CVE-2026-52969
KVM: Reject wrapped offset in kvm_reset_dirty_gfn()
In the Linux kernel, the following vulnerability has been resolved:
KVM: Reject wrapped offset in kvm_reset_dirty_gfn()
kvm_reset_dirty_gfn() guards the gfn range with
if (!memslot || (offset + __fls(mask)) >= memslot->npages)
return;
but offset is u64 and the addition is unchecked. The check can be silently bypassed by a u64 wrap.
The dirty ring backing those entries is MAP_SHARED at KVM_DIRTY_LOG_PAGE_OFFSET of the vcpu fd, so the VMM can rewrite the slot and offset fields of any entry between when the kernel pushes them and when KVM_RESET_DIRTY_RINGS consumes them. On reset, kvm_dirty_ring_reset() re-reads the values via READ_ONCE() and feeds them straight back into this check; only the flags handshake is treated as the handover, the slot/offset payload is taken on trust.
Crafting two entries
entry[i].offset = 0xffffffffffffffc1
entry[i+1].offset = 0
makes the coalescing loop in kvm_dirty_ring_reset() compute
delta = (s64)(0 - 0xffffffffffffffc1) = 63
which falls in [0, BITS_PER_LONG), so it folds entry[i+1] into the existing mask by setting bit 63. The trailing kvm_reset_dirty_gfn() call then sees offset = 0xffffffffffffffc1 and __fls(mask) = 63; the sum is 0 in u64 and the bounds check passes.
That offset propagates into kvm_arch_mmu_enable_log_dirty_pt_masked() unchanged. On the legacy MMU path -- kvm_memslots_have_rmaps() == true, i.e. shadow paging, any VM that has allocated shadow roots, or a write-tracked slot -- it reaches gfn_to_rmap(), which indexes slot->arch.rmap[0][] with a near-U64_MAX gfn. That is an out-of-bounds load of a kvm_rmap_head, followed by a conditional clear of PT_WRITABLE_MASK in whatever the loaded pointer points at. The path is reachable from any process holding /dev/kvm.
Range-check offset on its own first, so the addition cannot wrap. memslot->npages is bounded well below U64_MAX, so once offset < npages holds, offset + __fls(mask) (with __fls(mask) < BITS_PER_LONG) stays in range.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
7.8
In the Linux kernel, the following vulnerability has been resolved:
KVM: Reject wrapped offset in kvm_reset_dirty_gfn()
kvm_reset_dirty_gfn() guards the gfn range with
if (!memslot || (offset + __fls(mask)) >= memslot->npages)
return;
but offset is u64 and the addition is unchecked. The check can be silently bypassed by a u64 wrap.
The dirty ring backing those entries is MAP_SHARED at KVM_DIRTY_LOG_PAGE_OFFSET of the vcpu fd, so the VMM can rewrite the slot and offset fields of any entry between when the kernel pushes them and when KVM_RESET_DIRTY_RINGS consumes them. On reset, kvm_dirty_ring_reset() re-reads the values via READ_ONCE() and feeds them straight back into this check; only the flags handshake is treated as the handover, the slot/offset payload is taken on trust.
Crafting two entries
entry[i].offset = 0xffffffffffffffc1
entry[i+1].offset = 0
makes the coalescing loop in kvm_dirty_ring_reset() compute
delta = (s64)(0 - 0xffffffffffffffc1) = 63
which falls in [0, BITS_PER_LONG), so it folds entry[i+1] into the existing mask by setting bit 63. The trailing kvm_reset_dirty_gfn() call then sees offset = 0xffffffffffffffc1 and __fls(mask) = 63; the sum is 0 in u64 and the bounds check passes.
That offset propagates into kvm_arch_mmu_enable_log_dirty_pt_masked() unchanged. On the legacy MMU path -- kvm_memslots_have_rmaps() == true, i.e. shadow paging, any VM that has allocated shadow roots, or a write-tracked slot -- it reaches gfn_to_rmap(), which indexes slot->arch.rmap[0][] with a near-U64_MAX gfn. That is an out-of-bounds load of a kvm_rmap_head, followed by a conditional clear of PT_WRITABLE_MASK in whatever the loaded pointer points at. The path is reachable from any process holding /dev/kvm.
Range-check offset on its own first, so the addition cannot wrap. memslot->npages is bounded well below U64_MAX, so once offset < npages holds, offset + __fls(mask) (with __fls(mask) < BITS_PER_LONG) stays in range.
- Record
CVE-2026-52969- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-129, CWE-190
- Updated
- 2026-11-02
CVE List
7.0
KVM: Reject wrapped offset in kvm_reset_dirty_gfn()
In the Linux kernel, the following vulnerability has been resolved:
KVM: Reject wrapped offset in kvm_reset_dirty_gfn()
kvm_reset_dirty_gfn() guards the gfn range with
if (!memslot || (offset + __fls(mask)) >= memslot->npages)
return;
but offset is u64 and the addition is unchecked. The check can be silently bypassed by a u64 wrap.
The dirty ring backing those entries is MAP_SHARED at KVM_DIRTY_LOG_PAGE_OFFSET of the vcpu fd, so the VMM can rewrite the slot and offset fields of any entry between when the kernel pushes them and when KVM_RESET_DIRTY_RINGS consumes them. On reset, kvm_dirty_ring_reset() re-reads the values via READ_ONCE() and feeds them straight back into this check; only the flags handshake is treated as the handover, the slot/offset payload is taken on trust.
Crafting two entries
entry[i].offset = 0xffffffffffffffc1
entry[i+1].offset = 0
makes the coalescing loop in kvm_dirty_ring_reset() compute
delta = (s64)(0 - 0xffffffffffffffc1) = 63
which falls in [0, BITS_PER_LONG), so it folds entry[i+1] into the existing mask by setting bit 63. The trailing kvm_reset_dirty_gfn() call then sees offset = 0xffffffffffffffc1 and __fls(mask) = 63; the sum is 0 in u64 and the bounds check passes.
That offset propagates into kvm_arch_mmu_enable_log_dirty_pt_masked() unchanged. On the legacy MMU path -- kvm_memslots_have_rmaps() == true, i.e. shadow paging, any VM that has allocated shadow roots, or a write-tracked slot -- it reaches gfn_to_rmap(), which indexes slot->arch.rmap[0][] with a near-U64_MAX gfn. That is an out-of-bounds load of a kvm_rmap_head, followed by a conditional clear of PT_WRITABLE_MASK in whatever the loaded pointer points at. The path is reachable from any process holding /dev/kvm.
Range-check offset on its own first, so the addition cannot wrap. memslot->npages is bounded well below U64_MAX, so once offset < npages holds, offset + __fls(mask) (with __fls(mask) < BITS_PER_LONG) stays in range.
- Record
CVE-2026-52969- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-190
- Updated
- 2026-11-02
EUVDEUVD-2026-38837
7.0
In the Linux kernel, the following vulnerability has been resolved:
KVM: Reject wrapped offset in kvm_reset_dirty_gfn()
kvm_reset_dirty_gfn() guards the gfn range with
if (!memslot || (offset + __fls(mask)) >= memslot->npages)
return;
but offset is u64 and the addition is unchecked. The check can be silently bypassed by a u64 wrap.
The dirty ring backing those entries is MAP_SHARED at KVM_DIRTY_LOG_PAGE_OFFSET of the vcpu fd, so the VMM can rewrite the slot and offset fields of any entry between when the kernel pushes them and when KVM_RESET_DIRTY_RINGS consumes them. On reset, kvm_dirty_ring_reset() re-reads the values via READ_ONCE() and feeds them straight back into this check; only the flags handshake is treated as the handover, the slot/offset payload is taken on trust.
Crafting two entries
entry[i].offset = 0xffffffffffffffc1
entry[i+1].offset = 0
makes the coalescing loop in kvm_dirty_ring_reset() compute
delta = (s64)(0 - 0xffffffffffffffc1) = 63
which falls in [0, BITS_PER_LONG), so it folds entry[i+1] into the existing mask by setting bit 63. The trailing kvm_reset_dirty_gfn() call then sees offset = 0xffffffffffffffc1 and __fls(mask) = 63; the sum is 0 in u64 and the bounds check passes.
That offset propagates into kvm_arch_mmu_enable_log_dirty_pt_masked() unchanged. On the legacy MMU path -- kvm_memslots_have_rmaps() == true, i.e. shadow paging, any VM that has allocated shadow roots, or a write-tracked slot -- it reaches gfn_to_rmap(), which indexes slot->arch.rmap[0][] with a near-U64_MAX gfn. That is an out-of-bounds load of a kvm_rmap_head, followed by a conditional clear of PT_WRITABLE_MASK in whatever the loaded pointer points at. The path is reachable from any process holding /dev/kvm.
Range-check offset on its own first, so the addition cannot wrap. memslot->npages is bounded well below U64_MAX, so once offset < npages holds, offset + __fls(mask) (with __fls(mask) < BITS_PER_LONG) stays in range.
- Record
EUVD-2026-38837- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-gpq6-rrxf-v33x
7.0
In the Linux kernel, the following vulnerability has been resolved: KVM: Reject wrapped offset...
In the Linux kernel, the following vulnerability has been resolved:
KVM: Reject wrapped offset in kvm_reset_dirty_gfn()
kvm_reset_dirty_gfn() guards the gfn range with
if (!memslot || (offset + __fls(mask)) >= memslot->npages)
return;
but offset is u64 and the addition is unchecked. The check can be silently bypassed by a u64 wrap.
The dirty ring backing those entries is MAP_SHARED at KVM_DIRTY_LOG_PAGE_OFFSET of the vcpu fd, so the VMM can rewrite the slot and offset fields of any entry between when the kernel pushes them and when KVM_RESET_DIRTY_RINGS consumes them. On reset, kvm_dirty_ring_reset() re-reads the values via READ_ONCE() and feeds them straight back into this check; only the flags handshake is treated as the handover, the slot/offset payload is taken on trust.
Crafting two entries
entry[i].offset = 0xffffffffffffffc1
entry[i+1].offset = 0
makes the coalescing loop in kvm_dirty_ring_reset() compute
delta = (s64)(0 - 0xffffffffffffffc1) = 63
which falls in [0, BITS_PER_LONG), so it folds entry[i+1] into the existing mask by setting bit 63. The trailing kvm_reset_dirty_gfn() call then sees offset = 0xffffffffffffffc1 and __fls(mask) = 63; the sum is 0 in u64 and the bounds check passes.
That offset propagates into kvm_arch_mmu_enable_log_dirty_pt_masked() unchanged. On the legacy MMU path -- kvm_memslots_have_rmaps() == true, i.e. shadow paging, any VM that has allocated shadow roots, or a write-tracked slot -- it reaches gfn_to_rmap(), which indexes slot->arch.rmap[0][] with a near-U64_MAX gfn. That is an out-of-bounds load of a kvm_rmap_head, followed by a conditional clear of PT_WRITABLE_MASK in whatever the loaded pointer points at. The path is reachable from any process holding /dev/kvm.
Range-check offset on its own first, so the addition cannot wrap. memslot->npages is bounded well below U64_MAX, so once offset < npages holds, offset + __fls(mask) (with __fls(mask) < BITS_PER_LONG) stays in range.
- Record
GHSA-gpq6-rrxf-v33x- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-129, CWE-190
- Updated
- 2026-11-02
OSVBELL-CVE-2026-52969
7.8
- Record
BELL-CVE-2026-52969- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV
7.0
KVM: Reject wrapped offset in kvm_reset_dirty_gfn()
In the Linux kernel, the following vulnerability has been resolved:
KVM: Reject wrapped offset in kvm_reset_dirty_gfn()
kvm_reset_dirty_gfn() guards the gfn range with
if (!memslot || (offset + __fls(mask)) >= memslot->npages)
return;
but offset is u64 and the addition is unchecked. The check can be silently bypassed by a u64 wrap.
The dirty ring backing those entries is MAP_SHARED at KVM_DIRTY_LOG_PAGE_OFFSET of the vcpu fd, so the VMM can rewrite the slot and offset fields of any entry between when the kernel pushes them and when KVM_RESET_DIRTY_RINGS consumes them. On reset, kvm_dirty_ring_reset() re-reads the values via READ_ONCE() and feeds them straight back into this check; only the flags handshake is treated as the handover, the slot/offset payload is taken on trust.
Crafting two entries
entry[i].offset = 0xffffffffffffffc1
entry[i+1].offset = 0
makes the coalescing loop in kvm_dirty_ring_reset() compute
delta = (s64)(0 - 0xffffffffffffffc1) = 63
which falls in [0, BITS_PER_LONG), so it folds entry[i+1] into the existing mask by setting bit 63. The trailing kvm_reset_dirty_gfn() call then sees offset = 0xffffffffffffffc1 and __fls(mask) = 63; the sum is 0 in u64 and the bounds check passes.
That offset propagates into kvm_arch_mmu_enable_log_dirty_pt_masked() unchanged. On the legacy MMU path -- kvm_memslots_have_rmaps() == true, i.e. shadow paging, any VM that has allocated shadow roots, or a write-tracked slot -- it reaches gfn_to_rmap(), which indexes slot->arch.rmap[0][] with a near-U64_MAX gfn. That is an out-of-bounds load of a kvm_rmap_head, followed by a conditional clear of PT_WRITABLE_MASK in whatever the loaded pointer points at. The path is reachable from any process holding /dev/kvm.
Range-check offset on its own first, so the addition cannot wrap. memslot->npages is bounded well below U64_MAX, so once offset < npages holds, offset + __fls(mask) (with __fls(mask) < BITS_PER_LONG) stays in range.
- Record
CVE-2026-52969- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 48 moreShow less
OSVDEBIAN-CVE-2026-52969
7.8
In the Linux kernel, the following vulnerability has been resolved: KVM: Reject wrapped offset in kvm_reset_dirty_gfn() kvm_reset_dirty_gfn() guards the gfn range with if (!memslot || (offset + __fls(mask)) >= memslot->npages) return; but offset is u64 and the addition is unchecked. The check can be silently bypassed by a u64 wrap. The dirty ring backing those entries is MAP_SHARED at KVM_DIRTY_LOG_PAGE_OFFSET of the vcpu fd, so the VMM can rewrite the slot and offset fields of any entry between when the kernel pushes them and when KVM_RESET_DIRTY_RINGS consumes them. On reset, kvm_dirty_ring_reset() re-reads the values via READ_ONCE() and feeds them straight back into this check; only the flags handshake is treated as the handover, the slot/offset payload is taken on trust. Crafting two entries entry[i].offset = 0xffffffffffffffc1 entry[i+1].offset = 0 makes the coalescing loop in kvm_dirty_ring_reset() compute delta = (s64)(0 - 0xffffffffffffffc1) = 63 which falls in [0, BITS_PER_LONG), so it folds entry[i+1] into the existing mask by setting bit 63. The trailing kvm_reset_dirty_gfn() call then sees offset = 0xffffffffffffffc1 and __fls(mask) = 63; the sum is 0 in u64 and the bounds check passes. That offset propagates into kvm_arch_mmu_enable_log_dirty_pt_masked() unchanged. On the legacy MMU path -- kvm_memslots_have_rmaps() == true, i.e. shadow paging, any VM that has allocated shadow roots, or a write-tracked slot -- it reaches gfn_to_rmap(), which indexes slot->arch.rmap[0][] with a near-U64_MAX gfn. That is an out-of-bounds load of a kvm_rmap_head, followed by a conditional clear of PT_WRITABLE_MASK in whatever the loaded pointer points at. The path is reachable from any process holding /dev/kvm. Range-check offset on its own first, so the addition cannot wrap. memslot->npages is bounded well below U64_MAX, so once offset < npages holds, offset + __fls(mask) (with __fls(mask) < BITS_PER_LONG) stays in range.
- Record
DEBIAN-CVE-2026-52969- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2026-4039
9.8
kernel security update
The Linux Kernel, the operating system core itself.
Security Fix(es):
In the Linux kernel, the following vulnerability has been resolved:ALSA: caiaq: Use snd_card_free_when_closed() at disconnectionThe USB disconnect callback is supposed to be short and not too-longwaiting. OTOH, the current code uses snd_card_free() atdisconnection, but this waits for the close of all used fds, hence itcan take long. It eventually blocks the upper layer USB ioctls, whichmay trigger a soft lockup.An easy workaround is to replace snd_card_free() withsnd_card_free_when_closed(). This variant returns immediately whilethe release of resources is done asynchronously by the card devicerelease at the last close.This patch also splits the code to the disconnect and the free phases;the former is called immediately at the USB disconnect callback whilethe latter is called from the card destructor.(CVE-2024-56531)
In the Linux kernel, the following vulnerability has been resolved:xsk: fix OOB map writes when deleting elementsJordy says: In the xsk_map_delete_elem function an unsigned integer(map->max_entries) is compared with a user-controlled signed integer(k). Due to implicit type conversion, a large unsigned value formap->max_entries can bypass the intended bounds check: if (k >= map->max_entries) return -EINVAL;This allows k to hold a negative value (between -2147483648 and -2),which is then used as an array index in m->xsk_map[k], which resultsin an out-of-bounds access. spin_lock_bh(&m->lock); map_entry = &m->xsk_map[k]; // Out-of-bounds map_entry old_xs = unrcu_pointer(xchg(map_entry, NULL)); // Oob write if (old_xs) xsk_map_sock_delete(old_xs, map_entry); spin_unlock_bh(&m->lock);The xchg operation can then be used to cause an out-of-bounds write.Moreover, the invalid map_entry passed to xsk_map_sock_delete can leadto further memory corruption. It indeed results in following splat:[76612.897343] BUG: unable to handle page fault for address: ffffc8fc2e461108[76612.904330] #PF: supervisor write access in kernel mode[76612.909639] #PF: error_code(0x0002) - not-present page[76612.914855] PGD 0 P4D 0[76612.917431] Oops: Oops: 0002 [#1] PREEMPT SMP[76612.921859] CPU: 11 UID: 0 PID: 10318 Comm: a.out Not tainted 6.12.0-rc1+ #470[76612.929189] Hardware name: Intel Corporation S2600WFT/S2600WFT, BIOS SE5C620.86B.02.01.0008.031920191559 03/19/2019[76612.939781] RIP: 0010:xsk_map_delete_elem+0x2d/0x60[76612.944738] Code: 00 00 41 54 55 53 48 63 2e 3b 6f 24 73 38 4c 8d a7 f8 00 00 00 48 89 fb 4c 89 e7 e8 2d bf 05 00 48 8d b4 eb 00 01 00 00 31 ff <48> 87 3e 48 85 ff 74 05 e8 16 ff ff ff 4c 89 e7 e8 3e bc 05 00 31[76612.963774] RSP: 0018:ffffc9002e407df8 EFLAGS: 00010246[76612.969079] RAX: 0000000000000000 RBX: ffffc9002e461000 RCX: 0000000000000000[76612.976323] RDX: 0000000000000001 RSI: ffffc8fc2e461108 RDI: 0000000000000000[76612.983569] RBP: ffffffff80000001 R08: 0000000000000000 R09: 0000000000000007[76612.990812] R10: ffffc9002e407e18 R11: ffff888108a38858 R12: ffffc9002e4610f8[76612.998060] R13: ffff888108a38858 R14: 00007ffd1ae0ac78 R15: ffffc9002e4610c0[76613.005303] FS: 00007f80b6f59740(0000) GS:ffff8897e0ec0000(0000) knlGS:0000000000000000[76613.013517] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033[76613.019349] CR2: ffffc8fc2e461108 CR3: 000000011e3ef001 CR4: 00000000007726f0[76613.026595] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000[76613.033841] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400[76613.041086] PKRU: 55555554[76613.043842] Call Trace:[76613.046331] <TASK>[76613.048468] ? __die+0x20/0x60[76613.051581] ? page_fault_oops+0x15a/0x450[76613.055747] ? search_extable+0x22/0x30[76613.059649] ? search_bpf_extables+0x5f/0x80[76613.063988] ? exc_page_fault+0xa9/0x140[76613.067975] ? asm_exc_page_fault+0x22/0x30[76613.072229] ? xsk_map_delete_elem+0x2d/0x60[76613.076573] ? xsk_map_delete_elem+0x23/0x60[76613.080914] …
- Record
OESA-2026-4039- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-52969
7.1
In the Linux kernel, the following vulnerability has been resolved: KVM: Reject wrapped offset in kvm_reset_dirty_gfn() kvm_reset_dirty_gfn() guards the gfn range with if (!memslot || (offset + __fls(mask)) >= memslot->npages) return; but offset is u64 and the addition is unchecked. The check can be silently bypassed by a u64 wrap. The dirty ring backing those entries is MAP_SHARED at KVM_DIRTY_LOG_PAGE_OFFSET of the vcpu fd, so the VMM can rewrite the slot and offset fields of any entry between when the kernel pushes them and when KVM_RESET_DIRTY_RINGS consumes them. On reset, kvm_dirty_ring_reset() re-reads the values via READ_ONCE() and feeds them straight back into this check; only the flags handshake is treated as the handover, the slot/offset payload is taken on trust. Crafting two entries entry[i].offset = 0xffffffffffffffc1 entry[i+1].offset = 0 makes the coalescing loop in kvm_dirty_ring_reset() compute delta = (s64)(0 - 0xffffffffffffffc1) = 63 which falls in [0, BITS_PER_LONG), so it folds entry[i+1] into the existing mask by setting bit 63. The trailing kvm_reset_dirty_gfn() call then sees offset = 0xffffffffffffffc1 and __fls(mask) = 63; the sum is 0 in u64 and the bounds check passes. That offset propagates into kvm_arch_mmu_enable_log_dirty_pt_masked() unchanged. On the legacy MMU path -- kvm_memslots_have_rmaps() == true, i.e. shadow paging, any VM that has allocated shadow roots, or a write-tracked slot -- it reaches gfn_to_rmap(), which indexes slot->arch.rmap[0][] with a near-U64_MAX gfn. That is an out-of-bounds load of a kvm_rmap_head, followed by a conditional clear of PT_WRITABLE_MASK in whatever the loaded pointer points at. The path is reachable from any process holding /dev/kvm. Range-check offset on its own first, so the addition cannot wrap. memslot->npages is bounded well below U64_MAX, so once offset < npages holds, offset + __fls(mask) (with __fls(mask) < BITS_PER_LONG) stays in range.
- Record
UBUNTU-CVE-2026-52969- CVSS 4.0
- 7.1 High
CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N - CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-06
OSVCLSA-2026-1787935638 No score
kernel: Fix of 164 CVEs
- wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds {CVE-2023-53582}
- net/sched: accept TCA_STAB only for root qdisc {CVE-2024-50039}
- bpf, sockmap: Several fixes to bpf_msg_pop_data {CVE-2024-56720}
- net: add more sanity checks to qdisc_pkt_len_init() {CVE-2024-49948}
- nvme-tcp: sanitize request list handling {CVE-2025-38264}
- smb: client: fix double free of TCP_Server_Info::hostname {CVE-2025-21673}
- net/sched: ets: Remove drr class from the active list if it changes to strict {CVE-2025-68815}
- net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo {CVE-2026-46132}
- RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send {CVE-2026-45856}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers {CVE-2026-46056}
- bpf: Fix bpf_xdp_store_bytes proto for read-only arg {CVE-2026-45886}
- libceph: Fix slab-out-of-bounds access in auth message processing {CVE-2026-46119}
- nfsd: never defer requests during idmap lookup {CVE-2026-45983}
- openvswitch: cap upcall PID array size and pre-size vport replies {CVE-2026-45840}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() {CVE-2026-46259}
- dm mirror: fix integer overflow in create_dirty_log() {CVE-2026-46023}
- thermal: core: Fix thermal zone governor cleanup issues {CVE-2026-46021}
- tcp: call sk_data_ready() after listener migration {CVE-2026-46015}
- dm: fix a buffer overflow in ioctl processing {CVE-2026-46294}
- Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
- xfrm: espintcp: do not reuse an in-progress partial send {CVE-2026-52935}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() {CVE-2026-53195}
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag {CVE-2026-53218}
- netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920}
- Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() {CVE-2026-53256}
- tipc: fix double-free in tipc_buf_append() {CVE-2026-52993}
- Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER {CVE-2026-53072}
- netfilter: conntrack: remove sprintf usage {CVE-2026-53002}
- smb: client: fix krb5 mount with username option {CVE-2026-31392}
- netfilter: nft_tunnel: fix use-after-free on object destroy {CVE-2026-53212}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() {CVE-2026-53196}
- crypto: ccp - copy IV using skcipher ivsize {CVE-2026-53016}
- netfilter: conntrack_irc: fix possible out-of-bounds read {CVE-2026-53268}
- IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN {CVE-2026-53176}
- fuse: reject fuse_notify() pagecache ops on directories {CVE-2026-53168}
- ppp: require CAP_NET_ADMIN in target netns for unattached ioctls {CVE-2026-53075}
- xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() {CVE-2026-53239}
- ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options {CVE-2026-53249}
- ipv6: sit: reload inner IPv6 header after GSO offloads {CVE-2026-53228}
- uio_hv_generic: Let userspace take care of interrupt mask {CVE-2025-40048}
- net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove {CVE-2026-52947}
- net: guard timestamp cmsgs to real error queue skbs {CVE-2026-53223}
- libceph: Fix potential out-of-bounds access in crush_decode() {CVE-2026-52955}
- libceph: Fix potential null-ptr-deref in decode_choose_args() {CVE-2026-52957}
- netfilter: nft_ct: fix missing expect put in obj eval {CVE-2026-52970}
- netfilter: nf_tables: always walk all pending catchall elements {CVE-2026-23278}
- crypto: af_alg - Cap AEAD AD length to 0x80000000 {CVE-2026-52972}
- wifi: cfg80211: advance loop vars in cfg80211_merge_profile() {CVE-2026-64174}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr {CVE-2026-53391}
- Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock {CVE-2026-63945}
- pNFS: Fix use-after-free in pnfs_update_layout() {CVE-2026-63800}
- RDMA/vmw_pvrdma: Fix…
- Record
CLSA-2026-1787935638- Updated
- 2026-11-02
OSVCLSA-2026-1788168285 No score
kernel: Fix of 193 CVEs
- mac802154: llsec: reject frames shorter than the authentication tag {CVE-2026-68125}
- KVM: x86/mmu: Fix use-after-free on vendor module reload {CVE-2026-68428}
- wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper {CVE-2026-68197}
- bpf: account for current allocated stack depth in widen_imprecise_scalars() {CVE-2025-68208}
- tun: free page on build_skb failure in tun_xdp_one() {CVE-2026-46322}
- smb: client: fix potential cfid UAF in smb2_query_info_compound {CVE-2025-40320}
- net/packet: avoid fanout hook re-registration after unregister {CVE-2026-68338}
- wifi: cfg80211: cancel sched scan results work on unregister {CVE-2026-68414}
- binfmt_misc: set have_execfd only once the interpreter is opened {CVE-2026-68186}
- tracing: Fix resource leak on mmiotrace trace_pipe close {CVE-2026-68175}
- tipc: fix u16 MTU truncation in media and bearer MTU validation {CVE-2026-68297}
- net: gro: fix double aggregation of flush-marked skbs {CVE-2026-68136}
- bpf, sockmap: Reject unhashed UDP sockets on sockmap update {CVE-2026-68386}
- wifi: brcmfmac: fix 802.1X-SHA256 call trace warning {CVE-2026-68304}
- udf: fix partition descriptor append bookkeeping {CVE-2026-45991}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() {CVE-2026-43023}
- smb: client: validate dacloffset before building DACL pointers {CVE-2026-46195}
- smb/client: fix out-of-bounds read in symlink_data() {CVE-2026-46185}
- net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo {CVE-2026-46132}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers {CVE-2026-46056}
- RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send {CVE-2026-45856}
- RDMA/mana: Validate rx_hash_key_len {CVE-2026-46145}
- scsi: qla2xxx: Completely fix fcport double free {CVE-2026-43414}
- bpf: Fix bpf_xdp_store_bytes proto for read-only arg {CVE-2026-45886}
- libceph: Fix slab-out-of-bounds access in auth message processing {CVE-2026-46119}
- wifi: mac80211: use safe list iteration in radar detect work {CVE-2026-46166}
- RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads {CVE-2026-46114}
- nfsd: never defer requests during idmap lookup {CVE-2026-45983}
- drop_monitor: fix size calculations for 64-bit attributes {CVE-2026-68287}
- openvswitch: cap upcall PID array size and pre-size vport replies {CVE-2026-45840}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() {CVE-2026-46259}
- wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() {CVE-2026-46069}
- dm mirror: fix integer overflow in create_dirty_log() {CVE-2026-46023}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync {CVE-2026-46244}
- drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe() {CVE-2026-68429}
- crypto: authencesn - reject short ahash digests during instance creation {CVE-2026-46033}
- RDMA/rxe: Fix race condition in QP timer handlers {CVE-2026-45910}
- wifi: mac80211: remove station if connection prep fails {CVE-2026-46125}
- tcp: call sk_data_ready() after listener migration {CVE-2026-46015}
- scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk {CVE-2025-38289}
- net/sched: act_ct: Only release RCU read lock after ct_ft {CVE-2026-46319}
- dm: fix a buffer overflow in ioctl processing {CVE-2026-46294}
- io-wq: check that the predecessor is hashed in io_wq_remove_pending() {CVE-2026-46274}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result {CVE-2026-46152}
- io_uring/poll: fix signed comparison in io_poll_get_ownership() {CVE-2026-52933}
- xfrm: espintcp: do not reuse an in-progress partial send {CVE-2026-52935}
- Bluetooth: btusb: validate Realtek vendor event length {CVE-2026-68339}
- Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() {CVE-2026-53256}
- Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag {CVE-2026-53218}
- ipc: limit next_id…
- Record
CLSA-2026-1788168285- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:21555-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
- CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
- CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
- CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
- CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
- CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
- CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
- CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
- CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
- CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
- CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
- CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
- CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
- CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
- CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
- CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
- CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
- CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
- CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
- CVE-2026-46023: dm mirror: fix integer…
- Record
openSUSE-SU-2026:21555-1- Updated
- 2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2026-52969 No score
CVE-2026-52969 in linux - Patched by Root
Root has patched CVE-2026-52969 in the linux package for Root:Debian:12. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-12-CVE-2026-52969- Updated
- 2026-11-02
OSVROOT-OS-UBUNTU-2204-CVE-2026-52969 No score
CVE-2026-52969 in linux - Patched by Root
Root has patched CVE-2026-52969 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.
- Record
ROOT-OS-UBUNTU-2204-CVE-2026-52969- Updated
- 2026-11-06
OSVROOT-OS-UBUNTU-2404-CVE-2026-52969 No score
CVE-2026-52969 in linux - Patched by Root
Root has patched CVE-2026-52969 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.
- Record
ROOT-OS-UBUNTU-2404-CVE-2026-52969- Updated
- 2026-11-06
OSVSUSE-SU-2026:22521-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
- CVE-2025-71294: drm/amdgpu: fix NULL pointer issue buffer funcs (bsc#1264562).
- CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
- CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
- CVE-2026-31462: drm/amdgpu: prevent immediate PASID reuse case (bsc#1262655).
- CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
- CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
- CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
- CVE-2026-31677: crypto: af_alg - limit RX SG extraction by receive buffer budget (bsc#1263560).
- CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
- CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
- CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
- CVE-2026-43079: perf/x86/intel/uncore: Skip discovery table for offline dies (bsc#1264228).
- CVE-2026-43080: l2tp: Drop large packets with UDP encap (bsc#1264236).
- CVE-2026-43081: net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ (bsc#1264241).
- CVE-2026-43085: netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (bsc#1264230).
- CVE-2026-43086: ipvs: fix NULL deref in ip_vs_add_service error path (bsc#1264286).
- CVE-2026-43089: xfrm_user: fix info leak in build_mapping() (bsc#1264261).
- CVE-2026-43093: xsk: tighten UMEM headroom validation to account for tailroom and min frame (bsc#1264254).
- CVE-2026-43107: xfrm: account XFRMA_IF_ID in aevent size calculation (bsc#1264258).
- CVE-2026-43128: RDMA/umem: Fix double dma_buf_unpin in failure path (bsc#1264612).
- CVE-2026-43139: xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (bsc#1264294).
- CVE-2026-43233: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (bsc#1264337).
- CVE-2026-43238: net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() (bsc#1264320).
- CVE-2026-43303: mm/page_alloc: clear page->private in free_pages_prepare() (bsc#1264974).
- CVE-2026-43336: lib/crypto: chacha: Zeroize permuted_state before it leaves scope (bsc#1265113).
- CVE-2026-43420: ceph: fix i_nlink underrun during async unlink (bsc#1264814).
- CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).
- CVE-2026-43472: unshare: fix unshare_fs() handling (bsc#1264748).
- CVE-2026-43492: lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() (bsc#1265629).
- CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
- CVE-2026-45838: bpf: fix end-of-list detection in cgroup_storage_get_next_key() (bsc#1266396).
- CVE-2026-45848: apparmor: fix NULL sock in aa_sock_file_perm (bsc#1266734).
- CVE-2026-45891: net: hns3: fix double free issue for tx spare buffer (bsc#1266717).
- CVE-2026-45912: ext4: don't cache extent during splitting extent (bsc#1266899).
- CVE-2026-45948: ext4: fix memory leak in ext4_ext_shift_extents() (bsc#1266929).
- CVE-2026-45985: ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O (bsc#1266700).
- CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).
- CVE-2026-46053: net: rds: fix MR cleanup on copy error (bsc#1267427).
- CVE-2026-46063: x86/shstk: Prevent deadlock during shstk sigreturn (bsc#1267228).
- CVE-2026-46065: fbdev: defio: Disconnect deferred I/O from the lifetime of struct (bsc#1267458).
- CVE-2026-46069: wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() (bsc#1267437).
- CVE-2026-46071: KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12 (bsc#1267591).…
- Record
SUSE-SU-2026:22521-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:22522-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
- CVE-2025-71294: drm/amdgpu: fix NULL pointer issue buffer funcs (bsc#1264562).
- CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
- CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
- CVE-2026-31462: drm/amdgpu: prevent immediate PASID reuse case (bsc#1262655).
- CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
- CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
- CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
- CVE-2026-31677: crypto: af_alg - limit RX SG extraction by receive buffer budget (bsc#1263560).
- CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
- CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
- CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
- CVE-2026-43079: perf/x86/intel/uncore: Skip discovery table for offline dies (bsc#1264228).
- CVE-2026-43080: l2tp: Drop large packets with UDP encap (bsc#1264236).
- CVE-2026-43081: net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ (bsc#1264241).
- CVE-2026-43085: netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (bsc#1264230).
- CVE-2026-43086: ipvs: fix NULL deref in ip_vs_add_service error path (bsc#1264286).
- CVE-2026-43089: xfrm_user: fix info leak in build_mapping() (bsc#1264261).
- CVE-2026-43093: xsk: tighten UMEM headroom validation to account for tailroom and min frame (bsc#1264254).
- CVE-2026-43107: xfrm: account XFRMA_IF_ID in aevent size calculation (bsc#1264258).
- CVE-2026-43128: RDMA/umem: Fix double dma_buf_unpin in failure path (bsc#1264612).
- CVE-2026-43139: xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (bsc#1264294).
- CVE-2026-43233: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (bsc#1264337).
- CVE-2026-43238: net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() (bsc#1264320).
- CVE-2026-43303: mm/page_alloc: clear page->private in free_pages_prepare() (bsc#1264974).
- CVE-2026-43336: lib/crypto: chacha: Zeroize permuted_state before it leaves scope (bsc#1265113).
- CVE-2026-43420: ceph: fix i_nlink underrun during async unlink (bsc#1264814).
- CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).
- CVE-2026-43472: unshare: fix unshare_fs() handling (bsc#1264748).
- CVE-2026-43492: lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() (bsc#1265629).
- CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
- CVE-2026-45838: bpf: fix end-of-list detection in cgroup_storage_get_next_key() (bsc#1266396).
- CVE-2026-45848: apparmor: fix NULL sock in aa_sock_file_perm (bsc#1266734).
- CVE-2026-45891: net: hns3: fix double free issue for tx spare buffer (bsc#1266717).
- CVE-2026-45912: ext4: don't cache extent during splitting extent (bsc#1266899).
- CVE-2026-45948: ext4: fix memory leak in ext4_ext_shift_extents() (bsc#1266929).
- CVE-2026-45985: ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O (bsc#1266700).
- CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).
- CVE-2026-46053: net: rds: fix MR cleanup on copy error (bsc#1267427).
- CVE-2026-46063: x86/shstk: Prevent deadlock during shstk sigreturn (bsc#1267228).
- CVE-2026-46065: fbdev: defio: Disconnect deferred I/O from the lifetime of struct (bsc#1267458).
- CVE-2026-46069: wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() (bsc#1267437).
- CVE-2026-46071: KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12…
- Record
SUSE-SU-2026:22522-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:22665-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
- CVE-2025-71294: drm/amdgpu: fix NULL pointer issue buffer funcs (bsc#1264562).
- CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
- CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
- CVE-2026-31462: drm/amdgpu: prevent immediate PASID reuse case (bsc#1262655).
- CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
- CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
- CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
- CVE-2026-31677: crypto: af_alg - limit RX SG extraction by receive buffer budget (bsc#1263560).
- CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
- CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
- CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
- CVE-2026-43079: perf/x86/intel/uncore: Skip discovery table for offline dies (bsc#1264228).
- CVE-2026-43080: l2tp: Drop large packets with UDP encap (bsc#1264236).
- CVE-2026-43081: net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ (bsc#1264241).
- CVE-2026-43085: netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (bsc#1264230).
- CVE-2026-43086: ipvs: fix NULL deref in ip_vs_add_service error path (bsc#1264286).
- CVE-2026-43089: xfrm_user: fix info leak in build_mapping() (bsc#1264261).
- CVE-2026-43093: xsk: tighten UMEM headroom validation to account for tailroom and min frame (bsc#1264254).
- CVE-2026-43107: xfrm: account XFRMA_IF_ID in aevent size calculation (bsc#1264258).
- CVE-2026-43128: RDMA/umem: Fix double dma_buf_unpin in failure path (bsc#1264612).
- CVE-2026-43139: xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (bsc#1264294).
- CVE-2026-43233: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (bsc#1264337).
- CVE-2026-43238: net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() (bsc#1264320).
- CVE-2026-43303: mm/page_alloc: clear page->private in free_pages_prepare() (bsc#1264974).
- CVE-2026-43336: lib/crypto: chacha: Zeroize permuted_state before it leaves scope (bsc#1265113).
- CVE-2026-43420: ceph: fix i_nlink underrun during async unlink (bsc#1264814).
- CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).
- CVE-2026-43472: unshare: fix unshare_fs() handling (bsc#1264748).
- CVE-2026-43492: lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() (bsc#1265629).
- CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
- CVE-2026-45838: bpf: fix end-of-list detection in cgroup_storage_get_next_key() (bsc#1266396).
- CVE-2026-45848: apparmor: fix NULL sock in aa_sock_file_perm (bsc#1266734).
- CVE-2026-45891: net: hns3: fix double free issue for tx spare buffer (bsc#1266717).
- CVE-2026-45912: ext4: don't cache extent during splitting extent (bsc#1266899).
- CVE-2026-45948: ext4: fix memory leak in ext4_ext_shift_extents() (bsc#1266929).
- CVE-2026-45985: ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O (bsc#1266700).
- CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).
- CVE-2026-46053: net: rds: fix MR cleanup on copy error (bsc#1267427).
- CVE-2026-46063: x86/shstk: Prevent deadlock during shstk sigreturn (bsc#1267228).
- CVE-2026-46065: fbdev: defio: Disconnect deferred I/O from the lifetime of struct (bsc#1267458).
- CVE-2026-46069: wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() (bsc#1267437).
- CVE-2026-46071: KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12 (bsc#1267591).…
- Record
SUSE-SU-2026:22665-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:22666-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
- CVE-2025-71294: drm/amdgpu: fix NULL pointer issue buffer funcs (bsc#1264562).
- CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
- CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
- CVE-2026-31462: drm/amdgpu: prevent immediate PASID reuse case (bsc#1262655).
- CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
- CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
- CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
- CVE-2026-31677: crypto: af_alg - limit RX SG extraction by receive buffer budget (bsc#1263560).
- CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
- CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
- CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
- CVE-2026-43079: perf/x86/intel/uncore: Skip discovery table for offline dies (bsc#1264228).
- CVE-2026-43080: l2tp: Drop large packets with UDP encap (bsc#1264236).
- CVE-2026-43081: net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ (bsc#1264241).
- CVE-2026-43085: netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (bsc#1264230).
- CVE-2026-43086: ipvs: fix NULL deref in ip_vs_add_service error path (bsc#1264286).
- CVE-2026-43089: xfrm_user: fix info leak in build_mapping() (bsc#1264261).
- CVE-2026-43093: xsk: tighten UMEM headroom validation to account for tailroom and min frame (bsc#1264254).
- CVE-2026-43107: xfrm: account XFRMA_IF_ID in aevent size calculation (bsc#1264258).
- CVE-2026-43128: RDMA/umem: Fix double dma_buf_unpin in failure path (bsc#1264612).
- CVE-2026-43139: xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (bsc#1264294).
- CVE-2026-43233: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (bsc#1264337).
- CVE-2026-43238: net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() (bsc#1264320).
- CVE-2026-43303: mm/page_alloc: clear page->private in free_pages_prepare() (bsc#1264974).
- CVE-2026-43336: lib/crypto: chacha: Zeroize permuted_state before it leaves scope (bsc#1265113).
- CVE-2026-43420: ceph: fix i_nlink underrun during async unlink (bsc#1264814).
- CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).
- CVE-2026-43472: unshare: fix unshare_fs() handling (bsc#1264748).
- CVE-2026-43492: lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() (bsc#1265629).
- CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
- CVE-2026-45838: bpf: fix end-of-list detection in cgroup_storage_get_next_key() (bsc#1266396).
- CVE-2026-45848: apparmor: fix NULL sock in aa_sock_file_perm (bsc#1266734).
- CVE-2026-45891: net: hns3: fix double free issue for tx spare buffer (bsc#1266717).
- CVE-2026-45912: ext4: don't cache extent during splitting extent (bsc#1266899).
- CVE-2026-45948: ext4: fix memory leak in ext4_ext_shift_extents() (bsc#1266929).
- CVE-2026-45985: ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O (bsc#1266700).
- CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).
- CVE-2026-46053: net: rds: fix MR cleanup on copy error (bsc#1267427).
- CVE-2026-46063: x86/shstk: Prevent deadlock during shstk sigreturn (bsc#1267228).
- CVE-2026-46065: fbdev: defio: Disconnect deferred I/O from the lifetime of struct (bsc#1267458).
- CVE-2026-46069: wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() (bsc#1267437).
- CVE-2026-46071: KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12…
- Record
SUSE-SU-2026:22666-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23066-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
- CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
- CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
- CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
- CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
- CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
- CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
- CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
- CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
- CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
- CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
- CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
- CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
- CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
- CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
- CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
- CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
- CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
- CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
- CVE-2026-46023: dm mirror: fix integer…
- Record
SUSE-SU-2026:23066-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23068-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
- CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
- CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
- CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
- CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
- CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
- CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
- CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
- CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
- CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
- CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
- CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
- CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
- CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
- CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
- CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
- CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
- CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
- CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
- CVE-2026-46023: dm mirror: fix integer…
- Record
SUSE-SU-2026:23068-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23221-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
- CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
- CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
- CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
- CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
- CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
- CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
- CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
- CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
- CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
- CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
- CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
- CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
- CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
- CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
- CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
- CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
- CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
- CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
- CVE-2026-46023: dm mirror: fix integer…
- Record
SUSE-SU-2026:23221-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23231-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
- CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
- CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
- CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
- CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
- CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
- CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
- CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
- CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
- CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
- CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
- CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
- CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
- CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
- CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
- CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
- CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
- CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
- CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
- CVE-2026-46023: dm mirror: fix integer…
- Record
SUSE-SU-2026:23231-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23237-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
- CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
- CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
- CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
- CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
- CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
- CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
- CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
- CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
- CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
- CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
- CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
- CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
- CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
- CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
- CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
- CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
- CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
- CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
- CVE-2026-46023: dm mirror: fix integer…
- Record
SUSE-SU-2026:23237-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:2799-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2025-10263: arm64: cputype: Add C1-Ultra definitions (bsc#1266290).
- CVE-2025-40216: io_uring/rsrc: don't rely on user vaddr alignment (bsc#1259764).
- CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
- CVE-2025-68822: Input: alps - fix use-after-free bugs caused by dev3_register_work (bsc#1256668).
- CVE-2025-71294: drm/amdgpu: fix NULL pointer issue buffer funcs (bsc#1264562).
- CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
- CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
- CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
- CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
- CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
- CVE-2026-31462: drm/amdgpu: prevent immediate PASID reuse case (bsc#1262655).
- CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
- CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (bsc#1267816).
- CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
- CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
- CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
- CVE-2026-31500: Bluetooth: hci_sync: Remove remaining dependencies of hci_request (bsc#1262993).
- CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
- CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
- CVE-2026-31560: spi: spi-dw-dma: fix print error log when wait finish transaction (bsc#1263057).
- CVE-2026-31592: KVM: SEV: Protect all of sev_mem_enc_register_region() with kvm->lock (bsc#1263123).
- CVE-2026-31593: KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU (bsc#1263124).
- CVE-2026-31647: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (bsc#1263581).
- CVE-2026-31664: xfrm: clear trailing padding in build_polexpire() (bsc#1263578).
- CVE-2026-31665: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
- CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
- CVE-2026-31674: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (bsc#1263568).
- CVE-2026-31677: crypto: af_alg - limit RX SG extraction by receive buffer budget (bsc#1263560).
- CVE-2026-31680: net: ipv6: flowlabel: defer exclusive option free until RCU teardown (bsc#1263563).
- CVE-2026-31693: cifs: some missing initializations on replay (bsc#1267744).
- CVE-2026-31697: crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed (bsc#1264116).
- CVE-2026-31698: crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed (bsc#1263880).
- CVE-2026-31699: crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed (bsc#1263879).
- CVE-2026-31752: bridge: br_nd_send: validate ND option lengths (bsc#1264045).
- CVE-2026-31759: usb: ulpi: fix double free in ulpi_register_interface() error path (bsc#1264076).
- CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
- CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
- CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
- CVE-2026-43023: Bluetooth: SCO: fix race conditions in sco_sock_connect() (bsc#1264137).
- CVE-2026-43024: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).
- CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated…
- Record
SUSE-SU-2026:2799-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:2800-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2025-40216: io_uring/rsrc: don't rely on user vaddr alignment (bsc#1259764).
- CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
- CVE-2025-71294: drm/amdgpu: fix NULL pointer issue buffer funcs (bsc#1264562).
- CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
- CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
- CVE-2026-31462: drm/amdgpu: prevent immediate PASID reuse case (bsc#1262655).
- CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
- CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
- CVE-2026-31647: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (bsc#1263581).
- CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
- CVE-2026-31677: crypto: af_alg - limit RX SG extraction by receive buffer budget (bsc#1263560).
- CVE-2026-31697: crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed (bsc#1264116).
- CVE-2026-31698: crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed (bsc#1263880).
- CVE-2026-31699: crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed (bsc#1263879).
- CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
- CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
- CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
- CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
- CVE-2026-43053: xfs: close crash window in attr dabtree inactivation (bsc#1264084).
- CVE-2026-43074: eventpoll: defer struct eventpoll free to RCU grace period (bsc#1264263).
- CVE-2026-43079: perf/x86/intel/uncore: Skip discovery table for offline dies (bsc#1264228).
- CVE-2026-43080: l2tp: Drop large packets with UDP encap (bsc#1264236).
- CVE-2026-43081: net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ (bsc#1264241).
- CVE-2026-43085: netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (bsc#1264230).
- CVE-2026-43086: ipvs: fix NULL deref in ip_vs_add_service error path (bsc#1264286).
- CVE-2026-43089: xfrm_user: fix info leak in build_mapping() (bsc#1264261).
- CVE-2026-43093: xsk: tighten UMEM headroom validation to account for tailroom and min frame (bsc#1264254).
- CVE-2026-43094: ixgbevf: add missing negotiate_features op to Hyper-V ops table (bsc#1264231).
- CVE-2026-43107: xfrm: account XFRMA_IF_ID in aevent size calculation (bsc#1264258).
- CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1264484).
- CVE-2026-43128: RDMA/umem: Fix double dma_buf_unpin in failure path (bsc#1264612).
- CVE-2026-43139: xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (bsc#1264294).
- CVE-2026-43233: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (bsc#1264337).
- CVE-2026-43238: net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() (bsc#1264320).
- CVE-2026-43303: mm/page_alloc: clear page->private in free_pages_prepare() (bsc#1264974).
- CVE-2026-43336: lib/crypto: chacha: Zeroize permuted_state before it leaves scope (bsc#1265113).
- CVE-2026-43420: ceph: fix i_nlink underrun during async unlink (bsc#1264814).
- CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).
- CVE-2026-43472: unshare: fix unshare_fs() handling (bsc#1264748).
- CVE-2026-43492: lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() (bsc#1265629).
- CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
- CVE-2026-45838: bpf: fix end-of-list detection in cgroup_storage_get_next_key()…
- Record
SUSE-SU-2026:2800-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:2840-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
- CVE-2026-43038: ipv6: icmp: clear skb2->cb in ip6_err_gen_icmpv6_unreach() (bsc#1264097).
- CVE-2026-46090: ALSA: aloop: Fix peer runtime UAF during format-change stop (bsc#1267531).
- CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267722).
- CVE-2026-46197: drm/amdkfd: validate SVM ioctl nattr against buffer size (bsc#1267381).
- CVE-2026-46229: drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure (bsc#1267567).
- CVE-2026-46253: pstore/ram: fix buffer overflow in persistent_ram_save_old() (bsc#1267635).
- CVE-2026-46266: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (bsc#1267684).
- CVE-2026-46319: net/sched: act_ct: Only release RCU read lock after ct_ft (bsc#1268022).
- CVE-2026-46320: tap: free page on error paths in tap_get_user_xdp() (bsc#1267993).
- CVE-2026-46330: Revert 'net/smc: Introduce TCP ULP support' (bsc#1268049).
- CVE-2026-46331: net/sched: fix pedit partial COW leading to page cache (bsc#1265421).
- CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268660).
- CVE-2026-52918: Bluetooth: serialize accept_q access (bsc#1269100).
- CVE-2026-52923: ipc: limit next_id allocation to the valid ID range (bsc#1269033).
- CVE-2026-52924: sctp: purge outqueue on stale COOKIE-ECHO handling (bsc#1269036).
- CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269022).
- CVE-2026-52955: libceph: Fix potential out-of-bounds access in crush_decode() (bsc#1269159).
- CVE-2026-52969: KVM: Reject wrapped offset in kvm_reset_dirty_gfn() (bsc#1269184).
- CVE-2026-52972: crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1269195).
- CVE-2026-52993: tipc: fix double-free in tipc_buf_append() (bsc#1269193).
- CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269090).
- CVE-2026-53041: ocfs2: fix listxattr handling when the buffer is full (bsc#1269398).
- CVE-2026-53053: iommu/amd: Fix clone_alias() to use the original device's devid (bsc#1269310).
- CVE-2026-53071: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (bsc#1269678).
- CVE-2026-53072: Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (bsc#1269681).
- CVE-2026-53133: RDMA/umem: Fix truncation for block sizes >= 4G (bsc#1269821).
- CVE-2026-53253: Bluetooth: bnep: reject short frames before parsing (bsc#1269574).
- CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270059).
- Record
SUSE-SU-2026:2840-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:2841-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2026-31771: Bluetooth: Ignore HCI_ERROR_CANCELLED_BY_HOST on adv set terminated event (bsc#1264145).
- CVE-2026-43038: ipv6: icmp: clear skb2->cb in ip6_err_gen_icmpv6_unreach() (bsc#1264097).
- CVE-2026-46090: ALSA: aloop: Fix peer runtime UAF during format-change stop (bsc#1267531).
- CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267722).
- CVE-2026-46229: drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure (bsc#1267567).
- CVE-2026-46253: pstore/ram: fix buffer overflow in persistent_ram_save_old() (bsc#1267635).
- CVE-2026-46266: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (bsc#1267684).
- CVE-2026-46319: net/sched: act_ct: Only release RCU read lock after ct_ft (bsc#1268022).
- CVE-2026-46320: tap: free page on error paths in tap_get_user_xdp() (bsc#1267993).
- CVE-2026-46331: net/sched: fix pedit partial COW leading to page cache (bsc#1265421).
- CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268660).
- CVE-2026-52918: Bluetooth: serialize accept_q access (bsc#1269100).
- CVE-2026-52923: ipc: limit next_id allocation to the valid ID range (bsc#1269033).
- CVE-2026-52924: sctp: purge outqueue on stale COOKIE-ECHO handling (bsc#1269036).
- CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269022).
- CVE-2026-52955: libceph: Fix potential out-of-bounds access in crush_decode() (bsc#1269159).
- CVE-2026-52969: KVM: Reject wrapped offset in kvm_reset_dirty_gfn() (bsc#1269184).
- CVE-2026-52972: crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1269195).
- CVE-2026-52993: tipc: fix double-free in tipc_buf_append() (bsc#1269193).
- CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269090).
- CVE-2026-53041: ocfs2: fix listxattr handling when the buffer is full (bsc#1269398).
- CVE-2026-53053: iommu/amd: Fix clone_alias() to use the original device's devid (bsc#1269310).
- CVE-2026-53071: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (bsc#1269678).
- CVE-2026-53072: Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (bsc#1269681).
- CVE-2026-53133: RDMA/umem: Fix truncation for block sizes >= 4G (bsc#1269821).
- CVE-2026-53253: Bluetooth: bnep: fix incorrect length parsing in bnep_rx_frame() extension handling (bsc#1269574).
- CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270059).
- Record
SUSE-SU-2026:2841-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:3044-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
- CVE-2026-43038: ipv6: icmp: clear skb2->cb in ip6_err_gen_icmpv6_unreach() (bsc#1264097).
- CVE-2026-46090: ALSA: aloop: Fix peer runtime UAF during format-change stop (bsc#1267531).
- CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267722).
- CVE-2026-46229: drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure (bsc#1267567).
- CVE-2026-46253: pstore/ram: fix buffer overflow in persistent_ram_save_old() (bsc#1267635).
- CVE-2026-46266: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (bsc#1267684).
- CVE-2026-46319: net/sched: act_ct: Only release RCU read lock after ct_ft (bsc#1268022).
- CVE-2026-46320: tap: free page on error paths in tap_get_user_xdp() (bsc#1267993).
- CVE-2026-46331: net/sched: fix pedit partial COW leading to page cache (bsc#1265421).
- CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268660).
- CVE-2026-52918: Bluetooth: serialize accept_q access (bsc#1269100).
- CVE-2026-52923: ipc: limit next_id allocation to the valid ID range (bsc#1269033).
- CVE-2026-52924: sctp: purge outqueue on stale COOKIE-ECHO handling (bsc#1269036).
- CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269022).
- CVE-2026-52955: libceph: Fix potential out-of-bounds access in crush_decode() (bsc#1269159).
- CVE-2026-52969: KVM: Reject wrapped offset in kvm_reset_dirty_gfn() (bsc#1269184).
- CVE-2026-52972: crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1269195).
- CVE-2026-52993: tipc: fix double-free in tipc_buf_append() (bsc#1269193).
- CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269090).
- CVE-2026-53041: ocfs2: fix listxattr handling when the buffer is full (bsc#1269398).
- CVE-2026-53053: iommu/amd: Fix clone_alias() to use the original device's devid (bsc#1269310).
- CVE-2026-53071: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (bsc#1269678).
- CVE-2026-53072: Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (bsc#1269681).
- CVE-2026-53133: RDMA/umem: Fix truncation for block sizes >= 4G (bsc#1269821).
- CVE-2026-53253: Bluetooth: bnep: fix incorrect length parsing in bnep_rx_frame() extension handling (bsc#1269574).
- CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270059).
- Record
SUSE-SU-2026:3044-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:3089-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2026-31771: Bluetooth: Ignore HCI_ERROR_CANCELLED_BY_HOST on adv set terminated event (bsc#1264145).
- CVE-2026-43038: ipv6: icmp: clear skb2->cb in ip6_err_gen_icmpv6_unreach() (bsc#1264097).
- CVE-2026-46090: ALSA: aloop: Fix peer runtime UAF during format-change stop (bsc#1267531).
- CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267722).
- CVE-2026-46197: drm/amdkfd: validate SVM ioctl nattr against buffer size (bsc#1267381).
- CVE-2026-46229: drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure (bsc#1267567).
- CVE-2026-46253: pstore/ram: fix buffer overflow in persistent_ram_save_old() (bsc#1267635).
- CVE-2026-46266: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (bsc#1267684).
- CVE-2026-46319: net/sched: act_ct: Only release RCU read lock after ct_ft (bsc#1268022).
- CVE-2026-46320: tap: free page on error paths in tap_get_user_xdp() (bsc#1267993).
- CVE-2026-46331: net/sched: fix pedit partial COW leading to page cache (bsc#1265421).
- CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268660).
- CVE-2026-52918: Bluetooth: serialize accept_q access (bsc#1269100).
- CVE-2026-52923: ipc: limit next_id allocation to the valid ID range (bsc#1269033).
- CVE-2026-52924: sctp: purge outqueue on stale COOKIE-ECHO handling (bsc#1269036).
- CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269022).
- CVE-2026-52955: libceph: Fix potential out-of-bounds access in crush_decode() (bsc#1269159).
- CVE-2026-52969: KVM: Reject wrapped offset in kvm_reset_dirty_gfn() (bsc#1269184).
- CVE-2026-52972: crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1269195).
- CVE-2026-52993: tipc: fix double-free in tipc_buf_append() (bsc#1269193).
- CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269090).
- CVE-2026-53041: ocfs2: fix listxattr handling when the buffer is full (bsc#1269398).
- CVE-2026-53053: iommu/amd: Fix clone_alias() to use the original device's devid (bsc#1269310).
- CVE-2026-53071: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (bsc#1269678).
- CVE-2026-53072: Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (bsc#1269681).
- CVE-2026-53133: RDMA/umem: Fix truncation for block sizes >= 4G (bsc#1269821).
- CVE-2026-53253: Bluetooth: bnep: fix incorrect length parsing in bnep_rx_frame() extension handling (bsc#1269574).
- CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270059).
- Record
SUSE-SU-2026:3089-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:3156-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1264484).
- CVE-2026-46052: ceph: only d_add() negative dentries when they are unhashed (bsc#1267494).
- CVE-2026-46071: KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12 (bsc#1267591).
- CVE-2026-46076: KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (bsc#1267365).
- CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267369).
- CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267722).
- CVE-2026-46229: drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure (bsc#1267567).
- CVE-2026-46242: eventpoll: Fix integer overflow in ep_loop_check_proc() (bsc#1267618).
- CVE-2026-46253: pstore/ram: fix buffer overflow in persistent_ram_save_old() (bsc#1267635).
- CVE-2026-46266: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (bsc#1267684).
- CVE-2026-46289: lib/scatterlist: fix length calculations in extract_kvec_to_sg (bsc#1267966).
- CVE-2026-46319: net/sched: act_ct: Only release RCU read lock after ct_ft (bsc#1268022).
- CVE-2026-46320: tap: free page on error paths in tap_get_user_xdp() (bsc#1267993).
- CVE-2026-46330: Revert 'net/smc: Introduce TCP ULP support' (bsc#1268049).
- CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268660).
- CVE-2026-52918: Bluetooth: serialize accept_q access (bsc#1269100).
- CVE-2026-52923: ipc: limit next_id allocation to the valid ID range (bsc#1269033).
- CVE-2026-52924: sctp: purge outqueue on stale COOKIE-ECHO handling (bsc#1269036).
- CVE-2026-52933: io_uring/poll: fix signed comparison in io_poll_get_ownership() (bsc#1268989).
- CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269022).
- CVE-2026-52955: libceph: Fix potential out-of-bounds access in crush_decode() (bsc#1269159).
- CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1269172).
- CVE-2026-52958: libceph: Fix potential out-of-bounds access in osdmap_decode() (bsc#1269174).
- CVE-2026-52969: KVM: Reject wrapped offset in kvm_reset_dirty_gfn() (bsc#1269184).
- CVE-2026-52972: crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1269195).
- CVE-2026-52993: tipc: fix double-free in tipc_buf_append() (bsc#1269193).
- CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269090).
- CVE-2026-53041: ocfs2: fix listxattr handling when the buffer is full (bsc#1269398).
- CVE-2026-53052: ASoC: qcom: qdsp6: topology: check widget type before accessing data (bsc#1269314).
- CVE-2026-53053: iommu/amd: Fix clone_alias() to use the original device's devid (bsc#1269310).
- CVE-2026-53071: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (bsc#1269678).
- CVE-2026-53072: Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (bsc#1269681).
- CVE-2026-53133: RDMA/umem: Fix truncation for block sizes >= 4G (bsc#1269821).
- CVE-2026-53178: staging: rtl8723bs: rtw_mlme: add bounds checks before ie_length subtraction (bsc#1269795).
- CVE-2026-53182: wifi: nl80211: reject oversized EMA RNR lists (bsc#1269884).
- CVE-2026-53196: USB: serial: io_ti: fix heap overflow in get_manuf_info() (bsc#1269986).
- CVE-2026-53253: Bluetooth: bnep: fix incorrect length parsing in bnep_rx_frame() extension handling (bsc#1269574).
- CVE-2026-53256: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (bsc#1269993).
- CVE-2026-53357: Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (bsc#1270257).
- CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270059).
- CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269493).
- CVE-2026-53366: ipv4: account for fraggap on the paged allocation path (bsc#1271366).
The following non security…
- Record
SUSE-SU-2026:3156-1- Updated
- 2026-11-02
OSVUSN-8566-1 No score
linux, linux-gcp, linux-gke, linux-realtime vulnerabilities
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- PSP security protocol;
- ARM64 architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Intel NPU Driver;
- DRBD Distributed Replicated Block Device drivers;
- Ublk userspace block driver;
- Bluetooth drivers;
- Bus devices;
- Character device driver;
- Clock framework and drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- EDAC drivers;
- EFI core;
- FWCTL subsystem;
- GPU drivers;
- HID subsystem;
- I3C subsystem;
- InfiniBand drivers;
- IOMMU subsystem;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- NVIDIA Tegra memory controller driver;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- STMicroelectronics network drivers;
- MediaTek network drivers;
- NVME drivers;
- PCI subsystem;
- Pin controllers subsystem;
- Chrome hardware platform drivers;
- ACPI WMI driver;
- x86 platform drivers;
- Generic PM domains;
- MediaTek PM domains;
- Power supply drivers;
- MPAM driver;
- Amlogic Meson reset controller drivers;
- S/390 drivers;
- SCSI subsystem;
- NVIDIA Tegra Control Backbone (CBB) driver;
- SPI subsystem;
- Greybus lights staging drivers;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- TCM subsystem;
- TTY drivers;
- USB Device Class drivers;
- ULPI bus;
- USB Type-C support driver;
- TI TPS6598x USB Power Delivery controller driver;
- vDPA drivers;
- VFIO drivers;
- Framebuffer layer;
- TSM AMD SEV Guest driver;
- Xen hypervisor drivers;
- File systems infrastructure;
- BTRFS file system;
- Ceph distributed file system;
- EROFS file system;
- F2FS file system;
- FUSE (File system in Userspace);
- GFS2 file system;
- HFS+ file system;
- HugeTLB file system;
- Network file system (NFS) server daemon;
- NILFS2 file system;
- File system notification infrastructure;
- NTFS3 file system;
- OCFS2 file system;
- Overlay file system;
- Diskquota system;
- SMB network file system;
- Tracing file system;
- DRM TTM subsystem;
- Control group (cgroup);
- Kernel CPU control infrastructure;
- QorIQ DPAA2 FSL-MC bus driver;
- Freescale ENETC Ethernet drivers;
- Memory Management;
- padata parallel execution mechanism;
- PPP protocol drivers and compressors;
- Bluetooth subsystem;
- Networking core;
- Netfilter;
- Network traffic control;
- io_uring subsystem;
- IPC subsystem;
- Audit subsystem;
- BPF subsystem;
- Kernel exit() syscall;
- Kernel fork() syscall;
- Kernel futex primitives;
- Padata parallel execution mechanism;
- Scheduler infrastructure;
- Tracing infrastructure;
- Cryptographic library;
- Memory management;
- 802.1Q VLAN protocol;
- B.A.T.M.A.N. meshing protocol;
- Ethernet bridge;
- Ceph Core library;
- Distributed Switch Architecture;
- IPv4 networking;
- IPv6 networking;
- MAC80211 subsystem;
- Multipath TCP;
- Open vSwitch;
- Phonet protocol;
- RDS protocol;
- SCTP protocol;
- SMC sockets;
- TIPC protocol;
- TLS protocol;
- Unix domain sockets;
- VMware vSockets driver;
- XFRM subsystem;
- Integrity Measurement Architecture(IMA) framework;
- SELinux security module;
- ALSA framework;
- HD-audio driver;
- QCOM ASoC drivers; -…
- Record
USN-8566-1- Updated
- 2026-11-07
OSVUSN-8567-1 No score
linux, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-realtime, linux-realtime-6.8 vulnerabilities
It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)
It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Compute Acceleration Framework;
- ACPI drivers;
- Serial ATA and Parallel ATA drivers;
- Drivers core;
- Power management core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Bus devices;
- Character device driver;
- Clock framework and drivers;
- Data acquisition framework and drivers;
- Counter interface drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- CXL (Compute Express Link) drivers;
- DMA engine subsystem;
- EDAC drivers;
- EFI core;
- GPU drivers;
- Greybus drivers;
- HID subsystem;
- Hardware monitoring drivers;
- I2C subsystem;
- IIO ADC drivers;
- IIO subsystem;
- InfiniBand drivers;
- Input Device (Miscellaneous) drivers;
- IRQ chip drivers;
- LED subsystem;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- MediaTek SMI driver;
- NVIDIA Tegra memory controller driver;
- Fastrpc Driver;
- IBM Advanced System Management driver;
- MMC subsystem;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- STMicroelectronics network drivers;
- Ethernet team driver;
- MediaTek network drivers;
- Near Field Communication (NFC) drivers;
- NTB driver;
- NVDIMM (Non-Volatile Memory Device) drivers;
- NVME drivers;
- Device tree and open firmware driver;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- Broadcom BCM2835 power domain driver;
- Generic PM domains;
- i.MX PM domains;
- Remote Processor subsystem;
- S/390 drivers;
- SCSI subsystem;
- SLIMbus drivers;
- Freescale SoC drivers;
- Microchip PolarFire SoC system controller driver;
- SPI subsystem;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- SM750 framebuffer staging driver;
- TCM subsystem;
- Thermal drivers;
- TTY drivers;
- UFS subsystem;
- Cadence USB3 driver;
- USB Device Class drivers;
- ULPI bus;
- USB core drivers;
- DesignWare USB2 driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- Mustek MDC800 USB digital camera driver;
- USB YUREX driver;
- Renesas USBHS Controller drivers;
- USB Type-C Connector System Software Interface driver;
- VFIO drivers;
- Framebuffer layer;
- TSM TDX Guest driver;
- Xen hypervisor drivers;
- File systems infrastructure;
- BTRFS file system;
- Ceph distributed file system;
- EROFS file system;
- Ext4 file system;
- F2FS file system;
- FUSE (File system in Userspace);
- GFS2 file system;
- HFS+ file system;
- Journaling layer for block devices (JBD2);
- Network file systems library;
- Network…
- Record
USN-8567-1- Updated
- 2026-11-07
OSVUSN-8568-1 No score
linux-oem-7.0 vulnerabilities
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- PSP security protocol;
- ARM64 architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Intel NPU Driver;
- DRBD Distributed Replicated Block Device drivers;
- Ublk userspace block driver;
- Bluetooth drivers;
- Bus devices;
- Character device driver;
- Clock framework and drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- EDAC drivers;
- EFI core;
- FWCTL subsystem;
- GPU drivers;
- HID subsystem;
- I3C subsystem;
- InfiniBand drivers;
- IOMMU subsystem;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- NVIDIA Tegra memory controller driver;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- STMicroelectronics network drivers;
- MediaTek network drivers;
- NVME drivers;
- PCI subsystem;
- Pin controllers subsystem;
- Chrome hardware platform drivers;
- ACPI WMI driver;
- x86 platform drivers;
- Generic PM domains;
- MediaTek PM domains;
- Power supply drivers;
- MPAM driver;
- Amlogic Meson reset controller drivers;
- S/390 drivers;
- SCSI subsystem;
- NVIDIA Tegra Control Backbone (CBB) driver;
- SPI subsystem;
- Greybus lights staging drivers;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- TCM subsystem;
- TTY drivers;
- USB Device Class drivers;
- ULPI bus;
- USB Type-C support driver;
- TI TPS6598x USB Power Delivery controller driver;
- vDPA drivers;
- VFIO drivers;
- Framebuffer layer;
- TSM AMD SEV Guest driver;
- Xen hypervisor drivers;
- File systems infrastructure;
- BTRFS file system;
- Ceph distributed file system;
- EROFS file system;
- F2FS file system;
- FUSE (File system in Userspace);
- GFS2 file system;
- HFS+ file system;
- HugeTLB file system;
- Network file system (NFS) server daemon;
- NILFS2 file system;
- File system notification infrastructure;
- NTFS3 file system;
- OCFS2 file system;
- Diskquota system;
- SMB network file system;
- Tracing file system;
- DRM TTM subsystem;
- Control group (cgroup);
- Kernel CPU control infrastructure;
- QorIQ DPAA2 FSL-MC bus driver;
- Freescale ENETC Ethernet drivers;
- Memory Management;
- padata parallel execution mechanism;
- PPP protocol drivers and compressors;
- Bluetooth subsystem;
- Networking core;
- Netfilter;
- Network traffic control;
- io_uring subsystem;
- IPC subsystem;
- Audit subsystem;
- BPF subsystem;
- Kernel exit() syscall;
- Kernel fork() syscall;
- Kernel futex primitives;
- Padata parallel execution mechanism;
- Scheduler infrastructure;
- Tracing infrastructure;
- Cryptographic library;
- Memory management;
- 802.1Q VLAN protocol;
- B.A.T.M.A.N. meshing protocol;
- Ethernet bridge;
- Ceph Core library;
- Distributed Switch Architecture;
- IPv4 networking;
- IPv6 networking;
- MAC80211 subsystem;
- Multipath TCP;
- Open vSwitch;
- Phonet protocol;
- RDS protocol;
- SCTP protocol;
- SMC sockets;
- TIPC protocol;
- TLS protocol;
- Unix domain sockets;
- VMware vSockets driver;
- XFRM subsystem;
- Integrity Measurement Architecture(IMA) framework;
- SELinux security module;
- ALSA framework;
- HD-audio driver;
- QCOM ASoC drivers;
- SOF drivers;
- STI ASoC…
- Record
USN-8568-1- Updated
- 2026-11-07
OSVUSN-8569-1 No score
linux-hwe-7.0 vulnerabilities
It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)
It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43284, CVE-2026-43500, CVE-2026-45998, CVE-2026-46000)
It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43503, CVE-2026-46300)
Qualys discovered that a race condition existed in the ptrace subsystem of the Linux kernel when privileged processes are exiting. An unprivileged local attacker could use this issue to expose sensitive information. (CVE-2026-46333)
Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contain a memory leak when handling AppArmor notifications. A local attacker could use this to cause resource exhaustion. (CVE-2026-47326)
Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contain a NULL pointer dereference when handling AppArmor notifications. A local attacker could use this to cause a kernel oops. (CVE-2026-47327)
Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained an invalid free when handling AppArmor notifications. A local attacker could use this to corrupt kernel memory. (CVE-2026-47328)
Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained insufficient validation of AppArmor notification responses. A local attacker could use this to allow crafted responses to be processed. (CVE-2026-47329)
Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 used an uninitialized variable when handling AppArmor notifications. A local attacker could use this to cause incorrect caching of data. (CVE-2026-47330)
Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained an out-of-bounds (OOB) read when handling AppArmor notifications. A local attacker could use this to cause information disclosure of kernel memory. (CVE-2026-47332)
Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained a out-of-bounds (OOB) read when handling AppArmor notifications. A local attacker could use this to cause kernel memory corruption and, theoretically, influence processing of AppArmor policies. (CVE-2026-47333)
Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained incorrect holding of locks when handling AppArmor notifications. A local attacker could use this to cause a kernel panic or deadlock. (CVE-2026-47334)
Tristan Madani and Trevor Lawrence have each independently discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained a NULL pointer dereference when handling AppArmor network socket mediation. A local attacker could use this to cause a kernel oops. (CVE-2026-47337)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- PSP security protocol;
- ARM64 architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Intel…
- Record
USN-8569-1- Updated
- 2026-11-07
OSVUSN-8574-1 No score
linux-gcp-fips vulnerabilities
It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)
It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Compute Acceleration Framework;
- ACPI drivers;
- Serial ATA and Parallel ATA drivers;
- Drivers core;
- Power management core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Bus devices;
- Character device driver;
- Clock framework and drivers;
- Data acquisition framework and drivers;
- Counter interface drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- CXL (Compute Express Link) drivers;
- DMA engine subsystem;
- EDAC drivers;
- EFI core;
- GPU drivers;
- Greybus drivers;
- HID subsystem;
- Hardware monitoring drivers;
- I2C subsystem;
- IIO ADC drivers;
- IIO subsystem;
- InfiniBand drivers;
- Input Device (Miscellaneous) drivers;
- IRQ chip drivers;
- LED subsystem;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- MediaTek SMI driver;
- NVIDIA Tegra memory controller driver;
- Fastrpc Driver;
- IBM Advanced System Management driver;
- MMC subsystem;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- STMicroelectronics network drivers;
- Ethernet team driver;
- MediaTek network drivers;
- Near Field Communication (NFC) drivers;
- NTB driver;
- NVDIMM (Non-Volatile Memory Device) drivers;
- NVME drivers;
- Device tree and open firmware driver;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- Broadcom BCM2835 power domain driver;
- Generic PM domains;
- i.MX PM domains;
- Remote Processor subsystem;
- S/390 drivers;
- SCSI subsystem;
- SLIMbus drivers;
- Freescale SoC drivers;
- Microchip PolarFire SoC system controller driver;
- SPI subsystem;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- SM750 framebuffer staging driver;
- TCM subsystem;
- Thermal drivers;
- TTY drivers;
- UFS subsystem;
- Cadence USB3 driver;
- USB Device Class drivers;
- ULPI bus;
- USB core drivers;
- DesignWare USB2 driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- Mustek MDC800 USB digital camera driver;
- USB YUREX driver;
- Renesas USBHS Controller drivers;
- USB Type-C Connector System Software Interface driver;
- VFIO drivers;
- Framebuffer layer;
- TSM TDX Guest driver;
- Xen hypervisor drivers;
- File systems infrastructure;
- BTRFS file system;
- Ceph distributed file system;
- EROFS file system;
- Ext4 file system;
- F2FS file system;
- FUSE (File system in Userspace);
- GFS2 file system;
- HFS+ file system;
- Journaling layer for block devices (JBD2);
- Network file systems library;
- Network…
- Record
USN-8574-1- Updated
- 2026-11-07
OSVUSN-8574-2 No score
linux-fips, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle vulnerabilities
It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)
It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Compute Acceleration Framework;
- ACPI drivers;
- Serial ATA and Parallel ATA drivers;
- Drivers core;
- Power management core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Bus devices;
- Character device driver;
- Clock framework and drivers;
- Data acquisition framework and drivers;
- Counter interface drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- CXL (Compute Express Link) drivers;
- DMA engine subsystem;
- EDAC drivers;
- EFI core;
- GPU drivers;
- Greybus drivers;
- HID subsystem;
- Hardware monitoring drivers;
- I2C subsystem;
- IIO ADC drivers;
- IIO subsystem;
- InfiniBand drivers;
- Input Device (Miscellaneous) drivers;
- IRQ chip drivers;
- LED subsystem;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- MediaTek SMI driver;
- NVIDIA Tegra memory controller driver;
- Fastrpc Driver;
- IBM Advanced System Management driver;
- MMC subsystem;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- STMicroelectronics network drivers;
- Ethernet team driver;
- MediaTek network drivers;
- Near Field Communication (NFC) drivers;
- NTB driver;
- NVDIMM (Non-Volatile Memory Device) drivers;
- NVME drivers;
- Device tree and open firmware driver;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- Broadcom BCM2835 power domain driver;
- Generic PM domains;
- i.MX PM domains;
- Remote Processor subsystem;
- S/390 drivers;
- SCSI subsystem;
- SLIMbus drivers;
- Freescale SoC drivers;
- Microchip PolarFire SoC system controller driver;
- SPI subsystem;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- SM750 framebuffer staging driver;
- TCM subsystem;
- Thermal drivers;
- TTY drivers;
- UFS subsystem;
- Cadence USB3 driver;
- USB Device Class drivers;
- ULPI bus;
- USB core drivers;
- DesignWare USB2 driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- Mustek MDC800 USB digital camera driver;
- USB YUREX driver;
- Renesas USBHS Controller drivers;
- USB Type-C Connector System Software Interface driver;
- VFIO drivers;
- Framebuffer layer;
- TSM TDX Guest driver;
- Xen hypervisor drivers;
- File systems infrastructure;
- BTRFS file system;
- Ceph distributed file system;
- EROFS file system;
- Ext4 file system;
- F2FS file system;
- FUSE (File system in Userspace);
- GFS2 file system;
- HFS+ file system;
- Journaling layer for block devices (JBD2);
- Network file systems library;
- Network…
- Record
USN-8574-2- Updated
- 2026-11-07
OSVUSN-8574-3 No score
linux-ibm, linux-ibm-6.8, linux-nvidia-tegra, linux-xilinx vulnerabilities
It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)
It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Compute Acceleration Framework;
- ACPI drivers;
- Serial ATA and Parallel ATA drivers;
- Drivers core;
- Power management core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Bus devices;
- Character device driver;
- Clock framework and drivers;
- Data acquisition framework and drivers;
- Counter interface drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- CXL (Compute Express Link) drivers;
- DMA engine subsystem;
- EDAC drivers;
- EFI core;
- GPU drivers;
- Greybus drivers;
- HID subsystem;
- Hardware monitoring drivers;
- I2C subsystem;
- IIO ADC drivers;
- IIO subsystem;
- InfiniBand drivers;
- Input Device (Miscellaneous) drivers;
- IRQ chip drivers;
- LED subsystem;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- MediaTek SMI driver;
- NVIDIA Tegra memory controller driver;
- Fastrpc Driver;
- IBM Advanced System Management driver;
- MMC subsystem;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- STMicroelectronics network drivers;
- Ethernet team driver;
- MediaTek network drivers;
- Near Field Communication (NFC) drivers;
- NTB driver;
- NVDIMM (Non-Volatile Memory Device) drivers;
- NVME drivers;
- Device tree and open firmware driver;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- Broadcom BCM2835 power domain driver;
- Generic PM domains;
- i.MX PM domains;
- Remote Processor subsystem;
- S/390 drivers;
- SCSI subsystem;
- SLIMbus drivers;
- Freescale SoC drivers;
- Microchip PolarFire SoC system controller driver;
- SPI subsystem;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- SM750 framebuffer staging driver;
- TCM subsystem;
- Thermal drivers;
- TTY drivers;
- UFS subsystem;
- Cadence USB3 driver;
- USB Device Class drivers;
- ULPI bus;
- USB core drivers;
- DesignWare USB2 driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- Mustek MDC800 USB digital camera driver;
- USB YUREX driver;
- Renesas USBHS Controller drivers;
- USB Type-C Connector System Software Interface driver;
- VFIO drivers;
- Framebuffer layer;
- TSM TDX Guest driver;
- Xen hypervisor drivers;
- File systems infrastructure;
- BTRFS file system;
- Ceph distributed file system;
- EROFS file system;
- Ext4 file system;
- F2FS file system;
- FUSE (File system in Userspace);
- GFS2 file system;
- HFS+ file system;
- Journaling layer for block devices (JBD2);
- Network file systems library;
- Network…
- Record
USN-8574-3- Updated
- 2026-11-07
OSVUSN-8575-1 No score
linux, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-realtime, linux-xilinx-zynqmp vulnerabilities
Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose sensitive information (kernel memory). (CVE-2023-45896)
It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM32 architecture;
- ARM64 architecture;
- MIPS architecture;
- PowerPC architecture;
- S390 architecture;
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- ACPI drivers;
- ATM drivers;
- Drivers core;
- Power management core;
- DRBD Distributed Replicated Block Device drivers;
- RNBD block device driver;
- Bluetooth drivers;
- Bus devices;
- Character device driver;
- TPM device driver;
- Clocksource drivers;
- Data acquisition framework and drivers;
- CPU frequency scaling framework;
- CPU idle management framework;
- Hardware crypto device drivers;
- DMA engine subsystem;
- Arm Firmware Framework for ARMv8-A(FFA);
- EFI core;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- Hardware monitoring drivers;
- I2C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- InfiniBand drivers;
- Input Device (Miscellaneous) drivers;
- IOMMU subsystem;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- MediaTek SMI driver;
- NVIDIA Tegra memory controller driver;
- Multifunction device drivers;
- IBM Advanced System Management driver;
- MMC subsystem;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- STMicroelectronics network drivers;
- MediaTek network drivers;
- Near Field Communication (NFC) drivers;
- NTB driver;
- NVDIMM (Non-Volatile Memory Device) drivers;
- NVME drivers;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- Broadcom BCM2835 power domain driver;
- Power supply drivers;
- RapidIO drivers;
- Remote Processor subsystem;
- RPMSG subsystem;
- SCSI subsystem;
- Freescale SoC drivers;
- Texas Instruments SoC drivers;
- SPI subsystem;
- Greybus lights staging drivers;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- SM750 framebuffer staging driver;
- TCM subsystem;
- TTY drivers;
- UFS subsystem;
- Cadence USB3 driver;
- USB Device Class drivers;
- ULPI bus;
- USB core drivers;
- DesignWare USB2 driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- Mustek MDC800 USB digital camera driver;
- USB YUREX driver;
- Renesas USBHS Controller drivers;
- Framebuffer layer;
- Xen hypervisor drivers;
- File systems infrastructure;
- BTRFS file system;
- Ceph distributed file system;
- EROFS file system;
- Ext4 file system;
- F2FS file system;
- FAT file system;
- FUSE (File system in Userspace);
- GFS2 file system;
- HFS+ file system;
- JFS file system;
- Network file system (NFS) server daemon;
- NILFS2 file system;
- File system notification infrastructure;
- NTFS3 file system;
- OCFS2 file system;
- Proc file system;
- Pstore file system;
- Diskquota system;
- SMB network file system;
- SquashFS file system;
- UDF file system; -…
- Record
USN-8575-1- Updated
- 2026-11-07
OSVUSN-8575-2 No score
linux-aws, linux-aws-5.15, linux-aws-fips, linux-fips, linux-ibm, linux-nvidia vulnerabilities
Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose sensitive information (kernel memory). (CVE-2023-45896)
It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM32 architecture;
- ARM64 architecture;
- MIPS architecture;
- PowerPC architecture;
- S390 architecture;
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- ACPI drivers;
- ATM drivers;
- Drivers core;
- Power management core;
- DRBD Distributed Replicated Block Device drivers;
- RNBD block device driver;
- Bluetooth drivers;
- Bus devices;
- Character device driver;
- TPM device driver;
- Clocksource drivers;
- Data acquisition framework and drivers;
- CPU frequency scaling framework;
- CPU idle management framework;
- Hardware crypto device drivers;
- DMA engine subsystem;
- Arm Firmware Framework for ARMv8-A(FFA);
- EFI core;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- Hardware monitoring drivers;
- I2C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- InfiniBand drivers;
- Input Device (Miscellaneous) drivers;
- IOMMU subsystem;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- MediaTek SMI driver;
- NVIDIA Tegra memory controller driver;
- Multifunction device drivers;
- IBM Advanced System Management driver;
- MMC subsystem;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- STMicroelectronics network drivers;
- MediaTek network drivers;
- Near Field Communication (NFC) drivers;
- NTB driver;
- NVDIMM (Non-Volatile Memory Device) drivers;
- NVME drivers;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- Broadcom BCM2835 power domain driver;
- Power supply drivers;
- RapidIO drivers;
- Remote Processor subsystem;
- RPMSG subsystem;
- SCSI subsystem;
- Freescale SoC drivers;
- Texas Instruments SoC drivers;
- SPI subsystem;
- Greybus lights staging drivers;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- SM750 framebuffer staging driver;
- TCM subsystem;
- TTY drivers;
- UFS subsystem;
- Cadence USB3 driver;
- USB Device Class drivers;
- ULPI bus;
- USB core drivers;
- DesignWare USB2 driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- Mustek MDC800 USB digital camera driver;
- USB YUREX driver;
- Renesas USBHS Controller drivers;
- Framebuffer layer;
- Xen hypervisor drivers;
- File systems infrastructure;
- BTRFS file system;
- Ceph distributed file system;
- EROFS file system;
- Ext4 file system;
- F2FS file system;
- FAT file system;
- FUSE (File system in Userspace);
- GFS2 file system;
- HFS+ file system;
- JFS file system;
- Network file system (NFS) server daemon;
- NILFS2 file system;
- File system notification infrastructure;
- NTFS3 file system;
- OCFS2 file system;
- Proc file system;
- Pstore file system;
- Diskquota system;
- SMB network file system;
- SquashFS file system;
- UDF file system; -…
- Record
USN-8575-2- Updated
- 2026-11-07
OSVUSN-8575-3 No score
linux-azure, linux-oracle vulnerabilities
Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose sensitive information (kernel memory). (CVE-2023-45896)
It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM32 architecture;
- ARM64 architecture;
- MIPS architecture;
- PowerPC architecture;
- S390 architecture;
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- ACPI drivers;
- ATM drivers;
- Drivers core;
- Power management core;
- DRBD Distributed Replicated Block Device drivers;
- RNBD block device driver;
- Bluetooth drivers;
- Bus devices;
- Character device driver;
- TPM device driver;
- Clocksource drivers;
- Data acquisition framework and drivers;
- CPU frequency scaling framework;
- CPU idle management framework;
- Hardware crypto device drivers;
- DMA engine subsystem;
- Arm Firmware Framework for ARMv8-A(FFA);
- EFI core;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- Hardware monitoring drivers;
- I2C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- InfiniBand drivers;
- Input Device (Miscellaneous) drivers;
- IOMMU subsystem;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- MediaTek SMI driver;
- NVIDIA Tegra memory controller driver;
- Multifunction device drivers;
- IBM Advanced System Management driver;
- MMC subsystem;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- STMicroelectronics network drivers;
- MediaTek network drivers;
- Near Field Communication (NFC) drivers;
- NTB driver;
- NVDIMM (Non-Volatile Memory Device) drivers;
- NVME drivers;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- Broadcom BCM2835 power domain driver;
- Power supply drivers;
- RapidIO drivers;
- Remote Processor subsystem;
- RPMSG subsystem;
- SCSI subsystem;
- Freescale SoC drivers;
- Texas Instruments SoC drivers;
- SPI subsystem;
- Greybus lights staging drivers;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- SM750 framebuffer staging driver;
- TCM subsystem;
- TTY drivers;
- UFS subsystem;
- Cadence USB3 driver;
- USB Device Class drivers;
- ULPI bus;
- USB core drivers;
- DesignWare USB2 driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- Mustek MDC800 USB digital camera driver;
- USB YUREX driver;
- Renesas USBHS Controller drivers;
- Framebuffer layer;
- Xen hypervisor drivers;
- File systems infrastructure;
- BTRFS file system;
- Ceph distributed file system;
- EROFS file system;
- Ext4 file system;
- F2FS file system;
- FAT file system;
- FUSE (File system in Userspace);
- GFS2 file system;
- HFS+ file system;
- JFS file system;
- Network file system (NFS) server daemon;
- NILFS2 file system;
- File system notification infrastructure;
- NTFS3 file system;
- OCFS2 file system;
- Proc file system;
- Pstore file system;
- Diskquota system;
- SMB network file system;
- SquashFS file system;
- UDF file system; -…
- Record
USN-8575-3- Updated
- 2026-11-07
OSVUSN-8576-1 No score
linux-nvidia-tegra-5.15 vulnerabilities
Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose sensitive information (kernel memory). (CVE-2023-45896)
It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM32 architecture;
- ARM64 architecture;
- MIPS architecture;
- PowerPC architecture;
- S390 architecture;
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- ACPI drivers;
- ATM drivers;
- Drivers core;
- Power management core;
- DRBD Distributed Replicated Block Device drivers;
- RNBD block device driver;
- Bluetooth drivers;
- Bus devices;
- Character device driver;
- TPM device driver;
- Clocksource drivers;
- Data acquisition framework and drivers;
- CPU frequency scaling framework;
- CPU idle management framework;
- Hardware crypto device drivers;
- DMA engine subsystem;
- Arm Firmware Framework for ARMv8-A(FFA);
- EFI core;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- Hardware monitoring drivers;
- I2C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- InfiniBand drivers;
- Input Device (Miscellaneous) drivers;
- IOMMU subsystem;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- MediaTek SMI driver;
- NVIDIA Tegra memory controller driver;
- Multifunction device drivers;
- IBM Advanced System Management driver;
- MMC subsystem;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- STMicroelectronics network drivers;
- MediaTek network drivers;
- Near Field Communication (NFC) drivers;
- NTB driver;
- NVDIMM (Non-Volatile Memory Device) drivers;
- NVME drivers;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- Broadcom BCM2835 power domain driver;
- Power supply drivers;
- RapidIO drivers;
- Remote Processor subsystem;
- RPMSG subsystem;
- SCSI subsystem;
- Freescale SoC drivers;
- Texas Instruments SoC drivers;
- SPI subsystem;
- Greybus lights staging drivers;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- SM750 framebuffer staging driver;
- TCM subsystem;
- TTY drivers;
- UFS subsystem;
- Cadence USB3 driver;
- USB Device Class drivers;
- ULPI bus;
- USB core drivers;
- DesignWare USB2 driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- Mustek MDC800 USB digital camera driver;
- USB YUREX driver;
- Renesas USBHS Controller drivers;
- Framebuffer layer;
- Xen hypervisor drivers;
- File systems infrastructure;
- BTRFS file system;
- Ceph distributed file system;
- EROFS file system;
- Ext4 file system;
- F2FS file system;
- FAT file system;
- FUSE (File system in Userspace);
- GFS2 file system;
- HFS+ file system;
- JFS file system;
- Network file system (NFS) server daemon;
- NILFS2 file system;
- File system notification infrastructure;
- NTFS3 file system;
- OCFS2 file system;
- Proc file system;
- Pstore file system;
- Diskquota system;
- SMB network file system;
- SquashFS file system;
- UDF file system; -…
- Record
USN-8576-1- Updated
- 2026-11-07
OSVUSN-8576-2 No score
linux-nvidia-tegra, linux-nvidia-tegra-igx vulnerabilities
Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose sensitive information (kernel memory). (CVE-2023-45896)
It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM32 architecture;
- ARM64 architecture;
- MIPS architecture;
- PowerPC architecture;
- S390 architecture;
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- ACPI drivers;
- ATM drivers;
- Drivers core;
- Power management core;
- DRBD Distributed Replicated Block Device drivers;
- RNBD block device driver;
- Bluetooth drivers;
- Bus devices;
- Character device driver;
- TPM device driver;
- Clocksource drivers;
- Data acquisition framework and drivers;
- CPU frequency scaling framework;
- CPU idle management framework;
- Hardware crypto device drivers;
- DMA engine subsystem;
- Arm Firmware Framework for ARMv8-A(FFA);
- EFI core;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- Hardware monitoring drivers;
- I2C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- InfiniBand drivers;
- Input Device (Miscellaneous) drivers;
- IOMMU subsystem;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- MediaTek SMI driver;
- NVIDIA Tegra memory controller driver;
- Multifunction device drivers;
- IBM Advanced System Management driver;
- MMC subsystem;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- STMicroelectronics network drivers;
- MediaTek network drivers;
- Near Field Communication (NFC) drivers;
- NTB driver;
- NVDIMM (Non-Volatile Memory Device) drivers;
- NVME drivers;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- Broadcom BCM2835 power domain driver;
- Power supply drivers;
- RapidIO drivers;
- Remote Processor subsystem;
- RPMSG subsystem;
- SCSI subsystem;
- Freescale SoC drivers;
- Texas Instruments SoC drivers;
- SPI subsystem;
- Greybus lights staging drivers;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- SM750 framebuffer staging driver;
- TCM subsystem;
- TTY drivers;
- UFS subsystem;
- Cadence USB3 driver;
- USB Device Class drivers;
- ULPI bus;
- USB core drivers;
- DesignWare USB2 driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- Mustek MDC800 USB digital camera driver;
- USB YUREX driver;
- Renesas USBHS Controller drivers;
- Framebuffer layer;
- Xen hypervisor drivers;
- File systems infrastructure;
- BTRFS file system;
- Ceph distributed file system;
- EROFS file system;
- Ext4 file system;
- F2FS file system;
- FAT file system;
- FUSE (File system in Userspace);
- GFS2 file system;
- HFS+ file system;
- JFS file system;
- Network file system (NFS) server daemon;
- NILFS2 file system;
- File system notification infrastructure;
- NTFS3 file system;
- OCFS2 file system;
- Proc file system;
- Pstore file system;
- Diskquota system;
- SMB network file system;
- SquashFS file system;
- UDF file system; -…
- Record
USN-8576-2- Updated
- 2026-11-07
OSVUSN-8593-1 No score
linux-ibm, linux-oracle vulnerabilities
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- x86 platform drivers;
- PSP security protocol;
- ARM32 architecture;
- ARM64 architecture;
- MIPS architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Intel NPU Driver;
- Compute Acceleration Framework;
- ACPI drivers;
- Auxiliary display drivers;
- Drivers core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Ublk userspace block driver;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Bus devices;
- Character device driver;
- Clock framework and drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- Buffer Sharing and Synchronization framework;
- DPLL subsystem;
- EDAC drivers;
- Arm Firmware Framework for ARMv8-A(FFA);
- EFI core;
- FWCTL subsystem;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- Hardware monitoring drivers;
- I2C subsystem;
- I3C subsystem;
- IIO ADC drivers;
- IIO subsystem;
- InfiniBand drivers;
- Input Device core drivers;
- IOMMU subsystem;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- NVIDIA Tegra memory controller driver;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- STMicroelectronics network drivers;
- Texas Instruments network drivers;
- MediaTek network drivers;
- NVME drivers;
- Parport drivers;
- PCI subsystem;
- Pin controllers subsystem;
- Chrome hardware platform drivers;
- ACPI WMI driver;
- Generic PM domains;
- MediaTek PM domains;
- Power supply drivers;
- MPAM driver;
- Amlogic Meson reset controller drivers;
- S/390 drivers;
- SCSI subsystem;
- NVIDIA Tegra Control Backbone (CBB) driver;
- SPI subsystem;
- Greybus lights staging drivers;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- TCM subsystem;
- Thunderbolt and USB4 drivers;
- TTY drivers;
- Userspace I/O drivers;
- USB Device Class drivers;
- ULPI bus;
- DesignWare USB2 driver;
- USB Gadget drivers;
- USB Dual Role (OTG-ready) Controller drivers;
- USB Serial drivers;
- USB Type-C support driver;
- USB Type-C Port Controller Manager driver;
- TI TPS6598x USB Power Delivery controller driver;
- USB Type-C Connector System Software Interface driver;
- USB over IP driver;
- vDPA drivers;
- VFIO drivers;
- Framebuffer layer;
- TSM AMD SEV Guest driver;
- Xen hypervisor drivers;
- 9P distributed file system;
- File systems infrastructure;
- AFS file system;
- BTRFS file system;
- Ceph distributed file system;
- EROFS file system;
- F2FS file system;
- FUSE (File system in Userspace);
- GFS2 file system;
- HFS+ file system;
- HugeTLB file system;
- Network file systems library;
- Network file system (NFS) server daemon;
- NILFS2 file system;
- File system notification infrastructure;
- NTFS3 file system;
- OCFS2 file system;
- Overlay file system;
- Diskquota system;
- SMB network file system;
- Tracing file system;
- UDF file system;
- DRM TTM subsystem;
- Control group (cgroup);
- Kernel CPU control infrastructure;
- Tracing infrastructure;
- QorIQ DPAA2 FSL-MC bus driver;
- Freescale ENETC Ethernet drivers;
- Memory management;
- Memory Management;
- Linked list library;
- Netfilter;
- padata…
- Record
USN-8593-1- Updated
- 2026-11-07
OSVUSN-8595-1 No score
linux-oracle-6.8 vulnerabilities
It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)
It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Compute Acceleration Framework;
- ACPI drivers;
- Serial ATA and Parallel ATA drivers;
- Drivers core;
- Power management core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Bus devices;
- Character device driver;
- Clock framework and drivers;
- Data acquisition framework and drivers;
- Counter interface drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- CXL (Compute Express Link) drivers;
- DMA engine subsystem;
- EDAC drivers;
- EFI core;
- GPU drivers;
- Greybus drivers;
- HID subsystem;
- Hardware monitoring drivers;
- I2C subsystem;
- IIO ADC drivers;
- IIO subsystem;
- InfiniBand drivers;
- Input Device (Miscellaneous) drivers;
- IRQ chip drivers;
- LED subsystem;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- MediaTek SMI driver;
- NVIDIA Tegra memory controller driver;
- Fastrpc Driver;
- IBM Advanced System Management driver;
- MMC subsystem;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- STMicroelectronics network drivers;
- Ethernet team driver;
- MediaTek network drivers;
- Near Field Communication (NFC) drivers;
- NTB driver;
- NVDIMM (Non-Volatile Memory Device) drivers;
- NVME drivers;
- Device tree and open firmware driver;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- Broadcom BCM2835 power domain driver;
- Generic PM domains;
- i.MX PM domains;
- Remote Processor subsystem;
- S/390 drivers;
- SCSI subsystem;
- SLIMbus drivers;
- Freescale SoC drivers;
- Microchip PolarFire SoC system controller driver;
- SPI subsystem;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- SM750 framebuffer staging driver;
- TCM subsystem;
- Thermal drivers;
- TTY drivers;
- UFS subsystem;
- Cadence USB3 driver;
- USB Device Class drivers;
- ULPI bus;
- USB core drivers;
- DesignWare USB2 driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- Mustek MDC800 USB digital camera driver;
- USB YUREX driver;
- Renesas USBHS Controller drivers;
- USB Type-C Connector System Software Interface driver;
- VFIO drivers;
- Framebuffer layer;
- TSM TDX Guest driver;
- Xen hypervisor drivers;
- File systems infrastructure;
- BTRFS file system;
- Ceph distributed file system;
- EROFS file system;
- Ext4 file system;
- F2FS file system;
- FUSE (File system in Userspace);
- GFS2 file system;
- HFS+ file system;
- Journaling layer for block devices (JBD2);
- Network file systems library;
- Network…
- Record
USN-8595-1- Updated
- 2026-11-07
OSVUSN-8595-2 No score
linux-aws vulnerabilities
It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)
It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Compute Acceleration Framework;
- ACPI drivers;
- Serial ATA and Parallel ATA drivers;
- Drivers core;
- Power management core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Bus devices;
- Character device driver;
- Clock framework and drivers;
- Data acquisition framework and drivers;
- Counter interface drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- CXL (Compute Express Link) drivers;
- DMA engine subsystem;
- EDAC drivers;
- EFI core;
- GPU drivers;
- Greybus drivers;
- HID subsystem;
- Hardware monitoring drivers;
- I2C subsystem;
- IIO ADC drivers;
- IIO subsystem;
- InfiniBand drivers;
- Input Device (Miscellaneous) drivers;
- IRQ chip drivers;
- LED subsystem;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- MediaTek SMI driver;
- NVIDIA Tegra memory controller driver;
- Fastrpc Driver;
- IBM Advanced System Management driver;
- MMC subsystem;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- STMicroelectronics network drivers;
- Ethernet team driver;
- MediaTek network drivers;
- Near Field Communication (NFC) drivers;
- NTB driver;
- NVDIMM (Non-Volatile Memory Device) drivers;
- NVME drivers;
- Device tree and open firmware driver;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- Broadcom BCM2835 power domain driver;
- Generic PM domains;
- i.MX PM domains;
- Remote Processor subsystem;
- S/390 drivers;
- SCSI subsystem;
- SLIMbus drivers;
- Freescale SoC drivers;
- Microchip PolarFire SoC system controller driver;
- SPI subsystem;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- SM750 framebuffer staging driver;
- TCM subsystem;
- Thermal drivers;
- TTY drivers;
- UFS subsystem;
- Cadence USB3 driver;
- USB Device Class drivers;
- ULPI bus;
- USB core drivers;
- DesignWare USB2 driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- Mustek MDC800 USB digital camera driver;
- USB YUREX driver;
- Renesas USBHS Controller drivers;
- USB Type-C Connector System Software Interface driver;
- VFIO drivers;
- Framebuffer layer;
- TSM TDX Guest driver;
- Xen hypervisor drivers;
- File systems infrastructure;
- BTRFS file system;
- Ceph distributed file system;
- EROFS file system;
- Ext4 file system;
- F2FS file system;
- FUSE (File system in Userspace);
- GFS2 file system;
- HFS+ file system;
- Journaling layer for block devices (JBD2);
- Network file systems library;
- Network…
- Record
USN-8595-2- Updated
- 2026-11-07
OSVUSN-8595-3 No score
linux-aws-6.8, linux-aws-fips vulnerabilities
It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)
It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Compute Acceleration Framework;
- ACPI drivers;
- Serial ATA and Parallel ATA drivers;
- Drivers core;
- Power management core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Bus devices;
- Character device driver;
- Clock framework and drivers;
- Data acquisition framework and drivers;
- Counter interface drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- CXL (Compute Express Link) drivers;
- DMA engine subsystem;
- EDAC drivers;
- EFI core;
- GPU drivers;
- Greybus drivers;
- HID subsystem;
- Hardware monitoring drivers;
- I2C subsystem;
- IIO ADC drivers;
- IIO subsystem;
- InfiniBand drivers;
- Input Device (Miscellaneous) drivers;
- IRQ chip drivers;
- LED subsystem;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- MediaTek SMI driver;
- NVIDIA Tegra memory controller driver;
- Fastrpc Driver;
- IBM Advanced System Management driver;
- MMC subsystem;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- STMicroelectronics network drivers;
- Ethernet team driver;
- MediaTek network drivers;
- Near Field Communication (NFC) drivers;
- NTB driver;
- NVDIMM (Non-Volatile Memory Device) drivers;
- NVME drivers;
- Device tree and open firmware driver;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- Broadcom BCM2835 power domain driver;
- Generic PM domains;
- i.MX PM domains;
- Remote Processor subsystem;
- S/390 drivers;
- SCSI subsystem;
- SLIMbus drivers;
- Freescale SoC drivers;
- Microchip PolarFire SoC system controller driver;
- SPI subsystem;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- SM750 framebuffer staging driver;
- TCM subsystem;
- Thermal drivers;
- TTY drivers;
- UFS subsystem;
- Cadence USB3 driver;
- USB Device Class drivers;
- ULPI bus;
- USB core drivers;
- DesignWare USB2 driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- Mustek MDC800 USB digital camera driver;
- USB YUREX driver;
- Renesas USBHS Controller drivers;
- USB Type-C Connector System Software Interface driver;
- VFIO drivers;
- Framebuffer layer;
- TSM TDX Guest driver;
- Xen hypervisor drivers;
- File systems infrastructure;
- BTRFS file system;
- Ceph distributed file system;
- EROFS file system;
- Ext4 file system;
- F2FS file system;
- FUSE (File system in Userspace);
- GFS2 file system;
- HFS+ file system;
- Journaling layer for block devices (JBD2);
- Network file systems library;
- Network…
- Record
USN-8595-3- Updated
- 2026-11-07
OSVUSN-8596-1 No score
linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency vulnerabilities
It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)
It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Compute Acceleration Framework;
- ACPI drivers;
- Serial ATA and Parallel ATA drivers;
- Drivers core;
- Power management core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Bus devices;
- Character device driver;
- Clock framework and drivers;
- Data acquisition framework and drivers;
- Counter interface drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- CXL (Compute Express Link) drivers;
- DMA engine subsystem;
- EDAC drivers;
- EFI core;
- GPU drivers;
- Greybus drivers;
- HID subsystem;
- Hardware monitoring drivers;
- I2C subsystem;
- IIO ADC drivers;
- IIO subsystem;
- InfiniBand drivers;
- Input Device (Miscellaneous) drivers;
- IRQ chip drivers;
- LED subsystem;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- MediaTek SMI driver;
- NVIDIA Tegra memory controller driver;
- Fastrpc Driver;
- IBM Advanced System Management driver;
- MMC subsystem;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- STMicroelectronics network drivers;
- Ethernet team driver;
- MediaTek network drivers;
- Near Field Communication (NFC) drivers;
- NTB driver;
- NVDIMM (Non-Volatile Memory Device) drivers;
- NVME drivers;
- Device tree and open firmware driver;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- Broadcom BCM2835 power domain driver;
- Generic PM domains;
- i.MX PM domains;
- Remote Processor subsystem;
- S/390 drivers;
- SCSI subsystem;
- SLIMbus drivers;
- Freescale SoC drivers;
- Microchip PolarFire SoC system controller driver;
- SPI subsystem;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- SM750 framebuffer staging driver;
- TCM subsystem;
- Thermal drivers;
- TTY drivers;
- UFS subsystem;
- Cadence USB3 driver;
- USB Device Class drivers;
- ULPI bus;
- USB core drivers;
- DesignWare USB2 driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- Mustek MDC800 USB digital camera driver;
- USB YUREX driver;
- Renesas USBHS Controller drivers;
- USB Type-C Connector System Software Interface driver;
- VFIO drivers;
- Framebuffer layer;
- TSM TDX Guest driver;
- Xen hypervisor drivers;
- File systems infrastructure;
- BTRFS file system;
- Ceph distributed file system;
- EROFS file system;
- Ext4 file system;
- F2FS file system;
- FUSE (File system in Userspace);
- GFS2 file system;
- HFS+ file system;
- Journaling layer for block devices (JBD2);
- Network file systems library;
- Network…
- Record
USN-8596-1- Updated
- 2026-11-07
OSVUSN-8603-1 No score
linux-azure, linux-azure-fde vulnerabilities
It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- x86 platform drivers;
- PSP security protocol;
- ARM32 architecture;
- ARM64 architecture;
- MIPS architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Intel NPU Driver;
- Compute Acceleration Framework;
- ACPI drivers;
- Auxiliary display drivers;
- Drivers core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Ublk userspace block driver;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Bus devices;
- Character device driver;
- TPM device driver;
- Clock framework and drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- Buffer Sharing and Synchronization framework;
- DPLL subsystem;
- EDAC drivers;
- Arm Firmware Framework for ARMv8-A(FFA);
- EFI core;
- FWCTL subsystem;
- GPIO subsystem;
- GPU drivers;
- Greybus drivers;
- HID subsystem;
- Microsoft Hyper-V drivers;
- Hardware monitoring drivers;
- I2C subsystem;
- I3C subsystem;
- IIO ADC drivers;
- IIO subsystem;
- InfiniBand drivers;
- Input Device core drivers;
- IOMMU subsystem;
- LED subsystem;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- NVIDIA Tegra memory controller driver;
- IBM Advanced System Management driver;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- STMicroelectronics network drivers;
- Texas Instruments network drivers;
- MediaTek network drivers;
- NTB driver;
- NVME drivers;
- Device tree and open firmware driver;
- Parport drivers;
- PCI subsystem;
- Pin controllers subsystem;
- Chrome hardware platform drivers;
- ACPI WMI driver;
- Generic PM domains;
- MediaTek PM domains;
- Power supply drivers;
- Remote Processor subsystem;
- MPAM driver;
- Amlogic Meson reset controller drivers;
- S/390 drivers;
- SCSI subsystem;
- NVIDIA Tegra Control Backbone (CBB) driver;
- SPI subsystem;
- Greybus lights staging drivers;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- SM750 framebuffer staging driver;
- TCM subsystem;
- Thermal drivers;
- Thunderbolt and USB4 drivers;
- TTY drivers;
- Userspace I/O drivers;
- USB Device Class drivers;
- ULPI bus;
- DesignWare USB2 driver;
- USB Gadget drivers;
- USB Dual Role (OTG-ready) Controller drivers;
- USB Serial drivers;
- USB Type-C support driver;
- USB Type-C Port Controller Manager driver;
- TI TPS6598x USB Power Delivery controller driver;
- USB Type-C Connector System Software Interface driver;
- USB over IP driver;
- vDPA drivers;
- VFIO drivers;
- Framebuffer layer;
- TSM AMD SEV Guest driver;
- Xen hypervisor drivers;
- 9P distributed file system;
- File systems infrastructure;
- AFS file system;
- BTRFS file system;
- Ceph distributed file system;
- EROFS file system;
- Ext4 file system;
- F2FS file system;
- FUSE (File system in Userspace);
- GFS2 file system;
- HFS+ file system;
- HugeTLB file system;
- Journaling layer for block devices (JBD2);
- Network file systems…
- Record
USN-8603-1- Updated
- 2026-11-07
OSVUSN-8606-1 No score
linux-azure, linux-azure-6.8 vulnerabilities
It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)
It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- MIPS architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Compute Acceleration Framework;
- ACPI drivers;
- Serial ATA and Parallel ATA drivers;
- ATM drivers;
- Drivers core;
- Power management core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- RNBD block device driver;
- Ublk userspace block driver;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Bus devices;
- Character device driver;
- TPM device driver;
- Clock framework and drivers;
- Clocksource drivers;
- Data acquisition framework and drivers;
- Counter interface drivers;
- CPU frequency scaling framework;
- CPU idle management framework;
- Hardware crypto device drivers;
- CXL (Compute Express Link) drivers;
- DMA engine subsystem;
- EDAC drivers;
- EFI core;
- GPIO subsystem;
- GPU drivers;
- Greybus drivers;
- HID subsystem;
- Hardware monitoring drivers;
- I2C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- InfiniBand drivers;
- Input Device (Miscellaneous) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- LED subsystem;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- MediaTek SMI driver;
- NVIDIA Tegra memory controller driver;
- Multifunction device drivers;
- Broadcom VK accelerator driver;
- Fastrpc Driver;
- IBM Advanced System Management driver;
- MMC subsystem;
- MOST (Media Oriented Systems Transport) drivers;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- STMicroelectronics network drivers;
- Ethernet team driver;
- MediaTek network drivers;
- Near Field Communication (NFC) drivers;
- NTB driver;
- NVDIMM (Non-Volatile Memory Device) drivers;
- NVME drivers;
- Device tree and open firmware driver;
- PCI subsystem;
- Performance monitor drivers;
- Pin controllers subsystem;
- x86 platform drivers;
- Broadcom BCM2835 power domain driver;
- Generic PM domains;
- i.MX PM domains;
- Power supply drivers;
- RapidIO drivers;
- RAS (Reliability, Availability, Serviceability) subsystem;
- Remote Processor subsystem;
- RPMSG subsystem;
- S/390 drivers;
- SCSI subsystem;
- SLIMbus drivers;
- Freescale SoC drivers;
- MediaTek SoC drivers;
- Microchip PolarFire SoC system controller driver;
- Texas Instruments SoC drivers;
- SPI subsystem;
- Greybus lights staging drivers;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- SM750 framebuffer staging driver;
- TCM subsystem;
- Thermal drivers;
- TTY drivers;
- UFS subsystem;
- Cadence USB3 driver;
- ChipIdea USB driver;
- USB Device Class drivers;
- ULPI bus;
- USB core drivers;
- DesignWare…
- Record
USN-8606-1- Updated
- 2026-11-07
OSVUSN-8607-1 No score
linux-azure-fde vulnerabilities
It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)
It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- MIPS architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Compute Acceleration Framework;
- ACPI drivers;
- Serial ATA and Parallel ATA drivers;
- ATM drivers;
- Drivers core;
- Power management core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- RNBD block device driver;
- Ublk userspace block driver;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Bus devices;
- Character device driver;
- TPM device driver;
- Clock framework and drivers;
- Clocksource drivers;
- Data acquisition framework and drivers;
- Counter interface drivers;
- CPU frequency scaling framework;
- CPU idle management framework;
- Hardware crypto device drivers;
- CXL (Compute Express Link) drivers;
- DMA engine subsystem;
- EDAC drivers;
- EFI core;
- GPIO subsystem;
- GPU drivers;
- Greybus drivers;
- HID subsystem;
- Hardware monitoring drivers;
- I2C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- InfiniBand drivers;
- Input Device (Miscellaneous) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- LED subsystem;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- MediaTek SMI driver;
- NVIDIA Tegra memory controller driver;
- Multifunction device drivers;
- Broadcom VK accelerator driver;
- Fastrpc Driver;
- IBM Advanced System Management driver;
- MMC subsystem;
- MOST (Media Oriented Systems Transport) drivers;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- STMicroelectronics network drivers;
- Ethernet team driver;
- MediaTek network drivers;
- Near Field Communication (NFC) drivers;
- NTB driver;
- NVDIMM (Non-Volatile Memory Device) drivers;
- NVME drivers;
- Device tree and open firmware driver;
- PCI subsystem;
- Performance monitor drivers;
- Pin controllers subsystem;
- x86 platform drivers;
- Broadcom BCM2835 power domain driver;
- Generic PM domains;
- i.MX PM domains;
- Power supply drivers;
- RapidIO drivers;
- RAS (Reliability, Availability, Serviceability) subsystem;
- Remote Processor subsystem;
- RPMSG subsystem;
- S/390 drivers;
- SCSI subsystem;
- SLIMbus drivers;
- Freescale SoC drivers;
- MediaTek SoC drivers;
- Microchip PolarFire SoC system controller driver;
- Texas Instruments SoC drivers;
- SPI subsystem;
- Greybus lights staging drivers;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- SM750 framebuffer staging driver;
- TCM subsystem;
- Thermal drivers;
- TTY drivers;
- UFS subsystem;
- Cadence USB3 driver;
- ChipIdea USB driver;
- USB Device Class drivers;
- ULPI bus;
- USB core drivers;
- DesignWare…
- Record
USN-8607-1- Updated
- 2026-11-07
OSVUSN-8608-1 No score
linux-azure-fips vulnerabilities
It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)
It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Compute Acceleration Framework;
- ACPI drivers;
- Serial ATA and Parallel ATA drivers;
- Drivers core;
- Power management core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Bus devices;
- Character device driver;
- Clock framework and drivers;
- Data acquisition framework and drivers;
- Counter interface drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- CXL (Compute Express Link) drivers;
- DMA engine subsystem;
- EDAC drivers;
- EFI core;
- GPU drivers;
- Greybus drivers;
- HID subsystem;
- Hardware monitoring drivers;
- I2C subsystem;
- IIO ADC drivers;
- IIO subsystem;
- InfiniBand drivers;
- Input Device (Miscellaneous) drivers;
- IRQ chip drivers;
- LED subsystem;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- MediaTek SMI driver;
- NVIDIA Tegra memory controller driver;
- Fastrpc Driver;
- IBM Advanced System Management driver;
- MMC subsystem;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- STMicroelectronics network drivers;
- Ethernet team driver;
- MediaTek network drivers;
- Near Field Communication (NFC) drivers;
- NTB driver;
- NVDIMM (Non-Volatile Memory Device) drivers;
- NVME drivers;
- Device tree and open firmware driver;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- Broadcom BCM2835 power domain driver;
- Generic PM domains;
- i.MX PM domains;
- Remote Processor subsystem;
- S/390 drivers;
- SCSI subsystem;
- SLIMbus drivers;
- Freescale SoC drivers;
- Microchip PolarFire SoC system controller driver;
- SPI subsystem;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- SM750 framebuffer staging driver;
- TCM subsystem;
- Thermal drivers;
- TTY drivers;
- UFS subsystem;
- Cadence USB3 driver;
- USB Device Class drivers;
- ULPI bus;
- USB core drivers;
- DesignWare USB2 driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- Mustek MDC800 USB digital camera driver;
- USB YUREX driver;
- Renesas USBHS Controller drivers;
- USB Type-C Connector System Software Interface driver;
- VFIO drivers;
- Framebuffer layer;
- TSM TDX Guest driver;
- Xen hypervisor drivers;
- File systems infrastructure;
- BTRFS file system;
- Ceph distributed file system;
- EROFS file system;
- Ext4 file system;
- F2FS file system;
- FUSE (File system in Userspace);
- GFS2 file system;
- HFS+ file system;
- Journaling layer for block devices (JBD2);
- Network file systems library;
- Network…
- Record
USN-8608-1- Updated
- 2026-11-07
OSVUSN-8609-1 No score
linux-azure-fde-6.8 vulnerabilities
It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)
It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- MIPS architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Compute Acceleration Framework;
- ACPI drivers;
- Serial ATA and Parallel ATA drivers;
- ATM drivers;
- Drivers core;
- Power management core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- RNBD block device driver;
- Ublk userspace block driver;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Bus devices;
- Character device driver;
- TPM device driver;
- Clock framework and drivers;
- Clocksource drivers;
- Data acquisition framework and drivers;
- Counter interface drivers;
- CPU frequency scaling framework;
- CPU idle management framework;
- Hardware crypto device drivers;
- CXL (Compute Express Link) drivers;
- DMA engine subsystem;
- EDAC drivers;
- EFI core;
- GPIO subsystem;
- GPU drivers;
- Greybus drivers;
- HID subsystem;
- Hardware monitoring drivers;
- I2C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- InfiniBand drivers;
- Input Device (Miscellaneous) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- LED subsystem;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- MediaTek SMI driver;
- NVIDIA Tegra memory controller driver;
- Multifunction device drivers;
- Broadcom VK accelerator driver;
- Fastrpc Driver;
- IBM Advanced System Management driver;
- MMC subsystem;
- MOST (Media Oriented Systems Transport) drivers;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- STMicroelectronics network drivers;
- Ethernet team driver;
- MediaTek network drivers;
- Near Field Communication (NFC) drivers;
- NTB driver;
- NVDIMM (Non-Volatile Memory Device) drivers;
- NVME drivers;
- Device tree and open firmware driver;
- PCI subsystem;
- Performance monitor drivers;
- Pin controllers subsystem;
- x86 platform drivers;
- Broadcom BCM2835 power domain driver;
- Generic PM domains;
- i.MX PM domains;
- Power supply drivers;
- RapidIO drivers;
- RAS (Reliability, Availability, Serviceability) subsystem;
- Remote Processor subsystem;
- RPMSG subsystem;
- S/390 drivers;
- SCSI subsystem;
- SLIMbus drivers;
- Freescale SoC drivers;
- MediaTek SoC drivers;
- Microchip PolarFire SoC system controller driver;
- Texas Instruments SoC drivers;
- SPI subsystem;
- Greybus lights staging drivers;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- SM750 framebuffer staging driver;
- TCM subsystem;
- Thermal drivers;
- TTY drivers;
- UFS subsystem;
- Cadence USB3 driver;
- ChipIdea USB driver;
- USB Device Class drivers;
- ULPI bus;
- USB core drivers;
- DesignWare…
- Record
USN-8609-1- Updated
- 2026-11-07
OSVUSN-8610-1 No score
linux-azure-fde vulnerabilities
Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose sensitive information (kernel memory). (CVE-2023-45896)
It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM32 architecture;
- ARM64 architecture;
- MIPS architecture;
- PowerPC architecture;
- S390 architecture;
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- ACPI drivers;
- ATM drivers;
- Drivers core;
- Power management core;
- DRBD Distributed Replicated Block Device drivers;
- RNBD block device driver;
- Bluetooth drivers;
- Bus devices;
- Character device driver;
- TPM device driver;
- Clocksource drivers;
- Data acquisition framework and drivers;
- CPU frequency scaling framework;
- CPU idle management framework;
- Hardware crypto device drivers;
- DMA engine subsystem;
- Arm Firmware Framework for ARMv8-A(FFA);
- EFI core;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- Hardware monitoring drivers;
- I2C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- InfiniBand drivers;
- Input Device (Miscellaneous) drivers;
- IOMMU subsystem;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- MediaTek SMI driver;
- NVIDIA Tegra memory controller driver;
- Multifunction device drivers;
- IBM Advanced System Management driver;
- MMC subsystem;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- STMicroelectronics network drivers;
- MediaTek network drivers;
- Near Field Communication (NFC) drivers;
- NTB driver;
- NVDIMM (Non-Volatile Memory Device) drivers;
- NVME drivers;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- Broadcom BCM2835 power domain driver;
- Power supply drivers;
- RapidIO drivers;
- Remote Processor subsystem;
- RPMSG subsystem;
- SCSI subsystem;
- Freescale SoC drivers;
- Texas Instruments SoC drivers;
- SPI subsystem;
- Greybus lights staging drivers;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- SM750 framebuffer staging driver;
- TCM subsystem;
- TTY drivers;
- UFS subsystem;
- Cadence USB3 driver;
- USB Device Class drivers;
- ULPI bus;
- USB core drivers;
- DesignWare USB2 driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- Mustek MDC800 USB digital camera driver;
- USB YUREX driver;
- Renesas USBHS Controller drivers;
- Framebuffer layer;
- Xen hypervisor drivers;
- File systems infrastructure;
- BTRFS file system;
- Ceph distributed file system;
- EROFS file system;
- Ext4 file system;
- F2FS file system;
- FAT file system;
- FUSE (File system in Userspace);
- GFS2 file system;
- HFS+ file system;
- JFS file system;
- Network file system (NFS) server daemon;
- NILFS2 file system;
- File system notification infrastructure;
- NTFS3 file system;
- OCFS2 file system;
- Proc file system;
- Pstore file system;
- Diskquota system;
- SMB network file system;
- SquashFS file system;
- UDF file system; -…
- Record
USN-8610-1- Updated
- 2026-11-07
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linux-ltsAlpaquita:23 |
6.1.174-r0 up to 6.1.175-r0 | 6.1.175-r0 |
linux-ltsAlpaquita:25 |
6.12.87-r0 up to 6.12.92-r0 | 6.12.92-r0 |
linux-ltsAlpaquita:stream |
6.12.92-r1 up to 6.18.35-r1 | 6.18.35-r1 |
bpftoolTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 7.0.0-284.1101.el9_2.tuxcare.11.els13 | 7.0.0-284.1101.el9_2.tuxcare.11.els13 |
kernelTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-64kTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-64k-coreTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-64k-debugTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-64k-debug-coreTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-64k-debug-develTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
Show 290 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-64k-debug-devel-matchedTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-64k-debug-modulesTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-64k-debug-modules-coreTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-64k-debug-modules-extraTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-64k-debug-modules-internalTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-64k-debug-modules-partnerTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-64k-develTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-64k-devel-matchedTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-64k-modulesTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-64k-modules-coreTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-64k-modules-extraTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-64k-modules-internalTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-64k-modules-partnerTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-abi-stablelistsTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-coreTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-cross-headersTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-debugTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-debug-coreTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-debug-develTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-debug-devel-matchedTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-debug-modulesTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-debug-modules-coreTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-debug-modules-extraTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-debug-modules-internalTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-debug-modules-partnerTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-debug-uki-virtTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-develTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-devel-matchedTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-docTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-headersTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-ipaclones-internalTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-modulesTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-modules-coreTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-modules-extraTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-modules-internalTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-modules-partnerTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-selftests-internalTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-toolsTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-tools-libsTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-tools-libs-develTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-uki-virtTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
libbpfTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 2:1.0.0-2.el9_2.tuxcare.11.els13 | 2:1.0.0-2.el9_2.tuxcare.11.els13 |
libbpf-develTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 2:1.0.0-2.el9_2.tuxcare.11.els13 | 2:1.0.0-2.el9_2.tuxcare.11.els13 |
libbpf-staticTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 2:1.0.0-2.el9_2.tuxcare.11.els13 | 2:1.0.0-2.el9_2.tuxcare.11.els13 |
perfTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
python3-perfTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
rtlaTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernelTuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13 | 5.14.0-570.62.1.el9_6.tuxcare.5.els13 |
kernel-64kTuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13 | 5.14.0-570.62.1.el9_6.tuxcare.5.els13 |
kernel-64k-coreTuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13 | 5.14.0-570.62.1.el9_6.tuxcare.5.els13 |
kernel-64k-debugTuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13 | 5.14.0-570.62.1.el9_6.tuxcare.5.els13 |
kernel-64k-debug-coreTuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13 | 5.14.0-570.62.1.el9_6.tuxcare.5.els13 |
kernel-64k-debug-develTuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13 | 5.14.0-570.62.1.el9_6.tuxcare.5.els13 |
kernel-64k-debug-devel-matchedTuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13 | 5.14.0-570.62.1.el9_6.tuxcare.5.els13 |
kernel-64k-debug-modulesTuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13 | 5.14.0-570.62.1.el9_6.tuxcare.5.els13 |
kernel-64k-debug-modules-coreTuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13 | 5.14.0-570.62.1.el9_6.tuxcare.5.els13 |
kernel-64k-debug-modules-extraTuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13 | 5.14.0-570.62.1.el9_6.tuxcare.5.els13 |
kernel-64k-debug-modules-internalTuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13 | 5.14.0-570.62.1.el9_6.tuxcare.5.els13 |
kernel-64k-debug-modules-partnerTuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13 | 5.14.0-570.62.1.el9_6.tuxcare.5.els13 |
kernel-64k-develTuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13 | 5.14.0-570.62.1.el9_6.tuxcare.5.els13 |
kernel-64k-devel-matchedTuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13 | 5.14.0-570.62.1.el9_6.tuxcare.5.els13 |
kernel-64k-modulesTuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13 | 5.14.0-570.62.1.el9_6.tuxcare.5.els13 |
kernel-64k-modules-coreTuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13 | 5.14.0-570.62.1.el9_6.tuxcare.5.els13 |
kernel-64k-modules-extraTuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13 | 5.14.0-570.62.1.el9_6.tuxcare.5.els13 |
kernel-64k-modules-internalTuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13 | 5.14.0-570.62.1.el9_6.tuxcare.5.els13 |
kernel-64k-modules-partnerTuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13 | 5.14.0-570.62.1.el9_6.tuxcare.5.els13 |
kernel-abi-stablelistsTuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13 | 5.14.0-570.62.1.el9_6.tuxcare.5.els13 |
kernel-coreTuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13 | 5.14.0-570.62.1.el9_6.tuxcare.5.els13 |
kernel-cross-headersTuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13 | 5.14.0-570.62.1.el9_6.tuxcare.5.els13 |
kernel-debugTuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13 | 5.14.0-570.62.1.el9_6.tuxcare.5.els13 |
kernel-debug-coreTuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13 | 5.14.0-570.62.1.el9_6.tuxcare.5.els13 |
kernel-debug-develTuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13 | 5.14.0-570.62.1.el9_6.tuxcare.5.els13 |
kernel-debug-devel-matchedTuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13 | 5.14.0-570.62.1.el9_6.tuxcare.5.els13 |
kernel-debug-modulesTuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13 | 5.14.0-570.62.1.el9_6.tuxcare.5.els13 |
kernel-debug-modules-coreTuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13 | 5.14.0-570.62.1.el9_6.tuxcare.5.els13 |
kernel-debug-modules-extraTuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13 | 5.14.0-570.62.1.el9_6.tuxcare.5.els13 |
kernel-debug-modules-internalTuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13 | 5.14.0-570.62.1.el9_6.tuxcare.5.els13 |
kernel-debug-modules-partnerTuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13 | 5.14.0-570.62.1.el9_6.tuxcare.5.els13 |
kernel-debug-uki-virtTuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13 | 5.14.0-570.62.1.el9_6.tuxcare.5.els13 |
kernel-debug-uki-virt-addonsTuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13 | 5.14.0-570.62.1.el9_6.tuxcare.5.els13 |
kernel-develTuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13 | 5.14.0-570.62.1.el9_6.tuxcare.5.els13 |
kernel-devel-matchedTuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13 | 5.14.0-570.62.1.el9_6.tuxcare.5.els13 |
kernel-docTuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13 | 5.14.0-570.62.1.el9_6.tuxcare.5.els13 |
kernel-headersTuxCare:AlmaLinux:9.6 From an advisory covering 183 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13 | 5.14.0-570.62.1.el9_6.tuxcare.5.els13 |
KernelLinux |
5.11.0 up to 5.15.209, 5.16.0 up to 6.1.175, 6.2.0 up to 6.6.141, 6.7.0 up to 6.12.91, 6.13.0 up to 6.18.33, 6.19.0 up to 7.0.10 | 5.15.2096.1.1756.6.1416.12.916.18.337.0.10 |
linuxDebian:12 |
before 6.1.176-1, plus listed versions 6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1 Show 45 moreShow less6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.170-16.1.170-26.1.170-36.1.172-16.1.174-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-1 |
6.1.176-1 |
linuxDebian:13 |
before 6.12.94-1, plus listed versions 6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-1 Show 22 moreShow less6.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-1~bpo12+1 |
6.12.94-1 |
linuxDebian:14 |
before 7.0.10-1, plus listed versions 6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1 Show 45 moreShow less6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp16.14.5-1~exp1 |
7.0.10-1 |
kernelopenEuler:22.03-LTS-SP4 From an advisory covering 59 CVEs |
before 5.10.0-334.0.0.235.oe2203sp4 | 5.10.0-334.0.0.235.oe2203sp4 |
linuxRoot:Debian:12 |
before 6.1.190-1.aikido.167 | 6.1.190-1.aikido.167 |
rootio-linuxRoot:Debian:12 |
before 6.1.190-1.aikido.167 | 6.1.190-1.aikido.167 |
linuxRoot:Ubuntu:22.04 |
before 5.15.0-203.213.aikido.119 | 5.15.0-203.213.aikido.119 |
rootio-linuxRoot:Ubuntu:22.04 |
before 5.15.0-203.213.aikido.119 | 5.15.0-203.213.aikido.119 |
linuxRoot:Ubuntu:24.04 |
before 6.8.0-149.149.aikido.91 | 6.8.0-149.149.aikido.91 |
rootio-linuxRoot:Ubuntu:24.04 |
before 6.8.0-149.149.aikido.91 | 6.8.0-149.149.aikido.91 |
kernel-defaultSUSE:Linux Micro 6.0 From an advisory covering 89 CVEs |
before 6.4.0-49.1 | 6.4.0-49.1 |
kernel-kvmsmallSUSE:Linux Micro 6.0 From an advisory covering 89 CVEs |
before 6.4.0-49.1 | 6.4.0-49.1 |
kernel-sourceSUSE:Linux Micro 6.0 From an advisory covering 89 CVEs |
before 6.4.0-49.1 | 6.4.0-49.1 |
kernel-rtSUSE:Linux Micro 6.0 From an advisory covering 89 CVEs |
before 6.4.0-49.1 | 6.4.0-49.1 |
kernel-source-rtSUSE:Linux Micro 6.0 From an advisory covering 89 CVEs |
before 6.4.0-49.1 | 6.4.0-49.1 |
kernel-defaultSUSE:Linux Micro 6.1 From an advisory covering 89 CVEs |
before 6.4.0-49.1 | 6.4.0-49.1 |
kernel-kvmsmallSUSE:Linux Micro 6.1 From an advisory covering 89 CVEs |
before 6.4.0-49.1 | 6.4.0-49.1 |
kernel-sourceSUSE:Linux Micro 6.1 From an advisory covering 89 CVEs |
before 6.4.0-49.1 | 6.4.0-49.1 |
kernel-rtSUSE:Linux Micro 6.1 From an advisory covering 89 CVEs |
before 6.4.0-49.1 | 6.4.0-49.1 |
kernel-source-rtSUSE:Linux Micro 6.1 From an advisory covering 89 CVEs |
before 6.4.0-49.1 | 6.4.0-49.1 |
kernel-obs-buildSUSE:Linux Micro Extras 6.2 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-symsSUSE:Linux Micro Extras 6.2 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-64kbSUSE:Linux Micro 6.2 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-defaultSUSE:Linux Micro 6.2 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-default-baseSUSE:Linux Micro 6.2 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1.160000.2.19 | 6.12.0-160000.37.1.160000.2.19 |
kernel-rtSUSE:Linux Micro 6.2 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-sourceSUSE:Linux Micro 6.2 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-64kbSUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-azureSUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-defaultSUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-default-baseSUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1.160000.2.19 | 6.12.0-160000.37.1.160000.2.19 |
kernel-docsSUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-kvmsmallSUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-obs-qaSUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-sourceSUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-symsSUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-zfcpdumpSUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-64kbSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-azureSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-defaultSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-default-baseSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1.160000.2.19 | 6.12.0-160000.37.1.160000.2.19 |
kernel-docsSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-kvmsmallSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-obs-qaSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-sourceSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-symsSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-zfcpdumpSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-defaultSUSE:Linux Enterprise High Availability Extension 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-livepatch-SLE15-SP7-RT_Update_17SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 168 CVEs |
before 1-150700.1.3.1 | 1-150700.1.3.1 |
kernel-rtSUSE:Real Time Module 15 SP7 From an advisory covering 168 CVEs |
before 6.4.0-150700.7.62.1 | 6.4.0-150700.7.62.1 |
kernel-source-rtSUSE:Real Time Module 15 SP7 From an advisory covering 168 CVEs |
before 6.4.0-150700.7.62.1 | 6.4.0-150700.7.62.1 |
kernel-syms-rtSUSE:Real Time Module 15 SP7 From an advisory covering 168 CVEs |
before 6.4.0-150700.7.62.1 | 6.4.0-150700.7.62.1 |
kernel-64kbSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 105 CVEs |
before 6.4.0-150700.53.66.1 | 6.4.0-150700.53.66.1 |
kernel-defaultSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 105 CVEs |
before 6.4.0-150700.53.66.1 | 6.4.0-150700.53.66.1 |
kernel-default-baseSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 105 CVEs |
before 6.4.0-150700.53.66.1.150700.17.39.1 | 6.4.0-150700.53.66.1.150700.17.39.1 |
kernel-sourceSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 105 CVEs |
before 6.4.0-150700.53.66.1 | 6.4.0-150700.53.66.1 |
kernel-zfcpdumpSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 105 CVEs |
before 6.4.0-150700.53.66.1 | 6.4.0-150700.53.66.1 |
kernel-docsSUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 105 CVEs |
before 6.4.0-150700.53.66.2 | 6.4.0-150700.53.66.2 |
kernel-obs-buildSUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 105 CVEs |
before 6.4.0-150700.53.66.1 | 6.4.0-150700.53.66.1 |
kernel-sourceSUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 105 CVEs |
before 6.4.0-150700.53.66.1 | 6.4.0-150700.53.66.1 |
kernel-symsSUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 105 CVEs |
before 6.4.0-150700.53.66.1 | 6.4.0-150700.53.66.1 |
kernel-defaultSUSE:Linux Enterprise Module for Legacy 15 SP7 From an advisory covering 105 CVEs |
before 6.4.0-150700.53.66.1 | 6.4.0-150700.53.66.1 |
kernel-defaultSUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 105 CVEs |
before 6.4.0-150700.53.66.1 | 6.4.0-150700.53.66.1 |
kernel-livepatch-SLE15-SP7_Update_18SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 105 CVEs |
before 1-150700.15.3.1 | 1-150700.15.3.1 |
kernel-azureSUSE:Linux Enterprise Module for Public Cloud 15 SP7 From an advisory covering 105 CVEs |
before 6.4.0-150700.53.66.1 | 6.4.0-150700.53.66.1 |
kernel-defaultSUSE:Linux Enterprise High Availability Extension 15 SP7 From an advisory covering 105 CVEs |
before 6.4.0-150700.53.66.1 | 6.4.0-150700.53.66.1 |
kernel-defaultSUSE:Linux Enterprise Workstation Extension 15 SP7 From an advisory covering 105 CVEs |
before 6.4.0-150700.53.66.1 | 6.4.0-150700.53.66.1 |
kernel-rtSUSE:Linux Enterprise Micro 5.5 From an advisory covering 30 CVEs |
before 5.14.21-150500.13.151.1 | 5.14.21-150500.13.151.1 |
kernel-source-rtSUSE:Linux Enterprise Micro 5.5 From an advisory covering 30 CVEs |
before 5.14.21-150500.13.151.1 | 5.14.21-150500.13.151.1 |
kernel-rtSUSE:Linux Enterprise Micro 5.3 From an advisory covering 28 CVEs |
before 5.14.21-150400.15.176.1 | 5.14.21-150400.15.176.1 |
kernel-source-rtSUSE:Linux Enterprise Micro 5.3 From an advisory covering 28 CVEs |
before 5.14.21-150400.15.176.1 | 5.14.21-150400.15.176.1 |
kernel-rtSUSE:Linux Enterprise Micro 5.4 From an advisory covering 28 CVEs |
before 5.14.21-150400.15.176.1 | 5.14.21-150400.15.176.1 |
kernel-source-rtSUSE:Linux Enterprise Micro 5.4 From an advisory covering 28 CVEs |
before 5.14.21-150400.15.176.1 | 5.14.21-150400.15.176.1 |
kernel-defaultSUSE:Linux Enterprise Micro 5.3 From an advisory covering 28 CVEs |
before 5.14.21-150400.24.228.1 | 5.14.21-150400.24.228.1 |
kernel-default-baseSUSE:Linux Enterprise Micro 5.3 From an advisory covering 28 CVEs |
before 5.14.21-150400.24.228.1.150400.24.116.1 | 5.14.21-150400.24.228.1.150400.24.116.1 |
kernel-sourceSUSE:Linux Enterprise Micro 5.3 From an advisory covering 28 CVEs |
before 5.14.21-150400.24.228.1 | 5.14.21-150400.24.228.1 |
kernel-defaultSUSE:Linux Enterprise Micro 5.4 From an advisory covering 28 CVEs |
before 5.14.21-150400.24.228.1 | 5.14.21-150400.24.228.1 |
kernel-default-baseSUSE:Linux Enterprise Micro 5.4 From an advisory covering 28 CVEs |
before 5.14.21-150400.24.228.1.150400.24.116.1 | 5.14.21-150400.24.228.1.150400.24.116.1 |
kernel-sourceSUSE:Linux Enterprise Micro 5.4 From an advisory covering 28 CVEs |
before 5.14.21-150400.24.228.1 | 5.14.21-150400.24.228.1 |
kernel-defaultSUSE:Linux Enterprise Live Patching 15 SP4 From an advisory covering 28 CVEs |
before 5.14.21-150400.24.228.1 | 5.14.21-150400.24.228.1 |
kernel-livepatch-SLE15-SP4_Update_57SUSE:Linux Enterprise Live Patching 15 SP4 From an advisory covering 28 CVEs |
before 1-150400.9.3.1 | 1-150400.9.3.1 |
kernel-defaultSUSE:Linux Enterprise High Availability Extension 15 SP4 From an advisory covering 28 CVEs |
before 5.14.21-150400.24.228.1 | 5.14.21-150400.24.228.1 |
kernel-64kbSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 28 CVEs |
before 5.14.21-150400.24.228.1 | 5.14.21-150400.24.228.1 |
kernel-defaultSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 28 CVEs |
before 5.14.21-150400.24.228.1 | 5.14.21-150400.24.228.1 |
kernel-default-baseSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 28 CVEs |
before 5.14.21-150400.24.228.1.150400.24.116.1 | 5.14.21-150400.24.228.1.150400.24.116.1 |
kernel-docsSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 28 CVEs |
before 5.14.21-150400.24.228.1 | 5.14.21-150400.24.228.1 |
kernel-obs-buildSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 28 CVEs |
before 5.14.21-150400.24.228.1 | 5.14.21-150400.24.228.1 |
kernel-sourceSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 28 CVEs |
before 5.14.21-150400.24.228.1 | 5.14.21-150400.24.228.1 |
kernel-symsSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 28 CVEs |
before 5.14.21-150400.24.228.1 | 5.14.21-150400.24.228.1 |
kernel-64kbSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 28 CVEs |
before 5.14.21-150400.24.228.1 | 5.14.21-150400.24.228.1 |
kernel-defaultSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 28 CVEs |
before 5.14.21-150400.24.228.1 | 5.14.21-150400.24.228.1 |
kernel-default-baseSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 28 CVEs |
before 5.14.21-150400.24.228.1.150400.24.116.1 | 5.14.21-150400.24.228.1.150400.24.116.1 |
kernel-docsSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 28 CVEs |
before 5.14.21-150400.24.228.1 | 5.14.21-150400.24.228.1 |
kernel-obs-buildSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 28 CVEs |
before 5.14.21-150400.24.228.1 | 5.14.21-150400.24.228.1 |
kernel-sourceSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 28 CVEs |
before 5.14.21-150400.24.228.1 | 5.14.21-150400.24.228.1 |
kernel-symsSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 28 CVEs |
before 5.14.21-150400.24.228.1 | 5.14.21-150400.24.228.1 |
kernel-64kbSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 28 CVEs |
before 5.14.21-150400.24.228.1 | 5.14.21-150400.24.228.1 |
kernel-defaultSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 28 CVEs |
before 5.14.21-150400.24.228.1 | 5.14.21-150400.24.228.1 |
kernel-default-baseSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 28 CVEs |
before 5.14.21-150400.24.228.1.150400.24.116.1 | 5.14.21-150400.24.228.1.150400.24.116.1 |
kernel-docsSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 28 CVEs |
before 5.14.21-150400.24.228.1 | 5.14.21-150400.24.228.1 |
kernel-obs-buildSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 28 CVEs |
before 5.14.21-150400.24.228.1 | 5.14.21-150400.24.228.1 |
linux-hwe-edgeUbuntu:16.04:LTS |
All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1 |
None known |
linux-aws-5.0Ubuntu:18.04:LTS |
All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30 |
None known |
linux-aws-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37 |
None known |
linux-azureUbuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38 |
None known |
linux-azure-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36 |
None known |
linux-azure-edgeUbuntu:18.04:LTS |
All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2 |
None known |
linux-gcpUbuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35 |
None known |
linux-gcp-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1 |
None known |
linux-gke-4.15Ubuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84 |
None known |
linux-gke-5.4Ubuntu:18.04:LTS |
All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1 |
None known |
linux-gkeop-5.4Ubuntu:18.04:LTS |
All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1 |
None known |
linux-hweUbuntu:18.04:LTS |
All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72 |
None known |
linux-hwe-edgeUbuntu:18.04:LTS |
All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2 |
None known |
linux-oemUbuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114 |
None known |
linux-oracle-5.0Ubuntu:18.04:LTS |
All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19 |
None known |
linux-oracle-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1 |
None known |
linux-aws-5.11Ubuntu:20.04:LTS |
All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1 |
None known |
linux-aws-5.13Ubuntu:20.04:LTS |
All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1 |
None known |
linux-aws-5.15Ubuntu:Pro:20.04:LTS |
before 5.15.0-1112.119~20.04.1, plus listed versions 5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1 Show 45 moreShow less5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1 |
5.15.0-1112.119~20.04.1 |
linux-aws-5.8Ubuntu:20.04:LTS |
All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1 |
None known |
linux-azure-5.11Ubuntu:20.04:LTS |
All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2 |
None known |
linux-azure-5.13Ubuntu:20.04:LTS |
All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1 |
None known |
linux-azure-5.15Ubuntu:Pro:20.04:LTS |
before 5.15.0-1117.126~20.04.1, plus listed versions 5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1 Show 45 moreShow less5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1 |
5.15.0-1117.126~20.04.1 |
linux-azure-5.8Ubuntu:20.04:LTS |
All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1 |
None known |
linux-azure-fdeUbuntu:20.04:LTS |
All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1 |
None known |
linux-azure-fde-5.15Ubuntu:Pro:20.04:LTS |
before 5.15.0-1117.126~20.04.2, plus listed versions 5.15.0-1019.24~20.04.1.15.15.0-1020.25~20.04.1.15.15.0-1021.26~20.04.1.15.15.0-1029.36~20.04.1.15.15.0-1030.37~20.04.1.1 Show 45 moreShow less5.15.0-1031.38~20.04.1.15.15.0-1033.40~20.04.1.15.15.0-1034.41~20.04.1.25.15.0-1035.42~20.04.1.15.15.0-1036.43~20.04.1.15.15.0-1037.44~20.04.1.15.15.0-1038.45~20.04.1.15.15.0-1039.46~20.04.1.15.15.0-1040.47~20.04.1.15.15.0-1041.48~20.04.1.15.15.0-1042.49~20.04.1.15.15.0-1043.50~20.04.1.15.15.0-1046.53~20.04.1.15.15.0-1047.54~20.04.1.15.15.0-1049.56~20.04.1.15.15.0-1050.57~20.04.1.15.15.0-1051.59~20.04.1.15.15.0-1052.60~20.04.1.15.15.0-1053.61~20.04.1.15.15.0-1054.62~20.04.1.15.15.0-1056.64~20.04.1.15.15.0-1057.65~20.04.1.15.15.0-1058.66~20.04.2.15.15.0-1059.67~20.04.1.15.15.0-1060.69~20.04.1.15.15.0-1061.70~20.04.1.15.15.0-1063.72~20.04.1.15.15.0-1064.73~20.04.1.15.15.0-1065.74~20.04.1.15.15.0-1067.76~20.04.1.15.15.0-1068.77~20.04.1.15.15.0-1070.79~20.04.1.15.15.0-1071.80~20.04.1.15.15.0-1072.81~20.04.1.15.15.0-1073.82~20.04.1.15.15.0-1074.83~20.04.1.15.15.0-1076.85~20.04.1.15.15.0-1078.87~20.04.1.15.15.0-1081.90~20.04.1.15.15.0-1082.91~20.04.1.15.15.0-1086.95~20.04.1.15.15.0-1087.96~20.04.1.15.15.0-1088.97~20.04.1.15.15.0-1089.98~20.04.1.15.15.0-1091.100~20.04.1.1 |
5.15.0-1117.126~20.04.2 |
linux-gcp-5.11Ubuntu:20.04:LTS |
All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3 |
None known |
linux-gcp-5.13Ubuntu:20.04:LTS |
All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1 |
None known |
linux-gcp-5.15Ubuntu:Pro:20.04:LTS |
before 5.15.0-1112.122~20.04.1, plus listed versions 5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2 Show 45 moreShow less5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.15.15.0-1065.73~20.04.15.15.0-1066.74~20.04.15.15.0-1067.75~20.04.15.15.0-1068.76~20.04.15.15.0-1069.77~20.04.15.15.0-1070.78~20.04.15.15.0-1071.79~20.04.15.15.0-1072.80~20.04.15.15.0-1073.81~20.04.15.15.0-1074.83~20.04.1 |
5.15.0-1112.122~20.04.1 |
linux-gcp-5.8Ubuntu:20.04:LTS |
All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41 |
None known |
linux-gkeUbuntu:20.04:LTS |
All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111 |
None known |
linux-gke-5.15Ubuntu:20.04:LTS |
All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1 |
None known |
linux-gkeopUbuntu:20.04:LTS |
All versions, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77 |
None known |
linux-gkeop-5.15Ubuntu:20.04:LTS |
All versions, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 40 moreShow less5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1 |
None known |
linux-hwe-5.11Ubuntu:20.04:LTS |
All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1 |
None known |
linux-hwe-5.13Ubuntu:20.04:LTS |
All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1 |
None known |
linux-hwe-5.15Ubuntu:Pro:20.04:LTS |
before 5.15.0-186.196~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 45 moreShow less5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1 |
5.15.0-186.196~20.04.1 |
linux-hwe-5.8Ubuntu:20.04:LTS |
All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1 |
None known |
linux-ibm-5.15Ubuntu:Pro:20.04:LTS |
before 5.15.0-1106.110~20.04.1, plus listed versions 5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1 Show 45 moreShow less5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.15.15.0-1057.60~20.04.15.15.0-1058.61~20.04.15.15.0-1059.62~20.04.15.15.0-1060.63~20.04.15.15.0-1061.64~20.04.15.15.0-1062.65~20.04.15.15.0-1063.66~20.04.15.15.0-1064.67~20.04.15.15.0-1065.68~20.04.15.15.0-1066.69~20.04.15.15.0-1067.70~20.04.15.15.0-1068.71~20.04.15.15.0-1069.72~20.04.15.15.0-1074.77~20.04.15.15.0-1075.78~20.04.15.15.0-1076.79~20.04.15.15.0-1078.81~20.04.15.15.0-1079.82~20.04.15.15.0-1080.83~20.04.15.15.0-1081.84~20.04.15.15.0-1083.86~20.04.15.15.0-1085.88~20.04.15.15.0-1086.89~20.04.15.15.0-1087.90~20.04.15.15.0-1089.92~20.04.15.15.0-1090.93~20.04.15.15.0-1091.94~20.04.15.15.0-1092.95~20.04.15.15.0-1093.96~20.04.15.15.0-1094.97~20.04.1 |
5.15.0-1106.110~20.04.1 |
linux-intel-5.13Ubuntu:20.04:LTS |
All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19 |
None known |
linux-intel-iotg-5.15Ubuntu:Pro:20.04:LTS |
before 5.15.0-1107.113~20.04.1, plus listed versions 5.15.0-1003.5~20.04.15.15.0-1008.11~20.04.15.15.0-1010.14~20.04.15.15.0-1015.20~20.04.25.15.0-1016.21~20.04.1 Show 45 moreShow less5.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1021.26~20.04.15.15.0-1023.28~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1030.35~20.04.15.15.0-1031.36~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1040.46~20.04.15.15.0-1043.49~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1060.66~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.25.15.0-1074.80~20.04.15.15.0-1077.83~20.04.15.15.0-1078.84~20.04.15.15.0-1079.85~20.04.15.15.0-1083.89~20.04.15.15.0-1084.90~20.04.15.15.0-1085.91~20.04.15.15.0-1086.92~20.04.1 |
5.15.0-1107.113~20.04.1 |
linux-lowlatency-hwe-5.15Ubuntu:Pro:20.04:LTS |
before 5.15.0-184.194~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 45 moreShow less5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.88~20.04.15.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.95~20.04.15.15.0-87.96~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-110.120~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1 |
5.15.0-184.194~20.04.1 |
linux-nvidia-tegra-5.15Ubuntu:Pro:20.04:LTS |
before 5.15.0-1064.66~20.04.1, plus listed versions 5.15.0-1009.9~20.04.15.15.0-1010.10~20.04.15.15.0-1012.12~20.04.15.15.0-1014.14~20.04.15.15.0-1015.15~20.04.1 Show 31 moreShow less5.15.0-1016.16~20.04.15.15.0-1017.17~20.04.15.15.0-1018.18~20.04.15.15.0-1019.19~20.04.15.15.0-1020.20~20.04.15.15.0-1022.22~20.04.15.15.0-1025.25~20.04.15.15.0-1027.27~20.04.15.15.0-1030.30~20.04.15.15.0-1032.32~20.04.15.15.0-1039.39~20.04.15.15.0-1040.40~20.04.15.15.0-1041.41~20.04.15.15.0-1042.42~20.04.15.15.0-1043.43~20.04.15.15.0-1044.44~20.04.15.15.0-1045.45~20.04.15.15.0-1046.46~20.04.15.15.0-1047.47~20.04.15.15.0-1048.48~20.04.15.15.0-1049.49~20.04.15.15.0-1050.50~20.04.15.15.0-1051.51~20.04.15.15.0-1052.52~20.04.25.15.0-1053.53~20.04.15.15.0-1055.55~20.04.15.15.0-1057.57~20.04.15.15.0-1058.58~20.04.15.15.0-1060.60~20.04.15.15.0-1061.61~20.04.15.15.0-1063.63~20.04.1 |
5.15.0-1064.66~20.04.1 |
linux-oem-5.10Ubuntu:20.04:LTS |
All versions, plus listed versions 5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17 Show 21 moreShow less5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61 |
None known |
linux-oem-5.13Ubuntu:20.04:LTS |
All versions, plus listed versions 5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21 Show 7 moreShow less5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36 |
None known |
linux-oem-5.14Ubuntu:20.04:LTS |
All versions, plus listed versions 5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10 Show 30 moreShow less5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67 |
None known |
linux-oem-5.6Ubuntu:20.04:LTS |
All versions, plus listed versions 5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13 Show 24 moreShow less5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60 |
None known |
linux-oracle-5.11Ubuntu:20.04:LTS |
All versions, plus listed versions 5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1 |
None known |
linux-oracle-5.13Ubuntu:20.04:LTS |
All versions, plus listed versions 5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1 Show 7 moreShow less5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1 |
None known |
linux-oracle-5.15Ubuntu:Pro:20.04:LTS |
before 5.15.0-1109.115~20.04.1, plus listed versions 5.15.0-1007.9~20.04.15.15.0-1013.17~20.04.15.15.0-1016.20~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.1 Show 45 moreShow less5.15.0-1019.24~20.04.15.15.0-1021.27~20.04.15.15.0-1022.28~20.04.15.15.0-1025.31~20.04.25.15.0-1027.33~20.04.15.15.0-1029.35~20.04.15.15.0-1030.36~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1041.47~20.04.15.15.0-1042.48~20.04.15.15.0-1044.50~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1047.53~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1053.59~20.04.15.15.0-1054.60~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1074.80~20.04.1 |
5.15.0-1109.115~20.04.1 |
linux-oracle-5.8Ubuntu:20.04:LTS |
All versions, plus listed versions 5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1 |
None known |
linux-raspi2Ubuntu:20.04:LTS |
All versions, plus listed versions 5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6 |
None known |
linux-riscvUbuntu:20.04:LTS |
All versions, plus listed versions 5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34 Show 7 moreShow less5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45 |
None known |
linux-riscv-5.11Ubuntu:20.04:LTS |
All versions, plus listed versions 5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1 Show 8 moreShow less5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35 |
None known |
linux-riscv-5.15Ubuntu:Pro:20.04:LTS |
before 5.15.0-1106.110~20.04.1, plus listed versions 5.15.0-1015.17~20.04.15.15.0-1017.19~20.04.15.15.0-1018.21~20.04.15.15.0-1019.22~20.04.15.15.0-1022.26~20.04.1 Show 45 moreShow less5.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1029.33~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1032.36~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.25.15.0-1037.41~20.04.25.15.0-1038.42~20.04.25.15.0-1039.43~20.04.25.15.0-1040.44~20.04.35.15.0-1041.45~20.04.15.15.0-1043.47~20.04.15.15.0-1044.48~20.04.15.15.0-1045.49~20.04.15.15.0-1046.50~20.04.15.15.0-1047.51~20.04.15.15.0-1048.52~20.04.15.15.0-1049.53~20.04.25.15.0-1050.54~20.04.15.15.0-1051.55~20.04.15.15.0-1052.56~20.04.15.15.0-1053.57~20.04.15.15.0-1056.60~20.04.15.15.0-1057.61~20.04.15.15.0-1058.62~20.04.15.15.0-1059.63~20.04.15.15.0-1060.64~20.04.15.15.0-1061.65~20.04.15.15.0-1062.66~20.04.15.15.0-1063.67~20.04.15.15.0-1064.68~20.04.15.15.0-1065.69~20.04.15.15.0-1066.70~20.04.15.15.0-1067.71~20.04.15.15.0-1068.72~20.04.15.15.0-1069.73~20.04.15.15.0-1070.74~20.04.15.15.0-1071.75~20.04.15.15.0-1072.76~20.04.1 |
5.15.0-1106.110~20.04.1 |
linux-riscv-5.8Ubuntu:20.04:LTS |
All versions, plus listed versions 5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1 Show 5 moreShow less5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1 |
None known |
linuxUbuntu:22.04:LTS |
before 5.15.0-186.196, plus listed versions 5.13.0-19.195.15.0-17.175.15.0-18.185.15.0-22.225.15.0-23.23 Show 45 moreShow less5.15.0-25.255.15.0-27.285.15.0-30.315.15.0-33.345.15.0-35.365.15.0-37.395.15.0-39.425.15.0-40.435.15.0-41.445.15.0-43.465.15.0-46.495.15.0-47.515.15.0-48.545.15.0-50.565.15.0-52.585.15.0-53.595.15.0-56.625.15.0-57.635.15.0-58.645.15.0-60.665.15.0-67.745.15.0-69.765.15.0-70.775.15.0-71.785.15.0-72.795.15.0-73.805.15.0-75.825.15.0-76.835.15.0-78.855.15.0-79.865.15.0-82.915.15.0-83.925.15.0-84.935.15.0-86.965.15.0-87.975.15.0-88.985.15.0-89.995.15.0-91.1015.15.0-92.1025.15.0-94.1045.15.0-97.1075.15.0-100.1105.15.0-101.1115.15.0-102.1125.15.0-105.115 |
5.15.0-186.196 |
linux-allwinner-5.19Ubuntu:22.04:LTS |
All versions, plus listed versions 5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1 |
None known |
linux-awsUbuntu:22.04:LTS |
before 5.15.0-1112.119, plus listed versions 5.13.0-1005.65.15.0-1002.45.15.0-1003.55.15.0-1004.65.15.0-1005.7 Show 45 moreShow less5.15.0-1008.105.15.0-1009.115.15.0-1011.145.15.0-1013.175.15.0-1014.185.15.0-1015.195.15.0-1017.215.15.0-1019.235.15.0-1020.245.15.0-1021.255.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.325.15.0-1030.345.15.0-1031.355.15.0-1033.375.15.0-1034.385.15.0-1035.395.15.0-1036.405.15.0-1037.415.15.0-1038.435.15.0-1039.445.15.0-1040.455.15.0-1042.475.15.0-1043.485.15.0-1044.495.15.0-1045.505.15.0-1047.525.15.0-1048.535.15.0-1049.545.15.0-1050.555.15.0-1051.565.15.0-1052.575.15.0-1053.585.15.0-1055.605.15.0-1056.615.15.0-1057.635.15.0-1060.665.15.0-1061.675.15.0-1062.685.15.0-1063.695.15.0-1064.705.15.0-1065.71 |
5.15.0-1112.119 |
linux-aws-5.19Ubuntu:22.04:LTS |
All versions, plus listed versions 5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1 Show 5 moreShow less5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1 |
None known |
linux-aws-6.2Ubuntu:22.04:LTS |
All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 9 moreShow less6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1 |
None known |
linux-aws-6.5Ubuntu:22.04:LTS |
All versions, plus listed versions 6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1 Show 9 moreShow less6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1 |
None known |
linux-aws-6.8Ubuntu:22.04:LTS |
before 6.8.0-1061.64~22.04.1, plus listed versions 6.8.0-1009.9~22.04.26.8.0-1010.10~22.04.26.8.0-1011.12~22.04.16.8.0-1013.14~22.04.16.8.0-1014.15~22.04.1 Show 34 moreShow less6.8.0-1015.16~22.04.16.8.0-1016.17~22.04.26.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1023.25~22.04.16.8.0-1024.26~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1035.37~22.04.16.8.0-1036.38~22.04.16.8.0-1039.41~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.44~22.04.16.8.0-1043.45~22.04.16.8.0-1044.46~22.04.16.8.0-1045.47~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.16.8.0-1050.53~22.04.16.8.0-1051.54~22.04.16.8.0-1052.55~22.04.16.8.0-1053.56~22.04.16.8.0-1055.58~22.04.16.8.0-1057.60~22.04.16.8.0-1060.63~22.04.1 |
6.8.0-1061.64~22.04.1 |
linux-azureUbuntu:22.04:LTS |
before 5.15.0-1117.126, plus listed versions 5.13.0-1006.75.15.0-1001.25.15.0-1002.35.15.0-1003.45.15.0-1005.6 Show 45 moreShow less5.15.0-1007.85.15.0-1008.95.15.0-1010.125.15.0-1012.155.15.0-1013.165.15.0-1014.175.15.0-1017.205.15.0-1019.245.15.0-1020.255.15.0-1021.265.15.0-1022.275.15.0-1023.295.15.0-1024.305.15.0-1029.365.15.0-1030.375.15.0-1031.385.15.0-1033.405.15.0-1034.415.15.0-1035.425.15.0-1036.435.15.0-1037.445.15.0-1038.455.15.0-1039.465.15.0-1040.475.15.0-1041.485.15.0-1042.495.15.0-1044.515.15.0-1045.525.15.0-1046.535.15.0-1047.545.15.0-1049.565.15.0-1050.575.15.0-1051.595.15.0-1052.605.15.0-1053.615.15.0-1054.625.15.0-1056.645.15.0-1057.655.15.0-1058.665.15.0-1059.675.15.0-1060.695.15.0-1061.705.15.0-1063.725.15.0-1064.735.15.0-1066.75 |
5.15.0-1117.126 |
linux-azure-5.19Ubuntu:22.04:LTS |
All versions, plus listed versions 5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2 |
None known |
linux-azure-6.2Ubuntu:22.04:LTS |
All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 8 moreShow less6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1 |
None known |
linux-azure-6.5Ubuntu:22.04:LTS |
All versions, plus listed versions 6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1 Show 9 moreShow less6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1 |
None known |
linux-azure-6.8Ubuntu:22.04:LTS |
before 6.8.0-1063.71~22.04.1, plus listed versions 6.8.0-1008.8~22.04.16.8.0-1009.9~22.04.16.8.0-1010.10~22.04.16.8.0-1012.14~22.04.16.8.0-1013.15~22.04.1 Show 22 moreShow less6.8.0-1014.16~22.04.16.8.0-1015.17~22.04.26.8.0-1017.20~22.04.16.8.0-1018.21~22.04.16.8.0-1020.23~22.04.16.8.0-1021.25~22.04.16.8.0-1025.30~22.04.16.8.0-1026.31~22.04.16.8.0-1027.32~22.04.16.8.0-1028.33~22.04.16.8.0-1029.34~22.04.16.8.0-1030.35~22.04.16.8.0-1031.36~22.04.16.8.0-1034.39~22.04.16.8.0-1036.42~22.04.16.8.0-1040.46~22.04.16.8.0-1041.47~22.04.16.8.0-1044.50~22.04.16.8.0-1051.57~22.04.16.8.0-1052.58~22.04.16.8.0-1059.65~22.04.16.8.0-1062.69~22.04.1 |
6.8.0-1063.71~22.04.1 |
linux-azure-fdeUbuntu:22.04:LTS |
before 5.15.0-1117.126, plus listed versions 5.15.0-1019.24.15.15.0-1024.30.15.15.0-1029.36.15.15.0-1030.37.15.15.0-1031.38.1 Show 45 moreShow less5.15.0-1033.40.15.15.0-1034.41.15.15.0-1035.42.15.15.0-1036.43.15.15.0-1037.44.15.15.0-1038.45.15.15.0-1039.46.15.15.0-1041.48.15.15.0-1042.49.15.15.0-1044.51.15.15.0-1045.52.15.15.0-1046.53.15.15.0-1047.54.15.15.0-1049.56.15.15.0-1050.57.15.15.0-1051.59.15.15.0-1052.60.15.15.0-1053.61.15.15.0-1054.62.15.15.0-1056.64.15.15.0-1057.65.15.15.0-1058.66.15.15.0-1059.67.15.15.0-1060.69.15.15.0-1061.70.15.15.0-1063.72.15.15.0-1064.73.15.15.0-1065.74.15.15.0-1067.76.15.15.0-1068.77.15.15.0-1070.79.15.15.0-1071.80.15.15.0-1072.81.15.15.0-1073.82.15.15.0-1076.85.15.15.0-1078.87.15.15.0-1081.90.15.15.0-1082.91.15.15.0-1084.93.15.15.0-1086.95.15.15.0-1087.96.15.15.0-1088.97.15.15.0-1089.98.15.15.0-1090.99.15.15.0-1091.100.1 |
5.15.0-1117.126 |
linux-azure-fde-5.19Ubuntu:22.04:LTS |
All versions, plus listed versions 5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1 |
None known |
linux-azure-fde-6.2Ubuntu:22.04:LTS |
All versions, plus listed versions 6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1 Show 5 moreShow less6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1 |
None known |
linux-azure-fde-6.8Ubuntu:22.04:LTS |
before 6.8.0-1062.69~22.04.1, plus listed versions 6.8.0-1041.48~22.04.16.8.0-1042.49~22.04.16.8.0-1044.51~22.04.16.8.0-1046.53~22.04.16.8.0-1053.60~22.04.16.8.0-1058.65~22.04.16.8.0-1061.68~22.04.1 |
6.8.0-1062.69~22.04.1 |
linux-gcpUbuntu:22.04:LTS |
before 5.15.0-1112.122, plus listed versions 5.13.0-1005.65.15.0-1001.35.15.0-1002.55.15.0-1003.65.15.0-1004.7 Show 45 moreShow less5.15.0-1005.85.15.0-1006.95.15.0-1008.125.15.0-1010.155.15.0-1013.185.15.0-1016.215.15.0-1017.235.15.0-1018.245.15.0-1019.255.15.0-1021.285.15.0-1022.295.15.0-1025.325.15.0-1026.335.15.0-1027.345.15.0-1029.365.15.0-1030.375.15.0-1031.385.15.0-1032.405.15.0-1034.425.15.0-1035.435.15.0-1036.445.15.0-1037.455.15.0-1038.465.15.0-1039.475.15.0-1040.485.15.0-1041.495.15.0-1042.505.15.0-1044.525.15.0-1045.535.15.0-1046.545.15.0-1047.555.15.0-1048.565.15.0-1049.575.15.0-1051.595.15.0-1052.605.15.0-1053.615.15.0-1054.625.15.0-1055.635.15.0-1058.665.15.0-1059.675.15.0-1060.685.15.0-1062.705.15.0-1063.715.15.0-1064.725.15.0-1065.73 |
5.15.0-1112.122 |
linux-gcp-5.19Ubuntu:22.04:LTS |
All versions, plus listed versions 5.19.0-1020.22~22.04.25.19.0-1021.23~22.04.15.19.0-1022.24~22.04.15.19.0-1024.26~22.04.15.19.0-1025.27~22.04.15.19.0-1026.28~22.04.15.19.0-1027.29~22.04.15.19.0-1030.32~22.04.1 |
None known |
linux-gcp-6.2Ubuntu:22.04:LTS |
All versions, plus listed versions 6.2.0-1009.9~22.04.36.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1011.11~22.04.36.2.0-1012.12~22.04.1 Show 7 moreShow less6.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1016.18~22.04.16.2.0-1017.19~22.04.16.2.0-1018.20~22.04.16.2.0-1019.21~22.04.16.2.0-1021.23~22.04.1 |
None known |
linux-gcp-6.5Ubuntu:22.04:LTS |
All versions, plus listed versions 6.5.0-1010.10~22.04.36.5.0-1011.11~22.04.16.5.0-1013.13~22.04.16.5.0-1014.14~22.04.16.5.0-1015.15~22.04.1 Show 8 moreShow less6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1022.24~22.04.16.5.0-1023.25~22.04.16.5.0-1024.26~22.04.16.5.0-1025.27~22.04.1 |
None known |
linux-gcp-6.8Ubuntu:22.04:LTS |
before 6.8.0-1064.72~22.04.1, plus listed versions 6.8.0-1010.11~22.04.16.8.0-1011.12~22.04.16.8.0-1012.13~22.04.16.8.0-1013.14~22.04.16.8.0-1014.16~22.04.1 Show 35 moreShow less6.8.0-1015.17~22.04.16.8.0-1016.18~22.04.16.8.0-1017.19~22.04.16.8.0-1018.20~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1024.26~22.04.16.8.0-1025.27~22.04.16.8.0-1026.28~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1034.36~22.04.26.8.0-1036.38~22.04.16.8.0-1037.39~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.45~22.04.16.8.0-1043.46~22.04.16.8.0-1044.47~22.04.16.8.0-1045.48~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.26.8.0-1048.51~22.04.16.8.0-1052.55~22.04.16.8.0-1053.56~22.04.16.8.0-1054.57~22.04.16.8.0-1058.61~22.04.16.8.0-1060.63~22.04.16.8.0-1063.69~22.04.1 |
6.8.0-1064.72~22.04.1 |
linux-gkeUbuntu:22.04:LTS |
before 5.15.0-1108.114, plus listed versions 5.15.0-1002.25.15.0-1003.35.15.0-1004.55.15.0-1005.65.15.0-1006.7 Show 45 moreShow less5.15.0-1008.105.15.0-1010.135.15.0-1011.145.15.0-1014.175.15.0-1015.185.15.0-1016.195.15.0-1017.205.15.0-1019.235.15.0-1020.255.15.0-1023.285.15.0-1024.295.15.0-1027.325.15.0-1028.335.15.0-1030.355.15.0-1031.365.15.0-1032.375.15.0-1033.385.15.0-1034.395.15.0-1035.405.15.0-1036.415.15.0-1037.425.15.0-1038.435.15.0-1039.445.15.0-1040.455.15.0-1041.465.15.0-1042.475.15.0-1044.495.15.0-1045.505.15.0-1046.515.15.0-1047.525.15.0-1048.535.15.0-1049.545.15.0-1050.555.15.0-1051.565.15.0-1052.575.15.0-1053.585.15.0-1054.595.15.0-1057.625.15.0-1058.635.15.0-1059.645.15.0-1060.665.15.0-1061.675.15.0-1062.685.15.0-1063.695.15.0-1064.70 |
5.15.0-1108.114 |
linux-gkeopUbuntu:22.04:LTS |
before 5.15.0-1095.103, plus listed versions 5.15.0-1001.25.15.0-1002.45.15.0-1003.55.15.0-1004.65.15.0-1005.7 Show 45 moreShow less5.15.0-1007.105.15.0-1008.125.15.0-1011.155.15.0-1012.165.15.0-1013.175.15.0-1015.195.15.0-1016.215.15.0-1017.225.15.0-1018.235.15.0-1019.245.15.0-1020.255.15.0-1021.265.15.0-1022.275.15.0-1023.285.15.0-1024.295.15.0-1025.305.15.0-1026.315.15.0-1027.325.15.0-1028.335.15.0-1030.355.15.0-1031.375.15.0-1032.385.15.0-1033.395.15.0-1034.405.15.0-1035.415.15.0-1036.425.15.0-1037.435.15.0-1038.445.15.0-1039.455.15.0-1040.465.15.0-1043.505.15.0-1044.515.15.0-1045.525.15.0-1046.535.15.0-1047.545.15.0-1048.555.15.0-1049.565.15.0-1050.575.15.0-1051.585.15.0-1052.595.15.0-1053.605.15.0-1054.615.15.0-1055.625.15.0-1056.635.15.0-1057.64 |
5.15.0-1095.103 |
linux-hwe-5.19Ubuntu:22.04:LTS |
All versions, plus listed versions 5.19.0-28.29~22.04.15.19.0-32.33~22.04.15.19.0-35.36~22.04.15.19.0-38.39~22.04.15.19.0-40.41~22.04.1 Show 6 moreShow less5.19.0-41.42~22.04.15.19.0-42.43~22.04.15.19.0-43.44~22.04.15.19.0-45.46~22.04.15.19.0-46.47~22.04.15.19.0-50.50 |
None known |
linux-hwe-6.2Ubuntu:22.04:LTS |
All versions, plus listed versions 6.2.0-25.25~22.04.26.2.0-26.26~22.04.16.2.0-31.31~22.04.16.2.0-32.32~22.04.16.2.0-33.33~22.04.1 Show 5 moreShow less6.2.0-34.34~22.04.16.2.0-35.35~22.04.16.2.0-36.37~22.04.16.2.0-37.38~22.04.16.2.0-39.40~22.04.1 |
None known |
linux-hwe-6.5Ubuntu:22.04:LTS |
All versions, plus listed versions 6.5.0-14.14~22.04.16.5.0-15.15~22.04.16.5.0-17.17~22.04.16.5.0-18.18~22.04.16.5.0-21.21~22.04.1 Show 8 moreShow less6.5.0-25.25~22.04.16.5.0-26.26~22.04.16.5.0-27.28~22.04.16.5.0-28.29~22.04.16.5.0-35.35~22.04.16.5.0-41.41~22.04.26.5.0-44.44~22.04.16.5.0-45.45~22.04.1 |
None known |
linux-hwe-6.8Ubuntu:22.04:LTS |
before 6.8.0-136.136~22.04.1, plus listed versions 6.8.0-38.38~22.04.16.8.0-39.39~22.04.16.8.0-40.40~22.04.36.8.0-45.45~22.04.16.8.0-47.47~22.04.1 Show 30 moreShow less6.8.0-48.48~22.04.16.8.0-49.49~22.04.16.8.0-50.51~22.04.16.8.0-51.52~22.04.16.8.0-52.53~22.04.16.8.0-57.59~22.04.16.8.0-58.60~22.04.16.8.0-59.61~22.04.16.8.0-60.63~22.04.16.8.0-64.67~22.04.16.8.0-65.68~22.04.16.8.0-78.78~22.04.16.8.0-79.79~22.04.16.8.0-83.83~22.04.16.8.0-84.84~22.04.16.8.0-85.85~22.04.16.8.0-86.87~22.04.16.8.0-87.88~22.04.16.8.0-88.89~22.04.26.8.0-90.91~22.04.16.8.0-94.96~22.04.16.8.0-100.100~22.04.16.8.0-101.101~22.04.16.8.0-106.106~22.04.16.8.0-107.107~22.04.16.8.0-110.110~22.04.16.8.0-111.111~22.04.16.8.0-117.117~22.04.16.8.0-124.124~22.04.16.8.0-134.134~22.04.1 |
6.8.0-136.136~22.04.1 |
linux-ibmUbuntu:22.04:LTS |
before 5.15.0-1106.110, plus listed versions 5.15.0-1002.25.15.0-1003.35.15.0-1004.45.15.0-1005.55.15.0-1007.8 Show 45 moreShow less5.15.0-1009.115.15.0-1010.125.15.0-1012.145.15.0-1013.155.15.0-1015.175.15.0-1017.205.15.0-1018.215.15.0-1021.245.15.0-1022.255.15.0-1023.265.15.0-1025.285.15.0-1026.295.15.0-1027.305.15.0-1028.315.15.0-1029.325.15.0-1030.335.15.0-1031.345.15.0-1032.355.15.0-1033.365.15.0-1034.375.15.0-1035.385.15.0-1036.395.15.0-1037.405.15.0-1038.415.15.0-1040.435.15.0-1041.445.15.0-1042.455.15.0-1043.465.15.0-1044.475.15.0-1045.485.15.0-1046.495.15.0-1047.505.15.0-1048.515.15.0-1049.525.15.0-1050.535.15.0-1053.565.15.0-1054.575.15.0-1055.585.15.0-1056.595.15.0-1057.605.15.0-1058.615.15.0-1059.625.15.0-1060.635.15.0-1061.645.15.0-1062.65 |
5.15.0-1106.110 |
linux-ibm-6.8Ubuntu:22.04:LTS |
before 6.8.0-1061.62~22.04.1, plus listed versions 6.8.0-1008.8~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.16.8.0-1013.13~22.04.1 Show 32 moreShow less6.8.0-1014.14~22.04.16.8.0-1015.15~22.04.16.8.0-1016.16~22.04.16.8.0-1017.17~22.04.16.8.0-1018.18~22.04.16.8.0-1019.19~22.04.16.8.0-1023.23~22.04.16.8.0-1024.24~22.04.16.8.0-1025.25~22.04.16.8.0-1026.26~22.04.16.8.0-1027.27~22.04.16.8.0-1028.28~22.04.16.8.0-1029.29~22.04.16.8.0-1030.30~22.04.16.8.0-1033.33~22.04.16.8.0-1036.36~22.04.16.8.0-1037.37~22.04.16.8.0-1038.38~22.04.16.8.0-1039.39~22.04.16.8.0-1040.40~22.04.16.8.0-1041.41~22.04.16.8.0-1042.42~22.04.16.8.0-1043.43~22.04.16.8.0-1044.44~22.04.16.8.0-1045.45~22.04.16.8.0-1049.49~22.04.16.8.0-1050.50~22.04.16.8.0-1051.51~22.04.16.8.0-1052.52~22.04.16.8.0-1055.56~22.04.16.8.0-1057.58~22.04.16.8.0-1060.61~22.04.1 |
6.8.0-1061.62~22.04.1 |
linux-intel-iot-realtimeUbuntu:22.04:LTS |
All versions, plus listed versions 5.15.0-1073.75 |
None known |
linux-intel-iotgUbuntu:22.04:LTS |
before 5.15.0-1107.113, plus listed versions 5.15.0-1004.65.15.0-1008.115.15.0-1010.145.15.0-1013.175.15.0-1015.20 Show 45 moreShow less5.15.0-1016.215.15.0-1017.225.15.0-1018.235.15.0-1021.265.15.0-1023.285.15.0-1025.305.15.0-1026.315.15.0-1027.325.15.0-1028.335.15.0-1030.355.15.0-1031.365.15.0-1033.385.15.0-1034.395.15.0-1035.405.15.0-1036.415.15.0-1037.425.15.0-1038.435.15.0-1039.455.15.0-1040.465.15.0-1043.495.15.0-1045.515.15.0-1046.525.15.0-1047.535.15.0-1048.545.15.0-1049.555.15.0-1050.565.15.0-1051.575.15.0-1052.585.15.0-1055.615.15.0-1057.635.15.0-1058.645.15.0-1059.655.15.0-1060.665.15.0-1061.675.15.0-1062.685.15.0-1063.695.15.0-1064.705.15.0-1065.715.15.0-1066.725.15.0-1067.735.15.0-1071.775.15.0-1072.785.15.0-1073.795.15.0-1074.805.15.0-1075.81 |
5.15.0-1107.113 |
linux-kvmUbuntu:22.04:LTS |
before 5.15.0-1104.109, plus listed versions 5.13.0-1004.45.13.0-1006.6+22.04.15.13.0-1007.7+22.04.15.13.0-1010.11+22.04.15.15.0-1002.2 Show 45 moreShow less5.15.0-1004.45.15.0-1005.55.15.0-1007.75.15.0-1008.85.15.0-1010.115.15.0-1012.145.15.0-1013.165.15.0-1016.195.15.0-1017.215.15.0-1018.225.15.0-1019.235.15.0-1020.245.15.0-1021.265.15.0-1024.295.15.0-1025.305.15.0-1026.315.15.0-1028.335.15.0-1029.345.15.0-1030.355.15.0-1031.365.15.0-1032.375.15.0-1033.385.15.0-1034.395.15.0-1035.405.15.0-1037.425.15.0-1038.435.15.0-1039.445.15.0-1040.455.15.0-1041.465.15.0-1042.475.15.0-1044.495.15.0-1045.505.15.0-1046.515.15.0-1047.525.15.0-1048.535.15.0-1049.545.15.0-1050.555.15.0-1051.565.15.0-1052.575.15.0-1053.585.15.0-1054.595.15.0-1057.625.15.0-1058.635.15.0-1059.645.15.0-1060.65 |
5.15.0-1104.109 |
linux-lowlatencyUbuntu:22.04:LTS |
before 5.15.0-184.194, plus listed versions 5.15.0-22.225.15.0-23.235.15.0-24.245.15.0-27.285.15.0-30.31 Show 45 moreShow less5.15.0-33.345.15.0-35.365.15.0-37.395.15.0-39.425.15.0-40.435.15.0-41.445.15.0-43.465.15.0-46.495.15.0-47.535.15.0-48.545.15.0-50.565.15.0-52.585.15.0-53.595.15.0-56.625.15.0-57.635.15.0-58.645.15.0-60.665.15.0-67.745.15.0-69.765.15.0-70.775.15.0-71.785.15.0-72.795.15.0-73.805.15.0-75.825.15.0-76.835.15.0-78.855.15.0-79.885.15.0-82.915.15.0-83.925.15.0-84.935.15.0-86.955.15.0-87.965.15.0-88.985.15.0-89.995.15.0-91.1015.15.0-92.1025.15.0-94.1045.15.0-97.1075.15.0-100.1105.15.0-101.1115.15.0-102.1125.15.0-105.1155.15.0-106.1165.15.0-107.1175.15.0-110.120 |
5.15.0-184.194 |
linux-lowlatency-hwe-5.19Ubuntu:22.04:LTS |
All versions, plus listed versions 5.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.1 Show 5 moreShow less5.19.0-1024.25~22.04.15.19.0-1025.26~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1030.30 |
None known |
linux-lowlatency-hwe-6.2Ubuntu:22.04:LTS |
All versions, plus listed versions 6.2.0-1008.8~22.04.16.2.0-1009.9~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.1 Show 5 moreShow less6.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1 |
None known |
dtb-aarch64openSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-64kbopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-azureopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-defaultopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-default-baseopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1.160000.2.19 | 6.12.0-160000.37.1.160000.2.19 |
kernel-docsopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-kvmsmallopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-obs-buildopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-obs-qaopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-rtopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-sourceopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-symsopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-zfcpdumpopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | OSV | |
| affected | OSV | |
| affected | OSV | |
| facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-52969 is a high vulnerability (CVSS 7.8) in Linux, published June 24, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.19%, the 9th percentile. Fixed in linux-lts 6.1.175-r0.
References
git.kernel.org/stable/c/74f1a22f7a80f03d28ad8551a2d25d563433addf
git.kernel.org/stable/c/0eb281eb95b2d4eea4db1da5fe91023aecc97095
git.kernel.org/stable/c/01b71b930f15728aa8599478a7ce90c19dcd9fc2
git.kernel.org/stable/c/b315b033a877b1ee6d827810b5d7bb4392ffcf8d
git.kernel.org/stable/c/0d419c23bb11b5c9664de777c47c1f04a235882d
git.kernel.org/stable/c/ecf9b3ea7847fe14f34b8c41f00de1eb95c747da
Show 194 moreShow less
git.kernel.org/stable/c/577a8d3bae0531f0e5ccfac919cd8192f920a804
access.redhat.com/security/cve/CVE-2026-52969
bugzilla.redhat.com/show_bug.cgi?id=2492434
security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-52969.json
nvd.nist.gov/vuln/detail/CVE-2026-52969
github.com/advisories/GHSA-gpq6-rrxf-v33x
docs.bell-sw.com/security/cves/CVE-2026-52969
errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1787935638.html
nvd.nist.gov/vuln/detail/CVE-2021-46923
nvd.nist.gov/vuln/detail/CVE-2022-48706
nvd.nist.gov/vuln/detail/CVE-2022-48768
nvd.nist.gov/vuln/detail/CVE-2022-48879
nvd.nist.gov/vuln/detail/CVE-2022-48977
nvd.nist.gov/vuln/detail/CVE-2022-49030
nvd.nist.gov/vuln/detail/CVE-2023-52515
nvd.nist.gov/vuln/detail/CVE-2023-52910
nvd.nist.gov/vuln/detail/CVE-2023-52913
nvd.nist.gov/vuln/detail/CVE-2023-53582
nvd.nist.gov/vuln/detail/CVE-2024-43854
nvd.nist.gov/vuln/detail/CVE-2024-49948
nvd.nist.gov/vuln/detail/CVE-2024-50039
nvd.nist.gov/vuln/detail/CVE-2024-56720
nvd.nist.gov/vuln/detail/CVE-2025-21673
nvd.nist.gov/vuln/detail/CVE-2025-38264
nvd.nist.gov/vuln/detail/CVE-2025-40048
nvd.nist.gov/vuln/detail/CVE-2025-54518
nvd.nist.gov/vuln/detail/CVE-2025-68815
nvd.nist.gov/vuln/detail/CVE-2026-23007
nvd.nist.gov/vuln/detail/CVE-2026-23278
nvd.nist.gov/vuln/detail/CVE-2026-31392
nvd.nist.gov/vuln/detail/CVE-2026-31393
nvd.nist.gov/vuln/detail/CVE-2026-31530
nvd.nist.gov/vuln/detail/CVE-2026-31679
nvd.nist.gov/vuln/detail/CVE-2026-43060
nvd.nist.gov/vuln/detail/CVE-2026-43062
nvd.nist.gov/vuln/detail/CVE-2026-43071
nvd.nist.gov/vuln/detail/CVE-2026-43187
nvd.nist.gov/vuln/detail/CVE-2026-43469
nvd.nist.gov/vuln/detail/CVE-2026-43501
nvd.nist.gov/vuln/detail/CVE-2026-45838
nvd.nist.gov/vuln/detail/CVE-2026-45839
nvd.nist.gov/vuln/detail/CVE-2026-45840
nvd.nist.gov/vuln/detail/CVE-2026-45841
nvd.nist.gov/vuln/detail/CVE-2026-45842
nvd.nist.gov/vuln/detail/CVE-2026-45847
nvd.nist.gov/vuln/detail/CVE-2026-45850
nvd.nist.gov/vuln/detail/CVE-2026-45856
nvd.nist.gov/vuln/detail/CVE-2026-45857
nvd.nist.gov/vuln/detail/CVE-2026-45886
nvd.nist.gov/vuln/detail/CVE-2026-45948
nvd.nist.gov/vuln/detail/CVE-2026-45964
nvd.nist.gov/vuln/detail/CVE-2026-45983
errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1788168285.html
github.com/CVEProject/cvelistV5/tree/main/cves/2026/52xxx/CVE-2026-52969.json
git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
security-tracker.debian.org/tracker/CVE-2026-52969
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2026-4039
suse.com/support/update/announcement/2026/suse-su-202622521-1
bugzilla.suse.com/1255029
bugzilla.suse.com/1261604
bugzilla.suse.com/1262618
bugzilla.suse.com/1262655
bugzilla.suse.com/1263072
bugzilla.suse.com/1263560
bugzilla.suse.com/1263573
bugzilla.suse.com/1263998
bugzilla.suse.com/1264001
bugzilla.suse.com/1264015
bugzilla.suse.com/1264228
bugzilla.suse.com/1264230
bugzilla.suse.com/1264236
bugzilla.suse.com/1264241
bugzilla.suse.com/1264254
bugzilla.suse.com/1264258
bugzilla.suse.com/1264261
bugzilla.suse.com/1264286
bugzilla.suse.com/1264294
bugzilla.suse.com/1264320
bugzilla.suse.com/1264337
bugzilla.suse.com/1264562
bugzilla.suse.com/1264612
bugzilla.suse.com/1264734
bugzilla.suse.com/1264748
bugzilla.suse.com/1264814
bugzilla.suse.com/1264974
bugzilla.suse.com/1265113
bugzilla.suse.com/1265421
bugzilla.suse.com/1265629
bugzilla.suse.com/1266008
bugzilla.suse.com/1266396
bugzilla.suse.com/1266700
bugzilla.suse.com/1266717
bugzilla.suse.com/1266734
bugzilla.suse.com/1266830
bugzilla.suse.com/1266847
bugzilla.suse.com/1266899
bugzilla.suse.com/1266928
bugzilla.suse.com/1266929
bugzilla.suse.com/1267228
bugzilla.suse.com/1267365
bugzilla.suse.com/1267369
bugzilla.suse.com/1267427
bugzilla.suse.com/1267430
suse.com/security/cve/CVE-2025-40341
suse.com/security/cve/CVE-2025-71294
suse.com/security/cve/CVE-2026-23451
suse.com/security/cve/CVE-2026-31450
suse.com/security/cve/CVE-2026-31462
suse.com/security/cve/CVE-2026-31466
suse.com/security/cve/CVE-2026-31502
suse.com/security/cve/CVE-2026-31670
suse.com/security/cve/CVE-2026-31677
suse.com/security/cve/CVE-2026-43010
suse.com/security/cve/CVE-2026-43022
suse.com/security/cve/CVE-2026-43034
suse.com/security/cve/CVE-2026-43079
suse.com/security/cve/CVE-2026-43080
suse.com/security/cve/CVE-2026-43081
suse.com/security/cve/CVE-2026-43085
suse.com/security/cve/CVE-2026-43086
suse.com/security/cve/CVE-2026-43089
suse.com/security/cve/CVE-2026-43093
suse.com/security/cve/CVE-2026-43107
suse.com/security/cve/CVE-2026-43128
suse.com/security/cve/CVE-2026-43139
suse.com/security/cve/CVE-2026-43233
suse.com/security/cve/CVE-2026-43238
suse.com/security/cve/CVE-2026-43303
suse.com/security/cve/CVE-2026-43336
suse.com/security/cve/CVE-2026-43420
suse.com/security/cve/CVE-2026-43456
suse.com/security/cve/CVE-2026-43472
suse.com/security/cve/CVE-2026-43492
suse.com/security/cve/CVE-2026-43502
suse.com/security/cve/CVE-2026-45838
suse.com/security/cve/CVE-2026-45848
suse.com/security/cve/CVE-2026-45891
suse.com/security/cve/CVE-2026-45912
suse.com/security/cve/CVE-2026-45948
suse.com/security/cve/CVE-2026-45985
suse.com/security/cve/CVE-2026-46028
suse.com/security/cve/CVE-2026-46053
suse.com/security/cve/CVE-2026-46063
suse.com/security/cve/CVE-2026-46065
suse.com/security/cve/CVE-2026-46069
suse.com/security/cve/CVE-2026-46071
suse.com/security/cve/CVE-2026-46076
ubuntu.com/security/CVE-2026-52969
cve.org/CVERecord?id=CVE-2026-52969
git.kernel.org/linus/577a8d3bae0531f0e5ccfac919cd8192f920a804
ubuntu.com/security/notices/USN-8566-1
ubuntu.com/security/notices/USN-8568-1
ubuntu.com/security/notices/USN-8569-1
ubuntu.com/security/notices/USN-8567-1
ubuntu.com/security/notices/USN-8574-1
ubuntu.com/security/notices/USN-8575-1
ubuntu.com/security/notices/USN-8576-1
ubuntu.com/security/notices/USN-8593-1
ubuntu.com/security/notices/USN-8574-2
ubuntu.com/security/notices/USN-8595-1
ubuntu.com/security/notices/USN-8596-1
ubuntu.com/security/notices/USN-8575-2
ubuntu.com/security/notices/USN-8576-2
ubuntu.com/security/notices/USN-8603-1
ubuntu.com/security/notices/USN-8595-2
ubuntu.com/security/notices/USN-8606-1
ubuntu.com/security/notices/USN-8607-1
ubuntu.com/security/notices/USN-8608-1
ubuntu.com/security/notices/USN-8609-1
ubuntu.com/security/notices/USN-8575-3
ubuntu.com/security/notices/USN-8610-1
ubuntu.com/security/notices/USN-8618-1
ubuntu.com/security/notices/USN-8574-3
ubuntu.com/security/notices/USN-8595-3
ubuntu.com/security/notices/USN-8619-1
ubuntu.com/security/notices/USN-8620-1
ubuntu.com/security/notices/USN-8620-2
ubuntu.com/security/notices/USN-8620-3
ubuntu.com/security/notices/USN-8620-4
ubuntu.com/security/notices/USN-8663-1
ubuntu.com/security/notices/USN-8664-1
ubuntu.com/security/notices/USN-8665-1
ubuntu.com/security/notices/USN-8668-1
ubuntu.com/security/notices/USN-8728-1
ubuntu.com/security/notices/USN-8668-2
ubuntu.com/security/notices/USN-8728-2
ubuntu.com/security/notices/USN-8728-3
ubuntu.com/security/CVE-2025-54518
ubuntu.com/security/CVE-2026-43490
ubuntu.com/security/CVE-2026-43492
ubuntu.com/security/CVE-2026-43495
ubuntu.com/security/CVE-2026-43496
ubuntu.com/security/CVE-2026-43497
ubuntu.com/security/CVE-2026-43498
Left out here: 318 package rows, 737 versions, 4,814 references and the rest of 39 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 14 source records.