
RDMA/rxe: Fix double free in rxe_srq_from_init {CVE-2026-45852}
RDMA/iwcm: Fix workqueue list corruption by removing work_list {CVE-2026-45898}
ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control {CVE-2026-72261}
svcrdma: Fix offset arithmetic in read_chunk_range {CVE-2026-89533}
SUNRPC: svcauth_gss: enforce krb5 token minimum length {CVE-2026-89550}
xprtrdma: Fix ep kref imbalance on ADDR_CHANGE {CVE-2026-72469}
sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START {CVE-2026-98130}
sctp: drop a chunk if its transport was removed {CVE-2026-89478}
sctp: prevent peer transport count overflow {CVE-2026-74469}
sctp: validate embedded address parameter length {CVE-2026-74287}
sctp: revalidate list cursor after…

Record: CLSA-2026-1792762308
Updated: 2026-11-02

OSVopenSUSE-SU-2026:21388-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-10263: arm64: cputype: Add C1-Premium definitions (bsc#1266290).
CVE-2025-39894: netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm (bsc#1262430).
CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
CVE-2026-23248: perf: Make perf_pmu_unregister() useable (bsc#1259800).
CVE-2026-23394: Revert: "af_unix: Remove lock dance in unix_peek_fds()." (bsc#1260565).
CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
CVE-2026-31438: netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators (bsc#1267824).
CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (bsc#1267816).
CVE-2026-31479: drm/xe: always keep track of remap prev/next (bsc#1262765).
CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
CVE-2026-31560: spi: spi-dw-dma: fix print error log when wait finish transaction (bsc#1263057).
CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
CVE-2026-31646: net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() (bsc#1263796).
CVE-2026-31647: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (bsc#1263581).
CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
CVE-2026-31664: xfrm: clear trailing padding in build_polexpire() (bsc#1263578).
CVE-2026-31665: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
CVE-2026-31674: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (bsc#1263568).
CVE-2026-31680: net: ipv6: flowlabel: defer exclusive option free until RCU teardown (bsc#1263563).
CVE-2026-31693: cifs: some missing initializations on replay (bsc#1267744).
CVE-2026-31743: nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy (bsc#1264067).
CVE-2026-31752: bridge: br_nd_send: validate ND option lengths (bsc#1264045).
CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
CVE-2026-43014,CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010 bsc#1264012).
CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
CVE-2026-43024: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).
CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934).
CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
CVE-2026-43035: net:…

Record: openSUSE-SU-2026:21388-1
Updated: 2026-11-02

OSVSUSE-SU-2026:22742-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-10263: arm64: cputype: Add C1-Premium definitions (bsc#1266290).
CVE-2025-39894: netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm (bsc#1262430).
CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
CVE-2026-23248: perf: Make perf_pmu_unregister() useable (bsc#1259800).
CVE-2026-23394: Revert: "af_unix: Remove lock dance in unix_peek_fds()." (bsc#1260565).
CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
CVE-2026-31438: netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators (bsc#1267824).
CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (bsc#1267816).
CVE-2026-31479: drm/xe: always keep track of remap prev/next (bsc#1262765).
CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
CVE-2026-31560: spi: spi-dw-dma: fix print error log when wait finish transaction (bsc#1263057).
CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
CVE-2026-31646: net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() (bsc#1263796).
CVE-2026-31647: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (bsc#1263581).
CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
CVE-2026-31664: xfrm: clear trailing padding in build_polexpire() (bsc#1263578).
CVE-2026-31665: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
CVE-2026-31674: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (bsc#1263568).
CVE-2026-31680: net: ipv6: flowlabel: defer exclusive option free until RCU teardown (bsc#1263563).
CVE-2026-31693: cifs: some missing initializations on replay (bsc#1267744).
CVE-2026-31743: nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy (bsc#1264067).
CVE-2026-31752: bridge: br_nd_send: validate ND option lengths (bsc#1264045).
CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
CVE-2026-43014,CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010 bsc#1264012).
CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
CVE-2026-43024: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).
CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934).
CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
CVE-2026-43035: net:…

Record: SUSE-SU-2026:22742-1
Updated: 2026-11-02

OSVSUSE-SU-2026:22769-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-10263: arm64: cputype: Add C1-Premium definitions (bsc#1266290).
CVE-2025-39894: netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm (bsc#1262430).
CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
CVE-2026-23248: perf: Make perf_pmu_unregister() useable (bsc#1259800).
CVE-2026-23394: Revert: "af_unix: Remove lock dance in unix_peek_fds()." (bsc#1260565).
CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
CVE-2026-31438: netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators (bsc#1267824).
CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (bsc#1267816).
CVE-2026-31479: drm/xe: always keep track of remap prev/next (bsc#1262765).
CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
CVE-2026-31560: spi: spi-dw-dma: fix print error log when wait finish transaction (bsc#1263057).
CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
CVE-2026-31646: net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() (bsc#1263796).
CVE-2026-31647: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (bsc#1263581).
CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
CVE-2026-31664: xfrm: clear trailing padding in build_polexpire() (bsc#1263578).
CVE-2026-31665: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
CVE-2026-31674: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (bsc#1263568).
CVE-2026-31680: net: ipv6: flowlabel: defer exclusive option free until RCU teardown (bsc#1263563).
CVE-2026-31693: cifs: some missing initializations on replay (bsc#1267744).
CVE-2026-31743: nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy (bsc#1264067).
CVE-2026-31752: bridge: br_nd_send: validate ND option lengths (bsc#1264045).
CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
CVE-2026-43014,CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010 bsc#1264012).
CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
CVE-2026-43024: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).
CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934).
CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
CVE-2026-43035: net:…

Record: SUSE-SU-2026:22769-1
Updated: 2026-11-02

OSVSUSE-SU-2026:22812-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-10263: arm64: cputype: Add C1-Premium definitions (bsc#1266290).
CVE-2025-39894: netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm (bsc#1262430).
CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
CVE-2026-23248: perf: Make perf_pmu_unregister() useable (bsc#1259800).
CVE-2026-23394: Revert: "af_unix: Remove lock dance in unix_peek_fds()." (bsc#1260565).
CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
CVE-2026-31438: netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators (bsc#1267824).
CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (bsc#1267816).
CVE-2026-31479: drm/xe: always keep track of remap prev/next (bsc#1262765).
CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
CVE-2026-31560: spi: spi-dw-dma: fix print error log when wait finish transaction (bsc#1263057).
CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
CVE-2026-31646: net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() (bsc#1263796).
CVE-2026-31647: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (bsc#1263581).
CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
CVE-2026-31664: xfrm: clear trailing padding in build_polexpire() (bsc#1263578).
CVE-2026-31665: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
CVE-2026-31674: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (bsc#1263568).
CVE-2026-31680: net: ipv6: flowlabel: defer exclusive option free until RCU teardown (bsc#1263563).
CVE-2026-31693: cifs: some missing initializations on replay (bsc#1267744).
CVE-2026-31743: nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy (bsc#1264067).
CVE-2026-31752: bridge: br_nd_send: validate ND option lengths (bsc#1264045).
CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
CVE-2026-43014,CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010 bsc#1264012).
CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
CVE-2026-43024: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).
CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934).
CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
CVE-2026-43035: net:…

Record: SUSE-SU-2026:22812-1
Updated: 2026-11-02

OSVSUSE-SU-2026:22835-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-10263: arm64: cputype: Add C1-Premium definitions (bsc#1266290).
CVE-2025-39894: netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm (bsc#1262430).
CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
CVE-2026-23248: perf: Make perf_pmu_unregister() useable (bsc#1259800).
CVE-2026-23394: Revert: "af_unix: Remove lock dance in unix_peek_fds()." (bsc#1260565).
CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
CVE-2026-31438: netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators (bsc#1267824).
CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (bsc#1267816).
CVE-2026-31479: drm/xe: always keep track of remap prev/next (bsc#1262765).
CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
CVE-2026-31560: spi: spi-dw-dma: fix print error log when wait finish transaction (bsc#1263057).
CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
CVE-2026-31646: net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() (bsc#1263796).
CVE-2026-31647: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (bsc#1263581).
CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
CVE-2026-31664: xfrm: clear trailing padding in build_polexpire() (bsc#1263578).
CVE-2026-31665: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
CVE-2026-31674: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (bsc#1263568).
CVE-2026-31680: net: ipv6: flowlabel: defer exclusive option free until RCU teardown (bsc#1263563).
CVE-2026-31693: cifs: some missing initializations on replay (bsc#1267744).
CVE-2026-31743: nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy (bsc#1264067).
CVE-2026-31752: bridge: br_nd_send: validate ND option lengths (bsc#1264045).
CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
CVE-2026-43014,CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010 bsc#1264012).
CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
CVE-2026-43024: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).
CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934).
CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
CVE-2026-43035: net:…

Record: SUSE-SU-2026:22835-1
Updated: 2026-11-02

OSVUSN-8492-1 No score

linux, linux-aws, linux-aws-fips, linux-gcp, linux-gcp-fips, linux-ibm, linux-nvidia, linux-nvidia-6.8, linux-oracle, linux-realtime, linux-realtime-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
ATM drivers;
RNBD block device driver;
Ublk userspace block driver;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
CPU idle management framework;
Hardware crypto device drivers;
DMA engine subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Broadcom VK accelerator driver;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
RapidIO drivers;
RAS (Reliability, Availability, Serviceability) subsystem;
Remote Processor subsystem;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
MediaTek SoC drivers;
Texas Instruments SoC drivers;
SPI subsystem;
Greybus lights staging drivers;
Realtek RTL8723BS SDIO drivers;
UFS subsystem;
ChipIdea USB driver;
DesignWare USB3 driver;
USB over IP driver;
vDPA drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
BTRFS file system;
File systems infrastructure;
Ceph distributed file system;
Ext4 file system;
F2FS file system;
FAT file system;
GFS2 file system;
HFS+ file system;
JFS file system;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
OCFS2 file system;
Proc file system;
Pstore file system;
Diskquota system;
SMB network file system;
XFS file system;
Audit subsystem;
Memory Management;
IPv6 networking;
Netfilter;
Tracing infrastructure;
Kernel kexec() syscall;
RCU subsystem;
Scheduler infrastructure;
Scatterlist API;
9P file system network protocol;
Asynchronous Transfer Mode (ATM) subsystem;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Ceph Core library;
Networking core;
IPv4 networking;
KCM (Kernel Connection Multiplexor) sockets driver;
Multipath TCP;
NFC subsystem;
RDS protocol;
RxRPC session sockets;
Network traffic control;
SMC sockets;
Sun RPC protocol;
X.25 network layer;
XFRM subsystem;
AppArmor security module;
Simplified Mandatory Access Control Kernel framework;
SOF drivers;
USB sound devices; (CVE-2025-40005, CVE-2025-71229, CVE-2025-71231, CVE-2025-71232, CVE-2025-71233, CVE-2025-71235, CVE-2025-71236, CVE-2025-71237, CVE-2025-71238, CVE-2025-71239, CVE-2025-71265, CVE-2025-71266, CVE-2025-71267, CVE-2025-71272, CVE-2025-71273, CVE-2025-71274, CVE-2025-71286, CVE-2025-71291, CVE-2025-71292, CVE-2025-71294, CVE-2025-71295, CVE-2025-71297, CVE-2025-71304, CVE-2025-71305, CVE-2026-23100, CVE-2026-23169, CVE-2026-23220, CVE-2026-23221, CVE-2026-23222, CVE-2026-23228, CVE-2026-23229, CVE-2026-23230, CVE-2026-23233, CVE-2026-23234, CVE-2026-23235, CVE-2026-23236, CVE-2026-23237, CVE-2026-23238, CVE-2026-23241, CVE-2026-23242, CVE-2026-23243, CVE-2026-23249, CVE-2026-23266, CVE-2026-23267, CVE-2026-23272, CVE-2026-23278, CVE-2026-23392, CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402, CVE-2026-31411, CVE-2026-31418, CVE-2026-31436, CVE-2026-31448, CVE-2026-31478, CVE-2026-31607,…

Record: USN-8492-1
Updated: 2026-11-06

OSVUSN-8492-2 No score

linux-aws-6.8, linux-gcp-6.8, linux-gke, linux-gkeop, linux-ibm-6.8, linux-nvidia-lowlatency, linux-oracle-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
ATM drivers;
RNBD block device driver;
Ublk userspace block driver;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
CPU idle management framework;
Hardware crypto device drivers;
DMA engine subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Broadcom VK accelerator driver;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
RapidIO drivers;
RAS (Reliability, Availability, Serviceability) subsystem;
Remote Processor subsystem;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
MediaTek SoC drivers;
Texas Instruments SoC drivers;
SPI subsystem;
Greybus lights staging drivers;
Realtek RTL8723BS SDIO drivers;
UFS subsystem;
ChipIdea USB driver;
DesignWare USB3 driver;
USB over IP driver;
vDPA drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
BTRFS file system;
File systems infrastructure;
Ceph distributed file system;
Ext4 file system;
F2FS file system;
FAT file system;
GFS2 file system;
HFS+ file system;
JFS file system;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
OCFS2 file system;
Proc file system;
Pstore file system;
Diskquota system;
SMB network file system;
XFS file system;
Audit subsystem;
Memory Management;
IPv6 networking;
Netfilter;
Tracing infrastructure;
Kernel kexec() syscall;
RCU subsystem;
Scheduler infrastructure;
Scatterlist API;
9P file system network protocol;
Asynchronous Transfer Mode (ATM) subsystem;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Ceph Core library;
Networking core;
IPv4 networking;
KCM (Kernel Connection Multiplexor) sockets driver;
Multipath TCP;
NFC subsystem;
RDS protocol;
RxRPC session sockets;
Network traffic control;
SMC sockets;
Sun RPC protocol;
X.25 network layer;
XFRM subsystem;
AppArmor security module;
Simplified Mandatory Access Control Kernel framework;
SOF drivers;
USB sound devices; (CVE-2025-40005, CVE-2025-71229, CVE-2025-71231, CVE-2025-71232, CVE-2025-71233, CVE-2025-71235, CVE-2025-71236, CVE-2025-71237, CVE-2025-71238, CVE-2025-71239, CVE-2025-71265, CVE-2025-71266, CVE-2025-71267, CVE-2025-71272, CVE-2025-71273, CVE-2025-71274, CVE-2025-71286, CVE-2025-71291, CVE-2025-71292, CVE-2025-71294, CVE-2025-71295, CVE-2025-71297, CVE-2025-71304, CVE-2025-71305, CVE-2026-23100, CVE-2026-23169, CVE-2026-23220, CVE-2026-23221, CVE-2026-23222, CVE-2026-23228, CVE-2026-23229, CVE-2026-23230, CVE-2026-23233, CVE-2026-23234, CVE-2026-23235, CVE-2026-23236, CVE-2026-23237, CVE-2026-23238, CVE-2026-23241, CVE-2026-23242, CVE-2026-23243, CVE-2026-23249, CVE-2026-23266, CVE-2026-23267, CVE-2026-23272, CVE-2026-23278, CVE-2026-23392, CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402, CVE-2026-31411, CVE-2026-31418, CVE-2026-31436, CVE-2026-31448, CVE-2026-31478, CVE-2026-31607,…

Record: USN-8492-2
Updated: 2026-11-06

OSVUSN-8492-3 No score

linux-raspi-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
ATM drivers;
RNBD block device driver;
Ublk userspace block driver;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
CPU idle management framework;
Hardware crypto device drivers;
DMA engine subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Broadcom VK accelerator driver;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
RapidIO drivers;
RAS (Reliability, Availability, Serviceability) subsystem;
Remote Processor subsystem;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
MediaTek SoC drivers;
Texas Instruments SoC drivers;
SPI subsystem;
Greybus lights staging drivers;
Realtek RTL8723BS SDIO drivers;
UFS subsystem;
ChipIdea USB driver;
DesignWare USB3 driver;
USB over IP driver;
vDPA drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
BTRFS file system;
File systems infrastructure;
Ceph distributed file system;
Ext4 file system;
F2FS file system;
FAT file system;
GFS2 file system;
HFS+ file system;
JFS file system;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
OCFS2 file system;
Proc file system;
Pstore file system;
Diskquota system;
SMB network file system;
XFS file system;
Audit subsystem;
Memory Management;
IPv6 networking;
Netfilter;
Tracing infrastructure;
Kernel kexec() syscall;
RCU subsystem;
Scheduler infrastructure;
Scatterlist API;
9P file system network protocol;
Asynchronous Transfer Mode (ATM) subsystem;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Ceph Core library;
Networking core;
IPv4 networking;
KCM (Kernel Connection Multiplexor) sockets driver;
Multipath TCP;
NFC subsystem;
RDS protocol;
RxRPC session sockets;
Network traffic control;
SMC sockets;
Sun RPC protocol;
X.25 network layer;
XFRM subsystem;
AppArmor security module;
Simplified Mandatory Access Control Kernel framework;
SOF drivers;
USB sound devices; (CVE-2025-40005, CVE-2025-71229, CVE-2025-71231, CVE-2025-71232, CVE-2025-71233, CVE-2025-71235, CVE-2025-71236, CVE-2025-71237, CVE-2025-71238, CVE-2025-71239, CVE-2025-71265, CVE-2025-71266, CVE-2025-71267, CVE-2025-71272, CVE-2025-71273, CVE-2025-71274, CVE-2025-71286, CVE-2025-71291, CVE-2025-71292, CVE-2025-71294, CVE-2025-71295, CVE-2025-71297, CVE-2025-71304, CVE-2025-71305, CVE-2026-23100, CVE-2026-23169, CVE-2026-23220, CVE-2026-23221, CVE-2026-23222, CVE-2026-23228, CVE-2026-23229, CVE-2026-23230, CVE-2026-23233, CVE-2026-23234, CVE-2026-23235, CVE-2026-23236, CVE-2026-23237, CVE-2026-23238, CVE-2026-23241, CVE-2026-23242, CVE-2026-23243, CVE-2026-23249, CVE-2026-23266, CVE-2026-23267, CVE-2026-23272, CVE-2026-23278, CVE-2026-23392, CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402, CVE-2026-31411, CVE-2026-31418, CVE-2026-31436, CVE-2026-31448, CVE-2026-31478, CVE-2026-31607,…

Record: USN-8492-3
Updated: 2026-11-06

OSVUSN-8492-4 No score

linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
ATM drivers;
RNBD block device driver;
Ublk userspace block driver;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
CPU idle management framework;
Hardware crypto device drivers;
DMA engine subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Broadcom VK accelerator driver;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
RapidIO drivers;
RAS (Reliability, Availability, Serviceability) subsystem;
Remote Processor subsystem;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
MediaTek SoC drivers;
Texas Instruments SoC drivers;
SPI subsystem;
Greybus lights staging drivers;
Realtek RTL8723BS SDIO drivers;
UFS subsystem;
ChipIdea USB driver;
DesignWare USB3 driver;
USB over IP driver;
vDPA drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
BTRFS file system;
File systems infrastructure;
Ceph distributed file system;
Ext4 file system;
F2FS file system;
FAT file system;
GFS2 file system;
HFS+ file system;
JFS file system;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
OCFS2 file system;
Proc file system;
Pstore file system;
Diskquota system;
SMB network file system;
XFS file system;
Audit subsystem;
Memory Management;
IPv6 networking;
Netfilter;
Tracing infrastructure;
Kernel kexec() syscall;
RCU subsystem;
Scheduler infrastructure;
Scatterlist API;
9P file system network protocol;
Asynchronous Transfer Mode (ATM) subsystem;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Ceph Core library;
Networking core;
IPv4 networking;
KCM (Kernel Connection Multiplexor) sockets driver;
Multipath TCP;
NFC subsystem;
RDS protocol;
RxRPC session sockets;
Network traffic control;
SMC sockets;
Sun RPC protocol;
X.25 network layer;
XFRM subsystem;
AppArmor security module;
Simplified Mandatory Access Control Kernel framework;
SOF drivers;
USB sound devices; (CVE-2025-40005, CVE-2025-71229, CVE-2025-71231, CVE-2025-71232, CVE-2025-71233, CVE-2025-71235, CVE-2025-71236, CVE-2025-71237, CVE-2025-71238, CVE-2025-71239, CVE-2025-71265, CVE-2025-71266, CVE-2025-71267, CVE-2025-71272, CVE-2025-71273, CVE-2025-71274, CVE-2025-71286, CVE-2025-71291, CVE-2025-71292, CVE-2025-71294, CVE-2025-71295, CVE-2025-71297, CVE-2025-71304, CVE-2025-71305, CVE-2026-23100, CVE-2026-23169, CVE-2026-23220, CVE-2026-23221, CVE-2026-23222, CVE-2026-23228, CVE-2026-23229, CVE-2026-23230, CVE-2026-23233, CVE-2026-23234, CVE-2026-23235, CVE-2026-23236, CVE-2026-23237, CVE-2026-23238, CVE-2026-23241, CVE-2026-23242, CVE-2026-23243, CVE-2026-23249, CVE-2026-23266, CVE-2026-23267, CVE-2026-23272, CVE-2026-23278, CVE-2026-23392, CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402, CVE-2026-31411, CVE-2026-31418, CVE-2026-31436, CVE-2026-31448, CVE-2026-31478, CVE-2026-31607,…

Record: USN-8492-4
Updated: 2026-11-06

OSVUSN-8492-5 No score

linux-azure-fips, linux-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
ATM drivers;
RNBD block device driver;
Ublk userspace block driver;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
CPU idle management framework;
Hardware crypto device drivers;
DMA engine subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Broadcom VK accelerator driver;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
RapidIO drivers;
RAS (Reliability, Availability, Serviceability) subsystem;
Remote Processor subsystem;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
MediaTek SoC drivers;
Texas Instruments SoC drivers;
SPI subsystem;
Greybus lights staging drivers;
Realtek RTL8723BS SDIO drivers;
UFS subsystem;
ChipIdea USB driver;
DesignWare USB3 driver;
USB over IP driver;
vDPA drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
BTRFS file system;
File systems infrastructure;
Ceph distributed file system;
Ext4 file system;
F2FS file system;
FAT file system;
GFS2 file system;
HFS+ file system;
JFS file system;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
OCFS2 file system;
Proc file system;
Pstore file system;
Diskquota system;
SMB network file system;
XFS file system;
Audit subsystem;
Memory Management;
IPv6 networking;
Netfilter;
Tracing infrastructure;
Kernel kexec() syscall;
RCU subsystem;
Scheduler infrastructure;
Scatterlist API;
9P file system network protocol;
Asynchronous Transfer Mode (ATM) subsystem;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Ceph Core library;
Networking core;
IPv4 networking;
KCM (Kernel Connection Multiplexor) sockets driver;
Multipath TCP;
NFC subsystem;
RDS protocol;
RxRPC session sockets;
Network traffic control;
SMC sockets;
Sun RPC protocol;
X.25 network layer;
XFRM subsystem;
AppArmor security module;
Simplified Mandatory Access Control Kernel framework;
SOF drivers;
USB sound devices; (CVE-2025-40005, CVE-2025-71229, CVE-2025-71231, CVE-2025-71232, CVE-2025-71233, CVE-2025-71235, CVE-2025-71236, CVE-2025-71237, CVE-2025-71238, CVE-2025-71239, CVE-2025-71265, CVE-2025-71266, CVE-2025-71267, CVE-2025-71272, CVE-2025-71273, CVE-2025-71274, CVE-2025-71286, CVE-2025-71291, CVE-2025-71292, CVE-2025-71294, CVE-2025-71295, CVE-2025-71297, CVE-2025-71304, CVE-2025-71305, CVE-2026-23100, CVE-2026-23169, CVE-2026-23220, CVE-2026-23221, CVE-2026-23222, CVE-2026-23228, CVE-2026-23229, CVE-2026-23230, CVE-2026-23233, CVE-2026-23234, CVE-2026-23235, CVE-2026-23236, CVE-2026-23237, CVE-2026-23238, CVE-2026-23241, CVE-2026-23242, CVE-2026-23243, CVE-2026-23249, CVE-2026-23266, CVE-2026-23267, CVE-2026-23272, CVE-2026-23278, CVE-2026-23392, CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402, CVE-2026-31411, CVE-2026-31418, CVE-2026-31436, CVE-2026-31448, CVE-2026-31478, CVE-2026-31607,…

Record: USN-8492-5
Updated: 2026-11-06

OSVUSN-8497-1 No score

linux-lowlatency, linux-lowlatency-hwe-6.8 vulnerabilities

It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43284, CVE-2026-43500, CVE-2026-45998, CVE-2026-46000)

It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43503, CVE-2026-46300)

Qualys discovered that a race condition existed in the ptrace subsystem of the Linux kernel when privileged processes are exiting. An unprivileged local attacker could use this issue to expose sensitive information. (CVE-2026-46333)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contain a memory leak when handling AppArmor notifications. A local attacker could use this to cause resource exhaustion. (CVE-2026-47326)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contain a NULL pointer dereference when handling AppArmor notifications. A local attacker could use this to cause a kernel oops. (CVE-2026-47327)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained an invalid free when handling AppArmor notifications. A local attacker could use this to corrupt kernel memory. (CVE-2026-47328)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained insufficient validation of AppArmor notification responses. A local attacker could use this to allow crafted responses to be processed. (CVE-2026-47329)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 used an uninitialized variable when handling AppArmor notifications. A local attacker could use this to cause incorrect caching of data. (CVE-2026-47330)

Tristan Madani discovered that Ubuntu Linux kernel 6.8 contained a use- after-free (UAF) bug. A local attacker could use this to cause memory corruption and, theoretically, arbitrary code execution. (CVE-2026-47331)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained an out-of-bounds (OOB) read when handling AppArmor notifications. A local attacker could use this to cause information disclosure of kernel memory. (CVE-2026-47332)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained a out-of-bounds (OOB) read when handling AppArmor notifications. A local attacker could use this to cause kernel memory corruption and, theoretically, influence processing of AppArmor policies. (CVE-2026-47333)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained incorrect holding of locks when handling AppArmor notifications. A local attacker could use this to cause a kernel panic or deadlock. (CVE-2026-47334)

Tristan Madani discovered that Ubuntu Linux kernel 6.8 contained a NULL pointer dereference when handling AppArmor notifications. A local attacker could use this to cause a kernel panic. (CVE-2026-47335)

Tristan Madani discovered that Ubuntu Linux kernel 6.8 used an uninitialized variable when handling AppArmor AF_INET/AF_INET6 socket mediation. A local attacker could use this to influence processing of fine- grained network socket mediation. (CVE-2026-47336)

Tristan Madani and Trevor Lawrence have each independently discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained a NULL pointer dereference when handling AppArmor network socket mediation. A local attacker could use this to cause a kernel oops. (CVE-2026-47337)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture; …

Record: USN-8497-1
Updated: 2026-11-07

OSVUSN-8498-1 No score

linux-nvidia-tegra vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
ATM drivers;
RNBD block device driver;
Ublk userspace block driver;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
CPU idle management framework;
Hardware crypto device drivers;
DMA engine subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Broadcom VK accelerator driver;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
RapidIO drivers;
RAS (Reliability, Availability, Serviceability) subsystem;
Remote Processor subsystem;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
MediaTek SoC drivers;
Texas Instruments SoC drivers;
SPI subsystem;
Greybus lights staging drivers;
Realtek RTL8723BS SDIO drivers;
UFS subsystem;
ChipIdea USB driver;
DesignWare USB3 driver;
USB over IP driver;
vDPA drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
BTRFS file system;
File systems infrastructure;
Ceph distributed file system;
Ext4 file system;
F2FS file system;
FAT file system;
GFS2 file system;
HFS+ file system;
JFS file system;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
OCFS2 file system;
Proc file system;
Pstore file system;
Diskquota system;
SMB network file system;
XFS file system;
Audit subsystem;
Memory Management;
IPv6 networking;
Netfilter;
Tracing infrastructure;
Kernel kexec() syscall;
RCU subsystem;
Scheduler infrastructure;
Scatterlist API;
9P file system network protocol;
Asynchronous Transfer Mode (ATM) subsystem;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Ceph Core library;
Networking core;
IPv4 networking;
KCM (Kernel Connection Multiplexor) sockets driver;
Multipath TCP;
NFC subsystem;
RDS protocol;
RxRPC session sockets;
Network traffic control;
SMC sockets;
Sun RPC protocol;
X.25 network layer;
XFRM subsystem;
AppArmor security module;
Simplified Mandatory Access Control Kernel framework;
SOF drivers;
USB sound devices; (CVE-2025-40005, CVE-2025-71229, CVE-2025-71231, CVE-2025-71232, CVE-2025-71235, CVE-2025-71236, CVE-2025-71237, CVE-2025-71238, CVE-2025-71239, CVE-2025-71265, CVE-2025-71266, CVE-2025-71267, CVE-2025-71272, CVE-2025-71273, CVE-2025-71274, CVE-2025-71286, CVE-2025-71291, CVE-2025-71292, CVE-2025-71294, CVE-2025-71295, CVE-2025-71297, CVE-2025-71304, CVE-2025-71305, CVE-2026-23100, CVE-2026-23169, CVE-2026-23220, CVE-2026-23221, CVE-2026-23222, CVE-2026-23228, CVE-2026-23229, CVE-2026-23230, CVE-2026-23233, CVE-2026-23234, CVE-2026-23235, CVE-2026-23236, CVE-2026-23237, CVE-2026-23238, CVE-2026-23241, CVE-2026-23242, CVE-2026-23243, CVE-2026-23249, CVE-2026-23266, CVE-2026-23267, CVE-2026-23272, CVE-2026-23278, CVE-2026-23392, CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402, CVE-2026-31411, CVE-2026-31418, CVE-2026-31436, CVE-2026-31448, CVE-2026-31478, CVE-2026-31607, CVE-2026-31637,…

Record: USN-8498-1
Updated: 2026-11-06

OSVUSN-8499-1 No score

linux-xilinx vulnerabilities

It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-31431)

Record: USN-8499-1
Updated: 2026-11-07

OSVUSN-8606-1 No score

linux-azure, linux-azure-6.8 vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
Power management core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
RNBD block device driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
Data acquisition framework and drivers;
Counter interface drivers;
CPU frequency scaling framework;
CPU idle management framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
DMA engine subsystem;
EDAC drivers;
EFI core;
GPIO subsystem;
GPU drivers;
Greybus drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
IIO subsystem;
IIO ADC drivers;
InfiniBand drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
MediaTek SMI driver;
NVIDIA Tegra memory controller driver;
Multifunction device drivers;
Broadcom VK accelerator driver;
Fastrpc Driver;
IBM Advanced System Management driver;
MMC subsystem;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Ethernet team driver;
MediaTek network drivers;
Near Field Communication (NFC) drivers;
NTB driver;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
Device tree and open firmware driver;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
Broadcom BCM2835 power domain driver;
Generic PM domains;
i.MX PM domains;
Power supply drivers;
RapidIO drivers;
RAS (Reliability, Availability, Serviceability) subsystem;
Remote Processor subsystem;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
SLIMbus drivers;
Freescale SoC drivers;
MediaTek SoC drivers;
Microchip PolarFire SoC system controller driver;
Texas Instruments SoC drivers;
SPI subsystem;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
SM750 framebuffer staging driver;
TCM subsystem;
Thermal drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
ULPI bus;
USB core drivers;
DesignWare…

Record: USN-8606-1
Updated: 2026-11-07

OSVUSN-8607-1 No score

linux-azure-fde vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
Power management core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
RNBD block device driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
Data acquisition framework and drivers;
Counter interface drivers;
CPU frequency scaling framework;
CPU idle management framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
DMA engine subsystem;
EDAC drivers;
EFI core;
GPIO subsystem;
GPU drivers;
Greybus drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
IIO subsystem;
IIO ADC drivers;
InfiniBand drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
MediaTek SMI driver;
NVIDIA Tegra memory controller driver;
Multifunction device drivers;
Broadcom VK accelerator driver;
Fastrpc Driver;
IBM Advanced System Management driver;
MMC subsystem;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Ethernet team driver;
MediaTek network drivers;
Near Field Communication (NFC) drivers;
NTB driver;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
Device tree and open firmware driver;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
Broadcom BCM2835 power domain driver;
Generic PM domains;
i.MX PM domains;
Power supply drivers;
RapidIO drivers;
RAS (Reliability, Availability, Serviceability) subsystem;
Remote Processor subsystem;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
SLIMbus drivers;
Freescale SoC drivers;
MediaTek SoC drivers;
Microchip PolarFire SoC system controller driver;
Texas Instruments SoC drivers;
SPI subsystem;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
SM750 framebuffer staging driver;
TCM subsystem;
Thermal drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
ULPI bus;
USB core drivers;
DesignWare…

Record: USN-8607-1
Updated: 2026-11-07

OSVUSN-8609-1 No score

linux-azure-fde-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
Power management core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
RNBD block device driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
Data acquisition framework and drivers;
Counter interface drivers;
CPU frequency scaling framework;
CPU idle management framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
DMA engine subsystem;
EDAC drivers;
EFI core;
GPIO subsystem;
GPU drivers;
Greybus drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
IIO subsystem;
IIO ADC drivers;
InfiniBand drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
MediaTek SMI driver;
NVIDIA Tegra memory controller driver;
Multifunction device drivers;
Broadcom VK accelerator driver;
Fastrpc Driver;
IBM Advanced System Management driver;
MMC subsystem;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Ethernet team driver;
MediaTek network drivers;
Near Field Communication (NFC) drivers;
NTB driver;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
Device tree and open firmware driver;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
Broadcom BCM2835 power domain driver;
Generic PM domains;
i.MX PM domains;
Power supply drivers;
RapidIO drivers;
RAS (Reliability, Availability, Serviceability) subsystem;
Remote Processor subsystem;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
SLIMbus drivers;
Freescale SoC drivers;
MediaTek SoC drivers;
Microchip PolarFire SoC system controller driver;
Texas Instruments SoC drivers;
SPI subsystem;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
SM750 framebuffer staging driver;
TCM subsystem;
Thermal drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
ULPI bus;
USB core drivers;
DesignWare…

Record: USN-8609-1
Updated: 2026-11-07

OSVUSN-8619-1 No score

linux-hwe-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
Power management core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
RNBD block device driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
Data acquisition framework and drivers;
Counter interface drivers;
CPU frequency scaling framework;
CPU idle management framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
DMA engine subsystem;
EDAC drivers;
EFI core;
GPIO subsystem;
GPU drivers;
Greybus drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
IIO subsystem;
IIO ADC drivers;
InfiniBand drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
MediaTek SMI driver;
NVIDIA Tegra memory controller driver;
Multifunction device drivers;
Broadcom VK accelerator driver;
Fastrpc Driver;
IBM Advanced System Management driver;
MMC subsystem;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Ethernet team driver;
MediaTek network drivers;
Near Field Communication (NFC) drivers;
NTB driver;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
Device tree and open firmware driver;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
Broadcom BCM2835 power domain driver;
Generic PM domains;
i.MX PM domains;
Power supply drivers;
RapidIO drivers;
RAS (Reliability, Availability, Serviceability) subsystem;
Remote Processor subsystem;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
SLIMbus drivers;
Freescale SoC drivers;
MediaTek SoC drivers;
Microchip PolarFire SoC system controller driver;
Texas Instruments SoC drivers;
SPI subsystem;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
SM750 framebuffer staging driver;
TCM subsystem;
Thermal drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
ULPI bus;
USB core drivers;
DesignWare…

Record: USN-8619-1
Updated: 2026-11-07

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`kernel-rt` AlmaLinux:8 From an advisory covering 29 CVEs	before 4.18.0-553.171.1.rt7.512.el8_10	4.18.0-553.171.1.rt7.512.el8_10
`kernel-rt-core` AlmaLinux:8 From an advisory covering 29 CVEs	before 4.18.0-553.171.1.rt7.512.el8_10	4.18.0-553.171.1.rt7.512.el8_10
`kernel-rt-debug` AlmaLinux:8 From an advisory covering 29 CVEs	before 4.18.0-553.171.1.rt7.512.el8_10	4.18.0-553.171.1.rt7.512.el8_10
`kernel-rt-debug-core` AlmaLinux:8 From an advisory covering 29 CVEs	before 4.18.0-553.171.1.rt7.512.el8_10	4.18.0-553.171.1.rt7.512.el8_10
`kernel-rt-debug-devel` AlmaLinux:8 From an advisory covering 29 CVEs	before 4.18.0-553.171.1.rt7.512.el8_10	4.18.0-553.171.1.rt7.512.el8_10
`kernel-rt-debug-modules` AlmaLinux:8 From an advisory covering 29 CVEs	before 4.18.0-553.171.1.rt7.512.el8_10	4.18.0-553.171.1.rt7.512.el8_10
`kernel-rt-debug-modules-extra` AlmaLinux:8 From an advisory covering 29 CVEs	before 4.18.0-553.171.1.rt7.512.el8_10	4.18.0-553.171.1.rt7.512.el8_10
`kernel-rt-devel` AlmaLinux:8 From an advisory covering 29 CVEs	before 4.18.0-553.171.1.rt7.512.el8_10	4.18.0-553.171.1.rt7.512.el8_10
`kernel-rt-modules` AlmaLinux:8 From an advisory covering 29 CVEs	before 4.18.0-553.171.1.rt7.512.el8_10	4.18.0-553.171.1.rt7.512.el8_10
`kernel-rt-modules-extra` AlmaLinux:8 From an advisory covering 29 CVEs	before 4.18.0-553.171.1.rt7.512.el8_10	4.18.0-553.171.1.rt7.512.el8_10

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`bpftool` AlmaLinux:8 From an advisory covering 29 CVEs	before 4.18.0-553.171.1.el8_10	4.18.0-553.171.1.el8_10
`kernel` AlmaLinux:8 From an advisory covering 29 CVEs	before 4.18.0-553.171.1.el8_10	4.18.0-553.171.1.el8_10
`kernel-abi-stablelists` AlmaLinux:8 From an advisory covering 29 CVEs	before 4.18.0-553.171.1.el8_10	4.18.0-553.171.1.el8_10
`kernel-core` AlmaLinux:8 From an advisory covering 29 CVEs	before 4.18.0-553.171.1.el8_10	4.18.0-553.171.1.el8_10
`kernel-cross-headers` AlmaLinux:8 From an advisory covering 29 CVEs	before 4.18.0-553.171.1.el8_10	4.18.0-553.171.1.el8_10
`kernel-debug` AlmaLinux:8 From an advisory covering 29 CVEs	before 4.18.0-553.171.1.el8_10	4.18.0-553.171.1.el8_10
`kernel-debug-core` AlmaLinux:8 From an advisory covering 29 CVEs	before 4.18.0-553.171.1.el8_10	4.18.0-553.171.1.el8_10
`kernel-debug-devel` AlmaLinux:8 From an advisory covering 29 CVEs	before 4.18.0-553.171.1.el8_10	4.18.0-553.171.1.el8_10
`kernel-debug-modules` AlmaLinux:8 From an advisory covering 29 CVEs	before 4.18.0-553.171.1.el8_10	4.18.0-553.171.1.el8_10
`kernel-debug-modules-extra` AlmaLinux:8 From an advisory covering 29 CVEs	before 4.18.0-553.171.1.el8_10	4.18.0-553.171.1.el8_10
`kernel-devel` AlmaLinux:8 From an advisory covering 29 CVEs	before 4.18.0-553.171.1.el8_10	4.18.0-553.171.1.el8_10
`kernel-doc` AlmaLinux:8 From an advisory covering 29 CVEs	before 4.18.0-553.171.1.el8_10	4.18.0-553.171.1.el8_10
`kernel-headers` AlmaLinux:8 From an advisory covering 29 CVEs	before 4.18.0-553.171.1.el8_10	4.18.0-553.171.1.el8_10
`kernel-modules` AlmaLinux:8 From an advisory covering 29 CVEs	before 4.18.0-553.171.1.el8_10	4.18.0-553.171.1.el8_10
`kernel-modules-extra` AlmaLinux:8 From an advisory covering 29 CVEs	before 4.18.0-553.171.1.el8_10	4.18.0-553.171.1.el8_10
`kernel-tools` AlmaLinux:8 From an advisory covering 29 CVEs	before 4.18.0-553.171.1.el8_10	4.18.0-553.171.1.el8_10
`kernel-tools-libs` AlmaLinux:8 From an advisory covering 29 CVEs	before 4.18.0-553.171.1.el8_10	4.18.0-553.171.1.el8_10
`kernel-tools-libs-devel` AlmaLinux:8 From an advisory covering 29 CVEs	before 4.18.0-553.171.1.el8_10	4.18.0-553.171.1.el8_10
`kernel-zfcpdump` AlmaLinux:8 From an advisory covering 29 CVEs	before 4.18.0-553.171.1.el8_10	4.18.0-553.171.1.el8_10
`kernel-zfcpdump-core` AlmaLinux:8 From an advisory covering 29 CVEs	before 4.18.0-553.171.1.el8_10	4.18.0-553.171.1.el8_10
`kernel-zfcpdump-devel` AlmaLinux:8 From an advisory covering 29 CVEs	before 4.18.0-553.171.1.el8_10	4.18.0-553.171.1.el8_10
`kernel-zfcpdump-modules` AlmaLinux:8 From an advisory covering 29 CVEs	before 4.18.0-553.171.1.el8_10	4.18.0-553.171.1.el8_10
`kernel-zfcpdump-modules-extra` AlmaLinux:8 From an advisory covering 29 CVEs	before 4.18.0-553.171.1.el8_10	4.18.0-553.171.1.el8_10
`perf` AlmaLinux:8 From an advisory covering 29 CVEs	before 4.18.0-553.171.1.el8_10	4.18.0-553.171.1.el8_10
`python3-perf` AlmaLinux:8 From an advisory covering 29 CVEs	before 4.18.0-553.171.1.el8_10	4.18.0-553.171.1.el8_10
`kernel` Azure Linux:3	through 6.6.161.1-1	None known
`linux-lts` Alpaquita:25	6.12.74-r0 up to 6.12.80-r0	6.12.80-r0
`linux-lts` Alpaquita:stream	6.12.92-r1 up to 6.18.35-r1	6.18.35-r1
`bpftool` TuxCare:CentOS:7 From an advisory covering 135 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els3	3.10.0-1160.156.1.el7.tuxcare.els3
`kernel` TuxCare:CentOS:7 From an advisory covering 135 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els3	3.10.0-1160.156.1.el7.tuxcare.els3
`kernel-debug` TuxCare:CentOS:7 From an advisory covering 135 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els3	3.10.0-1160.156.1.el7.tuxcare.els3
`kernel-debug-devel` TuxCare:CentOS:7 From an advisory covering 135 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els3	3.10.0-1160.156.1.el7.tuxcare.els3
`kernel-devel` TuxCare:CentOS:7 From an advisory covering 135 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els3	3.10.0-1160.156.1.el7.tuxcare.els3
`kernel-doc` TuxCare:CentOS:7 From an advisory covering 135 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els3	3.10.0-1160.156.1.el7.tuxcare.els3
`kernel-headers` TuxCare:CentOS:7 From an advisory covering 135 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els3	3.10.0-1160.156.1.el7.tuxcare.els3
`kernel-tools` TuxCare:CentOS:7 From an advisory covering 135 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els3	3.10.0-1160.156.1.el7.tuxcare.els3
`kernel-tools-libs` TuxCare:CentOS:7 From an advisory covering 135 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els3	3.10.0-1160.156.1.el7.tuxcare.els3
`kernel-tools-libs-devel` TuxCare:CentOS:7 From an advisory covering 135 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els3	3.10.0-1160.156.1.el7.tuxcare.els3
`perf` TuxCare:CentOS:7 From an advisory covering 135 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els3	3.10.0-1160.156.1.el7.tuxcare.els3
`python-perf` TuxCare:CentOS:7 From an advisory covering 135 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els3	3.10.0-1160.156.1.el7.tuxcare.els3
`bpftool` TuxCare:OracleLinux:7 From an advisory covering 135 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els3	3.10.0-1160.156.1.el7.tuxcare.els3
`kernel` TuxCare:OracleLinux:7 From an advisory covering 135 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els3	3.10.0-1160.156.1.el7.tuxcare.els3
`kernel-debug` TuxCare:OracleLinux:7 From an advisory covering 135 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els3	3.10.0-1160.156.1.el7.tuxcare.els3
`kernel-debug-devel` TuxCare:OracleLinux:7 From an advisory covering 135 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els3	3.10.0-1160.156.1.el7.tuxcare.els3
`kernel-devel` TuxCare:OracleLinux:7 From an advisory covering 135 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els3	3.10.0-1160.156.1.el7.tuxcare.els3
`kernel-doc` TuxCare:OracleLinux:7 From an advisory covering 135 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els3	3.10.0-1160.156.1.el7.tuxcare.els3
`kernel-headers` TuxCare:OracleLinux:7 From an advisory covering 135 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els3	3.10.0-1160.156.1.el7.tuxcare.els3
`kernel-tools` TuxCare:OracleLinux:7 From an advisory covering 135 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els3	3.10.0-1160.156.1.el7.tuxcare.els3
`kernel-tools-libs` TuxCare:OracleLinux:7 From an advisory covering 135 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els3	3.10.0-1160.156.1.el7.tuxcare.els3
`kernel-tools-libs-devel` TuxCare:OracleLinux:7 From an advisory covering 135 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els3	3.10.0-1160.156.1.el7.tuxcare.els3
`perf` TuxCare:OracleLinux:7 From an advisory covering 135 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els3	3.10.0-1160.156.1.el7.tuxcare.els3
`python-perf` TuxCare:OracleLinux:7 From an advisory covering 135 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els3	3.10.0-1160.156.1.el7.tuxcare.els3
`bpftool` TuxCare:RHEL:7 From an advisory covering 135 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els3	3.10.0-1160.156.1.el7.tuxcare.els3
`kernel` TuxCare:RHEL:7 From an advisory covering 135 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els3	3.10.0-1160.156.1.el7.tuxcare.els3
`kernel-debug` TuxCare:RHEL:7 From an advisory covering 135 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els3	3.10.0-1160.156.1.el7.tuxcare.els3
`kernel-debug-devel` TuxCare:RHEL:7 From an advisory covering 135 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els3	3.10.0-1160.156.1.el7.tuxcare.els3
`kernel-devel` TuxCare:RHEL:7 From an advisory covering 135 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els3	3.10.0-1160.156.1.el7.tuxcare.els3
`kernel-doc` TuxCare:RHEL:7 From an advisory covering 135 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els3	3.10.0-1160.156.1.el7.tuxcare.els3
`kernel-headers` TuxCare:RHEL:7 From an advisory covering 135 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els3	3.10.0-1160.156.1.el7.tuxcare.els3
`kernel-tools` TuxCare:RHEL:7 From an advisory covering 135 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els3	3.10.0-1160.156.1.el7.tuxcare.els3
`kernel-tools-libs` TuxCare:RHEL:7 From an advisory covering 135 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els3	3.10.0-1160.156.1.el7.tuxcare.els3
`kernel-tools-libs-devel` TuxCare:RHEL:7 From an advisory covering 135 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els3	3.10.0-1160.156.1.el7.tuxcare.els3
`perf` TuxCare:RHEL:7 From an advisory covering 135 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els3	3.10.0-1160.156.1.el7.tuxcare.els3
`python-perf` TuxCare:RHEL:7 From an advisory covering 135 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els3	3.10.0-1160.156.1.el7.tuxcare.els3
`bpftool` TuxCare:CentOS-Stream:8 From an advisory covering 134 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els33	4.18.0-553.6.1.el8_10.tuxcare.els33
`kernel` TuxCare:CentOS-Stream:8 From an advisory covering 134 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els33	4.18.0-553.6.1.el8_10.tuxcare.els33
`kernel-core` TuxCare:CentOS-Stream:8 From an advisory covering 134 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els33	4.18.0-553.6.1.el8_10.tuxcare.els33
`kernel-cross-headers` TuxCare:CentOS-Stream:8 From an advisory covering 134 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els33	4.18.0-553.6.1.el8_10.tuxcare.els33
`kernel-debug` TuxCare:CentOS-Stream:8 From an advisory covering 134 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els33	4.18.0-553.6.1.el8_10.tuxcare.els33
`kernel-debug-core` TuxCare:CentOS-Stream:8 From an advisory covering 134 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els33	4.18.0-553.6.1.el8_10.tuxcare.els33
`kernel-debug-devel` TuxCare:CentOS-Stream:8 From an advisory covering 134 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els33	4.18.0-553.6.1.el8_10.tuxcare.els33
`kernel-debug-modules` TuxCare:CentOS-Stream:8 From an advisory covering 134 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els33	4.18.0-553.6.1.el8_10.tuxcare.els33
`kernel-debug-modules-extra` TuxCare:CentOS-Stream:8 From an advisory covering 134 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els33	4.18.0-553.6.1.el8_10.tuxcare.els33
`kernel-debug-modules-internal` TuxCare:CentOS-Stream:8 From an advisory covering 134 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els33	4.18.0-553.6.1.el8_10.tuxcare.els33
`kernel-devel` TuxCare:CentOS-Stream:8 From an advisory covering 134 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els33	4.18.0-553.6.1.el8_10.tuxcare.els33
`kernel-headers` TuxCare:CentOS-Stream:8 From an advisory covering 134 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els33	4.18.0-553.6.1.el8_10.tuxcare.els33
`kernel-ipaclones-internal` TuxCare:CentOS-Stream:8 From an advisory covering 134 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els33	4.18.0-553.6.1.el8_10.tuxcare.els33
`kernel-modules` TuxCare:CentOS-Stream:8 From an advisory covering 134 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els33	4.18.0-553.6.1.el8_10.tuxcare.els33
`kernel-modules-extra` TuxCare:CentOS-Stream:8 From an advisory covering 134 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els33	4.18.0-553.6.1.el8_10.tuxcare.els33
`kernel-modules-internal` TuxCare:CentOS-Stream:8 From an advisory covering 134 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els33	4.18.0-553.6.1.el8_10.tuxcare.els33
`kernel-selftests-internal` TuxCare:CentOS-Stream:8 From an advisory covering 134 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els33	4.18.0-553.6.1.el8_10.tuxcare.els33
`kernel-tools` TuxCare:CentOS-Stream:8 From an advisory covering 134 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els33	4.18.0-553.6.1.el8_10.tuxcare.els33
`kernel-tools-libs` TuxCare:CentOS-Stream:8 From an advisory covering 134 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els33	4.18.0-553.6.1.el8_10.tuxcare.els33
`kernel-tools-libs-devel` TuxCare:CentOS-Stream:8 From an advisory covering 134 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els33	4.18.0-553.6.1.el8_10.tuxcare.els33
`perf` TuxCare:CentOS-Stream:8 From an advisory covering 134 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els33	4.18.0-553.6.1.el8_10.tuxcare.els33
`python3-perf` TuxCare:CentOS-Stream:8 From an advisory covering 134 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els33	4.18.0-553.6.1.el8_10.tuxcare.els33
`kernel` TuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els17	5.14.0-570.62.1.el9_6.tuxcare.5.els17
`kernel-64k` TuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els17	5.14.0-570.62.1.el9_6.tuxcare.5.els17
`kernel-64k-core` TuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els17	5.14.0-570.62.1.el9_6.tuxcare.5.els17
`kernel-64k-debug` TuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els17	5.14.0-570.62.1.el9_6.tuxcare.5.els17
`kernel-64k-debug-core` TuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els17	5.14.0-570.62.1.el9_6.tuxcare.5.els17
`kernel-64k-debug-devel` TuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els17	5.14.0-570.62.1.el9_6.tuxcare.5.els17
`kernel-64k-debug-devel-matched` TuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els17	5.14.0-570.62.1.el9_6.tuxcare.5.els17
`kernel-64k-debug-modules` TuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els17	5.14.0-570.62.1.el9_6.tuxcare.5.els17
`kernel-64k-debug-modules-core` TuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els17	5.14.0-570.62.1.el9_6.tuxcare.5.els17
`kernel-64k-debug-modules-extra` TuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els17	5.14.0-570.62.1.el9_6.tuxcare.5.els17
`kernel-64k-debug-modules-internal` TuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els17	5.14.0-570.62.1.el9_6.tuxcare.5.els17
`kernel-64k-debug-modules-partner` TuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els17	5.14.0-570.62.1.el9_6.tuxcare.5.els17
`kernel-64k-devel` TuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els17	5.14.0-570.62.1.el9_6.tuxcare.5.els17
`Kernel` Linux	6.6.0 up to 6.6.160, 6.7.0 up to 6.12.75, 6.13.0 up to 6.18.14, 6.19.0 up to 6.19.4	6.6.1606.12.756.18.146.19.4
`linux` Debian:13	before 6.12.85-1, plus listed versions 6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-1 Show 12 moreShow less 6.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-1~bpo12+1	6.12.85-1
`linux` Debian:14	before 6.18.14-1, plus listed versions 6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1 Show 45 moreShow less 6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1	6.18.14-1
`kernel` openEuler:24.03-LTS-SP3 From an advisory covering 150 CVEs	before 6.6.0-145.3.14.145.oe2403sp3	6.6.0-145.3.14.145.oe2403sp3
`kernel` openEuler:24.03-LTS-SP1 From an advisory covering 83 CVEs	before 6.6.0-145.1.19.156.oe2403sp1	6.6.0-145.1.19.156.oe2403sp1
`kernel-rt` Red Hat:enterprise_linux:8::nfv From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.rt7.512.el8_10	0:4.18.0-553.171.1.rt7.512.el8_10
`kernel-rt-core` Red Hat:enterprise_linux:8::nfv From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.rt7.512.el8_10	0:4.18.0-553.171.1.rt7.512.el8_10
`kernel-rt-debug` Red Hat:enterprise_linux:8::nfv From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.rt7.512.el8_10	0:4.18.0-553.171.1.rt7.512.el8_10
`kernel-rt-debug-core` Red Hat:enterprise_linux:8::nfv From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.rt7.512.el8_10	0:4.18.0-553.171.1.rt7.512.el8_10
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:8::nfv From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.rt7.512.el8_10	0:4.18.0-553.171.1.rt7.512.el8_10
`kernel-rt-debug-devel` Red Hat:enterprise_linux:8::nfv From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.rt7.512.el8_10	0:4.18.0-553.171.1.rt7.512.el8_10
`kernel-rt-debug-kvm` Red Hat:enterprise_linux:8::nfv From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.rt7.512.el8_10	0:4.18.0-553.171.1.rt7.512.el8_10
`kernel-rt-debug-modules` Red Hat:enterprise_linux:8::nfv From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.rt7.512.el8_10	0:4.18.0-553.171.1.rt7.512.el8_10
`kernel-rt-debug-modules-extra` Red Hat:enterprise_linux:8::nfv From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.rt7.512.el8_10	0:4.18.0-553.171.1.rt7.512.el8_10
`kernel-rt-debuginfo` Red Hat:enterprise_linux:8::nfv From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.rt7.512.el8_10	0:4.18.0-553.171.1.rt7.512.el8_10
`kernel-rt-debuginfo-common-x86_64` Red Hat:enterprise_linux:8::nfv From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.rt7.512.el8_10	0:4.18.0-553.171.1.rt7.512.el8_10
`kernel-rt-devel` Red Hat:enterprise_linux:8::nfv From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.rt7.512.el8_10	0:4.18.0-553.171.1.rt7.512.el8_10
`kernel-rt-kvm` Red Hat:enterprise_linux:8::nfv From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.rt7.512.el8_10	0:4.18.0-553.171.1.rt7.512.el8_10
`kernel-rt-modules` Red Hat:enterprise_linux:8::nfv From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.rt7.512.el8_10	0:4.18.0-553.171.1.rt7.512.el8_10
`kernel-rt-modules-extra` Red Hat:enterprise_linux:8::nfv From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.rt7.512.el8_10	0:4.18.0-553.171.1.rt7.512.el8_10
`kernel-rt` Red Hat:enterprise_linux:8::realtime From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.rt7.512.el8_10	0:4.18.0-553.171.1.rt7.512.el8_10
`kernel-rt-core` Red Hat:enterprise_linux:8::realtime From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.rt7.512.el8_10	0:4.18.0-553.171.1.rt7.512.el8_10
`kernel-rt-debug` Red Hat:enterprise_linux:8::realtime From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.rt7.512.el8_10	0:4.18.0-553.171.1.rt7.512.el8_10
`kernel-rt-debug-core` Red Hat:enterprise_linux:8::realtime From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.rt7.512.el8_10	0:4.18.0-553.171.1.rt7.512.el8_10
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:8::realtime From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.rt7.512.el8_10	0:4.18.0-553.171.1.rt7.512.el8_10
`kernel-rt-debug-devel` Red Hat:enterprise_linux:8::realtime From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.rt7.512.el8_10	0:4.18.0-553.171.1.rt7.512.el8_10
`kernel-rt-debug-modules` Red Hat:enterprise_linux:8::realtime From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.rt7.512.el8_10	0:4.18.0-553.171.1.rt7.512.el8_10
`kernel-rt-debug-modules-extra` Red Hat:enterprise_linux:8::realtime From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.rt7.512.el8_10	0:4.18.0-553.171.1.rt7.512.el8_10
`kernel-rt-debuginfo` Red Hat:enterprise_linux:8::realtime From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.rt7.512.el8_10	0:4.18.0-553.171.1.rt7.512.el8_10
`kernel-rt-debuginfo-common-x86_64` Red Hat:enterprise_linux:8::realtime From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.rt7.512.el8_10	0:4.18.0-553.171.1.rt7.512.el8_10
`kernel-rt-devel` Red Hat:enterprise_linux:8::realtime From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.rt7.512.el8_10	0:4.18.0-553.171.1.rt7.512.el8_10
`kernel-rt-modules` Red Hat:enterprise_linux:8::realtime From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.rt7.512.el8_10	0:4.18.0-553.171.1.rt7.512.el8_10
`kernel-rt-modules-extra` Red Hat:enterprise_linux:8::realtime From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.rt7.512.el8_10	0:4.18.0-553.171.1.rt7.512.el8_10
`bpftool` Red Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`bpftool-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`kernel` Red Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`kernel-abi-stablelists` Red Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`kernel-core` Red Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`kernel-debug` Red Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`kernel-debug-core` Red Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`kernel-debug-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`kernel-debug-devel` Red Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`kernel-debug-modules` Red Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`kernel-debug-modules-extra` Red Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`kernel-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`kernel-devel` Red Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`kernel-doc` Red Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`kernel-modules` Red Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`kernel-modules-extra` Red Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`kernel-tools` Red Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`kernel-tools-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`kernel-tools-libs` Red Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`kernel-zfcpdump` Red Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`kernel-zfcpdump-core` Red Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`kernel-zfcpdump-modules` Red Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`kernel-zfcpdump-modules-extra` Red Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`perf` Red Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`perf-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`python3-perf` Red Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`python3-perf-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`bpftool-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`kernel-debug-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`kernel-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:8::crb From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:8::crb From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:8::crb From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`kernel-tools-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`kernel-tools-libs-devel` Red Hat:enterprise_linux:8::crb From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`perf-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`python3-perf-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`kernel-rt` Rocky Linux:8 From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.rt7.512.el8_10	0:4.18.0-553.171.1.rt7.512.el8_10
`kernel` Rocky Linux:8 From an advisory covering 29 CVEs	before 0:4.18.0-553.171.1.el8_10	0:4.18.0-553.171.1.el8_10
`linux` Root:Ubuntu:24.04	before 6.8.0-149.149.aikido.91	6.8.0-149.149.aikido.91
`rootio-linux` Root:Ubuntu:24.04	before 6.8.0-149.149.aikido.91	6.8.0-149.149.aikido.91
`kernel-obs-build` SUSE:Linux Micro Extras 6.2 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-syms` SUSE:Linux Micro Extras 6.2 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-64kb` SUSE:Linux Micro 6.2 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-default` SUSE:Linux Micro 6.2 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-default-base` SUSE:Linux Micro 6.2 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1.160000.2.17	6.12.0-160000.36.1.160000.2.17
`kernel-rt` SUSE:Linux Micro 6.2 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-source` SUSE:Linux Micro 6.2 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-64kb` SUSE:Linux Enterprise Server 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-azure` SUSE:Linux Enterprise Server 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-default` SUSE:Linux Enterprise Server 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-default-base` SUSE:Linux Enterprise Server 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1.160000.2.17	6.12.0-160000.36.1.160000.2.17
`kernel-docs` SUSE:Linux Enterprise Server 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-kvmsmall` SUSE:Linux Enterprise Server 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-obs-qa` SUSE:Linux Enterprise Server 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-source` SUSE:Linux Enterprise Server 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-syms` SUSE:Linux Enterprise Server 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-64kb` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-azure` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-default` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-default-base` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1.160000.2.17	6.12.0-160000.36.1.160000.2.17
`kernel-docs` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-kvmsmall` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-obs-qa` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-source` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-aws-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-aws-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less 5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1	None known
`linux-aws-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1	None known
`linux-azure-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less 5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2	None known
`linux-azure-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less 5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1	None known
`linux-azure-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1	None known
`linux-azure-fde` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less 5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1	None known
`linux-gcp-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less 5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3	None known
`linux-gcp-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less 5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1	None known
`linux-gcp-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41	None known
`linux-gke` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less 5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111	None known
`linux-gke-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less 5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1	None known
`linux-gkeop` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less 5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77	None known
`linux-gkeop-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 40 moreShow less 5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1	None known
`linux-hwe-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less 5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1	None known
`linux-hwe-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less 5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1	None known
`linux-hwe-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less 5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1	None known
`linux-intel-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19	None known
`linux-oem-5.10` Ubuntu:20.04:LTS	All versions, plus listed versions 5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17 Show 21 moreShow less 5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61	None known
`linux-oem-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21 Show 7 moreShow less 5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36	None known
`linux-oem-5.14` Ubuntu:20.04:LTS	All versions, plus listed versions 5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10 Show 30 moreShow less 5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67	None known
`linux-oem-5.6` Ubuntu:20.04:LTS	All versions, plus listed versions 5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13 Show 24 moreShow less 5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60	None known
`linux-oracle-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-oracle-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1 Show 7 moreShow less 5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1	None known
`linux-oracle-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1	None known
`linux-raspi2` Ubuntu:20.04:LTS	All versions, plus listed versions 5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6	None known
`linux-riscv` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34 Show 7 moreShow less 5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45	None known
`linux-riscv-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1 Show 8 moreShow less 5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35	None known
`linux-riscv-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1 Show 5 moreShow less 5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1	None known
`linux-allwinner-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1	None known
`linux-aws-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1 Show 5 moreShow less 5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1	None known
`linux-aws-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 9 moreShow less 6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1	None known
`linux-aws-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1 Show 9 moreShow less 6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1	None known
`linux-aws-6.8` Ubuntu:22.04:LTS	before 6.8.0-1060.63~22.04.1, plus listed versions 6.8.0-1009.9~22.04.26.8.0-1010.10~22.04.26.8.0-1011.12~22.04.16.8.0-1013.14~22.04.16.8.0-1014.15~22.04.1 Show 33 moreShow less 6.8.0-1015.16~22.04.16.8.0-1016.17~22.04.26.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1023.25~22.04.16.8.0-1024.26~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1035.37~22.04.16.8.0-1036.38~22.04.16.8.0-1039.41~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.44~22.04.16.8.0-1043.45~22.04.16.8.0-1044.46~22.04.16.8.0-1045.47~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.16.8.0-1050.53~22.04.16.8.0-1051.54~22.04.16.8.0-1052.55~22.04.16.8.0-1053.56~22.04.16.8.0-1055.58~22.04.16.8.0-1057.60~22.04.1	6.8.0-1060.63~22.04.1
`linux-azure-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2	None known
`linux-azure-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 8 moreShow less 6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1	None known
`linux-azure-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1 Show 9 moreShow less 6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1	None known
`linux-azure-6.8` Ubuntu:22.04:LTS	before 6.8.0-1063.71~22.04.1, plus listed versions 6.8.0-1008.8~22.04.16.8.0-1009.9~22.04.16.8.0-1010.10~22.04.16.8.0-1012.14~22.04.16.8.0-1013.15~22.04.1 Show 22 moreShow less 6.8.0-1014.16~22.04.16.8.0-1015.17~22.04.26.8.0-1017.20~22.04.16.8.0-1018.21~22.04.16.8.0-1020.23~22.04.16.8.0-1021.25~22.04.16.8.0-1025.30~22.04.16.8.0-1026.31~22.04.16.8.0-1027.32~22.04.16.8.0-1028.33~22.04.16.8.0-1029.34~22.04.16.8.0-1030.35~22.04.16.8.0-1031.36~22.04.16.8.0-1034.39~22.04.16.8.0-1036.42~22.04.16.8.0-1040.46~22.04.16.8.0-1041.47~22.04.16.8.0-1044.50~22.04.16.8.0-1051.57~22.04.16.8.0-1052.58~22.04.16.8.0-1059.65~22.04.16.8.0-1062.69~22.04.1	6.8.0-1063.71~22.04.1
`linux-azure-fde-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1	None known
`linux-azure-fde-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1 Show 5 moreShow less 6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1	None known
`linux-azure-fde-6.8` Ubuntu:22.04:LTS	before 6.8.0-1062.69~22.04.1, plus listed versions 6.8.0-1041.48~22.04.16.8.0-1042.49~22.04.16.8.0-1044.51~22.04.16.8.0-1046.53~22.04.16.8.0-1053.60~22.04.16.8.0-1058.65~22.04.16.8.0-1061.68~22.04.1	6.8.0-1062.69~22.04.1
`linux-gcp-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1020.22~22.04.25.19.0-1021.23~22.04.15.19.0-1022.24~22.04.15.19.0-1024.26~22.04.15.19.0-1025.27~22.04.15.19.0-1026.28~22.04.15.19.0-1027.29~22.04.15.19.0-1030.32~22.04.1	None known
`linux-gcp-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1009.9~22.04.36.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1011.11~22.04.36.2.0-1012.12~22.04.1 Show 7 moreShow less 6.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1016.18~22.04.16.2.0-1017.19~22.04.16.2.0-1018.20~22.04.16.2.0-1019.21~22.04.16.2.0-1021.23~22.04.1	None known
`linux-gcp-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1010.10~22.04.36.5.0-1011.11~22.04.16.5.0-1013.13~22.04.16.5.0-1014.14~22.04.16.5.0-1015.15~22.04.1 Show 8 moreShow less 6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1022.24~22.04.16.5.0-1023.25~22.04.16.5.0-1024.26~22.04.16.5.0-1025.27~22.04.1	None known
`linux-gcp-6.8` Ubuntu:22.04:LTS	before 6.8.0-1063.69~22.04.1, plus listed versions 6.8.0-1010.11~22.04.16.8.0-1011.12~22.04.16.8.0-1012.13~22.04.16.8.0-1013.14~22.04.16.8.0-1014.16~22.04.1 Show 34 moreShow less 6.8.0-1015.17~22.04.16.8.0-1016.18~22.04.16.8.0-1017.19~22.04.16.8.0-1018.20~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1024.26~22.04.16.8.0-1025.27~22.04.16.8.0-1026.28~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1034.36~22.04.26.8.0-1036.38~22.04.16.8.0-1037.39~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.45~22.04.16.8.0-1043.46~22.04.16.8.0-1044.47~22.04.16.8.0-1045.48~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.26.8.0-1048.51~22.04.16.8.0-1052.55~22.04.16.8.0-1053.56~22.04.16.8.0-1054.57~22.04.16.8.0-1058.61~22.04.16.8.0-1060.63~22.04.1	6.8.0-1063.69~22.04.1
`linux-hwe-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-28.29~22.04.15.19.0-32.33~22.04.15.19.0-35.36~22.04.15.19.0-38.39~22.04.15.19.0-40.41~22.04.1 Show 6 moreShow less 5.19.0-41.42~22.04.15.19.0-42.43~22.04.15.19.0-43.44~22.04.15.19.0-45.46~22.04.15.19.0-46.47~22.04.15.19.0-50.50	None known
`linux-hwe-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-25.25~22.04.26.2.0-26.26~22.04.16.2.0-31.31~22.04.16.2.0-32.32~22.04.16.2.0-33.33~22.04.1 Show 5 moreShow less 6.2.0-34.34~22.04.16.2.0-35.35~22.04.16.2.0-36.37~22.04.16.2.0-37.38~22.04.16.2.0-39.40~22.04.1	None known
`linux-hwe-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-14.14~22.04.16.5.0-15.15~22.04.16.5.0-17.17~22.04.16.5.0-18.18~22.04.16.5.0-21.21~22.04.1 Show 8 moreShow less 6.5.0-25.25~22.04.16.5.0-26.26~22.04.16.5.0-27.28~22.04.16.5.0-28.29~22.04.16.5.0-35.35~22.04.16.5.0-41.41~22.04.26.5.0-44.44~22.04.16.5.0-45.45~22.04.1	None known
`linux-hwe-6.8` Ubuntu:22.04:LTS	before 6.8.0-136.136~22.04.1, plus listed versions 6.8.0-38.38~22.04.16.8.0-39.39~22.04.16.8.0-40.40~22.04.36.8.0-45.45~22.04.16.8.0-47.47~22.04.1 Show 30 moreShow less 6.8.0-48.48~22.04.16.8.0-49.49~22.04.16.8.0-50.51~22.04.16.8.0-51.52~22.04.16.8.0-52.53~22.04.16.8.0-57.59~22.04.16.8.0-58.60~22.04.16.8.0-59.61~22.04.16.8.0-60.63~22.04.16.8.0-64.67~22.04.16.8.0-65.68~22.04.16.8.0-78.78~22.04.16.8.0-79.79~22.04.16.8.0-83.83~22.04.16.8.0-84.84~22.04.16.8.0-85.85~22.04.16.8.0-86.87~22.04.16.8.0-87.88~22.04.16.8.0-88.89~22.04.26.8.0-90.91~22.04.16.8.0-94.96~22.04.16.8.0-100.100~22.04.16.8.0-101.101~22.04.16.8.0-106.106~22.04.16.8.0-107.107~22.04.16.8.0-110.110~22.04.16.8.0-111.111~22.04.16.8.0-117.117~22.04.16.8.0-124.124~22.04.16.8.0-134.134~22.04.1	6.8.0-136.136~22.04.1
`linux-ibm-6.8` Ubuntu:22.04:LTS	before 6.8.0-1060.61~22.04.1, plus listed versions 6.8.0-1008.8~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.16.8.0-1013.13~22.04.1 Show 31 moreShow less 6.8.0-1014.14~22.04.16.8.0-1015.15~22.04.16.8.0-1016.16~22.04.16.8.0-1017.17~22.04.16.8.0-1018.18~22.04.16.8.0-1019.19~22.04.16.8.0-1023.23~22.04.16.8.0-1024.24~22.04.16.8.0-1025.25~22.04.16.8.0-1026.26~22.04.16.8.0-1027.27~22.04.16.8.0-1028.28~22.04.16.8.0-1029.29~22.04.16.8.0-1030.30~22.04.16.8.0-1033.33~22.04.16.8.0-1036.36~22.04.16.8.0-1037.37~22.04.16.8.0-1038.38~22.04.16.8.0-1039.39~22.04.16.8.0-1040.40~22.04.16.8.0-1041.41~22.04.16.8.0-1042.42~22.04.16.8.0-1043.43~22.04.16.8.0-1044.44~22.04.16.8.0-1045.45~22.04.16.8.0-1049.49~22.04.16.8.0-1050.50~22.04.16.8.0-1051.51~22.04.16.8.0-1052.52~22.04.16.8.0-1055.56~22.04.16.8.0-1057.58~22.04.1	6.8.0-1060.61~22.04.1
`linux-intel-iot-realtime` Ubuntu:22.04:LTS	All versions, plus listed versions 5.15.0-1073.75	None known
`linux-lowlatency-hwe-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.1 Show 5 moreShow less 5.19.0-1024.25~22.04.15.19.0-1025.26~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1030.30	None known
`linux-lowlatency-hwe-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1008.8~22.04.16.2.0-1009.9~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.1 Show 5 moreShow less 6.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1	None known
`linux-lowlatency-hwe-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-14.14.1~22.04.16.5.0-15.15.1.1~22.04.16.5.0-17.17.1.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.1 Show 8 moreShow less 6.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.16.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-41.41.1~22.04.16.5.0-42.42.1~22.04.16.5.0-44.44.1~22.04.16.5.0-45.45.1~22.04.1	None known
`dtb-aarch64` openSUSE:Leap 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-64kb` openSUSE:Leap 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-azure` openSUSE:Leap 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-default` openSUSE:Leap 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-default-base` openSUSE:Leap 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1.160000.2.17	6.12.0-160000.36.1.160000.2.17
`kernel-docs` openSUSE:Leap 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-kvmsmall` openSUSE:Leap 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-obs-build` openSUSE:Leap 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-obs-qa` openSUSE:Leap 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-rt` openSUSE:Leap 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-source` openSUSE:Leap 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-syms` openSUSE:Leap 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1
`kernel-zfcpdump` openSUSE:Leap 16.0 From an advisory covering 255 CVEs	before 6.12.0-160000.36.1	6.12.0-160000.36.1

History

History
Recorded	Changed	Sources
Nov 11, 2026	affected	OSV
Nov 6, 2026	affected	OSV
Nov 6, 2026	affected	OSV
Nov 5, 2026	affected	OSV
Nov 3, 2026	facts	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-45861 is a high vulnerability (CVSS 7.8) in Linux, published May 27, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.19%, the 8th percentile. Fixed in linux-lts 6.12.80-r0.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 352 package rows, 84 versions, 2,595 references and the rest of 24 source descriptions. The JSON record has them.