Every CVE Search/ Get API key

CVE-2026-46316

KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry

9.3 CriticalPublic exploitFix available

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry

vgic_its_invalidate_cache() walks the per-ITS translation cache with xa_for_each() and drops the cache's reference on each entry with vgic_put_irq(). It puts the iterated pointer, though, rather than the value returned by xa_erase().

The function is called from contexts that do not exclude one another: the ITS command handlers hold its_lock, the GITS_CTLR write path holds cmd_lock, and the path that clears EnableLPIs in a redistributor's GICR_CTLR holds neither. Two or more of them can drain the same cache concurrently, and if each one observes the same entry, erases it and then puts it, the single reference the cache holds on that entry is dropped more than once. The entry can then be freed while an ITE still maps it.

xa_erase() is atomic and returns the previous entry, so put only the entry that this context actually removed. The cache reference is then dropped exactly once per entry even when the invalidations run concurrently, and the behavior is unchanged when only one context runs.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.34%Up 0.3 points since Jun 10, 2026
90%50%10%1%

What each source reports

CVE List Score used 9.3

KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry

vgic_its_invalidate_cache() walks the per-ITS translation cache with xa_for_each() and drops the cache's reference on each entry with vgic_put_irq(). It puts the iterated pointer, though, rather than the value returned by xa_erase().

The function is called from contexts that do not exclude one another: the ITS command handlers hold its_lock, the GITS_CTLR write path holds cmd_lock, and the path that clears EnableLPIs in a redistributor's GICR_CTLR holds neither. Two or more of them can drain the same cache concurrently, and if each one observes the same entry, erases it and then puts it, the single reference the cache holds on that entry is dropped more than once. The entry can then be freed while an ITE still maps it.

xa_erase() is atomic and returns the previous entry, so put only the entry that this context actually removed. The cache reference is then dropped exactly once per entry even when the invalidations run concurrently, and the behavior is unchanged when only one context runs.

Record
CVE-2026-46316
CVSS 3.1
9.3 CriticalCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-911, CWE-362
Updated
2026-11-02
EUVDEUVD-2026-35405 9.3

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry

vgic_its_invalidate_cache() walks the per-ITS translation cache with xa_for_each() and drops the cache's reference on each entry with vgic_put_irq(). It puts the iterated pointer, though, rather than the value returned by xa_erase().

The function is called from contexts that do not exclude one another: the ITS command handlers hold its_lock, the GITS_CTLR write path holds cmd_lock, and the path that clears EnableLPIs in a redistributor's GICR_CTLR holds neither. Two or more of them can drain the same cache concurrently, and if each one observes the same entry, erases it and then puts it, the single reference the cache holds on that entry is dropped more than once. The entry can then be freed while an ITE still maps it.

xa_erase() is atomic and returns the previous entry, so put only the entry that this context actually removed. The cache reference is then dropped exactly once per entry even when the invalidations run concurrently, and the behavior is unchanged when only one context runs.

Record
EUVD-2026-35405
CVSS 3.1
9.3 CriticalCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-qcxh-2cm7-9fcc 9.3

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Drop...

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry

vgic_its_invalidate_cache() walks the per-ITS translation cache with xa_for_each() and drops the cache's reference on each entry with vgic_put_irq(). It puts the iterated pointer, though, rather than the value returned by xa_erase().

The function is called from contexts that do not exclude one another: the ITS command handlers hold its_lock, the GITS_CTLR write path holds cmd_lock, and the path that clears EnableLPIs in a redistributor's GICR_CTLR holds neither. Two or more of them can drain the same cache concurrently, and if each one observes the same entry, erases it and then puts it, the single reference the cache holds on that entry is dropped more than once. The entry can then be freed while an ITE still maps it.

xa_erase() is atomic and returns the previous entry, so put only the entry that this context actually removed. The cache reference is then dropped exactly once per entry even when the invalidations run concurrently, and the behavior is unchanged when only one context runs.

Record
GHSA-qcxh-2cm7-9fcc
CVSS 3.1
9.3 CriticalCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Weakness
CWE-362, CWE-911
Updated
2026-11-02
NVD 9.3

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry

vgic_its_invalidate_cache() walks the per-ITS translation cache with xa_for_each() and drops the cache's reference on each entry with vgic_put_irq(). It puts the iterated pointer, though, rather than the value returned by xa_erase().

The function is called from contexts that do not exclude one another: the ITS command handlers hold its_lock, the GITS_CTLR write path holds cmd_lock, and the path that clears EnableLPIs in a redistributor's GICR_CTLR holds neither. Two or more of them can drain the same cache concurrently, and if each one observes the same entry, erases it and then puts it, the single reference the cache holds on that entry is dropped more than once. The entry can then be freed while an ITE still maps it.

xa_erase() is atomic and returns the previous entry, so put only the entry that this context actually removed. The cache reference is then dropped exactly once per entry even when the invalidations run concurrently, and the behavior is unchanged when only one context runs.

Record
CVE-2026-46316
CVSS 3.1
9.3 CriticalCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-362, CWE-911
Updated
2026-11-02
OSVBELL-CVE-2026-46316 9.3
Record
BELL-CVE-2026-46316
CVSS 3.1
9.3 CriticalCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSV 9.3

KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry

vgic_its_invalidate_cache() walks the per-ITS translation cache with xa_for_each() and drops the cache's reference on each entry with vgic_put_irq(). It puts the iterated pointer, though, rather than the value returned by xa_erase().

The function is called from contexts that do not exclude one another: the ITS command handlers hold its_lock, the GITS_CTLR write path holds cmd_lock, and the path that clears EnableLPIs in a redistributor's GICR_CTLR holds neither. Two or more of them can drain the same cache concurrently, and if each one observes the same entry, erases it and then puts it, the single reference the cache holds on that entry is dropped more than once. The entry can then be freed while an ITE still maps it.

xa_erase() is atomic and returns the previous entry, so put only the entry that this context actually removed. The cache reference is then dropped exactly once per entry even when the invalidations run concurrently, and the behavior is unchanged when only one context runs.

Record
CVE-2026-46316
CVSS 3.1
9.3 CriticalCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
Show 37 moreShow less
OSVDEBIAN-CVE-2026-46316 9.3

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry vgic_its_invalidate_cache() walks the per-ITS translation cache with xa_for_each() and drops the cache's reference on each entry with vgic_put_irq(). It puts the iterated pointer, though, rather than the value returned by xa_erase(). The function is called from contexts that do not exclude one another: the ITS command handlers hold its_lock, the GITS_CTLR write path holds cmd_lock, and the path that clears EnableLPIs in a redistributor's GICR_CTLR holds neither. Two or more of them can drain the same cache concurrently, and if each one observes the same entry, erases it and then puts it, the single reference the cache holds on that entry is dropped more than once. The entry can then be freed while an ITE still maps it. xa_erase() is atomic and returns the previous entry, so put only the entry that this context actually removed. The cache reference is then dropped exactly once per entry even when the invalidations run concurrently, and the behavior is unchanged when only one context runs.

Record
DEBIAN-CVE-2026-46316
CVSS 3.1
9.3 CriticalCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:34911 8.4

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:34911
CVSS 3.1
8.4 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:36018 8.4

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:36018
CVSS 3.1
8.4 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:38902 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:38902
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:39371 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:39371
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:36018 8.4

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CVE-2026-43112)

  • kernel: net: mana: Fix double destroy_workqueue on service rescan PCI path (CVE-2026-43276)

  • kernel: Linux kernel: Use-After-Free in net/gro due to improper handling of zerocopy skbs (CVE-2026-46323)

  • kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (CVE-2026-46116)

  • kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227)

  • kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CVE-2026-46209)

  • kernel: smb/client: fix out-of-bounds read in smb2_compound_op() (CVE-2026-46155)

  • kernel: netfilter: nft_inner: Fix IPv6 inner_thoff desync (CVE-2026-46244)

  • kernel: procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CVE-2026-46259)

  • kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources (CVE-2025-10263)

  • kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVE-2026-46316)

Bug Fix(es) and Enhancement(s):

  • WARNING at drivers/gpu/drm/nouveau/nvkm/subdev/gsp/r535.c:1585 r535_gsp_fini+0x2fb/0x310 [nouveau] [rhel-9.8.z] (JIRA:Rocky Linux-160966)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:36018
CVSS 3.1
8.4 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2026-46316 8.9

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry vgic_its_invalidate_cache() walks the per-ITS translation cache with xa_for_each() and drops the cache's reference on each entry with vgic_put_irq(). It puts the iterated pointer, though, rather than the value returned by xa_erase(). The function is called from contexts that do not exclude one another: the ITS command handlers hold its_lock, the GITS_CTLR write path holds cmd_lock, and the path that clears EnableLPIs in a redistributor's GICR_CTLR holds neither. Two or more of them can drain the same cache concurrently, and if each one observes the same entry, erases it and then puts it, the single reference the cache holds on that entry is dropped more than once. The entry can then be freed while an ITE still maps it. xa_erase() is atomic and returns the previous entry, so put only the entry that this context actually removed. The cache reference is then dropped exactly once per entry even when the invalidations run concurrently, and the behavior is unchanged when only one context runs.

Record
UBUNTU-CVE-2026-46316
CVSS 4.0
8.9 HighCVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1
9.3 CriticalCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-07
OSVALSA-2026:30129 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: rxrpc: fix RESPONSE authenticator parser OOB read (CVE-2026-31636)
  • kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (CVE-2026-43038)
  • kernel: tcp: fix potential race in tcp_v6_syn_recv_sock() (CVE-2026-43198)
  • kernel: scsi: qla2xxx: Completely fix fcport double free (CVE-2026-43414)
  • kernel: RDMA/iwcm: Fix workqueue list corruption by removing work_list (CVE-2026-45898)
  • kernel: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CVE-2026-46117)
  • kernel: RDMA/mana: Validate rx_hash_key_len (CVE-2026-46145)
  • kernel: nvmet-tcp: fix race between ICReq handling and queue teardown (CVE-2026-46135)
  • kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVE-2026-46316)

Bug Fix(es) and Enhancement(s):

  • Unexpected execmem SELinux denials after CVE-2026-46054 fix [rhel-10.2.z] (JIRA:RHEL-185117)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:30129
Updated
2026-11-02
OSVALSA-2026:30848 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation (CVE-2026-31488)
  • kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (CVE-2026-43038)
  • kernel: netfilter: flowtable: strictly check for maximum number of actions (CVE-2026-43329)
  • kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop (CVE-2026-46090)
  • kernel: selinux: fix overlayfs mmap() and mprotect() access checks (CVE-2026-46054)
  • kernel: RDMA/iwcm: Fix workqueue list corruption by removing work_list (CVE-2026-45898)
  • kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CVE-2026-46189)
  • kernel: RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CVE-2026-46176)
  • kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVE-2026-46316)

Bug Fix(es) and Enhancement(s):

  • [AlmaLinux-9.8.z]: Update the mlx5 drivers to v6.19 (JIRA:AlmaLinux-169057)
  • iavf: during POD churn vlan filters may not be added for a vlan interface, spoofchk drops subsequent packets [almalinux-9.8.z] (JIRA:AlmaLinux-172993)
  • nf_conntrack_sctp: vtag corruption with late INIT in ESTABLISHED state across conntrack zones [almalinux-9.8.z] (JIRA:AlmaLinux-178273)
  • sched/fair: Skip sched_balance_running cmpxchg when balance is not due [almalinux-9.8.z] (JIRA:AlmaLinux-182776)
  • [REGRESSION] ISST-Spyre: Jenkins workload causes soft lock warning to appear on screen. Workload hangs. [almalinux-9.8.z] (JIRA:AlmaLinux-183183)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:30848
Updated
2026-11-02
OSVALSA-2026:34911 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CVE-2026-43112)
  • kernel: rxrpc: Fix potential UAF after skb_unshare() failure (CVE-2026-45998)
  • kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CVE-2026-46209)
  • kernel: netfilter: nft_inner: Fix IPv6 inner_thoff desync (CVE-2026-46244)
  • kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources (CVE-2025-10263)
  • kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVE-2026-46316)
  • kernel: kernel: ipv6 frag escape ()

Bug Fix(es) and Enhancement(s):

  • crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode [almalinux-10.2.z] (JIRA:AlmaLinux-182537)
  • [ThinkPad Avon/Mario +AlmaLinux 10.2]The OS hang up with CapsLock fliker (JIRA:AlmaLinux-185110)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:34911
Updated
2026-11-02
OSVALSA-2026:36018 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CVE-2026-43112)
  • kernel: net: mana: Fix double destroy_workqueue on service rescan PCI path (CVE-2026-43276)
  • kernel: Linux kernel: Use-After-Free in net/gro due to improper handling of zerocopy skbs (CVE-2026-46323)
  • kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (CVE-2026-46116)
  • kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227)
  • kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CVE-2026-46209)
  • kernel: smb/client: fix out-of-bounds read in smb2_compound_op() (CVE-2026-46155)
  • kernel: netfilter: nft_inner: Fix IPv6 inner_thoff desync (CVE-2026-46244)
  • kernel: procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CVE-2026-46259)
  • kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources (CVE-2025-10263)
  • kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVE-2026-46316)

Bug Fix(es) and Enhancement(s):

  • WARNING at drivers/gpu/drm/nouveau/nvkm/subdev/gsp/r535.c:1585 r535_gsp_fini+0x2fb/0x310 [nouveau] [almalinux-9.8.z] (JIRA:AlmaLinux-160966)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:36018
Updated
2026-11-02
OSVCLSA-2026-1781344094 No score

kernel: Fix of 93 CVEs

  • irqchip: Fix refcount leak in platform_irqchip_probe {CVE-2023-53610}
  • IB/hfi1: Fix a memleak in init_credit_return {CVE-2024-26839}
  • RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() {CVE-2026-23335}
  • wifi: brcmfmac: validate bsscfg indices in IF events {CVE-2026-43110}
  • wifi: rtlwifi: 8192cu: fix tid out of range in rtl92cu_tx_fill_desc() {CVE-2025-71100}
  • RDMA/core: always drop device refcount in ib_del_sub_device_and_put() {CVE-2025-71157}
  • drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table {CVE-2024-58052}
  • ionic: Fix netdev notifier unregister on failure {CVE-2024-56715}
  • uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind {CVE-2024-46739}
  • netfilter: xt_tcpmss: check remaining length before reading optlen {CVE-2026-43190}
  • usb: typec: altmodes/displayport: do not index invalid pin_assignments {CVE-2025-38391}
  • crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init {CVE-2023-52616}
  • eventpoll: defer struct eventpoll free to RCU grace period {CVE-2026-43074}
  • wifi: brcmsmac: Fix dma_free_coherent() size {CVE-2026-31661}
  • SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf {CVE-2025-71120}
  • netfilter: nf_conntrack_expect: skip expectations in other netns via proc {CVE-2026-31496}
  • platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data {CVE-2026-23370}
  • crypto: bcm - add error check in the ahash_hmac_init function {CVE-2024-56681}
  • nvme-pci: ensure we're polling a polled queue {CVE-2026-31523}
  • mmc: vub300: fix NULL-deref on disconnect {CVE-2026-31651}
  • kernel/irq/irqdomain.c: fix memory leak with using debugfs_lookup() {CVE-2023-52936}
  • ipmi: ipmb: Add check devm_kasprintf() returned value {CVE-2024-58051}
  • net: usb: pegasus: fix memory leak in update_eth_regs_async() {CVE-2026-23021}
  • ASoC: amd: fix memory leak in acp3x pdm dma ops {CVE-2026-23190}
  • udp: Deal with race between UDP socket address change and rehash {CVE-2024-57974}
  • team: avoid NETDEV_CHANGEMTU event when unregistering slave {CVE-2026-43234}
  • tcp: secure_seq: add back ports to TS offset {CVE-2026-23247}
  • udp: Fix wildcard bind conflict check when using hash2 {CVE-2026-31503}
  • netfilter: nft_set_pipapo: prevent overflow in lookup table allocation {CVE-2025-38162}
  • rxrpc: Fix recv-recv race of completed call {CVE-2025-38524}
  • netfilter: nf_tables: reject duplicate device on updates {CVE-2025-38678}
  • nf_tables: nft_dynset: fix possible stateful expression memleak in error path {CVE-2026-23399}
  • crypto: af_alg - limit RX SG extraction by receive buffer budget {CVE-2026-31677}
  • xfrm: account XFRMA_IF_ID in aevent size calculation {CVE-2026-43107}
  • KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop {CVE-2025-21839}
  • perf: Fix sample vs do_exit() {CVE-2025-38424}
  • netfilter: nf_tables: avoid chain re-validation if possible {CVE-2025-71160}
  • ksm: use range-walk function to jump over holes in scan_get_next_rmap_item {CVE-2025-68211}
  • net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime {CVE-2025-38470}
  • net: add proper RCU protection to /proc/net/ptype {CVE-2026-23255}
  • ALSA: ctxfi: Check the error for index mapping {CVE-2026-31777}
  • rseq: Fix segfault on registration when rseq_cs is non-zero {CVE-2025-38067}
  • RDMA/core: Don't expose hw_counters outside of init net namespace {CVE-2025-22089}
  • net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv {CVE-2026-22996}
  • Input: synaptics - fix crash when enabling pass-through port {CVE-2025-21746}
  • wireguard: device: use exit_rtnl callback instead of manual rtnl_lock in pre_exit {CVE-2026-31579}
  • ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use() {CVE-2025-38305}
  • driver core: fix potential NULL pointer dereference in dev_uevent() {CVE-2025-37800}
  • dm: fix NULL pointer dereference in __dm_suspend() {CVE-2025-40134}
  • net: let net.core.dev_weight always be non-zero {CVE-2025-21806}
  • exec:…
Record
CLSA-2026-1781344094
Updated
2026-11-02
OSVCLSA-2026-1782155469 No score

kernel: Fix of 143 CVEs

  • ice: Fix PTP NULL pointer dereference during VSI rebuild {CVE-2026-23210}
  • tracing: Add recursion protection in kernel stack trace recording {CVE-2026-23138}
  • mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() {CVE-2025-38681}
  • cpuset: fix warning when disabling remote partition {CVE-2025-71142}
  • virtio: break and reset virtio devices on device_shutdown() {CVE-2025-38064}
  • netdevsim: fix a race issue related to the operation on bpf_bound_progs list {CVE-2026-23126}
  • atm: clip: Fix potential null-ptr-deref in to_atmarpd(). {CVE-2025-38460}
  • idpf: fix error handling in the init_task on load {CVE-2026-23017}
  • rxrpc: Fix recvmsg() unconditional requeue {CVE-2026-23066}
  • block: zero non-PI portion of auto integrity buffer {CVE-2026-23007}
  • can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode {CVE-2025-38665}
  • virtio_net: Fix napi_skb_cache_put warning {CVE-2024-43835}
  • crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
  • mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() {CVE-2026-23169}
  • net: fix segmentation of forwarding fraglist GRO {CVE-2026-23154}
  • gfs2: Validate i_depth for exhash directories {CVE-2025-38710}
  • KVM: Don't clobber irqfd routing type when deassigning irqfd {CVE-2026-23198}
  • ipvlan: Make the addrs_lock be per port {CVE-2026-23103}
  • xfs: fix freemap adjustments when adding xattrs to leaf blocks {CVE-2026-43158}
  • can: mcp251xfd: fix infinite loop when xmit fails {CVE-2024-41088}
  • RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly {CVE-2025-71096}
  • RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction {CVE-2025-38161}
  • scsi: qla2xxx: Validate sp before freeing associated memory {CVE-2025-71236}
  • net/sched: netem: account for backlog updates from child qdisc {CVE-2024-56770}
  • drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat {CVE-2026-31656}
  • iavf: fix off-by-one issues in iavf_config_rss_reg() {CVE-2025-71087}
  • net/sched: ets: fix divide by zero in the offload path {CVE-2026-23379}
  • can: j1939: implement NETDEV_UNREGISTER notification handler {CVE-2025-39925}
  • ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() {CVE-2026-31531}
  • Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb {CVE-2026-31510}
  • ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() {CVE-2026-23003}
  • drm/i915/gt: Check set_default_submission() before deferencing {CVE-2026-31540}
  • mac802154: check local interfaces before deleting sdata list {CVE-2024-57948}
  • lib/buildid: use __kernel_read() for sleepable context {CVE-2026-23002}
  • scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs {CVE-2023-52808}
  • net: fix memory leak in skb_segment_list for GRO packets {CVE-2026-22979}
  • irqchip/imx-irqsteer: Handle runtime power management correctly {CVE-2024-42290}
  • io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop {CVE-2026-23113}
  • net/sched: ets: Remove drr class from the active list if it changes to strict {CVE-2025-68815}
  • net: bonding: fix NULL deref in bond_debug_rlb_hash_show {CVE-2026-31546}
  • ipvs: fix ipv4 null-ptr-deref in route error path {CVE-2025-68813}
  • openvswitch: fix lockup on tx to unregistering netdev with carrier {CVE-2025-21681}
  • net: USB: Fix wrong-direction WARNING in plusb.c {CVE-2023-52742}
  • module: Fix kernel panic when a symbol st_shndx is out of bounds {CVE-2026-31521}
  • udf: Fix preallocation discarding at indirect extent boundary {CVE-2022-48946}
  • net/mlx5: qos: Restrict RTNL area to avoid a lock cycle {CVE-2025-39947}
  • scsi: core: Wake up the error handler when final completions race against each other {CVE-2026-23110}
  • nbd: don't allow reconnect after disconnect {CVE-2025-21731}
  • nfsd: check that server is running in unlock_filesystem {CVE-2026-22989}
  • af_key: validate families in pfkey_send_migrate() {CVE-2026-31515}
  • netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() {CVE-2024-36286} -…
Record
CLSA-2026-1782155469
Updated
2026-11-02
OSVopenSUSE-SU-2026:11014-1 No score

kernel-devel-7.0.12-1.1 on GA media

These are all security issues fixed in the kernel-devel-7.0.12-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11014-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:20965-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2026-23254: net: gro: fix outer network offset (bsc#1259884).
  • CVE-2026-23303: smb: client: Don't log plaintext credentials in cifs_set_cifscreds (bsc#1260502).
  • CVE-2026-23327: cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed() (bsc#1260548).
  • CVE-2026-23438: net: mvpp2: guard flow control update with global_tx_fc in buffer switching (bsc#1261619).
  • CVE-2026-31396: net: macb: fix use-after-free access to PTP clock (bsc#1261791).
  • CVE-2026-31401: HID: bpf: prevent buffer overflow in hid_hw_request (bsc#1261603).
  • CVE-2026-31446: ext4: fix use-after-free in update_super_work when racing with umount (bsc#1262619).
  • CVE-2026-31448: ext4: avoid infinite loops caused by residual data (bsc#1262622).
  • CVE-2026-31454: xfs: save ailp before dropping the AIL lock in push callbacks (bsc#1262624).
  • CVE-2026-31455: xfs: stop reclaim before pushing AIL during unmount (bsc#1262615).
  • CVE-2026-31518: esp: fix skb leak with espintcp and async crypto (bsc#1262606).
  • CVE-2026-31546: net: bonding: fix NULL deref in bond_debug_rlb_hash_show (bsc#1263006).
  • CVE-2026-31556: xfs: scrub: unlock dquot before early return in quota scrub (bsc#1263062).
  • CVE-2026-31562: drm/mediatek: dsi: Store driver data before invoking mipi_dsi_host_register (bsc#1263058).
  • CVE-2026-31584: media: mediatek: vcodec: fix use-after-free in encoder release path (bsc#1263180).
  • CVE-2026-31645: net: lan966x: fix page pool leak in error paths (bsc#1263794).
  • CVE-2026-31648: mm: filemap: fix nr_pages calculation overflow in filemap_map_pages() (bsc#1263579).
  • CVE-2026-31655: pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled (bsc#1263724).
  • CVE-2026-31671: xfrm_user: fix info leak in build_report() (bsc#1263115).
  • CVE-2026-31683: batman-adv: avoid OGM aggregation when skb tailroom is insufficient (bsc#1263594).
  • CVE-2026-31703: writeback: Fix use after free in inode_switch_wbs_work_fn() (bsc#1263883).
  • CVE-2026-31774: io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() (bsc#1264040).
  • CVE-2026-43026: netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (bsc#1263932).
  • CVE-2026-43030: bpf: Fix regsafe() for pointers to packet (bsc#1264000).
  • CVE-2026-43040: net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak (bsc#1264091).
  • CVE-2026-43063: xfs: don't irele after failing to iget in xfs_attri_recover_work (bsc#1264196).
  • CVE-2026-43065: ext4: always drain queued discard work in ext4_mb_release() (bsc#1264243).
  • CVE-2026-43066: ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths (bsc#1264245).
  • CVE-2026-43068: ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() (bsc#1264255).
  • CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1264484).
  • CVE-2026-43150: perf/arm-cmn: Reject unsupported hardware configurations (bsc#1264415).
  • CVE-2026-43184: rnbd-srv: Zero the rsp buffer before using it (bsc#1264622).
  • CVE-2026-43197: netconsole: avoid OOB reads, msg is not nul-terminated (bsc#1264609).
  • CVE-2026-43332: thermal: core: Fix thermal zone device registration error path (bsc#1265114).
  • CVE-2026-43393: btrfs: fix chunk map leak in btrfs_map_block() after btrfs_chunk_map_num_copies() (bsc#1264723).
  • CVE-2026-43394: nfsd: Fix cred ref leak in nfsd_nl_listener_set_doit() (bsc#1265081).
  • CVE-2026-43411: tipc: fix divide-by-zero in tipc_sk_filter_connect() (bsc#1264672).
  • CVE-2026-43455: net: mctp: Ensure keys maintain only one ref to corresponding dev (bsc#1264765).
  • CVE-2026-45842: slip: reject VJ receive packets on instances with no rstate array (bsc#1266400).
  • CVE-2026-45846: bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() (bsc#1266394).
  • CVE-2026-45852: RDMA/rxe: Fix double free in rxe_srq_from_init…
Record
openSUSE-SU-2026:20965-1
Updated
2026-11-02
OSVROOT-OS-DEBIAN-13-CVE-2026-46316 No score

CVE-2026-46316 in linux - Patched by Root

Root has patched CVE-2026-46316 in the linux package for Root:Debian:13. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-13-CVE-2026-46316
Updated
2026-11-03
OSVSUSE-SU-2026:22099-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2026-23254: net: gro: fix outer network offset (bsc#1259884).
  • CVE-2026-23303: smb: client: Don't log plaintext credentials in cifs_set_cifscreds (bsc#1260502).
  • CVE-2026-23327: cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed() (bsc#1260548).
  • CVE-2026-23438: net: mvpp2: guard flow control update with global_tx_fc in buffer switching (bsc#1261619).
  • CVE-2026-31396: net: macb: fix use-after-free access to PTP clock (bsc#1261791).
  • CVE-2026-31401: HID: bpf: prevent buffer overflow in hid_hw_request (bsc#1261603).
  • CVE-2026-31446: ext4: fix use-after-free in update_super_work when racing with umount (bsc#1262619).
  • CVE-2026-31448: ext4: avoid infinite loops caused by residual data (bsc#1262622).
  • CVE-2026-31454: xfs: save ailp before dropping the AIL lock in push callbacks (bsc#1262624).
  • CVE-2026-31455: xfs: stop reclaim before pushing AIL during unmount (bsc#1262615).
  • CVE-2026-31518: esp: fix skb leak with espintcp and async crypto (bsc#1262606).
  • CVE-2026-31546: net: bonding: fix NULL deref in bond_debug_rlb_hash_show (bsc#1263006).
  • CVE-2026-31556: xfs: scrub: unlock dquot before early return in quota scrub (bsc#1263062).
  • CVE-2026-31562: drm/mediatek: dsi: Store driver data before invoking mipi_dsi_host_register (bsc#1263058).
  • CVE-2026-31584: media: mediatek: vcodec: fix use-after-free in encoder release path (bsc#1263180).
  • CVE-2026-31645: net: lan966x: fix page pool leak in error paths (bsc#1263794).
  • CVE-2026-31648: mm: filemap: fix nr_pages calculation overflow in filemap_map_pages() (bsc#1263579).
  • CVE-2026-31655: pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled (bsc#1263724).
  • CVE-2026-31671: xfrm_user: fix info leak in build_report() (bsc#1263115).
  • CVE-2026-31683: batman-adv: avoid OGM aggregation when skb tailroom is insufficient (bsc#1263594).
  • CVE-2026-31703: writeback: Fix use after free in inode_switch_wbs_work_fn() (bsc#1263883).
  • CVE-2026-31774: io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() (bsc#1264040).
  • CVE-2026-43026: netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (bsc#1263932).
  • CVE-2026-43030: bpf: Fix regsafe() for pointers to packet (bsc#1264000).
  • CVE-2026-43040: net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak (bsc#1264091).
  • CVE-2026-43063: xfs: don't irele after failing to iget in xfs_attri_recover_work (bsc#1264196).
  • CVE-2026-43065: ext4: always drain queued discard work in ext4_mb_release() (bsc#1264243).
  • CVE-2026-43066: ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths (bsc#1264245).
  • CVE-2026-43068: ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() (bsc#1264255).
  • CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1264484).
  • CVE-2026-43150: perf/arm-cmn: Reject unsupported hardware configurations (bsc#1264415).
  • CVE-2026-43184: rnbd-srv: Zero the rsp buffer before using it (bsc#1264622).
  • CVE-2026-43197: netconsole: avoid OOB reads, msg is not nul-terminated (bsc#1264609).
  • CVE-2026-43332: thermal: core: Fix thermal zone device registration error path (bsc#1265114).
  • CVE-2026-43393: btrfs: fix chunk map leak in btrfs_map_block() after btrfs_chunk_map_num_copies() (bsc#1264723).
  • CVE-2026-43394: nfsd: Fix cred ref leak in nfsd_nl_listener_set_doit() (bsc#1265081).
  • CVE-2026-43411: tipc: fix divide-by-zero in tipc_sk_filter_connect() (bsc#1264672).
  • CVE-2026-43455: net: mctp: Ensure keys maintain only one ref to corresponding dev (bsc#1264765).
  • CVE-2026-45842: slip: reject VJ receive packets on instances with no rstate array (bsc#1266400).
  • CVE-2026-45846: bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() (bsc#1266394).
  • CVE-2026-45852: RDMA/rxe: Fix double free in rxe_srq_from_init…
Record
SUSE-SU-2026:22099-1
Updated
2026-11-02
OSVSUSE-SU-2026:22112-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2026-23254: net: gro: fix outer network offset (bsc#1259884).
  • CVE-2026-23303: smb: client: Don't log plaintext credentials in cifs_set_cifscreds (bsc#1260502).
  • CVE-2026-23327: cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed() (bsc#1260548).
  • CVE-2026-23438: net: mvpp2: guard flow control update with global_tx_fc in buffer switching (bsc#1261619).
  • CVE-2026-31396: net: macb: fix use-after-free access to PTP clock (bsc#1261791).
  • CVE-2026-31401: HID: bpf: prevent buffer overflow in hid_hw_request (bsc#1261603).
  • CVE-2026-31446: ext4: fix use-after-free in update_super_work when racing with umount (bsc#1262619).
  • CVE-2026-31448: ext4: avoid infinite loops caused by residual data (bsc#1262622).
  • CVE-2026-31454: xfs: save ailp before dropping the AIL lock in push callbacks (bsc#1262624).
  • CVE-2026-31455: xfs: stop reclaim before pushing AIL during unmount (bsc#1262615).
  • CVE-2026-31518: esp: fix skb leak with espintcp and async crypto (bsc#1262606).
  • CVE-2026-31546: net: bonding: fix NULL deref in bond_debug_rlb_hash_show (bsc#1263006).
  • CVE-2026-31556: xfs: scrub: unlock dquot before early return in quota scrub (bsc#1263062).
  • CVE-2026-31562: drm/mediatek: dsi: Store driver data before invoking mipi_dsi_host_register (bsc#1263058).
  • CVE-2026-31584: media: mediatek: vcodec: fix use-after-free in encoder release path (bsc#1263180).
  • CVE-2026-31645: net: lan966x: fix page pool leak in error paths (bsc#1263794).
  • CVE-2026-31648: mm: filemap: fix nr_pages calculation overflow in filemap_map_pages() (bsc#1263579).
  • CVE-2026-31655: pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled (bsc#1263724).
  • CVE-2026-31671: xfrm_user: fix info leak in build_report() (bsc#1263115).
  • CVE-2026-31683: batman-adv: avoid OGM aggregation when skb tailroom is insufficient (bsc#1263594).
  • CVE-2026-31703: writeback: Fix use after free in inode_switch_wbs_work_fn() (bsc#1263883).
  • CVE-2026-31774: io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() (bsc#1264040).
  • CVE-2026-43026: netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (bsc#1263932).
  • CVE-2026-43030: bpf: Fix regsafe() for pointers to packet (bsc#1264000).
  • CVE-2026-43040: net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak (bsc#1264091).
  • CVE-2026-43063: xfs: don't irele after failing to iget in xfs_attri_recover_work (bsc#1264196).
  • CVE-2026-43065: ext4: always drain queued discard work in ext4_mb_release() (bsc#1264243).
  • CVE-2026-43066: ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths (bsc#1264245).
  • CVE-2026-43068: ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() (bsc#1264255).
  • CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1264484).
  • CVE-2026-43150: perf/arm-cmn: Reject unsupported hardware configurations (bsc#1264415).
  • CVE-2026-43184: rnbd-srv: Zero the rsp buffer before using it (bsc#1264622).
  • CVE-2026-43197: netconsole: avoid OOB reads, msg is not nul-terminated (bsc#1264609).
  • CVE-2026-43332: thermal: core: Fix thermal zone device registration error path (bsc#1265114).
  • CVE-2026-43393: btrfs: fix chunk map leak in btrfs_map_block() after btrfs_chunk_map_num_copies() (bsc#1264723).
  • CVE-2026-43394: nfsd: Fix cred ref leak in nfsd_nl_listener_set_doit() (bsc#1265081).
  • CVE-2026-43411: tipc: fix divide-by-zero in tipc_sk_filter_connect() (bsc#1264672).
  • CVE-2026-43455: net: mctp: Ensure keys maintain only one ref to corresponding dev (bsc#1264765).
  • CVE-2026-45842: slip: reject VJ receive packets on instances with no rstate array (bsc#1266400).
  • CVE-2026-45846: bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() (bsc#1266394).
  • CVE-2026-45852: RDMA/rxe: Fix double free in rxe_srq_from_init…
Record
SUSE-SU-2026:22112-1
Updated
2026-11-02
OSVSUSE-SU-2026:22117-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2026-23254: net: gro: fix outer network offset (bsc#1259884).
  • CVE-2026-23303: smb: client: Don't log plaintext credentials in cifs_set_cifscreds (bsc#1260502).
  • CVE-2026-23327: cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed() (bsc#1260548).
  • CVE-2026-23438: net: mvpp2: guard flow control update with global_tx_fc in buffer switching (bsc#1261619).
  • CVE-2026-31396: net: macb: fix use-after-free access to PTP clock (bsc#1261791).
  • CVE-2026-31401: HID: bpf: prevent buffer overflow in hid_hw_request (bsc#1261603).
  • CVE-2026-31446: ext4: fix use-after-free in update_super_work when racing with umount (bsc#1262619).
  • CVE-2026-31448: ext4: avoid infinite loops caused by residual data (bsc#1262622).
  • CVE-2026-31454: xfs: save ailp before dropping the AIL lock in push callbacks (bsc#1262624).
  • CVE-2026-31455: xfs: stop reclaim before pushing AIL during unmount (bsc#1262615).
  • CVE-2026-31518: esp: fix skb leak with espintcp and async crypto (bsc#1262606).
  • CVE-2026-31546: net: bonding: fix NULL deref in bond_debug_rlb_hash_show (bsc#1263006).
  • CVE-2026-31556: xfs: scrub: unlock dquot before early return in quota scrub (bsc#1263062).
  • CVE-2026-31562: drm/mediatek: dsi: Store driver data before invoking mipi_dsi_host_register (bsc#1263058).
  • CVE-2026-31584: media: mediatek: vcodec: fix use-after-free in encoder release path (bsc#1263180).
  • CVE-2026-31645: net: lan966x: fix page pool leak in error paths (bsc#1263794).
  • CVE-2026-31648: mm: filemap: fix nr_pages calculation overflow in filemap_map_pages() (bsc#1263579).
  • CVE-2026-31655: pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled (bsc#1263724).
  • CVE-2026-31671: xfrm_user: fix info leak in build_report() (bsc#1263115).
  • CVE-2026-31683: batman-adv: avoid OGM aggregation when skb tailroom is insufficient (bsc#1263594).
  • CVE-2026-31703: writeback: Fix use after free in inode_switch_wbs_work_fn() (bsc#1263883).
  • CVE-2026-31774: io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() (bsc#1264040).
  • CVE-2026-43026: netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (bsc#1263932).
  • CVE-2026-43030: bpf: Fix regsafe() for pointers to packet (bsc#1264000).
  • CVE-2026-43040: net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak (bsc#1264091).
  • CVE-2026-43063: xfs: don't irele after failing to iget in xfs_attri_recover_work (bsc#1264196).
  • CVE-2026-43065: ext4: always drain queued discard work in ext4_mb_release() (bsc#1264243).
  • CVE-2026-43066: ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths (bsc#1264245).
  • CVE-2026-43068: ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() (bsc#1264255).
  • CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1264484).
  • CVE-2026-43150: perf/arm-cmn: Reject unsupported hardware configurations (bsc#1264415).
  • CVE-2026-43184: rnbd-srv: Zero the rsp buffer before using it (bsc#1264622).
  • CVE-2026-43197: netconsole: avoid OOB reads, msg is not nul-terminated (bsc#1264609).
  • CVE-2026-43332: thermal: core: Fix thermal zone device registration error path (bsc#1265114).
  • CVE-2026-43393: btrfs: fix chunk map leak in btrfs_map_block() after btrfs_chunk_map_num_copies() (bsc#1264723).
  • CVE-2026-43394: nfsd: Fix cred ref leak in nfsd_nl_listener_set_doit() (bsc#1265081).
  • CVE-2026-43411: tipc: fix divide-by-zero in tipc_sk_filter_connect() (bsc#1264672).
  • CVE-2026-43455: net: mctp: Ensure keys maintain only one ref to corresponding dev (bsc#1264765).
  • CVE-2026-45842: slip: reject VJ receive packets on instances with no rstate array (bsc#1266400).
  • CVE-2026-45846: bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() (bsc#1266394).
  • CVE-2026-45852: RDMA/rxe: Fix double free in rxe_srq_from_init…
Record
SUSE-SU-2026:22117-1
Updated
2026-11-02
OSVSUSE-SU-2026:22127-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2026-23254: net: gro: fix outer network offset (bsc#1259884).
  • CVE-2026-23303: smb: client: Don't log plaintext credentials in cifs_set_cifscreds (bsc#1260502).
  • CVE-2026-23327: cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed() (bsc#1260548).
  • CVE-2026-23438: net: mvpp2: guard flow control update with global_tx_fc in buffer switching (bsc#1261619).
  • CVE-2026-31396: net: macb: fix use-after-free access to PTP clock (bsc#1261791).
  • CVE-2026-31401: HID: bpf: prevent buffer overflow in hid_hw_request (bsc#1261603).
  • CVE-2026-31446: ext4: fix use-after-free in update_super_work when racing with umount (bsc#1262619).
  • CVE-2026-31448: ext4: avoid infinite loops caused by residual data (bsc#1262622).
  • CVE-2026-31454: xfs: save ailp before dropping the AIL lock in push callbacks (bsc#1262624).
  • CVE-2026-31455: xfs: stop reclaim before pushing AIL during unmount (bsc#1262615).
  • CVE-2026-31518: esp: fix skb leak with espintcp and async crypto (bsc#1262606).
  • CVE-2026-31546: net: bonding: fix NULL deref in bond_debug_rlb_hash_show (bsc#1263006).
  • CVE-2026-31556: xfs: scrub: unlock dquot before early return in quota scrub (bsc#1263062).
  • CVE-2026-31562: drm/mediatek: dsi: Store driver data before invoking mipi_dsi_host_register (bsc#1263058).
  • CVE-2026-31584: media: mediatek: vcodec: fix use-after-free in encoder release path (bsc#1263180).
  • CVE-2026-31645: net: lan966x: fix page pool leak in error paths (bsc#1263794).
  • CVE-2026-31648: mm: filemap: fix nr_pages calculation overflow in filemap_map_pages() (bsc#1263579).
  • CVE-2026-31655: pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled (bsc#1263724).
  • CVE-2026-31671: xfrm_user: fix info leak in build_report() (bsc#1263115).
  • CVE-2026-31683: batman-adv: avoid OGM aggregation when skb tailroom is insufficient (bsc#1263594).
  • CVE-2026-31703: writeback: Fix use after free in inode_switch_wbs_work_fn() (bsc#1263883).
  • CVE-2026-31774: io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() (bsc#1264040).
  • CVE-2026-43026: netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (bsc#1263932).
  • CVE-2026-43030: bpf: Fix regsafe() for pointers to packet (bsc#1264000).
  • CVE-2026-43040: net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak (bsc#1264091).
  • CVE-2026-43063: xfs: don't irele after failing to iget in xfs_attri_recover_work (bsc#1264196).
  • CVE-2026-43065: ext4: always drain queued discard work in ext4_mb_release() (bsc#1264243).
  • CVE-2026-43066: ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths (bsc#1264245).
  • CVE-2026-43068: ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() (bsc#1264255).
  • CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1264484).
  • CVE-2026-43150: perf/arm-cmn: Reject unsupported hardware configurations (bsc#1264415).
  • CVE-2026-43184: rnbd-srv: Zero the rsp buffer before using it (bsc#1264622).
  • CVE-2026-43197: netconsole: avoid OOB reads, msg is not nul-terminated (bsc#1264609).
  • CVE-2026-43332: thermal: core: Fix thermal zone device registration error path (bsc#1265114).
  • CVE-2026-43393: btrfs: fix chunk map leak in btrfs_map_block() after btrfs_chunk_map_num_copies() (bsc#1264723).
  • CVE-2026-43394: nfsd: Fix cred ref leak in nfsd_nl_listener_set_doit() (bsc#1265081).
  • CVE-2026-43411: tipc: fix divide-by-zero in tipc_sk_filter_connect() (bsc#1264672).
  • CVE-2026-43455: net: mctp: Ensure keys maintain only one ref to corresponding dev (bsc#1264765).
  • CVE-2026-45842: slip: reject VJ receive packets on instances with no rstate array (bsc#1266400).
  • CVE-2026-45846: bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() (bsc#1266394).
  • CVE-2026-45852: RDMA/rxe: Fix double free in rxe_srq_from_init…
Record
SUSE-SU-2026:22127-1
Updated
2026-11-02
OSVUSN-8488-1 No score

linux, linux-aws, linux-gcp, linux-ibm, linux-oracle, linux-realtime vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Rados block device (RBD) driver;
  • Compressed RAM block device driver;
  • Character device driver;
  • TPM device driver;
  • Hardware crypto device drivers;
  • EDAC drivers;
  • GPU drivers;
  • Greybus drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • IBM Advanced System Management driver;
  • MTD block device drivers;
  • Network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • NTB driver;
  • NVME drivers;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • Remote Processor subsystem;
  • SCSI subsystem;
  • SPI subsystem;
  • Realtek RTL8723BS SDIO drivers;
  • SM750 framebuffer staging driver;
  • Thermal drivers;
  • USB Gadget drivers;
  • USB over IP driver;
  • VFIO drivers;
  • Framebuffer layer;
  • 9P distributed file system;
  • AFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • Journaling layer for block devices (JBD2);
  • NILFS2 file system;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • SMB network file system;
  • UDF file system;
  • XFS file system;
  • Codetag library;
  • Memory management;
  • Memory Management;
  • KVM subsystem;
  • Tracing infrastructure;
  • User-space API (UAPI);
  • io_uring subsystem;
  • Locking primitives;
  • Timer subsystem;
  • Scatterlist API;
  • Heterogeneous memory management;
  • KASAN memory debugging framework;
  • Bluetooth subsystem;
  • Ethernet bridge;
  • CAIF protocol;
  • CAN network layer;
  • Ceph Core library;
  • IPv4 networking;
  • IPv6 networking;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • Packet sockets;
  • Qualcomm IPC Router (QRTR);
  • RDS protocol;
  • RxRPC session sockets;
  • SMC sockets;
  • Stream parser;
  • Landlock security;
  • SELinux security module;
  • ALSA framework;
  • Generic PCM loopback sound driver;
  • FireWire sound drivers;
  • Creative Sound Blaster X-Fi driver;
  • QCOM ASoC drivers;
  • USB sound devices;
  • Objtool; (CVE-2026-31532, CVE-2026-31574, CVE-2026-31575, CVE-2026-31576, CVE-2026-31577, CVE-2026-31578, CVE-2026-31579, CVE-2026-31580, CVE-2026-31581, CVE-2026-31582, CVE-2026-31583, CVE-2026-31584, CVE-2026-31585, CVE-2026-31586, CVE-2026-31587, CVE-2026-31588, CVE-2026-31589, CVE-2026-31590, CVE-2026-31591, CVE-2026-31592, CVE-2026-31593, CVE-2026-31594, CVE-2026-31595, CVE-2026-31596, CVE-2026-31597, CVE-2026-31598, CVE-2026-31599, CVE-2026-31600, CVE-2026-31601, CVE-2026-31602, CVE-2026-31603, CVE-2026-31604, CVE-2026-31605, CVE-2026-31606, CVE-2026-31607, CVE-2026-31608, CVE-2026-31609, CVE-2026-31610, CVE-2026-31611, CVE-2026-31612, CVE-2026-31613, CVE-2026-31614, CVE-2026-31615, CVE-2026-31616, CVE-2026-31617, CVE-2026-31618, CVE-2026-31619, CVE-2026-31620, CVE-2026-31621, CVE-2026-31622, CVE-2026-31623, CVE-2026-31624, CVE-2026-31625, CVE-2026-31626, CVE-2026-31627, CVE-2026-31628, CVE-2026-31629, CVE-2026-31686, CVE-2026-31694, CVE-2026-31696, CVE-2026-31697, CVE-2026-31698, CVE-2026-31699, CVE-2026-31700, CVE-2026-31701, CVE-2026-31702, CVE-2026-31703, CVE-2026-31704, CVE-2026-31705, CVE-2026-31706, CVE-2026-31707, CVE-2026-31708, CVE-2026-31709, CVE-2026-31710, CVE-2026-31711,…
Record
USN-8488-1
Updated
2026-11-07
OSVUSN-8488-2 No score

linux-raspi vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Rados block device (RBD) driver;
  • Compressed RAM block device driver;
  • Character device driver;
  • TPM device driver;
  • Hardware crypto device drivers;
  • EDAC drivers;
  • GPU drivers;
  • Greybus drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • IBM Advanced System Management driver;
  • MTD block device drivers;
  • Network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • NTB driver;
  • NVME drivers;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • Remote Processor subsystem;
  • SCSI subsystem;
  • SPI subsystem;
  • Realtek RTL8723BS SDIO drivers;
  • SM750 framebuffer staging driver;
  • Thermal drivers;
  • USB Gadget drivers;
  • USB over IP driver;
  • VFIO drivers;
  • Framebuffer layer;
  • 9P distributed file system;
  • AFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • Journaling layer for block devices (JBD2);
  • NILFS2 file system;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • SMB network file system;
  • UDF file system;
  • XFS file system;
  • Codetag library;
  • Memory management;
  • Memory Management;
  • KVM subsystem;
  • Tracing infrastructure;
  • User-space API (UAPI);
  • io_uring subsystem;
  • Locking primitives;
  • Timer subsystem;
  • Scatterlist API;
  • Heterogeneous memory management;
  • KASAN memory debugging framework;
  • Bluetooth subsystem;
  • Ethernet bridge;
  • CAIF protocol;
  • CAN network layer;
  • Ceph Core library;
  • IPv4 networking;
  • IPv6 networking;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • Packet sockets;
  • Qualcomm IPC Router (QRTR);
  • RDS protocol;
  • RxRPC session sockets;
  • SMC sockets;
  • Stream parser;
  • Landlock security;
  • SELinux security module;
  • ALSA framework;
  • Generic PCM loopback sound driver;
  • FireWire sound drivers;
  • Creative Sound Blaster X-Fi driver;
  • QCOM ASoC drivers;
  • USB sound devices;
  • Objtool; (CVE-2026-31532, CVE-2026-31574, CVE-2026-31575, CVE-2026-31576, CVE-2026-31577, CVE-2026-31578, CVE-2026-31579, CVE-2026-31580, CVE-2026-31581, CVE-2026-31582, CVE-2026-31583, CVE-2026-31584, CVE-2026-31585, CVE-2026-31586, CVE-2026-31587, CVE-2026-31588, CVE-2026-31589, CVE-2026-31590, CVE-2026-31591, CVE-2026-31592, CVE-2026-31593, CVE-2026-31594, CVE-2026-31595, CVE-2026-31596, CVE-2026-31597, CVE-2026-31598, CVE-2026-31599, CVE-2026-31600, CVE-2026-31601, CVE-2026-31602, CVE-2026-31603, CVE-2026-31604, CVE-2026-31605, CVE-2026-31606, CVE-2026-31607, CVE-2026-31608, CVE-2026-31609, CVE-2026-31610, CVE-2026-31611, CVE-2026-31612, CVE-2026-31613, CVE-2026-31614, CVE-2026-31615, CVE-2026-31616, CVE-2026-31617, CVE-2026-31618, CVE-2026-31619, CVE-2026-31620, CVE-2026-31621, CVE-2026-31622, CVE-2026-31623, CVE-2026-31624, CVE-2026-31625, CVE-2026-31626, CVE-2026-31627, CVE-2026-31628, CVE-2026-31629, CVE-2026-31686, CVE-2026-31694, CVE-2026-31696, CVE-2026-31697, CVE-2026-31698, CVE-2026-31699, CVE-2026-31700, CVE-2026-31701, CVE-2026-31702, CVE-2026-31703, CVE-2026-31704, CVE-2026-31705, CVE-2026-31706, CVE-2026-31707, CVE-2026-31708, CVE-2026-31709, CVE-2026-31710, CVE-2026-31711,…
Record
USN-8488-2
Updated
2026-11-07
OSVUSN-8489-1 No score

linux-oem-7.0 vulnerabilities

It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43284, CVE-2026-43500, CVE-2026-45998, CVE-2026-46000)

It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43503, CVE-2026-46300)

Qualys discovered that a race condition existed in the ptrace subsystem of the Linux kernel when privileged processes are exiting. An unprivileged local attacker could use this issue to expose sensitive information. (CVE-2026-46333)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contain a memory leak when handling AppArmor notifications. A local attacker could use this to cause resource exhaustion. (CVE-2026-47326)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contain a NULL pointer dereference when handling AppArmor notifications. A local attacker could use this to cause a kernel oops. (CVE-2026-47327)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained an invalid free when handling AppArmor notifications. A local attacker could use this to corrupt kernel memory. (CVE-2026-47328)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained insufficient validation of AppArmor notification responses. A local attacker could use this to allow crafted responses to be processed. (CVE-2026-47329)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 used an uninitialized variable when handling AppArmor notifications. A local attacker could use this to cause incorrect caching of data. (CVE-2026-47330)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained an out-of-bounds (OOB) read when handling AppArmor notifications. A local attacker could use this to cause information disclosure of kernel memory. (CVE-2026-47332)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained a out-of-bounds (OOB) read when handling AppArmor notifications. A local attacker could use this to cause kernel memory corruption and, theoretically, influence processing of AppArmor policies. (CVE-2026-47333)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained incorrect holding of locks when handling AppArmor notifications. A local attacker could use this to cause a kernel panic or deadlock. (CVE-2026-47334)

Tristan Madani and Trevor Lawrence have each independently discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained a NULL pointer dereference when handling AppArmor network socket mediation. A local attacker could use this to cause a kernel oops. (CVE-2026-47337)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Rados block device (RBD) driver;
  • Compressed RAM block device driver;
  • Character device driver;
  • TPM device driver;
  • Hardware crypto device drivers;
  • EDAC drivers;
  • GPU drivers;
  • Greybus drivers;
  • Hardware monitoring drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • IBM Advanced System Management driver;
  • MTD block device drivers;
  • Network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • NVME drivers;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • Remote…
Record
USN-8489-1
Updated
2026-11-07
OSVUSN-8490-1 No score

linux, linux-aws, linux-aws-6.17, linux-gcp, linux-gcp-6.17, linux-oracle, linux-oracle-6.17 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • DMA engine subsystem;
  • InfiniBand drivers;
  • STMicroelectronics network drivers;
  • Network drivers;
  • NVME drivers;
  • SCSI subsystem;
  • USB over IP driver;
  • File systems infrastructure;
  • Ext4 file system;
  • Network file system (NFS) server daemon;
  • SMB network file system;
  • Kernel thread helper (kthread);
  • IPv6 networking;
  • Tracing infrastructure;
  • Kernel exit() syscall;
  • Scatterlist API;
  • B.A.T.M.A.N. meshing protocol;
  • Ethernet bridge;
  • Ceph Core library;
  • IPv4 networking;
  • Multipath TCP;
  • Netfilter;
  • RxRPC session sockets;
  • SMC sockets;
  • X.25 network layer; (CVE-2026-22984, CVE-2026-23272, CVE-2026-23278, CVE-2026-23392, CVE-2026-23427, CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402, CVE-2026-31418, CVE-2026-31436, CVE-2026-31448, CVE-2026-31478, CVE-2026-31607, CVE-2026-31635, CVE-2026-31637, CVE-2026-31649, CVE-2026-31657, CVE-2026-31659, CVE-2026-31668, CVE-2026-31669, CVE-2026-31682, CVE-2026-31685, CVE-2026-31718, CVE-2026-43011, CVE-2026-43037, CVE-2026-43038, CVE-2026-43071, CVE-2026-43083, CVE-2026-43114, CVE-2026-43117, CVE-2026-43125, CVE-2026-43186, CVE-2026-43197, CVE-2026-43304, CVE-2026-43341, CVE-2026-43376, CVE-2026-43378, CVE-2026-43383, CVE-2026-43384, CVE-2026-43402, CVE-2026-43406, CVE-2026-43407, CVE-2026-43414, CVE-2026-43493, CVE-2026-43501, CVE-2026-45898, CVE-2026-45988, CVE-2026-46039, CVE-2026-46043, CVE-2026-46115, CVE-2026-46119, CVE-2026-46135, CVE-2026-46185, CVE-2026-46195, CVE-2026-46243, CVE-2026-46244, CVE-2026-46266, CVE-2026-46289, CVE-2026-46316, CVE-2026-46325)
Record
USN-8490-1
Updated
2026-11-07
OSVUSN-8490-2 No score

linux-realtime, linux-realtime-6.17 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • DMA engine subsystem;
  • InfiniBand drivers;
  • STMicroelectronics network drivers;
  • Network drivers;
  • NVME drivers;
  • SCSI subsystem;
  • USB over IP driver;
  • File systems infrastructure;
  • Ext4 file system;
  • Network file system (NFS) server daemon;
  • SMB network file system;
  • Kernel thread helper (kthread);
  • IPv6 networking;
  • Tracing infrastructure;
  • Kernel exit() syscall;
  • Scatterlist API;
  • B.A.T.M.A.N. meshing protocol;
  • Ethernet bridge;
  • Ceph Core library;
  • IPv4 networking;
  • Multipath TCP;
  • Netfilter;
  • RxRPC session sockets;
  • SMC sockets;
  • X.25 network layer; (CVE-2026-22984, CVE-2026-23272, CVE-2026-23278, CVE-2026-23392, CVE-2026-23427, CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402, CVE-2026-31418, CVE-2026-31436, CVE-2026-31448, CVE-2026-31478, CVE-2026-31607, CVE-2026-31635, CVE-2026-31637, CVE-2026-31649, CVE-2026-31657, CVE-2026-31659, CVE-2026-31668, CVE-2026-31669, CVE-2026-31682, CVE-2026-31685, CVE-2026-31718, CVE-2026-43011, CVE-2026-43037, CVE-2026-43038, CVE-2026-43071, CVE-2026-43083, CVE-2026-43114, CVE-2026-43117, CVE-2026-43125, CVE-2026-43186, CVE-2026-43197, CVE-2026-43304, CVE-2026-43341, CVE-2026-43376, CVE-2026-43378, CVE-2026-43383, CVE-2026-43384, CVE-2026-43402, CVE-2026-43406, CVE-2026-43407, CVE-2026-43414, CVE-2026-43493, CVE-2026-43501, CVE-2026-45898, CVE-2026-45988, CVE-2026-46039, CVE-2026-46043, CVE-2026-46115, CVE-2026-46119, CVE-2026-46135, CVE-2026-46185, CVE-2026-46195, CVE-2026-46243, CVE-2026-46244, CVE-2026-46266, CVE-2026-46289, CVE-2026-46316, CVE-2026-46325)
Record
USN-8490-2
Updated
2026-11-07
OSVUSN-8491-1 No score

linux-oem-6.17 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • DMA engine subsystem;
  • InfiniBand drivers;
  • STMicroelectronics network drivers;
  • Network drivers;
  • NVME drivers;
  • SCSI subsystem;
  • USB over IP driver;
  • File systems infrastructure;
  • Ext4 file system;
  • Network file system (NFS) server daemon;
  • SMB network file system;
  • Kernel thread helper (kthread);
  • IPv6 networking;
  • Tracing infrastructure;
  • Kernel exit() syscall;
  • Scatterlist API;
  • B.A.T.M.A.N. meshing protocol;
  • Ethernet bridge;
  • Ceph Core library;
  • IPv4 networking;
  • Multipath TCP;
  • Netfilter;
  • RxRPC session sockets;
  • SMC sockets;
  • X.25 network layer; (CVE-2026-22984, CVE-2026-23272, CVE-2026-23278, CVE-2026-23392, CVE-2026-23427, CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402, CVE-2026-31418, CVE-2026-31436, CVE-2026-31448, CVE-2026-31478, CVE-2026-31607, CVE-2026-31635, CVE-2026-31637, CVE-2026-31649, CVE-2026-31657, CVE-2026-31659, CVE-2026-31668, CVE-2026-31669, CVE-2026-31682, CVE-2026-31685, CVE-2026-31718, CVE-2026-43011, CVE-2026-43037, CVE-2026-43038, CVE-2026-43071, CVE-2026-43083, CVE-2026-43114, CVE-2026-43117, CVE-2026-43125, CVE-2026-43186, CVE-2026-43197, CVE-2026-43304, CVE-2026-43341, CVE-2026-43376, CVE-2026-43378, CVE-2026-43383, CVE-2026-43384, CVE-2026-43402, CVE-2026-43406, CVE-2026-43407, CVE-2026-43414, CVE-2026-43493, CVE-2026-43501, CVE-2026-45898, CVE-2026-45988, CVE-2026-46039, CVE-2026-46043, CVE-2026-46115, CVE-2026-46119, CVE-2026-46135, CVE-2026-46185, CVE-2026-46195, CVE-2026-46243, CVE-2026-46244, CVE-2026-46266, CVE-2026-46289, CVE-2026-46290, CVE-2026-46316, CVE-2026-46325)
Record
USN-8491-1
Updated
2026-11-07
OSVUSN-8507-1 No score

linux-nvidia vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Rados block device (RBD) driver;
  • Compressed RAM block device driver;
  • Character device driver;
  • TPM device driver;
  • Hardware crypto device drivers;
  • EDAC drivers;
  • GPU drivers;
  • Greybus drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • IBM Advanced System Management driver;
  • MTD block device drivers;
  • Network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • NTB driver;
  • NVME drivers;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • Remote Processor subsystem;
  • SCSI subsystem;
  • SPI subsystem;
  • Realtek RTL8723BS SDIO drivers;
  • SM750 framebuffer staging driver;
  • Thermal drivers;
  • USB Gadget drivers;
  • USB over IP driver;
  • VFIO drivers;
  • Framebuffer layer;
  • 9P distributed file system;
  • AFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • Journaling layer for block devices (JBD2);
  • NILFS2 file system;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • SMB network file system;
  • UDF file system;
  • XFS file system;
  • Codetag library;
  • Memory management;
  • Memory Management;
  • KVM subsystem;
  • Tracing infrastructure;
  • User-space API (UAPI);
  • io_uring subsystem;
  • Locking primitives;
  • Timer subsystem;
  • Scatterlist API;
  • Heterogeneous memory management;
  • KASAN memory debugging framework;
  • Bluetooth subsystem;
  • Ethernet bridge;
  • CAIF protocol;
  • CAN network layer;
  • Ceph Core library;
  • IPv4 networking;
  • IPv6 networking;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • Packet sockets;
  • Qualcomm IPC Router (QRTR);
  • RDS protocol;
  • RxRPC session sockets;
  • SMC sockets;
  • Stream parser;
  • Landlock security;
  • SELinux security module;
  • ALSA framework;
  • Generic PCM loopback sound driver;
  • FireWire sound drivers;
  • Creative Sound Blaster X-Fi driver;
  • QCOM ASoC drivers;
  • USB sound devices;
  • Objtool; (CVE-2026-31532, CVE-2026-31574, CVE-2026-31575, CVE-2026-31576, CVE-2026-31577, CVE-2026-31578, CVE-2026-31579, CVE-2026-31580, CVE-2026-31581, CVE-2026-31582, CVE-2026-31583, CVE-2026-31584, CVE-2026-31585, CVE-2026-31586, CVE-2026-31587, CVE-2026-31588, CVE-2026-31589, CVE-2026-31590, CVE-2026-31591, CVE-2026-31592, CVE-2026-31593, CVE-2026-31594, CVE-2026-31595, CVE-2026-31596, CVE-2026-31597, CVE-2026-31598, CVE-2026-31599, CVE-2026-31600, CVE-2026-31601, CVE-2026-31602, CVE-2026-31603, CVE-2026-31604, CVE-2026-31605, CVE-2026-31606, CVE-2026-31607, CVE-2026-31608, CVE-2026-31609, CVE-2026-31610, CVE-2026-31611, CVE-2026-31612, CVE-2026-31613, CVE-2026-31614, CVE-2026-31615, CVE-2026-31616, CVE-2026-31617, CVE-2026-31618, CVE-2026-31619, CVE-2026-31620, CVE-2026-31621, CVE-2026-31622, CVE-2026-31623, CVE-2026-31624, CVE-2026-31625, CVE-2026-31626, CVE-2026-31627, CVE-2026-31628, CVE-2026-31629, CVE-2026-31686, CVE-2026-31694, CVE-2026-31696, CVE-2026-31697, CVE-2026-31698, CVE-2026-31699, CVE-2026-31700, CVE-2026-31701, CVE-2026-31702, CVE-2026-31703, CVE-2026-31704, CVE-2026-31705, CVE-2026-31706, CVE-2026-31707, CVE-2026-31708, CVE-2026-31709, CVE-2026-31710, CVE-2026-31711,…
Record
USN-8507-1
Updated
2026-11-07
OSVUSN-8508-1 No score

linux-nvidia-6.17 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • S390 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • DMA engine subsystem;
  • GPU drivers;
  • InfiniBand drivers;
  • Ethernet bonding driver;
  • STMicroelectronics network drivers;
  • Network drivers;
  • NVME drivers;
  • SCSI subsystem;
  • USB over IP driver;
  • File systems infrastructure;
  • Ext4 file system;
  • Network file system (NFS) server daemon;
  • SMB network file system;
  • Kernel thread helper (kthread);
  • Distributed Switch Architecture;
  • IPv6 networking;
  • Netfilter;
  • Tracing infrastructure;
  • Control group (cgroup);
  • Kernel exit() syscall;
  • Scatterlist API;
  • Memory management;
  • B.A.T.M.A.N. meshing protocol;
  • Ethernet bridge;
  • Ceph Core library;
  • IPv4 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Packet sockets;
  • RxRPC session sockets;
  • SMC sockets;
  • TLS protocol;
  • Unix domain sockets;
  • X.25 network layer;
  • AppArmor security module; (CVE-2025-71088, CVE-2025-71090, CVE-2025-71127, CVE-2025-71134, CVE-2025-71141, CVE-2025-71142, CVE-2025-71144, CVE-2025-71152, CVE-2025-71155, CVE-2026-22984, CVE-2026-23112, CVE-2026-23231, CVE-2026-23272, CVE-2026-23273, CVE-2026-23274, CVE-2026-23278, CVE-2026-23351, CVE-2026-23392, CVE-2026-23394, CVE-2026-23427, CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402, CVE-2026-31418, CVE-2026-31419, CVE-2026-31436, CVE-2026-31448, CVE-2026-31478, CVE-2026-31504, CVE-2026-31533, CVE-2026-31607, CVE-2026-31635, CVE-2026-31637, CVE-2026-31649, CVE-2026-31657, CVE-2026-31659, CVE-2026-31668, CVE-2026-31669, CVE-2026-31682, CVE-2026-31685, CVE-2026-31718, CVE-2026-43011, CVE-2026-43033, CVE-2026-43037, CVE-2026-43038, CVE-2026-43071, CVE-2026-43077, CVE-2026-43078, CVE-2026-43083, CVE-2026-43114, CVE-2026-43117, CVE-2026-43125, CVE-2026-43186, CVE-2026-43197, CVE-2026-43304, CVE-2026-43341, CVE-2026-43376, CVE-2026-43378, CVE-2026-43383, CVE-2026-43384, CVE-2026-43402, CVE-2026-43406, CVE-2026-43407, CVE-2026-43414, CVE-2026-43493, CVE-2026-43501, CVE-2026-45898, CVE-2026-45966, CVE-2026-45988, CVE-2026-46028, CVE-2026-46039, CVE-2026-46043, CVE-2026-46115, CVE-2026-46119, CVE-2026-46135, CVE-2026-46185, CVE-2026-46195, CVE-2026-46243, CVE-2026-46244, CVE-2026-46266, CVE-2026-46289, CVE-2026-46316, CVE-2026-46325)
Record
USN-8508-1
Updated
2026-11-07
OSVUSN-8545-1 No score

linux-hwe-6.17 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • DMA engine subsystem;
  • InfiniBand drivers;
  • STMicroelectronics network drivers;
  • Network drivers;
  • NVME drivers;
  • SCSI subsystem;
  • USB over IP driver;
  • File systems infrastructure;
  • Ext4 file system;
  • Network file system (NFS) server daemon;
  • SMB network file system;
  • Kernel thread helper (kthread);
  • IPv6 networking;
  • Tracing infrastructure;
  • Kernel exit() syscall;
  • Scatterlist API;
  • B.A.T.M.A.N. meshing protocol;
  • Ethernet bridge;
  • Ceph Core library;
  • IPv4 networking;
  • Multipath TCP;
  • Netfilter;
  • RxRPC session sockets;
  • SMC sockets;
  • X.25 network layer; (CVE-2026-22984, CVE-2026-23272, CVE-2026-23278, CVE-2026-23392, CVE-2026-23427, CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402, CVE-2026-31418, CVE-2026-31436, CVE-2026-31448, CVE-2026-31478, CVE-2026-31607, CVE-2026-31635, CVE-2026-31637, CVE-2026-31649, CVE-2026-31657, CVE-2026-31659, CVE-2026-31668, CVE-2026-31669, CVE-2026-31682, CVE-2026-31685, CVE-2026-31718, CVE-2026-43011, CVE-2026-43037, CVE-2026-43038, CVE-2026-43071, CVE-2026-43083, CVE-2026-43114, CVE-2026-43117, CVE-2026-43125, CVE-2026-43185, CVE-2026-43186, CVE-2026-43197, CVE-2026-43304, CVE-2026-43341, CVE-2026-43376, CVE-2026-43378, CVE-2026-43383, CVE-2026-43384, CVE-2026-43402, CVE-2026-43406, CVE-2026-43407, CVE-2026-43414, CVE-2026-43493, CVE-2026-43501, CVE-2026-45898, CVE-2026-45988, CVE-2026-46039, CVE-2026-46043, CVE-2026-46115, CVE-2026-46119, CVE-2026-46135, CVE-2026-46185, CVE-2026-46195, CVE-2026-46243, CVE-2026-46244, CVE-2026-46266, CVE-2026-46289, CVE-2026-46316, CVE-2026-46325)
Record
USN-8545-1
Updated
2026-11-07
OSVUSN-8546-1 No score

linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • DMA engine subsystem;
  • InfiniBand drivers;
  • STMicroelectronics network drivers;
  • Network drivers;
  • NVME drivers;
  • SCSI subsystem;
  • USB over IP driver;
  • File systems infrastructure;
  • Ext4 file system;
  • Network file system (NFS) server daemon;
  • SMB network file system;
  • Kernel thread helper (kthread);
  • IPv6 networking;
  • Tracing infrastructure;
  • Kernel exit() syscall;
  • Scatterlist API;
  • B.A.T.M.A.N. meshing protocol;
  • Ethernet bridge;
  • Ceph Core library;
  • IPv4 networking;
  • Multipath TCP;
  • Netfilter;
  • RxRPC session sockets;
  • SMC sockets;
  • X.25 network layer; (CVE-2026-22984, CVE-2026-23272, CVE-2026-23278, CVE-2026-23392, CVE-2026-23427, CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402, CVE-2026-31418, CVE-2026-31436, CVE-2026-31448, CVE-2026-31478, CVE-2026-31607, CVE-2026-31635, CVE-2026-31637, CVE-2026-31649, CVE-2026-31657, CVE-2026-31659, CVE-2026-31668, CVE-2026-31669, CVE-2026-31682, CVE-2026-31685, CVE-2026-31718, CVE-2026-43011, CVE-2026-43037, CVE-2026-43038, CVE-2026-43071, CVE-2026-43083, CVE-2026-43114, CVE-2026-43117, CVE-2026-43125, CVE-2026-43185, CVE-2026-43186, CVE-2026-43197, CVE-2026-43304, CVE-2026-43341, CVE-2026-43376, CVE-2026-43378, CVE-2026-43383, CVE-2026-43384, CVE-2026-43402, CVE-2026-43406, CVE-2026-43407, CVE-2026-43414, CVE-2026-43493, CVE-2026-43501, CVE-2026-45898, CVE-2026-45988, CVE-2026-46039, CVE-2026-46043, CVE-2026-46115, CVE-2026-46119, CVE-2026-46135, CVE-2026-46185, CVE-2026-46195, CVE-2026-46243, CVE-2026-46244, CVE-2026-46266, CVE-2026-46289, CVE-2026-46316, CVE-2026-46325)
Record
USN-8546-1
Updated
2026-11-07
OSVUSN-8569-1 No score

linux-hwe-7.0 vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43284, CVE-2026-43500, CVE-2026-45998, CVE-2026-46000)

It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43503, CVE-2026-46300)

Qualys discovered that a race condition existed in the ptrace subsystem of the Linux kernel when privileged processes are exiting. An unprivileged local attacker could use this issue to expose sensitive information. (CVE-2026-46333)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contain a memory leak when handling AppArmor notifications. A local attacker could use this to cause resource exhaustion. (CVE-2026-47326)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contain a NULL pointer dereference when handling AppArmor notifications. A local attacker could use this to cause a kernel oops. (CVE-2026-47327)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained an invalid free when handling AppArmor notifications. A local attacker could use this to corrupt kernel memory. (CVE-2026-47328)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained insufficient validation of AppArmor notification responses. A local attacker could use this to allow crafted responses to be processed. (CVE-2026-47329)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 used an uninitialized variable when handling AppArmor notifications. A local attacker could use this to cause incorrect caching of data. (CVE-2026-47330)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained an out-of-bounds (OOB) read when handling AppArmor notifications. A local attacker could use this to cause information disclosure of kernel memory. (CVE-2026-47332)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained a out-of-bounds (OOB) read when handling AppArmor notifications. A local attacker could use this to cause kernel memory corruption and, theoretically, influence processing of AppArmor policies. (CVE-2026-47333)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained incorrect holding of locks when handling AppArmor notifications. A local attacker could use this to cause a kernel panic or deadlock. (CVE-2026-47334)

Tristan Madani and Trevor Lawrence have each independently discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained a NULL pointer dereference when handling AppArmor network socket mediation. A local attacker could use this to cause a kernel oops. (CVE-2026-47337)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PSP security protocol;
  • ARM64 architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Intel…
Record
USN-8569-1
Updated
2026-11-07
OSVUSN-8603-1 No score

linux-azure, linux-azure-fde vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • x86 platform drivers;
  • PSP security protocol;
  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Intel NPU Driver;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Auxiliary display drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Ublk userspace block driver;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • DPLL subsystem;
  • EDAC drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • EFI core;
  • FWCTL subsystem;
  • GPIO subsystem;
  • GPU drivers;
  • Greybus drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • IOMMU subsystem;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • IBM Advanced System Management driver;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • Device tree and open firmware driver;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Chrome hardware platform drivers;
  • ACPI WMI driver;
  • Generic PM domains;
  • MediaTek PM domains;
  • Power supply drivers;
  • Remote Processor subsystem;
  • MPAM driver;
  • Amlogic Meson reset controller drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • NVIDIA Tegra Control Backbone (CBB) driver;
  • SPI subsystem;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • SM750 framebuffer staging driver;
  • TCM subsystem;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • USB Device Class drivers;
  • ULPI bus;
  • DesignWare USB2 driver;
  • USB Gadget drivers;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • USB Type-C support driver;
  • USB Type-C Port Controller Manager driver;
  • TI TPS6598x USB Power Delivery controller driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • vDPA drivers;
  • VFIO drivers;
  • Framebuffer layer;
  • TSM AMD SEV Guest driver;
  • Xen hypervisor drivers;
  • 9P distributed file system;
  • File systems infrastructure;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS+ file system;
  • HugeTLB file system;
  • Journaling layer for block devices (JBD2);
  • Network file systems…
Record
USN-8603-1
Updated
2026-11-07
OSVUSN-8604-1 No score

linux-azure-6.17 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • Foo-over-UDP (FOU);
  • ARM64 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Drivers core;
  • Null block device driver;
  • Bluetooth drivers;
  • Counter interface drivers;
  • DMA engine subsystem;
  • DPLL subsystem;
  • GPIO subsystem;
  • GPU drivers;
  • I2C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • On-Chip Interconnect management framework;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Modular ISDN driver;
  • LED subsystem;
  • Multiple devices driver;
  • UACCE accelerator framework;
  • MMC subsystem;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • PHY drivers;
  • x86 platform drivers;
  • i.MX PM domains;
  • SCSI subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • TTY drivers;
  • USB Host Controller drivers;
  • USB over IP driver;
  • W1 Dallas's 1-wire bus driver;
  • Xen hypervisor drivers;
  • BTRFS file system;
  • File systems infrastructure;
  • EFI Variable file system;
  • Ext4 file system;
  • FUSE (File system in Userspace);
  • Network file systems library;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • SMB network file system;
  • Memory Management;
  • Kernel thread helper (kthread);
  • Memory management;
  • Scheduler infrastructure;
  • Tracing infrastructure;
  • IPv6 networking;
  • Netfilter;
  • NFC subsystem;
  • io_uring subsystem;
  • Perf events;
  • Kernel exit() syscall;
  • Hibernation control;
  • Timer subsystem;
  • BPF subsystem;
  • Floating proportions library;
  • Scatterlist API;
  • B.A.T.M.A.N. meshing protocol;
  • Bluetooth subsystem;
  • Ethernet bridge;
  • CAN network layer;
  • Ceph Core library;
  • Networking core;
  • IPv4 networking;
  • L2TP protocol;
  • MAC80211 subsystem;
  • Multipath TCP;
  • NET/ROM layer;
  • RxRPC session sockets;
  • Network traffic control;
  • SCTP protocol;
  • SMC sockets;
  • VMware vSockets driver;
  • Wireless networking;
  • X.25 network layer;
  • ALSA AC97 driver;
  • Creative Sound Blaster X-Fi driver;
  • Texas InstrumentS Audio (ASoC/HDA) drivers;
  • USB sound devices; (CVE-2025-71158, CVE-2025-71160, CVE-2025-71161, CVE-2025-71162, CVE-2025-71163, CVE-2025-71180, CVE-2025-71182, CVE-2025-71183, CVE-2025-71184, CVE-2025-71185, CVE-2025-71186, CVE-2025-71187, CVE-2025-71188, CVE-2025-71189, CVE-2025-71190, CVE-2025-71191, CVE-2025-71192, CVE-2025-71193, CVE-2025-71194, CVE-2025-71195, CVE-2025-71196, CVE-2025-71197, CVE-2025-71198, CVE-2025-71199, CVE-2025-71200, CVE-2025-71201, CVE-2026-22976, CVE-2026-22977, CVE-2026-22978, CVE-2026-22979, CVE-2026-22980, CVE-2026-22981, CVE-2026-22982, CVE-2026-22984, CVE-2026-22985, CVE-2026-22986, CVE-2026-22987, CVE-2026-22989, CVE-2026-22990, CVE-2026-22991, CVE-2026-22992, CVE-2026-22993, CVE-2026-22994, CVE-2026-22996, CVE-2026-22997, CVE-2026-22998, CVE-2026-22999, CVE-2026-23000, CVE-2026-23001, CVE-2026-23002, CVE-2026-23003, CVE-2026-23004, CVE-2026-23005, CVE-2026-23006, CVE-2026-23007, CVE-2026-23008, CVE-2026-23009, CVE-2026-23010, CVE-2026-23011, CVE-2026-23012, CVE-2026-23013, CVE-2026-23014, CVE-2026-23015, CVE-2026-23017, CVE-2026-23018, CVE-2026-23019, CVE-2026-23020, CVE-2026-23021, CVE-2026-23022, CVE-2026-23023, CVE-2026-23024, CVE-2026-23025, CVE-2026-23026, CVE-2026-23030, CVE-2026-23031, CVE-2026-23032, CVE-2026-23033, CVE-2026-23034, CVE-2026-23035, CVE-2026-23036, CVE-2026-23037, CVE-2026-23038, CVE-2026-23042, CVE-2026-23044, CVE-2026-23045, CVE-2026-23046, CVE-2026-23047, CVE-2026-23049, CVE-2026-23050, CVE-2026-23051, CVE-2026-23052, CVE-2026-23053, CVE-2026-23054,…
Record
USN-8604-1
Updated
2026-11-07
OSVUSN-8605-1 No score

linux-azure-fde-6.17 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • Foo-over-UDP (FOU);
  • ARM64 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Drivers core;
  • Null block device driver;
  • Bluetooth drivers;
  • Counter interface drivers;
  • DMA engine subsystem;
  • DPLL subsystem;
  • GPIO subsystem;
  • GPU drivers;
  • I2C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • On-Chip Interconnect management framework;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Modular ISDN driver;
  • LED subsystem;
  • Multiple devices driver;
  • UACCE accelerator framework;
  • MMC subsystem;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • PHY drivers;
  • x86 platform drivers;
  • i.MX PM domains;
  • SCSI subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • TTY drivers;
  • USB Host Controller drivers;
  • USB over IP driver;
  • W1 Dallas's 1-wire bus driver;
  • Xen hypervisor drivers;
  • BTRFS file system;
  • File systems infrastructure;
  • EFI Variable file system;
  • Ext4 file system;
  • FUSE (File system in Userspace);
  • Network file systems library;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • SMB network file system;
  • Memory Management;
  • Kernel thread helper (kthread);
  • Memory management;
  • Scheduler infrastructure;
  • Tracing infrastructure;
  • IPv6 networking;
  • Netfilter;
  • NFC subsystem;
  • io_uring subsystem;
  • Perf events;
  • Kernel exit() syscall;
  • Hibernation control;
  • Timer subsystem;
  • BPF subsystem;
  • Floating proportions library;
  • Scatterlist API;
  • B.A.T.M.A.N. meshing protocol;
  • Bluetooth subsystem;
  • Ethernet bridge;
  • CAN network layer;
  • Ceph Core library;
  • Networking core;
  • IPv4 networking;
  • L2TP protocol;
  • MAC80211 subsystem;
  • Multipath TCP;
  • NET/ROM layer;
  • RxRPC session sockets;
  • Network traffic control;
  • SCTP protocol;
  • SMC sockets;
  • VMware vSockets driver;
  • Wireless networking;
  • X.25 network layer;
  • ALSA AC97 driver;
  • Creative Sound Blaster X-Fi driver;
  • Texas InstrumentS Audio (ASoC/HDA) drivers;
  • USB sound devices; (CVE-2025-71158, CVE-2025-71160, CVE-2025-71161, CVE-2025-71162, CVE-2025-71163, CVE-2025-71180, CVE-2025-71182, CVE-2025-71183, CVE-2025-71184, CVE-2025-71185, CVE-2025-71186, CVE-2025-71187, CVE-2025-71188, CVE-2025-71189, CVE-2025-71190, CVE-2025-71191, CVE-2025-71192, CVE-2025-71193, CVE-2025-71194, CVE-2025-71195, CVE-2025-71196, CVE-2025-71197, CVE-2025-71198, CVE-2025-71199, CVE-2025-71200, CVE-2025-71201, CVE-2026-22976, CVE-2026-22977, CVE-2026-22978, CVE-2026-22979, CVE-2026-22980, CVE-2026-22981, CVE-2026-22982, CVE-2026-22984, CVE-2026-22985, CVE-2026-22986, CVE-2026-22987, CVE-2026-22989, CVE-2026-22990, CVE-2026-22991, CVE-2026-22992, CVE-2026-22993, CVE-2026-22994, CVE-2026-22996, CVE-2026-22997, CVE-2026-22998, CVE-2026-22999, CVE-2026-23000, CVE-2026-23001, CVE-2026-23002, CVE-2026-23003, CVE-2026-23004, CVE-2026-23005, CVE-2026-23006, CVE-2026-23007, CVE-2026-23008, CVE-2026-23009, CVE-2026-23010, CVE-2026-23011, CVE-2026-23012, CVE-2026-23013, CVE-2026-23014, CVE-2026-23015, CVE-2026-23017, CVE-2026-23018, CVE-2026-23019, CVE-2026-23020, CVE-2026-23021, CVE-2026-23022, CVE-2026-23023, CVE-2026-23024, CVE-2026-23025, CVE-2026-23026, CVE-2026-23030, CVE-2026-23031, CVE-2026-23032, CVE-2026-23033, CVE-2026-23034, CVE-2026-23035, CVE-2026-23036, CVE-2026-23037, CVE-2026-23038, CVE-2026-23042, CVE-2026-23044, CVE-2026-23045, CVE-2026-23046, CVE-2026-23047, CVE-2026-23049, CVE-2026-23050, CVE-2026-23051, CVE-2026-23052, CVE-2026-23053, CVE-2026-23054,…
Record
USN-8605-1
Updated
2026-11-02
OSVUSN-8728-1 No score

linux-gcp-7.0 vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • x86 platform drivers;
  • ARM64 architecture;
  • Cryptographic API;
  • PSP security protocol;
  • User-space API (UAPI);
  • Kernel build system;
  • ARM32 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Auxiliary display drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Ublk userspace block driver;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • Hardware random number generator core;
  • Clock framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • DPLL subsystem;
  • EDAC drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • EFI core;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • FWCTL subsystem;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • Parport drivers;
  • PCI subsystem;
  • PHY drivers;
  • Pin controllers subsystem;
  • Chrome hardware platform drivers;
  • ACPI WMI driver;
  • Generic PM domains;
  • MediaTek PM domains;
  • System reset/shutdown drivers;
  • Power sequencing drivers;
  • Power supply drivers;
  • PTP clock framework;
  • Voltage and Current Regulator drivers;
  • MPAM driver;
  • Amlogic Meson reset controller drivers;
  • RPMSG subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • NVIDIA Tegra Control Backbone (CBB) driver;
  • SPI subsystem;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • VME bus staging drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • DesignWare USB2 driver;
  • DesignWare USB3 driver;
  • Faraday FOTG210 USB2 dual-role controller driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB…
Record
USN-8728-1
Updated
2026-11-07
OSVUSN-8728-2 No score

linux-azure-7.0 vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • x86 platform drivers;
  • ARM64 architecture;
  • Cryptographic API;
  • PSP security protocol;
  • User-space API (UAPI);
  • Kernel build system;
  • ARM32 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Auxiliary display drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Ublk userspace block driver;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • Hardware random number generator core;
  • Clock framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • DPLL subsystem;
  • EDAC drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • EFI core;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • FWCTL subsystem;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • Parport drivers;
  • PCI subsystem;
  • PHY drivers;
  • Pin controllers subsystem;
  • Chrome hardware platform drivers;
  • ACPI WMI driver;
  • Generic PM domains;
  • MediaTek PM domains;
  • System reset/shutdown drivers;
  • Power sequencing drivers;
  • Power supply drivers;
  • PTP clock framework;
  • Voltage and Current Regulator drivers;
  • MPAM driver;
  • Amlogic Meson reset controller drivers;
  • RPMSG subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • NVIDIA Tegra Control Backbone (CBB) driver;
  • SPI subsystem;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • VME bus staging drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • DesignWare USB2 driver;
  • DesignWare USB3 driver;
  • Faraday FOTG210 USB2 dual-role controller driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB…
Record
USN-8728-2
Updated
2026-11-07
OSVUSN-8728-3 No score

linux-oracle-7.0 vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • x86 platform drivers;
  • ARM64 architecture;
  • Cryptographic API;
  • PSP security protocol;
  • User-space API (UAPI);
  • Kernel build system;
  • ARM32 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Auxiliary display drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Ublk userspace block driver;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • Hardware random number generator core;
  • Clock framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • DPLL subsystem;
  • EDAC drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • EFI core;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • FWCTL subsystem;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • Parport drivers;
  • PCI subsystem;
  • PHY drivers;
  • Pin controllers subsystem;
  • Chrome hardware platform drivers;
  • ACPI WMI driver;
  • Generic PM domains;
  • MediaTek PM domains;
  • System reset/shutdown drivers;
  • Power sequencing drivers;
  • Power supply drivers;
  • PTP clock framework;
  • Voltage and Current Regulator drivers;
  • MPAM driver;
  • Amlogic Meson reset controller drivers;
  • RPMSG subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • NVIDIA Tegra Control Backbone (CBB) driver;
  • SPI subsystem;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • VME bus staging drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • DesignWare USB2 driver;
  • DesignWare USB3 driver;
  • Faraday FOTG210 USB2 dual-role controller driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB…
Record
USN-8728-3
Updated
2026-11-07

Affected products

Show 3 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
kernel
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-64k
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-64k-core
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-64k-debug
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-64k-debug-core
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-64k-debug-devel
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-64k-debug-devel-matched
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-64k-debug-modules
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-64k-debug-modules-core
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-64k-debug-modules-extra
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-64k-devel
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-64k-devel-matched
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-64k-modules
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-64k-modules-core
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-64k-modules-extra
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-abi-stablelists
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-core
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-cross-headers
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-debug
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-debug-core
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-debug-devel
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-debug-devel-matched
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-debug-modules
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-debug-modules-core
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-debug-modules-extra
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-debug-uki-virt
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-devel
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-devel-matched
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-doc
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-headers
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-modules
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-modules-core
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-modules-extra
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-modules-extra-matched
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-rt
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-rt-64k
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-rt-64k-core
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-rt-64k-debug
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-rt-64k-debug-core
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-rt-64k-debug-devel
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-rt-64k-debug-modules
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-rt-64k-debug-modules-core
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-rt-64k-debug-modules-extra
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-rt-64k-devel
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-rt-64k-modules
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-rt-64k-modules-core
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-rt-64k-modules-extra
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-rt-core
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-rt-debug
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-rt-debug-core
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-rt-debug-devel
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-rt-debug-modules
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-rt-debug-modules-core
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-rt-debug-modules-extra
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-rt-devel
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-rt-modules
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-rt-modules-core
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-rt-modules-extra
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-tools
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-tools-libs
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-tools-libs-devel
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-uki-virt
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
kernel-uki-virt-addons
AlmaLinux:10
From an advisory covering 10 CVEs
 before 6.12.0-211.28.1.el10_2
6.12.0-211.28.1.el10_2
linux-lts
Alpaquita:25
 6.12.92-r0 up to 6.12.95-r0
6.12.95-r0
linux-lts
Alpaquita:stream
 6.12.92-r1 up to 6.18.35-r1
6.18.35-r1
kernel
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-core
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-debug
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-debug-core
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-debug-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-debug-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-debug-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-debug-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-debug-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-debug-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-debug-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-abi-stablelists
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-core
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-cross-headers
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-debug
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-debug-core
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-debug-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-debug-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-debug-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-debug-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-debug-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-debug-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-debug-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-debug-uki-virt
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-debug-uki-virt-addons
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-doc
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-headers
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-ipaclones-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-core
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-debug
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-debug-core
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-debug-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-debug-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-debug-kvm
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-debug-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-debug-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-debug-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-debug-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-debug-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-kvm
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
Kernel
Linux
 6.10.0 up to 6.12.93, 6.13.0 up to 6.18.35, 6.19.0 up to 7.0.12
6.12.936.18.357.0.12
linux
Debian:13
 before 6.12.94-1, plus listed versions
6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-1
Show 22 moreShow less
6.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-1~bpo12+1
6.12.94-1
linux
Debian:14
 before 7.0.12-1, plus listed versions
6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1
Show 45 moreShow less
6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1
7.0.12-1
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-64k-debug-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-64k-debug-devel-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-64k-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-64k-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-64k-devel-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-debug-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-debug-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-debug-devel-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-devel-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-doc
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-rt-64k-debug-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-rt-64k-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-rt-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-tools-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-zfcpdump-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-zfcpdump-devel-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
libperf-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
perf
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
perf-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
python3-perf
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
python3-perf-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
rtla
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
rv
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-64k
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-64k-core
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-64k-debug
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-64k-debug-core
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-64k-debug-modules
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-64k-debug-modules-core
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-64k-debug-modules-extra
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-64k-modules
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-64k-modules-core
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-64k-modules-extra
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-abi-stablelists
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-core
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-debug
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-debug-core
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-debug-modules
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-debug-modules-core
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-debug-modules-extra
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-debug-uki-virt
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-modules
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-modules-core
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-modules-extra
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-modules-extra-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-tools
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-tools-libs
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-uki-virt
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-uki-virt-addons
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-zfcpdump
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-zfcpdump-core
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel-zfcpdump-modules
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 0:6.12.0-211.30.1.el10_2
0:6.12.0-211.30.1.el10_2
kernel
Rocky Linux:9
From an advisory covering 11 CVEs
 before 0:5.14.0-687.22.1.el9_8
0:5.14.0-687.22.1.el9_8
linux
Root:Debian:13
 before 6.12.115-2.aikido.164
6.12.115-2.aikido.164
rootio-linux
Root:Debian:13
 before 6.12.115-2.aikido.164
6.12.115-2.aikido.164
kernel-default
SUSE:Linux Enterprise High Availability Extension 16.0
From an advisory covering 60 CVEs
 before 6.12.0-160000.35.1
6.12.0-160000.35.1
kernel-64kb
SUSE:Linux Micro 6.2
From an advisory covering 60 CVEs
 before 6.12.0-160000.35.1
6.12.0-160000.35.1
kernel-default
SUSE:Linux Micro 6.2
From an advisory covering 60 CVEs
 before 6.12.0-160000.35.1
6.12.0-160000.35.1
kernel-default-base
SUSE:Linux Micro 6.2
From an advisory covering 60 CVEs
 before 6.12.0-160000.35.1.160000.2.16
6.12.0-160000.35.1.160000.2.16
kernel-rt
SUSE:Linux Micro 6.2
From an advisory covering 60 CVEs
 before 6.12.0-160000.35.1
6.12.0-160000.35.1
kernel-source
SUSE:Linux Micro 6.2
From an advisory covering 60 CVEs
 before 6.12.0-160000.35.1
6.12.0-160000.35.1
kernel-obs-build
SUSE:Linux Micro Extras 6.2
From an advisory covering 60 CVEs
 before 6.12.0-160000.35.1
6.12.0-160000.35.1
kernel-syms
SUSE:Linux Micro Extras 6.2
From an advisory covering 60 CVEs
 before 6.12.0-160000.35.1
6.12.0-160000.35.1
kernel-64kb
SUSE:Linux Enterprise Server 16.0
From an advisory covering 60 CVEs
 before 6.12.0-160000.35.1
6.12.0-160000.35.1
kernel-azure
SUSE:Linux Enterprise Server 16.0
From an advisory covering 60 CVEs
 before 6.12.0-160000.35.1
6.12.0-160000.35.1
kernel-default
SUSE:Linux Enterprise Server 16.0
From an advisory covering 60 CVEs
 before 6.12.0-160000.35.1
6.12.0-160000.35.1
kernel-default-base
SUSE:Linux Enterprise Server 16.0
From an advisory covering 60 CVEs
 before 6.12.0-160000.35.1.160000.2.16
6.12.0-160000.35.1.160000.2.16
kernel-docs
SUSE:Linux Enterprise Server 16.0
From an advisory covering 60 CVEs
 before 6.12.0-160000.35.1
6.12.0-160000.35.1
kernel-kvmsmall
SUSE:Linux Enterprise Server 16.0
From an advisory covering 60 CVEs
 before 6.12.0-160000.35.1
6.12.0-160000.35.1
kernel-obs-qa
SUSE:Linux Enterprise Server 16.0
From an advisory covering 60 CVEs
 before 6.12.0-160000.35.1
6.12.0-160000.35.1
kernel-source
SUSE:Linux Enterprise Server 16.0
From an advisory covering 60 CVEs
 before 6.12.0-160000.35.1
6.12.0-160000.35.1
kernel-syms
SUSE:Linux Enterprise Server 16.0
From an advisory covering 60 CVEs
 before 6.12.0-160000.35.1
6.12.0-160000.35.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 16.0
From an advisory covering 60 CVEs
 before 6.12.0-160000.35.1
6.12.0-160000.35.1
kernel-64kb
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 60 CVEs
 before 6.12.0-160000.35.1
6.12.0-160000.35.1
kernel-azure
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 60 CVEs
 before 6.12.0-160000.35.1
6.12.0-160000.35.1
kernel-default
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 60 CVEs
 before 6.12.0-160000.35.1
6.12.0-160000.35.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 60 CVEs
 before 6.12.0-160000.35.1.160000.2.16
6.12.0-160000.35.1.160000.2.16
kernel-docs
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 60 CVEs
 before 6.12.0-160000.35.1
6.12.0-160000.35.1
kernel-kvmsmall
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 60 CVEs
 before 6.12.0-160000.35.1
6.12.0-160000.35.1
kernel-obs-qa
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 60 CVEs
 before 6.12.0-160000.35.1
6.12.0-160000.35.1
kernel-source
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 60 CVEs
 before 6.12.0-160000.35.1
6.12.0-160000.35.1
kernel-syms
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 60 CVEs
 before 6.12.0-160000.35.1
6.12.0-160000.35.1
kernel-zfcpdump
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 60 CVEs
 before 6.12.0-160000.35.1
6.12.0-160000.35.1
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
linux-azure-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
 None known
linux-azure-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
 None known
linux-azure-fde
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
 None known
linux-gcp-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1
Show 7 moreShow less
5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3
 None known
linux-gcp-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1
Show 8 moreShow less
5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1
 None known
linux-gcp-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41
 None known
linux-gke
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
 None known
linux-gke-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1
Show 13 moreShow less
5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1
 None known
linux-gkeop
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13
Show 45 moreShow less
5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77
 None known
linux-gkeop-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2
Show 40 moreShow less
5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1
 None known
linux-hwe-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1
Show 7 moreShow less
5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1
 None known
linux-hwe-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1
Show 11 moreShow less
5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1
 None known
linux-hwe-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1
Show 16 moreShow less
5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1
 None known
linux-intel-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19
 None known
linux-oem-5.10
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17
Show 21 moreShow less
5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61
 None known
linux-oem-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21
Show 7 moreShow less
5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36
 None known
linux-oem-5.14
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10
Show 30 moreShow less
5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67
 None known
linux-oem-5.6
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13
Show 24 moreShow less
5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60
 None known
linux-oracle-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-oracle-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1
Show 7 moreShow less
5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1
 None known
linux-oracle-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1
 None known
linux-raspi2
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
 None known
linux-riscv
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34
Show 7 moreShow less
5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45
 None known
linux-riscv-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1
Show 8 moreShow less
5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35
 None known
linux-riscv-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1
Show 5 moreShow less
5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1
 None known
linux-allwinner-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1
 None known
linux-aws-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1
Show 5 moreShow less
5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1
 None known
linux-aws-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 9 moreShow less
6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1
 None known
linux-aws-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1
Show 9 moreShow less
6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1
 None known
linux-azure-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2
 None known
linux-azure-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 8 moreShow less
6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1
 None known
linux-azure-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1
Show 9 moreShow less
6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1
 None known
linux-azure-fde-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1
 None known
linux-azure-fde-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1
Show 5 moreShow less
6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1
 None known
linux-gcp-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1020.22~22.04.25.19.0-1021.23~22.04.15.19.0-1022.24~22.04.15.19.0-1024.26~22.04.15.19.0-1025.27~22.04.15.19.0-1026.28~22.04.15.19.0-1027.29~22.04.15.19.0-1030.32~22.04.1
 None known
linux-gcp-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1009.9~22.04.36.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1011.11~22.04.36.2.0-1012.12~22.04.1
Show 7 moreShow less
6.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1016.18~22.04.16.2.0-1017.19~22.04.16.2.0-1018.20~22.04.16.2.0-1019.21~22.04.16.2.0-1021.23~22.04.1
 None known
linux-gcp-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1010.10~22.04.36.5.0-1011.11~22.04.16.5.0-1013.13~22.04.16.5.0-1014.14~22.04.16.5.0-1015.15~22.04.1
Show 8 moreShow less
6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1022.24~22.04.16.5.0-1023.25~22.04.16.5.0-1024.26~22.04.16.5.0-1025.27~22.04.1
 None known
linux-hwe-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-28.29~22.04.15.19.0-32.33~22.04.15.19.0-35.36~22.04.15.19.0-38.39~22.04.15.19.0-40.41~22.04.1
Show 6 moreShow less
5.19.0-41.42~22.04.15.19.0-42.43~22.04.15.19.0-43.44~22.04.15.19.0-45.46~22.04.15.19.0-46.47~22.04.15.19.0-50.50
 None known
linux-hwe-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-25.25~22.04.26.2.0-26.26~22.04.16.2.0-31.31~22.04.16.2.0-32.32~22.04.16.2.0-33.33~22.04.1
Show 5 moreShow less
6.2.0-34.34~22.04.16.2.0-35.35~22.04.16.2.0-36.37~22.04.16.2.0-37.38~22.04.16.2.0-39.40~22.04.1
 None known
linux-hwe-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-14.14~22.04.16.5.0-15.15~22.04.16.5.0-17.17~22.04.16.5.0-18.18~22.04.16.5.0-21.21~22.04.1
Show 8 moreShow less
6.5.0-25.25~22.04.16.5.0-26.26~22.04.16.5.0-27.28~22.04.16.5.0-28.29~22.04.16.5.0-35.35~22.04.16.5.0-41.41~22.04.26.5.0-44.44~22.04.16.5.0-45.45~22.04.1
 None known
linux-intel-iot-realtime
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.0-1073.75
 None known
linux-lowlatency-hwe-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.1
Show 5 moreShow less
5.19.0-1024.25~22.04.15.19.0-1025.26~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1030.30
 None known
kernel-source
openSUSE:Tumbleweed
From an advisory covering 57 CVEs
 before 7.0.12-1.1
7.0.12-1.1
dtb-aarch64
openSUSE:Leap 16.0
From an advisory covering 60 CVEs
 before 6.12.0-160000.35.1
6.12.0-160000.35.1
kernel-64kb
openSUSE:Leap 16.0
From an advisory covering 60 CVEs
 before 6.12.0-160000.35.1
6.12.0-160000.35.1
kernel-azure
openSUSE:Leap 16.0
From an advisory covering 60 CVEs
 before 6.12.0-160000.35.1
6.12.0-160000.35.1
kernel-default
openSUSE:Leap 16.0
From an advisory covering 60 CVEs
 before 6.12.0-160000.35.1
6.12.0-160000.35.1
kernel-default-base
openSUSE:Leap 16.0
From an advisory covering 60 CVEs
 before 6.12.0-160000.35.1.160000.2.16
6.12.0-160000.35.1.160000.2.16
kernel-docs
openSUSE:Leap 16.0
From an advisory covering 60 CVEs
 before 6.12.0-160000.35.1
6.12.0-160000.35.1
kernel-kvmsmall
openSUSE:Leap 16.0
From an advisory covering 60 CVEs
 before 6.12.0-160000.35.1
6.12.0-160000.35.1
kernel-obs-build
openSUSE:Leap 16.0
From an advisory covering 60 CVEs
 before 6.12.0-160000.35.1
6.12.0-160000.35.1
kernel-obs-qa
openSUSE:Leap 16.0
From an advisory covering 60 CVEs
 before 6.12.0-160000.35.1
6.12.0-160000.35.1
kernel-rt
openSUSE:Leap 16.0
From an advisory covering 60 CVEs
 before 6.12.0-160000.35.1
6.12.0-160000.35.1
kernel-source
openSUSE:Leap 16.0
From an advisory covering 60 CVEs
 before 6.12.0-160000.35.1
6.12.0-160000.35.1
kernel-syms
openSUSE:Leap 16.0
From an advisory covering 60 CVEs
 before 6.12.0-160000.35.1
6.12.0-160000.35.1
kernel-zfcpdump
openSUSE:Leap 16.0
From an advisory covering 60 CVEs
 before 6.12.0-160000.35.1
6.12.0-160000.35.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubsuominen/itscape2026-07-08

History

History
RecordedChangedSources
affectedOSV
affected, aliases, referencesOSV
affected, aliases, referencesOSV
factsOSV
affectedOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-46316 is a critical vulnerability (CVSS 9.3) in Linux, published June 9, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 27th percentile. Fixed in linux-lts 6.12.95-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 900 package rows, 122 versions, 2,396 references and the rest of 18 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open