CVE-2026-45910

RDMA/rxe: Fix race condition in QP timer handlers

7.8 HighFix available

What does this mean?

: 7.8v3.1, from CVE List
: 0.12%2nd percentile
Fixed in: 6.12.80-r0linux-lts
Published: May 27, 2026
Modified: November 6, 2026
Weakness: CWE-362
Also known as: ALSA-2026:68570BELL-CVE-2026-45910CLSA-2026-1788168285DEBIAN-CVE-2026-45910EUVD-2026-32376GHSA-ghcq-8j2m-vfjmRHSA-2026:68570RHSA-2026:77218
Show 28 moreShow less
RHSA-2026:77219RLSA-2026:68570ROOT-OS-UBUNTU-2404-CVE-2026-45910SUSE-SU-2026:22099-1SUSE-SU-2026:22108-1SUSE-SU-2026:22112-1SUSE-SU-2026:22117-1SUSE-SU-2026:22127-1SUSE-SU-2026:22137-1SUSE-SU-2026:22433-1SUSE-SU-2026:22458-1SUSE-SU-2026:2310-1SUSE-SU-2026:2482-1SUSE-SU-2026:2591-1UBUNTU-CVE-2026-45910USN-8492-1USN-8492-2USN-8492-3USN-8492-4USN-8492-5USN-8497-1USN-8498-1USN-8499-1USN-8606-1USN-8607-1USN-8609-1USN-8619-1openSUSE-SU-2026:20965-1

In the Linux kernel, the following vulnerability has been resolved:

RDMA/rxe: Fix race condition in QP timer handlers

I encontered the following warning: WARNING: drivers/infiniband/sw/rxe/rxe_task.c:249 at rxe_sched_task+0x1c8/0x238 [rdma_rxe], CPU#0: swapper/0/0 ... libsha1 [last unloaded: ip6_udp_tunnel] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G C 6.19.0-rc5-64k-v8+ #37 PREEMPT Tainted: [C]=CRAP Hardware name: Raspberry Pi 4 Model B Rev 1.2 Call trace: rxe_sched_task+0x1c8/0x238 [rdma_rxe] (P) retransmit_timer+0x130/0x188 [rdma_rxe] call_timer_fn+0x68/0x4d0 __run_timers+0x630/0x888 ... WARNING: drivers/infiniband/sw/rxe/rxe_task.c:38 at rxe_sched_task+0x1c0/0x238 [rdma_rxe], CPU#0: swapper/0/0 ... WARNING: drivers/infiniband/sw/rxe/rxe_task.c:111 at do_work+0x488/0x5c8 [rdma_rxe], CPU#3: kworker/u17:4/93400 ... refcount_t: underflow; use-after-free. WARNING: lib/refcount.c:28 at refcount_warn_saturate+0x138/0x1a0, CPU#3: kworker/u17:4/93400

The issue is caused by a race condition between retransmit_timer() and rxe_destroy_qp, leading to the Queue Pair's (QP) reference count dropping to zero during timer handler execution.

It seems this warning is harmless because rxe_qp_do_cleanup() will flush all pending timers and requests.

Example of flow causing the issue:

CPU0 CPU1 retransmit_timer() { spin_lock_irqsave rxe_destroy_qp() __rxe_cleanup() __rxe_put() // qp->ref_count decrease to 0 rxe_qp_do_cleanup() { if (qp->valid) { rxe_sched_task() { WARN_ON(rxe_read(task->qp) <= 0); } } spin_unlock_irqrestore } spin_lock_irqsave qp->valid = 0 spin_unlock_irqrestore }

Ensure the QP's reference count is maintained and its validity is checked within the timer callbacks by adding calls to rxe_get(qp) and corresponding rxe_put(qp) after use.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.12%Up 0.1 points since May 28, 2026

What each source reports

CVE List Score used 7.8

RDMA/rxe: Fix race condition in QP timer handlers

In the Linux kernel, the following vulnerability has been resolved:

RDMA/rxe: Fix race condition in QP timer handlers

The issue is caused by a race condition between retransmit_timer() and rxe_destroy_qp, leading to the Queue Pair's (QP) reference count dropping to zero during timer handler execution.

It seems this warning is harmless because rxe_qp_do_cleanup() will flush all pending timers and requests.

Example of flow causing the issue:

Ensure the QP's reference count is maintained and its validity is checked within the timer callbacks by adding calls to rxe_get(qp) and corresponding rxe_put(qp) after use.

Record: CVE-2026-45910
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-362
Updated: 2026-11-02

EUVDEUVD-2026-32376 7.8

In the Linux kernel, the following vulnerability has been resolved:

RDMA/rxe: Fix race condition in QP timer handlers

The issue is caused by a race condition between retransmit_timer() and rxe_destroy_qp, leading to the Queue Pair's (QP) reference count dropping to zero during timer handler execution.

It seems this warning is harmless because rxe_qp_do_cleanup() will flush all pending timers and requests.

Example of flow causing the issue:

Ensure the QP's reference count is maintained and its validity is checked within the timer callbacks by adding calls to rxe_get(qp) and corresponding rxe_put(qp) after use.

Record: EUVD-2026-32376
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-ghcq-8j2m-vfjm 7.8

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix race condition...

In the Linux kernel, the following vulnerability has been resolved:

RDMA/rxe: Fix race condition in QP timer handlers

The issue is caused by a race condition between retransmit_timer() and rxe_destroy_qp, leading to the Queue Pair's (QP) reference count dropping to zero during timer handler execution.

It seems this warning is harmless because rxe_qp_do_cleanup() will flush all pending timers and requests.

Example of flow causing the issue:

Ensure the QP's reference count is maintained and its validity is checked within the timer callbacks by adding calls to rxe_get(qp) and corresponding rxe_put(qp) after use.

Record: GHSA-ghcq-8j2m-vfjm
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-362
Updated: 2026-11-02

NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

RDMA/rxe: Fix race condition in QP timer handlers

The issue is caused by a race condition between retransmit_timer() and rxe_destroy_qp, leading to the Queue Pair's (QP) reference count dropping to zero during timer handler execution.

It seems this warning is harmless because rxe_qp_do_cleanup() will flush all pending timers and requests.

Example of flow causing the issue:

Ensure the QP's reference count is maintained and its validity is checked within the timer callbacks by adding calls to rxe_get(qp) and corresponding rxe_put(qp) after use.

Record: CVE-2026-45910
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-362
Updated: 2026-11-02

OSVBELL-CVE-2026-45910 7.8

Record: BELL-CVE-2026-45910
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSV 7.8

RDMA/rxe: Fix race condition in QP timer handlers

In the Linux kernel, the following vulnerability has been resolved:

RDMA/rxe: Fix race condition in QP timer handlers

The issue is caused by a race condition between retransmit_timer() and rxe_destroy_qp, leading to the Queue Pair's (QP) reference count dropping to zero during timer handler execution.

It seems this warning is harmless because rxe_qp_do_cleanup() will flush all pending timers and requests.

Example of flow causing the issue:

Ensure the QP's reference count is maintained and its validity is checked within the timer callbacks by adding calls to rxe_get(qp) and corresponding rxe_put(qp) after use.

Record: CVE-2026-45910
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 33 moreShow less

OSVDEBIAN-CVE-2026-45910 7.8

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix race condition in QP timer handlers I encontered the following warning: WARNING: drivers/infiniband/sw/rxe/rxe_task.c:249 at rxe_sched_task+0x1c8/0x238 [rdma_rxe], CPU#0: swapper/0/0 ... libsha1 [last unloaded: ip6_udp_tunnel] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G C 6.19.0-rc5-64k-v8+ #37 PREEMPT Tainted: [C]=CRAP Hardware name: Raspberry Pi 4 Model B Rev 1.2 Call trace: rxe_sched_task+0x1c8/0x238 [rdma_rxe] (P) retransmit_timer+0x130/0x188 [rdma_rxe] call_timer_fn+0x68/0x4d0 __run_timers+0x630/0x888 ... WARNING: drivers/infiniband/sw/rxe/rxe_task.c:38 at rxe_sched_task+0x1c0/0x238 [rdma_rxe], CPU#0: swapper/0/0 ... WARNING: drivers/infiniband/sw/rxe/rxe_task.c:111 at do_work+0x488/0x5c8 [rdma_rxe], CPU#3: kworker/u17:4/93400 ... refcount_t: underflow; use-after-free. WARNING: lib/refcount.c:28 at refcount_warn_saturate+0x138/0x1a0, CPU#3: kworker/u17:4/93400 The issue is caused by a race condition between retransmit_timer() and rxe_destroy_qp, leading to the Queue Pair's (QP) reference count dropping to zero during timer handler execution. It seems this warning is harmless because rxe_qp_do_cleanup() will flush all pending timers and requests. Example of flow causing the issue: CPU0 CPU1 retransmit_timer() { spin_lock_irqsave rxe_destroy_qp() __rxe_cleanup() __rxe_put() // qp->ref_count decrease to 0 rxe_qp_do_cleanup() { if (qp->valid) { rxe_sched_task() { WARN_ON(rxe_read(task->qp) <= 0); } } spin_unlock_irqrestore } spin_lock_irqsave qp->valid = 0 spin_unlock_irqrestore } Ensure the QP's reference count is maintained and its validity is checked within the timer callbacks by adding calls to rxe_get(qp) and corresponding rxe_put(qp) after use.

Record: DEBIAN-CVE-2026-45910
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:68570 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record: RHSA-2026:68570
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:77218 8.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:77218
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:77219 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record: RHSA-2026:77219
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:68570 8.8

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: Linux kernel t7xx WWAN driver: Denial of Service via buffer overflow (CVE-2026-23172)
kernel: xfrm: hold dev ref until after transport_finish NF_HOOK (CVE-2026-31663)
kernel: RDMA/rxe: Fix race condition in QP timer handlers (CVE-2026-45910)
kernel: RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (CVE-2026-46043)
kernel: RDMA/rxe: Reject unknown opcodes before ICRC processing (CVE-2026-46133)
kernel: RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (CVE-2026-46114)
kernel: net: ena: PHC: Fix potential use-after-free in get_timestamp (CVE-2026-52971)
kernel: IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CVE-2026-53176)
kernel: ALSA: timer: Forcibly close timer instances at closing (CVE-2026-53193)
kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info() (CVE-2026-53196)
kernel: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (CVE-2026-53239)
kernel: ALSA: timer: Fix UAF at snd_timer_user_params() (CVE-2026-53192)
kernel: wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (CVE-2026-63869)
kernel: ALSA: seq: Serialize UMP output teardown with event_input (CVE-2026-64029)
kernel: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (CVE-2026-63921)
kernel: xfrm: input: hold netns during deferred transport reinjection (CVE-2026-63919)
kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink() (CVE-2026-63917)
kernel: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CVE-2026-63913)
kernel: wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (CVE-2026-64176)
kernel: wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (CVE-2026-64174)
kernel: wifi: iwlwifi: mld: stop TX during firmware restart (CVE-2026-64175)
kernel: RDMA/rxe: Fix a use-after-free problem in rxe_mmap (CVE-2026-64582)
kernel: Linux kernel: libceph stack out-of-bounds write via crafted OSDMap (CVE-2026-68159)
kernel: Linux kernel: ALSA timer use-after-free vulnerability allows privilege escalation (CVE-2026-68200)
kernel: Linux kernel (ice): Denial of Service via out-of-range ptype in VIRTCHNL (CVE-2026-68128)
kernel: Linux kernel: ath9k Wi-Fi driver use-after-free vulnerability leading to system crash (CVE-2026-68363)
kernel: xfrm: fix stale skb->prev after async crypto steals a GSO segment (CVE-2026-68426)
kernel: dm_early_create: fix freeing used table on dm_resume failure (CVE-2026-72102)
kernel: net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (CVE-2026-72298)
kernel: wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (CVE-2026-72003)
kernel: selinux: check connect-related permissions on TCP Fast Open (CVE-2026-72243)

Bug Fix(es) and Enhancement(s):

gfs2: filesystem withdrawal rework [rhel-9.8.z] (JIRA:Rocky Linux-252540)
The slab cache entries for gfs2 and dlm grow very large for gfs2 filesystems [rhel-9.8.z] (JIRA:Rocky Linux-252544)
gfs2: Get rid of sd_async_glock_wait [rhel-9.8.z] (JIRA:Rocky Linux-253986)
[Rocky Linux9.8z] watchdog: System panics during reboot when pretimeout is disabled (0) (JIRA:Rocky Linux-255217)
[usb/xhci] kdump on Arrow Lake systems hangs system with dracut-initqueue Timed out errors [rhel-9.8.z] (JIRA:Rocky Linux-256733)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:68570
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVROOT-OS-UBUNTU-2404-CVE-2026-45910 7.0

CVE-2026-45910 in linux - Patched by Root

Root has patched CVE-2026-45910 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record: ROOT-OS-UBUNTU-2404-CVE-2026-45910
CVSS 3.1: 7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-06

OSVUBUNTU-CVE-2026-45910 7.3

Record: UBUNTU-CVE-2026-45910
CVSS 4.0: 7.3 HighCVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-05

OSVALSA-2026:68570 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: Linux kernel t7xx WWAN driver: Denial of Service via buffer overflow (CVE-2026-23172)
kernel: xfrm: hold dev ref until after transport_finish NF_HOOK (CVE-2026-31663)
kernel: RDMA/rxe: Fix race condition in QP timer handlers (CVE-2026-45910)
kernel: RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (CVE-2026-46043)
kernel: RDMA/rxe: Reject unknown opcodes before ICRC processing (CVE-2026-46133)
kernel: RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (CVE-2026-46114)
kernel: net: ena: PHC: Fix potential use-after-free in get_timestamp (CVE-2026-52971)
kernel: IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CVE-2026-53176)
kernel: ALSA: timer: Forcibly close timer instances at closing (CVE-2026-53193)
kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info() (CVE-2026-53196)
kernel: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (CVE-2026-53239)
kernel: ALSA: timer: Fix UAF at snd_timer_user_params() (CVE-2026-53192)
kernel: wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (CVE-2026-63869)
kernel: ALSA: seq: Serialize UMP output teardown with event_input (CVE-2026-64029)
kernel: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (CVE-2026-63921)
kernel: xfrm: input: hold netns during deferred transport reinjection (CVE-2026-63919)
kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink() (CVE-2026-63917)
kernel: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CVE-2026-63913)
kernel: wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (CVE-2026-64176)
kernel: wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (CVE-2026-64174)
kernel: wifi: iwlwifi: mld: stop TX during firmware restart (CVE-2026-64175)
kernel: RDMA/rxe: Fix a use-after-free problem in rxe_mmap (CVE-2026-64582)
kernel: Linux kernel: libceph stack out-of-bounds write via crafted OSDMap (CVE-2026-68159)
kernel: Linux kernel: ALSA timer use-after-free vulnerability allows privilege escalation (CVE-2026-68200)
kernel: Linux kernel (ice): Denial of Service via out-of-range ptype in VIRTCHNL (CVE-2026-68128)
kernel: Linux kernel: ath9k Wi-Fi driver use-after-free vulnerability leading to system crash (CVE-2026-68363)
kernel: xfrm: fix stale skb->prev after async crypto steals a GSO segment (CVE-2026-68426)
kernel: dm_early_create: fix freeing used table on dm_resume failure (CVE-2026-72102)
kernel: net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (CVE-2026-72298)
kernel: wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (CVE-2026-72003)
kernel: selinux: check connect-related permissions on TCP Fast Open (CVE-2026-72243)

Bug Fix(es) and Enhancement(s):

gfs2: filesystem withdrawal rework [almalinux-9.8.z] (JIRA:AlmaLinux-252540)
The slab cache entries for gfs2 and dlm grow very large for gfs2 filesystems [almalinux-9.8.z] (JIRA:AlmaLinux-252544)
gfs2: Get rid of sd_async_glock_wait [almalinux-9.8.z] (JIRA:AlmaLinux-253986)
[AlmaLinux9.8z] watchdog: System panics during reboot when pretimeout is disabled (0) (JIRA:AlmaLinux-255217)
[usb/xhci] kdump on Arrow Lake systems hangs system with dracut-initqueue Timed out errors [almalinux-9.8.z] (JIRA:AlmaLinux-256733)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:68570
Updated: 2026-11-02

OSVCLSA-2026-1788168285 No score

kernel: Fix of 193 CVEs

mac802154: llsec: reject frames shorter than the authentication tag {CVE-2026-68125}
KVM: x86/mmu: Fix use-after-free on vendor module reload {CVE-2026-68428}
wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper {CVE-2026-68197}
bpf: account for current allocated stack depth in widen_imprecise_scalars() {CVE-2025-68208}
tun: free page on build_skb failure in tun_xdp_one() {CVE-2026-46322}
smb: client: fix potential cfid UAF in smb2_query_info_compound {CVE-2025-40320}
net/packet: avoid fanout hook re-registration after unregister {CVE-2026-68338}
wifi: cfg80211: cancel sched scan results work on unregister {CVE-2026-68414}
binfmt_misc: set have_execfd only once the interpreter is opened {CVE-2026-68186}
tracing: Fix resource leak on mmiotrace trace_pipe close {CVE-2026-68175}
tipc: fix u16 MTU truncation in media and bearer MTU validation {CVE-2026-68297}
net: gro: fix double aggregation of flush-marked skbs {CVE-2026-68136}
bpf, sockmap: Reject unhashed UDP sockets on sockmap update {CVE-2026-68386}
wifi: brcmfmac: fix 802.1X-SHA256 call trace warning {CVE-2026-68304}
udf: fix partition descriptor append bookkeeping {CVE-2026-45991}
Bluetooth: SCO: fix race conditions in sco_sock_connect() {CVE-2026-43023}
smb: client: validate dacloffset before building DACL pointers {CVE-2026-46195}
smb/client: fix out-of-bounds read in symlink_data() {CVE-2026-46185}
net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo {CVE-2026-46132}
Bluetooth: hci_event: fix potential UAF in SSP passkey handlers {CVE-2026-46056}
RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send {CVE-2026-45856}
RDMA/mana: Validate rx_hash_key_len {CVE-2026-46145}
scsi: qla2xxx: Completely fix fcport double free {CVE-2026-43414}
bpf: Fix bpf_xdp_store_bytes proto for read-only arg {CVE-2026-45886}
libceph: Fix slab-out-of-bounds access in auth message processing {CVE-2026-46119}
wifi: mac80211: use safe list iteration in radar detect work {CVE-2026-46166}
RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads {CVE-2026-46114}
nfsd: never defer requests during idmap lookup {CVE-2026-45983}
drop_monitor: fix size calculations for 64-bit attributes {CVE-2026-68287}
openvswitch: cap upcall PID array size and pre-size vport replies {CVE-2026-45840}
procfs: fix missing RCU protection when reading real_parent in do_task_stat() {CVE-2026-46259}
wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() {CVE-2026-46069}
dm mirror: fix integer overflow in create_dirty_log() {CVE-2026-46023}
netfilter: nft_inner: Fix IPv6 inner_thoff desync {CVE-2026-46244}
drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe() {CVE-2026-68429}
crypto: authencesn - reject short ahash digests during instance creation {CVE-2026-46033}
RDMA/rxe: Fix race condition in QP timer handlers {CVE-2026-45910}
wifi: mac80211: remove station if connection prep fails {CVE-2026-46125}
tcp: call sk_data_ready() after listener migration {CVE-2026-46015}
scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk {CVE-2025-38289}
net/sched: act_ct: Only release RCU read lock after ct_ft {CVE-2026-46319}
dm: fix a buffer overflow in ioctl processing {CVE-2026-46294}
io-wq: check that the predecessor is hashed in io_wq_remove_pending() {CVE-2026-46274}
wifi: mac80211: drop stray 'static' from fast-RX rx_result {CVE-2026-46152}
io_uring/poll: fix signed comparison in io_poll_get_ownership() {CVE-2026-52933}
xfrm: espintcp: do not reuse an in-progress partial send {CVE-2026-52935}
Bluetooth: btusb: validate Realtek vendor event length {CVE-2026-68339}
Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() {CVE-2026-53256}
Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
netfilter: nft_exthdr: fix register tracking for F_PRESENT flag {CVE-2026-53218}
ipc: limit next_id…

Record: CLSA-2026-1788168285
Updated: 2026-11-02

OSVopenSUSE-SU-2026:20965-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2026-23254: net: gro: fix outer network offset (bsc#1259884).
CVE-2026-23303: smb: client: Don't log plaintext credentials in cifs_set_cifscreds (bsc#1260502).
CVE-2026-23327: cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed() (bsc#1260548).
CVE-2026-23438: net: mvpp2: guard flow control update with global_tx_fc in buffer switching (bsc#1261619).
CVE-2026-31396: net: macb: fix use-after-free access to PTP clock (bsc#1261791).
CVE-2026-31401: HID: bpf: prevent buffer overflow in hid_hw_request (bsc#1261603).
CVE-2026-31446: ext4: fix use-after-free in update_super_work when racing with umount (bsc#1262619).
CVE-2026-31448: ext4: avoid infinite loops caused by residual data (bsc#1262622).
CVE-2026-31454: xfs: save ailp before dropping the AIL lock in push callbacks (bsc#1262624).
CVE-2026-31455: xfs: stop reclaim before pushing AIL during unmount (bsc#1262615).
CVE-2026-31518: esp: fix skb leak with espintcp and async crypto (bsc#1262606).
CVE-2026-31546: net: bonding: fix NULL deref in bond_debug_rlb_hash_show (bsc#1263006).
CVE-2026-31556: xfs: scrub: unlock dquot before early return in quota scrub (bsc#1263062).
CVE-2026-31562: drm/mediatek: dsi: Store driver data before invoking mipi_dsi_host_register (bsc#1263058).
CVE-2026-31584: media: mediatek: vcodec: fix use-after-free in encoder release path (bsc#1263180).
CVE-2026-31645: net: lan966x: fix page pool leak in error paths (bsc#1263794).
CVE-2026-31648: mm: filemap: fix nr_pages calculation overflow in filemap_map_pages() (bsc#1263579).
CVE-2026-31655: pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled (bsc#1263724).
CVE-2026-31671: xfrm_user: fix info leak in build_report() (bsc#1263115).
CVE-2026-31683: batman-adv: avoid OGM aggregation when skb tailroom is insufficient (bsc#1263594).
CVE-2026-31703: writeback: Fix use after free in inode_switch_wbs_work_fn() (bsc#1263883).
CVE-2026-31774: io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() (bsc#1264040).
CVE-2026-43026: netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (bsc#1263932).
CVE-2026-43030: bpf: Fix regsafe() for pointers to packet (bsc#1264000).
CVE-2026-43040: net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak (bsc#1264091).
CVE-2026-43063: xfs: don't irele after failing to iget in xfs_attri_recover_work (bsc#1264196).
CVE-2026-43065: ext4: always drain queued discard work in ext4_mb_release() (bsc#1264243).
CVE-2026-43066: ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths (bsc#1264245).
CVE-2026-43068: ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() (bsc#1264255).
CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1264484).
CVE-2026-43150: perf/arm-cmn: Reject unsupported hardware configurations (bsc#1264415).
CVE-2026-43184: rnbd-srv: Zero the rsp buffer before using it (bsc#1264622).
CVE-2026-43197: netconsole: avoid OOB reads, msg is not nul-terminated (bsc#1264609).
CVE-2026-43332: thermal: core: Fix thermal zone device registration error path (bsc#1265114).
CVE-2026-43393: btrfs: fix chunk map leak in btrfs_map_block() after btrfs_chunk_map_num_copies() (bsc#1264723).
CVE-2026-43394: nfsd: Fix cred ref leak in nfsd_nl_listener_set_doit() (bsc#1265081).
CVE-2026-43411: tipc: fix divide-by-zero in tipc_sk_filter_connect() (bsc#1264672).
CVE-2026-43455: net: mctp: Ensure keys maintain only one ref to corresponding dev (bsc#1264765).
CVE-2026-45842: slip: reject VJ receive packets on instances with no rstate array (bsc#1266400).
CVE-2026-45846: bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() (bsc#1266394).
CVE-2026-45852: RDMA/rxe: Fix double free in rxe_srq_from_init…

Record: openSUSE-SU-2026:20965-1
Updated: 2026-11-02

OSVSUSE-SU-2026:22099-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2026-23254: net: gro: fix outer network offset (bsc#1259884).
CVE-2026-23303: smb: client: Don't log plaintext credentials in cifs_set_cifscreds (bsc#1260502).
CVE-2026-23327: cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed() (bsc#1260548).
CVE-2026-23438: net: mvpp2: guard flow control update with global_tx_fc in buffer switching (bsc#1261619).
CVE-2026-31396: net: macb: fix use-after-free access to PTP clock (bsc#1261791).
CVE-2026-31401: HID: bpf: prevent buffer overflow in hid_hw_request (bsc#1261603).
CVE-2026-31446: ext4: fix use-after-free in update_super_work when racing with umount (bsc#1262619).
CVE-2026-31448: ext4: avoid infinite loops caused by residual data (bsc#1262622).
CVE-2026-31454: xfs: save ailp before dropping the AIL lock in push callbacks (bsc#1262624).
CVE-2026-31455: xfs: stop reclaim before pushing AIL during unmount (bsc#1262615).
CVE-2026-31518: esp: fix skb leak with espintcp and async crypto (bsc#1262606).
CVE-2026-31546: net: bonding: fix NULL deref in bond_debug_rlb_hash_show (bsc#1263006).
CVE-2026-31556: xfs: scrub: unlock dquot before early return in quota scrub (bsc#1263062).
CVE-2026-31562: drm/mediatek: dsi: Store driver data before invoking mipi_dsi_host_register (bsc#1263058).
CVE-2026-31584: media: mediatek: vcodec: fix use-after-free in encoder release path (bsc#1263180).
CVE-2026-31645: net: lan966x: fix page pool leak in error paths (bsc#1263794).
CVE-2026-31648: mm: filemap: fix nr_pages calculation overflow in filemap_map_pages() (bsc#1263579).
CVE-2026-31655: pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled (bsc#1263724).
CVE-2026-31671: xfrm_user: fix info leak in build_report() (bsc#1263115).
CVE-2026-31683: batman-adv: avoid OGM aggregation when skb tailroom is insufficient (bsc#1263594).
CVE-2026-31703: writeback: Fix use after free in inode_switch_wbs_work_fn() (bsc#1263883).
CVE-2026-31774: io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() (bsc#1264040).
CVE-2026-43026: netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (bsc#1263932).
CVE-2026-43030: bpf: Fix regsafe() for pointers to packet (bsc#1264000).
CVE-2026-43040: net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak (bsc#1264091).
CVE-2026-43063: xfs: don't irele after failing to iget in xfs_attri_recover_work (bsc#1264196).
CVE-2026-43065: ext4: always drain queued discard work in ext4_mb_release() (bsc#1264243).
CVE-2026-43066: ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths (bsc#1264245).
CVE-2026-43068: ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() (bsc#1264255).
CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1264484).
CVE-2026-43150: perf/arm-cmn: Reject unsupported hardware configurations (bsc#1264415).
CVE-2026-43184: rnbd-srv: Zero the rsp buffer before using it (bsc#1264622).
CVE-2026-43197: netconsole: avoid OOB reads, msg is not nul-terminated (bsc#1264609).
CVE-2026-43332: thermal: core: Fix thermal zone device registration error path (bsc#1265114).
CVE-2026-43393: btrfs: fix chunk map leak in btrfs_map_block() after btrfs_chunk_map_num_copies() (bsc#1264723).
CVE-2026-43394: nfsd: Fix cred ref leak in nfsd_nl_listener_set_doit() (bsc#1265081).
CVE-2026-43411: tipc: fix divide-by-zero in tipc_sk_filter_connect() (bsc#1264672).
CVE-2026-43455: net: mctp: Ensure keys maintain only one ref to corresponding dev (bsc#1264765).
CVE-2026-45842: slip: reject VJ receive packets on instances with no rstate array (bsc#1266400).
CVE-2026-45846: bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() (bsc#1266394).
CVE-2026-45852: RDMA/rxe: Fix double free in rxe_srq_from_init…

Record: SUSE-SU-2026:22099-1
Updated: 2026-11-02

OSVSUSE-SU-2026:22108-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2025-38549: efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths (bsc#1248235).
CVE-2025-68324: scsi: imm: Fix use-after-free bug caused by unfinished delayed work (bsc#1255416).
CVE-2026-23303: smb: client: Don't log plaintext credentials in cifs_set_cifscreds (bsc#1260502).
CVE-2026-23327: cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()
CVE-2026-23359: bpf: Fix stack-out-of-bounds write in devmap (bsc#1260584).
CVE-2026-23438: net: mvpp2: guard flow control update with global_tx_fc in buffer switching (bsc#1261619).
CVE-2026-23444: wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure (bsc#1266307).
CVE-2026-31396: net: macb: fix use-after-free access to PTP clock (bsc#1261791).
CVE-2026-31446: ext4: fix use-after-free in update_super_work when racing with umount (bsc#1262619).
CVE-2026-31448: ext4: avoid infinite loops caused by residual data (bsc#1262622).
CVE-2026-31454: xfs: save ailp before dropping the AIL lock in push callbacks (bsc#1262624).
CVE-2026-31455: xfs: stop reclaim before pushing AIL during unmount (bsc#1262615).
CVE-2026-31464: scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() (bsc#1262656).
CVE-2026-31473: media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex (bsc#1262663).
CVE-2026-31480: tracing: Fix potential deadlock in cpu hotplug with osnoise (bsc#1262634).
CVE-2026-31493: RDMA/efa: Fix use of completion ctx after free (bsc#1262668).
CVE-2026-3150: bcache: fix cached_dev.sb_bio use-after-free and crash (bsc#1263169).
CVE-2026-31516: xfrm: prevent policy_hthresh.work from racing with netns teardown (bsc#1262755).
CVE-2026-31518: esp: fix skb leak with espintcp and async crypto (bsc#1262606).
CVE-2026-31546: net: bonding: fix NULL deref in bond_debug_rlb_hash_show (bsc#1263006).
CVE-2026-31590: KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION (bsc#1263152).
CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
CVE-2026-31613: smb: client: fix OOB reads parsing symlink error response (bsc#1263769).
CVE-2026-31614: smb: client: fix off-by-8 bounds check in check_wsl_eas() (bsc#1263774).
CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263790).
CVE-2026-31655: pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled (bsc#1263724).
CVE-2026-31671: xfrm_user: fix info leak in build_report() (bsc#1263115).
CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
CVE-2026-31678: openvswitch: defer tunnel netdev_put to RCU release (bsc#1263562).
CVE-2026-31703: writeback: Fix use after free in inode_switch_wbs_work_fn() (bsc#1263883).
CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264093).
CVE-2026-31767: drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode (bsc#1264124).
CVE-2026-43013: net/mlx5: lag: Check for LAG device before creating debugfs (bsc#1264011).
CVE-2026-43026: netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (bsc#1263932).
CVE-2026-43030: bpf: Fix regsafe() for pointers to packet (bsc#1264000).
CVE-2026-43040: net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero (bsc#1264091).
CVE-2026-43052: wifi: mac80211: check tdls flag in ieee80211_tdls_oper (bsc#1263945).
CVE-2026-43054: scsi: target: tcm_loop: Drain commands in target_reset handler (bsc#1264063).
CVE-2026-43059: Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (bsc#1264184).
CVE-2026-43065: ext4: always drain queued discard work in ext4_mb_release() (bsc#1264243).
CVE-2026-43066: ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths (bsc#1264245).
CVE-2026-43068: ext4: avoid…

Record: SUSE-SU-2026:22108-1
Updated: 2026-11-02

OSVSUSE-SU-2026:22112-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2026-23254: net: gro: fix outer network offset (bsc#1259884).
CVE-2026-23303: smb: client: Don't log plaintext credentials in cifs_set_cifscreds (bsc#1260502).
CVE-2026-23327: cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed() (bsc#1260548).
CVE-2026-23438: net: mvpp2: guard flow control update with global_tx_fc in buffer switching (bsc#1261619).
CVE-2026-31396: net: macb: fix use-after-free access to PTP clock (bsc#1261791).
CVE-2026-31401: HID: bpf: prevent buffer overflow in hid_hw_request (bsc#1261603).
CVE-2026-31446: ext4: fix use-after-free in update_super_work when racing with umount (bsc#1262619).
CVE-2026-31448: ext4: avoid infinite loops caused by residual data (bsc#1262622).
CVE-2026-31454: xfs: save ailp before dropping the AIL lock in push callbacks (bsc#1262624).
CVE-2026-31455: xfs: stop reclaim before pushing AIL during unmount (bsc#1262615).
CVE-2026-31518: esp: fix skb leak with espintcp and async crypto (bsc#1262606).
CVE-2026-31546: net: bonding: fix NULL deref in bond_debug_rlb_hash_show (bsc#1263006).
CVE-2026-31556: xfs: scrub: unlock dquot before early return in quota scrub (bsc#1263062).
CVE-2026-31562: drm/mediatek: dsi: Store driver data before invoking mipi_dsi_host_register (bsc#1263058).
CVE-2026-31584: media: mediatek: vcodec: fix use-after-free in encoder release path (bsc#1263180).
CVE-2026-31645: net: lan966x: fix page pool leak in error paths (bsc#1263794).
CVE-2026-31648: mm: filemap: fix nr_pages calculation overflow in filemap_map_pages() (bsc#1263579).
CVE-2026-31655: pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled (bsc#1263724).
CVE-2026-31671: xfrm_user: fix info leak in build_report() (bsc#1263115).
CVE-2026-31683: batman-adv: avoid OGM aggregation when skb tailroom is insufficient (bsc#1263594).
CVE-2026-31703: writeback: Fix use after free in inode_switch_wbs_work_fn() (bsc#1263883).
CVE-2026-31774: io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() (bsc#1264040).
CVE-2026-43026: netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (bsc#1263932).
CVE-2026-43030: bpf: Fix regsafe() for pointers to packet (bsc#1264000).
CVE-2026-43040: net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak (bsc#1264091).
CVE-2026-43063: xfs: don't irele after failing to iget in xfs_attri_recover_work (bsc#1264196).
CVE-2026-43065: ext4: always drain queued discard work in ext4_mb_release() (bsc#1264243).
CVE-2026-43066: ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths (bsc#1264245).
CVE-2026-43068: ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() (bsc#1264255).
CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1264484).
CVE-2026-43150: perf/arm-cmn: Reject unsupported hardware configurations (bsc#1264415).
CVE-2026-43184: rnbd-srv: Zero the rsp buffer before using it (bsc#1264622).
CVE-2026-43197: netconsole: avoid OOB reads, msg is not nul-terminated (bsc#1264609).
CVE-2026-43332: thermal: core: Fix thermal zone device registration error path (bsc#1265114).
CVE-2026-43393: btrfs: fix chunk map leak in btrfs_map_block() after btrfs_chunk_map_num_copies() (bsc#1264723).
CVE-2026-43394: nfsd: Fix cred ref leak in nfsd_nl_listener_set_doit() (bsc#1265081).
CVE-2026-43411: tipc: fix divide-by-zero in tipc_sk_filter_connect() (bsc#1264672).
CVE-2026-43455: net: mctp: Ensure keys maintain only one ref to corresponding dev (bsc#1264765).
CVE-2026-45842: slip: reject VJ receive packets on instances with no rstate array (bsc#1266400).
CVE-2026-45846: bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() (bsc#1266394).
CVE-2026-45852: RDMA/rxe: Fix double free in rxe_srq_from_init…

Record: SUSE-SU-2026:22112-1
Updated: 2026-11-02

OSVSUSE-SU-2026:22117-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2026-23254: net: gro: fix outer network offset (bsc#1259884).
CVE-2026-23303: smb: client: Don't log plaintext credentials in cifs_set_cifscreds (bsc#1260502).
CVE-2026-23327: cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed() (bsc#1260548).
CVE-2026-23438: net: mvpp2: guard flow control update with global_tx_fc in buffer switching (bsc#1261619).
CVE-2026-31396: net: macb: fix use-after-free access to PTP clock (bsc#1261791).
CVE-2026-31401: HID: bpf: prevent buffer overflow in hid_hw_request (bsc#1261603).
CVE-2026-31446: ext4: fix use-after-free in update_super_work when racing with umount (bsc#1262619).
CVE-2026-31448: ext4: avoid infinite loops caused by residual data (bsc#1262622).
CVE-2026-31454: xfs: save ailp before dropping the AIL lock in push callbacks (bsc#1262624).
CVE-2026-31455: xfs: stop reclaim before pushing AIL during unmount (bsc#1262615).
CVE-2026-31518: esp: fix skb leak with espintcp and async crypto (bsc#1262606).
CVE-2026-31546: net: bonding: fix NULL deref in bond_debug_rlb_hash_show (bsc#1263006).
CVE-2026-31556: xfs: scrub: unlock dquot before early return in quota scrub (bsc#1263062).
CVE-2026-31562: drm/mediatek: dsi: Store driver data before invoking mipi_dsi_host_register (bsc#1263058).
CVE-2026-31584: media: mediatek: vcodec: fix use-after-free in encoder release path (bsc#1263180).
CVE-2026-31645: net: lan966x: fix page pool leak in error paths (bsc#1263794).
CVE-2026-31648: mm: filemap: fix nr_pages calculation overflow in filemap_map_pages() (bsc#1263579).
CVE-2026-31655: pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled (bsc#1263724).
CVE-2026-31671: xfrm_user: fix info leak in build_report() (bsc#1263115).
CVE-2026-31683: batman-adv: avoid OGM aggregation when skb tailroom is insufficient (bsc#1263594).
CVE-2026-31703: writeback: Fix use after free in inode_switch_wbs_work_fn() (bsc#1263883).
CVE-2026-31774: io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() (bsc#1264040).
CVE-2026-43026: netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (bsc#1263932).
CVE-2026-43030: bpf: Fix regsafe() for pointers to packet (bsc#1264000).
CVE-2026-43040: net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak (bsc#1264091).
CVE-2026-43063: xfs: don't irele after failing to iget in xfs_attri_recover_work (bsc#1264196).
CVE-2026-43065: ext4: always drain queued discard work in ext4_mb_release() (bsc#1264243).
CVE-2026-43066: ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths (bsc#1264245).
CVE-2026-43068: ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() (bsc#1264255).
CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1264484).
CVE-2026-43150: perf/arm-cmn: Reject unsupported hardware configurations (bsc#1264415).
CVE-2026-43184: rnbd-srv: Zero the rsp buffer before using it (bsc#1264622).
CVE-2026-43197: netconsole: avoid OOB reads, msg is not nul-terminated (bsc#1264609).
CVE-2026-43332: thermal: core: Fix thermal zone device registration error path (bsc#1265114).
CVE-2026-43393: btrfs: fix chunk map leak in btrfs_map_block() after btrfs_chunk_map_num_copies() (bsc#1264723).
CVE-2026-43394: nfsd: Fix cred ref leak in nfsd_nl_listener_set_doit() (bsc#1265081).
CVE-2026-43411: tipc: fix divide-by-zero in tipc_sk_filter_connect() (bsc#1264672).
CVE-2026-43455: net: mctp: Ensure keys maintain only one ref to corresponding dev (bsc#1264765).
CVE-2026-45842: slip: reject VJ receive packets on instances with no rstate array (bsc#1266400).
CVE-2026-45846: bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() (bsc#1266394).
CVE-2026-45852: RDMA/rxe: Fix double free in rxe_srq_from_init…

Record: SUSE-SU-2026:22117-1
Updated: 2026-11-02

OSVSUSE-SU-2026:22127-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2026-23254: net: gro: fix outer network offset (bsc#1259884).
CVE-2026-23303: smb: client: Don't log plaintext credentials in cifs_set_cifscreds (bsc#1260502).
CVE-2026-23327: cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed() (bsc#1260548).
CVE-2026-23438: net: mvpp2: guard flow control update with global_tx_fc in buffer switching (bsc#1261619).
CVE-2026-31396: net: macb: fix use-after-free access to PTP clock (bsc#1261791).
CVE-2026-31401: HID: bpf: prevent buffer overflow in hid_hw_request (bsc#1261603).
CVE-2026-31446: ext4: fix use-after-free in update_super_work when racing with umount (bsc#1262619).
CVE-2026-31448: ext4: avoid infinite loops caused by residual data (bsc#1262622).
CVE-2026-31454: xfs: save ailp before dropping the AIL lock in push callbacks (bsc#1262624).
CVE-2026-31455: xfs: stop reclaim before pushing AIL during unmount (bsc#1262615).
CVE-2026-31518: esp: fix skb leak with espintcp and async crypto (bsc#1262606).
CVE-2026-31546: net: bonding: fix NULL deref in bond_debug_rlb_hash_show (bsc#1263006).
CVE-2026-31556: xfs: scrub: unlock dquot before early return in quota scrub (bsc#1263062).
CVE-2026-31562: drm/mediatek: dsi: Store driver data before invoking mipi_dsi_host_register (bsc#1263058).
CVE-2026-31584: media: mediatek: vcodec: fix use-after-free in encoder release path (bsc#1263180).
CVE-2026-31645: net: lan966x: fix page pool leak in error paths (bsc#1263794).
CVE-2026-31648: mm: filemap: fix nr_pages calculation overflow in filemap_map_pages() (bsc#1263579).
CVE-2026-31655: pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled (bsc#1263724).
CVE-2026-31671: xfrm_user: fix info leak in build_report() (bsc#1263115).
CVE-2026-31683: batman-adv: avoid OGM aggregation when skb tailroom is insufficient (bsc#1263594).
CVE-2026-31703: writeback: Fix use after free in inode_switch_wbs_work_fn() (bsc#1263883).
CVE-2026-31774: io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() (bsc#1264040).
CVE-2026-43026: netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (bsc#1263932).
CVE-2026-43030: bpf: Fix regsafe() for pointers to packet (bsc#1264000).
CVE-2026-43040: net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak (bsc#1264091).
CVE-2026-43063: xfs: don't irele after failing to iget in xfs_attri_recover_work (bsc#1264196).
CVE-2026-43065: ext4: always drain queued discard work in ext4_mb_release() (bsc#1264243).
CVE-2026-43066: ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths (bsc#1264245).
CVE-2026-43068: ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() (bsc#1264255).
CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1264484).
CVE-2026-43150: perf/arm-cmn: Reject unsupported hardware configurations (bsc#1264415).
CVE-2026-43184: rnbd-srv: Zero the rsp buffer before using it (bsc#1264622).
CVE-2026-43197: netconsole: avoid OOB reads, msg is not nul-terminated (bsc#1264609).
CVE-2026-43332: thermal: core: Fix thermal zone device registration error path (bsc#1265114).
CVE-2026-43393: btrfs: fix chunk map leak in btrfs_map_block() after btrfs_chunk_map_num_copies() (bsc#1264723).
CVE-2026-43394: nfsd: Fix cred ref leak in nfsd_nl_listener_set_doit() (bsc#1265081).
CVE-2026-43411: tipc: fix divide-by-zero in tipc_sk_filter_connect() (bsc#1264672).
CVE-2026-43455: net: mctp: Ensure keys maintain only one ref to corresponding dev (bsc#1264765).
CVE-2026-45842: slip: reject VJ receive packets on instances with no rstate array (bsc#1266400).
CVE-2026-45846: bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() (bsc#1266394).
CVE-2026-45852: RDMA/rxe: Fix double free in rxe_srq_from_init…

Record: SUSE-SU-2026:22127-1
Updated: 2026-11-02

OSVSUSE-SU-2026:22137-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2025-38549: efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths (bsc#1248235).
CVE-2025-68324: scsi: imm: Fix use-after-free bug caused by unfinished delayed work (bsc#1255416).
CVE-2026-23303: smb: client: Don't log plaintext credentials in cifs_set_cifscreds (bsc#1260502).
CVE-2026-23327: cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()
CVE-2026-23359: bpf: Fix stack-out-of-bounds write in devmap (bsc#1260584).
CVE-2026-23438: net: mvpp2: guard flow control update with global_tx_fc in buffer switching (bsc#1261619).
CVE-2026-23444: wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure (bsc#1266307).
CVE-2026-31396: net: macb: fix use-after-free access to PTP clock (bsc#1261791).
CVE-2026-31446: ext4: fix use-after-free in update_super_work when racing with umount (bsc#1262619).
CVE-2026-31448: ext4: avoid infinite loops caused by residual data (bsc#1262622).
CVE-2026-31454: xfs: save ailp before dropping the AIL lock in push callbacks (bsc#1262624).
CVE-2026-31455: xfs: stop reclaim before pushing AIL during unmount (bsc#1262615).
CVE-2026-31464: scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() (bsc#1262656).
CVE-2026-31473: media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex (bsc#1262663).
CVE-2026-31480: tracing: Fix potential deadlock in cpu hotplug with osnoise (bsc#1262634).
CVE-2026-31493: RDMA/efa: Fix use of completion ctx after free (bsc#1262668).
CVE-2026-3150: bcache: fix cached_dev.sb_bio use-after-free and crash (bsc#1263169).
CVE-2026-31516: xfrm: prevent policy_hthresh.work from racing with netns teardown (bsc#1262755).
CVE-2026-31518: esp: fix skb leak with espintcp and async crypto (bsc#1262606).
CVE-2026-31546: net: bonding: fix NULL deref in bond_debug_rlb_hash_show (bsc#1263006).
CVE-2026-31590: KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION (bsc#1263152).
CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
CVE-2026-31613: smb: client: fix OOB reads parsing symlink error response (bsc#1263769).
CVE-2026-31614: smb: client: fix off-by-8 bounds check in check_wsl_eas() (bsc#1263774).
CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263790).
CVE-2026-31655: pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled (bsc#1263724).
CVE-2026-31671: xfrm_user: fix info leak in build_report() (bsc#1263115).
CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
CVE-2026-31678: openvswitch: defer tunnel netdev_put to RCU release (bsc#1263562).
CVE-2026-31703: writeback: Fix use after free in inode_switch_wbs_work_fn() (bsc#1263883).
CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264093).
CVE-2026-31767: drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode (bsc#1264124).
CVE-2026-43013: net/mlx5: lag: Check for LAG device before creating debugfs (bsc#1264011).
CVE-2026-43026: netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (bsc#1263932).
CVE-2026-43030: bpf: Fix regsafe() for pointers to packet (bsc#1264000).
CVE-2026-43040: net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero (bsc#1264091).
CVE-2026-43052: wifi: mac80211: check tdls flag in ieee80211_tdls_oper (bsc#1263945).
CVE-2026-43054: scsi: target: tcm_loop: Drain commands in target_reset handler (bsc#1264063).
CVE-2026-43059: Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (bsc#1264184).
CVE-2026-43065: ext4: always drain queued discard work in ext4_mb_release() (bsc#1264243).
CVE-2026-43066: ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths (bsc#1264245).
CVE-2026-43068: ext4: avoid…

Record: SUSE-SU-2026:22137-1
Updated: 2026-11-02

OSVSUSE-SU-2026:22433-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2025-10263: arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1266290).
CVE-2025-38549: efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths (bsc#1248235).
CVE-2025-68324: scsi: imm: Fix use-after-free bug caused by unfinished delayed work (bsc#1255416).
CVE-2025-68822: Input: alps - fix use-after-free bugs caused by dev3_register_work (bsc#1256668).
CVE-2026-23303: smb: client: Don't log plaintext credentials in cifs_set_cifscreds (bsc#1260502).
CVE-2026-23327: cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()
CVE-2026-23359: bpf: Fix stack-out-of-bounds write in devmap (bsc#1260584).
CVE-2026-23438: net: mvpp2: guard flow control update with global_tx_fc in buffer switching (bsc#1261619).
CVE-2026-23444: wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure (bsc#1266307).
CVE-2026-31396: net: macb: fix use-after-free access to PTP clock (bsc#1261791).
CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
CVE-2026-31446: ext4: fix use-after-free in update_super_work when racing with umount (bsc#1262619).
CVE-2026-31448: ext4: avoid infinite loops caused by residual data (bsc#1262622).
CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
CVE-2026-31454: xfs: save ailp before dropping the AIL lock in push callbacks (bsc#1262624).
CVE-2026-31455: xfs: stop reclaim before pushing AIL during unmount (bsc#1262615).
CVE-2026-31464: scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() (bsc#1262656).
CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false
CVE-2026-31473: media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex (bsc#1262663).
CVE-2026-31480: tracing: Fix potential deadlock in cpu hotplug with osnoise (bsc#1262634).
CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
CVE-2026-31493: RDMA/efa: Fix use of completion ctx after free (bsc#1262668).
CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
CVE-2026-31500: Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock (bsc#1262993).
CVE-2026-31516: xfrm: prevent policy_hthresh.work from racing with netns teardown (bsc#1262755).
CVE-2026-31518: esp: fix skb leak with espintcp and async crypto (bsc#1262606).
CVE-2026-31546: net: bonding: fix NULL deref in bond_debug_rlb_hash_show (bsc#1263006).
CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
CVE-2026-31590: KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION (bsc#1263152).
CVE-2026-31592: KVM: SEV: Protect all of sev_mem_enc_register_region() with kvm->lock (bsc#1263123).
CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
CVE-2026-31613: smb: client: fix OOB reads parsing symlink error response (bsc#1263769).
CVE-2026-31614: smb: client: fix off-by-8 bounds check in check_wsl_eas() (bsc#1263774).
CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263790).
CVE-2026-31655: pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled (bsc#1263724).
CVE-2026-31664: string.h: Introduce memset_after() for wiping trailing members/padding (bsc#1263578).
CVE-2026-31665: kABI: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
CVE-2026-31671: xfrm_user: fix info leak in build_report() (bsc#1263115).
CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock…

Record: SUSE-SU-2026:22433-1
Updated: 2026-11-02

OSVSUSE-SU-2026:22458-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2025-10263: arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1266290).
CVE-2025-38549: efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths (bsc#1248235).
CVE-2025-68324: scsi: imm: Fix use-after-free bug caused by unfinished delayed work (bsc#1255416).
CVE-2025-68822: Input: alps - fix use-after-free bugs caused by dev3_register_work (bsc#1256668).
CVE-2026-23303: smb: client: Don't log plaintext credentials in cifs_set_cifscreds (bsc#1260502).
CVE-2026-23327: cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()
CVE-2026-23359: bpf: Fix stack-out-of-bounds write in devmap (bsc#1260584).
CVE-2026-23438: net: mvpp2: guard flow control update with global_tx_fc in buffer switching (bsc#1261619).
CVE-2026-23444: wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure (bsc#1266307).
CVE-2026-31396: net: macb: fix use-after-free access to PTP clock (bsc#1261791).
CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
CVE-2026-31446: ext4: fix use-after-free in update_super_work when racing with umount (bsc#1262619).
CVE-2026-31448: ext4: avoid infinite loops caused by residual data (bsc#1262622).
CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
CVE-2026-31454: xfs: save ailp before dropping the AIL lock in push callbacks (bsc#1262624).
CVE-2026-31455: xfs: stop reclaim before pushing AIL during unmount (bsc#1262615).
CVE-2026-31464: scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() (bsc#1262656).
CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false
CVE-2026-31473: media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex (bsc#1262663).
CVE-2026-31480: tracing: Fix potential deadlock in cpu hotplug with osnoise (bsc#1262634).
CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
CVE-2026-31493: RDMA/efa: Fix use of completion ctx after free (bsc#1262668).
CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
CVE-2026-31500: Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock (bsc#1262993).
CVE-2026-31516: xfrm: prevent policy_hthresh.work from racing with netns teardown (bsc#1262755).
CVE-2026-31518: esp: fix skb leak with espintcp and async crypto (bsc#1262606).
CVE-2026-31546: net: bonding: fix NULL deref in bond_debug_rlb_hash_show (bsc#1263006).
CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
CVE-2026-31590: KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION (bsc#1263152).
CVE-2026-31592: KVM: SEV: Protect all of sev_mem_enc_register_region() with kvm->lock (bsc#1263123).
CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
CVE-2026-31613: smb: client: fix OOB reads parsing symlink error response (bsc#1263769).
CVE-2026-31614: smb: client: fix off-by-8 bounds check in check_wsl_eas() (bsc#1263774).
CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263790).
CVE-2026-31655: pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled (bsc#1263724).
CVE-2026-31664: string.h: Introduce memset_after() for wiping trailing members/padding (bsc#1263578).
CVE-2026-31665: kABI: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
CVE-2026-31671: xfrm_user: fix info leak in build_report() (bsc#1263115).
CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock…

Record: SUSE-SU-2026:22458-1
Updated: 2026-11-02

OSVSUSE-SU-2026:2310-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2026-31405: media: dvb-net: fix OOB access in ULE extension header tables (bsc#1261700).
CVE-2026-31473: media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex (bsc#1262663).
CVE-2026-31613: smb: client: fix OOB reads parsing symlink error response (bsc#1263769).
CVE-2026-31614: smb: client: fix off-by-8 bounds check in check_wsl_eas() (bsc#1263774).
CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263790).
CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264093).
CVE-2026-43037: ip6_tunnel: clear skb2->cb in ip4ip6_err() (bsc#1263995).
CVE-2026-43206: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (bsc#1264551).
CVE-2026-43362: smb: client: fix in-place encryption corruption in SMB2_write() (bsc#1264989).
CVE-2026-43499: rtmutex: Use waiter::task instead of current in remove_waiter() (bsc#1266001).
CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266009).
CVE-2026-43503: net: skbuff: propagate shared-frag marker through frag-transfer helpers (bsc#1265960).
CVE-2026-45852: RDMA/rxe: Fix double free in rxe_srq_from_init (bsc#1266711).
CVE-2026-45910: RDMA/rxe: Fix race condition in QP timer handlers (bsc#1266889).
CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267205).
CVE-2026-46004: ALSA: caiaq: Handle probe errors properly (bsc#1267222).
CVE-2026-46021: thermal: core: Fix thermal zone governor cleanup issues (bsc#1267220).
CVE-2026-46043: RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (bsc#1266901).
CVE-2026-46113: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (bsc#1266969).
CVE-2026-46114: RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (bsc#1266972).
CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (bsc#1266238).

The following non security issues were fixed:

arm64: tlb: Allow XZR argument to TLBI ops (git-fixes).
arm64: tlb: Optimize ARM64_WORKAROUND_REPEAT_TLBI (git-fixes).
drm/hyperv: validate resolution_count and fix WIN8 fallback (git-fixes).
drm/hyperv: validate VMBus packet size in receive callback (git-fixes).
net: gro: don't merge zcopy skbs (git-fixes).
net: mana: Add NULL guards in teardown path to prevent panic on attach failure (git-fixes).
net: mana: Expose hardware diagnostic info via debugfs (bsc#1266414).
net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (bsc#1265928).
net: mana: hardening: Reject zero max_num_queues from GDMA_QUERY_MAX_RESOURCES (git-fixes).
net: mana: Skip redundant detach on already-detached port (git-fixes).
net: mana: Use kvmalloc for large RX queue and buffer allocations (bsc#1266765).
net: mana: Use per-queue allocation for tx_qp to reduce allocation size (bsc#1266765).
net: mana: validate rx_req_idx to prevent out-of-bounds array access (bsc#1266402).
RDMA/mana_ib: Report max_msg_sz in mana_ib_query_port (git-fixes).
s390/barrier: Make array_index_mask_nospec() __always_inline (bsc#1263068).
s390/entry: Scrub r12 register on kernel entry (bsc#1263068).
s390/syscalls: Add spectre boundary for syscall dispatch table (bsc#1263068).
smb: client: correctly handle ErrorContextData as a flexible array (git-fixes).

Record: SUSE-SU-2026:2310-1
Updated: 2026-11-02

OSVSUSE-SU-2026:2482-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38549: efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths (bsc#1248235).
CVE-2025-68324: scsi: imm: Fix use-after-free bug caused by unfinished delayed work (bsc#1255416).
CVE-2026-3150: bcache: fix cached_dev.sb_bio use-after-free and crash (bsc#1263169).
CVE-2026-23303: smb: client: Don't log plaintext credentials in cifs_set_cifscreds (bsc#1260502).
CVE-2026-23327: cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed() (bsc#1260548).
CVE-2026-23359: bpf: Fix stack-out-of-bounds write in devmap (bsc#1260584).
CVE-2026-23438: net: mvpp2: guard flow control update with global_tx_fc in buffer switching (bsc#1261619).
CVE-2026-23444: wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure (bsc#1266307).
CVE-2026-31396: net: macb: fix use-after-free access to PTP clock (bsc#1261791).
CVE-2026-31446: ext4: fix use-after-free in update_super_work when racing with umount (bsc#1262619).
CVE-2026-31448: ext4: avoid infinite loops caused by residual data (bsc#1262622).
CVE-2026-31454: xfs: save ailp before dropping the AIL lock in push callbacks (bsc#1262624).
CVE-2026-31455: xfs: stop reclaim before pushing AIL during unmount (bsc#1262615).
CVE-2026-31464: scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() (bsc#1262656).
CVE-2026-31473: media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex (bsc#1262663).
CVE-2026-31480: tracing: Fix potential deadlock in cpu hotplug with osnoise (bsc#1262634).
CVE-2026-31493: RDMA/efa: Fix use of completion ctx after free (bsc#1262668).
CVE-2026-31516: xfrm: prevent policy_hthresh.work from racing with netns teardown (bsc#1262755).
CVE-2026-31518: esp: fix skb leak with espintcp and async crypto (bsc#1262606).
CVE-2026-31546: net: bonding: fix NULL deref in bond_debug_rlb_hash_show (bsc#1263006).
CVE-2026-31590: KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION (bsc#1263152).
CVE-2026-31591: KVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch finish (bsc#1263122).
CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
CVE-2026-31613: smb: client: fix OOB reads parsing symlink error response (bsc#1263769).
CVE-2026-31614: smb: client: fix off-by-8 bounds check in check_wsl_eas() (bsc#1263774).
CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263790).
CVE-2026-31655: pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled (bsc#1263724).
CVE-2026-31671: xfrm_user: fix info leak in build_report() (bsc#1263115).
CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
CVE-2026-31678: openvswitch: defer tunnel netdev_put to RCU release (bsc#1263562).
CVE-2026-31703: writeback: Fix use after free in inode_switch_wbs_work_fn() (bsc#1263883).
CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264093).
CVE-2026-31767: drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode (bsc#1264124).
CVE-2026-31774: io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() (bsc#1264040).
CVE-2026-43013: net/mlx5: lag: Check for LAG device before creating debugfs (bsc#1264011).
CVE-2026-43026: netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (bsc#1263932).
CVE-2026-43030: bpf: Fix regsafe() for pointers to packet (bsc#1264000).
CVE-2026-43040: net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info- leak (bsc#1264091).
CVE-2026-43052: wifi: mac80211: check tdls flag in ieee80211_tdls_oper (bsc#1263945).
CVE-2026-43054: scsi: target: tcm_loop: Drain commands in target_reset handler (bsc#1264063).
CVE-2026-43059: Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete…

Record: SUSE-SU-2026:2482-1
Updated: 2026-11-02

OSVSUSE-SU-2026:2591-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38549: efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths (bsc#1248235).
CVE-2025-68324: scsi: imm: Fix use-after-free bug caused by unfinished delayed work (bsc#1255416).
CVE-2026-3150: bcache: fix cached_dev.sb_bio use-after-free and crash (bsc#1263169).
CVE-2026-23303: smb: client: Don't log plaintext credentials in cifs_set_cifscreds (bsc#1260502).
CVE-2026-23327: cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed() (bsc#1260548).
CVE-2026-23359: bpf: Fix stack-out-of-bounds write in devmap (bsc#1260584).
CVE-2026-23438: net: mvpp2: guard flow control update with global_tx_fc in buffer switching (bsc#1261619).
CVE-2026-23444: wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure (bsc#1266307).
CVE-2026-31396: net: macb: fix use-after-free access to PTP clock (bsc#1261791).
CVE-2026-31446: ext4: fix use-after-free in update_super_work when racing with umount (bsc#1262619).
CVE-2026-31448: ext4: avoid infinite loops caused by residual data (bsc#1262622).
CVE-2026-31454: xfs: save ailp before dropping the AIL lock in push callbacks (bsc#1262624).
CVE-2026-31455: xfs: stop reclaim before pushing AIL during unmount (bsc#1262615).
CVE-2026-31464: scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() (bsc#1262656).
CVE-2026-31473: media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex (bsc#1262663).
CVE-2026-31480: tracing: Fix potential deadlock in cpu hotplug with osnoise (bsc#1262634).
CVE-2026-31493: RDMA/efa: Fix use of completion ctx after free (bsc#1262668).
CVE-2026-31516: xfrm: prevent policy_hthresh.work from racing with netns teardown (bsc#1262755).
CVE-2026-31518: esp: fix skb leak with espintcp and async crypto (bsc#1262606).
CVE-2026-31546: net: bonding: fix NULL deref in bond_debug_rlb_hash_show (bsc#1263006).
CVE-2026-31590: KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION (bsc#1263152).
CVE-2026-31591: KVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch finish (bsc#1263122).
CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
CVE-2026-31613: smb: client: fix OOB reads parsing symlink error response (bsc#1263769).
CVE-2026-31614: smb: client: fix off-by-8 bounds check in check_wsl_eas() (bsc#1263774).
CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263790).
CVE-2026-31655: pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled (bsc#1263724).
CVE-2026-31671: xfrm_user: fix info leak in build_report() (bsc#1263115).
CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
CVE-2026-31678: openvswitch: defer tunnel netdev_put to RCU release (bsc#1263562).
CVE-2026-31703: writeback: Fix use after free in inode_switch_wbs_work_fn() (bsc#1263883).
CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264093).
CVE-2026-31767: drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode (bsc#1264124).
CVE-2026-31774: io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() (bsc#1264040).
CVE-2026-43013: net/mlx5: lag: Check for LAG device before creating debugfs (bsc#1264011).
CVE-2026-43026: netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (bsc#1263932).
CVE-2026-43030: bpf: Fix regsafe() for pointers to packet (bsc#1264000).
CVE-2026-43040: net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info- leak (bsc#1264091).
CVE-2026-43052: wifi: mac80211: check tdls flag in ieee80211_tdls_oper (bsc#1263945).
CVE-2026-43054: scsi: target: tcm_loop: Drain commands in target_reset handler (bsc#1264063).
CVE-2026-43059: Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete…

Record: SUSE-SU-2026:2591-1
Updated: 2026-11-02

OSVUSN-8492-1 No score

linux, linux-aws, linux-aws-fips, linux-gcp, linux-gcp-fips, linux-ibm, linux-nvidia, linux-nvidia-6.8, linux-oracle, linux-realtime, linux-realtime-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
ATM drivers;
RNBD block device driver;
Ublk userspace block driver;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
CPU idle management framework;
Hardware crypto device drivers;
DMA engine subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Broadcom VK accelerator driver;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
RapidIO drivers;
RAS (Reliability, Availability, Serviceability) subsystem;
Remote Processor subsystem;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
MediaTek SoC drivers;
Texas Instruments SoC drivers;
SPI subsystem;
Greybus lights staging drivers;
Realtek RTL8723BS SDIO drivers;
UFS subsystem;
ChipIdea USB driver;
DesignWare USB3 driver;
USB over IP driver;
vDPA drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
BTRFS file system;
File systems infrastructure;
Ceph distributed file system;
Ext4 file system;
F2FS file system;
FAT file system;
GFS2 file system;
HFS+ file system;
JFS file system;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
OCFS2 file system;
Proc file system;
Pstore file system;
Diskquota system;
SMB network file system;
XFS file system;
Audit subsystem;
Memory Management;
IPv6 networking;
Netfilter;
Tracing infrastructure;
Kernel kexec() syscall;
RCU subsystem;
Scheduler infrastructure;
Scatterlist API;
9P file system network protocol;
Asynchronous Transfer Mode (ATM) subsystem;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Ceph Core library;
Networking core;
IPv4 networking;
KCM (Kernel Connection Multiplexor) sockets driver;
Multipath TCP;
NFC subsystem;
RDS protocol;
RxRPC session sockets;
Network traffic control;
SMC sockets;
Sun RPC protocol;
X.25 network layer;
XFRM subsystem;
AppArmor security module;
Simplified Mandatory Access Control Kernel framework;
SOF drivers;
USB sound devices; (CVE-2025-40005, CVE-2025-71229, CVE-2025-71231, CVE-2025-71232, CVE-2025-71233, CVE-2025-71235, CVE-2025-71236, CVE-2025-71237, CVE-2025-71238, CVE-2025-71239, CVE-2025-71265, CVE-2025-71266, CVE-2025-71267, CVE-2025-71272, CVE-2025-71273, CVE-2025-71274, CVE-2025-71286, CVE-2025-71291, CVE-2025-71292, CVE-2025-71294, CVE-2025-71295, CVE-2025-71297, CVE-2025-71304, CVE-2025-71305, CVE-2026-23100, CVE-2026-23169, CVE-2026-23220, CVE-2026-23221, CVE-2026-23222, CVE-2026-23228, CVE-2026-23229, CVE-2026-23230, CVE-2026-23233, CVE-2026-23234, CVE-2026-23235, CVE-2026-23236, CVE-2026-23237, CVE-2026-23238, CVE-2026-23241, CVE-2026-23242, CVE-2026-23243, CVE-2026-23249, CVE-2026-23266, CVE-2026-23267, CVE-2026-23272, CVE-2026-23278, CVE-2026-23392, CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402, CVE-2026-31411, CVE-2026-31418, CVE-2026-31436, CVE-2026-31448, CVE-2026-31478, CVE-2026-31607,…

Record: USN-8492-1
Updated: 2026-11-06

OSVUSN-8492-2 No score

linux-aws-6.8, linux-gcp-6.8, linux-gke, linux-gkeop, linux-ibm-6.8, linux-nvidia-lowlatency, linux-oracle-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
ATM drivers;
RNBD block device driver;
Ublk userspace block driver;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
CPU idle management framework;
Hardware crypto device drivers;
DMA engine subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Broadcom VK accelerator driver;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
RapidIO drivers;
RAS (Reliability, Availability, Serviceability) subsystem;
Remote Processor subsystem;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
MediaTek SoC drivers;
Texas Instruments SoC drivers;
SPI subsystem;
Greybus lights staging drivers;
Realtek RTL8723BS SDIO drivers;
UFS subsystem;
ChipIdea USB driver;
DesignWare USB3 driver;
USB over IP driver;
vDPA drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
BTRFS file system;
File systems infrastructure;
Ceph distributed file system;
Ext4 file system;
F2FS file system;
FAT file system;
GFS2 file system;
HFS+ file system;
JFS file system;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
OCFS2 file system;
Proc file system;
Pstore file system;
Diskquota system;
SMB network file system;
XFS file system;
Audit subsystem;
Memory Management;
IPv6 networking;
Netfilter;
Tracing infrastructure;
Kernel kexec() syscall;
RCU subsystem;
Scheduler infrastructure;
Scatterlist API;
9P file system network protocol;
Asynchronous Transfer Mode (ATM) subsystem;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Ceph Core library;
Networking core;
IPv4 networking;
KCM (Kernel Connection Multiplexor) sockets driver;
Multipath TCP;
NFC subsystem;
RDS protocol;
RxRPC session sockets;
Network traffic control;
SMC sockets;
Sun RPC protocol;
X.25 network layer;
XFRM subsystem;
AppArmor security module;
Simplified Mandatory Access Control Kernel framework;
SOF drivers;
USB sound devices; (CVE-2025-40005, CVE-2025-71229, CVE-2025-71231, CVE-2025-71232, CVE-2025-71233, CVE-2025-71235, CVE-2025-71236, CVE-2025-71237, CVE-2025-71238, CVE-2025-71239, CVE-2025-71265, CVE-2025-71266, CVE-2025-71267, CVE-2025-71272, CVE-2025-71273, CVE-2025-71274, CVE-2025-71286, CVE-2025-71291, CVE-2025-71292, CVE-2025-71294, CVE-2025-71295, CVE-2025-71297, CVE-2025-71304, CVE-2025-71305, CVE-2026-23100, CVE-2026-23169, CVE-2026-23220, CVE-2026-23221, CVE-2026-23222, CVE-2026-23228, CVE-2026-23229, CVE-2026-23230, CVE-2026-23233, CVE-2026-23234, CVE-2026-23235, CVE-2026-23236, CVE-2026-23237, CVE-2026-23238, CVE-2026-23241, CVE-2026-23242, CVE-2026-23243, CVE-2026-23249, CVE-2026-23266, CVE-2026-23267, CVE-2026-23272, CVE-2026-23278, CVE-2026-23392, CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402, CVE-2026-31411, CVE-2026-31418, CVE-2026-31436, CVE-2026-31448, CVE-2026-31478, CVE-2026-31607,…

Record: USN-8492-2
Updated: 2026-11-06

OSVUSN-8492-3 No score

linux-raspi-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
ATM drivers;
RNBD block device driver;
Ublk userspace block driver;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
CPU idle management framework;
Hardware crypto device drivers;
DMA engine subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Broadcom VK accelerator driver;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
RapidIO drivers;
RAS (Reliability, Availability, Serviceability) subsystem;
Remote Processor subsystem;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
MediaTek SoC drivers;
Texas Instruments SoC drivers;
SPI subsystem;
Greybus lights staging drivers;
Realtek RTL8723BS SDIO drivers;
UFS subsystem;
ChipIdea USB driver;
DesignWare USB3 driver;
USB over IP driver;
vDPA drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
BTRFS file system;
File systems infrastructure;
Ceph distributed file system;
Ext4 file system;
F2FS file system;
FAT file system;
GFS2 file system;
HFS+ file system;
JFS file system;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
OCFS2 file system;
Proc file system;
Pstore file system;
Diskquota system;
SMB network file system;
XFS file system;
Audit subsystem;
Memory Management;
IPv6 networking;
Netfilter;
Tracing infrastructure;
Kernel kexec() syscall;
RCU subsystem;
Scheduler infrastructure;
Scatterlist API;
9P file system network protocol;
Asynchronous Transfer Mode (ATM) subsystem;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Ceph Core library;
Networking core;
IPv4 networking;
KCM (Kernel Connection Multiplexor) sockets driver;
Multipath TCP;
NFC subsystem;
RDS protocol;
RxRPC session sockets;
Network traffic control;
SMC sockets;
Sun RPC protocol;
X.25 network layer;
XFRM subsystem;
AppArmor security module;
Simplified Mandatory Access Control Kernel framework;
SOF drivers;
USB sound devices; (CVE-2025-40005, CVE-2025-71229, CVE-2025-71231, CVE-2025-71232, CVE-2025-71233, CVE-2025-71235, CVE-2025-71236, CVE-2025-71237, CVE-2025-71238, CVE-2025-71239, CVE-2025-71265, CVE-2025-71266, CVE-2025-71267, CVE-2025-71272, CVE-2025-71273, CVE-2025-71274, CVE-2025-71286, CVE-2025-71291, CVE-2025-71292, CVE-2025-71294, CVE-2025-71295, CVE-2025-71297, CVE-2025-71304, CVE-2025-71305, CVE-2026-23100, CVE-2026-23169, CVE-2026-23220, CVE-2026-23221, CVE-2026-23222, CVE-2026-23228, CVE-2026-23229, CVE-2026-23230, CVE-2026-23233, CVE-2026-23234, CVE-2026-23235, CVE-2026-23236, CVE-2026-23237, CVE-2026-23238, CVE-2026-23241, CVE-2026-23242, CVE-2026-23243, CVE-2026-23249, CVE-2026-23266, CVE-2026-23267, CVE-2026-23272, CVE-2026-23278, CVE-2026-23392, CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402, CVE-2026-31411, CVE-2026-31418, CVE-2026-31436, CVE-2026-31448, CVE-2026-31478, CVE-2026-31607,…

Record: USN-8492-3
Updated: 2026-11-06

OSVUSN-8492-4 No score

linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
ATM drivers;
RNBD block device driver;
Ublk userspace block driver;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
CPU idle management framework;
Hardware crypto device drivers;
DMA engine subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Broadcom VK accelerator driver;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
RapidIO drivers;
RAS (Reliability, Availability, Serviceability) subsystem;
Remote Processor subsystem;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
MediaTek SoC drivers;
Texas Instruments SoC drivers;
SPI subsystem;
Greybus lights staging drivers;
Realtek RTL8723BS SDIO drivers;
UFS subsystem;
ChipIdea USB driver;
DesignWare USB3 driver;
USB over IP driver;
vDPA drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
BTRFS file system;
File systems infrastructure;
Ceph distributed file system;
Ext4 file system;
F2FS file system;
FAT file system;
GFS2 file system;
HFS+ file system;
JFS file system;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
OCFS2 file system;
Proc file system;
Pstore file system;
Diskquota system;
SMB network file system;
XFS file system;
Audit subsystem;
Memory Management;
IPv6 networking;
Netfilter;
Tracing infrastructure;
Kernel kexec() syscall;
RCU subsystem;
Scheduler infrastructure;
Scatterlist API;
9P file system network protocol;
Asynchronous Transfer Mode (ATM) subsystem;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Ceph Core library;
Networking core;
IPv4 networking;
KCM (Kernel Connection Multiplexor) sockets driver;
Multipath TCP;
NFC subsystem;
RDS protocol;
RxRPC session sockets;
Network traffic control;
SMC sockets;
Sun RPC protocol;
X.25 network layer;
XFRM subsystem;
AppArmor security module;
Simplified Mandatory Access Control Kernel framework;
SOF drivers;
USB sound devices; (CVE-2025-40005, CVE-2025-71229, CVE-2025-71231, CVE-2025-71232, CVE-2025-71233, CVE-2025-71235, CVE-2025-71236, CVE-2025-71237, CVE-2025-71238, CVE-2025-71239, CVE-2025-71265, CVE-2025-71266, CVE-2025-71267, CVE-2025-71272, CVE-2025-71273, CVE-2025-71274, CVE-2025-71286, CVE-2025-71291, CVE-2025-71292, CVE-2025-71294, CVE-2025-71295, CVE-2025-71297, CVE-2025-71304, CVE-2025-71305, CVE-2026-23100, CVE-2026-23169, CVE-2026-23220, CVE-2026-23221, CVE-2026-23222, CVE-2026-23228, CVE-2026-23229, CVE-2026-23230, CVE-2026-23233, CVE-2026-23234, CVE-2026-23235, CVE-2026-23236, CVE-2026-23237, CVE-2026-23238, CVE-2026-23241, CVE-2026-23242, CVE-2026-23243, CVE-2026-23249, CVE-2026-23266, CVE-2026-23267, CVE-2026-23272, CVE-2026-23278, CVE-2026-23392, CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402, CVE-2026-31411, CVE-2026-31418, CVE-2026-31436, CVE-2026-31448, CVE-2026-31478, CVE-2026-31607,…

Record: USN-8492-4
Updated: 2026-11-06

OSVUSN-8492-5 No score

linux-azure-fips, linux-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
ATM drivers;
RNBD block device driver;
Ublk userspace block driver;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
CPU idle management framework;
Hardware crypto device drivers;
DMA engine subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Broadcom VK accelerator driver;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
RapidIO drivers;
RAS (Reliability, Availability, Serviceability) subsystem;
Remote Processor subsystem;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
MediaTek SoC drivers;
Texas Instruments SoC drivers;
SPI subsystem;
Greybus lights staging drivers;
Realtek RTL8723BS SDIO drivers;
UFS subsystem;
ChipIdea USB driver;
DesignWare USB3 driver;
USB over IP driver;
vDPA drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
BTRFS file system;
File systems infrastructure;
Ceph distributed file system;
Ext4 file system;
F2FS file system;
FAT file system;
GFS2 file system;
HFS+ file system;
JFS file system;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
OCFS2 file system;
Proc file system;
Pstore file system;
Diskquota system;
SMB network file system;
XFS file system;
Audit subsystem;
Memory Management;
IPv6 networking;
Netfilter;
Tracing infrastructure;
Kernel kexec() syscall;
RCU subsystem;
Scheduler infrastructure;
Scatterlist API;
9P file system network protocol;
Asynchronous Transfer Mode (ATM) subsystem;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Ceph Core library;
Networking core;
IPv4 networking;
KCM (Kernel Connection Multiplexor) sockets driver;
Multipath TCP;
NFC subsystem;
RDS protocol;
RxRPC session sockets;
Network traffic control;
SMC sockets;
Sun RPC protocol;
X.25 network layer;
XFRM subsystem;
AppArmor security module;
Simplified Mandatory Access Control Kernel framework;
SOF drivers;
USB sound devices; (CVE-2025-40005, CVE-2025-71229, CVE-2025-71231, CVE-2025-71232, CVE-2025-71233, CVE-2025-71235, CVE-2025-71236, CVE-2025-71237, CVE-2025-71238, CVE-2025-71239, CVE-2025-71265, CVE-2025-71266, CVE-2025-71267, CVE-2025-71272, CVE-2025-71273, CVE-2025-71274, CVE-2025-71286, CVE-2025-71291, CVE-2025-71292, CVE-2025-71294, CVE-2025-71295, CVE-2025-71297, CVE-2025-71304, CVE-2025-71305, CVE-2026-23100, CVE-2026-23169, CVE-2026-23220, CVE-2026-23221, CVE-2026-23222, CVE-2026-23228, CVE-2026-23229, CVE-2026-23230, CVE-2026-23233, CVE-2026-23234, CVE-2026-23235, CVE-2026-23236, CVE-2026-23237, CVE-2026-23238, CVE-2026-23241, CVE-2026-23242, CVE-2026-23243, CVE-2026-23249, CVE-2026-23266, CVE-2026-23267, CVE-2026-23272, CVE-2026-23278, CVE-2026-23392, CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402, CVE-2026-31411, CVE-2026-31418, CVE-2026-31436, CVE-2026-31448, CVE-2026-31478, CVE-2026-31607,…

Record: USN-8492-5
Updated: 2026-11-06

OSVUSN-8497-1 No score

linux-lowlatency, linux-lowlatency-hwe-6.8 vulnerabilities

It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43284, CVE-2026-43500, CVE-2026-45998, CVE-2026-46000)

It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43503, CVE-2026-46300)

Qualys discovered that a race condition existed in the ptrace subsystem of the Linux kernel when privileged processes are exiting. An unprivileged local attacker could use this issue to expose sensitive information. (CVE-2026-46333)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contain a memory leak when handling AppArmor notifications. A local attacker could use this to cause resource exhaustion. (CVE-2026-47326)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contain a NULL pointer dereference when handling AppArmor notifications. A local attacker could use this to cause a kernel oops. (CVE-2026-47327)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained an invalid free when handling AppArmor notifications. A local attacker could use this to corrupt kernel memory. (CVE-2026-47328)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained insufficient validation of AppArmor notification responses. A local attacker could use this to allow crafted responses to be processed. (CVE-2026-47329)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 used an uninitialized variable when handling AppArmor notifications. A local attacker could use this to cause incorrect caching of data. (CVE-2026-47330)

Tristan Madani discovered that Ubuntu Linux kernel 6.8 contained a use- after-free (UAF) bug. A local attacker could use this to cause memory corruption and, theoretically, arbitrary code execution. (CVE-2026-47331)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained an out-of-bounds (OOB) read when handling AppArmor notifications. A local attacker could use this to cause information disclosure of kernel memory. (CVE-2026-47332)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained a out-of-bounds (OOB) read when handling AppArmor notifications. A local attacker could use this to cause kernel memory corruption and, theoretically, influence processing of AppArmor policies. (CVE-2026-47333)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained incorrect holding of locks when handling AppArmor notifications. A local attacker could use this to cause a kernel panic or deadlock. (CVE-2026-47334)

Tristan Madani discovered that Ubuntu Linux kernel 6.8 contained a NULL pointer dereference when handling AppArmor notifications. A local attacker could use this to cause a kernel panic. (CVE-2026-47335)

Tristan Madani discovered that Ubuntu Linux kernel 6.8 used an uninitialized variable when handling AppArmor AF_INET/AF_INET6 socket mediation. A local attacker could use this to influence processing of fine- grained network socket mediation. (CVE-2026-47336)

Tristan Madani and Trevor Lawrence have each independently discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained a NULL pointer dereference when handling AppArmor network socket mediation. A local attacker could use this to cause a kernel oops. (CVE-2026-47337)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture; …

Record: USN-8497-1
Updated: 2026-11-07

OSVUSN-8498-1 No score

linux-nvidia-tegra vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
ATM drivers;
RNBD block device driver;
Ublk userspace block driver;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
CPU idle management framework;
Hardware crypto device drivers;
DMA engine subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Broadcom VK accelerator driver;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
RapidIO drivers;
RAS (Reliability, Availability, Serviceability) subsystem;
Remote Processor subsystem;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
MediaTek SoC drivers;
Texas Instruments SoC drivers;
SPI subsystem;
Greybus lights staging drivers;
Realtek RTL8723BS SDIO drivers;
UFS subsystem;
ChipIdea USB driver;
DesignWare USB3 driver;
USB over IP driver;
vDPA drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
BTRFS file system;
File systems infrastructure;
Ceph distributed file system;
Ext4 file system;
F2FS file system;
FAT file system;
GFS2 file system;
HFS+ file system;
JFS file system;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
OCFS2 file system;
Proc file system;
Pstore file system;
Diskquota system;
SMB network file system;
XFS file system;
Audit subsystem;
Memory Management;
IPv6 networking;
Netfilter;
Tracing infrastructure;
Kernel kexec() syscall;
RCU subsystem;
Scheduler infrastructure;
Scatterlist API;
9P file system network protocol;
Asynchronous Transfer Mode (ATM) subsystem;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Ceph Core library;
Networking core;
IPv4 networking;
KCM (Kernel Connection Multiplexor) sockets driver;
Multipath TCP;
NFC subsystem;
RDS protocol;
RxRPC session sockets;
Network traffic control;
SMC sockets;
Sun RPC protocol;
X.25 network layer;
XFRM subsystem;
AppArmor security module;
Simplified Mandatory Access Control Kernel framework;
SOF drivers;
USB sound devices; (CVE-2025-40005, CVE-2025-71229, CVE-2025-71231, CVE-2025-71232, CVE-2025-71235, CVE-2025-71236, CVE-2025-71237, CVE-2025-71238, CVE-2025-71239, CVE-2025-71265, CVE-2025-71266, CVE-2025-71267, CVE-2025-71272, CVE-2025-71273, CVE-2025-71274, CVE-2025-71286, CVE-2025-71291, CVE-2025-71292, CVE-2025-71294, CVE-2025-71295, CVE-2025-71297, CVE-2025-71304, CVE-2025-71305, CVE-2026-23100, CVE-2026-23169, CVE-2026-23220, CVE-2026-23221, CVE-2026-23222, CVE-2026-23228, CVE-2026-23229, CVE-2026-23230, CVE-2026-23233, CVE-2026-23234, CVE-2026-23235, CVE-2026-23236, CVE-2026-23237, CVE-2026-23238, CVE-2026-23241, CVE-2026-23242, CVE-2026-23243, CVE-2026-23249, CVE-2026-23266, CVE-2026-23267, CVE-2026-23272, CVE-2026-23278, CVE-2026-23392, CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402, CVE-2026-31411, CVE-2026-31418, CVE-2026-31436, CVE-2026-31448, CVE-2026-31478, CVE-2026-31607, CVE-2026-31637,…

Record: USN-8498-1
Updated: 2026-11-06

OSVUSN-8499-1 No score

linux-xilinx vulnerabilities

It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-31431)

Record: USN-8499-1
Updated: 2026-11-07

OSVUSN-8606-1 No score

linux-azure, linux-azure-6.8 vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
Power management core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
RNBD block device driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
Data acquisition framework and drivers;
Counter interface drivers;
CPU frequency scaling framework;
CPU idle management framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
DMA engine subsystem;
EDAC drivers;
EFI core;
GPIO subsystem;
GPU drivers;
Greybus drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
IIO subsystem;
IIO ADC drivers;
InfiniBand drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
MediaTek SMI driver;
NVIDIA Tegra memory controller driver;
Multifunction device drivers;
Broadcom VK accelerator driver;
Fastrpc Driver;
IBM Advanced System Management driver;
MMC subsystem;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Ethernet team driver;
MediaTek network drivers;
Near Field Communication (NFC) drivers;
NTB driver;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
Device tree and open firmware driver;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
Broadcom BCM2835 power domain driver;
Generic PM domains;
i.MX PM domains;
Power supply drivers;
RapidIO drivers;
RAS (Reliability, Availability, Serviceability) subsystem;
Remote Processor subsystem;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
SLIMbus drivers;
Freescale SoC drivers;
MediaTek SoC drivers;
Microchip PolarFire SoC system controller driver;
Texas Instruments SoC drivers;
SPI subsystem;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
SM750 framebuffer staging driver;
TCM subsystem;
Thermal drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
ULPI bus;
USB core drivers;
DesignWare…

Record: USN-8606-1
Updated: 2026-11-07

OSVUSN-8607-1 No score

linux-azure-fde vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
Power management core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
RNBD block device driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
Data acquisition framework and drivers;
Counter interface drivers;
CPU frequency scaling framework;
CPU idle management framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
DMA engine subsystem;
EDAC drivers;
EFI core;
GPIO subsystem;
GPU drivers;
Greybus drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
IIO subsystem;
IIO ADC drivers;
InfiniBand drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
MediaTek SMI driver;
NVIDIA Tegra memory controller driver;
Multifunction device drivers;
Broadcom VK accelerator driver;
Fastrpc Driver;
IBM Advanced System Management driver;
MMC subsystem;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Ethernet team driver;
MediaTek network drivers;
Near Field Communication (NFC) drivers;
NTB driver;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
Device tree and open firmware driver;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
Broadcom BCM2835 power domain driver;
Generic PM domains;
i.MX PM domains;
Power supply drivers;
RapidIO drivers;
RAS (Reliability, Availability, Serviceability) subsystem;
Remote Processor subsystem;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
SLIMbus drivers;
Freescale SoC drivers;
MediaTek SoC drivers;
Microchip PolarFire SoC system controller driver;
Texas Instruments SoC drivers;
SPI subsystem;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
SM750 framebuffer staging driver;
TCM subsystem;
Thermal drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
ULPI bus;
USB core drivers;
DesignWare…

Record: USN-8607-1
Updated: 2026-11-07

OSVUSN-8609-1 No score

linux-azure-fde-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
Power management core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
RNBD block device driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
Data acquisition framework and drivers;
Counter interface drivers;
CPU frequency scaling framework;
CPU idle management framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
DMA engine subsystem;
EDAC drivers;
EFI core;
GPIO subsystem;
GPU drivers;
Greybus drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
IIO subsystem;
IIO ADC drivers;
InfiniBand drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
MediaTek SMI driver;
NVIDIA Tegra memory controller driver;
Multifunction device drivers;
Broadcom VK accelerator driver;
Fastrpc Driver;
IBM Advanced System Management driver;
MMC subsystem;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Ethernet team driver;
MediaTek network drivers;
Near Field Communication (NFC) drivers;
NTB driver;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
Device tree and open firmware driver;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
Broadcom BCM2835 power domain driver;
Generic PM domains;
i.MX PM domains;
Power supply drivers;
RapidIO drivers;
RAS (Reliability, Availability, Serviceability) subsystem;
Remote Processor subsystem;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
SLIMbus drivers;
Freescale SoC drivers;
MediaTek SoC drivers;
Microchip PolarFire SoC system controller driver;
Texas Instruments SoC drivers;
SPI subsystem;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
SM750 framebuffer staging driver;
TCM subsystem;
Thermal drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
ULPI bus;
USB core drivers;
DesignWare…

Record: USN-8609-1
Updated: 2026-11-07

OSVUSN-8619-1 No score

linux-hwe-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
Power management core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
RNBD block device driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
Data acquisition framework and drivers;
Counter interface drivers;
CPU frequency scaling framework;
CPU idle management framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
DMA engine subsystem;
EDAC drivers;
EFI core;
GPIO subsystem;
GPU drivers;
Greybus drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
IIO subsystem;
IIO ADC drivers;
InfiniBand drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
MediaTek SMI driver;
NVIDIA Tegra memory controller driver;
Multifunction device drivers;
Broadcom VK accelerator driver;
Fastrpc Driver;
IBM Advanced System Management driver;
MMC subsystem;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Ethernet team driver;
MediaTek network drivers;
Near Field Communication (NFC) drivers;
NTB driver;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
Device tree and open firmware driver;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
Broadcom BCM2835 power domain driver;
Generic PM domains;
i.MX PM domains;
Power supply drivers;
RapidIO drivers;
RAS (Reliability, Availability, Serviceability) subsystem;
Remote Processor subsystem;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
SLIMbus drivers;
Freescale SoC drivers;
MediaTek SoC drivers;
Microchip PolarFire SoC system controller driver;
Texas Instruments SoC drivers;
SPI subsystem;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
SM750 framebuffer staging driver;
TCM subsystem;
Thermal drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
ULPI bus;
USB core drivers;
DesignWare…

Record: USN-8619-1
Updated: 2026-11-07

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`kernel` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-64k` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-64k-core` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-64k-debug` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-64k-debug-core` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-64k-debug-devel` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-64k-debug-devel-matched` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-64k-debug-modules` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-64k-debug-modules-core` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-64k-debug-modules-extra` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-64k-devel` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-64k-devel-matched` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-64k-modules` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-64k-modules-core` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-64k-modules-extra` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-abi-stablelists` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-core` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-cross-headers` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-debug` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-debug-core` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-debug-devel` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-debug-devel-matched` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-debug-modules` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-debug-modules-core` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-debug-modules-extra` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-debug-uki-virt` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-devel` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-devel-matched` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-doc` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-headers` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-modules` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-modules-core` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-modules-extra` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-rt` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-rt-64k` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-rt-64k-core` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-rt-64k-debug` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-rt-64k-debug-core` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-rt-64k-debug-devel` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-rt-64k-debug-modules` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-rt-64k-debug-modules-core` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-rt-64k-debug-modules-extra` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-rt-64k-devel` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-rt-64k-modules` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-rt-64k-modules-core` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-rt-64k-modules-extra` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-rt-core` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-rt-debug` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-rt-debug-core` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-rt-debug-devel` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-rt-debug-modules` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-rt-debug-modules-core` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-rt-debug-modules-extra` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-rt-devel` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-rt-modules` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`kernel-rt-modules-core` AlmaLinux:9 From an advisory covering 31 CVEs	before 5.14.0-687.49.1.el9_8	5.14.0-687.49.1.el9_8
`linux-lts` Alpaquita:25	6.12.74-r0 up to 6.12.80-r0	6.12.80-r0
`linux-lts` Alpaquita:stream	6.12.92-r1 up to 6.18.35-r1	6.18.35-r1
`kernel` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-64k` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-64k-core` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-64k-debug` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-64k-debug-core` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-64k-debug-devel` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-64k-debug-devel-matched` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-64k-debug-modules` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-64k-debug-modules-core` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-64k-debug-modules-extra` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-64k-debug-modules-internal` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-64k-debug-modules-partner` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-64k-devel` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-64k-devel-matched` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-64k-modules` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-64k-modules-core` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-64k-modules-extra` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-64k-modules-internal` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-64k-modules-partner` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-abi-stablelists` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-core` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-cross-headers` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-debug` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-debug-core` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-debug-devel` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-debug-devel-matched` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-debug-modules` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-debug-modules-core` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-debug-modules-extra` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-debug-modules-internal` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-debug-modules-partner` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-debug-uki-virt` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-debug-uki-virt-addons` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-devel` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-devel-matched` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-doc` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-headers` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-ipaclones-internal` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-modules` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-modules-core` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-modules-extra` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-modules-internal` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-modules-partner` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-rt` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-rt-64k` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-rt-64k-core` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-rt-64k-debug` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-rt-64k-debug-core` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-rt-64k-debug-devel` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-rt-64k-debug-devel-matched` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-rt-64k-debug-kvm` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-rt-64k-debug-modules` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-rt-64k-debug-modules-core` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-rt-64k-debug-modules-extra` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-rt-64k-debug-modules-internal` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`kernel-rt-64k-debug-modules-partner` TuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els13	5.14.0-570.62.1.el9_6.tuxcare.5.els13
`Kernel` Linux	6.4.0 up to 6.6.128, 6.7.0 up to 6.12.75, 6.13.0 up to 6.18.14, 6.19.0 up to 6.19.4	6.6.1286.12.756.18.146.19.4
`linux` Debian:13	before 6.12.85-1, plus listed versions 6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-1 Show 12 moreShow less 6.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-1~bpo12+1	6.12.85-1
`linux` Debian:14	before 6.18.14-1, plus listed versions 6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1 Show 45 moreShow less 6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1	6.18.14-1
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-64k-debug-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-64k-debug-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-64k-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-64k-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-debug-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-debug-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:9::appstream From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:9::appstream From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:9::appstream From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:9::appstream From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-doc` Red Hat:enterprise_linux:9::appstream From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-rt-64k-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-rt-64k-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-rt-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-tools-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-zfcpdump-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`libperf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`perf` Red Hat:enterprise_linux:9::appstream From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`perf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`python3-perf` Red Hat:enterprise_linux:9::appstream From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`python3-perf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`rtla` Red Hat:enterprise_linux:9::appstream From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`rv` Red Hat:enterprise_linux:9::appstream From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel` Red Hat:enterprise_linux:9::baseos From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-64k` Red Hat:enterprise_linux:9::baseos From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-64k-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-64k-debug` Red Hat:enterprise_linux:9::baseos From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-64k-debug-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-64k-debug-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-64k-debug-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-64k-debug-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-64k-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-64k-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-64k-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-abi-stablelists` Red Hat:enterprise_linux:9::baseos From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-debug` Red Hat:enterprise_linux:9::baseos From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-debug-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-debug-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-debug-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-debug-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-debug-uki-virt` Red Hat:enterprise_linux:9::baseos From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:9::baseos From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`kernel` Rocky Linux:9 From an advisory covering 31 CVEs	before 0:5.14.0-687.49.1.el9_8	0:5.14.0-687.49.1.el9_8
`linux` Root:Ubuntu:24.04	before 6.8.0-149.149.aikido.91	6.8.0-149.149.aikido.91
`rootio-linux` Root:Ubuntu:24.04	before 6.8.0-149.149.aikido.91	6.8.0-149.149.aikido.91
`kernel-default` SUSE:Linux Enterprise High Availability Extension 16.0 From an advisory covering 60 CVEs	before 6.12.0-160000.35.1	6.12.0-160000.35.1
`kernel-default` SUSE:Linux Micro 6.0 From an advisory covering 98 CVEs	before 6.4.0-47.1	6.4.0-47.1
`kernel-default-base` SUSE:Linux Micro 6.0 From an advisory covering 98 CVEs	before 6.4.0-47.1.21.24	6.4.0-47.1.21.24
`kernel-kvmsmall` SUSE:Linux Micro 6.0 From an advisory covering 98 CVEs	before 6.4.0-47.1	6.4.0-47.1
`kernel-source` SUSE:Linux Micro 6.0 From an advisory covering 98 CVEs	before 6.4.0-47.1	6.4.0-47.1
`kernel-64kb` SUSE:Linux Micro 6.2 From an advisory covering 60 CVEs	before 6.12.0-160000.35.1	6.12.0-160000.35.1
`kernel-default` SUSE:Linux Micro 6.2 From an advisory covering 60 CVEs	before 6.12.0-160000.35.1	6.12.0-160000.35.1
`kernel-default-base` SUSE:Linux Micro 6.2 From an advisory covering 60 CVEs	before 6.12.0-160000.35.1.160000.2.16	6.12.0-160000.35.1.160000.2.16
`kernel-rt` SUSE:Linux Micro 6.2 From an advisory covering 60 CVEs	before 6.12.0-160000.35.1	6.12.0-160000.35.1
`kernel-source` SUSE:Linux Micro 6.2 From an advisory covering 60 CVEs	before 6.12.0-160000.35.1	6.12.0-160000.35.1
`kernel-obs-build` SUSE:Linux Micro Extras 6.2 From an advisory covering 60 CVEs	before 6.12.0-160000.35.1	6.12.0-160000.35.1
`kernel-syms` SUSE:Linux Micro Extras 6.2 From an advisory covering 60 CVEs	before 6.12.0-160000.35.1	6.12.0-160000.35.1
`kernel-64kb` SUSE:Linux Enterprise Server 16.0 From an advisory covering 60 CVEs	before 6.12.0-160000.35.1	6.12.0-160000.35.1
`kernel-azure` SUSE:Linux Enterprise Server 16.0 From an advisory covering 60 CVEs	before 6.12.0-160000.35.1	6.12.0-160000.35.1
`kernel-default` SUSE:Linux Enterprise Server 16.0 From an advisory covering 60 CVEs	before 6.12.0-160000.35.1	6.12.0-160000.35.1
`kernel-default-base` SUSE:Linux Enterprise Server 16.0 From an advisory covering 60 CVEs	before 6.12.0-160000.35.1.160000.2.16	6.12.0-160000.35.1.160000.2.16
`kernel-docs` SUSE:Linux Enterprise Server 16.0 From an advisory covering 60 CVEs	before 6.12.0-160000.35.1	6.12.0-160000.35.1
`kernel-kvmsmall` SUSE:Linux Enterprise Server 16.0 From an advisory covering 60 CVEs	before 6.12.0-160000.35.1	6.12.0-160000.35.1
`kernel-obs-qa` SUSE:Linux Enterprise Server 16.0 From an advisory covering 60 CVEs	before 6.12.0-160000.35.1	6.12.0-160000.35.1
`kernel-source` SUSE:Linux Enterprise Server 16.0 From an advisory covering 60 CVEs	before 6.12.0-160000.35.1	6.12.0-160000.35.1
`kernel-syms` SUSE:Linux Enterprise Server 16.0 From an advisory covering 60 CVEs	before 6.12.0-160000.35.1	6.12.0-160000.35.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server 16.0 From an advisory covering 60 CVEs	before 6.12.0-160000.35.1	6.12.0-160000.35.1
`kernel-64kb` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 60 CVEs	before 6.12.0-160000.35.1	6.12.0-160000.35.1
`kernel-azure` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 60 CVEs	before 6.12.0-160000.35.1	6.12.0-160000.35.1
`kernel-default` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 60 CVEs	before 6.12.0-160000.35.1	6.12.0-160000.35.1
`kernel-default-base` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 60 CVEs	before 6.12.0-160000.35.1.160000.2.16	6.12.0-160000.35.1.160000.2.16
`kernel-docs` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 60 CVEs	before 6.12.0-160000.35.1	6.12.0-160000.35.1
`kernel-kvmsmall` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 60 CVEs	before 6.12.0-160000.35.1	6.12.0-160000.35.1
`kernel-obs-qa` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 60 CVEs	before 6.12.0-160000.35.1	6.12.0-160000.35.1
`kernel-source` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 60 CVEs	before 6.12.0-160000.35.1	6.12.0-160000.35.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 60 CVEs	before 6.12.0-160000.35.1	6.12.0-160000.35.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 60 CVEs	before 6.12.0-160000.35.1	6.12.0-160000.35.1
`kernel-default` SUSE:Linux Micro 6.1 From an advisory covering 98 CVEs	before 6.4.0-47.1	6.4.0-47.1
`kernel-default-base` SUSE:Linux Micro 6.1 From an advisory covering 98 CVEs	before 6.4.0-47.1.21.24	6.4.0-47.1.21.24
`kernel-kvmsmall` SUSE:Linux Micro 6.1 From an advisory covering 98 CVEs	before 6.4.0-47.1	6.4.0-47.1
`kernel-source` SUSE:Linux Micro 6.1 From an advisory covering 98 CVEs	before 6.4.0-47.1	6.4.0-47.1
`kernel-rt` SUSE:Linux Micro 6.0 From an advisory covering 169 CVEs	before 6.4.0-48.1	6.4.0-48.1
`kernel-source-rt` SUSE:Linux Micro 6.0 From an advisory covering 169 CVEs	before 6.4.0-48.1	6.4.0-48.1
`kernel-rt` SUSE:Linux Micro 6.1 From an advisory covering 169 CVEs	before 6.4.0-48.1	6.4.0-48.1
`kernel-source-rt` SUSE:Linux Micro 6.1 From an advisory covering 169 CVEs	before 6.4.0-48.1	6.4.0-48.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 22 CVEs	before 6.4.0-150600.23.115.1	6.4.0-150600.23.115.1
`kernel-livepatch-SLE15-SP6_Update_27` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 22 CVEs	before 1-150600.13.3.1	1-150600.13.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP6 From an advisory covering 22 CVEs	before 6.4.0-150600.23.115.1	6.4.0-150600.23.115.1
`kernel-64kb` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 22 CVEs	before 6.4.0-150600.23.115.1	6.4.0-150600.23.115.1
`kernel-default` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 22 CVEs	before 6.4.0-150600.23.115.1	6.4.0-150600.23.115.1
`kernel-default-base` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 22 CVEs	before 6.4.0-150600.23.115.1.150600.12.54.1	6.4.0-150600.23.115.1.150600.12.54.1
`kernel-docs` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 22 CVEs	before 6.4.0-150600.23.115.1	6.4.0-150600.23.115.1
`kernel-obs-build` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 22 CVEs	before 6.4.0-150600.23.115.1	6.4.0-150600.23.115.1
`kernel-source` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 22 CVEs	before 6.4.0-150600.23.115.1	6.4.0-150600.23.115.1
`kernel-syms` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 22 CVEs	before 6.4.0-150600.23.115.1	6.4.0-150600.23.115.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 22 CVEs	before 6.4.0-150600.23.115.1	6.4.0-150600.23.115.1
`kernel-default` SUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 22 CVEs	before 6.4.0-150600.23.115.1	6.4.0-150600.23.115.1
`kernel-default-base` SUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 22 CVEs	before 6.4.0-150600.23.115.1.150600.12.54.1	6.4.0-150600.23.115.1.150600.12.54.1
`kernel-docs` SUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 22 CVEs	before 6.4.0-150600.23.115.1	6.4.0-150600.23.115.1
`kernel-obs-build` SUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 22 CVEs	before 6.4.0-150600.23.115.1	6.4.0-150600.23.115.1
`kernel-source` SUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 22 CVEs	before 6.4.0-150600.23.115.1	6.4.0-150600.23.115.1
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-aws-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-aws-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less 5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1	None known
`linux-aws-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1	None known
`linux-azure-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less 5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2	None known
`linux-azure-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less 5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1	None known
`linux-azure-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1	None known
`linux-azure-fde` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less 5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1	None known
`linux-gcp-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less 5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3	None known
`linux-gcp-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less 5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1	None known
`linux-gcp-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41	None known
`linux-gke` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less 5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111	None known
`linux-gke-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less 5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1	None known
`linux-gkeop` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less 5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77	None known
`linux-gkeop-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 40 moreShow less 5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1	None known
`linux-hwe-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less 5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1	None known
`linux-hwe-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less 5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1	None known
`linux-hwe-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less 5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1	None known
`linux-intel-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19	None known
`linux-oem-5.10` Ubuntu:20.04:LTS	All versions, plus listed versions 5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17 Show 21 moreShow less 5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61	None known
`linux-oem-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21 Show 7 moreShow less 5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36	None known
`linux-oem-5.14` Ubuntu:20.04:LTS	All versions, plus listed versions 5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10 Show 30 moreShow less 5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67	None known
`linux-oem-5.6` Ubuntu:20.04:LTS	All versions, plus listed versions 5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13 Show 24 moreShow less 5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60	None known
`linux-oracle-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-oracle-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1 Show 7 moreShow less 5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1	None known
`linux-oracle-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1	None known
`linux-raspi2` Ubuntu:20.04:LTS	All versions, plus listed versions 5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6	None known
`linux-riscv` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34 Show 7 moreShow less 5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45	None known
`linux-riscv-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1 Show 8 moreShow less 5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35	None known
`linux-riscv-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1 Show 5 moreShow less 5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1	None known
`linux-allwinner-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1	None known
`linux-aws-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1 Show 5 moreShow less 5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1	None known
`linux-aws-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 9 moreShow less 6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1	None known
`linux-aws-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1 Show 9 moreShow less 6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1	None known
`linux-aws-6.8` Ubuntu:22.04:LTS	before 6.8.0-1060.63~22.04.1, plus listed versions 6.8.0-1009.9~22.04.26.8.0-1010.10~22.04.26.8.0-1011.12~22.04.16.8.0-1013.14~22.04.16.8.0-1014.15~22.04.1 Show 33 moreShow less 6.8.0-1015.16~22.04.16.8.0-1016.17~22.04.26.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1023.25~22.04.16.8.0-1024.26~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1035.37~22.04.16.8.0-1036.38~22.04.16.8.0-1039.41~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.44~22.04.16.8.0-1043.45~22.04.16.8.0-1044.46~22.04.16.8.0-1045.47~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.16.8.0-1050.53~22.04.16.8.0-1051.54~22.04.16.8.0-1052.55~22.04.16.8.0-1053.56~22.04.16.8.0-1055.58~22.04.16.8.0-1057.60~22.04.1	6.8.0-1060.63~22.04.1
`linux-azure-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2	None known
`linux-azure-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 8 moreShow less 6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1	None known
`linux-azure-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1 Show 9 moreShow less 6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1	None known
`linux-azure-6.8` Ubuntu:22.04:LTS	before 6.8.0-1063.71~22.04.1, plus listed versions 6.8.0-1008.8~22.04.16.8.0-1009.9~22.04.16.8.0-1010.10~22.04.16.8.0-1012.14~22.04.16.8.0-1013.15~22.04.1 Show 22 moreShow less 6.8.0-1014.16~22.04.16.8.0-1015.17~22.04.26.8.0-1017.20~22.04.16.8.0-1018.21~22.04.16.8.0-1020.23~22.04.16.8.0-1021.25~22.04.16.8.0-1025.30~22.04.16.8.0-1026.31~22.04.16.8.0-1027.32~22.04.16.8.0-1028.33~22.04.16.8.0-1029.34~22.04.16.8.0-1030.35~22.04.16.8.0-1031.36~22.04.16.8.0-1034.39~22.04.16.8.0-1036.42~22.04.16.8.0-1040.46~22.04.16.8.0-1041.47~22.04.16.8.0-1044.50~22.04.16.8.0-1051.57~22.04.16.8.0-1052.58~22.04.16.8.0-1059.65~22.04.16.8.0-1062.69~22.04.1	6.8.0-1063.71~22.04.1
`linux-azure-fde-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1	None known
`dtb-aarch64` openSUSE:Leap 16.0 From an advisory covering 60 CVEs	before 6.12.0-160000.35.1	6.12.0-160000.35.1
`kernel-64kb` openSUSE:Leap 16.0 From an advisory covering 60 CVEs	before 6.12.0-160000.35.1	6.12.0-160000.35.1
`kernel-azure` openSUSE:Leap 16.0 From an advisory covering 60 CVEs	before 6.12.0-160000.35.1	6.12.0-160000.35.1
`kernel-default` openSUSE:Leap 16.0 From an advisory covering 60 CVEs	before 6.12.0-160000.35.1	6.12.0-160000.35.1
`kernel-default-base` openSUSE:Leap 16.0 From an advisory covering 60 CVEs	before 6.12.0-160000.35.1.160000.2.16	6.12.0-160000.35.1.160000.2.16
`kernel-docs` openSUSE:Leap 16.0 From an advisory covering 60 CVEs	before 6.12.0-160000.35.1	6.12.0-160000.35.1
`kernel-kvmsmall` openSUSE:Leap 16.0 From an advisory covering 60 CVEs	before 6.12.0-160000.35.1	6.12.0-160000.35.1
`kernel-obs-build` openSUSE:Leap 16.0 From an advisory covering 60 CVEs	before 6.12.0-160000.35.1	6.12.0-160000.35.1
`kernel-obs-qa` openSUSE:Leap 16.0 From an advisory covering 60 CVEs	before 6.12.0-160000.35.1	6.12.0-160000.35.1
`kernel-rt` openSUSE:Leap 16.0 From an advisory covering 60 CVEs	before 6.12.0-160000.35.1	6.12.0-160000.35.1
`kernel-source` openSUSE:Leap 16.0 From an advisory covering 60 CVEs	before 6.12.0-160000.35.1	6.12.0-160000.35.1
`kernel-syms` openSUSE:Leap 16.0 From an advisory covering 60 CVEs	before 6.12.0-160000.35.1	6.12.0-160000.35.1
`kernel-zfcpdump` openSUSE:Leap 16.0 From an advisory covering 60 CVEs	before 6.12.0-160000.35.1	6.12.0-160000.35.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected	OSV
Nov 6, 2026	affected	OSV
Nov 3, 2026	facts	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-45910 is a high vulnerability (CVSS 7.8) in Linux, published May 27, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.12%, the 2nd percentile. Fixed in linux-lts 6.12.80-r0.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 589 package rows, 84 versions, 2,124 references and the rest of 24 source descriptions. The JSON record has them.