CVE-2026-46149
scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()
7.1 HighFix available
In the Linux kernel, the following vulnerability has been resolved:
scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()
target_tg_pt_gp_members_show() formats LUN paths with snprintf() into a 256-byte stack buffer, then will memcpy() cur_len bytes from that buffer. snprintf() returns the length the output would have had, which can exceed the buffer size when the fabric WWN is long because iSCSI IQN names can be up to 223 bytes. The check at the memcpy() site only guards the destination page write, not the source read, so memcpy() will read past the stack buffer and copy adjacent stack contents to the sysfs reader, which when CONFIG_FORTIFY_SOURCE is enabled, fortify_panic() will be triggered.
Commit 27e06650a5ea ("scsi: target: target_core_configfs: Add length check to avoid buffer overflow") added the same bound to the target_lu_gp_members_show() but the tg_pt_gp variant was missed so resolve that here.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- High
Exploit likelihood
0.14%Up 0.1 points since May 28, 2026
What each source reports
CVE List Score used
scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()
In the Linux kernel, the following vulnerability has been resolved:
scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()
target_tg_pt_gp_members_show() formats LUN paths with snprintf() into a 256-byte stack buffer, then will memcpy() cur_len bytes from that buffer. snprintf() returns the length the output would have had, which can exceed the buffer size when the fabric WWN is long because iSCSI IQN names can be up to 223 bytes. The check at the memcpy() site only guards the destination page write, not the source read, so memcpy() will read past the stack buffer and copy adjacent stack contents to the sysfs reader, which when CONFIG_FORTIFY_SOURCE is enabled, fortify_panic() will be triggered.
Commit 27e06650a5ea ("scsi: target: target_core_configfs: Add length check to avoid buffer overflow") added the same bound to the target_lu_gp_members_show() but the tg_pt_gp variant was missed so resolve that here.
- Record
CVE-2026-46149- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Weakness
- CWE-126
- Updated
- 2026-11-02
EUVDEUVD-2026-32776
In the Linux kernel, the following vulnerability has been resolved:
scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()
target_tg_pt_gp_members_show() formats LUN paths with snprintf() into a 256-byte stack buffer, then will memcpy() cur_len bytes from that buffer. snprintf() returns the length the output would have had, which can exceed the buffer size when the fabric WWN is long because iSCSI IQN names can be up to 223 bytes. The check at the memcpy() site only guards the destination page write, not the source read, so memcpy() will read past the stack buffer and copy adjacent stack contents to the sysfs reader, which when CONFIG_FORTIFY_SOURCE is enabled, fortify_panic() will be triggered.
Commit 27e06650a5ea ("scsi: target: target_core_configfs: Add length check to avoid buffer overflow") added the same bound to the target_lu_gp_members_show() but the tg_pt_gp variant was missed so resolve that here.
- Record
EUVD-2026-32776- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-vvx9-xfcg-g62v
In the Linux kernel, the following vulnerability has been resolved: scsi: target: configfs:...
In the Linux kernel, the following vulnerability has been resolved:
scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()
target_tg_pt_gp_members_show() formats LUN paths with snprintf() into a 256-byte stack buffer, then will memcpy() cur_len bytes from that buffer. snprintf() returns the length the output would have had, which can exceed the buffer size when the fabric WWN is long because iSCSI IQN names can be up to 223 bytes. The check at the memcpy() site only guards the destination page write, not the source read, so memcpy() will read past the stack buffer and copy adjacent stack contents to the sysfs reader, which when CONFIG_FORTIFY_SOURCE is enabled, fortify_panic() will be triggered.
Commit 27e06650a5ea ("scsi: target: target_core_configfs: Add length check to avoid buffer overflow") added the same bound to the target_lu_gp_members_show() but the tg_pt_gp variant was missed so resolve that here.
- Record
GHSA-vvx9-xfcg-g62v- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Weakness
- CWE-126, CWE-674
- Updated
- 2026-11-02
NVD
In the Linux kernel, the following vulnerability has been resolved:
scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()
target_tg_pt_gp_members_show() formats LUN paths with snprintf() into a 256-byte stack buffer, then will memcpy() cur_len bytes from that buffer. snprintf() returns the length the output would have had, which can exceed the buffer size when the fabric WWN is long because iSCSI IQN names can be up to 223 bytes. The check at the memcpy() site only guards the destination page write, not the source read, so memcpy() will read past the stack buffer and copy adjacent stack contents to the sysfs reader, which when CONFIG_FORTIFY_SOURCE is enabled, fortify_panic() will be triggered.
Commit 27e06650a5ea ("scsi: target: target_core_configfs: Add length check to avoid buffer overflow") added the same bound to the target_lu_gp_members_show() but the tg_pt_gp variant was missed so resolve that here.
- Record
CVE-2026-46149- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Weakness
- CWE-674, CWE-126
- Updated
- 2026-11-02
OSVBELL-CVE-2026-46149
- Record
BELL-CVE-2026-46149- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSV
scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()
In the Linux kernel, the following vulnerability has been resolved:
scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()
target_tg_pt_gp_members_show() formats LUN paths with snprintf() into a 256-byte stack buffer, then will memcpy() cur_len bytes from that buffer. snprintf() returns the length the output would have had, which can exceed the buffer size when the fabric WWN is long because iSCSI IQN names can be up to 223 bytes. The check at the memcpy() site only guards the destination page write, not the source read, so memcpy() will read past the stack buffer and copy adjacent stack contents to the sysfs reader, which when CONFIG_FORTIFY_SOURCE is enabled, fortify_panic() will be triggered.
Commit 27e06650a5ea ("scsi: target: target_core_configfs: Add length check to avoid buffer overflow") added the same bound to the target_lu_gp_members_show() but the tg_pt_gp variant was missed so resolve that here.
- Record
CVE-2026-46149- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
Show 48 moreShow less
OSVDEBIAN-CVE-2026-46149
In the Linux kernel, the following vulnerability has been resolved: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() target_tg_pt_gp_members_show() formats LUN paths with snprintf() into a 256-byte stack buffer, then will memcpy() cur_len bytes from that buffer. snprintf() returns the length the output would have had, which can exceed the buffer size when the fabric WWN is long because iSCSI IQN names can be up to 223 bytes. The check at the memcpy() site only guards the destination page write, not the source read, so memcpy() will read past the stack buffer and copy adjacent stack contents to the sysfs reader, which when CONFIG_FORTIFY_SOURCE is enabled, fortify_panic() will be triggered. Commit 27e06650a5ea ("scsi: target: target_core_configfs: Add length check to avoid buffer overflow") added the same bound to the target_lu_gp_members_show() but the tg_pt_gp variant was missed so resolve that here.
- Record
DEBIAN-CVE-2026-46149- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2026-2871
kernel security update
The Linux Kernel, the operating system core itself.
Security Fix(es):
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_conntrack_expect: use expect->helper
Use expect->helper in ctnetlink and /proc to dump the helper name. Using nfct_help() without holding a reference to the master conntrack is unsafe.
Use exp->master->helper in ctnetlink path if userspace does not provide an explicit helper when creating an expectation to retain the existing behaviour. The ctnetlink expectation path holds the reference on the master conntrack and nf_conntrack_expect lock and the nfnetlink glue path refers to the master ct that is attached to the skb.(CVE-2026-31414)
In the Linux kernel, the following vulnerability has been resolved:
xfs: avoid dereferencing log items after push callbacks
After xfsaild_push_item() calls iop_push(), the log item may have been freed if the AIL lock was dropped during the push. Background inode reclaim or the dquot shrinker can free the log item while the AIL lock is not held, and the tracepoints in the switch statement dereference the log item after iop_push() returns.
Fix this by capturing the log item type, flags, and LSN before calling xfsaild_push_item(), and introducing a new xfs_ail_push_class trace event class that takes these pre-captured values and the ailp pointer instead of the log item pointer.(CVE-2026-31453)
In the Linux kernel, the following vulnerability has been resolved:
xfs: stop reclaim before pushing AIL during unmount
The unmount sequence in xfs_unmount_flush_inodes() pushed the AIL while background reclaim and inodegc are still running. This is broken independently of any use-after-free issues - background reclaim and inodegc should not be running while the AIL is being pushed during unmount, as inodegc can dirty and insert inodes into the AIL during the flush, and background reclaim can race to abort and free dirty inodes.
Reorder xfs_unmount_flush_inodes() to stop inodegc and cancel background reclaim before pushing the AIL. Stop inodegc before cancelling m_reclaim_work because the inodegc worker can re-queue m_reclaim_work via xfs_inodegc_set_reclaimable.(CVE-2026-31455)
In the Linux kernel, the following vulnerability has been resolved:
fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath
When cifs_sanitize_prepath is called with an empty string or a string containing only delimiters (e.g., "/"), the current logic attempts to check *(cursor2 - 1) before cursor2 has advanced. This results in an out-of-bounds read.
This patch adds an early exit check after stripping prepended delimiters. If no path content remains, the function returns NULL.
The bug was identified via manual audit and verified using a standalone test case compiled with AddressSanitizer, which triggered a SEGV on affected inputs.(CVE-2026-43112)
In the Linux kernel, the following vulnerability has been resolved:
xfs: remove xfs_attr_leaf_hasname
The calling convention of xfs_attr_leaf_hasname() is problematic, because it returns a NULL buffer when xfs_attr3_leaf_read fails, a valid buffer when xfs_attr3_leaf_lookup_int returns -ENOATTR or -EEXIST, and a non-NULL buffer pointer for an already released buffer when xfs_attr3_leaf_lookup_int fails with other error values.
Fix this by simply open coding xfs_attr_leaf_hasname in the callers, so that the buffer release code is done by each caller of xfs_attr3_leaf_read.(CVE-2026-43153)
In the Linux kernel, the following vulnerability has been resolved:
xfs: fix freemap adjustments when adding xattrs to leaf blocks
xfs/592 and xfs/794 both trip this assertion in the leaf block freemap adjustment code after ~20 minutes of running on my test VMs:
ASSERT(ichdr->firstused >= ichdr->count * sizeof(xfs_attr_leaf_entry_t) + xfs_attr3_leaf_hdr_size(leaf));
Upon enabling quite a lot more debugging code, I narrowed this down to fsstress trying to set a local extended attribute with…
- Record
OESA-2026-2871- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:66180
Red Hat Security Advisory: kernel security, bug fix, and enhancement update
- Record
RHSA-2026:66180- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2026:66324
Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update
- Record
RHSA-2026:66324- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2026:66325
Red Hat Security Advisory: kernel security, bug fix, and enhancement update
- Record
RHSA-2026:66325- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2026:67471
Red Hat Security Advisory: kernel security, bug fix, and enhancement update
- Record
RHSA-2026:67471- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:79783
Red Hat Security Advisory: kernel security update
- Record
RHSA-2026:79783- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:83707
Red Hat Security Advisory: kernel security, bug fix, and enhancement update
- Record
RHSA-2026:83707- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:84677
Red Hat Security Advisory: kernel security update
- Record
RHSA-2026:84677- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2026:84793
Red Hat Security Advisory: kernel security update
- Record
RHSA-2026:84793- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSVRLSA-2026:66180
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
-
kernel: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CVE-2026-43133)
-
kernel: ipv6: prevent possible UaF in addrconf_permanent_addr() (CVE-2026-43339)
-
kernel: crypto: pcrypt - Fix handling of MAY_BACKLOG requests (CVE-2026-43493)
-
kernel: tcp: call sk_data_ready() after listener migration (CVE-2026-46015)
-
kernel: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CVE-2026-46149)
-
kernel: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (CVE-2026-46266)
-
kernel: flow_dissector: do not dissect PPPoE PFC frames (CVE-2026-46306)
-
kernel: Revert "net/smc: Introduce TCP ULP support" (CVE-2026-46330)
-
kernel: netfilter: conntrack: remove sprintf usage (CVE-2026-53002)
-
kernel: net: guard timestamp cmsgs to real error queue skbs (CVE-2026-53223)
-
kernel: ipv6: mcast: Fix use-after-free when processing MLD queries (CVE-2026-53275)
-
kernel: ipv4: account for fraggap on the paged allocation path (CVE-2026-53366)
-
kernel: net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CVE-2026-64034)
-
kernel: rhashtable: clear stale iter->p on table restart (CVE-2026-64563)
-
kernel: smb: client: fix double-free in SMB2_close() replay (CVE-2026-64597)
-
kernel: nvmet-rdma: handle inline data with a nonzero offset (CVE-2026-72129)
-
kernel: net: bridge: stop fast-leave after deleting a port group (CVE-2026-74480)
Bug Fix(es) and Enhancement(s):
- KSM to deduplicate only zero pages [rhel-9.8.z] (JIRA:Rocky Linux-249161)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:66180- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSVRLSA-2026:66324
Important: kernel-rt security, bug fix, and enhancement update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
-
kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset (CVE-2025-68745)
-
kernel: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CVE-2026-46149)
-
kernel: netfilter: nf_log: validate MAC header was set before dumping it (CVE-2026-52942)
-
kernel: sctp: diag: reject stale associations in dump_one path (CVE-2026-52917)
-
kernel: net: pull headers in qdisc_pkt_len_segs_init() (CVE-2026-53091)
-
kernel: netfilter: nf_conntrack_sip: don't use simple_strtoul (CVE-2026-52986)
-
kernel: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (CVE-2026-53246)
-
kernel: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (CVE-2026-63801)
-
kernel: sctp: fix race between sctp_wait_for_connect and peeloff (CVE-2026-63971)
-
kernel: security/keys: fix missed RCU read section on lookup (CVE-2026-64015)
-
kernel: ixgbevf: fix use-after-free in VEPA multicast source pruning (CVE-2026-64113)
-
kernel: sctp: fix auth_hmacs array size in struct sctp_cookie (CVE-2026-68376)
-
kernel: tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (CVE-2026-68117)
-
kernel: sctp: auth: verify auth requirement when auth_chunk is NULL (CVE-2026-68300)
-
kernel: sctp: validate stream count in sctp_process_strreset_inreq() (CVE-2026-68315)
Bug Fix(es) and Enhancement(s):
-
scsi: mpt3sas: avoid freeing unallocated PCIe SGL buffers [rhel 8.6.z] (JIRA:Rocky Linux-194117)
-
gfs2: harden gfs2_glock_hold [Rocky Linux-8] (JIRA:Rocky Linux-240340)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:66324- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRLSA-2026:66325
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
-
kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset (CVE-2025-68745)
-
kernel: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CVE-2026-46149)
-
kernel: netfilter: nf_log: validate MAC header was set before dumping it (CVE-2026-52942)
-
kernel: sctp: diag: reject stale associations in dump_one path (CVE-2026-52917)
-
kernel: net: pull headers in qdisc_pkt_len_segs_init() (CVE-2026-53091)
-
kernel: netfilter: nf_conntrack_sip: don't use simple_strtoul (CVE-2026-52986)
-
kernel: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (CVE-2026-53246)
-
kernel: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (CVE-2026-63801)
-
kernel: sctp: fix race between sctp_wait_for_connect and peeloff (CVE-2026-63971)
-
kernel: security/keys: fix missed RCU read section on lookup (CVE-2026-64015)
-
kernel: ixgbevf: fix use-after-free in VEPA multicast source pruning (CVE-2026-64113)
-
kernel: sctp: fix auth_hmacs array size in struct sctp_cookie (CVE-2026-68376)
-
kernel: tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (CVE-2026-68117)
-
kernel: sctp: auth: verify auth requirement when auth_chunk is NULL (CVE-2026-68300)
-
kernel: sctp: validate stream count in sctp_process_strreset_inreq() (CVE-2026-68315)
Bug Fix(es) and Enhancement(s):
-
scsi: mpt3sas: avoid freeing unallocated PCIe SGL buffers [rhel 8.6.z] (JIRA:Rocky Linux-194117)
-
gfs2: harden gfs2_glock_hold [Rocky Linux-8] (JIRA:Rocky Linux-240340)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:66325- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRLSA-2026:67471
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
-
kernel: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock() (CVE-2025-40149)
-
kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset (CVE-2025-68745)
-
kernel: drm/xe: Open-code GGTT MMIO access protection (CVE-2026-23466)
-
kernel: drm/xe: always keep track of remap prev/next (CVE-2026-31479)
-
kernel: drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CVE-2026-31566)
-
kernel: xfrm: hold dev ref until after transport_finish NF_HOOK (CVE-2026-31663)
-
kernel: drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CVE-2026-31656)
-
kernel: smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (CVE-2026-31539)
-
kernel: vhost: move vdpa group bound check to vhost_vdpa (CVE-2026-43248)
-
kernel: drm/i915: Fix potential overflow of shmem scatterlist length (CVE-2026-43368)
-
kernel: drm/amdgpu: Fix use-after-free race in VM acquire (CVE-2026-43370)
-
kernel: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CVE-2026-46149)
-
kernel: sctp: purge outqueue on stale COOKIE-ECHO handling (CVE-2026-52924)
-
kernel: netfilter: require Ethernet MAC header before using eth_hdr() (CVE-2026-53131)
-
kernel: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (CVE-2026-53246)
-
kernel: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (CVE-2026-53239)
-
kernel: af_unix: Set gc_in_progress to true in unix_gc() (CVE-2026-53361)
-
kernel: scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CVE-2026-63889)
-
kernel: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (CVE-2026-63921)
-
kernel: xfrm: input: hold netns during deferred transport reinjection (CVE-2026-63919)
-
kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink() (CVE-2026-63917)
-
kernel: lsm: hold cred_guard_mutex for lsm_set_self_attr() (CVE-2026-64111)
-
kernel: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (CVE-2026-68264)
-
kernel: xfrm: fix stale skb->prev after async crypto steals a GSO segment (CVE-2026-68426)
-
kernel: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CVE-2026-74556)
Bug Fix(es) and Enhancement(s):
-
[rhel-10.2.z]- Backport MSHV patches for hypervisor OOM handling (JIRA:Rocky Linux-245035)
-
RHIVOS - [backport] S32G Driver Enablement - ADC (JIRA:Rocky Linux-255233)
-
[Rocky Linux10.2z] watchdog: System can panic during reboot when pretimeout is disabled (0) (JIRA:Rocky Linux-255348)
-
[usb/xhci] kdump on Arrow Lake systems hangs system with dracut-initqueue Timed out errors [Rocky Linux-10.2.z] (JIRA:Rocky Linux-256731)
-
RHIVOS - [backport] S32G Driver Update - ADC, I2C, and eDMA (JIRA:Rocky Linux-256890)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:67471- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2026-46149
CVE-2026-46149 in linux - Patched by Root
Root has patched CVE-2026-46149 in the linux package for Root:Debian:11. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-11-CVE-2026-46149- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2026-46149
CVE-2026-46149 in linux - Patched by Root
Root has patched CVE-2026-46149 in the linux package for Root:Debian:12. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-12-CVE-2026-46149- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVROOT-OS-UBUNTU-2204-CVE-2026-46149
CVE-2026-46149 in linux - Patched by Root
Root has patched CVE-2026-46149 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.
- Record
ROOT-OS-UBUNTU-2204-CVE-2026-46149- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-06
OSVROOT-OS-UBUNTU-2404-CVE-2026-46149
CVE-2026-46149 in linux - Patched by Root
Root has patched CVE-2026-46149 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.
- Record
ROOT-OS-UBUNTU-2404-CVE-2026-46149- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-06
OSVUBUNTU-CVE-2026-46149
In the Linux kernel, the following vulnerability has been resolved: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() target_tg_pt_gp_members_show() formats LUN paths with snprintf() into a 256-byte stack buffer, then will memcpy() cur_len bytes from that buffer. snprintf() returns the length the output would have had, which can exceed the buffer size when the fabric WWN is long because iSCSI IQN names can be up to 223 bytes. The check at the memcpy() site only guards the destination page write, not the source read, so memcpy() will read past the stack buffer and copy adjacent stack contents to the sysfs reader, which when CONFIG_FORTIFY_SOURCE is enabled, fortify_panic() will be triggered. Commit 27e06650a5ea ("scsi: target: target_core_configfs: Add length check to avoid buffer overflow") added the same bound to the target_lu_gp_members_show() but the tg_pt_gp variant was missed so resolve that here.
- Record
UBUNTU-CVE-2026-46149- CVSS 4.0
- 5.8 Medium
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N - CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-11
OSVALSA-2026:66180 No score
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
- kernel: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CVE-2026-43133)
- kernel: ipv6: prevent possible UaF in addrconf_permanent_addr() (CVE-2026-43339)
- kernel: crypto: pcrypt - Fix handling of MAY_BACKLOG requests (CVE-2026-43493)
- kernel: tcp: call sk_data_ready() after listener migration (CVE-2026-46015)
- kernel: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CVE-2026-46149)
- kernel: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (CVE-2026-46266)
- kernel: flow_dissector: do not dissect PPPoE PFC frames (CVE-2026-46306)
- kernel: Revert "net/smc: Introduce TCP ULP support" (CVE-2026-46330)
- kernel: netfilter: conntrack: remove sprintf usage (CVE-2026-53002)
- kernel: net: guard timestamp cmsgs to real error queue skbs (CVE-2026-53223)
- kernel: ipv6: mcast: Fix use-after-free when processing MLD queries (CVE-2026-53275)
- kernel: ipv4: account for fraggap on the paged allocation path (CVE-2026-53366)
- kernel: net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CVE-2026-64034)
- kernel: rhashtable: clear stale iter->p on table restart (CVE-2026-64563)
- kernel: smb: client: fix double-free in SMB2_close() replay (CVE-2026-64597)
- kernel: nvmet-rdma: handle inline data with a nonzero offset (CVE-2026-72129)
- kernel: net: bridge: stop fast-leave after deleting a port group (CVE-2026-74480)
Bug Fix(es) and Enhancement(s):
- KSM to deduplicate only zero pages [almalinux-9.8.z] (JIRA:AlmaLinux-249161)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:66180- Updated
- 2026-11-02
OSVALSA-2026:66324 No score
Important: kernel-rt security, bug fix, and enhancement update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
- kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset (CVE-2025-68745)
- kernel: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CVE-2026-46149)
- kernel: netfilter: nf_log: validate MAC header was set before dumping it (CVE-2026-52942)
- kernel: sctp: diag: reject stale associations in dump_one path (CVE-2026-52917)
- kernel: net: pull headers in qdisc_pkt_len_segs_init() (CVE-2026-53091)
- kernel: netfilter: nf_conntrack_sip: don't use simple_strtoul (CVE-2026-52986)
- kernel: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (CVE-2026-53246)
- kernel: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (CVE-2026-63801)
- kernel: sctp: fix race between sctp_wait_for_connect and peeloff (CVE-2026-63971)
- kernel: security/keys: fix missed RCU read section on lookup (CVE-2026-64015)
- kernel: ixgbevf: fix use-after-free in VEPA multicast source pruning (CVE-2026-64113)
- kernel: sctp: fix auth_hmacs array size in struct sctp_cookie (CVE-2026-68376)
- kernel: tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (CVE-2026-68117)
- kernel: sctp: auth: verify auth requirement when auth_chunk is NULL (CVE-2026-68300)
- kernel: sctp: validate stream count in sctp_process_strreset_inreq() (CVE-2026-68315)
Bug Fix(es) and Enhancement(s):
- scsi: mpt3sas: avoid freeing unallocated PCIe SGL buffers [almalinux 8.6.z] (JIRA:AlmaLinux-194117)
- gfs2: harden gfs2_glock_hold [AlmaLinux-8] (JIRA:AlmaLinux-240340)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:66324- Updated
- 2026-11-02
OSVALSA-2026:66325 No score
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
- kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset (CVE-2025-68745)
- kernel: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CVE-2026-46149)
- kernel: netfilter: nf_log: validate MAC header was set before dumping it (CVE-2026-52942)
- kernel: sctp: diag: reject stale associations in dump_one path (CVE-2026-52917)
- kernel: net: pull headers in qdisc_pkt_len_segs_init() (CVE-2026-53091)
- kernel: netfilter: nf_conntrack_sip: don't use simple_strtoul (CVE-2026-52986)
- kernel: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (CVE-2026-53246)
- kernel: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (CVE-2026-63801)
- kernel: sctp: fix race between sctp_wait_for_connect and peeloff (CVE-2026-63971)
- kernel: security/keys: fix missed RCU read section on lookup (CVE-2026-64015)
- kernel: ixgbevf: fix use-after-free in VEPA multicast source pruning (CVE-2026-64113)
- kernel: sctp: fix auth_hmacs array size in struct sctp_cookie (CVE-2026-68376)
- kernel: tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (CVE-2026-68117)
- kernel: sctp: auth: verify auth requirement when auth_chunk is NULL (CVE-2026-68300)
- kernel: sctp: validate stream count in sctp_process_strreset_inreq() (CVE-2026-68315)
Bug Fix(es) and Enhancement(s):
- scsi: mpt3sas: avoid freeing unallocated PCIe SGL buffers [almalinux 8.6.z] (JIRA:AlmaLinux-194117)
- gfs2: harden gfs2_glock_hold [AlmaLinux-8] (JIRA:AlmaLinux-240340)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:66325- Updated
- 2026-11-02
OSVALSA-2026:67471 No score
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
- kernel: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock() (CVE-2025-40149)
- kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset (CVE-2025-68745)
- kernel: drm/xe: Open-code GGTT MMIO access protection (CVE-2026-23466)
- kernel: drm/xe: always keep track of remap prev/next (CVE-2026-31479)
- kernel: drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CVE-2026-31566)
- kernel: xfrm: hold dev ref until after transport_finish NF_HOOK (CVE-2026-31663)
- kernel: drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CVE-2026-31656)
- kernel: smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (CVE-2026-31539)
- kernel: vhost: move vdpa group bound check to vhost_vdpa (CVE-2026-43248)
- kernel: drm/i915: Fix potential overflow of shmem scatterlist length (CVE-2026-43368)
- kernel: drm/amdgpu: Fix use-after-free race in VM acquire (CVE-2026-43370)
- kernel: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CVE-2026-46149)
- kernel: sctp: purge outqueue on stale COOKIE-ECHO handling (CVE-2026-52924)
- kernel: netfilter: require Ethernet MAC header before using eth_hdr() (CVE-2026-53131)
- kernel: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (CVE-2026-53246)
- kernel: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (CVE-2026-53239)
- kernel: af_unix: Set gc_in_progress to true in unix_gc() (CVE-2026-53361)
- kernel: scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CVE-2026-63889)
- kernel: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (CVE-2026-63921)
- kernel: xfrm: input: hold netns during deferred transport reinjection (CVE-2026-63919)
- kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink() (CVE-2026-63917)
- kernel: lsm: hold cred_guard_mutex for lsm_set_self_attr() (CVE-2026-64111)
- kernel: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (CVE-2026-68264)
- kernel: xfrm: fix stale skb->prev after async crypto steals a GSO segment (CVE-2026-68426)
- kernel: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CVE-2026-74556)
Bug Fix(es) and Enhancement(s):
- [almalinux-10.2.z]- Backport MSHV patches for hypervisor OOM handling (JIRA:AlmaLinux-245035)
- RHIVOS - [backport] S32G Driver Enablement - ADC (JIRA:AlmaLinux-255233)
- [AlmaLinux10.2z] watchdog: System can panic during reboot when pretimeout is disabled (0) (JIRA:AlmaLinux-255348)
- [usb/xhci] kdump on Arrow Lake systems hangs system with dracut-initqueue Timed out errors [AlmaLinux-10.2.z] (JIRA:AlmaLinux-256731)
- RHIVOS - [backport] S32G Driver Update - ADC, I2C, and eDMA (JIRA:AlmaLinux-256890)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:67471- Updated
- 2026-11-02
OSVAZL-89064 No score
CVE-2026-46149 affecting package kernel for versions less than 6.6.141.1-1
In the Linux kernel, the following vulnerability has been resolved:
scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()
target_tg_pt_gp_members_show() formats LUN paths with snprintf() into a 256-byte stack buffer, then will memcpy() cur_len bytes from that buffer. snprintf() returns the length the output would have had, which can exceed the buffer size when the fabric WWN is long because iSCSI IQN names can be up to 223 bytes. The check at the memcpy() site only guards the destination page write, not the source read, so memcpy() will read past the stack buffer and copy adjacent stack contents to the sysfs reader, which when CONFIG_FORTIFY_SOURCE is enabled, fortify_panic() will be triggered.
Commit 27e06650a5ea ("scsi: target: target_core_configfs: Add length check to avoid buffer overflow") added the same bound to the target_lu_gp_members_show() but the tg_pt_gp variant was missed so resolve that here.
- Record
AZL-89064- Updated
- 2026-11-02
OSVCLSA-2026-1788170774 No score
kernel: Fix of 132 CVEs
- sctp: fix potential deadlock on &net->sctp.addr_wq_lock {CVE-2024-0639}
- sctp: delay auto_asconf init until binding the first addr {CVE-2021-23133}
- netfilter: nf_log: validate MAC header was set before dumping it {CVE-2026-52942}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check {CVE-2026-52998}
- drm/nouveau: fix u32 overflow in pushbuf reloc bounds check {CVE-2026-46006}
- btrfs: fix use-after-free when attempting to join an aborted transaction {CVE-2025-21753}
- btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
- team: fix header_ops type confusion with non-Ethernet ports {CVE-2026-31502}
- xfrm: Fix dev use-after-free in xfrm async resumption {CVE-2026-72463}
- xfrm: hold dev ref until after transport_finish NF_HOOK {CVE-2026-31663}
- xen/privcmd: restrict usage in unprivileged domU {CVE-2026-31788}
- xen/privcmd: add IOCTL_PRIVCMD_RESTRICT {CVE-2026-31788}
- Bluetooth: L2CAP: make l2cap_connect() return void {CVE-2024-36013}
- btrfs: fix incorrect splitting in btrfs_drop_extent_map_range {CVE-2023-54121}
- netfilter: nf_conntrack: defer invalid log until after unlock {CVE-2026-74624}
- NFS: Pin the 'struct nfs_server' during a FREE_STATEID call {CVE-2026-74730}
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error {CVE-2024-50280}
- audit: fix recursive locking deadlock in audit_dupe_exe() {CVE-2026-68096}
- RDMA/rxe: Reject unknown opcodes before ICRC processing {CVE-2026-46133}
- Bluetooth: bnep: reject short frames before parsing {CVE-2026-53253}
- net: pull headers in qdisc_pkt_len_segs_init() {CVE-2026-53091}
- inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266}
- Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
- sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed {CVE-2022-50103}
- btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
- fanotify: fix false positive on permission events {CVE-2026-46150}
- HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103}
- ext4: fix e4b bitmap inconsistency reports {CVE-2026-45942}
- Bluetooth: serialize accept_q access {CVE-2026-52918}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing {CVE-2026-43279}
- RDMA/bnxt_re: zero shared page before exposing to userspace {CVE-2026-74584}
- sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
- ipvs: clear IPv4 options after rebasing tunnel ICMP errors {CVE-2026-74669}
- wifi: cfg80211: Partial revert "wifi: cfg80211: Fix use after free for wext" {CVE-2023-53153}
- net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
- nfs: use nfsi->rwsem to protect traversal of the file lock list {CVE-2026-72472}
- Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}
- drm/amdgpu/vce: fix integer overflow in image size {CVE-2026-68108}
- ALSA: seq: close a re-opened queue timer in the destructor {CVE-2026-68202}
- ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() {CVE-2026-74499}
- USB: serial: io_edgeport: cap received transmit credits {CVE-2026-68365}
- net: slip: serialize receive against buffer reallocation {CVE-2026-68143}
- wifi: cfg80211: cancel sched scan results work on unregister {CVE-2026-68414}
- sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}
- sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}
- pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}
- ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() {CVE-2026-68160}
- libceph: refresh auth->authorizer_buf{,_len} after authorizer update {CVE-2026-68156}
- libceph: remove debugfs files before client teardown {CVE-2026-68153}
- libceph: Fix multiplication overflow in decode_new_up_state_weight() {CVE-2026-68158}
- libceph: reject zero bucket types in crush_decode {CVE-2026-68154}
- libceph: bound…
- Record
CLSA-2026-1788170774- Updated
- 2026-11-02
OSVCLSA-2026-1788257079 No score
kernel: Fix of 131 CVEs
- sctp: fix potential deadlock on &net->sctp.addr_wq_lock {CVE-2024-0639}
- sctp: delay auto_asconf init until binding the first addr {CVE-2021-23133}
- netfilter: nf_log: validate MAC header was set before dumping it {CVE-2026-52942}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check {CVE-2026-52998}
- drm/nouveau: fix u32 overflow in pushbuf reloc bounds check {CVE-2026-46006}
- btrfs: fix use-after-free when attempting to join an aborted transaction {CVE-2025-21753}
- btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
- team: fix header_ops type confusion with non-Ethernet ports {CVE-2026-31502}
- xfrm: Fix dev use-after-free in xfrm async resumption {CVE-2026-72463}
- xfrm: hold dev ref until after transport_finish NF_HOOK {CVE-2026-31663}
- xen/privcmd: restrict usage in unprivileged domU {CVE-2026-31788}
- xen/privcmd: add IOCTL_PRIVCMD_RESTRICT {CVE-2026-31788}
- Bluetooth: L2CAP: make l2cap_connect() return void {CVE-2024-36013}
- btrfs: fix incorrect splitting in btrfs_drop_extent_map_range {CVE-2023-54121}
- netfilter: nf_conntrack: defer invalid log until after unlock {CVE-2026-74624}
- NFS: Pin the 'struct nfs_server' during a FREE_STATEID call {CVE-2026-74730}
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error {CVE-2024-50280}
- audit: fix recursive locking deadlock in audit_dupe_exe() {CVE-2026-68096}
- RDMA/rxe: Reject unknown opcodes before ICRC processing {CVE-2026-46133}
- Bluetooth: bnep: reject short frames before parsing {CVE-2026-53253}
- net: pull headers in qdisc_pkt_len_segs_init() {CVE-2026-53091}
- inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266}
- Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
- sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed {CVE-2022-50103}
- btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
- fanotify: fix false positive on permission events {CVE-2026-46150}
- HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103}
- ext4: fix e4b bitmap inconsistency reports {CVE-2026-45942}
- Bluetooth: serialize accept_q access {CVE-2026-52918}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing {CVE-2026-43279}
- RDMA/bnxt_re: zero shared page before exposing to userspace {CVE-2026-74584}
- sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
- ipvs: clear IPv4 options after rebasing tunnel ICMP errors {CVE-2026-74669}
- wifi: cfg80211: Partial revert "wifi: cfg80211: Fix use after free for wext" {CVE-2023-53153}
- net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
- nfs: use nfsi->rwsem to protect traversal of the file lock list {CVE-2026-72472}
- Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}
- drm/amdgpu/vce: fix integer overflow in image size {CVE-2026-68108}
- ALSA: seq: close a re-opened queue timer in the destructor {CVE-2026-68202}
- ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() {CVE-2026-74499}
- USB: serial: io_edgeport: cap received transmit credits {CVE-2026-68365}
- net: slip: serialize receive against buffer reallocation {CVE-2026-68143}
- wifi: cfg80211: cancel sched scan results work on unregister {CVE-2026-68414}
- sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}
- sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}
- pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}
- ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() {CVE-2026-68160}
- libceph: refresh auth->authorizer_buf{,_len} after authorizer update {CVE-2026-68156}
- libceph: remove debugfs files before client teardown {CVE-2026-68153}
- libceph: Fix multiplication overflow in decode_new_up_state_weight() {CVE-2026-68158}
- libceph: reject zero bucket types in crush_decode {CVE-2026-68154}
- libceph: bound…
- Record
CLSA-2026-1788257079- Updated
- 2026-11-02
OSVCLSA-2026-1788259625 No score
kernel: Fix of 132 CVEs
- sctp: fix potential deadlock on &net->sctp.addr_wq_lock {CVE-2024-0639}
- sctp: delay auto_asconf init until binding the first addr {CVE-2021-23133}
- netfilter: nf_log: validate MAC header was set before dumping it {CVE-2026-52942}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check {CVE-2026-52998}
- drm/nouveau: fix u32 overflow in pushbuf reloc bounds check {CVE-2026-46006}
- btrfs: fix use-after-free when attempting to join an aborted transaction {CVE-2025-21753}
- btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
- team: fix header_ops type confusion with non-Ethernet ports {CVE-2026-31502}
- xfrm: Fix dev use-after-free in xfrm async resumption {CVE-2026-72463}
- xfrm: hold dev ref until after transport_finish NF_HOOK {CVE-2026-31663}
- xen/privcmd: restrict usage in unprivileged domU {CVE-2026-31788}
- xen/privcmd: add IOCTL_PRIVCMD_RESTRICT {CVE-2026-31788}
- Bluetooth: L2CAP: make l2cap_connect() return void {CVE-2024-36013}
- btrfs: fix incorrect splitting in btrfs_drop_extent_map_range {CVE-2023-54121}
- netfilter: nf_conntrack: defer invalid log until after unlock {CVE-2026-74624}
- NFS: Pin the 'struct nfs_server' during a FREE_STATEID call {CVE-2026-74730}
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error {CVE-2024-50280}
- audit: fix recursive locking deadlock in audit_dupe_exe() {CVE-2026-68096}
- RDMA/rxe: Reject unknown opcodes before ICRC processing {CVE-2026-46133}
- Bluetooth: bnep: reject short frames before parsing {CVE-2026-53253}
- net: pull headers in qdisc_pkt_len_segs_init() {CVE-2026-53091}
- inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266}
- Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
- sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed {CVE-2022-50103}
- btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
- fanotify: fix false positive on permission events {CVE-2026-46150}
- HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103}
- ext4: fix e4b bitmap inconsistency reports {CVE-2026-45942}
- Bluetooth: serialize accept_q access {CVE-2026-52918}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing {CVE-2026-43279}
- RDMA/bnxt_re: zero shared page before exposing to userspace {CVE-2026-74584}
- sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
- ipvs: clear IPv4 options after rebasing tunnel ICMP errors {CVE-2026-74669}
- wifi: cfg80211: Partial revert "wifi: cfg80211: Fix use after free for wext" {CVE-2023-53153}
- net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
- nfs: use nfsi->rwsem to protect traversal of the file lock list {CVE-2026-72472}
- Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}
- drm/amdgpu/vce: fix integer overflow in image size {CVE-2026-68108}
- ALSA: seq: close a re-opened queue timer in the destructor {CVE-2026-68202}
- ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() {CVE-2026-74499}
- USB: serial: io_edgeport: cap received transmit credits {CVE-2026-68365}
- net: slip: serialize receive against buffer reallocation {CVE-2026-68143}
- wifi: cfg80211: cancel sched scan results work on unregister {CVE-2026-68414}
- sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}
- sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}
- pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}
- ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() {CVE-2026-68160}
- libceph: refresh auth->authorizer_buf{,_len} after authorizer update {CVE-2026-68156}
- libceph: remove debugfs files before client teardown {CVE-2026-68153}
- libceph: Fix multiplication overflow in decode_new_up_state_weight() {CVE-2026-68158}
- libceph: reject zero bucket types in crush_decode {CVE-2026-68154}
- libceph: bound…
- Record
CLSA-2026-1788259625- Updated
- 2026-11-02
OSVCLSA-2026-1789373487 No score
Fix of 123 CVEs
- CVE-2025-68214
- timers: Fix NULL function pointer race in timer_shutdown_sync() {CVE-2025-68214}
- CVE-2024-58093
- PCI/ASPM: Fix link state exit during switch upstream function removal {CVE-2024-58093}
- CVE-2026-72463
- xfrm: Fix dev use-after-free in xfrm async resumption {CVE-2026-72463}
- CVE-2026-64600
- xfs: resample the data fork mapping after cycling ILOCK {CVE-2026-64600}
- CVE-2026-64095
- batman-adv: bla: avoid double decrement of bla.num_requests {CVE-2026-64095}
- CVE-2026-64274
- Input: goodix - clamp the device-reported contact count {CVE-2026-64274}
- CVE-2026-64273
- Input: iforce - bound the device-reported force-feedback effect index {CVE-2026-64273}
- CVE-2026-64270
- Input: mms114 - reject an oversized device packet size {CVE-2026-64270}
- CVE-2026-64188
- net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() {CVE-2026-64188}
- CVE-2026-64096
- batman-adv: mcast: fix use-after-free in orig_node RCU release {CVE-2026-64096}
- CVE-2026-64093
- batman-adv: tp_meter: directly shut down timer on cleanup {CVE-2026-64093}
- CVE-2026-64091
- batman-adv: tt: fix TOCTOU race for reported vlans {CVE-2026-64091}
- CVE-2026-64298
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC {CVE-2026-64298}
- CVE-2026-64276
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count {CVE-2026-64276}
- CVE-2026-64271
- Input: touchwin - reset the packet index on every complete packet {CVE-2026-64271}
- CVE-2026-64266
- fuse: re-lock request before returning from fuse_ref_folio() {CVE-2026-64266}
- CVE-2026-64218
- batman-adv: bla: fix report_work leak on backbone_gw purge {CVE-2026-64218}
- CVE-2026-64191
- i2c: stub: Reject I2C block transfers with invalid length {CVE-2026-64191}
- CVE-2026-64115
- vsock/vmci: fix UAF when peer resets connection during handshake {CVE-2026-64115}
- CVE-2026-64114
- ipv4: raw: reject IP_HDRINCL packets with ihl < 5 {CVE-2026-64114}
- CVE-2026-64113
- ixgbevf: fix use-after-free in VEPA multicast source pruning {CVE-2026-64113}
- CVE-2026-64103
- scsi: isci: Fix use-after-free in device removal path {CVE-2026-64103}
- CVE-2026-43249
- 9p/xen: protect xen_9pfs_front_free against concurrent calls {CVE-2026-43249}
- CVE-2025-39686
- comedi: Make insn_rw_emulate_bits() do insn->n samples {CVE-2025-39686}
- CVE-2025-38068
- crypto: lzo - Fix compression buffer overrun {CVE-2025-38068}
- CVE-2025-39901
- i40e: remove read access to debugfs files {CVE-2025-39901}
- CVE-2023-54207
- HID: uclogic: Correct devm device reference for hidinput input_dev name {CVE-2023-54207}
- CVE-2023-53446
- PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free {CVE-2023-53446}
- CVE-2022-50422
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() {CVE-2022-50422}
- CVE-2022-50066
- net: atlantic: fix aq_vec index out of range error {CVE-2022-50066}
- CVE-2025-71152
- net: dsa: properly keep track of master (conduit) reference {CVE-2025-71152}
- CVE-2026-53131
- netfilter: require Ethernet MAC header before using eth_hdr() {CVE-2026-53131}
- CVE-2026-31685
- netfilter: ip6t_eui64: reject invalid MAC header for all packets {CVE-2026-31685}
- CVE-2026-31768
- iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() {CVE-2026-31768}
- CVE-2026-43458
- serial: caif: hold tty->link reference in ldisc_open and ser_release {CVE-2026-43458}
- serial: caif: hold tty->link reference in ldisc_open and ser_release {CVE-2026-43458}
- CVE-2023-53338
- lwt: Fix return values of BPF xmit ops {CVE-2023-53338}
- CVE-2026-43076…
- Record
CLSA-2026-1789373487- Updated
- 2026-11-02
OSVCLSA-2026-1789373515 No score
Fix of 124 CVEs
- CVE-2025-68214
- timers: Fix NULL function pointer race in timer_shutdown_sync() {CVE-2025-68214}
- CVE-2024-58093
- PCI/ASPM: Fix link state exit during switch upstream function removal {CVE-2024-58093}
- CVE-2026-72463
- xfrm: Fix dev use-after-free in xfrm async resumption {CVE-2026-72463}
- CVE-2026-64600
- xfs: resample the data fork mapping after cycling ILOCK {CVE-2026-64600}
- CVE-2026-64095
- batman-adv: bla: avoid double decrement of bla.num_requests {CVE-2026-64095}
- CVE-2026-64274
- Input: goodix - clamp the device-reported contact count {CVE-2026-64274}
- CVE-2026-64273
- Input: iforce - bound the device-reported force-feedback effect index {CVE-2026-64273}
- CVE-2026-64270
- Input: mms114 - reject an oversized device packet size {CVE-2026-64270}
- CVE-2026-64188
- net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() {CVE-2026-64188}
- CVE-2026-64096
- batman-adv: mcast: fix use-after-free in orig_node RCU release {CVE-2026-64096}
- CVE-2026-64093
- batman-adv: tp_meter: directly shut down timer on cleanup {CVE-2026-64093}
- CVE-2026-64091
- batman-adv: tt: fix TOCTOU race for reported vlans {CVE-2026-64091}
- CVE-2026-64298
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC {CVE-2026-64298}
- CVE-2026-64276
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count {CVE-2026-64276}
- CVE-2026-64271
- Input: touchwin - reset the packet index on every complete packet {CVE-2026-64271}
- CVE-2026-64266
- fuse: re-lock request before returning from fuse_ref_folio() {CVE-2026-64266}
- CVE-2026-64218
- batman-adv: bla: fix report_work leak on backbone_gw purge {CVE-2026-64218}
- CVE-2026-64191
- i2c: stub: Reject I2C block transfers with invalid length {CVE-2026-64191}
- CVE-2026-64115
- vsock/vmci: fix UAF when peer resets connection during handshake {CVE-2026-64115}
- CVE-2026-64114
- ipv4: raw: reject IP_HDRINCL packets with ihl < 5 {CVE-2026-64114}
- CVE-2026-64113
- ixgbevf: fix use-after-free in VEPA multicast source pruning {CVE-2026-64113}
- CVE-2026-64103
- scsi: isci: Fix use-after-free in device removal path {CVE-2026-64103}
- CVE-2026-43249
- 9p/xen: protect xen_9pfs_front_free against concurrent calls {CVE-2026-43249}
- CVE-2025-39686
- comedi: Make insn_rw_emulate_bits() do insn->n samples {CVE-2025-39686}
- CVE-2025-38068
- crypto: lzo - Fix compression buffer overrun {CVE-2025-38068}
- CVE-2025-39901
- i40e: remove read access to debugfs files {CVE-2025-39901}
- CVE-2023-54207
- HID: uclogic: Correct devm device reference for hidinput input_dev name {CVE-2023-54207}
- CVE-2023-53446
- PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free {CVE-2023-53446}
- CVE-2022-50422
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() {CVE-2022-50422}
- CVE-2022-50066
- net: atlantic: fix aq_vec index out of range error {CVE-2022-50066}
- CVE-2025-71152
- net: dsa: properly keep track of master (conduit) reference {CVE-2025-71152}
- CVE-2026-53131
- netfilter: require Ethernet MAC header before using eth_hdr() {CVE-2026-53131}
- CVE-2026-31685
- netfilter: ip6t_eui64: reject invalid MAC header for all packets {CVE-2026-31685}
- CVE-2026-31768
- iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() {CVE-2026-31768}
- CVE-2026-43458
- serial: caif: hold tty->link reference in ldisc_open and ser_release {CVE-2026-43458}
- serial: caif: hold tty->link reference in ldisc_open and ser_release {CVE-2026-43458}
- CVE-2023-53338
- lwt: Fix return values of BPF xmit ops {CVE-2023-53338}
- CVE-2026-43076…
- Record
CLSA-2026-1789373515- Updated
- 2026-11-02
OSVCLSA-2026-1789460387 No score
Fix of 134 CVEs
- CVE-2026-72463
- xfrm: Fix dev use-after-free in xfrm async resumption {CVE-2026-72463}
- CVE-2026-64600
- xfs: resample the data fork mapping after cycling ILOCK {CVE-2026-64600}
- CVE-2026-46175
- f2fs: fix fsck inconsistency caused by FGGC of node block {CVE-2026-46175}
- CVE-2025-68254
- staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing {CVE-2025-68254}
- CVE-2025-68255
- staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing {CVE-2025-68255}
- CVE-2026-64268
- RDMA/siw: bound Read Response placement to the RREAD length {CVE-2026-64268}
- CVE-2025-68286
- drm/amd/display: Check NULL before accessing {CVE-2025-68286}
- CVE-2026-53024
- greybus: raw: fix use-after-free if write is called after disconnect {CVE-2026-53024}
- CVE-2026-53025
- greybus: raw: fix use-after-free on cdev close {CVE-2026-53025}
- CVE-2026-52934
- batman-adv: tvlv: reject oversized TVLV packets {CVE-2026-52934}
- CVE-2025-68303
- platform/x86: intel: punit_ipc: fix memory corruption {CVE-2025-68303}
- CVE-2026-64280
- fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() {CVE-2026-64280}
- CVE-2026-64188
- net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() {CVE-2026-64188}
- CVE-2026-64109
- af_unix: Fix UAF read of tail->len in unix_stream_data_wait() {CVE-2026-64109}
- CVE-2026-64274
- Input: goodix - clamp the device-reported contact count {CVE-2026-64274}
- CVE-2026-64270
- Input: mms114 - reject an oversized device packet size {CVE-2026-64270}
- CVE-2026-64093
- batman-adv: tp_meter: directly shut down timer on cleanup {CVE-2026-64093}
- CVE-2026-64091
- batman-adv: tt: fix TOCTOU race for reported vlans {CVE-2026-64091}
- CVE-2026-53329
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() {CVE-2026-53329}
- CVE-2026-64298
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC {CVE-2026-64298}
- CVE-2026-64276
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count {CVE-2026-64276}
- CVE-2026-64273
- Input: iforce - bound the device-reported force-feedback effect index {CVE-2026-64273}
- CVE-2026-64271
- Input: touchwin - reset the packet index on every complete packet {CVE-2026-64271}
- CVE-2026-64266
- fuse: re-lock request before returning from fuse_ref_folio() {CVE-2026-64266}
- CVE-2026-64191
- i2c: stub: Reject I2C block transfers with invalid length {CVE-2026-64191}
- CVE-2026-64189
- netfilter: ipset: fix race between dump and ip_set_list resize {CVE-2026-64189}
- CVE-2026-31786
- Buffer overflow in drivers/xen/sys-hypervisor.c {CVE-2026-31786}
- CVE-2025-68799
- caif: fix integer underflow in cffrml_receive() {CVE-2025-68799}
- CVE-2025-68302
- net: sxgbe: fix potential NULL dereference in sxgbe_rx() {CVE-2025-68302}
- CVE-2025-40243
- hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits() {CVE-2025-40243}
- CVE-2025-40233
- ocfs2: clear extent cache after moving/defragmenting extents {CVE-2025-40233}
- CVE-2026-23269
- apparmor: validate DFA start states are in bounds in unpack_pdb {CVE-2026-23269}
- CVE-2026-43249
- 9p/xen: protect xen_9pfs_front_free against concurrent calls {CVE-2026-43249}
- CVE-2026-31657
- batman-adv: hold claim backbone gateways by reference {CVE-2026-31657}
- CVE-2026-31598
- ocfs2: fix possible deadlock between unlink and dio_end_io_write {CVE-2026-31598}
- CVE-2026-31768
- iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() {CVE-2026-31768}
- CVE-2026-23216
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() {CVE-2026-23216} *…
- Record
CLSA-2026-1789460387- Updated
- 2026-11-02
OSVCLSA-2026-1791185545 No score
Fix of 63 CVEs
- CVE-2026-64375
- proc: protect ptrace_may_access() with exec_update_lock (FD links) {CVE-2026-64375}
- exec: Add exec_update_mutex to replace cred_guard_mutex {CVE-2026-64375}
- CVE-2026-53266
- netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
- CVE-2025-39964
- crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
- CVE-2025-38068
- crypto: lzo - Fix compression buffer overrun {CVE-2025-38068}
- CVE-2024-56570
- ovl: Filter invalid inodes with missing lookup function {CVE-2024-56570}
- CVE-2025-21753
- btrfs: fix use-after-free when attempting to join an aborted transaction {CVE-2025-21753}
- CVE-2026-46116
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete {CVE-2026-46116}
- CVE-2022-49811
- drbd: use after free in drbd_create_device() {CVE-2022-49811}
- CVE-2022-49059
- nfc: nci: add flush_workqueue to prevent uaf {CVE-2022-49059}
- CVE-2025-22004
- net: atm: fix use after free in lec_send() {CVE-2025-22004}
- CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb() {CVE-2025-21764}
- CVE-2025-21762
- arp: use RCU protection in arp_xmit() {CVE-2025-21762}
- CVE-2026-52934
- batman-adv: tvlv: reject oversized TVLV packets {CVE-2026-52934}
- CVE-2026-46090
- ALSA: aloop: Fix peer runtime UAF during format-change stop {CVE-2026-46090}
- CVE-2026-53131
- netfilter: require Ethernet MAC header before using eth_hdr() {CVE-2026-53131}
- CVE-2026-53091
- net: pull headers in qdisc_pkt_len_init() {CVE-2026-53091}
- CVE-2026-52986
- netfilter: nf_conntrack_sip: don't use simple_strtoul {CVE-2026-52986}
- CVE-2025-71116
- libceph: make decode_pool() more resilient against corrupted osdmaps {CVE-2025-71116}
- CVE-2026-43493
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests {CVE-2026-43493}
- CVE-2026-31597
- ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY {CVE-2026-31597}
- CVE-2026-43116
- netfilter: ctnetlink: ensure safe access to master conntrack {CVE-2026-43116}
- CVE-2026-43458
- serial: caif: hold tty->link reference in ldisc_open and ser_release {CVE-2026-43458}
- CVE-2026-53002
- netfilter: conntrack: remove sprintf usage {CVE-2026-53002}
- CVE-2026-46212
- batman-adv: bla: prevent use-after-free when deleting claims {CVE-2026-46212}
- CVE-2026-31787
- xen/privcmd: fix double free via VMA splitting {CVE-2026-31787}
- CVE-2023-53357
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter {CVE-2023-53357}
- CVE-2026-43075
- ocfs2: fix out-of-bounds write in ocfs2_write_end_inline {CVE-2026-43075}
- CVE-2026-43076
- ocfs2: validate inline data i_size during inode read {CVE-2026-43076}
- CVE-2025-38464
- tipc: Fix use-after-free in tipc_conn_close(). {CVE-2025-38464}
- CVE-2026-23269
- apparmor: validate DFA start states are in bounds in unpack_pdb {CVE-2026-23269}
- CVE-2026-43279
- ALSA: usb-audio: Add sanity check for OOB writes at silencing {CVE-2026-43279}
- CVE-2024-36013
- Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect() {CVE-2024-36013}
- CVE-2026-53228
- ipv6: sit: reload inner IPv6 header after GSO offloads {CVE-2026-53228}
- CVE-2026-45970
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down {CVE-2026-45970}
- CVE-2026-52920
- netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920}
- CVE-2026-46270
- power: supply: rt9455: Fix use-after-free in power_supply_changed() {CVE-2026-46270}
- CVE-2026-46259
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() {CVE-2026-46259}
- CVE-2026-52998
- netfilter: xt_osf: fix potential NULL…
- Record
CLSA-2026-1791185545- Updated
- 2026-11-02
OSVCLSA-2026-1792749577 No score
kernel: Fix of 97 CVEs
- net: skbuff: propagate shared-frag marker in skb_zerocopy()
- net: bridge: stop fast-leave after deleting a port group {CVE-2026-74480}
- net: ipv6: clear suppressed fib6 rule result {CVE-2026-74581}
- net/sched: fix pedit partial COW leading to page cache corruption {CVE-2026-46331}
- ipvs: do not propagate one-packet flag to synced conns {CVE-2026-80714}
- net: skbuff: propagate shared-frag marker through frag-transfer helpers {CVE-2026-43503}
- sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START {CVE-2026-98130}
- tipc: require net admin for TIPCv2 netlink mutators {CVE-2026-74283}
- sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks {CVE-2026-53004}
- usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() {CVE-2026-63962}
- ice: fix double-free of tx_buf skb {CVE-2026-53009}
- configfs: unhash the dentry before dropping the item in rmdir {CVE-2026-97949}
- configfs_lookup(): don't leave ->s_dentry dangling on failure {CVE-2026-74359}
- xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() {CVE-2026-53239}
- bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops {CVE-2026-53078}
- crypto: authencesn - reject short ahash digests during instance creation {CVE-2026-46033}
- smb: client: reject userspace cifs.idmap descriptions {CVE-2026-97564}
- HID: lg-g15: cancel pending work on remove to fix a use-after-free {CVE-2026-64362}
- HID: hidpp: fix potential UAF in hidpp_connect_event() {CVE-2026-93826}
- hid: hid-logitech-hidpp: avoid unnecessary assignments in hidpp_connect_event {CVE-2026-93826}
- KEYS: encrypted: fix integer overflow of datablob_len {CVE-2026-98222}
- scsi: qla2xxx: Skip vport under deletion in report ID acquisition {CVE-2026-97531}
- dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() {CVE-2026-98343}
- tipc: prevent snt_unacked underflow on CONN_ACK {CVE-2026-74282}
- libceph: Fix potential null-ptr-deref in decode_choose_args() {CVE-2026-52957}
- libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() {CVE-2026-52956}
- sctp: prevent peer transport count overflow {CVE-2026-74469}
- sctp: fix addr_wq_timer race in sctp_free_addr_wq() {CVE-2026-72383}
- sctp: fix err_chunk memory leaks in INIT handling {CVE-2026-72413}
- nvme: add missing SRCU grace period in error path {CVE-2026-89972}
- nvme-tcp: fix host memory disclosure on R2T for a read command {CVE-2026-89481}
- drm/vmwgfx: validate DRAW_PRIMITIVES header size before division {CVE-2026-74444}
- drm/amd/display: Fix dangling pointer in CRTC reset function {CVE-2026-93175}
- nouveau/gem: reserve the bo in the info ioctl around the vma lookup {CVE-2026-89553}
- usb: fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-93117}
- usb: xusbatm: don't rely on id table pointer arithmetic {CVE-2026-97539}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() {CVE-2026-53195}
- wifi: brcmsmac: fix UAF in brcms_free_timer() {CVE-2026-98196}
- slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() {CVE-2026-90057}
- vxlan: re-fetch eth header after route_shortcircuit() {CVE-2026-80681}
- net: thunderbolt: Fix frags[] overflow by bounding frame_count {CVE-2026-72157}
- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() {CVE-2026-46181}
- wifi: ath9k: fix OOB access from firmware tx status queue ID {CVE-2026-74408}
- ppp: require CAP_NET_ADMIN in target netns for unattached ioctls {CVE-2026-53075}
- wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() {CVE-2026-46069}
- Bluetooth: btusb: fix use-after-free on registration failure {CVE-2026-64471}
- scsi: target: iscsi: Reserve a terminator byte for the login payload {CVE-2026-90011}
- scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() {CVE-2026-46149}
- pNFS: Fix use-after-free in pnfs_update_layout() {CVE-2026-63800}
- NFSv4/flexfiles: reject zero filehandle version count {CVE-2026-53392}
- fs/mbcache: cancel shrink work before destroying the…
- Record
CLSA-2026-1792749577- Updated
- 2026-11-02
OSVCLSA-2026-1792750763 No score
kernel: Fix of 91 CVEs
- net: skbuff: propagate shared-frag marker in skb_zerocopy()
- net: bridge: stop fast-leave after deleting a port group {CVE-2026-74480}
- net: ipv6: clear suppressed fib6 rule result {CVE-2026-74581}
- net/sched: fix pedit partial COW leading to page cache corruption {CVE-2026-46331}
- ipvs: do not propagate one-packet flag to synced conns {CVE-2026-80714}
- net: skbuff: propagate shared-frag marker through frag-transfer helpers {CVE-2026-43503}
- smb: client: harden POSIX SID length parsing {CVE-2026-64380}
- RDMA: Fix use-after-free in rxe_queue_cleanup {CVE-2021-47616}
- nfsd: validate symlink target length in NFSv4 CREATE {CVE-2026-89699}
- sctp: fix addr_wq_timer race in sctp_free_addr_wq() {CVE-2026-72383}
- isofs: fix out-of-bounds page array access on empty zisofs block {CVE-2026-89778}
- configfs: unhash the dentry before dropping the item in rmdir {CVE-2026-97949}
- netfilter: ipset: fix race between dump and ip_set_list resize {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read {CVE-2026-53268}
- ipvs: clear the svc scheduler ptr early on edit {CVE-2026-53270}
- netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920}
- media: cx23885: cancel NetUP CI work before teardown {CVE-2026-89893}
- dmaengine: Fix possible use after free {CVE-2026-72476}
- net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring {CVE-2026-64047}
- tipc: prevent snt_unacked underflow on CONN_ACK {CVE-2026-74282}
- xfrm: hold net_device reference under RCU in bundle creation {CVE-2026-98364}
- xfrm: Check for underflow in xfrm_state_mtu {CVE-2026-64009}
- net: mpls: clear inner_protocol when the last label is popped {CVE-2026-97612}
- net: guard timestamp cmsgs to real error queue skbs {CVE-2026-53223}
- thunderbolt: Bound root directory content to block size {CVE-2026-53149}
- SUNRPC: always drain cache_cleaner before destroying a cache_detail {CVE-2026-89548}
- SUNRPC: harden gss_krb5_unwrap_v2 against short tokens {CVE-2026-89542}
- SUNRPC: svcauth_gss: enforce krb5 token minimum length {CVE-2026-89550}
- SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 {CVE-2026-89537}
- SUNRPC: make sure cache entry active before cache_show {CVE-2024-53174}
- ipv6: fix fib6 walker UAF on seq stop {CVE-2026-97940}
- ipv6: sr: restore network header before routing and forwarding {CVE-2026-98096}
- ipv6: sit: reload inner IPv6 header after GSO offloads {CVE-2026-53228}
- ipv6: mcast: Fix use-after-free when processing MLD queries {CVE-2026-53275}
- ipv6: exthdrs: refresh nh after handling HAO option {CVE-2026-63922}
- ip6_gre: Use cached t->net in ip6erspan_changelink(). {CVE-2026-46120}
- ipv6: fix possible UAF in icmpv6_rcv() {CVE-2026-53006}
- ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() {CVE-2026-64002}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count {CVE-2026-64276}
- ACPICA: Add validation for node in acpi_ns_build_normalized_path() {CVE-2026-97448}
- scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() {CVE-2026-46149}
- usb: xusbatm: don't rely on id table pointer arithmetic {CVE-2026-97539}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() {CVE-2026-53195}
- mrp: introduce active flags to prevent UAF when applicant uninit {CVE-2022-50697}
- HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature {CVE-2026-89729}
- net/sched: defer qdisc freeing after failed creation {CVE-2026-98017}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp {CVE-2026-53071}
- Bluetooth: L2CAP: Fix invalid access if ECRED Reconfigure fails {CVE-2026-53071}
- scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation {CVE-2026-89856}
- drm: fix race between partial drm_dev_register() failure and ioctl {CVE-2026-89823}
- drm/amd/pm: bound pp_dpm_set_pp_table() memcpy {CVE-2026-97427}
- dm log: fix out-of-bounds write due to region_count overflow {CVE-2026-53059} -…
- Record
CLSA-2026-1792750763- Updated
- 2026-11-02
OSVCLSA-2026-1792759740 No score
kernel: Fix of 134 CVEs
- net: skbuff: propagate shared-frag marker in skb_zerocopy()
- net: bridge: stop fast-leave after deleting a port group {CVE-2026-74480}
- net: ipv6: clear suppressed fib6 rule result {CVE-2026-74581}
- ipvs: do not propagate one-packet flag to synced conns {CVE-2026-80714}
- net: skbuff: propagate shared-frag marker through frag-transfer helpers {CVE-2026-43503}
- net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow {CVE-2026-98025}
- ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF {CVE-2026-98116}
- sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START {CVE-2026-98130}
- dm cache policy smq: check allocation under invalidate lock {CVE-2026-53265}
- RDMA/siw: Bound fragmented header copies by the remaining length {CVE-2026-98323}
- tty: clear cdev pointer after cdev_add() failure {CVE-2026-90334}
- tty: skip cdev_del() when no cdev is registered {CVE-2026-90335}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() {CVE-2026-46259}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL {CVE-2026-46227}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() {CVE-2026-46209}
- drm: Remove plane hsub/vsub alignment requirement for core helpers {CVE-2026-46209}
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path {CVE-2026-46189}
- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() {CVE-2026-46181}
- scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() {CVE-2026-46149}
- RDMA/rxe: Reject unknown opcodes before ICRC processing {CVE-2026-46133}
- ip6_gre: Use cached t->net in ip6erspan_changelink(). {CVE-2026-46120}
- libceph: Fix slab-out-of-bounds access in auth message processing {CVE-2026-46119}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers {CVE-2026-46056}
- net: qrtr: ns: Fix use-after-free in driver remove() {CVE-2026-46047}
- RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv {CVE-2026-46043}
- gfs2: Fix use-after-free in iomap inline data write path {CVE-2026-45984}
- gfs2: Add metapath_dibh helper {CVE-2026-45984}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down {CVE-2026-45970}
- gfs2: Fix slab-use-after-free in qd_put {CVE-2026-45861}
- RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send {CVE-2026-45856}
- dm: fix a buffer overflow in ioctl processing {CVE-2026-46294}
- wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task {CVE-2026-46180}
- netfilter: nf_log: validate MAC header was set before dumping it {CVE-2026-52942}
- xfrm: espintcp: do not reuse an in-progress partial send {CVE-2026-52935}
- sctp: purge outqueue on stale COOKIE-ECHO handling {CVE-2026-52924}
- ipc: limit next_id allocation to the valid ID range {CVE-2026-52923}
- netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920}
- netfilter: nf_queue: hold bridge skb->dev while queued {CVE-2026-52912}
- ipvs: clear the svc scheduler ptr early on edit {CVE-2026-53270}
- netfilter: conntrack_irc: fix possible out-of-bounds read {CVE-2026-53268}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle {CVE-2026-53264}
- Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() {CVE-2026-53256}
- Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
- xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() {CVE-2026-53239}
- ipv6: sit: reload inner IPv6 header after GSO offloads {CVE-2026-53228}
- net: guard timestamp cmsgs to real error queue skbs {CVE-2026-53223}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() {CVE-2026-53195}
- wifi: nl80211: reject oversized EMA RNR lists {CVE-2026-53182}
- netfilter: require Ethernet MAC header before using eth_hdr() {CVE-2026-53131}
- bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops {CVE-2026-53078}
- ppp: require CAP_NET_ADMIN in target…
- Record
CLSA-2026-1792759740- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:10954-1 No score
kernel-devel-7.0.11-1.1 on GA media
These are all security issues fixed in the kernel-devel-7.0.11-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:10954-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:21555-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
- CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
- CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
- CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
- CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
- CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
- CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
- CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
- CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
- CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
- CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
- CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
- CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
- CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
- CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
- CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
- CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
- CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
- CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
- CVE-2026-46023: dm mirror: fix integer…
- Record
openSUSE-SU-2026:21555-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23066-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
- CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
- CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
- CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
- CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
- CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
- CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
- CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
- CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
- CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
- CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
- CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
- CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
- CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
- CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
- CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
- CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
- CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
- CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
- CVE-2026-46023: dm mirror: fix integer…
- Record
SUSE-SU-2026:23066-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23068-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
- CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
- CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
- CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
- CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
- CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
- CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
- CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
- CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
- CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
- CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
- CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
- CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
- CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
- CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
- CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
- CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
- CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
- CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
- CVE-2026-46023: dm mirror: fix integer…
- Record
SUSE-SU-2026:23068-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23221-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
- CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
- CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
- CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
- CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
- CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
- CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
- CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
- CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
- CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
- CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
- CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
- CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
- CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
- CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
- CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
- CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
- CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
- CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
- CVE-2026-46023: dm mirror: fix integer…
- Record
SUSE-SU-2026:23221-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23231-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
- CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
- CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
- CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
- CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
- CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
- CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
- CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
- CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
- CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
- CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
- CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
- CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
- CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
- CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
- CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
- CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
- CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
- CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
- CVE-2026-46023: dm mirror: fix integer…
- Record
SUSE-SU-2026:23231-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23237-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
- CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
- CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
- CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
- CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
- CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
- CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
- CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
- CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
- CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
- CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
- CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
- CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
- CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
- CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
- CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
- CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
- CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
- CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
- CVE-2026-46023: dm mirror: fix integer…
- Record
SUSE-SU-2026:23237-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:24181-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
- CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
- CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298).
- CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
- CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017).
- CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
- CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
- CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
- CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
- CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
- CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
- CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
- CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
- CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
- CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
- CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
- CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
- CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
- CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
- CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
- CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
- CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
- CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
- CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
- CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
- CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
- CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
- CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
- CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
- CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
- CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
- CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
- CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
- CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
- CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
- CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
- CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870).
- CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
- CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
- CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).
- CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420). -…
- Record
SUSE-SU-2026:24181-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:24182-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
- CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
- CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298).
- CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
- CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017).
- CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
- CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
- CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
- CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
- CVE-2026-53090: bpf: Fix ld_{abs,ind} failure path analysis in subprogs (bsc#1269532).
- CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1271955).
- CVE-2026-68162: sctp: avoid auth_enable sysctl UAF during netns teardown (bsc#1274920).
- CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277).
- CVE-2026-72084: scsi: target: Bound PR-OUT TransportID parsing to the received buffer (bsc#1275540).
- CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
- CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
- CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
- CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
- CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
- CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
- CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
- CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
- CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
- CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
- CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
- CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
- CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
- CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
- CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
- CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
- CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
- CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
- CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
- CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
- CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
- CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
- CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
- CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
- CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
- CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
- CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
- CVE-2026-64279: i2c:…
- Record
SUSE-SU-2026:24182-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:24315-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
- CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
- CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298).
- CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
- CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017).
- CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
- CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
- CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
- CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
- CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
- CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
- CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
- CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
- CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
- CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
- CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
- CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
- CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
- CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
- CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
- CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
- CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
- CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
- CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
- CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
- CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
- CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
- CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
- CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
- CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
- CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
- CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
- CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
- CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
- CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
- CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
- CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870).
- CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
- CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
- CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).
- CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420). -…
- Record
SUSE-SU-2026:24315-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:24316-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
- CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
- CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298).
- CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
- CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017).
- CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
- CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
- CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
- CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
- CVE-2026-53090: bpf: Fix ld_{abs,ind} failure path analysis in subprogs (bsc#1269532).
- CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1271955).
- CVE-2026-68162: sctp: avoid auth_enable sysctl UAF during netns teardown (bsc#1274920).
- CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277).
- CVE-2026-72084: scsi: target: Bound PR-OUT TransportID parsing to the received buffer (bsc#1275540).
- CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
- CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
- CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
- CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
- CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
- CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
- CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
- CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
- CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
- CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
- CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
- CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
- CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
- CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
- CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
- CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
- CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
- CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
- CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
- CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
- CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
- CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
- CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
- CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
- CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
- CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
- CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
- CVE-2026-64279: i2c:…
- Record
SUSE-SU-2026:24316-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:3594-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
- CVE-2026-31510: Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb (bsc#1262603).
- CVE-2026-31624: HID: core: clamp report_size in s32ton() to avoid undefined shift (bsc#1263657).
- CVE-2026-43068: ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() (bsc#1264255).
- CVE-2026-43069: Bluetooth: hci_ll: Fix firmware leak on error path (bsc#1264190).
- CVE-2026-43123: fbcon: check return value of con2fb_acquire_newinfo() (bsc#1264598).
- CVE-2026-43124: pstore: ram_core: fix incorrect success return when vmap() fails (bsc#1264545).
- CVE-2026-43156: net: usb: pegasus: enable basic endpoint checking (bsc#1265092).
- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
- CVE-2026-43180: net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode (bsc#1265093).
- CVE-2026-43211: PCI: Fix pci_slot_trylock() error handling (bsc#1264387).
- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
- CVE-2026-43226: net/rds: No shortcut out of RDS_CONN_ERROR (bsc#1264544).
- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
- CVE-2026-43253: iommu/amd: move wait_on_sem() out of spinlock (bsc#1264419).
- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
- CVE-2026-43268: hfsplus: pretend special inodes as regular files (bsc#1265083).
- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
- CVE-2026-43287: drm: Account property blob allocations to memcg (bsc#1265037).
- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
- CVE-2026-43313: ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() (bsc#1264821).
- CVE-2026-43370: drm/amdgpu: Fix use-after-free race in VM acquire (bsc#1264782).
- CVE-2026-43373: net: ncsi: fix skb leak in error paths (bsc#1265079).
- CVE-2026-43383: net/tcp-md5: Fix MAC comparison to be constant-time (bsc#1264744).
- CVE-2026-43425: usb: image: mdc800: kill download URB on timeout (bsc#1265133).
- CVE-2026-43427: usb: class: cdc-wdm: fix reordering issue in read code path (bsc#1264746).
- CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
- CVE-2026-43449: nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set (bsc#1265023).
- CVE-2026-43450: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (bsc#1264794).
- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
- CVE-2026-43452: netfilter: x_tables: guard option walkers against 1-byte tail reads (bsc#1265142).
- CVE-2026-43466: net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (bsc#1264790).
- CVE-2026-43493: crypto: pcrypt - Fix handling of MAY_BACKLOG requests (bsc#1265627).
- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
- CVE-2026-45857: scsi: csiostor: Fix dereference of null pointer rn (bsc#1266458).
- CVE-2026-45858: ext4: subdivide EXT4_EXT_DATA_VALID1 (bsc#1266773).
- CVE-2026-45871: tpm: st33zp24: Fix missing cleanup on get_burstcount() error (bsc#1266755).
- CVE-2026-45877: HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (bsc#1266468).
- CVE-2026-45899: ext4: drop extent cache when splitting extent fails (bsc#1266883).
- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
- CVE-2026-45915:…
- Record
SUSE-SU-2026:3594-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:4640-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
- CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
- CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
- CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
- CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
- CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
- CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
- CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
- CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
- CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
- CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
- CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
- CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
- CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
- CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
- CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
- CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
- CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
- CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
- CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
- CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
- CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
- CVE-2026-63987: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES (bsc#1272971).
- CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
- CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
- CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
- CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
- CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
- CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
- CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
- CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
- CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
- CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
- CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
- CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870).
- CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
- CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
- CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).
- CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420).
- CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).
- CVE-2026-64373: cpufreq: Fix hotplug-suspend race during…
- Record
SUSE-SU-2026:4640-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:4706-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
- CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
- CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
- CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
- CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
- CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
- CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
- CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
- CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
- CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
- CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
- CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
- CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
- CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
- CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
- CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
- CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
- CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
- CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
- CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
- CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
- CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
- CVE-2026-63987: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES (bsc#1272971).
- CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
- CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
- CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
- CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
- CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
- CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
- CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
- CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
- CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
- CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
- CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
- CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870).
- CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
- CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
- CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).
- CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420).
- CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).
- CVE-2026-64373: cpufreq: Fix hotplug-suspend race during…
- Record
SUSE-SU-2026:4706-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernelAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-64kAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-64k-coreAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-64k-debugAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-64k-debug-coreAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-64k-debug-develAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-64k-debug-devel-matchedAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-64k-debug-modulesAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-64k-debug-modules-coreAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-64k-debug-modules-extraAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
Show 290 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-64k-develAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-64k-devel-matchedAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-64k-modulesAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-64k-modules-coreAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-64k-modules-extraAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-abi-stablelistsAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-coreAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-cross-headersAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-debugAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-debug-coreAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-debug-develAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-debug-devel-matchedAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-debug-modulesAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-debug-modules-coreAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-debug-modules-extraAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-debug-uki-virtAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-develAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-devel-matchedAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-docAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-headersAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-modulesAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-modules-coreAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-modules-extraAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-rtAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-rt-64kAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-rt-64k-coreAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-rt-64k-debugAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-rt-64k-debug-coreAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-rt-64k-debug-develAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-rt-64k-debug-modulesAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-rt-64k-debug-modules-coreAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-rt-64k-debug-modules-extraAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-rt-64k-develAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-rt-64k-modulesAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-rt-64k-modules-coreAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-rt-64k-modules-extraAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-rt-coreAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-rt-debugAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-rt-debug-coreAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-rt-debug-develAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-rt-debug-modulesAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-rt-debug-modules-coreAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernel-rt-debug-modules-extraAlmaLinux:9 From an advisory covering 17 CVEs |
before 5.14.0-687.46.1.el9_8 | 5.14.0-687.46.1.el9_8 |
kernelAzure Linux:3 |
before 6.6.141.1-1 | 6.6.141.1-1 |
linux-ltsAlpaquita:23 |
6.1.174-r0 up to 6.1.175-r0 | 6.1.175-r0 |
linux-ltsAlpaquita:25 |
6.12.87-r0 up to 6.12.92-r0 | 6.12.92-r0 |
linux-ltsAlpaquita:stream |
6.12.92-r1 up to 6.18.35-r1 | 6.18.35-r1 |
bpftoolTuxCare:CentOS:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernelTuxCare:CentOS:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-debugTuxCare:CentOS:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-debug-develTuxCare:CentOS:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-develTuxCare:CentOS:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-docTuxCare:CentOS:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-headersTuxCare:CentOS:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-toolsTuxCare:CentOS:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-tools-libsTuxCare:CentOS:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-tools-libs-develTuxCare:CentOS:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
perfTuxCare:CentOS:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
python-perfTuxCare:CentOS:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
bpftoolTuxCare:OracleLinux:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernelTuxCare:OracleLinux:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-debugTuxCare:OracleLinux:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-debug-develTuxCare:OracleLinux:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-develTuxCare:OracleLinux:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-docTuxCare:OracleLinux:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-headersTuxCare:OracleLinux:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-toolsTuxCare:OracleLinux:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-tools-libsTuxCare:OracleLinux:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-tools-libs-develTuxCare:OracleLinux:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
perfTuxCare:OracleLinux:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
python-perfTuxCare:OracleLinux:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
bpftoolTuxCare:RHEL:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernelTuxCare:RHEL:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-debugTuxCare:RHEL:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-debug-develTuxCare:RHEL:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-develTuxCare:RHEL:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-docTuxCare:RHEL:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-headersTuxCare:RHEL:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-toolsTuxCare:RHEL:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-tools-libsTuxCare:RHEL:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-tools-libs-develTuxCare:RHEL:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
perfTuxCare:RHEL:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
python-perfTuxCare:RHEL:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
linux-buildinfo-4.15.0-264-genericTuxCare:Ubuntu:16.04 From an advisory covering 124 CVEs |
before 4.15.0-264.275~16.04.1+tuxcare.els1 | 4.15.0-264.275~16.04.1+tuxcare.els1 |
linux-buildinfo-4.15.0-264-lowlatencyTuxCare:Ubuntu:16.04 From an advisory covering 124 CVEs |
before 4.15.0-264.275~16.04.1+tuxcare.els1 | 4.15.0-264.275~16.04.1+tuxcare.els1 |
linux-cloud-tools-4.15.0-264-genericTuxCare:Ubuntu:16.04 From an advisory covering 124 CVEs |
before 4.15.0-264.275~16.04.1+tuxcare.els1 | 4.15.0-264.275~16.04.1+tuxcare.els1 |
linux-cloud-tools-4.15.0-264-lowlatencyTuxCare:Ubuntu:16.04 From an advisory covering 124 CVEs |
before 4.15.0-264.275~16.04.1+tuxcare.els1 | 4.15.0-264.275~16.04.1+tuxcare.els1 |
linux-headers-4.15.0-264TuxCare:Ubuntu:16.04 From an advisory covering 124 CVEs |
before 4.15.0-264.275~16.04.1+tuxcare.els1 | 4.15.0-264.275~16.04.1+tuxcare.els1 |
linux-headers-4.15.0-264-genericTuxCare:Ubuntu:16.04 From an advisory covering 124 CVEs |
before 4.15.0-264.275~16.04.1+tuxcare.els1 | 4.15.0-264.275~16.04.1+tuxcare.els1 |
linux-headers-4.15.0-264-lowlatencyTuxCare:Ubuntu:16.04 From an advisory covering 124 CVEs |
before 4.15.0-264.275~16.04.1+tuxcare.els1 | 4.15.0-264.275~16.04.1+tuxcare.els1 |
linux-hwe-cloud-tools-4.15.0-264TuxCare:Ubuntu:16.04 From an advisory covering 124 CVEs |
before 4.15.0-264.275~16.04.1+tuxcare.els1 | 4.15.0-264.275~16.04.1+tuxcare.els1 |
linux-hwe-tools-4.15.0-264TuxCare:Ubuntu:16.04 From an advisory covering 124 CVEs |
before 4.15.0-264.275~16.04.1+tuxcare.els1 | 4.15.0-264.275~16.04.1+tuxcare.els1 |
linux-image-unsigned-4.15.0-264-genericTuxCare:Ubuntu:16.04 From an advisory covering 124 CVEs |
before 4.15.0-264.275~16.04.1+tuxcare.els1 | 4.15.0-264.275~16.04.1+tuxcare.els1 |
linux-image-unsigned-4.15.0-264-lowlatencyTuxCare:Ubuntu:16.04 From an advisory covering 124 CVEs |
before 4.15.0-264.275~16.04.1+tuxcare.els1 | 4.15.0-264.275~16.04.1+tuxcare.els1 |
linux-modules-4.15.0-264-genericTuxCare:Ubuntu:16.04 From an advisory covering 124 CVEs |
before 4.15.0-264.275~16.04.1+tuxcare.els1 | 4.15.0-264.275~16.04.1+tuxcare.els1 |
linux-modules-4.15.0-264-lowlatencyTuxCare:Ubuntu:16.04 From an advisory covering 124 CVEs |
before 4.15.0-264.275~16.04.1+tuxcare.els1 | 4.15.0-264.275~16.04.1+tuxcare.els1 |
linux-modules-extra-4.15.0-264-genericTuxCare:Ubuntu:16.04 From an advisory covering 124 CVEs |
before 4.15.0-264.275~16.04.1+tuxcare.els1 | 4.15.0-264.275~16.04.1+tuxcare.els1 |
linux-source-4.15.0TuxCare:Ubuntu:16.04 From an advisory covering 124 CVEs |
before 4.15.0-264.275~16.04.1+tuxcare.els1 | 4.15.0-264.275~16.04.1+tuxcare.els1 |
linux-tools-4.15.0-264-genericTuxCare:Ubuntu:16.04 From an advisory covering 124 CVEs |
before 4.15.0-264.275~16.04.1+tuxcare.els1 | 4.15.0-264.275~16.04.1+tuxcare.els1 |
linux-tools-4.15.0-264-lowlatencyTuxCare:Ubuntu:16.04 From an advisory covering 124 CVEs |
before 4.15.0-264.275~16.04.1+tuxcare.els1 | 4.15.0-264.275~16.04.1+tuxcare.els1 |
KernelLinux |
2.6.38 up to 5.10.258, 5.11.0 up to 5.15.209, 5.16.0 up to 6.1.175, 6.2.0 up to 6.6.140, 6.7.0 up to 6.12.88, 6.13.0 up to 6.18.30, 6.19.0 up to 7.0.7 | 5.10.2585.15.2096.1.1756.6.1406.12.886.18.307.0.7 |
linuxDebian:12 |
before 6.1.176-1, plus listed versions 6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1 Show 45 moreShow less6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.170-16.1.170-26.1.170-36.1.172-16.1.174-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-1 |
6.1.176-1 |
linuxDebian:13 |
before 6.12.88-1, plus listed versions 6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-1 Show 16 moreShow less6.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-1~bpo12+1 |
6.12.88-1 |
linuxDebian:14 |
before 7.0.7-1, plus listed versions 6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1 Show 45 moreShow less6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1 |
7.0.7-1 |
kernelopenEuler:22.03-LTS-SP4 From an advisory covering 14 CVEs |
before 5.10.0-321.0.0.223.oe2203sp4 | 5.10.0-321.0.0.223.oe2203sp4 |
kernel-64k-debug-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-64k-debug-develRed Hat:enterprise_linux:9::appstream From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-64k-debug-devel-matchedRed Hat:enterprise_linux:9::appstream From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-64k-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-64k-develRed Hat:enterprise_linux:9::appstream From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-64k-devel-matchedRed Hat:enterprise_linux:9::appstream From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-debug-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-debug-develRed Hat:enterprise_linux:9::appstream From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-debug-devel-matchedRed Hat:enterprise_linux:9::appstream From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-debuginfo-common-aarch64Red Hat:enterprise_linux:9::appstream From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-debuginfo-common-ppc64leRed Hat:enterprise_linux:9::appstream From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-debuginfo-common-s390xRed Hat:enterprise_linux:9::appstream From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:9::appstream From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-develRed Hat:enterprise_linux:9::appstream From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-devel-matchedRed Hat:enterprise_linux:9::appstream From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-docRed Hat:enterprise_linux:9::appstream From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-rt-64k-debug-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-rt-64k-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-rt-debug-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-rt-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-tools-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-zfcpdump-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-zfcpdump-develRed Hat:enterprise_linux:9::appstream From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-zfcpdump-devel-matchedRed Hat:enterprise_linux:9::appstream From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
libperf-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
perfRed Hat:enterprise_linux:9::appstream From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
perf-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
python3-perfRed Hat:enterprise_linux:9::appstream From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
python3-perf-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
rtlaRed Hat:enterprise_linux:9::appstream From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
rvRed Hat:enterprise_linux:9::appstream From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernelRed Hat:enterprise_linux:9::baseos From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-64kRed Hat:enterprise_linux:9::baseos From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-64k-coreRed Hat:enterprise_linux:9::baseos From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-64k-debugRed Hat:enterprise_linux:9::baseos From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-64k-debug-coreRed Hat:enterprise_linux:9::baseos From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-64k-debug-debuginfoRed Hat:enterprise_linux:9::baseos From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-64k-debug-modulesRed Hat:enterprise_linux:9::baseos From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-64k-debug-modules-coreRed Hat:enterprise_linux:9::baseos From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-64k-debug-modules-extraRed Hat:enterprise_linux:9::baseos From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-64k-debuginfoRed Hat:enterprise_linux:9::baseos From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-64k-modulesRed Hat:enterprise_linux:9::baseos From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-64k-modules-coreRed Hat:enterprise_linux:9::baseos From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-64k-modules-extraRed Hat:enterprise_linux:9::baseos From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-abi-stablelistsRed Hat:enterprise_linux:9::baseos From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-coreRed Hat:enterprise_linux:9::baseos From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-debugRed Hat:enterprise_linux:9::baseos From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-debug-coreRed Hat:enterprise_linux:9::baseos From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-debug-debuginfoRed Hat:enterprise_linux:9::baseos From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-debug-modulesRed Hat:enterprise_linux:9::baseos From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-debug-modules-coreRed Hat:enterprise_linux:9::baseos From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-debug-modules-extraRed Hat:enterprise_linux:9::baseos From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernelRocky Linux:9 From an advisory covering 17 CVEs |
before 0:5.14.0-687.46.1.el9_8 | 0:5.14.0-687.46.1.el9_8 |
kernel-rtRocky Linux:8 From an advisory covering 15 CVEs |
before 0:4.18.0-553.162.1.rt7.503.el8_10 | 0:4.18.0-553.162.1.rt7.503.el8_10 |
kernelRocky Linux:8 From an advisory covering 15 CVEs |
before 0:4.18.0-553.162.1.el8_10 | 0:4.18.0-553.162.1.el8_10 |
kernelRocky Linux:10 From an advisory covering 25 CVEs |
before 0:6.12.0-211.55.1.el10_2 | 0:6.12.0-211.55.1.el10_2 |
linuxRoot:Debian:11 |
before 5.10.262-1.aikido.113 | 5.10.262-1.aikido.1135.10.262-1.aikido.114 |
rootio-linuxRoot:Debian:11 |
before 5.10.262-1.aikido.113 | 5.10.262-1.aikido.1135.10.262-1.aikido.114 |
linuxRoot:Debian:12 |
before 6.1.190-1.aikido.167 | 6.1.190-1.aikido.167 |
rootio-linuxRoot:Debian:12 |
before 6.1.190-1.aikido.167 | 6.1.190-1.aikido.167 |
linuxRoot:Ubuntu:22.04 |
before 5.15.0-203.213.aikido.119 | 5.15.0-203.213.aikido.119 |
rootio-linuxRoot:Ubuntu:22.04 |
before 5.15.0-203.213.aikido.119 | 5.15.0-203.213.aikido.119 |
linuxRoot:Ubuntu:24.04 |
before 6.8.0-149.149.aikido.91 | 6.8.0-149.149.aikido.91 |
rootio-linuxRoot:Ubuntu:24.04 |
before 6.8.0-149.149.aikido.91 | 6.8.0-149.149.aikido.91 |
kernel-obs-buildSUSE:Linux Micro Extras 6.2 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-symsSUSE:Linux Micro Extras 6.2 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-64kbSUSE:Linux Micro 6.2 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-defaultSUSE:Linux Micro 6.2 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-default-baseSUSE:Linux Micro 6.2 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1.160000.2.19 | 6.12.0-160000.37.1.160000.2.19 |
kernel-rtSUSE:Linux Micro 6.2 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-sourceSUSE:Linux Micro 6.2 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-64kbSUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-azureSUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-defaultSUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-default-baseSUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1.160000.2.19 | 6.12.0-160000.37.1.160000.2.19 |
kernel-docsSUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-kvmsmallSUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-obs-qaSUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-sourceSUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-symsSUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-zfcpdumpSUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-64kbSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-azureSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-defaultSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-default-baseSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1.160000.2.19 | 6.12.0-160000.37.1.160000.2.19 |
kernel-docsSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-kvmsmallSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-obs-qaSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-sourceSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-symsSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-zfcpdumpSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-defaultSUSE:Linux Enterprise High Availability Extension 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-defaultSUSE:Linux Micro 6.1 From an advisory covering 473 CVEs |
before 6.4.0-159998.53.1 | 6.4.0-159998.53.1 |
kernel-default-baseSUSE:Linux Micro 6.1 From an advisory covering 473 CVEs |
before 6.4.0-159998.53.1.159998.21.38 | 6.4.0-159998.53.1.159998.21.38 |
kernel-kvmsmallSUSE:Linux Micro 6.1 From an advisory covering 473 CVEs |
before 6.4.0-159998.53.1 | 6.4.0-159998.53.1 |
kernel-sourceSUSE:Linux Micro 6.1 From an advisory covering 473 CVEs |
before 6.4.0-159998.53.1 | 6.4.0-159998.53.1 |
podmanSUSE:Linux Micro 6.2 From an advisory covering 479 CVEs |
before 5.4.2-160000.6.1 | 5.4.2-160000.6.1 |
kernel-rtSUSE:Linux Micro 6.1 From an advisory covering 479 CVEs |
before 6.4.0-159998.53.1 | 6.4.0-159998.53.1 |
kernel-source-rtSUSE:Linux Micro 6.1 From an advisory covering 479 CVEs |
before 6.4.0-159998.53.1 | 6.4.0-159998.53.1 |
kernel-defaultSUSE:Linux Micro 6.0 From an advisory covering 473 CVEs |
before 6.4.0-159998.53.1 | 6.4.0-159998.53.1 |
kernel-default-baseSUSE:Linux Micro 6.0 From an advisory covering 473 CVEs |
before 6.4.0-159998.53.1.159998.21.38 | 6.4.0-159998.53.1.159998.21.38 |
kernel-kvmsmallSUSE:Linux Micro 6.0 From an advisory covering 473 CVEs |
before 6.4.0-159998.53.1 | 6.4.0-159998.53.1 |
kernel-sourceSUSE:Linux Micro 6.0 From an advisory covering 473 CVEs |
before 6.4.0-159998.53.1 | 6.4.0-159998.53.1 |
kernel-rtSUSE:Linux Micro 6.0 From an advisory covering 479 CVEs |
before 6.4.0-159998.53.1 | 6.4.0-159998.53.1 |
kernel-source-rtSUSE:Linux Micro 6.0 From an advisory covering 479 CVEs |
before 6.4.0-159998.53.1 | 6.4.0-159998.53.1 |
kernel-defaultSUSE:Linux Enterprise Live Patching 12 SP5 From an advisory covering 189 CVEs |
before 4.12.14-122.323.1 | 4.12.14-122.323.1 |
kgraft-patch-SLE12-SP5_Update_86SUSE:Linux Enterprise Live Patching 12 SP5 From an advisory covering 189 CVEs |
before 1-8.3.1 | 1-8.3.1 |
kernel-defaultSUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 189 CVEs |
before 4.12.14-122.323.1 | 4.12.14-122.323.1 |
kernel-sourceSUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 189 CVEs |
before 4.12.14-122.323.1 | 4.12.14-122.323.1 |
kernel-symsSUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 189 CVEs |
before 4.12.14-122.323.1 | 4.12.14-122.323.1 |
kernel-defaultSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 189 CVEs |
before 4.12.14-122.323.1 | 4.12.14-122.323.1 |
kernel-sourceSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 189 CVEs |
before 4.12.14-122.323.1 | 4.12.14-122.323.1 |
kernel-symsSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 189 CVEs |
before 4.12.14-122.323.1 | 4.12.14-122.323.1 |
kernel-livepatch-SLE15-SP7-RT_Update_21SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 508 CVEs |
before 1-150700.1.3.1 | 1-150700.1.3.1 |
kernel-rtSUSE:Real Time Module 15 SP7 From an advisory covering 508 CVEs |
before 6.4.0-150700.7.78.1 | 6.4.0-150700.7.78.1 |
kernel-source-rtSUSE:Real Time Module 15 SP7 From an advisory covering 508 CVEs |
before 6.4.0-150700.7.78.1 | 6.4.0-150700.7.78.1 |
kernel-syms-rtSUSE:Real Time Module 15 SP7 From an advisory covering 508 CVEs |
before 6.4.0-150700.7.78.1 | 6.4.0-150700.7.78.1 |
linuxUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 3.11.0-12.193.12.0-1.33.12.0-2.53.12.0-2.73.12.0-3.8 Show 45 moreShow less3.12.0-3.93.12.0-4.103.12.0-4.123.12.0-5.133.12.0-7.153.13.0-1.163.13.0-2.173.13.0-3.183.13.0-4.193.13.0-5.203.13.0-6.233.13.0-7.253.13.0-7.263.13.0-8.273.13.0-8.283.13.0-10.303.13.0-11.313.13.0-12.323.13.0-13.333.13.0-14.343.13.0-15.353.13.0-16.363.13.0-17.373.13.0-18.383.13.0-19.393.13.0-19.403.13.0-20.423.13.0-21.433.13.0-22.443.13.0-23.453.13.0-24.463.13.0-24.473.13.0-27.503.13.0-29.533.13.0-30.543.13.0-30.553.13.0-32.573.13.0-33.583.13.0-34.603.13.0-35.623.13.0-36.633.13.0-37.643.13.0-39.663.13.0-40.693.13.0-41.70 |
None known |
linux-awsUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9 Show 45 moreShow less4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80 |
None known |
linux-azureUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2 Show 45 moreShow less4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1 |
None known |
linux-lts-xenialUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1 Show 45 moreShow less4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1 |
None known |
linuxUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11 Show 45 moreShow less4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96 |
None known |
linux-awsUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18 Show 45 moreShow less4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93 |
None known |
linux-aws-hweUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1 Show 45 moreShow less4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1 |
None known |
linux-azureUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15 Show 45 moreShow less4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71 |
None known |
linux-gcpUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9 Show 45 moreShow less4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1 |
None known |
linux-hweUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1 Show 45 moreShow less4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1 |
None known |
linux-hwe-edgeUbuntu:16.04:LTS |
All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1 |
None known |
linux-kvmUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15 Show 45 moreShow less4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.674.4.0-1062.694.4.0-1063.704.4.0-1064.714.4.0-1065.724.4.0-1066.734.4.0-1068.754.4.0-1069.764.4.0-1070.774.4.0-1071.784.4.0-1075.824.4.0-1076.834.4.0-1077.84 |
None known |
linux-oracleUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1 Show 45 moreShow less4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1 |
None known |
linux-fipsUbuntu:Pro:FIPS-updates:16.04:LTS |
All versions, plus listed versions 4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13 Show 45 moreShow less4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78 |
None known |
linux-fipsUbuntu:Pro:FIPS:16.04:LTS |
All versions, plus listed versions 4.4.0-1001.14.4.0-1002.2 |
None known |
linuxUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11 Show 45 moreShow less4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107 |
None known |
linux-awsUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7 Show 45 moreShow less4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87 |
None known |
linux-aws-5.0Ubuntu:18.04:LTS |
All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30 |
None known |
linux-aws-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37 |
None known |
linux-aws-5.4Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2 |
None known |
linux-azureUbuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38 |
None known |
linux-azure-4.15Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102 Show 45 moreShow less4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176 |
None known |
linux-azure-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36 |
None known |
linux-azure-5.4Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1 Show 45 moreShow less5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1 |
None known |
linux-azure-edgeUbuntu:18.04:LTS |
All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2 |
None known |
linux-gcpUbuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35 |
None known |
linux-gcp-4.15Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92 Show 45 moreShow less4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161 |
None known |
linux-gcp-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1 |
None known |
linux-gcp-5.4Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2 |
None known |
linux-gke-4.15Ubuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84 |
None known |
linux-gke-5.4Ubuntu:18.04:LTS |
All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1 |
None known |
linux-gkeop-5.4Ubuntu:18.04:LTS |
All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1 |
None known |
linux-hweUbuntu:18.04:LTS |
All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72 |
None known |
linux-hwe-5.4Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2 Show 45 moreShow less5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1 |
None known |
linux-hwe-edgeUbuntu:18.04:LTS |
All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2 |
None known |
linux-ibm-5.4Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1 Show 45 moreShow less5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1 |
None known |
linux-kvmUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8 Show 45 moreShow less4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83 |
None known |
linux-oemUbuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114 |
None known |
linux-oracleUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13 Show 45 moreShow less4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88 |
None known |
linux-oracle-5.0Ubuntu:18.04:LTS |
All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19 |
None known |
linux-oracle-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1 |
None known |
linux-oracle-5.4Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1 |
None known |
linux-raspi-5.4Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1 Show 45 moreShow less5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1 |
None known |
linux-aws-fipsUbuntu:Pro:FIPS-updates:18.04:LTS |
All versions, plus listed versions 4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24 Show 45 moreShow less4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93 |
None known |
linux-azure-fipsUbuntu:Pro:FIPS-updates:18.04:LTS |
All versions, plus listed versions 4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10 Show 45 moreShow less4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80 |
None known |
linux-fipsUbuntu:Pro:FIPS-updates:18.04:LTS |
All versions, plus listed versions 4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42 Show 45 moreShow less4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110 |
None known |
linux-gcp-fipsUbuntu:Pro:FIPS-updates:18.04:LTS |
All versions, plus listed versions 4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21 Show 45 moreShow less4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.794.15.0-2075.804.15.0-2076.814.15.0-2077.83 |
None known |
linux-aws-fipsUbuntu:Pro:FIPS:18.04:LTS |
All versions, plus listed versions 4.15.0-2000.4 |
None known |
linux-azure-fipsUbuntu:Pro:FIPS:18.04:LTS |
All versions, plus listed versions 4.15.0-1002.2 |
None known |
linux-fipsUbuntu:Pro:FIPS:18.04:LTS |
All versions, plus listed versions 4.15.0-1011.12 |
None known |
linux-gcp-fipsUbuntu:Pro:FIPS:18.04:LTS |
All versions, plus listed versions 4.15.0-1001.1 |
None known |
linuxUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25 Show 45 moreShow less5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110 |
None known |
linux-awsUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5 Show 45 moreShow less5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78 |
None known |
kernel-sourceopenSUSE:Tumbleweed From an advisory covering 274 CVEs |
before 7.0.11-1.1 | 7.0.11-1.1 |
dtb-aarch64openSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-64kbopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-azureopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-defaultopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-default-baseopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1.160000.2.19 | 6.12.0-160000.37.1.160000.2.19 |
kernel-docsopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-kvmsmallopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-obs-buildopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-obs-qaopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-rtopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-sourceopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-symsopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-zfcpdumpopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | OSV | |
| affected | OSV | |
| affected | OSV | |
| affected | OSV | |
| affected | OSV | |
| facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-46149 is a high vulnerability (CVSS 7.1) in Linux, published May 28, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.14%, the 3rd percentile. Fixed in kernel 6.6.141.1-1.
References
git.kernel.org/stable/c/d3cc9d490c207d57a289054397349f6f8c90354e
Show 194 moreShow less
cert-portal.siemens.com/productcert/html/ssa-784472.html
nvd.nist.gov/vuln/detail/CVE-2026-46149
github.com/advisories/GHSA-vvx9-xfcg-g62v
access.redhat.com/errata/RHSA-2026:66180
bugzilla.redhat.com/2467065
errata.almalinux.org/9/ALSA-2026-66180.html
docs.bell-sw.com/security/cves/CVE-2026-46149
errata.tuxcare.com/els_os/centos7els/CLSA-2026-1788170774.html
security-tracker.debian.org/tracker/CVE-2026-46149
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2026-2871
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_66180.json
cve.org/CVERecord?id=CVE-2026-43133
lore.kernel.org/linux-cve-announce/2026050622-CVE-2026-43133-ffea@gregkh/T
errata.rockylinux.org/RLSA-2026:66180
suse.com/support/update/announcement/2026/suse-su-202623066-1
bugzilla.suse.com/1185845
ubuntu.com/security/CVE-2026-46149
This page doesn't list everything
Left out here: 1,075 package rows, 2,509 versions, 6,328 references and the rest of 24 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 38 source records.