Every CVE Search/ Get API key

CVE-2026-46227

sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL

The SCTP_SENDALL path in sctp_sendmsg() iterates ep->asocs with list_for_each_entry_safe(), which caches the next entry in @tmp before the loop body runs. The body calls sctp_sendmsg_to_asoc(), which may drop the socket lock inside sctp_wait_for_sndbuf().

While the lock is dropped, another thread can SCTP_SOCKOPT_PEELOFF the association cached in @tmp, migrating it to a new endpoint via sctp_sock_migrate() (list_del_init() + list_add_tail() to newep->asocs), and optionally close the new socket which frees the association via kfree_rcu(). The cached @tmp can also be freed by a network ABORT for that association, processed in softirq while the lock is dropped.

sctp_wait_for_sndbuf() revalidates @asoc (the current entry) on re-lock via the "sk != asoc->base.sk" and "asoc->base.dead" checks, but nothing revalidates @tmp. After a successful return, the iterator advances to the stale @tmp, yielding either a use-after-free (if the peeled socket was closed) or a list-walk onto the new endpoint's list head (type confusion of &newep->asocs as a struct sctp_association *).

Both are reachable from CapEff=0; the type-confusion path gives controlled indirect call via the outqueue.sched->init_sid pointer.

Fix by re-deriving @tmp from @asoc after sctp_sendmsg_to_asoc() returns. @asoc is known to still be on ep->asocs at that point: the only callers that list_del an association from ep->asocs are sctp_association_free() (which sets asoc->base.dead) and sctp_assoc_migrate() (which changes asoc->base.sk), and sctp_wait_for_sndbuf() checks both under the lock before any successful return; a tripped check propagates as err < 0 and the loop bails before the re-derive.

The SCTP_ABORT path in sctp_sendmsg_check_sflags() returns 0 and the loop hits 'continue' before sctp_sendmsg_to_asoc() is ever called, so the @tmp cached by list_for_each_entry_safe() still covers the lock-held free that ba59fb027307 ("sctp: walk the list of asoc safely") was added for.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.10%Up 0.1 points since May 28, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.8

sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL

In the Linux kernel, the following vulnerability has been resolved:

sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL

The SCTP_SENDALL path in sctp_sendmsg() iterates ep->asocs with list_for_each_entry_safe(), which caches the next entry in @tmp before the loop body runs. The body calls sctp_sendmsg_to_asoc(), which may drop the socket lock inside sctp_wait_for_sndbuf().

While the lock is dropped, another thread can SCTP_SOCKOPT_PEELOFF the association cached in @tmp, migrating it to a new endpoint via sctp_sock_migrate() (list_del_init() + list_add_tail() to newep->asocs), and optionally close the new socket which frees the association via kfree_rcu(). The cached @tmp can also be freed by a network ABORT for that association, processed in softirq while the lock is dropped.

sctp_wait_for_sndbuf() revalidates @asoc (the current entry) on re-lock via the "sk != asoc->base.sk" and "asoc->base.dead" checks, but nothing revalidates @tmp. After a successful return, the iterator advances to the stale @tmp, yielding either a use-after-free (if the peeled socket was closed) or a list-walk onto the new endpoint's list head (type confusion of &newep->asocs as a struct sctp_association *).

Both are reachable from CapEff=0; the type-confusion path gives controlled indirect call via the outqueue.sched->init_sid pointer.

Fix by re-deriving @tmp from @asoc after sctp_sendmsg_to_asoc() returns. @asoc is known to still be on ep->asocs at that point: the only callers that list_del an association from ep->asocs are sctp_association_free() (which sets asoc->base.dead) and sctp_assoc_migrate() (which changes asoc->base.sk), and sctp_wait_for_sndbuf() checks both under the lock before any successful return; a tripped check propagates as err < 0 and the loop bails before the re-derive.

The SCTP_ABORT path in sctp_sendmsg_check_sflags() returns 0 and the loop hits 'continue' before sctp_sendmsg_to_asoc() is ever called, so the @tmp cached by list_for_each_entry_safe() still covers the lock-held free that ba59fb027307 ("sctp: walk the list of asoc safely") was added for.

Record
CVE-2026-46227
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-367, CWE-362
Updated
2026-11-02
EUVDEUVD-2026-32854 7.8

In the Linux kernel, the following vulnerability has been resolved:

sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL

The SCTP_SENDALL path in sctp_sendmsg() iterates ep->asocs with list_for_each_entry_safe(), which caches the next entry in @tmp before the loop body runs. The body calls sctp_sendmsg_to_asoc(), which may drop the socket lock inside sctp_wait_for_sndbuf().

While the lock is dropped, another thread can SCTP_SOCKOPT_PEELOFF the association cached in @tmp, migrating it to a new endpoint via sctp_sock_migrate() (list_del_init() + list_add_tail() to newep->asocs), and optionally close the new socket which frees the association via kfree_rcu(). The cached @tmp can also be freed by a network ABORT for that association, processed in softirq while the lock is dropped.

sctp_wait_for_sndbuf() revalidates @asoc (the current entry) on re-lock via the "sk != asoc->base.sk" and "asoc->base.dead" checks, but nothing revalidates @tmp. After a successful return, the iterator advances to the stale @tmp, yielding either a use-after-free (if the peeled socket was closed) or a list-walk onto the new endpoint's list head (type confusion of &newep->asocs as a struct sctp_association *).

Both are reachable from CapEff=0; the type-confusion path gives controlled indirect call via the outqueue.sched->init_sid pointer.

Fix by re-deriving @tmp from @asoc after sctp_sendmsg_to_asoc() returns. @asoc is known to still be on ep->asocs at that point: the only callers that list_del an association from ep->asocs are sctp_association_free() (which sets asoc->base.dead) and sctp_assoc_migrate() (which changes asoc->base.sk), and sctp_wait_for_sndbuf() checks both under the lock before any successful return; a tripped check propagates as err < 0 and the loop bails before the re-derive.

The SCTP_ABORT path in sctp_sendmsg_check_sflags() returns 0 and the loop hits 'continue' before sctp_sendmsg_to_asoc() is ever called, so the @tmp cached by list_for_each_entry_safe() still covers the lock-held free that ba59fb027307 ("sctp: walk the list of asoc safely") was added for.

Record
EUVD-2026-32854
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-rg55-jvw9-p7m7 7.8

In the Linux kernel, the following vulnerability has been resolved: sctp: revalidate list cursor...

In the Linux kernel, the following vulnerability has been resolved:

sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL

The SCTP_SENDALL path in sctp_sendmsg() iterates ep->asocs with list_for_each_entry_safe(), which caches the next entry in @tmp before the loop body runs. The body calls sctp_sendmsg_to_asoc(), which may drop the socket lock inside sctp_wait_for_sndbuf().

While the lock is dropped, another thread can SCTP_SOCKOPT_PEELOFF the association cached in @tmp, migrating it to a new endpoint via sctp_sock_migrate() (list_del_init() + list_add_tail() to newep->asocs), and optionally close the new socket which frees the association via kfree_rcu(). The cached @tmp can also be freed by a network ABORT for that association, processed in softirq while the lock is dropped.

sctp_wait_for_sndbuf() revalidates @asoc (the current entry) on re-lock via the "sk != asoc->base.sk" and "asoc->base.dead" checks, but nothing revalidates @tmp. After a successful return, the iterator advances to the stale @tmp, yielding either a use-after-free (if the peeled socket was closed) or a list-walk onto the new endpoint's list head (type confusion of &newep->asocs as a struct sctp_association *).

Both are reachable from CapEff=0; the type-confusion path gives controlled indirect call via the outqueue.sched->init_sid pointer.

Fix by re-deriving @tmp from @asoc after sctp_sendmsg_to_asoc() returns. @asoc is known to still be on ep->asocs at that point: the only callers that list_del an association from ep->asocs are sctp_association_free() (which sets asoc->base.dead) and sctp_assoc_migrate() (which changes asoc->base.sk), and sctp_wait_for_sndbuf() checks both under the lock before any successful return; a tripped check propagates as err < 0 and the loop bails before the re-derive.

The SCTP_ABORT path in sctp_sendmsg_check_sflags() returns 0 and the loop hits 'continue' before sctp_sendmsg_to_asoc() is ever called, so the @tmp cached by list_for_each_entry_safe() still covers the lock-held free that ba59fb027307 ("sctp: walk the list of asoc safely") was added for.

Record
GHSA-rg55-jvw9-p7m7
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-362, CWE-367, CWE-416
Updated
2026-11-02
NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL

The SCTP_SENDALL path in sctp_sendmsg() iterates ep->asocs with list_for_each_entry_safe(), which caches the next entry in @tmp before the loop body runs. The body calls sctp_sendmsg_to_asoc(), which may drop the socket lock inside sctp_wait_for_sndbuf().

While the lock is dropped, another thread can SCTP_SOCKOPT_PEELOFF the association cached in @tmp, migrating it to a new endpoint via sctp_sock_migrate() (list_del_init() + list_add_tail() to newep->asocs), and optionally close the new socket which frees the association via kfree_rcu(). The cached @tmp can also be freed by a network ABORT for that association, processed in softirq while the lock is dropped.

sctp_wait_for_sndbuf() revalidates @asoc (the current entry) on re-lock via the "sk != asoc->base.sk" and "asoc->base.dead" checks, but nothing revalidates @tmp. After a successful return, the iterator advances to the stale @tmp, yielding either a use-after-free (if the peeled socket was closed) or a list-walk onto the new endpoint's list head (type confusion of &newep->asocs as a struct sctp_association *).

Both are reachable from CapEff=0; the type-confusion path gives controlled indirect call via the outqueue.sched->init_sid pointer.

Fix by re-deriving @tmp from @asoc after sctp_sendmsg_to_asoc() returns. @asoc is known to still be on ep->asocs at that point: the only callers that list_del an association from ep->asocs are sctp_association_free() (which sets asoc->base.dead) and sctp_assoc_migrate() (which changes asoc->base.sk), and sctp_wait_for_sndbuf() checks both under the lock before any successful return; a tripped check propagates as err < 0 and the loop bails before the re-derive.

The SCTP_ABORT path in sctp_sendmsg_check_sflags() returns 0 and the loop hits 'continue' before sctp_sendmsg_to_asoc() is ever called, so the @tmp cached by list_for_each_entry_safe() still covers the lock-held free that ba59fb027307 ("sctp: walk the list of asoc safely") was added for.

Record
CVE-2026-46227
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416, CWE-362, CWE-367
Updated
2026-11-02
OSVBELL-CVE-2026-46227 7.8
Record
BELL-CVE-2026-46227
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 7.8

sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL

In the Linux kernel, the following vulnerability has been resolved:

sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL

The SCTP_SENDALL path in sctp_sendmsg() iterates ep->asocs with list_for_each_entry_safe(), which caches the next entry in @tmp before the loop body runs. The body calls sctp_sendmsg_to_asoc(), which may drop the socket lock inside sctp_wait_for_sndbuf().

While the lock is dropped, another thread can SCTP_SOCKOPT_PEELOFF the association cached in @tmp, migrating it to a new endpoint via sctp_sock_migrate() (list_del_init() + list_add_tail() to newep->asocs), and optionally close the new socket which frees the association via kfree_rcu(). The cached @tmp can also be freed by a network ABORT for that association, processed in softirq while the lock is dropped.

sctp_wait_for_sndbuf() revalidates @asoc (the current entry) on re-lock via the "sk != asoc->base.sk" and "asoc->base.dead" checks, but nothing revalidates @tmp. After a successful return, the iterator advances to the stale @tmp, yielding either a use-after-free (if the peeled socket was closed) or a list-walk onto the new endpoint's list head (type confusion of &newep->asocs as a struct sctp_association *).

Both are reachable from CapEff=0; the type-confusion path gives controlled indirect call via the outqueue.sched->init_sid pointer.

Fix by re-deriving @tmp from @asoc after sctp_sendmsg_to_asoc() returns. @asoc is known to still be on ep->asocs at that point: the only callers that list_del an association from ep->asocs are sctp_association_free() (which sets asoc->base.dead) and sctp_assoc_migrate() (which changes asoc->base.sk), and sctp_wait_for_sndbuf() checks both under the lock before any successful return; a tripped check propagates as err < 0 and the loop bails before the re-derive.

The SCTP_ABORT path in sctp_sendmsg_check_sflags() returns 0 and the loop hits 'continue' before sctp_sendmsg_to_asoc() is ever called, so the @tmp cached by list_for_each_entry_safe() still covers the lock-held free that ba59fb027307 ("sctp: walk the list of asoc safely") was added for.

Record
CVE-2026-46227
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 48 moreShow less
OSVDEBIAN-CVE-2026-46227 7.8

In the Linux kernel, the following vulnerability has been resolved: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL The SCTP_SENDALL path in sctp_sendmsg() iterates ep->asocs with list_for_each_entry_safe(), which caches the next entry in @tmp before the loop body runs. The body calls sctp_sendmsg_to_asoc(), which may drop the socket lock inside sctp_wait_for_sndbuf(). While the lock is dropped, another thread can SCTP_SOCKOPT_PEELOFF the association cached in @tmp, migrating it to a new endpoint via sctp_sock_migrate() (list_del_init() + list_add_tail() to newep->asocs), and optionally close the new socket which frees the association via kfree_rcu(). The cached @tmp can also be freed by a network ABORT for that association, processed in softirq while the lock is dropped. sctp_wait_for_sndbuf() revalidates @asoc (the current entry) on re-lock via the "sk != asoc->base.sk" and "asoc->base.dead" checks, but nothing revalidates @tmp. After a successful return, the iterator advances to the stale @tmp, yielding either a use-after-free (if the peeled socket was closed) or a list-walk onto the new endpoint's list head (type confusion of &newep->asocs as a struct sctp_association *). Both are reachable from CapEff=0; the type-confusion path gives controlled indirect call via the outqueue.sched->init_sid pointer. Fix by re-deriving @tmp from @asoc after sctp_sendmsg_to_asoc() returns. @asoc is known to still be on ep->asocs at that point: the only callers that list_del an association from ep->asocs are sctp_association_free() (which sets asoc->base.dead) and sctp_assoc_migrate() (which changes asoc->base.sk), and sctp_wait_for_sndbuf() checks both under the lock before any successful return; a tripped check propagates as err < 0 and the loop bails before the re-derive. The SCTP_ABORT path in sctp_sendmsg_check_sflags() returns 0 and the loop hits 'continue' before sctp_sendmsg_to_asoc() is ever called, so the @tmp cached by list_for_each_entry_safe() still covers the lock-held free that ba59fb027307 ("sctp: walk the list of asoc safely") was added for.

Record
DEBIAN-CVE-2026-46227
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-2579 9.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

bcache: fix NULL pointer in cache_set_flush()

  1. LINE#1794 - LINE#1887 is some codes about function of bch_cache_set_alloc().
  2. LINE#2078 - LINE#2142 is some codes about function of register_cache_set().
  3. register_cache_set() will call bch_cache_set_alloc() in LINE#2098.

1794 struct cache_set *bch_cache_set_alloc(struct cache_sb *sb) 1795 { ... 1860 if (!(c->devices = kcalloc(c->nr_uuids, sizeof(void *), GFP_KERNEL)) || 1861 mempool_init_slab_pool(&c->search, 32, bch_search_cache) || 1862 mempool_init_kmalloc_pool(&c->bio_meta, 2, 1863 sizeof(struct bbio) + sizeof(struct bio_vec) * 1864 bucket_pages(c)) || 1865 mempool_init_kmalloc_pool(&c->fill_iter, 1, iter_size) || 1866 bioset_init(&c->bio_split, 4, offsetof(struct bbio, bio), 1867 BIOSET_NEED_BVECS|BIOSET_NEED_RESCUER) || 1868 !(c->uuids = alloc_bucket_pages(GFP_KERNEL, c)) || 1869 !(c->moving_gc_wq = alloc_workqueue("bcache_gc", 1870 WQ_MEM_RECLAIM, 0)) || 1871 bch_journal_alloc(c) || 1872 bch_btree_cache_alloc(c) || 1873 bch_open_buckets_alloc(c) || 1874 bch_bset_sort_state_init(&c->sort, ilog2(c->btree_pages))) 1875 goto err; ^^^^^^^^ 1876 ... 1883 return c; 1884 err: 1885 bch_cache_set_unregister(c); ^^^^^^^^^^^^^^^^^^^^^^^^^^^ 1886 return NULL; 1887 } ... 2078 static const char *register_cache_set(struct cache *ca) 2079 { ... 2098 c = bch_cache_set_alloc(&ca->sb); 2099 if (!c) 2100 return err; ^^^^^^^^^^ ... 2128 ca->set = c; 2129 ca->set->cache[ca->sb.nr_this_dev] = ca; ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ ... 2138 return NULL; 2139 err: 2140 bch_cache_set_unregister(c); 2141 return err; 2142 }

(1) If LINE#1860 - LINE#1874 is true, then do 'goto err'(LINE#1875) and call bch_cache_set_unregister()(LINE#1885). (2) As (1) return NULL(LINE#1886), LINE#2098 - LINE#2100 would return. (3) As (2) has returned, LINE#2128 - LINE#2129 would do not give the value to c->cache[], it means that c->cache[] is NULL.

LINE#1624 - LINE#1665 is some codes about function of cache_set_flush(). As (1), in LINE#1885 call bch_cache_set_unregister() ---> bch_cache_set_stop() ---> closure_queue() -.-> cache_set_flush() (as below LINE#1624)

1624 static void cache_set_flush(struct closure *cl) 1625 { ... 1654 for_each_cache(ca, c, i) 1655 if (ca->alloc_thread) ^^ 1656 kthread_stop(ca->alloc_thread); ... 1665 }

(4) In LINE#1655 ca is NULL(see (3)) in cache_set_flush() then the kernel crash occurred as below: [ 846.712887] bcache: register_cache() error drbd6: cannot allocate memory [ 846.713242] bcache: register_bcache() error : failed to register device [ 846.713336] bcache: cache_set_free() Cache set 2f84bdc1-498a-4f2f-98a7-01946bf54287 unregistered [ 846.713768] BUG: unable to handle kernel NULL pointer dereference at 00000000000009f8 [ 846.714790] PGD 0 P4D 0 [ 846.715129] Oops: 0000 [#1] SMP PTI [ 846.715472] CPU: 19 PID: 5057 Comm: kworker/19:16 Kdump: loaded Tainted: G OE --------- - - 4.18.0-147.5.1.el8_1.5es.3.x86_64 #1 [ 846.716082] Hardware name: ESPAN GI-25212/X11DPL-i, BIOS 2.1 06/15/2018 [ 846.716451] Workqueue: events cache_set_flush [bcache] [ 846.716808] RIP: 0010:cache_set_flush+0xc9/0x1b0 [bcache] […

Record
OESA-2026-2579
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-2871 9.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_conntrack_expect: use expect->helper

Use expect->helper in ctnetlink and /proc to dump the helper name. Using nfct_help() without holding a reference to the master conntrack is unsafe.

Use exp->master->helper in ctnetlink path if userspace does not provide an explicit helper when creating an expectation to retain the existing behaviour. The ctnetlink expectation path holds the reference on the master conntrack and nf_conntrack_expect lock and the nfnetlink glue path refers to the master ct that is attached to the skb.(CVE-2026-31414)

In the Linux kernel, the following vulnerability has been resolved:

xfs: avoid dereferencing log items after push callbacks

After xfsaild_push_item() calls iop_push(), the log item may have been freed if the AIL lock was dropped during the push. Background inode reclaim or the dquot shrinker can free the log item while the AIL lock is not held, and the tracepoints in the switch statement dereference the log item after iop_push() returns.

Fix this by capturing the log item type, flags, and LSN before calling xfsaild_push_item(), and introducing a new xfs_ail_push_class trace event class that takes these pre-captured values and the ailp pointer instead of the log item pointer.(CVE-2026-31453)

In the Linux kernel, the following vulnerability has been resolved:

xfs: stop reclaim before pushing AIL during unmount

The unmount sequence in xfs_unmount_flush_inodes() pushed the AIL while background reclaim and inodegc are still running. This is broken independently of any use-after-free issues - background reclaim and inodegc should not be running while the AIL is being pushed during unmount, as inodegc can dirty and insert inodes into the AIL during the flush, and background reclaim can race to abort and free dirty inodes.

Reorder xfs_unmount_flush_inodes() to stop inodegc and cancel background reclaim before pushing the AIL. Stop inodegc before cancelling m_reclaim_work because the inodegc worker can re-queue m_reclaim_work via xfs_inodegc_set_reclaimable.(CVE-2026-31455)

In the Linux kernel, the following vulnerability has been resolved:

fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath

When cifs_sanitize_prepath is called with an empty string or a string containing only delimiters (e.g., "/"), the current logic attempts to check *(cursor2 - 1) before cursor2 has advanced. This results in an out-of-bounds read.

This patch adds an early exit check after stripping prepended delimiters. If no path content remains, the function returns NULL.

The bug was identified via manual audit and verified using a standalone test case compiled with AddressSanitizer, which triggered a SEGV on affected inputs.(CVE-2026-43112)

In the Linux kernel, the following vulnerability has been resolved:

xfs: remove xfs_attr_leaf_hasname

The calling convention of xfs_attr_leaf_hasname() is problematic, because it returns a NULL buffer when xfs_attr3_leaf_read fails, a valid buffer when xfs_attr3_leaf_lookup_int returns -ENOATTR or -EEXIST, and a non-NULL buffer pointer for an already released buffer when xfs_attr3_leaf_lookup_int fails with other error values.

Fix this by simply open coding xfs_attr_leaf_hasname in the callers, so that the buffer release code is done by each caller of xfs_attr3_leaf_read.(CVE-2026-43153)

In the Linux kernel, the following vulnerability has been resolved:

xfs: fix freemap adjustments when adding xattrs to leaf blocks

xfs/592 and xfs/794 both trip this assertion in the leaf block freemap adjustment code after ~20 minutes of running on my test VMs:

ASSERT(ichdr->firstused >= ichdr->count * sizeof(xfs_attr_leaf_entry_t) + xfs_attr3_leaf_hdr_size(leaf));

Upon enabling quite a lot more debugging code, I narrowed this down to fsstress trying to set a local extended attribute with…

Record
OESA-2026-2871
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:26462 7.8

Red Hat Security Advisory: kernel-rt security update

Record
RHSA-2026:26462
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:26515 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:26515
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:26535 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:26535
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:26563 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:26563
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:27731 8.7

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:27731
CVSS 3.1
8.7 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:27735 8.7

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:27735
CVSS 3.1
8.7 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:33899 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:33899
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:34094 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:34094
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:36018 8.4

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:36018
CVSS 3.1
8.4 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:36348 8.4

Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Record
RHSA-2026:36348
CVSS 3.1
8.4 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:36349 8.4

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:36349
CVSS 3.1
8.4 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:36956 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:36956
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:59142 7.8

Red Hat Security Advisory: kpatch-patch-4_18_0-477_107_1, kpatch-patch-4_18_0-477_120_1, kpatch-patch-4_18_0-477_130_1, kpatch-patch-4_18_0-477_143_1, and kpatch-patch-4_18_0-477_97_1 security update

Record
RHSA-2026:59142
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:59143 7.8

Red Hat Security Advisory: kpatch-patch-6_12_0-211_16_1 security update

Record
RHSA-2026:59143
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:59145 7.8

Red Hat Security Advisory: kpatch-patch-5_14_0-427_100_1, kpatch-patch-5_14_0-427_113_1, kpatch-patch-5_14_0-427_126_1, kpatch-patch-5_14_0-427_68_2, and kpatch-patch-5_14_0-427_84_1 security update

Record
RHSA-2026:59145
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:59146 7.8

Red Hat Security Advisory: kpatch-patch-4_18_0-553_109_1, kpatch-patch-4_18_0-553_125_1, kpatch-patch-4_18_0-553_53_1, kpatch-patch-4_18_0-553_72_1, and kpatch-patch-4_18_0-553_85_1 security update

Record
RHSA-2026:59146
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:59147 7.8

Red Hat Security Advisory: kpatch-patch-5_14_0-284_117_1, kpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_148_1, kpatch-patch-5_14_0-284_158_1, and kpatch-patch-5_14_0-284_172_1 security update

Record
RHSA-2026:59147
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:59148 7.8

Red Hat Security Advisory: kpatch-patch-5_14_0-570_116_1, kpatch-patch-5_14_0-570_17_1, kpatch-patch-5_14_0-570_39_1, kpatch-patch-5_14_0-570_66_1, and kpatch-patch-5_14_0-570_94_1 security update

Record
RHSA-2026:59148
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:59149 7.8

Red Hat Security Advisory: kpatch-patch-5_14_0-687_10_1 security update

Record
RHSA-2026:59149
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:36018 8.4

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CVE-2026-43112)

  • kernel: net: mana: Fix double destroy_workqueue on service rescan PCI path (CVE-2026-43276)

  • kernel: Linux kernel: Use-After-Free in net/gro due to improper handling of zerocopy skbs (CVE-2026-46323)

  • kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (CVE-2026-46116)

  • kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227)

  • kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CVE-2026-46209)

  • kernel: smb/client: fix out-of-bounds read in smb2_compound_op() (CVE-2026-46155)

  • kernel: netfilter: nft_inner: Fix IPv6 inner_thoff desync (CVE-2026-46244)

  • kernel: procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CVE-2026-46259)

  • kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources (CVE-2025-10263)

  • kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVE-2026-46316)

Bug Fix(es) and Enhancement(s):

  • WARNING at drivers/gpu/drm/nouveau/nvkm/subdev/gsp/r535.c:1585 r535_gsp_fini+0x2fb/0x310 [nouveau] [rhel-9.8.z] (JIRA:Rocky Linux-160966)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:36018
CVSS 3.1
8.4 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRLSA-2026:36956 7.8

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CVE-2025-71066)

  • kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227)

  • kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CVE-2026-46113)

  • kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role (CVE-2026-53359)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:36956
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2026-46227 7.0

CVE-2026-46227 in linux - Patched by Root

Root has patched CVE-2026-46227 in the linux package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2026-46227
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2026-46227 7.0

CVE-2026-46227 in linux - Patched by Root

Root has patched CVE-2026-46227 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2026-46227
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-UBUNTU-2204-CVE-2026-46227 7.0

CVE-2026-46227 in linux - Patched by Root

Root has patched CVE-2026-46227 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2204-CVE-2026-46227
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVROOT-OS-UBUNTU-2404-CVE-2026-46227 7.0

CVE-2026-46227 in linux - Patched by Root

Root has patched CVE-2026-46227 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2404-CVE-2026-46227
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVUBUNTU-CVE-2026-46227 7.3

In the Linux kernel, the following vulnerability has been resolved: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL The SCTP_SENDALL path in sctp_sendmsg() iterates ep->asocs with list_for_each_entry_safe(), which caches the next entry in @tmp before the loop body runs. The body calls sctp_sendmsg_to_asoc(), which may drop the socket lock inside sctp_wait_for_sndbuf(). While the lock is dropped, another thread can SCTP_SOCKOPT_PEELOFF the association cached in @tmp, migrating it to a new endpoint via sctp_sock_migrate() (list_del_init() + list_add_tail() to newep->asocs), and optionally close the new socket which frees the association via kfree_rcu(). The cached @tmp can also be freed by a network ABORT for that association, processed in softirq while the lock is dropped. sctp_wait_for_sndbuf() revalidates @asoc (the current entry) on re-lock via the "sk != asoc->base.sk" and "asoc->base.dead" checks, but nothing revalidates @tmp. After a successful return, the iterator advances to the stale @tmp, yielding either a use-after-free (if the peeled socket was closed) or a list-walk onto the new endpoint's list head (type confusion of &newep->asocs as a struct sctp_association *). Both are reachable from CapEff=0; the type-confusion path gives controlled indirect call via the outqueue.sched->init_sid pointer. Fix by re-deriving @tmp from @asoc after sctp_sendmsg_to_asoc() returns. @asoc is known to still be on ep->asocs at that point: the only callers that list_del an association from ep->asocs are sctp_association_free() (which sets asoc->base.dead) and sctp_assoc_migrate() (which changes asoc->base.sk), and sctp_wait_for_sndbuf() checks both under the lock before any successful return; a tripped check propagates as err < 0 and the loop bails before the re-derive. The SCTP_ABORT path in sctp_sendmsg_check_sflags() returns 0 and the loop hits 'continue' before sctp_sendmsg_to_asoc() is ever called, so the @tmp cached by list_for_each_entry_safe() still covers the lock-held free that ba59fb027307 ("sctp: walk the list of asoc safely") was added for.

Record
UBUNTU-CVE-2026-46227
CVSS 4.0
7.3 HighCVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-07
OSVALSA-2026:36018 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CVE-2026-43112)
  • kernel: net: mana: Fix double destroy_workqueue on service rescan PCI path (CVE-2026-43276)
  • kernel: Linux kernel: Use-After-Free in net/gro due to improper handling of zerocopy skbs (CVE-2026-46323)
  • kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (CVE-2026-46116)
  • kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227)
  • kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CVE-2026-46209)
  • kernel: smb/client: fix out-of-bounds read in smb2_compound_op() (CVE-2026-46155)
  • kernel: netfilter: nft_inner: Fix IPv6 inner_thoff desync (CVE-2026-46244)
  • kernel: procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CVE-2026-46259)
  • kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources (CVE-2025-10263)
  • kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVE-2026-46316)

Bug Fix(es) and Enhancement(s):

  • WARNING at drivers/gpu/drm/nouveau/nvkm/subdev/gsp/r535.c:1585 r535_gsp_fini+0x2fb/0x310 [nouveau] [almalinux-9.8.z] (JIRA:AlmaLinux-160966)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:36018
Updated
2026-11-02
OSVALSA-2026:36348 No score

Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: tcp: fix potential race in tcp_v6_syn_recv_sock() (CVE-2026-43198)
  • kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CVE-2026-43450)
  • kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227)
  • kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CVE-2026-46209)
  • kernel: procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CVE-2026-46259)
  • kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources (CVE-2025-10263)

Bug Fix(es) and Enhancement(s):

  • kernel panic at trailing_symlink while the task wdavdaemon runs even after 4c4f7c19b3c7 (JIRA:AlmaLinux-152759)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:36348
Updated
2026-11-02
OSVALSA-2026:36349 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: tcp: fix potential race in tcp_v6_syn_recv_sock() (CVE-2026-43198)
  • kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CVE-2026-43450)
  • kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227)
  • kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CVE-2026-46209)
  • kernel: procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CVE-2026-46259)
  • kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources (CVE-2025-10263)

Bug Fix(es) and Enhancement(s):

  • kernel panic at trailing_symlink while the task wdavdaemon runs even after 4c4f7c19b3c7 (JIRA:AlmaLinux-152759)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:36349
Updated
2026-11-02
OSVALSA-2026:36956 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CVE-2025-71066)
  • kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227)
  • kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CVE-2026-46113)
  • kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role (CVE-2026-53359)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:36956
Updated
2026-11-02
OSVAZL-88899 No score

CVE-2026-46227 affecting package kernel for versions less than 6.6.141.1-1

In the Linux kernel, the following vulnerability has been resolved:

sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL

The SCTP_SENDALL path in sctp_sendmsg() iterates ep->asocs with list_for_each_entry_safe(), which caches the next entry in @tmp before the loop body runs. The body calls sctp_sendmsg_to_asoc(), which may drop the socket lock inside sctp_wait_for_sndbuf().

While the lock is dropped, another thread can SCTP_SOCKOPT_PEELOFF the association cached in @tmp, migrating it to a new endpoint via sctp_sock_migrate() (list_del_init() + list_add_tail() to newep->asocs), and optionally close the new socket which frees the association via kfree_rcu(). The cached @tmp can also be freed by a network ABORT for that association, processed in softirq while the lock is dropped.

sctp_wait_for_sndbuf() revalidates @asoc (the current entry) on re-lock via the "sk != asoc->base.sk" and "asoc->base.dead" checks, but nothing revalidates @tmp. After a successful return, the iterator advances to the stale @tmp, yielding either a use-after-free (if the peeled socket was closed) or a list-walk onto the new endpoint's list head (type confusion of &newep->asocs as a struct sctp_association *).

Both are reachable from CapEff=0; the type-confusion path gives controlled indirect call via the outqueue.sched->init_sid pointer.

Fix by re-deriving @tmp from @asoc after sctp_sendmsg_to_asoc() returns. @asoc is known to still be on ep->asocs at that point: the only callers that list_del an association from ep->asocs are sctp_association_free() (which sets asoc->base.dead) and sctp_assoc_migrate() (which changes asoc->base.sk), and sctp_wait_for_sndbuf() checks both under the lock before any successful return; a tripped check propagates as err < 0 and the loop bails before the re-derive.

The SCTP_ABORT path in sctp_sendmsg_check_sflags() returns 0 and the loop hits 'continue' before sctp_sendmsg_to_asoc() is ever called, so the @tmp cached by list_for_each_entry_safe() still covers the lock-held free that ba59fb027307 ("sctp: walk the list of asoc safely") was added for.

Record
AZL-88899
Updated
2026-11-02
OSVCLSA-2026-1789460387 No score

Fix of 134 CVEs

  • CVE-2026-72463
    • xfrm: Fix dev use-after-free in xfrm async resumption {CVE-2026-72463}
  • CVE-2026-64600
    • xfs: resample the data fork mapping after cycling ILOCK {CVE-2026-64600}
  • CVE-2026-46175
    • f2fs: fix fsck inconsistency caused by FGGC of node block {CVE-2026-46175}
  • CVE-2025-68254
    • staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing {CVE-2025-68254}
  • CVE-2025-68255
    • staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing {CVE-2025-68255}
  • CVE-2026-64268
    • RDMA/siw: bound Read Response placement to the RREAD length {CVE-2026-64268}
  • CVE-2025-68286
    • drm/amd/display: Check NULL before accessing {CVE-2025-68286}
  • CVE-2026-53024
    • greybus: raw: fix use-after-free if write is called after disconnect {CVE-2026-53024}
  • CVE-2026-53025
    • greybus: raw: fix use-after-free on cdev close {CVE-2026-53025}
  • CVE-2026-52934
    • batman-adv: tvlv: reject oversized TVLV packets {CVE-2026-52934}
  • CVE-2025-68303
    • platform/x86: intel: punit_ipc: fix memory corruption {CVE-2025-68303}
  • CVE-2026-64280
    • fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() {CVE-2026-64280}
  • CVE-2026-64188
    • net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() {CVE-2026-64188}
  • CVE-2026-64109
    • af_unix: Fix UAF read of tail->len in unix_stream_data_wait() {CVE-2026-64109}
  • CVE-2026-64274
    • Input: goodix - clamp the device-reported contact count {CVE-2026-64274}
  • CVE-2026-64270
    • Input: mms114 - reject an oversized device packet size {CVE-2026-64270}
  • CVE-2026-64093
    • batman-adv: tp_meter: directly shut down timer on cleanup {CVE-2026-64093}
  • CVE-2026-64091
    • batman-adv: tt: fix TOCTOU race for reported vlans {CVE-2026-64091}
  • CVE-2026-53329
    • drm/amd/display: Use krealloc_array() in dal_vector_reserve() {CVE-2026-53329}
  • CVE-2026-64298
    • NFSv4: include MAY_WRITE in open permission mask for O_TRUNC {CVE-2026-64298}
  • CVE-2026-64276
    • Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count {CVE-2026-64276}
  • CVE-2026-64273
    • Input: iforce - bound the device-reported force-feedback effect index {CVE-2026-64273}
  • CVE-2026-64271
    • Input: touchwin - reset the packet index on every complete packet {CVE-2026-64271}
  • CVE-2026-64266
    • fuse: re-lock request before returning from fuse_ref_folio() {CVE-2026-64266}
  • CVE-2026-64191
    • i2c: stub: Reject I2C block transfers with invalid length {CVE-2026-64191}
  • CVE-2026-64189
    • netfilter: ipset: fix race between dump and ip_set_list resize {CVE-2026-64189}
  • CVE-2026-31786
    • Buffer overflow in drivers/xen/sys-hypervisor.c {CVE-2026-31786}
  • CVE-2025-68799
    • caif: fix integer underflow in cffrml_receive() {CVE-2025-68799}
  • CVE-2025-68302
    • net: sxgbe: fix potential NULL dereference in sxgbe_rx() {CVE-2025-68302}
  • CVE-2025-40243
    • hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits() {CVE-2025-40243}
  • CVE-2025-40233
    • ocfs2: clear extent cache after moving/defragmenting extents {CVE-2025-40233}
  • CVE-2026-23269
    • apparmor: validate DFA start states are in bounds in unpack_pdb {CVE-2026-23269}
  • CVE-2026-43249
    • 9p/xen: protect xen_9pfs_front_free against concurrent calls {CVE-2026-43249}
  • CVE-2026-31657
    • batman-adv: hold claim backbone gateways by reference {CVE-2026-31657}
  • CVE-2026-31598
    • ocfs2: fix possible deadlock between unlink and dio_end_io_write {CVE-2026-31598}
  • CVE-2026-31768
    • iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() {CVE-2026-31768}
  • CVE-2026-23216
    • scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() {CVE-2026-23216} *…
Record
CLSA-2026-1789460387
Updated
2026-11-02
OSVCLSA-2026-1792751700 No score

kernel: Fix of 106 CVEs

  • net: skbuff: propagate shared-frag marker in skb_zerocopy()
  • net: ipv6: clear suppressed fib6 rule result {CVE-2026-74581}
  • net: skbuff: propagate shared-frag marker through frag-transfer helpers {CVE-2026-43503}
  • ALSA: virtio: reset device before deleting virtqueues {CVE-2026-98264}
  • ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() {CVE-2026-90033}
  • ALSA: 6fire: Fix UAF at error handling during probe {CVE-2026-74505}
  • net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring {CVE-2026-64047}
  • SUNRPC: Fix a server shutdown leak {CVE-2023-53131}
  • libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() {CVE-2026-52956}
  • usb: xusbatm: don't rely on id table pointer arithmetic {CVE-2026-97539}
  • thunderbolt: Keep XDomain reference during the lifetime of a service {CVE-2026-97509}
  • nvdimm/btt: reject an arena whose nfree is below the lane count {CVE-2026-89965}
  • libnvdimm/labels: Prevent integer overflow in __nd_label_validate() {CVE-2026-89559}
  • wifi: brcmsmac: fix UAF in brcms_free_timer() {CVE-2026-98196}
  • wifi: mwifiex: validate scan response extents {CVE-2026-98185}
  • net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow {CVE-2026-98025}
  • net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put {CVE-2026-98015}
  • qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info {CVE-2023-53066}
  • Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count {CVE-2026-64276}
  • Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count {CVE-2026-64277}
  • dmaengine: Fix possible use after free {CVE-2026-72476}
  • netfilter: nf_log: unregister loggers before per-net teardown {CVE-2026-97608}
  • netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state {CVE-2026-93288}
  • mpls: add seqcount to protect the platform_label{,s} pair {CVE-2026-43042}
  • Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp {CVE-2026-74540}
  • usb: dwc2: Fix use after free in debug code {CVE-2026-63927}
  • KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path {CVE-2026-63794}
  • KVM: nVMX: Always flush vpid02 on first use {CVE-2026-89932}
  • x86/mm/ident_map: Use gbpages only where full GB page should be mapped. {CVE-2024-50017}
  • crypto: authencesn - reject short ahash digests during instance creation {CVE-2026-46033}
  • ACPICA: Add validation for node in acpi_ns_build_normalized_path() {CVE-2026-97448}
  • drm/amd/pm: bound pp_dpm_set_pp_table() memcpy {CVE-2026-97427}
  • drm/vmwgfx: validate DRAW_PRIMITIVES header size before division {CVE-2026-74444}
  • HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature {CVE-2026-89729}
  • i2c: stub: Reject I2C block transfers with invalid length {CVE-2026-64191}
  • RDMA/ucma: Lock the handler in ucma_set_ib_path() {CVE-2026-89508}
  • RDMA/srpt: fix integer overflow in immediate data length check {CVE-2026-74394}
  • dm log: fix out-of-bounds write due to region_count overflow {CVE-2026-53059}
  • dm raid1: reserve space for NUL-terminator in build_constructor_string() {CVE-2026-89575}
  • veth: fix NAPI leak in XDP enable error path {CVE-2026-80613}
  • net: hns3: fix kernel crash when 1588 is received on HIP08 devices {CVE-2024-26881}
  • ixgbevf: fix use-after-free in VEPA multicast source pruning {CVE-2026-64113}
  • net: mana: validate rx_req_idx to prevent out-of-bounds array access {CVE-2026-64018}
  • net: stmmac: xgmac2: disable RBUE in default RX interrupt mask {CVE-2026-93830}
  • net: usb: kalmia: bound RX frame length in kalmia_rx_fixup() {CVE-2026-64351}
  • net: usb: pegasus: don't rely on id table pointer arithmetic {CVE-2026-97540}
  • vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() {CVE-2026-63993}
  • wifi: ath9k: fix OOB access from firmware tx status queue ID {CVE-2026-74408}
  • PCI: iproc: Protect root bus removal with rescan lock {CVE-2026-93822}
  • scsi: qla2xxx: Avoid double completion in async IOCB timeout {CVE-2026-89847}
  • fs/mbcache: cancel…
Record
CLSA-2026-1792751700
Updated
2026-11-02
OSVCLSA-2026-1792759740 No score

kernel: Fix of 134 CVEs

  • net: skbuff: propagate shared-frag marker in skb_zerocopy()
  • net: bridge: stop fast-leave after deleting a port group {CVE-2026-74480}
  • net: ipv6: clear suppressed fib6 rule result {CVE-2026-74581}
  • ipvs: do not propagate one-packet flag to synced conns {CVE-2026-80714}
  • net: skbuff: propagate shared-frag marker through frag-transfer helpers {CVE-2026-43503}
  • net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow {CVE-2026-98025}
  • ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF {CVE-2026-98116}
  • sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START {CVE-2026-98130}
  • dm cache policy smq: check allocation under invalidate lock {CVE-2026-53265}
  • RDMA/siw: Bound fragmented header copies by the remaining length {CVE-2026-98323}
  • tty: clear cdev pointer after cdev_add() failure {CVE-2026-90334}
  • tty: skip cdev_del() when no cdev is registered {CVE-2026-90335}
  • procfs: fix missing RCU protection when reading real_parent in do_task_stat() {CVE-2026-46259}
  • sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL {CVE-2026-46227}
  • drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() {CVE-2026-46209}
  • drm: Remove plane hsub/vsub alignment requirement for core helpers {CVE-2026-46209}
  • RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path {CVE-2026-46189}
  • RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() {CVE-2026-46181}
  • scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() {CVE-2026-46149}
  • RDMA/rxe: Reject unknown opcodes before ICRC processing {CVE-2026-46133}
  • ip6_gre: Use cached t->net in ip6erspan_changelink(). {CVE-2026-46120}
  • libceph: Fix slab-out-of-bounds access in auth message processing {CVE-2026-46119}
  • Bluetooth: hci_event: fix potential UAF in SSP passkey handlers {CVE-2026-46056}
  • net: qrtr: ns: Fix use-after-free in driver remove() {CVE-2026-46047}
  • RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv {CVE-2026-46043}
  • gfs2: Fix use-after-free in iomap inline data write path {CVE-2026-45984}
  • gfs2: Add metapath_dibh helper {CVE-2026-45984}
  • bonding: alb: fix UAF in rlb_arp_recv during bond up/down {CVE-2026-45970}
  • gfs2: Fix slab-use-after-free in qd_put {CVE-2026-45861}
  • RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send {CVE-2026-45856}
  • dm: fix a buffer overflow in ioctl processing {CVE-2026-46294}
  • wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task {CVE-2026-46180}
  • netfilter: nf_log: validate MAC header was set before dumping it {CVE-2026-52942}
  • xfrm: espintcp: do not reuse an in-progress partial send {CVE-2026-52935}
  • sctp: purge outqueue on stale COOKIE-ECHO handling {CVE-2026-52924}
  • ipc: limit next_id allocation to the valid ID range {CVE-2026-52923}
  • netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920}
  • netfilter: nf_queue: hold bridge skb->dev while queued {CVE-2026-52912}
  • ipvs: clear the svc scheduler ptr early on edit {CVE-2026-53270}
  • netfilter: conntrack_irc: fix possible out-of-bounds read {CVE-2026-53268}
  • net/sched: act_api: use RCU with deferred freeing for action lifecycle {CVE-2026-53264}
  • Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() {CVE-2026-53256}
  • Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
  • xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() {CVE-2026-53239}
  • ipv6: sit: reload inner IPv6 header after GSO offloads {CVE-2026-53228}
  • net: guard timestamp cmsgs to real error queue skbs {CVE-2026-53223}
  • USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() {CVE-2026-53195}
  • wifi: nl80211: reject oversized EMA RNR lists {CVE-2026-53182}
  • netfilter: require Ethernet MAC header before using eth_hdr() {CVE-2026-53131}
  • bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops {CVE-2026-53078}
  • ppp: require CAP_NET_ADMIN in target…
Record
CLSA-2026-1792759740
Updated
2026-11-02
OSVCLSA-2026-1792762308 No score

kernel: Fix of 128 CVEs

  • net: skbuff: propagate shared-frag marker in skb_zerocopy()
  • net: bridge: stop fast-leave after deleting a port group {CVE-2026-74480}
  • net: ipv6: clear suppressed fib6 rule result {CVE-2026-74581}
  • net: skbuff: propagate shared-frag marker through frag-transfer helpers {CVE-2026-43503}
  • ALSA: virtio: reset device before deleting virtqueues {CVE-2026-98264}
  • ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() {CVE-2026-90033}
  • ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set {CVE-2026-74498}
  • ALSA: caiaq: Fix potential double-free at error path {CVE-2026-98066}
  • ASoC: Intel: avs: Disable periods-elapsed work when closing PCM {CVE-2025-40344}
  • ALSA: timer: drain a slave's callback before its master detaches it {CVE-2026-68201}
  • ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams {CVE-2026-53242}
  • ALSA: seq: midi: Serialize output teardown with event_input {CVE-2026-74387}
  • security/keys: fix missed RCU read section on lookup {CVE-2026-64015}
  • SUNRPC: harden gss_krb5_unwrap_v2 against short tokens {CVE-2026-89542}
  • sctp: fix err_chunk memory leaks in INIT handling {CVE-2026-72413}
  • netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() {CVE-2026-98077}
  • netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() {CVE-2026-74569}
  • mm/hugetlb: fix list corruption in allocate_file_region_entries() {CVE-2026-74518}
  • rcu: Fix rcu_read_unlock() deadloop due to softirq {CVE-2026-45957}
  • bpf: Fix potential UAF in bpf_netns_link_update_prog {CVE-2026-90393}
  • bpf: Fix use-after-free in offloaded map/prog info fill {CVE-2026-53089}
  • NFSv4.2: fix LAYOUTSTATS send buffer exhaustion {CVE-2026-90103}
  • uio: Fix stale info pointer in failed registration path {CVE-2026-93054}
  • tty: clear cdev pointer after cdev_add() failure {CVE-2026-90334}
  • tty: skip cdev_del() when no cdev is registered {CVE-2026-90335}
  • scsi: qla2xxx: Avoid double completion in async IOCB timeout {CVE-2026-89847}
  • scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue {CVE-2025-37861}
  • scsi: csiostor: Fix dereference of null pointer rn {CVE-2026-45857}
  • scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write {CVE-2026-74470}
  • wifi: brcmsmac: fix UAF in brcms_free_timer() {CVE-2026-98196}
  • wifi: mwifiex: validate scan response extents {CVE-2026-98185}
  • wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length {CVE-2026-90382}
  • wifi: iwlwifi: mvm: add a check on the tid coming from the firmware {CVE-2026-93791}
  • wifi: ath9k: fix OOB access from firmware tx status queue ID {CVE-2026-74408}
  • net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow {CVE-2026-98025}
  • net: thunderbolt: Fix frags[] overflow by bounding frame_count {CVE-2026-72157}
  • net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put {CVE-2026-98015}
  • net: stmmac: xgmac2: disable RBUE in default RX interrupt mask {CVE-2026-93830}
  • net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list {CVE-2026-53230}
  • xen/netfront: drop RX packets with a short Ethernet header {CVE-2026-98375}
  • veth: fix NAPI leak in XDP enable error path {CVE-2026-80613}
  • RDMA/rxe: Fix double free in rxe_srq_from_init {CVE-2026-45852}
  • RDMA/iwcm: Fix workqueue list corruption by removing work_list {CVE-2026-45898}
  • ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control {CVE-2026-72261}
  • svcrdma: Fix offset arithmetic in read_chunk_range {CVE-2026-89533}
  • SUNRPC: svcauth_gss: enforce krb5 token minimum length {CVE-2026-89550}
  • xprtrdma: Fix ep kref imbalance on ADDR_CHANGE {CVE-2026-72469}
  • sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START {CVE-2026-98130}
  • sctp: drop a chunk if its transport was removed {CVE-2026-89478}
  • sctp: prevent peer transport count overflow {CVE-2026-74469}
  • sctp: validate embedded address parameter length {CVE-2026-74287}
  • sctp: revalidate list cursor after…
Record
CLSA-2026-1792762308
Updated
2026-11-02
OSVCLSA-2026-1792979985 No score

kernel: Fix of 154 CVEs

  • net: bridge: fix vlan tunnel dst refcnt when egressing {CVE-2021-47222}
  • net: bridge: fix vlan tunnel dst null pointer dereference {CVE-2021-47223}
  • writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() {CVE-2026-64378}
  • writeback, cgroup: increment isw_nr_in_flight before grabbing an inode {CVE-2026-64378}
  • writeback, cgroup: add smp_mb() to cgroup_writeback_umount() {CVE-2026-64378}
  • fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going into workqueue when umount {CVE-2026-64378}
  • libceph: validate banner payload length {CVE-2026-90067}
  • drm/virtio: release the GEM object on virtio_gpu_vram_create() errors {CVE-2026-98606}
  • procfs: fix missing RCU protection when reading real_parent in do_task_stat() {CVE-2026-46259}
  • NFSv4/flexfiles: reject zero filehandle version count {CVE-2026-53392}
  • smb: client: cancel reconnect work in clean_demultiplex_info() {CVE-2026-98175}
  • smb: client: reject userspace cifs.idmap descriptions {CVE-2026-97564}
  • smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 {CVE-2026-89637}
  • smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() {CVE-2026-89633}
  • net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow {CVE-2026-98025}
  • RDMA/siw: Fix endpoint/socket association handling {CVE-2026-74345}
  • RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs {CVE-2026-74390}
  • nfsd: fix clock domain mismatch in clients_still_reclaiming() {CVE-2026-89685}
  • vdpa_sim_blk: reject out-of-range sector starts {CVE-2026-97991}
  • Drivers: hv: vmbus: use generic driver_override infrastructure {CVE-2026-80676}
  • HID: wacom: Fix OOB write in wacom_hid_set_device_mode() {CVE-2026-63916}
  • nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone {CVE-2026-89482}
  • nvmet-tcp: fix page fragment cache leak in error path {CVE-2026-74386}
  • bpf: mark a NULL call argument precise {CVE-2026-98019}
  • bpf: Don't predict JMP32 pointer vs zero comparisons {CVE-2026-98041}
  • ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get {CVE-2026-72262}
  • ASoC: SOF: ipc3-topology: Move and correct size checks in sof_ipc3_control_load_bytes() {CVE-2026-72262}
  • Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan {CVE-2026-98108}
  • mm/page_reporting: use system_freezable_wq to fix UAF during suspend {CVE-2026-74481}
  • netfilter: synproxy: refresh tcphdr after skb_ensure_writable {CVE-2026-64007}
  • netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() {CVE-2026-74569}
  • reboot: fix cad_pid use-after-free race {CVE-2026-97938}
  • fs/resctrl: Fix UAF from worker threads when domains are removed {CVE-2026-93099}
  • ext4: fix out-of-bounds read in ext4_read_inline_dir() {CVE-2026-89786}
  • ext4: fix dirtyclusters double decrement on fs shutdown {CVE-2026-45920}
  • openvswitch: Fix CT limit teardown use-after-free {CVE-2026-89488}
  • sctp: fix NULL deref on untransmitted RECONF completion {CVE-2026-89477}
  • netfilter: conntrack: remove sprintf usage {CVE-2026-53002}
  • fuse: re-lock request before replacing page cache folio {CVE-2026-53388}
  • fanotify: fix false positive on permission events {CVE-2026-46150}
  • configfs_lookup(): don't leave ->s_dentry dangling on failure {CVE-2026-74359}
  • sctp: add INIT verification after cookie unpacking {CVE-2026-72398}
  • sctp: fix err_chunk memory leaks in INIT handling {CVE-2026-72413}
  • sctp: validate embedded INIT chunk and address list lengths in cookie {CVE-2026-53224}
  • sctp: stream: fully roll back denied add-stream state {CVE-2026-52929}
  • sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing {CVE-2026-53246}
  • sctp: diag: reject stale associations in dump_one path {CVE-2026-52917}
  • sctp: Hold sock lock while iterating over address list {CVE-2026-52917}
  • sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL {CVE-2026-46227}
  • nfsd: gate nfs3…
Record
CLSA-2026-1792979985
Updated
2026-11-02
OSVopenSUSE-SU-2026:10954-1 No score

kernel-devel-7.0.11-1.1 on GA media

These are all security issues fixed in the kernel-devel-7.0.11-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10954-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21388-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-10263: arm64: cputype: Add C1-Premium definitions (bsc#1266290).
  • CVE-2025-39894: netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm (bsc#1262430).
  • CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
  • CVE-2026-23248: perf: Make perf_pmu_unregister() useable (bsc#1259800).
  • CVE-2026-23394: Revert: "af_unix: Remove lock dance in unix_peek_fds()." (bsc#1260565).
  • CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
  • CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
  • CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
  • CVE-2026-31438: netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators (bsc#1267824).
  • CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
  • CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
  • CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
  • CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (bsc#1267816).
  • CVE-2026-31479: drm/xe: always keep track of remap prev/next (bsc#1262765).
  • CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
  • CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
  • CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
  • CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
  • CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
  • CVE-2026-31560: spi: spi-dw-dma: fix print error log when wait finish transaction (bsc#1263057).
  • CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
  • CVE-2026-31646: net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() (bsc#1263796).
  • CVE-2026-31647: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (bsc#1263581).
  • CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
  • CVE-2026-31664: xfrm: clear trailing padding in build_polexpire() (bsc#1263578).
  • CVE-2026-31665: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
  • CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
  • CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
  • CVE-2026-31674: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (bsc#1263568).
  • CVE-2026-31680: net: ipv6: flowlabel: defer exclusive option free until RCU teardown (bsc#1263563).
  • CVE-2026-31693: cifs: some missing initializations on replay (bsc#1267744).
  • CVE-2026-31743: nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy (bsc#1264067).
  • CVE-2026-31752: bridge: br_nd_send: validate ND option lengths (bsc#1264045).
  • CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
  • CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
  • CVE-2026-43014,CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010 bsc#1264012).
  • CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
  • CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
  • CVE-2026-43024: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).
  • CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934).
  • CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
  • CVE-2026-43035: net:…
Record
openSUSE-SU-2026:21388-1
Updated
2026-11-02
OSVSUSE-SU-2026:22433-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2025-10263: arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1266290).
  • CVE-2025-38549: efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths (bsc#1248235).
  • CVE-2025-68324: scsi: imm: Fix use-after-free bug caused by unfinished delayed work (bsc#1255416).
  • CVE-2025-68822: Input: alps - fix use-after-free bugs caused by dev3_register_work (bsc#1256668).
  • CVE-2026-23303: smb: client: Don't log plaintext credentials in cifs_set_cifscreds (bsc#1260502).
  • CVE-2026-23327: cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()
  • CVE-2026-23359: bpf: Fix stack-out-of-bounds write in devmap (bsc#1260584).
  • CVE-2026-23438: net: mvpp2: guard flow control update with global_tx_fc in buffer switching (bsc#1261619).
  • CVE-2026-23444: wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure (bsc#1266307).
  • CVE-2026-31396: net: macb: fix use-after-free access to PTP clock (bsc#1261791).
  • CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
  • CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
  • CVE-2026-31446: ext4: fix use-after-free in update_super_work when racing with umount (bsc#1262619).
  • CVE-2026-31448: ext4: avoid infinite loops caused by residual data (bsc#1262622).
  • CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
  • CVE-2026-31454: xfs: save ailp before dropping the AIL lock in push callbacks (bsc#1262624).
  • CVE-2026-31455: xfs: stop reclaim before pushing AIL during unmount (bsc#1262615).
  • CVE-2026-31464: scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() (bsc#1262656).
  • CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false
  • CVE-2026-31473: media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex (bsc#1262663).
  • CVE-2026-31480: tracing: Fix potential deadlock in cpu hotplug with osnoise (bsc#1262634).
  • CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
  • CVE-2026-31493: RDMA/efa: Fix use of completion ctx after free (bsc#1262668).
  • CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
  • CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
  • CVE-2026-31500: Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock (bsc#1262993).
  • CVE-2026-31516: xfrm: prevent policy_hthresh.work from racing with netns teardown (bsc#1262755).
  • CVE-2026-31518: esp: fix skb leak with espintcp and async crypto (bsc#1262606).
  • CVE-2026-31546: net: bonding: fix NULL deref in bond_debug_rlb_hash_show (bsc#1263006).
  • CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
  • CVE-2026-31590: KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION (bsc#1263152).
  • CVE-2026-31592: KVM: SEV: Protect all of sev_mem_enc_register_region() with kvm->lock (bsc#1263123).
  • CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
  • CVE-2026-31613: smb: client: fix OOB reads parsing symlink error response (bsc#1263769).
  • CVE-2026-31614: smb: client: fix off-by-8 bounds check in check_wsl_eas() (bsc#1263774).
  • CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263790).
  • CVE-2026-31655: pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled (bsc#1263724).
  • CVE-2026-31664: string.h: Introduce memset_after() for wiping trailing members/padding (bsc#1263578).
  • CVE-2026-31665: kABI: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
  • CVE-2026-31671: xfrm_user: fix info leak in build_report() (bsc#1263115).
  • CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock…
Record
SUSE-SU-2026:22433-1
Updated
2026-11-02
OSVSUSE-SU-2026:22436-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2025-10263: arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1266290).
  • CVE-2025-68822: Input: alps - fix use-after-free bugs caused by dev3_register_work (bsc#1256668).
  • CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
  • CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
  • CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
  • CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false
  • CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
  • CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
  • CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
  • CVE-2026-31500: Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock (bsc#1262993).
  • CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
  • CVE-2026-31592: KVM: SEV: Protect all of sev_mem_enc_register_region() with kvm->lock (bsc#1263123).
  • CVE-2026-31664: string.h: Introduce memset_after() for wiping trailing members/padding (bsc#1263578).
  • CVE-2026-31665: kABI: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
  • CVE-2026-31674: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (bsc#1263568).
  • CVE-2026-31680: net: ipv6: flowlabel: defer exclusive option free until RCU teardown (bsc#1263563).
  • CVE-2026-31693: cifs: some missing initializations on replay (bsc#1267744).
  • CVE-2026-31697: crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed (bsc#1264116).
  • CVE-2026-31698: crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed (bsc#1263880).
  • CVE-2026-31699: crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed (bsc#1263879).
  • CVE-2026-31752: bridge: br_nd_send: validate ND option lengths (bsc#1264045).
  • CVE-2026-31759: usb: ulpi: fix double free in ulpi_register_interface() error path (bsc#1264076).
  • CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
  • CVE-2026-43023: Bluetooth: SCO: fix race conditions in sco_sock_connect() (bsc#1264137).
  • CVE-2026-43024: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).
  • CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934).
  • CVE-2026-43035: net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak (bsc#1263996).
  • CVE-2026-43036: net: use skb_header_pointer() for TCPv4 GSO frag_off check (bsc#1263993).
  • CVE-2026-43049: HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure (bsc#1264080).
  • CVE-2026-43053: xfs: close crash window in attr dabtree inactivation (bsc#1264084).
  • CVE-2026-43074: eventpoll: defer struct eventpoll free to RCU grace period (bsc#1264263).
  • CVE-2026-43077: crypto: algif_aead - Fix minimum RX size check for decryption (bsc#1264470).
  • CVE-2026-43083: net: ioam6: fix OOB and missing lock (bsc#1264266).
  • CVE-2026-43101: ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data() (bsc#1264239).
  • CVE-2026-43112: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (bsc#1264437).
  • CVE-2026-43119: Bluetooth: hci_sync: annotate data-races around hdev->req_status (bsc#1264561).
  • CVE-2026-43158: xfs: fix freemap adjustments when adding xattrs to leaf blocks (bsc#1264595).
  • CVE-2026-43171: EFI/CPER: do not dump the entire memory region (bsc#1264549).
  • CVE-2026-43187: xfs: delete attr leaf freemap entries when empty (bsc#1264603).
  • CVE-2026-43198: tcp: fix potential race in tcp_v6_syn_recv_sock() (bsc#1264610).
  • CVE-2026-43239:…
Record
SUSE-SU-2026:22436-1
Updated
2026-11-02
OSVSUSE-SU-2026:22458-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2025-10263: arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1266290).
  • CVE-2025-38549: efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths (bsc#1248235).
  • CVE-2025-68324: scsi: imm: Fix use-after-free bug caused by unfinished delayed work (bsc#1255416).
  • CVE-2025-68822: Input: alps - fix use-after-free bugs caused by dev3_register_work (bsc#1256668).
  • CVE-2026-23303: smb: client: Don't log plaintext credentials in cifs_set_cifscreds (bsc#1260502).
  • CVE-2026-23327: cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()
  • CVE-2026-23359: bpf: Fix stack-out-of-bounds write in devmap (bsc#1260584).
  • CVE-2026-23438: net: mvpp2: guard flow control update with global_tx_fc in buffer switching (bsc#1261619).
  • CVE-2026-23444: wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure (bsc#1266307).
  • CVE-2026-31396: net: macb: fix use-after-free access to PTP clock (bsc#1261791).
  • CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
  • CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
  • CVE-2026-31446: ext4: fix use-after-free in update_super_work when racing with umount (bsc#1262619).
  • CVE-2026-31448: ext4: avoid infinite loops caused by residual data (bsc#1262622).
  • CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
  • CVE-2026-31454: xfs: save ailp before dropping the AIL lock in push callbacks (bsc#1262624).
  • CVE-2026-31455: xfs: stop reclaim before pushing AIL during unmount (bsc#1262615).
  • CVE-2026-31464: scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() (bsc#1262656).
  • CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false
  • CVE-2026-31473: media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex (bsc#1262663).
  • CVE-2026-31480: tracing: Fix potential deadlock in cpu hotplug with osnoise (bsc#1262634).
  • CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
  • CVE-2026-31493: RDMA/efa: Fix use of completion ctx after free (bsc#1262668).
  • CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
  • CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
  • CVE-2026-31500: Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock (bsc#1262993).
  • CVE-2026-31516: xfrm: prevent policy_hthresh.work from racing with netns teardown (bsc#1262755).
  • CVE-2026-31518: esp: fix skb leak with espintcp and async crypto (bsc#1262606).
  • CVE-2026-31546: net: bonding: fix NULL deref in bond_debug_rlb_hash_show (bsc#1263006).
  • CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
  • CVE-2026-31590: KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION (bsc#1263152).
  • CVE-2026-31592: KVM: SEV: Protect all of sev_mem_enc_register_region() with kvm->lock (bsc#1263123).
  • CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
  • CVE-2026-31613: smb: client: fix OOB reads parsing symlink error response (bsc#1263769).
  • CVE-2026-31614: smb: client: fix off-by-8 bounds check in check_wsl_eas() (bsc#1263774).
  • CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263790).
  • CVE-2026-31655: pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled (bsc#1263724).
  • CVE-2026-31664: string.h: Introduce memset_after() for wiping trailing members/padding (bsc#1263578).
  • CVE-2026-31665: kABI: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
  • CVE-2026-31671: xfrm_user: fix info leak in build_report() (bsc#1263115).
  • CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock…
Record
SUSE-SU-2026:22458-1
Updated
2026-11-02
OSVSUSE-SU-2026:22460-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2025-10263: arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1266290).
  • CVE-2025-68822: Input: alps - fix use-after-free bugs caused by dev3_register_work (bsc#1256668).
  • CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
  • CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
  • CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
  • CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false
  • CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
  • CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
  • CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
  • CVE-2026-31500: Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock (bsc#1262993).
  • CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
  • CVE-2026-31592: KVM: SEV: Protect all of sev_mem_enc_register_region() with kvm->lock (bsc#1263123).
  • CVE-2026-31664: string.h: Introduce memset_after() for wiping trailing members/padding (bsc#1263578).
  • CVE-2026-31665: kABI: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
  • CVE-2026-31674: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (bsc#1263568).
  • CVE-2026-31680: net: ipv6: flowlabel: defer exclusive option free until RCU teardown (bsc#1263563).
  • CVE-2026-31693: cifs: some missing initializations on replay (bsc#1267744).
  • CVE-2026-31697: crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed (bsc#1264116).
  • CVE-2026-31698: crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed (bsc#1263880).
  • CVE-2026-31699: crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed (bsc#1263879).
  • CVE-2026-31752: bridge: br_nd_send: validate ND option lengths (bsc#1264045).
  • CVE-2026-31759: usb: ulpi: fix double free in ulpi_register_interface() error path (bsc#1264076).
  • CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
  • CVE-2026-43023: Bluetooth: SCO: fix race conditions in sco_sock_connect() (bsc#1264137).
  • CVE-2026-43024: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).
  • CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934).
  • CVE-2026-43035: net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak (bsc#1263996).
  • CVE-2026-43036: net: use skb_header_pointer() for TCPv4 GSO frag_off check (bsc#1263993).
  • CVE-2026-43049: HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure (bsc#1264080).
  • CVE-2026-43053: xfs: close crash window in attr dabtree inactivation (bsc#1264084).
  • CVE-2026-43074: eventpoll: defer struct eventpoll free to RCU grace period (bsc#1264263).
  • CVE-2026-43077: crypto: algif_aead - Fix minimum RX size check for decryption (bsc#1264470).
  • CVE-2026-43083: net: ioam6: fix OOB and missing lock (bsc#1264266).
  • CVE-2026-43101: ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data() (bsc#1264239).
  • CVE-2026-43112: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (bsc#1264437).
  • CVE-2026-43119: Bluetooth: hci_sync: annotate data-races around hdev->req_status (bsc#1264561).
  • CVE-2026-43158: xfs: fix freemap adjustments when adding xattrs to leaf blocks (bsc#1264595).
  • CVE-2026-43171: EFI/CPER: do not dump the entire memory region (bsc#1264549).
  • CVE-2026-43187: xfs: delete attr leaf freemap entries when empty (bsc#1264603).
  • CVE-2026-43198: tcp: fix potential race in tcp_v6_syn_recv_sock() (bsc#1264610).
  • CVE-2026-43239:…
Record
SUSE-SU-2026:22460-1
Updated
2026-11-02
OSVSUSE-SU-2026:22598-1 No score

Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues

The following security issues were fixed:

  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22598-1
Updated
2026-11-02
OSVSUSE-SU-2026:22672-1 No score

Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues

The following security issues were fixed:

  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22672-1
Updated
2026-11-02
OSVSUSE-SU-2026:22673-1 No score

Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-32.1 fixes various security issues

The following security issues were fixed:

  • CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel() (bsc#1263118).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264094).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43437: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265127).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22673-1
Updated
2026-11-02

Affected products

Show 6 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
kernel
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-64k
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-64k-core
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-64k-debug
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-64k-debug-core
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-64k-debug-devel
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-64k-debug-devel-matched
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-64k-debug-modules
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-64k-debug-modules-core
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-64k-debug-modules-extra
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-64k-devel
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-64k-devel-matched
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-64k-modules
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-64k-modules-core
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-64k-modules-extra
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-abi-stablelists
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-core
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-cross-headers
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-debug
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-debug-core
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-debug-devel
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-debug-devel-matched
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-debug-modules
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-debug-modules-core
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-debug-modules-extra
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-debug-uki-virt
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-devel
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-devel-matched
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-doc
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-headers
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-modules
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-modules-core
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-modules-extra
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-rt
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-rt-64k
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-rt-64k-core
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-rt-64k-debug
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-rt-64k-debug-core
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-rt-64k-debug-devel
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-rt-64k-debug-modules
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-rt-64k-debug-modules-core
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-rt-64k-debug-modules-extra
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-rt-64k-devel
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-rt-64k-modules
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-rt-64k-modules-core
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-rt-64k-modules-extra
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-rt-core
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-rt-debug
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-rt-debug-core
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-rt-debug-devel
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-rt-debug-modules
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-rt-debug-modules-core
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-rt-debug-modules-extra
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel-rt-devel
AlmaLinux:9
From an advisory covering 11 CVEs
 before 5.14.0-687.22.1.el9_8
5.14.0-687.22.1.el9_8
kernel
Azure Linux:3
 before 6.6.141.1-1
6.6.141.1-1
linux-lts
Alpaquita:23
 6.1.174-r0 up to 6.1.175-r0
6.1.175-r0
linux-lts
Alpaquita:25
 6.12.87-r0 up to 6.12.92-r0
6.12.92-r0
linux-lts
Alpaquita:stream
 6.12.92-r1 up to 6.18.35-r1
6.18.35-r1
linux-buildinfo-5.4.0-237-generic
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
 before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-buildinfo-5.4.0-237-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
 before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-cloud-tools-5.4.0-237
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
 before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-cloud-tools-5.4.0-237-generic
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
 before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-cloud-tools-5.4.0-237-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
 before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-cloud-tools-common
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
 before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-doc
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
 before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-headers-5.4.0-237
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
 before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-headers-5.4.0-237-generic
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
 before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-headers-5.4.0-237-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
 before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-image-unsigned-5.4.0-237-generic
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
 before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-image-unsigned-5.4.0-237-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
 before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-libc-dev
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
 before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-modules-5.4.0-237-generic
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
 before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-modules-5.4.0-237-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
 before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-modules-extra-5.4.0-237-generic
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
 before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-source-5.4.0
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
 before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-tools-5.4.0-237
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
 before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-tools-5.4.0-237-generic
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
 before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-tools-5.4.0-237-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
 before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-tools-common
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
 before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-tools-host
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
 before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
bpftool
TuxCare:AlmaLinux:9.2
From an advisory covering 107 CVEs
 before 7.0.0-284.1101.el9_2.tuxcare.11.els17
7.0.0-284.1101.el9_2.tuxcare.11.els17
kernel
TuxCare:AlmaLinux:9.2
From an advisory covering 107 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els17
5.14.0-284.1101.el9_2.tuxcare.11.els17
kernel-64k
TuxCare:AlmaLinux:9.2
From an advisory covering 107 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els17
5.14.0-284.1101.el9_2.tuxcare.11.els17
kernel-64k-core
TuxCare:AlmaLinux:9.2
From an advisory covering 107 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els17
5.14.0-284.1101.el9_2.tuxcare.11.els17
kernel-64k-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 107 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els17
5.14.0-284.1101.el9_2.tuxcare.11.els17
kernel-64k-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 107 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els17
5.14.0-284.1101.el9_2.tuxcare.11.els17
kernel-64k-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 107 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els17
5.14.0-284.1101.el9_2.tuxcare.11.els17
kernel-64k-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 107 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els17
5.14.0-284.1101.el9_2.tuxcare.11.els17
kernel-64k-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 107 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els17
5.14.0-284.1101.el9_2.tuxcare.11.els17
kernel-64k-debug-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 107 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els17
5.14.0-284.1101.el9_2.tuxcare.11.els17
kernel-64k-debug-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 107 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els17
5.14.0-284.1101.el9_2.tuxcare.11.els17
kernel-64k-debug-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 107 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els17
5.14.0-284.1101.el9_2.tuxcare.11.els17
kernel-64k-debug-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 107 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els17
5.14.0-284.1101.el9_2.tuxcare.11.els17
kernel-64k-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 107 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els17
5.14.0-284.1101.el9_2.tuxcare.11.els17
kernel-64k-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 107 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els17
5.14.0-284.1101.el9_2.tuxcare.11.els17
kernel-64k-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 107 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els17
5.14.0-284.1101.el9_2.tuxcare.11.els17
kernel-64k-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 107 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els17
5.14.0-284.1101.el9_2.tuxcare.11.els17
kernel-64k-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 107 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els17
5.14.0-284.1101.el9_2.tuxcare.11.els17
kernel-64k-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 107 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els17
5.14.0-284.1101.el9_2.tuxcare.11.els17
kernel-64k-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 107 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els17
5.14.0-284.1101.el9_2.tuxcare.11.els17
kernel-abi-stablelists
TuxCare:AlmaLinux:9.2
From an advisory covering 107 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els17
5.14.0-284.1101.el9_2.tuxcare.11.els17
kernel-core
TuxCare:AlmaLinux:9.2
From an advisory covering 107 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els17
5.14.0-284.1101.el9_2.tuxcare.11.els17
kernel-cross-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 107 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els17
5.14.0-284.1101.el9_2.tuxcare.11.els17
kernel-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 107 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els17
5.14.0-284.1101.el9_2.tuxcare.11.els17
kernel-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 107 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els17
5.14.0-284.1101.el9_2.tuxcare.11.els17
kernel-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 107 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els17
5.14.0-284.1101.el9_2.tuxcare.11.els17
kernel-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 107 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els17
5.14.0-284.1101.el9_2.tuxcare.11.els17
kernel-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 107 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els17
5.14.0-284.1101.el9_2.tuxcare.11.els17
kernel-debug-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 107 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els17
5.14.0-284.1101.el9_2.tuxcare.11.els17
kernel-debug-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 107 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els17
5.14.0-284.1101.el9_2.tuxcare.11.els17
kernel-debug-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 107 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els17
5.14.0-284.1101.el9_2.tuxcare.11.els17
Kernel
Linux
 4.17.0 up to 5.10.258, 5.11.0 up to 5.15.209, 5.16.0 up to 6.1.175, 6.2.0 up to 6.6.140, 6.7.0 up to 6.12.90, 6.13.0 up to 6.18.32, 6.19.0 up to 7.0.9
5.10.2585.15.2096.1.1756.6.1406.12.906.18.327.0.9
linux
Debian:12
 before 6.1.176-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 45 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.170-16.1.170-26.1.170-36.1.172-16.1.174-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-1
6.1.176-1
linux
Debian:13
 before 6.12.90-1, plus listed versions
6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-1
Show 18 moreShow less
6.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-1~bpo12+1
6.12.90-1
linux
Debian:14
 before 7.0.9-1, plus listed versions
6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1
Show 45 moreShow less
6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1
7.0.9-1
kernel
openEuler:20.03-LTS-SP4
From an advisory covering 34 CVEs
 before 4.19.90-2606.1.0.0375.oe2003sp4
4.19.90-2606.1.0.0375.oe2003sp4
kernel
openEuler:22.03-LTS-SP4
From an advisory covering 14 CVEs
 before 5.10.0-321.0.0.223.oe2203sp4
5.10.0-321.0.0.223.oe2203sp4
kernel-rt
Red Hat:rhel_e4s:9.2::nfv
From an advisory covering 21 CVEs
 before 0:5.14.0-284.176.1.rt14.461.el9_2
0:5.14.0-284.176.1.rt14.461.el9_2
kernel-rt-core
Red Hat:rhel_e4s:9.2::nfv
From an advisory covering 21 CVEs
 before 0:5.14.0-284.176.1.rt14.461.el9_2
0:5.14.0-284.176.1.rt14.461.el9_2
kernel-rt-debug
Red Hat:rhel_e4s:9.2::nfv
From an advisory covering 21 CVEs
 before 0:5.14.0-284.176.1.rt14.461.el9_2
0:5.14.0-284.176.1.rt14.461.el9_2
kernel-rt-debug-core
Red Hat:rhel_e4s:9.2::nfv
From an advisory covering 21 CVEs
 before 0:5.14.0-284.176.1.rt14.461.el9_2
0:5.14.0-284.176.1.rt14.461.el9_2
kernel-rt-debug-debuginfo
Red Hat:rhel_e4s:9.2::nfv
From an advisory covering 21 CVEs
 before 0:5.14.0-284.176.1.rt14.461.el9_2
0:5.14.0-284.176.1.rt14.461.el9_2
kernel-rt-debug-devel
Red Hat:rhel_e4s:9.2::nfv
From an advisory covering 21 CVEs
 before 0:5.14.0-284.176.1.rt14.461.el9_2
0:5.14.0-284.176.1.rt14.461.el9_2
kernel-rt-debug-kvm
Red Hat:rhel_e4s:9.2::nfv
From an advisory covering 21 CVEs
 before 0:5.14.0-284.176.1.rt14.461.el9_2
0:5.14.0-284.176.1.rt14.461.el9_2
kernel-rt-debug-modules
Red Hat:rhel_e4s:9.2::nfv
From an advisory covering 21 CVEs
 before 0:5.14.0-284.176.1.rt14.461.el9_2
0:5.14.0-284.176.1.rt14.461.el9_2
kernel-rt-debug-modules-core
Red Hat:rhel_e4s:9.2::nfv
From an advisory covering 21 CVEs
 before 0:5.14.0-284.176.1.rt14.461.el9_2
0:5.14.0-284.176.1.rt14.461.el9_2
kernel-rt-debug-modules-extra
Red Hat:rhel_e4s:9.2::nfv
From an advisory covering 21 CVEs
 before 0:5.14.0-284.176.1.rt14.461.el9_2
0:5.14.0-284.176.1.rt14.461.el9_2
kernel-rt-debuginfo
Red Hat:rhel_e4s:9.2::nfv
From an advisory covering 21 CVEs
 before 0:5.14.0-284.176.1.rt14.461.el9_2
0:5.14.0-284.176.1.rt14.461.el9_2
kernel-rt-debuginfo-common-x86_64
Red Hat:rhel_e4s:9.2::nfv
From an advisory covering 21 CVEs
 before 0:5.14.0-284.176.1.rt14.461.el9_2
0:5.14.0-284.176.1.rt14.461.el9_2
kernel-rt-devel
Red Hat:rhel_e4s:9.2::nfv
From an advisory covering 21 CVEs
 before 0:5.14.0-284.176.1.rt14.461.el9_2
0:5.14.0-284.176.1.rt14.461.el9_2
kernel-rt-kvm
Red Hat:rhel_e4s:9.2::nfv
From an advisory covering 21 CVEs
 before 0:5.14.0-284.176.1.rt14.461.el9_2
0:5.14.0-284.176.1.rt14.461.el9_2
kernel-rt-modules
Red Hat:rhel_e4s:9.2::nfv
From an advisory covering 21 CVEs
 before 0:5.14.0-284.176.1.rt14.461.el9_2
0:5.14.0-284.176.1.rt14.461.el9_2
kernel-rt-modules-core
Red Hat:rhel_e4s:9.2::nfv
From an advisory covering 21 CVEs
 before 0:5.14.0-284.176.1.rt14.461.el9_2
0:5.14.0-284.176.1.rt14.461.el9_2
kernel-rt-modules-extra
Red Hat:rhel_e4s:9.2::nfv
From an advisory covering 21 CVEs
 before 0:5.14.0-284.176.1.rt14.461.el9_2
0:5.14.0-284.176.1.rt14.461.el9_2
kernel-rt
Red Hat:rhel_e4s:9.2::realtime
From an advisory covering 21 CVEs
 before 0:5.14.0-284.176.1.rt14.461.el9_2
0:5.14.0-284.176.1.rt14.461.el9_2
kernel-rt-core
Red Hat:rhel_e4s:9.2::realtime
From an advisory covering 21 CVEs
 before 0:5.14.0-284.176.1.rt14.461.el9_2
0:5.14.0-284.176.1.rt14.461.el9_2
kernel-rt-debug
Red Hat:rhel_e4s:9.2::realtime
From an advisory covering 21 CVEs
 before 0:5.14.0-284.176.1.rt14.461.el9_2
0:5.14.0-284.176.1.rt14.461.el9_2
kernel-rt-debug-core
Red Hat:rhel_e4s:9.2::realtime
From an advisory covering 21 CVEs
 before 0:5.14.0-284.176.1.rt14.461.el9_2
0:5.14.0-284.176.1.rt14.461.el9_2
kernel-rt-debug-debuginfo
Red Hat:rhel_e4s:9.2::realtime
From an advisory covering 21 CVEs
 before 0:5.14.0-284.176.1.rt14.461.el9_2
0:5.14.0-284.176.1.rt14.461.el9_2
kernel-rt-debug-devel
Red Hat:rhel_e4s:9.2::realtime
From an advisory covering 21 CVEs
 before 0:5.14.0-284.176.1.rt14.461.el9_2
0:5.14.0-284.176.1.rt14.461.el9_2
kernel-rt-debug-modules
Red Hat:rhel_e4s:9.2::realtime
From an advisory covering 21 CVEs
 before 0:5.14.0-284.176.1.rt14.461.el9_2
0:5.14.0-284.176.1.rt14.461.el9_2
kernel-rt-debug-modules-core
Red Hat:rhel_e4s:9.2::realtime
From an advisory covering 21 CVEs
 before 0:5.14.0-284.176.1.rt14.461.el9_2
0:5.14.0-284.176.1.rt14.461.el9_2
kernel-rt-debug-modules-extra
Red Hat:rhel_e4s:9.2::realtime
From an advisory covering 21 CVEs
 before 0:5.14.0-284.176.1.rt14.461.el9_2
0:5.14.0-284.176.1.rt14.461.el9_2
kernel-rt-debuginfo
Red Hat:rhel_e4s:9.2::realtime
From an advisory covering 21 CVEs
 before 0:5.14.0-284.176.1.rt14.461.el9_2
0:5.14.0-284.176.1.rt14.461.el9_2
kernel-rt-debuginfo-common-x86_64
Red Hat:rhel_e4s:9.2::realtime
From an advisory covering 21 CVEs
 before 0:5.14.0-284.176.1.rt14.461.el9_2
0:5.14.0-284.176.1.rt14.461.el9_2
kernel-rt-devel
Red Hat:rhel_e4s:9.2::realtime
From an advisory covering 21 CVEs
 before 0:5.14.0-284.176.1.rt14.461.el9_2
0:5.14.0-284.176.1.rt14.461.el9_2
kernel-rt-modules
Red Hat:rhel_e4s:9.2::realtime
From an advisory covering 21 CVEs
 before 0:5.14.0-284.176.1.rt14.461.el9_2
0:5.14.0-284.176.1.rt14.461.el9_2
kernel-rt-modules-core
Red Hat:rhel_e4s:9.2::realtime
From an advisory covering 21 CVEs
 before 0:5.14.0-284.176.1.rt14.461.el9_2
0:5.14.0-284.176.1.rt14.461.el9_2
kernel-rt-modules-extra
Red Hat:rhel_e4s:9.2::realtime
From an advisory covering 21 CVEs
 before 0:5.14.0-284.176.1.rt14.461.el9_2
0:5.14.0-284.176.1.rt14.461.el9_2
bpftool-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 20 CVEs
 before 0:7.0.0-284.176.1.el9_2
0:7.0.0-284.176.1.el9_2
kernel-64k-debug-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-284.176.1.el9_2
0:5.14.0-284.176.1.el9_2
kernel-64k-debug-devel
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-284.176.1.el9_2
0:5.14.0-284.176.1.el9_2
kernel-64k-debug-devel-matched
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-284.176.1.el9_2
0:5.14.0-284.176.1.el9_2
kernel-64k-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-284.176.1.el9_2
0:5.14.0-284.176.1.el9_2
kernel-64k-devel
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-284.176.1.el9_2
0:5.14.0-284.176.1.el9_2
kernel-64k-devel-matched
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-284.176.1.el9_2
0:5.14.0-284.176.1.el9_2
kernel-debug-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-284.176.1.el9_2
0:5.14.0-284.176.1.el9_2
kernel-debug-devel
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-284.176.1.el9_2
0:5.14.0-284.176.1.el9_2
kernel-debug-devel-matched
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-284.176.1.el9_2
0:5.14.0-284.176.1.el9_2
kernel-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-284.176.1.el9_2
0:5.14.0-284.176.1.el9_2
kernel-debuginfo-common-aarch64
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-284.176.1.el9_2
0:5.14.0-284.176.1.el9_2
kernel-debuginfo-common-ppc64le
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-284.176.1.el9_2
0:5.14.0-284.176.1.el9_2
kernel-debuginfo-common-s390x
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-284.176.1.el9_2
0:5.14.0-284.176.1.el9_2
kernel-debuginfo-common-x86_64
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-284.176.1.el9_2
0:5.14.0-284.176.1.el9_2
kernel-devel
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-284.176.1.el9_2
0:5.14.0-284.176.1.el9_2
kernel-devel-matched
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-284.176.1.el9_2
0:5.14.0-284.176.1.el9_2
kernel-doc
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-284.176.1.el9_2
0:5.14.0-284.176.1.el9_2
kernel-tools-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-284.176.1.el9_2
0:5.14.0-284.176.1.el9_2
kernel-zfcpdump-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-284.176.1.el9_2
0:5.14.0-284.176.1.el9_2
kernel-zfcpdump-devel
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-284.176.1.el9_2
0:5.14.0-284.176.1.el9_2
kernel
Rocky Linux:9
From an advisory covering 11 CVEs
 before 0:5.14.0-687.22.1.el9_8
0:5.14.0-687.22.1.el9_8
kernel
Rocky Linux:10
From an advisory covering 4 CVEs
 before 0:6.12.0-211.32.1.el10_2
0:6.12.0-211.32.1.el10_2
linux
Root:Debian:11
 before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
rootio-linux
Root:Debian:11
 before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
rootio-linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
rootio-linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
rootio-linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
kernel-rt
SUSE:Linux Micro 6.0
From an advisory covering 169 CVEs
 before 6.4.0-48.1
6.4.0-48.1
kernel-source-rt
SUSE:Linux Micro 6.0
From an advisory covering 169 CVEs
 before 6.4.0-48.1
6.4.0-48.1
kernel-default
SUSE:Linux Micro 6.0
From an advisory covering 71 CVEs
 before 6.4.0-48.1
6.4.0-48.1
kernel-default-base
SUSE:Linux Micro 6.0
From an advisory covering 71 CVEs
 before 6.4.0-48.1.21.25
6.4.0-48.1.21.25
kernel-kvmsmall
SUSE:Linux Micro 6.0
From an advisory covering 71 CVEs
 before 6.4.0-48.1
6.4.0-48.1
kernel-source
SUSE:Linux Micro 6.0
From an advisory covering 71 CVEs
 before 6.4.0-48.1
6.4.0-48.1
kernel-rt
SUSE:Linux Micro 6.1
From an advisory covering 169 CVEs
 before 6.4.0-48.1
6.4.0-48.1
kernel-source-rt
SUSE:Linux Micro 6.1
From an advisory covering 169 CVEs
 before 6.4.0-48.1
6.4.0-48.1
kernel-default
SUSE:Linux Micro 6.1
From an advisory covering 71 CVEs
 before 6.4.0-48.1
6.4.0-48.1
kernel-default-base
SUSE:Linux Micro 6.1
From an advisory covering 71 CVEs
 before 6.4.0-48.1.21.25
6.4.0-48.1.21.25
kernel-kvmsmall
SUSE:Linux Micro 6.1
From an advisory covering 71 CVEs
 before 6.4.0-48.1
6.4.0-48.1
kernel-source
SUSE:Linux Micro 6.1
From an advisory covering 71 CVEs
 before 6.4.0-48.1
6.4.0-48.1
kernel-livepatch-SLE16-RT_Update_9
SUSE:Linux Micro 6.2
From an advisory covering 20 CVEs
 before 4-160000.1.1
4-160000.1.1
kernel-livepatch-MICRO-6-0_Update_24
SUSE:Linux Micro 6.1
From an advisory covering 9 CVEs
 before 2-1.1
2-1.1
kernel-livepatch-MICRO-6-0_Update_10
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
 before 14-1.1
14-1.1
kernel-livepatch-MICRO-6-0_Update_11
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
 before 13-1.1
13-1.1
kernel-livepatch-MICRO-6-0_Update_12
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
 before 13-1.1
13-1.1
kernel-livepatch-MICRO-6-0_Update_13
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
 before 11-1.1
11-1.1
kernel-livepatch-MICRO-6-0_Update_16
SUSE:Linux Micro 6.1
From an advisory covering 24 CVEs
 before 8-1.1
8-1.1
kernel-livepatch-MICRO-6-0_Update_21
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
 before 3-1.1
3-1.1
kernel-livepatch-MICRO-6-0_Update_23
SUSE:Linux Micro 6.1
From an advisory covering 9 CVEs
 before 3-1.1
3-1.1
kernel-livepatch-MICRO-6-0_Update_8
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
 before 20-1.2
20-1.2
kernel-livepatch-MICRO-6-0_Update_9
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
 before 20-1.2
20-1.2
kernel-livepatch-MICRO-6-0_Update_14
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
 before 9-1.2
9-1.2
kernel-livepatch-MICRO-6-0_Update_17
SUSE:Linux Micro 6.1
From an advisory covering 24 CVEs
 before 7-1.1
7-1.1
kernel-livepatch-MICRO-6-0_Update_18
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
 before 6-1.1
6-1.1
kernel-livepatch-MICRO-6-0_Update_19
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
 before 4-1.1
4-1.1
kernel-livepatch-MICRO-6-0_Update_20
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
 before 3-1.1
3-1.1
kernel-livepatch-MICRO-6-0_Update_22
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
 before 3-1.1
3-1.1
kernel-livepatch-MICRO-6-0-RT_Update_13
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
 before 9-1.1
9-1.1
kernel-livepatch-MICRO-6-0-RT_Update_15
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
 before 8-1.1
8-1.1
kernel-livepatch-MICRO-6-0-RT_Update_18
SUSE:Linux Micro 6.1
From an advisory covering 24 CVEs
 before 7-1.1
7-1.1
kernel-livepatch-MICRO-6-0-RT_Update_19
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
 before 6-1.1
6-1.1
kernel-livepatch-MICRO-6-0-RT_Update_20
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
 before 4-1.1
4-1.1
kernel-livepatch-MICRO-6-0-RT_Update_21
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
 before 3-1.1
3-1.1
kernel-livepatch-MICRO-6-0-RT_Update_22
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
 before 3-1.2
3-1.2
kernel-livepatch-MICRO-6-0-RT_Update_14
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
 before 9-1.1
9-1.1
kernel-livepatch-MICRO-6-0-RT_Update_23
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
 before 3-1.1
3-1.1
kernel-livepatch-MICRO-6-0-RT_Update_24
SUSE:Linux Micro 6.1
From an advisory covering 9 CVEs
 before 2-1.1
2-1.1
kernel-livepatch-MICRO-6-0_Update_24
SUSE:Linux Micro 6.0
From an advisory covering 9 CVEs
 before 2-1.1
2-1.1
kernel-livepatch-MICRO-6-0-RT_Update_13
SUSE:Linux Micro 6.0
From an advisory covering 25 CVEs
 before 9-1.1
9-1.1
kernel-livepatch-MICRO-6-0-RT_Update_15
SUSE:Linux Micro 6.0
From an advisory covering 25 CVEs
 before 8-1.1
8-1.1
kernel-livepatch-MICRO-6-0-RT_Update_18
SUSE:Linux Micro 6.0
From an advisory covering 24 CVEs
 before 7-1.1
7-1.1
kernel-livepatch-MICRO-6-0-RT_Update_19
SUSE:Linux Micro 6.0
From an advisory covering 21 CVEs
 before 6-1.1
6-1.1
kernel-livepatch-MICRO-6-0-RT_Update_20
SUSE:Linux Micro 6.0
From an advisory covering 21 CVEs
 before 4-1.1
4-1.1
kernel-livepatch-MICRO-6-0-RT_Update_21
SUSE:Linux Micro 6.0
From an advisory covering 21 CVEs
 before 3-1.1
3-1.1
kernel-livepatch-MICRO-6-0-RT_Update_22
SUSE:Linux Micro 6.0
From an advisory covering 21 CVEs
 before 3-1.2
3-1.2
kernel-livepatch-MICRO-6-0_Update_10
SUSE:Linux Micro 6.0
From an advisory covering 25 CVEs
 before 14-1.1
14-1.1
kernel-livepatch-MICRO-6-0_Update_11
SUSE:Linux Micro 6.0
From an advisory covering 25 CVEs
 before 13-1.1
13-1.1
kernel-livepatch-MICRO-6-0_Update_12
SUSE:Linux Micro 6.0
From an advisory covering 25 CVEs
 before 13-1.1
13-1.1
kernel-livepatch-MICRO-6-0_Update_13
SUSE:Linux Micro 6.0
From an advisory covering 25 CVEs
 before 11-1.1
11-1.1
kernel-livepatch-MICRO-6-0_Update_16
SUSE:Linux Micro 6.0
From an advisory covering 24 CVEs
 before 8-1.1
8-1.1
kernel-livepatch-MICRO-6-0_Update_21
SUSE:Linux Micro 6.0
From an advisory covering 21 CVEs
 before 3-1.1
3-1.1
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-aws-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1
Show 45 moreShow less
5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gcp-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 45 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-ibm-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1
Show 45 moreShow less
5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-oracle-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1
 None known
linux-raspi-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1
Show 45 moreShow less
5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1
 None known
linux
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 45 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110
 None known
linux-aws
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5
Show 45 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1112.119~20.04.1, plus listed versions
5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1
Show 45 moreShow less
5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1
5.15.0-1112.119~20.04.1
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8
Show 45 moreShow less
5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
linux-azure-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
 None known
linux-azure-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1117.126~20.04.1, plus listed versions
5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1
Show 45 moreShow less
5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1
5.15.0-1117.126~20.04.1
linux-azure-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
 None known
linux-azure-fde
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
 None known
linux-azure-fde-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1117.126~20.04.2, plus listed versions
5.15.0-1019.24~20.04.1.15.15.0-1020.25~20.04.1.15.15.0-1021.26~20.04.1.15.15.0-1029.36~20.04.1.15.15.0-1030.37~20.04.1.1
Show 45 moreShow less
5.15.0-1031.38~20.04.1.15.15.0-1033.40~20.04.1.15.15.0-1034.41~20.04.1.25.15.0-1035.42~20.04.1.15.15.0-1036.43~20.04.1.15.15.0-1037.44~20.04.1.15.15.0-1038.45~20.04.1.15.15.0-1039.46~20.04.1.15.15.0-1040.47~20.04.1.15.15.0-1041.48~20.04.1.15.15.0-1042.49~20.04.1.15.15.0-1043.50~20.04.1.15.15.0-1046.53~20.04.1.15.15.0-1047.54~20.04.1.15.15.0-1049.56~20.04.1.15.15.0-1050.57~20.04.1.15.15.0-1051.59~20.04.1.15.15.0-1052.60~20.04.1.15.15.0-1053.61~20.04.1.15.15.0-1054.62~20.04.1.15.15.0-1056.64~20.04.1.15.15.0-1057.65~20.04.1.15.15.0-1058.66~20.04.2.15.15.0-1059.67~20.04.1.15.15.0-1060.69~20.04.1.15.15.0-1061.70~20.04.1.15.15.0-1063.72~20.04.1.15.15.0-1064.73~20.04.1.15.15.0-1065.74~20.04.1.15.15.0-1067.76~20.04.1.15.15.0-1068.77~20.04.1.15.15.0-1070.79~20.04.1.15.15.0-1071.80~20.04.1.15.15.0-1072.81~20.04.1.15.15.0-1073.82~20.04.1.15.15.0-1074.83~20.04.1.15.15.0-1076.85~20.04.1.15.15.0-1078.87~20.04.1.15.15.0-1081.90~20.04.1.15.15.0-1082.91~20.04.1.15.15.0-1086.95~20.04.1.15.15.0-1087.96~20.04.1.15.15.0-1088.97~20.04.1.15.15.0-1089.98~20.04.1.15.15.0-1091.100~20.04.1.1
5.15.0-1117.126~20.04.2
linux-bluefield
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.4.0-1007.105.4.0-1011.145.4.0-1012.155.4.0-1013.165.4.0-1016.19
Show 45 moreShow less
5.4.0-1019.225.4.0-1020.235.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1030.335.4.0-1032.355.4.0-1035.385.4.0-1036.395.4.0-1040.445.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1049.555.4.0-1050.565.4.0-1054.605.4.0-1058.645.4.0-1059.655.4.0-1060.665.4.0-1062.685.4.0-1064.705.4.0-1065.715.4.0-1066.725.4.0-1068.745.4.0-1070.765.4.0-1071.775.4.0-1072.785.4.0-1073.795.4.0-1074.805.4.0-1075.815.4.0-1076.825.4.0-1077.835.4.0-1078.845.4.0-1079.855.4.0-1080.875.4.0-1081.885.4.0-1082.895.4.0-1083.905.4.0-1084.915.4.0-1085.92
 None known
linux-gcp
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7
Show 45 moreShow less
5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1033.355.4.0-1034.375.4.0-1036.395.4.0-1037.405.4.0-1038.415.4.0-1040.435.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1044.475.4.0-1046.495.4.0-1049.535.4.0-1051.555.4.0-1052.565.4.0-1053.575.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1060.645.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1065.695.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1072.775.4.0-1073.785.4.0-1075.80
 None known
linux-gcp-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1
Show 7 moreShow less
5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3
 None known
linux-gcp-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1
Show 8 moreShow less
5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1
 None known
linux-gcp-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1112.122~20.04.1, plus listed versions
5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2
Show 45 moreShow less
5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.15.15.0-1065.73~20.04.15.15.0-1066.74~20.04.15.15.0-1067.75~20.04.15.15.0-1068.76~20.04.15.15.0-1069.77~20.04.15.15.0-1070.78~20.04.15.15.0-1071.79~20.04.15.15.0-1072.80~20.04.15.15.0-1073.81~20.04.15.15.0-1074.83~20.04.1
5.15.0-1112.122~20.04.1
linux-gcp-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41
 None known
linux-gke
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
 None known
linux-gke-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1
Show 13 moreShow less
5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1
 None known
linux-gkeop
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13
Show 45 moreShow less
5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77
 None known
linux-gkeop-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2
Show 40 moreShow less
5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1
 None known
linux-hwe-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1
Show 7 moreShow less
5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1
 None known
linux-hwe-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1
Show 11 moreShow less
5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1
 None known
linux-hwe-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-186.196~20.04.1, plus listed versions
5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
Show 45 moreShow less
5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1
5.15.0-186.196~20.04.1
linux-hwe-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1
Show 16 moreShow less
5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1
 None known
linux-ibm
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.4.0-1003.45.4.0-1004.55.4.0-1005.65.4.0-1006.75.4.0-1007.8
Show 45 moreShow less
5.4.0-1008.95.4.0-1010.115.4.0-1012.135.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1017.195.4.0-1018.205.4.0-1019.215.4.0-1020.225.4.0-1021.235.4.0-1023.255.4.0-1026.295.4.0-1028.325.4.0-1029.335.4.0-1031.355.4.0-1032.365.4.0-1033.375.4.0-1034.385.4.0-1036.415.4.0-1037.425.4.0-1040.455.4.0-1041.465.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1048.535.4.0-1049.545.4.0-1050.555.4.0-1051.565.4.0-1052.575.4.0-1053.585.4.0-1054.595.4.0-1056.615.4.0-1057.625.4.0-1058.635.4.0-1059.645.4.0-1060.655.4.0-1061.665.4.0-1063.685.4.0-1064.695.4.0-1065.705.4.0-1066.71
 None known
linux-ibm-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1106.110~20.04.1, plus listed versions
5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1
Show 45 moreShow less
5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.15.15.0-1057.60~20.04.15.15.0-1058.61~20.04.15.15.0-1059.62~20.04.15.15.0-1060.63~20.04.15.15.0-1061.64~20.04.15.15.0-1062.65~20.04.15.15.0-1063.66~20.04.15.15.0-1064.67~20.04.15.15.0-1065.68~20.04.15.15.0-1066.69~20.04.15.15.0-1067.70~20.04.15.15.0-1068.71~20.04.15.15.0-1069.72~20.04.15.15.0-1074.77~20.04.15.15.0-1075.78~20.04.15.15.0-1076.79~20.04.15.15.0-1078.81~20.04.15.15.0-1079.82~20.04.15.15.0-1080.83~20.04.15.15.0-1081.84~20.04.15.15.0-1083.86~20.04.15.15.0-1085.88~20.04.15.15.0-1086.89~20.04.15.15.0-1087.90~20.04.15.15.0-1089.92~20.04.15.15.0-1090.93~20.04.15.15.0-1091.94~20.04.15.15.0-1092.95~20.04.15.15.0-1093.96~20.04.15.15.0-1094.97~20.04.1
5.15.0-1106.110~20.04.1
linux-intel-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19
 None known
kernel-source
openSUSE:Tumbleweed
From an advisory covering 274 CVEs
 before 7.0.11-1.1
7.0.11-1.1
dtb-aarch64
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-64kb
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-azure
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-default
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-default-base
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1.160000.2.17
6.12.0-160000.36.1.160000.2.17
kernel-docs
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-kvmsmall
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-obs-build
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-obs-qa
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-rt
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-source
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-syms
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-zfcpdump
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
 before 6.12.0-160000.36.1
6.12.0-160000.36.1

History

History
RecordedChangedSources
affectedOSV
affectedOSV
affectedOSV
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-46227 is a high vulnerability (CVSS 7.8) in Linux, published May 28, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.10%, the 1st percentile. Fixed in kernel 6.6.141.1-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 1,787 package rows, 1,051 versions, 4,454 references and the rest of 12 source descriptions. The JSON record has them. Also not on the record: 140 aliases. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 189 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open