Every CVE Search/ Get API key

CVE-2026-46173

exit: prevent preemption of oopsing TASK_DEAD task

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

exit: prevent preemption of oopsing TASK_DEAD task

When an already-exiting task oopses, make_task_dead() currently calls do_task_dead() with preemption enabled. That is forbidden: do_task_dead() calls __schedule(), which has a comment saying "WARNING: must be called with preemption disabled!".

If an oopsing task is preempted in do_task_dead(), between becoming TASK_DEAD and entering the scheduler explicitly, bad things happen: finish_task_switch() assumes that once the scheduler has switched away from a TASK_DEAD task, the task can never run again and its stack is no longer needed; but that assumption apparently doesn't hold if the dead task was preempted (the SM_PREEMPT case).

This means that the scheduler ends up repeatedly dropping references on the dead task's stack, which can lead to use-after-free or double-free of the entire task stack; in other words, two tasks can end up running on the same stack, resulting in various kinds of memory corruption.

(This does not just affect "recursively oopsing" tasks; it is enough to oops once during task exit, for example in a file_operations::release handler)

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.13%Up 0.1 points since May 28, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.8

exit: prevent preemption of oopsing TASK_DEAD task

In the Linux kernel, the following vulnerability has been resolved:

exit: prevent preemption of oopsing TASK_DEAD task

When an already-exiting task oopses, make_task_dead() currently calls do_task_dead() with preemption enabled. That is forbidden: do_task_dead() calls __schedule(), which has a comment saying "WARNING: must be called with preemption disabled!".

If an oopsing task is preempted in do_task_dead(), between becoming TASK_DEAD and entering the scheduler explicitly, bad things happen: finish_task_switch() assumes that once the scheduler has switched away from a TASK_DEAD task, the task can never run again and its stack is no longer needed; but that assumption apparently doesn't hold if the dead task was preempted (the SM_PREEMPT case).

This means that the scheduler ends up repeatedly dropping references on the dead task's stack, which can lead to use-after-free or double-free of the entire task stack; in other words, two tasks can end up running on the same stack, resulting in various kinds of memory corruption.

(This does not just affect "recursively oopsing" tasks; it is enough to oops once during task exit, for example in a file_operations::release handler)

Record
CVE-2026-46173
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
EUVDEUVD-2026-32800 7.8

In the Linux kernel, the following vulnerability has been resolved:

exit: prevent preemption of oopsing TASK_DEAD task

When an already-exiting task oopses, make_task_dead() currently calls do_task_dead() with preemption enabled. That is forbidden: do_task_dead() calls __schedule(), which has a comment saying "WARNING: must be called with preemption disabled!".

If an oopsing task is preempted in do_task_dead(), between becoming TASK_DEAD and entering the scheduler explicitly, bad things happen: finish_task_switch() assumes that once the scheduler has switched away from a TASK_DEAD task, the task can never run again and its stack is no longer needed; but that assumption apparently doesn't hold if the dead task was preempted (the SM_PREEMPT case).

This means that the scheduler ends up repeatedly dropping references on the dead task's stack, which can lead to use-after-free or double-free of the entire task stack; in other words, two tasks can end up running on the same stack, resulting in various kinds of memory corruption.

(This does not just affect "recursively oopsing" tasks; it is enough to oops once during task exit, for example in a file_operations::release handler)

Record
EUVD-2026-32800
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-mpr4-2mm3-rwm6 7.8

In the Linux kernel, the following vulnerability has been resolved: exit: prevent preemption of...

In the Linux kernel, the following vulnerability has been resolved:

exit: prevent preemption of oopsing TASK_DEAD task

When an already-exiting task oopses, make_task_dead() currently calls do_task_dead() with preemption enabled. That is forbidden: do_task_dead() calls __schedule(), which has a comment saying "WARNING: must be called with preemption disabled!".

If an oopsing task is preempted in do_task_dead(), between becoming TASK_DEAD and entering the scheduler explicitly, bad things happen: finish_task_switch() assumes that once the scheduler has switched away from a TASK_DEAD task, the task can never run again and its stack is no longer needed; but that assumption apparently doesn't hold if the dead task was preempted (the SM_PREEMPT case).

This means that the scheduler ends up repeatedly dropping references on the dead task's stack, which can lead to use-after-free or double-free of the entire task stack; in other words, two tasks can end up running on the same stack, resulting in various kinds of memory corruption.

(This does not just affect "recursively oopsing" tasks; it is enough to oops once during task exit, for example in a file_operations::release handler)

Record
GHSA-mpr4-2mm3-rwm6
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416, CWE-787
Updated
2026-11-02
NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

exit: prevent preemption of oopsing TASK_DEAD task

When an already-exiting task oopses, make_task_dead() currently calls do_task_dead() with preemption enabled. That is forbidden: do_task_dead() calls __schedule(), which has a comment saying "WARNING: must be called with preemption disabled!".

If an oopsing task is preempted in do_task_dead(), between becoming TASK_DEAD and entering the scheduler explicitly, bad things happen: finish_task_switch() assumes that once the scheduler has switched away from a TASK_DEAD task, the task can never run again and its stack is no longer needed; but that assumption apparently doesn't hold if the dead task was preempted (the SM_PREEMPT case).

This means that the scheduler ends up repeatedly dropping references on the dead task's stack, which can lead to use-after-free or double-free of the entire task stack; in other words, two tasks can end up running on the same stack, resulting in various kinds of memory corruption.

(This does not just affect "recursively oopsing" tasks; it is enough to oops once during task exit, for example in a file_operations::release handler)

Record
CVE-2026-46173
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-787, CWE-416
Updated
2026-11-02
OSVBELL-CVE-2026-46173 7.8
Record
BELL-CVE-2026-46173
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 7.8

exit: prevent preemption of oopsing TASK_DEAD task

In the Linux kernel, the following vulnerability has been resolved:

exit: prevent preemption of oopsing TASK_DEAD task

When an already-exiting task oopses, make_task_dead() currently calls do_task_dead() with preemption enabled. That is forbidden: do_task_dead() calls __schedule(), which has a comment saying "WARNING: must be called with preemption disabled!".

If an oopsing task is preempted in do_task_dead(), between becoming TASK_DEAD and entering the scheduler explicitly, bad things happen: finish_task_switch() assumes that once the scheduler has switched away from a TASK_DEAD task, the task can never run again and its stack is no longer needed; but that assumption apparently doesn't hold if the dead task was preempted (the SM_PREEMPT case).

This means that the scheduler ends up repeatedly dropping references on the dead task's stack, which can lead to use-after-free or double-free of the entire task stack; in other words, two tasks can end up running on the same stack, resulting in various kinds of memory corruption.

(This does not just affect "recursively oopsing" tasks; it is enough to oops once during task exit, for example in a file_operations::release handler)

Record
CVE-2026-46173
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 48 moreShow less
OSVDEBIAN-CVE-2026-46173 7.8

In the Linux kernel, the following vulnerability has been resolved: exit: prevent preemption of oopsing TASK_DEAD task When an already-exiting task oopses, make_task_dead() currently calls do_task_dead() with preemption enabled. That is forbidden: do_task_dead() calls __schedule(), which has a comment saying "WARNING: must be called with preemption disabled!". If an oopsing task is preempted in do_task_dead(), between becoming TASK_DEAD and entering the scheduler explicitly, bad things happen: finish_task_switch() assumes that once the scheduler has switched away from a TASK_DEAD task, the task can never run again and its stack is no longer needed; but that assumption apparently doesn't hold if the dead task was preempted (the SM_PREEMPT case). This means that the scheduler ends up repeatedly dropping references on the dead task's stack, which can lead to use-after-free or double-free of the entire task stack; in other words, two tasks can end up running on the same stack, resulting in various kinds of memory corruption. (This does not just affect "recursively oopsing" tasks; it is enough to oops once during task exit, for example in a file_operations::release handler)

Record
DEBIAN-CVE-2026-46173
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:27288 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:27288
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:27713 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:27713
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:27789 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:27789
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:33900 7.8

Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Record
RHSA-2026:33900
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:34094 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:34094
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:34095 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:34095
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:39371 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:39371
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:27288 7.8

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CVE-2026-31474)

  • kernel: mptcp: fix slab-use-after-free in __inet_lookup_established (CVE-2026-31669)

  • kernel: rxrpc: Fix RxGK token loading to check bounds (CVE-2026-31641)

  • kernel: xen/privcmd: fix double free via VMA splitting (CVE-2026-31787)

  • kernel: Buffer overflow in drivers/xen/sys-hypervisor.c (CVE-2026-31786)

  • kernel: net: mana: fix use-after-free in add_adev() error path (CVE-2026-43056)

  • kernel: Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CVE-2026-31772)

  • kernel: bnxt_en: Fix RSS context delete logic (CVE-2026-43260)

  • kernel: crypto: caam - fix overflow on long hmac keys (CVE-2026-43330)

  • kernel: net/sched: act_pedit: extend the writable skb range per key (CVE-2026-46331)

  • kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CVE-2026-46056)

  • kernel: wifi: mac80211: drop stray 'static' from fast-RX rx_result (CVE-2026-46152)

  • kernel: wifi: mac80211: remove station if connection prep fails (CVE-2026-46125)

  • kernel: exit: prevent preemption of oopsing TASK_DEAD task (CVE-2026-46173)

  • kernel: wifi: mac80211: use safe list iteration in radar detect work (CVE-2026-46166)

Bug Fix(es) and Enhancement(s):

  • Rocky Linux10.0 - s390/ap: Expose ap_bindings_complete_count counter via sysfs [rhel-10.2.z] (JIRA:Rocky Linux-166047)

  • Rocky Linux9.5 crash due to lpfc NULL ndlp->vport [rhel-10.2.z] (JIRA:Rocky Linux-171774)

  • objtool static_call check blocks build of out-of-tree livepatch modules on Rocky Linux 10.2 GA kernels ? missing upstream revert f495054bd12e (JIRA:Rocky Linux-178495)

  • ibmveth Adapter Freeze with Small MSS [rhel-10.2.z] (JIRA:Rocky Linux-179723)

  • rbd: eliminate a race in lock_dwork draining on unmap [rhel-10.2.z] (JIRA:Rocky Linux-183127)

  • Rocky Linux10.0 - s390/mm: Add missing secure storage access fixups [rhel-10.2.z] (JIRA:Rocky Linux-183319)

  • [Rocky Linux10.2.z] Enable Pretimeout Watchdog Panic Functionality on x86 (JIRA:Rocky Linux-182299)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:27288
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:27789 7.8

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CVE-2026-31474)

  • kernel: mptcp: fix slab-use-after-free in __inet_lookup_established (CVE-2026-31669)

  • kernel: xen/privcmd: fix double free via VMA splitting (CVE-2026-31787)

  • kernel: Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CVE-2026-31772)

  • kernel: bnxt_en: Fix RSS context delete logic (CVE-2026-43260)

  • kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing (CVE-2026-43279)

  • kernel: scsi: qla2xxx: Completely fix fcport double free (CVE-2026-43414)

  • kernel: net/sched: act_pedit: extend the writable skb range per key (CVE-2026-46331)

  • kernel: gfs2: Fix use-after-free in iomap inline data write path (CVE-2026-45984)

  • kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CVE-2026-46056)

  • kernel: wifi: mac80211: drop stray 'static' from fast-RX rx_result (CVE-2026-46152)

  • kernel: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CVE-2026-46117)

  • kernel: RDMA/mana: Validate rx_hash_key_len (CVE-2026-46145)

  • kernel: wifi: mac80211: remove station if connection prep fails (CVE-2026-46125)

  • kernel: exit: prevent preemption of oopsing TASK_DEAD task (CVE-2026-46173)

  • kernel: wifi: mac80211: use safe list iteration in radar detect work (CVE-2026-46166)

  • kernel: nvmet-tcp: fix race between ICReq handling and queue teardown (CVE-2026-46135)

Bug Fix(es) and Enhancement(s):

  • Rocky Linux9.4 - s390/ap: Expose ap_bindings_complete_count counter via sysfs [rhel-9.8.z] (JIRA:Rocky Linux-166048)

  • [Rocky Linux 9.8] Hung tasks during both suspend and hibernate operations on systems with Intel E810 NICs [rhel-9.8.z] (JIRA:Rocky Linux-175699)

  • DPLL: Add support for pin operational state [rhel-9.8.z] (JIRA:Rocky Linux-175820)

  • DPLL: Add support for fractional frequency offset between pin and device [rhel-9.8.z] (JIRA:Rocky Linux-175823)

  • ibmveth Adapter Freeze with Small MSS [rhel-9.8.z] (JIRA:Rocky Linux-178308)

  • Rocky Linux9.4 - s390/mm: Add missing secure storage access fixups [rhel-9.8.z] (JIRA:Rocky Linux-183317)

  • rbd: eliminate a race in lock_dwork draining on unmap [rhel-9.8.z] (JIRA:Rocky Linux-183130)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:27789
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2026-46173 7.0

CVE-2026-46173 in linux - Patched by Root

Root has patched CVE-2026-46173 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2026-46173
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-UBUNTU-2404-CVE-2026-46173 7.0

CVE-2026-46173 in linux - Patched by Root

Root has patched CVE-2026-46173 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2404-CVE-2026-46173
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVUBUNTU-CVE-2026-46173 7.8

In the Linux kernel, the following vulnerability has been resolved: exit: prevent preemption of oopsing TASK_DEAD task When an already-exiting task oopses, make_task_dead() currently calls do_task_dead() with preemption enabled. That is forbidden: do_task_dead() calls __schedule(), which has a comment saying "WARNING: must be called with preemption disabled!". If an oopsing task is preempted in do_task_dead(), between becoming TASK_DEAD and entering the scheduler explicitly, bad things happen: finish_task_switch() assumes that once the scheduler has switched away from a TASK_DEAD task, the task can never run again and its stack is no longer needed; but that assumption apparently doesn't hold if the dead task was preempted (the SM_PREEMPT case). This means that the scheduler ends up repeatedly dropping references on the dead task's stack, which can lead to use-after-free or double-free of the entire task stack; in other words, two tasks can end up running on the same stack, resulting in various kinds of memory corruption. (This does not just affect "recursively oopsing" tasks; it is enough to oops once during task exit, for example in a file_operations::release handler)

Record
UBUNTU-CVE-2026-46173
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVALSA-2026:27288 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CVE-2026-31474)
  • kernel: mptcp: fix slab-use-after-free in __inet_lookup_established (CVE-2026-31669)
  • kernel: rxrpc: Fix RxGK token loading to check bounds (CVE-2026-31641)
  • kernel: xen/privcmd: fix double free via VMA splitting (CVE-2026-31787)
  • kernel: Buffer overflow in drivers/xen/sys-hypervisor.c (CVE-2026-31786)
  • kernel: net: mana: fix use-after-free in add_adev() error path (CVE-2026-43056)
  • kernel: Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CVE-2026-31772)
  • kernel: bnxt_en: Fix RSS context delete logic (CVE-2026-43260)
  • kernel: crypto: caam - fix overflow on long hmac keys (CVE-2026-43330)
  • kernel: net/sched: act_pedit: extend the writable skb range per key (CVE-2026-46331)
  • kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CVE-2026-46056)
  • kernel: wifi: mac80211: drop stray 'static' from fast-RX rx_result (CVE-2026-46152)
  • kernel: wifi: mac80211: remove station if connection prep fails (CVE-2026-46125)
  • kernel: exit: prevent preemption of oopsing TASK_DEAD task (CVE-2026-46173)
  • kernel: wifi: mac80211: use safe list iteration in radar detect work (CVE-2026-46166)

Bug Fix(es) and Enhancement(s):

  • AlmaLinux10.0 - s390/ap: Expose ap_bindings_complete_count counter via sysfs [almalinux-10.2.z] (JIRA:AlmaLinux-166047)
  • AlmaLinux9.5 crash due to lpfc NULL ndlp->vport [almalinux-10.2.z] (JIRA:AlmaLinux-171774)
  • objtool static_call check blocks build of out-of-tree livepatch modules on AlmaLinux 10.2 GA kernels ? missing upstream revert f495054bd12e (JIRA:AlmaLinux-178495)
  • ibmveth Adapter Freeze with Small MSS [almalinux-10.2.z] (JIRA:AlmaLinux-179723)
  • rbd: eliminate a race in lock_dwork draining on unmap [almalinux-10.2.z] (JIRA:AlmaLinux-183127)
  • AlmaLinux10.0 - s390/mm: Add missing secure storage access fixups [almalinux-10.2.z] (JIRA:AlmaLinux-183319)
  • [AlmaLinux10.2.z] Enable Pretimeout Watchdog Panic Functionality on x86 (JIRA:AlmaLinux-182299)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:27288
Updated
2026-11-02
OSVALSA-2026:27789 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CVE-2026-31474)
  • kernel: mptcp: fix slab-use-after-free in __inet_lookup_established (CVE-2026-31669)
  • kernel: xen/privcmd: fix double free via VMA splitting (CVE-2026-31787)
  • kernel: Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CVE-2026-31772)
  • kernel: bnxt_en: Fix RSS context delete logic (CVE-2026-43260)
  • kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing (CVE-2026-43279)
  • kernel: scsi: qla2xxx: Completely fix fcport double free (CVE-2026-43414)
  • kernel: net/sched: act_pedit: extend the writable skb range per key (CVE-2026-46331)
  • kernel: gfs2: Fix use-after-free in iomap inline data write path (CVE-2026-45984)
  • kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CVE-2026-46056)
  • kernel: wifi: mac80211: drop stray 'static' from fast-RX rx_result (CVE-2026-46152)
  • kernel: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CVE-2026-46117)
  • kernel: RDMA/mana: Validate rx_hash_key_len (CVE-2026-46145)
  • kernel: wifi: mac80211: remove station if connection prep fails (CVE-2026-46125)
  • kernel: exit: prevent preemption of oopsing TASK_DEAD task (CVE-2026-46173)
  • kernel: wifi: mac80211: use safe list iteration in radar detect work (CVE-2026-46166)
  • kernel: nvmet-tcp: fix race between ICReq handling and queue teardown (CVE-2026-46135)

Bug Fix(es) and Enhancement(s):

  • AlmaLinux9.4 - s390/ap: Expose ap_bindings_complete_count counter via sysfs [almalinux-9.8.z] (JIRA:AlmaLinux-166048)
  • [AlmaLinux 9.8] Hung tasks during both suspend and hibernate operations on systems with Intel E810 NICs [almalinux-9.8.z] (JIRA:AlmaLinux-175699)
  • DPLL: Add support for pin operational state [almalinux-9.8.z] (JIRA:AlmaLinux-175820)
  • DPLL: Add support for fractional frequency offset between pin and device [almalinux-9.8.z] (JIRA:AlmaLinux-175823)
  • ibmveth Adapter Freeze with Small MSS [almalinux-9.8.z] (JIRA:AlmaLinux-178308)
  • AlmaLinux9.4 - s390/mm: Add missing secure storage access fixups [almalinux-9.8.z] (JIRA:AlmaLinux-183317)
  • rbd: eliminate a race in lock_dwork draining on unmap [almalinux-9.8.z] (JIRA:AlmaLinux-183130)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:27789
Updated
2026-11-02
OSVAZL-89031 No score

CVE-2026-46173 affecting package kernel for versions less than 6.6.141.1-1

In the Linux kernel, the following vulnerability has been resolved:

exit: prevent preemption of oopsing TASK_DEAD task

When an already-exiting task oopses, make_task_dead() currently calls do_task_dead() with preemption enabled. That is forbidden: do_task_dead() calls __schedule(), which has a comment saying "WARNING: must be called with preemption disabled!".

If an oopsing task is preempted in do_task_dead(), between becoming TASK_DEAD and entering the scheduler explicitly, bad things happen: finish_task_switch() assumes that once the scheduler has switched away from a TASK_DEAD task, the task can never run again and its stack is no longer needed; but that assumption apparently doesn't hold if the dead task was preempted (the SM_PREEMPT case).

This means that the scheduler ends up repeatedly dropping references on the dead task's stack, which can lead to use-after-free or double-free of the entire task stack; in other words, two tasks can end up running on the same stack, resulting in various kinds of memory corruption.

(This does not just affect "recursively oopsing" tasks; it is enough to oops once during task exit, for example in a file_operations::release handler)

Record
AZL-89031
Updated
2026-11-02
OSVCLSA-2026-1789898700 No score

kernel: Fix of 163 CVEs

  • drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON() {CVE-2026-68251}
  • amd/amdkfd: sync all devices to wait all processes being evicted {CVE-2024-36949}
  • Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted {CVE-2024-36909}
  • Drivers: hv: vmbus: Track decrypted status in vmbus_gpadl {CVE-2024-36912}
  • xfs: save ailp before dropping the AIL lock in push callbacks {CVE-2026-31454}
  • net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak {CVE-2026-43041}
  • netfilter: nf_conntrack: destroy stale expectfn expectations on unregister {CVE-2026-53349}
  • cifs: avoid NULL pointer dereference in dbg call {CVE-2025-37844}
  • fs/notify: call exportfs_encode_fid with s_umount {CVE-2025-40237}
  • cifs: fix potential oops in cifs_oplock_break {CVE-2023-54258}
  • pstore/ram: fix buffer overflow in persistent_ram_save_old() {CVE-2026-46253}
  • Bluetooth: ISO: fix iso_conn related locking and validity issues {CVE-2023-54164}
  • netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets {CVE-2026-45873}
  • ext4: always drain queued discard work in ext4_mb_release() {CVE-2026-43065}
  • ipvs: Defer ip_vs_ftp unregister during netns cleanup {CVE-2025-40018}
  • Bluetooth: MGMT: Fix memory leak in set_ssp_complete {CVE-2026-23151}
  • sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto {CVE-2025-40281}
  • fscache: Use wait_on_bit() to wait for the freeing of relinquished volume {CVE-2023-52982}
  • libceph: prevent potential out-of-bounds reads in process_message_header() {CVE-2026-43406}
  • netfilter: nf_tables: reject immediate NF_QUEUE verdict {CVE-2026-43024}
  • ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() {CVE-2025-68261}
  • bpf, sockmap: Fix af_unix iter deadlock {CVE-2026-53035}
  • sctp: stream: fully roll back denied add-stream state {CVE-2026-52929}
  • netfilter: xt_CT: drop pending enqueued packets on template removal {CVE-2026-23391}
  • netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() {CVE-2026-23457}
  • libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() {CVE-2026-43407}
  • af_unix: read UNIX_DIAG_VFS data under unix_state_lock {CVE-2026-31673}
  • jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted {CVE-2025-68337}
  • Bluetooth: Fix NULL pointer deference on eir_get_service_data {CVE-2025-38304}
  • net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption {CVE-2026-31533}
  • fsnotify: do not generate ACCESS/MODIFY events on child for special files {CVE-2025-68788}
  • isofs: validate Rock Ridge CE continuation extent against volume size {CVE-2026-46303}
  • net: strparser: fix skb_head leak in strp_abort_strp() {CVE-2026-46102}
  • sctp: fix uninit-value in __sctp_rcv_asconf_lookup() {CVE-2026-53225}
  • xfs: don't swallow dquot recovery verification errors {CVE-2026-80529}
  • xfs: dquot recovery does not validate the recovered dquot {CVE-2026-80529}
  • bpf: tcp: fix double sock release on batch realloc {CVE-2026-64575}
  • bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch() {CVE-2026-74714}
  • bpf: tcp: Avoid socket skips and repeats during iteration {CVE-2026-74714}
  • bpf: tcp: Use bpf_tcp_iter_batch_item for bpf_tcp_iter_state batch items {CVE-2026-74714}
  • bpf: tcp: Get rid of st_bucket_done {CVE-2026-74714}
  • bpf: tcp: Make sure iter->batch always contains a full bucket snapshot {CVE-2026-64575}
  • bpf: tcp: Make mem flags configurable through bpf_iter_tcp_realloc_batch {CVE-2026-74714}
  • USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343}
  • NFS: Decrement refcounts if allocating nfs_free_stateid_data fails {CVE-2026-74730}
  • NFS: Pin the 'struct nfs_server' during a FREE_STATEID call {CVE-2026-74730}
  • net/atm: fix slab-out-of-bounds read in vcc_setsockopt() {CVE-2026-74689}
  • net: Make copy_safe_from_sockptr() match documentation {CVE-2026-74689}
  • net: add copy_safe_from_sockptr() helper {CVE-2026-74689}
  • xfs: close crash window in attr dabtree…
Record
CLSA-2026-1789898700
Updated
2026-11-02
OSVCLSA-2026-1791800936 No score

kernel: Fix of 191 CVEs

  • drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check {CVE-2026-89818}
  • drm/amdgpu/vcn4: Avoid overflow on msg bound check {CVE-2026-46199}
  • drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg {CVE-2026-46199}
  • drm/amdgpu/vcn3: Avoid overflow on msg bound check {CVE-2026-46230}
  • drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg {CVE-2026-46230}
  • openvswitch: vport: fix self-deadlock on release of tunnel ports {CVE-2026-46165}
  • openvswitch: defer tunnel netdev_put to RCU release {CVE-2026-31678}
  • ALSA: usb: Fix UAF at delayed release of MIDI2 EPs {CVE-2026-74642}
  • ALSA: usb-audio: fix use-after-free in ump_to_endpoint() {CVE-2026-74501}
  • NFS: Decrement refcounts if allocating nfs_free_stateid_data fails {CVE-2026-74730}
  • NFS: Pin the 'struct nfs_server' during a FREE_STATEID call {CVE-2026-74730}
  • exec: do_close_on_exec() before taking exec_update_lock {CVE-2026-64371}
  • proc: Fix broken error paths for namespace links {CVE-2026-64371}
  • proc: protect ptrace_may_access() with exec_update_lock (part 1) {CVE-2026-64371}
  • ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes {CVE-2026-74503}
  • ALSA: timer: Forcibly close timer instances at closing {CVE-2026-53193}
  • usb: typec: ucsi: Fix race condition and ordering in port unregistration {CVE-2026-74441}
  • arp: do not assume dev_hard_header() does not change skb->head {CVE-2026-22988}
  • netfilter: nft_ct: fix use-after-free in timeout object destroy {CVE-2026-31665}
  • md/raid10: fix writes_pending and barrier reference leaks on discard failures {CVE-2026-72438}
  • md/raid10: fix deadlock with check operation and nowait requests {CVE-2026-46050}
  • mm: introduce and use {pgd,p4d}_populate_kernel() {CVE-2025-39844}
  • vsock/virtio: fix zerocopy completion for multi-skb sends {CVE-2026-53365}
  • vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting {CVE-2026-52994}
  • mm: do file ownership checks with the proper mount idmap {CVE-2026-64294}
  • udf: validate VAT header length against the VAT inode size {CVE-2026-64323}
  • SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths {CVE-2026-45870}
  • Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig {CVE-2026-53208}
  • slip: bound decode() reads against the compressed packet length {CVE-2026-45843}
  • net: tls: fix strparser anchor skb leak on offload RX setup failure {CVE-2026-52974}
  • netfilter: nf_tables: unconditionally bump set->nelems before insertion {CVE-2026-23272}
  • rbd: Reset positive result codes to zero in object map update path {CVE-2026-68131}
  • netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() {CVE-2026-23458}
  • mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr {CVE-2025-21938}
  • bpf: Fix NULL deref in map_kptr_match_type for scalar regs {CVE-2026-53032}
  • bpf: Explicitly check accesses to bpf_sock_addr {CVE-2025-40078}
  • nexthop: Forbid FDB status change while nexthop is in a group {CVE-2025-39980}
  • bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN {CVE-2026-31525}
  • x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() {CVE-2025-21913}
  • ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple() {CVE-2024-57994}
  • drm/i915/vrr: require valid min/max vfreq for VRR {CVE-2026-68254}
  • libceph: handle rbtree insertion error in decode_choose_args() {CVE-2026-52954}
  • gfs2: prevent NULL pointer dereference during unmount {CVE-2026-53048}
  • smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path {CVE-2026-31708}
  • ext4: reject mount if bigalloc with s_first_data_block != 0 {CVE-2026-31447}
  • NFSD: Fix crash in nfsd4_read_release() {CVE-2025-40324}
  • netfilter: x_tables: guard option walkers against 1-byte tail reads {CVE-2026-43452}
  • smb: client: Fix refcount leak for cifs_sb_tlink {CVE-2025-40103}
  • smb: client: harden POSIX SID length parsing {CVE-2026-64380}
  • crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() {CVE-2026-64438}
  • bpf: Allow LPM map access from sleepable…
Record
CLSA-2026-1791800936
Updated
2026-11-02
OSVopenSUSE-SU-2026:10954-1 No score

kernel-devel-7.0.11-1.1 on GA media

These are all security issues fixed in the kernel-devel-7.0.11-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10954-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21388-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-10263: arm64: cputype: Add C1-Premium definitions (bsc#1266290).
  • CVE-2025-39894: netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm (bsc#1262430).
  • CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
  • CVE-2026-23248: perf: Make perf_pmu_unregister() useable (bsc#1259800).
  • CVE-2026-23394: Revert: "af_unix: Remove lock dance in unix_peek_fds()." (bsc#1260565).
  • CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
  • CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
  • CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
  • CVE-2026-31438: netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators (bsc#1267824).
  • CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
  • CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
  • CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
  • CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (bsc#1267816).
  • CVE-2026-31479: drm/xe: always keep track of remap prev/next (bsc#1262765).
  • CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
  • CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
  • CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
  • CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
  • CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
  • CVE-2026-31560: spi: spi-dw-dma: fix print error log when wait finish transaction (bsc#1263057).
  • CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
  • CVE-2026-31646: net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() (bsc#1263796).
  • CVE-2026-31647: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (bsc#1263581).
  • CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
  • CVE-2026-31664: xfrm: clear trailing padding in build_polexpire() (bsc#1263578).
  • CVE-2026-31665: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
  • CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
  • CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
  • CVE-2026-31674: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (bsc#1263568).
  • CVE-2026-31680: net: ipv6: flowlabel: defer exclusive option free until RCU teardown (bsc#1263563).
  • CVE-2026-31693: cifs: some missing initializations on replay (bsc#1267744).
  • CVE-2026-31743: nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy (bsc#1264067).
  • CVE-2026-31752: bridge: br_nd_send: validate ND option lengths (bsc#1264045).
  • CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
  • CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
  • CVE-2026-43014,CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010 bsc#1264012).
  • CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
  • CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
  • CVE-2026-43024: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).
  • CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934).
  • CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
  • CVE-2026-43035: net:…
Record
openSUSE-SU-2026:21388-1
Updated
2026-11-02
OSVSUSE-SU-2026:22521-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
  • CVE-2025-71294: drm/amdgpu: fix NULL pointer issue buffer funcs (bsc#1264562).
  • CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
  • CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
  • CVE-2026-31462: drm/amdgpu: prevent immediate PASID reuse case (bsc#1262655).
  • CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
  • CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
  • CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
  • CVE-2026-31677: crypto: af_alg - limit RX SG extraction by receive buffer budget (bsc#1263560).
  • CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
  • CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
  • CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
  • CVE-2026-43079: perf/x86/intel/uncore: Skip discovery table for offline dies (bsc#1264228).
  • CVE-2026-43080: l2tp: Drop large packets with UDP encap (bsc#1264236).
  • CVE-2026-43081: net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ (bsc#1264241).
  • CVE-2026-43085: netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (bsc#1264230).
  • CVE-2026-43086: ipvs: fix NULL deref in ip_vs_add_service error path (bsc#1264286).
  • CVE-2026-43089: xfrm_user: fix info leak in build_mapping() (bsc#1264261).
  • CVE-2026-43093: xsk: tighten UMEM headroom validation to account for tailroom and min frame (bsc#1264254).
  • CVE-2026-43107: xfrm: account XFRMA_IF_ID in aevent size calculation (bsc#1264258).
  • CVE-2026-43128: RDMA/umem: Fix double dma_buf_unpin in failure path (bsc#1264612).
  • CVE-2026-43139: xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (bsc#1264294).
  • CVE-2026-43233: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (bsc#1264337).
  • CVE-2026-43238: net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() (bsc#1264320).
  • CVE-2026-43303: mm/page_alloc: clear page->private in free_pages_prepare() (bsc#1264974).
  • CVE-2026-43336: lib/crypto: chacha: Zeroize permuted_state before it leaves scope (bsc#1265113).
  • CVE-2026-43420: ceph: fix i_nlink underrun during async unlink (bsc#1264814).
  • CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).
  • CVE-2026-43472: unshare: fix unshare_fs() handling (bsc#1264748).
  • CVE-2026-43492: lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() (bsc#1265629).
  • CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
  • CVE-2026-45838: bpf: fix end-of-list detection in cgroup_storage_get_next_key() (bsc#1266396).
  • CVE-2026-45848: apparmor: fix NULL sock in aa_sock_file_perm (bsc#1266734).
  • CVE-2026-45891: net: hns3: fix double free issue for tx spare buffer (bsc#1266717).
  • CVE-2026-45912: ext4: don't cache extent during splitting extent (bsc#1266899).
  • CVE-2026-45948: ext4: fix memory leak in ext4_ext_shift_extents() (bsc#1266929).
  • CVE-2026-45985: ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O (bsc#1266700).
  • CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).
  • CVE-2026-46053: net: rds: fix MR cleanup on copy error (bsc#1267427).
  • CVE-2026-46063: x86/shstk: Prevent deadlock during shstk sigreturn (bsc#1267228).
  • CVE-2026-46065: fbdev: defio: Disconnect deferred I/O from the lifetime of struct (bsc#1267458).
  • CVE-2026-46069: wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() (bsc#1267437).
  • CVE-2026-46071: KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12 (bsc#1267591).…
Record
SUSE-SU-2026:22521-1
Updated
2026-11-02
OSVSUSE-SU-2026:22522-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
  • CVE-2025-71294: drm/amdgpu: fix NULL pointer issue buffer funcs (bsc#1264562).
  • CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
  • CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
  • CVE-2026-31462: drm/amdgpu: prevent immediate PASID reuse case (bsc#1262655).
  • CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
  • CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
  • CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
  • CVE-2026-31677: crypto: af_alg - limit RX SG extraction by receive buffer budget (bsc#1263560).
  • CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
  • CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
  • CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
  • CVE-2026-43079: perf/x86/intel/uncore: Skip discovery table for offline dies (bsc#1264228).
  • CVE-2026-43080: l2tp: Drop large packets with UDP encap (bsc#1264236).
  • CVE-2026-43081: net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ (bsc#1264241).
  • CVE-2026-43085: netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (bsc#1264230).
  • CVE-2026-43086: ipvs: fix NULL deref in ip_vs_add_service error path (bsc#1264286).
  • CVE-2026-43089: xfrm_user: fix info leak in build_mapping() (bsc#1264261).
  • CVE-2026-43093: xsk: tighten UMEM headroom validation to account for tailroom and min frame (bsc#1264254).
  • CVE-2026-43107: xfrm: account XFRMA_IF_ID in aevent size calculation (bsc#1264258).
  • CVE-2026-43128: RDMA/umem: Fix double dma_buf_unpin in failure path (bsc#1264612).
  • CVE-2026-43139: xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (bsc#1264294).
  • CVE-2026-43233: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (bsc#1264337).
  • CVE-2026-43238: net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() (bsc#1264320).
  • CVE-2026-43303: mm/page_alloc: clear page->private in free_pages_prepare() (bsc#1264974).
  • CVE-2026-43336: lib/crypto: chacha: Zeroize permuted_state before it leaves scope (bsc#1265113).
  • CVE-2026-43420: ceph: fix i_nlink underrun during async unlink (bsc#1264814).
  • CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).
  • CVE-2026-43472: unshare: fix unshare_fs() handling (bsc#1264748).
  • CVE-2026-43492: lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() (bsc#1265629).
  • CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
  • CVE-2026-45838: bpf: fix end-of-list detection in cgroup_storage_get_next_key() (bsc#1266396).
  • CVE-2026-45848: apparmor: fix NULL sock in aa_sock_file_perm (bsc#1266734).
  • CVE-2026-45891: net: hns3: fix double free issue for tx spare buffer (bsc#1266717).
  • CVE-2026-45912: ext4: don't cache extent during splitting extent (bsc#1266899).
  • CVE-2026-45948: ext4: fix memory leak in ext4_ext_shift_extents() (bsc#1266929).
  • CVE-2026-45985: ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O (bsc#1266700).
  • CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).
  • CVE-2026-46053: net: rds: fix MR cleanup on copy error (bsc#1267427).
  • CVE-2026-46063: x86/shstk: Prevent deadlock during shstk sigreturn (bsc#1267228).
  • CVE-2026-46065: fbdev: defio: Disconnect deferred I/O from the lifetime of struct (bsc#1267458).
  • CVE-2026-46069: wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() (bsc#1267437).
  • CVE-2026-46071: KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12…
Record
SUSE-SU-2026:22522-1
Updated
2026-11-02
OSVSUSE-SU-2026:22598-1 No score

Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues

The following security issues were fixed:

  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22598-1
Updated
2026-11-02
OSVSUSE-SU-2026:22665-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
  • CVE-2025-71294: drm/amdgpu: fix NULL pointer issue buffer funcs (bsc#1264562).
  • CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
  • CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
  • CVE-2026-31462: drm/amdgpu: prevent immediate PASID reuse case (bsc#1262655).
  • CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
  • CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
  • CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
  • CVE-2026-31677: crypto: af_alg - limit RX SG extraction by receive buffer budget (bsc#1263560).
  • CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
  • CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
  • CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
  • CVE-2026-43079: perf/x86/intel/uncore: Skip discovery table for offline dies (bsc#1264228).
  • CVE-2026-43080: l2tp: Drop large packets with UDP encap (bsc#1264236).
  • CVE-2026-43081: net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ (bsc#1264241).
  • CVE-2026-43085: netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (bsc#1264230).
  • CVE-2026-43086: ipvs: fix NULL deref in ip_vs_add_service error path (bsc#1264286).
  • CVE-2026-43089: xfrm_user: fix info leak in build_mapping() (bsc#1264261).
  • CVE-2026-43093: xsk: tighten UMEM headroom validation to account for tailroom and min frame (bsc#1264254).
  • CVE-2026-43107: xfrm: account XFRMA_IF_ID in aevent size calculation (bsc#1264258).
  • CVE-2026-43128: RDMA/umem: Fix double dma_buf_unpin in failure path (bsc#1264612).
  • CVE-2026-43139: xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (bsc#1264294).
  • CVE-2026-43233: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (bsc#1264337).
  • CVE-2026-43238: net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() (bsc#1264320).
  • CVE-2026-43303: mm/page_alloc: clear page->private in free_pages_prepare() (bsc#1264974).
  • CVE-2026-43336: lib/crypto: chacha: Zeroize permuted_state before it leaves scope (bsc#1265113).
  • CVE-2026-43420: ceph: fix i_nlink underrun during async unlink (bsc#1264814).
  • CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).
  • CVE-2026-43472: unshare: fix unshare_fs() handling (bsc#1264748).
  • CVE-2026-43492: lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() (bsc#1265629).
  • CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
  • CVE-2026-45838: bpf: fix end-of-list detection in cgroup_storage_get_next_key() (bsc#1266396).
  • CVE-2026-45848: apparmor: fix NULL sock in aa_sock_file_perm (bsc#1266734).
  • CVE-2026-45891: net: hns3: fix double free issue for tx spare buffer (bsc#1266717).
  • CVE-2026-45912: ext4: don't cache extent during splitting extent (bsc#1266899).
  • CVE-2026-45948: ext4: fix memory leak in ext4_ext_shift_extents() (bsc#1266929).
  • CVE-2026-45985: ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O (bsc#1266700).
  • CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).
  • CVE-2026-46053: net: rds: fix MR cleanup on copy error (bsc#1267427).
  • CVE-2026-46063: x86/shstk: Prevent deadlock during shstk sigreturn (bsc#1267228).
  • CVE-2026-46065: fbdev: defio: Disconnect deferred I/O from the lifetime of struct (bsc#1267458).
  • CVE-2026-46069: wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() (bsc#1267437).
  • CVE-2026-46071: KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12 (bsc#1267591).…
Record
SUSE-SU-2026:22665-1
Updated
2026-11-02
OSVSUSE-SU-2026:22666-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
  • CVE-2025-71294: drm/amdgpu: fix NULL pointer issue buffer funcs (bsc#1264562).
  • CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
  • CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
  • CVE-2026-31462: drm/amdgpu: prevent immediate PASID reuse case (bsc#1262655).
  • CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
  • CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
  • CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
  • CVE-2026-31677: crypto: af_alg - limit RX SG extraction by receive buffer budget (bsc#1263560).
  • CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
  • CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
  • CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
  • CVE-2026-43079: perf/x86/intel/uncore: Skip discovery table for offline dies (bsc#1264228).
  • CVE-2026-43080: l2tp: Drop large packets with UDP encap (bsc#1264236).
  • CVE-2026-43081: net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ (bsc#1264241).
  • CVE-2026-43085: netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (bsc#1264230).
  • CVE-2026-43086: ipvs: fix NULL deref in ip_vs_add_service error path (bsc#1264286).
  • CVE-2026-43089: xfrm_user: fix info leak in build_mapping() (bsc#1264261).
  • CVE-2026-43093: xsk: tighten UMEM headroom validation to account for tailroom and min frame (bsc#1264254).
  • CVE-2026-43107: xfrm: account XFRMA_IF_ID in aevent size calculation (bsc#1264258).
  • CVE-2026-43128: RDMA/umem: Fix double dma_buf_unpin in failure path (bsc#1264612).
  • CVE-2026-43139: xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (bsc#1264294).
  • CVE-2026-43233: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (bsc#1264337).
  • CVE-2026-43238: net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() (bsc#1264320).
  • CVE-2026-43303: mm/page_alloc: clear page->private in free_pages_prepare() (bsc#1264974).
  • CVE-2026-43336: lib/crypto: chacha: Zeroize permuted_state before it leaves scope (bsc#1265113).
  • CVE-2026-43420: ceph: fix i_nlink underrun during async unlink (bsc#1264814).
  • CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).
  • CVE-2026-43472: unshare: fix unshare_fs() handling (bsc#1264748).
  • CVE-2026-43492: lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() (bsc#1265629).
  • CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
  • CVE-2026-45838: bpf: fix end-of-list detection in cgroup_storage_get_next_key() (bsc#1266396).
  • CVE-2026-45848: apparmor: fix NULL sock in aa_sock_file_perm (bsc#1266734).
  • CVE-2026-45891: net: hns3: fix double free issue for tx spare buffer (bsc#1266717).
  • CVE-2026-45912: ext4: don't cache extent during splitting extent (bsc#1266899).
  • CVE-2026-45948: ext4: fix memory leak in ext4_ext_shift_extents() (bsc#1266929).
  • CVE-2026-45985: ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O (bsc#1266700).
  • CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).
  • CVE-2026-46053: net: rds: fix MR cleanup on copy error (bsc#1267427).
  • CVE-2026-46063: x86/shstk: Prevent deadlock during shstk sigreturn (bsc#1267228).
  • CVE-2026-46065: fbdev: defio: Disconnect deferred I/O from the lifetime of struct (bsc#1267458).
  • CVE-2026-46069: wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() (bsc#1267437).
  • CVE-2026-46071: KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12…
Record
SUSE-SU-2026:22666-1
Updated
2026-11-02
OSVSUSE-SU-2026:22672-1 No score

Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues

The following security issues were fixed:

  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22672-1
Updated
2026-11-02
OSVSUSE-SU-2026:22673-1 No score

Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-32.1 fixes various security issues

The following security issues were fixed:

  • CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel() (bsc#1263118).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264094).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43437: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265127).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22673-1
Updated
2026-11-02
OSVSUSE-SU-2026:22674-1 No score

Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-34.1 fixes various security issues

The following security issues were fixed:

  • CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel() (bsc#1263118).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264094).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43437: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265127).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22674-1
Updated
2026-11-02
OSVSUSE-SU-2026:22675-1 No score

Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-35.1 fixes various security issues

The following security issues were fixed:

  • CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel() (bsc#1263118).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264094).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43437: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265127).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22675-1
Updated
2026-11-02
OSVSUSE-SU-2026:22676-1 No score

Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues

The following security issues were fixed:

  • CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel() (bsc#1263118).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264094).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43437: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265127).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22676-1
Updated
2026-11-02
OSVSUSE-SU-2026:22677-1 No score

Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues

The following security issues were fixed:

  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel() (bsc#1263118).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264094).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43437: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265127).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22677-1
Updated
2026-11-02
OSVSUSE-SU-2026:22678-1 No score

Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-44.1 fixes various security issues

The following security issues were fixed:

  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22678-1
Updated
2026-11-02
OSVSUSE-SU-2026:22679-1 No score

Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues

The following security issues were fixed:

  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22679-1
Updated
2026-11-02
OSVSUSE-SU-2026:22680-1 No score

Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-30.1 fixes various security issues

The following security issues were fixed:

  • CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel() (bsc#1263118).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264094).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43437: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265127).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22680-1
Updated
2026-11-02
OSVSUSE-SU-2026:22681-1 No score

Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-31.1 fixes various security issues

The following security issues were fixed:

  • CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel() (bsc#1263118).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264094).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43437: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265127).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22681-1
Updated
2026-11-02
OSVSUSE-SU-2026:22682-1 No score

Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues

The following security issues were fixed:

  • CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel() (bsc#1263118).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264094).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43437: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265127).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22682-1
Updated
2026-11-02
OSVSUSE-SU-2026:22683-1 No score

Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues

The following security issues were fixed:

  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel() (bsc#1263118).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264094).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43437: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265127).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22683-1
Updated
2026-11-02
OSVSUSE-SU-2026:22684-1 No score

Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues

The following security issues were fixed:

  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22684-1
Updated
2026-11-02
OSVSUSE-SU-2026:22685-1 No score

Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues

The following security issues were fixed:

  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22685-1
Updated
2026-11-02
OSVSUSE-SU-2026:22686-1 No score

Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues

The following security issues were fixed:

  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22686-1
Updated
2026-11-02
OSVSUSE-SU-2026:22687-1 No score

Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues

The following security issues were fixed:

  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22687-1
Updated
2026-11-02
OSVSUSE-SU-2026:22689-1 No score

Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-37.1 fixes various security issues

The following security issues were fixed:

  • CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel() (bsc#1263118).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264094).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43437: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265127).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22689-1
Updated
2026-11-02
OSVSUSE-SU-2026:22690-1 No score

Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues

The following security issues were fixed:

  • CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel() (bsc#1263118).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264094).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43437: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265127).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22690-1
Updated
2026-11-02
OSVSUSE-SU-2026:22691-1 No score

Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues

The following security issues were fixed:

  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel() (bsc#1263118).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264094).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43437: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265127).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22691-1
Updated
2026-11-02
OSVSUSE-SU-2026:22692-1 No score

Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues

The following security issues were fixed:

  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22692-1
Updated
2026-11-02
OSVSUSE-SU-2026:22693-1 No score

Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues

The following security issues were fixed:

  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22693-1
Updated
2026-11-02
OSVSUSE-SU-2026:22694-1 No score

Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues

The following security issues were fixed:

  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22694-1
Updated
2026-11-02
OSVSUSE-SU-2026:22695-1 No score

Security update for the Linux Kernel RT (Live Patch 22 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues

The following security issues were fixed:

  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22695-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-64k
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-64k-core
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-64k-debug
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-64k-debug-core
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-64k-debug-devel
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-64k-debug-devel-matched
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-64k-debug-modules
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-64k-debug-modules-core
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-64k-debug-modules-extra
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-64k-devel
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-64k-devel-matched
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-64k-modules
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-64k-modules-core
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-64k-modules-extra
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-abi-stablelists
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-core
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-cross-headers
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-debug
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-debug-core
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-debug-devel
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-debug-devel-matched
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-debug-modules
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-debug-modules-core
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-debug-modules-extra
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-debug-uki-virt
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-devel
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-devel-matched
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-doc
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-headers
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-modules
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-modules-core
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-modules-extra
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-modules-extra-matched
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-rt
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-rt-64k
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-rt-64k-core
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-rt-64k-debug
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-rt-64k-debug-core
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-rt-64k-debug-devel
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-rt-64k-debug-modules
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-rt-64k-debug-modules-core
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-rt-64k-debug-modules-extra
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-rt-64k-devel
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-rt-64k-modules
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-rt-64k-modules-core
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-rt-64k-modules-extra
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-rt-core
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-rt-debug
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-rt-debug-core
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-rt-debug-devel
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-rt-debug-modules
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-rt-debug-modules-core
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-rt-debug-modules-extra
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-rt-devel
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel
Azure Linux:3
 before 6.6.141.1-1
6.6.141.1-1
linux-lts
Alpaquita:23
 6.1.174-r0 up to 6.1.175-r0
6.1.175-r0
linux-lts
Alpaquita:25
 6.12.87-r0 up to 6.12.92-r0
6.12.92-r0
linux-lts
Alpaquita:stream
 6.12.92-r1 up to 6.18.35-r1
6.18.35-r1
bpftool
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 7.0.0-284.1101.el9_2.tuxcare.11.els14
7.0.0-284.1101.el9_2.tuxcare.11.els14
kernel
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-abi-stablelists
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-core
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-cross-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-debug-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-debug-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-debug-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-debug-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-debug-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-doc
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-ipaclones-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-selftests-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-tools
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-tools-libs
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-tools-libs-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
libbpf
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.11.els14
2:1.0.0-2.el9_2.tuxcare.11.els14
libbpf-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.11.els14
2:1.0.0-2.el9_2.tuxcare.11.els14
libbpf-static
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.11.els14
2:1.0.0-2.el9_2.tuxcare.11.els14
perf
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
python3-perf
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
rtla
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel
TuxCare:AlmaLinux:9.6
From an advisory covering 197 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els15
5.14.0-570.62.1.el9_6.tuxcare.5.els15
kernel-64k
TuxCare:AlmaLinux:9.6
From an advisory covering 197 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els15
5.14.0-570.62.1.el9_6.tuxcare.5.els15
kernel-64k-core
TuxCare:AlmaLinux:9.6
From an advisory covering 197 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els15
5.14.0-570.62.1.el9_6.tuxcare.5.els15
kernel-64k-debug
TuxCare:AlmaLinux:9.6
From an advisory covering 197 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els15
5.14.0-570.62.1.el9_6.tuxcare.5.els15
kernel-64k-debug-core
TuxCare:AlmaLinux:9.6
From an advisory covering 197 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els15
5.14.0-570.62.1.el9_6.tuxcare.5.els15
kernel-64k-debug-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 197 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els15
5.14.0-570.62.1.el9_6.tuxcare.5.els15
kernel-64k-debug-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 197 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els15
5.14.0-570.62.1.el9_6.tuxcare.5.els15
kernel-64k-debug-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 197 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els15
5.14.0-570.62.1.el9_6.tuxcare.5.els15
kernel-64k-debug-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 197 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els15
5.14.0-570.62.1.el9_6.tuxcare.5.els15
kernel-64k-debug-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 197 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els15
5.14.0-570.62.1.el9_6.tuxcare.5.els15
kernel-64k-debug-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 197 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els15
5.14.0-570.62.1.el9_6.tuxcare.5.els15
kernel-64k-debug-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 197 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els15
5.14.0-570.62.1.el9_6.tuxcare.5.els15
kernel-64k-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 197 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els15
5.14.0-570.62.1.el9_6.tuxcare.5.els15
kernel-64k-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 197 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els15
5.14.0-570.62.1.el9_6.tuxcare.5.els15
kernel-64k-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 197 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els15
5.14.0-570.62.1.el9_6.tuxcare.5.els15
kernel-64k-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 197 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els15
5.14.0-570.62.1.el9_6.tuxcare.5.els15
kernel-64k-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 197 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els15
5.14.0-570.62.1.el9_6.tuxcare.5.els15
kernel-64k-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 197 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els15
5.14.0-570.62.1.el9_6.tuxcare.5.els15
kernel-64k-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 197 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els15
5.14.0-570.62.1.el9_6.tuxcare.5.els15
Kernel
Linux
 5.17.0 up to 6.1.175, 6.2.0 up to 6.6.140, 6.7.0 up to 6.12.88, 6.13.0 up to 6.18.30, 6.19.0 up to 7.0.7
6.1.1756.6.1406.12.886.18.307.0.7
linux
Debian:12
 before 6.1.176-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 45 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.170-16.1.170-26.1.170-36.1.172-16.1.174-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-1
6.1.176-1
linux
Debian:13
 before 6.12.88-1, plus listed versions
6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-1
Show 16 moreShow less
6.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-1~bpo12+1
6.12.88-1
linux
Debian:14
 before 7.0.7-1, plus listed versions
6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1
Show 45 moreShow less
6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1
7.0.7-1
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-64k-debug-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-64k-debug-devel-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-64k-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-64k-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-64k-devel-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-debug-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-debug-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-debug-devel-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-devel-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-doc
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-rt-64k-debug-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-rt-64k-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-rt-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-tools-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-zfcpdump-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-zfcpdump-devel-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
libperf-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
perf
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
perf-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
python3-perf
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
python3-perf-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
rtla
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
rv
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-64k
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-64k-core
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-64k-debug
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-64k-debug-core
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-64k-debug-modules
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-64k-debug-modules-core
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-64k-debug-modules-extra
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-64k-modules
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-64k-modules-core
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-64k-modules-extra
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-abi-stablelists
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-core
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-debug
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-debug-core
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-debug-modules
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-debug-modules-core
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-debug-modules-extra
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-debug-uki-virt
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-modules
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-modules-core
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel-modules-extra
Red Hat:enterprise_linux:10.2
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel
Rocky Linux:10
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel
Rocky Linux:9
From an advisory covering 17 CVEs
 before 0:5.14.0-687.17.1.el9_8
0:5.14.0-687.17.1.el9_8
linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
rootio-linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
rootio-linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
kernel-default
SUSE:Linux Micro 6.0
From an advisory covering 89 CVEs
 before 6.4.0-49.1
6.4.0-49.1
kernel-kvmsmall
SUSE:Linux Micro 6.0
From an advisory covering 89 CVEs
 before 6.4.0-49.1
6.4.0-49.1
kernel-source
SUSE:Linux Micro 6.0
From an advisory covering 89 CVEs
 before 6.4.0-49.1
6.4.0-49.1
kernel-rt
SUSE:Linux Micro 6.0
From an advisory covering 89 CVEs
 before 6.4.0-49.1
6.4.0-49.1
kernel-source-rt
SUSE:Linux Micro 6.0
From an advisory covering 89 CVEs
 before 6.4.0-49.1
6.4.0-49.1
kernel-livepatch-SLE16-RT_Update_9
SUSE:Linux Micro 6.2
From an advisory covering 20 CVEs
 before 4-160000.1.1
4-160000.1.1
kernel-default
SUSE:Linux Micro 6.1
From an advisory covering 89 CVEs
 before 6.4.0-49.1
6.4.0-49.1
kernel-kvmsmall
SUSE:Linux Micro 6.1
From an advisory covering 89 CVEs
 before 6.4.0-49.1
6.4.0-49.1
kernel-source
SUSE:Linux Micro 6.1
From an advisory covering 89 CVEs
 before 6.4.0-49.1
6.4.0-49.1
kernel-rt
SUSE:Linux Micro 6.1
From an advisory covering 89 CVEs
 before 6.4.0-49.1
6.4.0-49.1
kernel-source-rt
SUSE:Linux Micro 6.1
From an advisory covering 89 CVEs
 before 6.4.0-49.1
6.4.0-49.1
kernel-livepatch-MICRO-6-0_Update_24
SUSE:Linux Micro 6.1
From an advisory covering 9 CVEs
 before 2-1.1
2-1.1
kernel-livepatch-MICRO-6-0_Update_10
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
 before 14-1.1
14-1.1
kernel-livepatch-MICRO-6-0_Update_11
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
 before 13-1.1
13-1.1
kernel-livepatch-MICRO-6-0_Update_12
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
 before 13-1.1
13-1.1
kernel-livepatch-MICRO-6-0_Update_13
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
 before 11-1.1
11-1.1
kernel-livepatch-MICRO-6-0_Update_16
SUSE:Linux Micro 6.1
From an advisory covering 24 CVEs
 before 8-1.1
8-1.1
kernel-livepatch-MICRO-6-0_Update_21
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
 before 3-1.1
3-1.1
kernel-livepatch-MICRO-6-0_Update_23
SUSE:Linux Micro 6.1
From an advisory covering 9 CVEs
 before 3-1.1
3-1.1
kernel-livepatch-MICRO-6-0_Update_8
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
 before 20-1.2
20-1.2
kernel-livepatch-MICRO-6-0_Update_9
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
 before 20-1.2
20-1.2
kernel-livepatch-MICRO-6-0_Update_14
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
 before 9-1.2
9-1.2
kernel-livepatch-MICRO-6-0_Update_17
SUSE:Linux Micro 6.1
From an advisory covering 24 CVEs
 before 7-1.1
7-1.1
kernel-livepatch-MICRO-6-0_Update_18
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
 before 6-1.1
6-1.1
kernel-livepatch-MICRO-6-0_Update_19
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
 before 4-1.1
4-1.1
kernel-livepatch-MICRO-6-0_Update_20
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
 before 3-1.1
3-1.1
kernel-livepatch-MICRO-6-0_Update_22
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
 before 3-1.1
3-1.1
kernel-livepatch-MICRO-6-0-RT_Update_13
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
 before 9-1.1
9-1.1
kernel-livepatch-MICRO-6-0-RT_Update_15
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
 before 8-1.1
8-1.1
kernel-livepatch-MICRO-6-0-RT_Update_18
SUSE:Linux Micro 6.1
From an advisory covering 24 CVEs
 before 7-1.1
7-1.1
kernel-livepatch-MICRO-6-0-RT_Update_19
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
 before 6-1.1
6-1.1
kernel-livepatch-MICRO-6-0-RT_Update_20
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
 before 4-1.1
4-1.1
kernel-livepatch-MICRO-6-0-RT_Update_21
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
 before 3-1.1
3-1.1
kernel-livepatch-MICRO-6-0-RT_Update_22
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
 before 3-1.2
3-1.2
kernel-livepatch-MICRO-6-0-RT_Update_14
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
 before 9-1.1
9-1.1
kernel-livepatch-MICRO-6-0-RT_Update_23
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
 before 3-1.1
3-1.1
kernel-livepatch-MICRO-6-0-RT_Update_24
SUSE:Linux Micro 6.1
From an advisory covering 9 CVEs
 before 2-1.1
2-1.1
kernel-livepatch-MICRO-6-0_Update_24
SUSE:Linux Micro 6.0
From an advisory covering 9 CVEs
 before 2-1.1
2-1.1
kernel-livepatch-MICRO-6-0-RT_Update_13
SUSE:Linux Micro 6.0
From an advisory covering 25 CVEs
 before 9-1.1
9-1.1
kernel-livepatch-MICRO-6-0-RT_Update_15
SUSE:Linux Micro 6.0
From an advisory covering 25 CVEs
 before 8-1.1
8-1.1
kernel-livepatch-MICRO-6-0-RT_Update_18
SUSE:Linux Micro 6.0
From an advisory covering 24 CVEs
 before 7-1.1
7-1.1
kernel-livepatch-MICRO-6-0-RT_Update_19
SUSE:Linux Micro 6.0
From an advisory covering 21 CVEs
 before 6-1.1
6-1.1
kernel-livepatch-MICRO-6-0-RT_Update_20
SUSE:Linux Micro 6.0
From an advisory covering 21 CVEs
 before 4-1.1
4-1.1
kernel-livepatch-MICRO-6-0-RT_Update_21
SUSE:Linux Micro 6.0
From an advisory covering 21 CVEs
 before 3-1.1
3-1.1
kernel-livepatch-MICRO-6-0-RT_Update_22
SUSE:Linux Micro 6.0
From an advisory covering 21 CVEs
 before 3-1.2
3-1.2
kernel-livepatch-MICRO-6-0_Update_10
SUSE:Linux Micro 6.0
From an advisory covering 25 CVEs
 before 14-1.1
14-1.1
kernel-livepatch-MICRO-6-0_Update_11
SUSE:Linux Micro 6.0
From an advisory covering 25 CVEs
 before 13-1.1
13-1.1
kernel-livepatch-MICRO-6-0_Update_12
SUSE:Linux Micro 6.0
From an advisory covering 25 CVEs
 before 13-1.1
13-1.1
kernel-livepatch-MICRO-6-0_Update_13
SUSE:Linux Micro 6.0
From an advisory covering 25 CVEs
 before 11-1.1
11-1.1
kernel-livepatch-MICRO-6-0_Update_16
SUSE:Linux Micro 6.0
From an advisory covering 24 CVEs
 before 8-1.1
8-1.1
kernel-livepatch-MICRO-6-0_Update_21
SUSE:Linux Micro 6.0
From an advisory covering 21 CVEs
 before 3-1.1
3-1.1
kernel-livepatch-MICRO-6-0_Update_23
SUSE:Linux Micro 6.0
From an advisory covering 9 CVEs
 before 3-1.1
3-1.1
kernel-livepatch-MICRO-6-0-RT_Update_14
SUSE:Linux Micro 6.0
From an advisory covering 25 CVEs
 before 9-1.1
9-1.1
kernel-livepatch-MICRO-6-0-RT_Update_23
SUSE:Linux Micro 6.0
From an advisory covering 21 CVEs
 before 3-1.1
3-1.1
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
linux-azure-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
 None known
linux-azure-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
 None known
linux-azure-fde
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
 None known
linux-gcp-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1
Show 7 moreShow less
5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3
 None known
linux-gcp-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1
Show 8 moreShow less
5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1
 None known
linux-gcp-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41
 None known
linux-gke
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
 None known
linux-gke-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1
Show 13 moreShow less
5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1
 None known
linux-gkeop
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13
Show 45 moreShow less
5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77
 None known
linux-gkeop-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2
Show 40 moreShow less
5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1
 None known
linux-hwe-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1
Show 7 moreShow less
5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1
 None known
linux-hwe-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1
Show 11 moreShow less
5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1
 None known
linux-hwe-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1
Show 16 moreShow less
5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1
 None known
linux-intel-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19
 None known
linux-oem-5.10
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17
Show 21 moreShow less
5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61
 None known
linux-oem-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21
Show 7 moreShow less
5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36
 None known
linux-oem-5.14
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10
Show 30 moreShow less
5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67
 None known
linux-oem-5.6
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13
Show 24 moreShow less
5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60
 None known
linux-oracle-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-oracle-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1
Show 7 moreShow less
5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1
 None known
linux-oracle-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1
 None known
linux-raspi2
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
 None known
linux-riscv
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34
Show 7 moreShow less
5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45
 None known
linux-riscv-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1
Show 8 moreShow less
5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35
 None known
linux-riscv-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1
Show 5 moreShow less
5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1
 None known
linux-allwinner-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1
 None known
linux-aws-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1
Show 5 moreShow less
5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1
 None known
linux-aws-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 9 moreShow less
6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1
 None known
linux-aws-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1
Show 9 moreShow less
6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1
 None known
linux-aws-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1061.64~22.04.1, plus listed versions
6.8.0-1009.9~22.04.26.8.0-1010.10~22.04.26.8.0-1011.12~22.04.16.8.0-1013.14~22.04.16.8.0-1014.15~22.04.1
Show 34 moreShow less
6.8.0-1015.16~22.04.16.8.0-1016.17~22.04.26.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1023.25~22.04.16.8.0-1024.26~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1035.37~22.04.16.8.0-1036.38~22.04.16.8.0-1039.41~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.44~22.04.16.8.0-1043.45~22.04.16.8.0-1044.46~22.04.16.8.0-1045.47~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.16.8.0-1050.53~22.04.16.8.0-1051.54~22.04.16.8.0-1052.55~22.04.16.8.0-1053.56~22.04.16.8.0-1055.58~22.04.16.8.0-1057.60~22.04.16.8.0-1060.63~22.04.1
6.8.0-1061.64~22.04.1
linux-azure-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2
 None known
linux-azure-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 8 moreShow less
6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1
 None known
linux-azure-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1
Show 9 moreShow less
6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1
 None known
linux-azure-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1063.71~22.04.1, plus listed versions
6.8.0-1008.8~22.04.16.8.0-1009.9~22.04.16.8.0-1010.10~22.04.16.8.0-1012.14~22.04.16.8.0-1013.15~22.04.1
Show 22 moreShow less
6.8.0-1014.16~22.04.16.8.0-1015.17~22.04.26.8.0-1017.20~22.04.16.8.0-1018.21~22.04.16.8.0-1020.23~22.04.16.8.0-1021.25~22.04.16.8.0-1025.30~22.04.16.8.0-1026.31~22.04.16.8.0-1027.32~22.04.16.8.0-1028.33~22.04.16.8.0-1029.34~22.04.16.8.0-1030.35~22.04.16.8.0-1031.36~22.04.16.8.0-1034.39~22.04.16.8.0-1036.42~22.04.16.8.0-1040.46~22.04.16.8.0-1041.47~22.04.16.8.0-1044.50~22.04.16.8.0-1051.57~22.04.16.8.0-1052.58~22.04.16.8.0-1059.65~22.04.16.8.0-1062.69~22.04.1
6.8.0-1063.71~22.04.1
kernel-source
openSUSE:Tumbleweed
From an advisory covering 274 CVEs
 before 7.0.11-1.1
7.0.11-1.1
dtb-aarch64
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-64kb
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-azure
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-default
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-default-base
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1.160000.2.17
6.12.0-160000.36.1.160000.2.17
kernel-docs
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-kvmsmall
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-obs-build
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-obs-qa
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-rt
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-source
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-syms
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-zfcpdump
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1

History

History
RecordedChangedSources
affectedOSV
affectedOSV
affectedOSV
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-46173 is a high vulnerability (CVSS 7.8) in Linux, published May 28, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.13%, the 2nd percentile. Fixed in kernel 6.6.141.1-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 1,272 package rows, 120 versions, 3,929 references and the rest of 7 source descriptions. The JSON record has them. Also not on the record: 112 aliases. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 161 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open