CVE-2026-52976

drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl()

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl()

Two error handling issues exist in xe_exec_queue_create_ioctl():

When xe_hw_engine_group_add_exec_queue() fails, the error path jumps to put_exec_queue which skips xe_exec_queue_kill(). If the VM is in preempt fence mode, xe_vm_add_compute_exec_queue() has already added the queue to the VM's compute exec queue list. Skipping the kill leaves the queue on that list, leading to a dangling pointer after the queue is freed.
When xa_alloc() fails after xe_hw_engine_group_add_exec_queue() has succeeded, the error path does not call xe_hw_engine_group_del_exec_queue() to remove the queue from the hw engine group list. The queue is then freed while still linked into the hw engine group, causing a use-after-free.

Fix both by:

Changing the xe_hw_engine_group_add_exec_queue() failure path to jump to kill_exec_queue so that xe_exec_queue_kill() properly removes the queue from the VM's compute list.
Adding a del_hw_engine_group label before kill_exec_queue for the xa_alloc() failure path, which removes the queue from the hw engine group before proceeding with the rest of the cleanup.

(cherry picked from commit 37c831f401746a45d510b312b0ed7a77b1e06ec8)

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.18%Unchanged since Jun 25, 2026

What each source reports

CVE List Score used 7.8

drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl()

In the Linux kernel, the following vulnerability has been resolved:

drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl()

Two error handling issues exist in xe_exec_queue_create_ioctl():

When xe_hw_engine_group_add_exec_queue() fails, the error path jumps to put_exec_queue which skips xe_exec_queue_kill(). If the VM is in preempt fence mode, xe_vm_add_compute_exec_queue() has already added the queue to the VM's compute exec queue list. Skipping the kill leaves the queue on that list, leading to a dangling pointer after the queue is freed.
When xa_alloc() fails after xe_hw_engine_group_add_exec_queue() has succeeded, the error path does not call xe_hw_engine_group_del_exec_queue() to remove the queue from the hw engine group list. The queue is then freed while still linked into the hw engine group, causing a use-after-free.

Fix both by:

Changing the xe_hw_engine_group_add_exec_queue() failure path to jump to kill_exec_queue so that xe_exec_queue_kill() properly removes the queue from the VM's compute list.
Adding a del_hw_engine_group label before kill_exec_queue for the xa_alloc() failure path, which removes the queue from the hw engine group before proceeding with the rest of the cleanup.

(cherry picked from commit 37c831f401746a45d510b312b0ed7a77b1e06ec8)

Record: CVE-2026-52976
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1: 7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-825, CWE-825
Updated: 2026-11-02

EUVDEUVD-2026-38844 7.8

In the Linux kernel, the following vulnerability has been resolved:

drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl()

Two error handling issues exist in xe_exec_queue_create_ioctl():

When xe_hw_engine_group_add_exec_queue() fails, the error path jumps to put_exec_queue which skips xe_exec_queue_kill(). If the VM is in preempt fence mode, xe_vm_add_compute_exec_queue() has already added the queue to the VM's compute exec queue list. Skipping the kill leaves the queue on that list, leading to a dangling pointer after the queue is freed.
When xa_alloc() fails after xe_hw_engine_group_add_exec_queue() has succeeded, the error path does not call xe_hw_engine_group_del_exec_queue() to remove the queue from the hw engine group list. The queue is then freed while still linked into the hw engine group, causing a use-after-free.

Fix both by:

Changing the xe_hw_engine_group_add_exec_queue() failure path to jump to kill_exec_queue so that xe_exec_queue_kill() properly removes the queue from the VM's compute list.
Adding a del_hw_engine_group label before kill_exec_queue for the xa_alloc() failure path, which removes the queue from the hw engine group before proceeding with the rest of the cleanup.

(cherry picked from commit 37c831f401746a45d510b312b0ed7a77b1e06ec8)

Record: EUVD-2026-38844
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-c52j-4pg6-8f2f 7.8

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix error cleanup in...

In the Linux kernel, the following vulnerability has been resolved:

drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl()

Two error handling issues exist in xe_exec_queue_create_ioctl():

When xe_hw_engine_group_add_exec_queue() fails, the error path jumps to put_exec_queue which skips xe_exec_queue_kill(). If the VM is in preempt fence mode, xe_vm_add_compute_exec_queue() has already added the queue to the VM's compute exec queue list. Skipping the kill leaves the queue on that list, leading to a dangling pointer after the queue is freed.
When xa_alloc() fails after xe_hw_engine_group_add_exec_queue() has succeeded, the error path does not call xe_hw_engine_group_del_exec_queue() to remove the queue from the hw engine group list. The queue is then freed while still linked into the hw engine group, causing a use-after-free.

Fix both by:

Changing the xe_hw_engine_group_add_exec_queue() failure path to jump to kill_exec_queue so that xe_exec_queue_kill() properly removes the queue from the VM's compute list.
Adding a del_hw_engine_group label before kill_exec_queue for the xa_alloc() failure path, which removes the queue from the hw engine group before proceeding with the rest of the cleanup.

(cherry picked from commit 37c831f401746a45d510b312b0ed7a77b1e06ec8)

Record: GHSA-c52j-4pg6-8f2f
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-416, CWE-825
Updated: 2026-11-02

NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl()

Two error handling issues exist in xe_exec_queue_create_ioctl():

When xe_hw_engine_group_add_exec_queue() fails, the error path jumps to put_exec_queue which skips xe_exec_queue_kill(). If the VM is in preempt fence mode, xe_vm_add_compute_exec_queue() has already added the queue to the VM's compute exec queue list. Skipping the kill leaves the queue on that list, leading to a dangling pointer after the queue is freed.
When xa_alloc() fails after xe_hw_engine_group_add_exec_queue() has succeeded, the error path does not call xe_hw_engine_group_del_exec_queue() to remove the queue from the hw engine group list. The queue is then freed while still linked into the hw engine group, causing a use-after-free.

Fix both by:

Changing the xe_hw_engine_group_add_exec_queue() failure path to jump to kill_exec_queue so that xe_exec_queue_kill() properly removes the queue from the VM's compute list.
Adding a del_hw_engine_group label before kill_exec_queue for the xa_alloc() failure path, which removes the queue from the hw engine group before proceeding with the rest of the cleanup.

(cherry picked from commit 37c831f401746a45d510b312b0ed7a77b1e06ec8)

Record: CVE-2026-52976
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1: 7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-416, CWE-825
Updated: 2026-11-02

OSVBELL-CVE-2026-52976 7.8

Record: BELL-CVE-2026-52976
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSV 7.8

drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl()

In the Linux kernel, the following vulnerability has been resolved:

drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl()

Two error handling issues exist in xe_exec_queue_create_ioctl():

When xe_hw_engine_group_add_exec_queue() fails, the error path jumps to put_exec_queue which skips xe_exec_queue_kill(). If the VM is in preempt fence mode, xe_vm_add_compute_exec_queue() has already added the queue to the VM's compute exec queue list. Skipping the kill leaves the queue on that list, leading to a dangling pointer after the queue is freed.
When xa_alloc() fails after xe_hw_engine_group_add_exec_queue() has succeeded, the error path does not call xe_hw_engine_group_del_exec_queue() to remove the queue from the hw engine group list. The queue is then freed while still linked into the hw engine group, causing a use-after-free.

Fix both by:

Changing the xe_hw_engine_group_add_exec_queue() failure path to jump to kill_exec_queue so that xe_exec_queue_kill() properly removes the queue from the VM's compute list.
Adding a del_hw_engine_group label before kill_exec_queue for the xa_alloc() failure path, which removes the queue from the hw engine group before proceeding with the rest of the cleanup.

(cherry picked from commit 37c831f401746a45d510b312b0ed7a77b1e06ec8)

Record: CVE-2026-52976
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 30 moreShow less

OSVDEBIAN-CVE-2026-52976 7.8

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() Two error handling issues exist in xe_exec_queue_create_ioctl(): 1. When xe_hw_engine_group_add_exec_queue() fails, the error path jumps to put_exec_queue which skips xe_exec_queue_kill(). If the VM is in preempt fence mode, xe_vm_add_compute_exec_queue() has already added the queue to the VM's compute exec queue list. Skipping the kill leaves the queue on that list, leading to a dangling pointer after the queue is freed. 2. When xa_alloc() fails after xe_hw_engine_group_add_exec_queue() has succeeded, the error path does not call xe_hw_engine_group_del_exec_queue() to remove the queue from the hw engine group list. The queue is then freed while still linked into the hw engine group, causing a use-after-free. Fix both by: - Changing the xe_hw_engine_group_add_exec_queue() failure path to jump to kill_exec_queue so that xe_exec_queue_kill() properly removes the queue from the VM's compute list. - Adding a del_hw_engine_group label before kill_exec_queue for the xa_alloc() failure path, which removes the queue from the hw engine group before proceeding with the rest of the cleanup. (cherry picked from commit 37c831f401746a45d510b312b0ed7a77b1e06ec8)

Record: DEBIAN-CVE-2026-52976
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:42919 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record: RHSA-2026:42919
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:45192 7.0

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record: RHSA-2026:45192
CVSS 3.1: 7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:52667 7.0

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record: RHSA-2026:52667
CVSS 3.1: 7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:52764 8.1

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record: RHSA-2026:52764
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVRLSA-2026:42919 7.8

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CVE-2025-71113)
kernel: Linux kernel: Denial of Service due to memory leak in tpm2_load_cmd (CVE-2025-71147)
kernel: flex_proportions: make fprop_new_period() hardirq safe (CVE-2026-23168)
kernel: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (CVE-2026-31530)
kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (CVE-2026-46116)
kernel: fanotify: fix false positive on permission events (CVE-2026-46150)
kernel: drm: Set old handle to NULL before prime swap in change_handle (CVE-2026-46215)
kernel: drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CVE-2026-52976)
kernel: drm/xe/dma-buf: fix UAF with retry loop (CVE-2026-52950)
kernel: ice: fix double-free of tx_buf skb (CVE-2026-53009)
kernel: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CVE-2026-53071)
kernel: can: bcm: thrtimer use-after-free during RX operation teardown ()

Bug Fix(es) and Enhancement(s):

nfsd_file slab cache objects remaining on kmem_cache_shutdown during nfsd teardown while running bz1477872 testcase (JIRA:Rocky Linux-173103)
tools/lib/perf/Makefile: libperf includes appended after CFLAGS causes parallel build race, breaking kernel builds [rhel-10.2.z] (JIRA:Rocky Linux-183975)
[Rocky Linux10-debug]: BUG: KASAN: slab-use-after-free in __pv_queued_spin_lock_slowpath [rhel-10.2.z] (JIRA:Rocky Linux-186311)
ice: driver update 2026-06, part 1 [rhel-10.2.z] (JIRA:Rocky Linux-191324)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:42919
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:45192 7.0

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (CVE-2025-40026)
kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059)
kernel: drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CVE-2026-52976)
kernel: drm/xe/dma-buf: fix UAF with retry loop (CVE-2026-52950)
kernel: ipv6: fix possible UAF in icmpv6_rcv() (CVE-2026-53006)

Bug Fix(es) and Enhancement(s):

scsi device removal may hang from race with error recovery [rhel-9.8.z] (JIRA:Rocky Linux-187412)
[Rocky Linux9] kvm fixes for 2026-07-21 [rhel-9.8.z] (JIRA:Rocky Linux-213468)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:45192
CVSS 3.1: 7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRXSA-2026:45192 7.0

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (CVE-2025-40026)
kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059)
kernel: drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CVE-2026-52976)
kernel: drm/xe/dma-buf: fix UAF with retry loop (CVE-2026-52950)
kernel: ipv6: fix possible UAF in icmpv6_rcv() (CVE-2026-53006)

Bug Fix(es) and Enhancement(s):

scsi device removal may hang from race with error recovery [rhel-9.8.z] (JIRA:Rocky Linux SIG Cloud-187412)
[Rocky Linux SIG Cloud9] kvm fixes for 2026-07-21 [rhel-9.8.z] (JIRA:Rocky Linux SIG Cloud-213468)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RXSA-2026:45192
CVSS 3.1: 7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2026-52976 7.3

Record: UBUNTU-CVE-2026-52976
CVSS 4.0: 7.3 HighCVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1: 7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-07

OSVALSA-2026:42919 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CVE-2025-71113)
kernel: Linux kernel: Denial of Service due to memory leak in tpm2_load_cmd (CVE-2025-71147)
kernel: flex_proportions: make fprop_new_period() hardirq safe (CVE-2026-23168)
kernel: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (CVE-2026-31530)
kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (CVE-2026-46116)
kernel: fanotify: fix false positive on permission events (CVE-2026-46150)
kernel: drm: Set old handle to NULL before prime swap in change_handle (CVE-2026-46215)
kernel: drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CVE-2026-52976)
kernel: drm/xe/dma-buf: fix UAF with retry loop (CVE-2026-52950)
kernel: ice: fix double-free of tx_buf skb (CVE-2026-53009)
kernel: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CVE-2026-53071)
kernel: can: bcm: thrtimer use-after-free during RX operation teardown ()

Bug Fix(es) and Enhancement(s):

nfsd_file slab cache objects remaining on kmem_cache_shutdown during nfsd teardown while running bz1477872 testcase (JIRA:AlmaLinux-173103)
tools/lib/perf/Makefile: libperf includes appended after CFLAGS causes parallel build race, breaking kernel builds [almalinux-10.2.z] (JIRA:AlmaLinux-183975)
[AlmaLinux10-debug]: BUG: KASAN: slab-use-after-free in __pv_queued_spin_lock_slowpath [almalinux-10.2.z] (JIRA:AlmaLinux-186311)
ice: driver update 2026-06, part 1 [almalinux-10.2.z] (JIRA:AlmaLinux-191324)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:42919
Updated: 2026-11-02

OSVALSA-2026:45192 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (CVE-2025-40026)
kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059)
kernel: drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CVE-2026-52976)
kernel: drm/xe/dma-buf: fix UAF with retry loop (CVE-2026-52950)
kernel: ipv6: fix possible UAF in icmpv6_rcv() (CVE-2026-53006)

Bug Fix(es) and Enhancement(s):

scsi device removal may hang from race with error recovery [almalinux-9.8.z] (JIRA:AlmaLinux-187412)
[AlmaLinux9] kvm fixes for 2026-07-21 [almalinux-9.8.z] (JIRA:AlmaLinux-213468)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:45192
Updated: 2026-11-02

OSVopenSUSE-SU-2026:21555-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
CVE-2026-46023: dm mirror: fix integer…

Record: openSUSE-SU-2026:21555-1
Updated: 2026-11-02

OSVSUSE-SU-2026:23066-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
CVE-2026-46023: dm mirror: fix integer…

Record: SUSE-SU-2026:23066-1
Updated: 2026-11-02

OSVSUSE-SU-2026:23068-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
CVE-2026-46023: dm mirror: fix integer…

Record: SUSE-SU-2026:23068-1
Updated: 2026-11-02

OSVSUSE-SU-2026:23221-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
CVE-2026-46023: dm mirror: fix integer…

Record: SUSE-SU-2026:23221-1
Updated: 2026-11-02

OSVSUSE-SU-2026:23231-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
CVE-2026-46023: dm mirror: fix integer…

Record: SUSE-SU-2026:23231-1
Updated: 2026-11-02

OSVSUSE-SU-2026:23237-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
CVE-2026-46023: dm mirror: fix integer…

Record: SUSE-SU-2026:23237-1
Updated: 2026-11-02

OSVSUSE-SU-2026:3130-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2023-20585: iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 (bsc#1243603).
CVE-2025-71302: drm/panthor: fix for dma-fence safe access rules (bsc#1264837).
CVE-2026-31479: drm/xe: always keep track of remap prev/next (bsc#1262765).
CVE-2026-31503: udp: Fix wildcard bind conflict check when using hash2 (bsc#1263077).
CVE-2026-43019: Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync (bsc#1264003).
CVE-2026-43057: net: mpls: error out if inner headers are not set (bsc#1264056).
CVE-2026-43092: xsk: validate MTU against usable frame size on bind (bsc#1264270).
CVE-2026-43124: pstore: ram_core: fix incorrect success return when vmap() fails (bsc#1264545).
CVE-2026-43157: octeontx2-af: CGX: fix bitmap leaks (bsc#1264624).
CVE-2026-43167: xfrm: always flush state and policy upon NETDEV_UNREGISTER event (bsc#1264580).
CVE-2026-43191: drm/amd/display: Adjust PHY FSM transition to TX_EN-to-PLL_ON for TMDS on DCN35 (bsc#1264548).
CVE-2026-43194: net: consume xmit errors of GSO frames (bsc#1264304).
CVE-2026-43199: net/mlx5e: Fix 'scheduling while atomic' in IPsec MAC address query (bsc#1264556).
CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
CVE-2026-43205: dpaa2-switch: validate num_ifs to prevent out-of-bounds write (bsc#1264328).
CVE-2026-43226: net/rds: No shortcut out of RDS_CONN_ERROR (bsc#1264544).
CVE-2026-43240: ima: verify the previous kernel's IMA buffer lies in addressable RAM (bsc#1264386).
CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
CVE-2026-43248: vhost: move vdpa group bound check to vhost_vdpa (bsc#1264302).
CVE-2026-43253: iommu/amd: move wait_on_sem() out of spinlock (bsc#1260593 bsc#1264419).
CVE-2026-43260: bnxt_en: Fix RSS context delete logic (bsc#1264429).
CVE-2026-43294: drm: renesas: rz-du: mipi_dsi: fix kernel panic when rebooting for some panels (bsc#1264853).
CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
CVE-2026-43320: drm/amd/display: Fix dsc eDP issue (bsc#1264987).
CVE-2026-43337: drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw() (bsc#1265112).
CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
CVE-2026-43373: net: ncsi: fix skb leak in error paths (bsc#1265079).
CVE-2026-43383: net/tcp-md5: Fix MAC comparison to be constant-time (bsc#1264744).
CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
CVE-2026-43449: nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set (bsc#1265023).
CVE-2026-43450: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (bsc#1264794).
CVE-2026-43452: netfilter: x_tables: guard option walkers against 1-byte tail reads (bsc#1265142).
CVE-2026-43465: net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (bsc#1264997).
CVE-2026-43466: net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (bsc#1264790).
CVE-2026-43468: net/mlx5: Fix deadlock between devlink lock and esw->wq (bsc#1264978).
CVE-2026-43473: scsi: mpi3mr: Add NULL checks when resetting request and reply queues (bsc#1264731).
CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
CVE-2026-45857: scsi: csiostor: Fix dereference of null pointer rn (bsc#1266458).
CVE-2026-45858: ext4: subdivide EXT4_EXT_DATA_VALID1 (bsc#1266773).
CVE-2026-45899: ext4: drop extent cache when splitting extent fails (bsc#1266883).
CVE-2026-45920: ext4: fix dirtyclusters double decrement on fs shutdown (bsc#1266893).
CVE-2026-45922: RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (bsc#1266805). -…

Record: SUSE-SU-2026:3130-1
Updated: 2026-11-02

OSVSUSE-SU-2026:3166-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2023-20585: iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 (bsc#1243603).
CVE-2025-71302: drm/panthor: fix for dma-fence safe access rules (bsc#1264837).
CVE-2026-31479: drm/xe: always keep track of remap prev/next (bsc#1262765).
CVE-2026-31503: udp: Fix wildcard bind conflict check when using hash2 (bsc#1263077).
CVE-2026-43019: Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync (bsc#1264003).
CVE-2026-43057: net: mpls: error out if inner headers are not set (bsc#1264056).
CVE-2026-43092: xsk: validate MTU against usable frame size on bind (bsc#1264270).
CVE-2026-43124: pstore: ram_core: fix incorrect success return when vmap() fails (bsc#1264545).
CVE-2026-43157: octeontx2-af: CGX: fix bitmap leaks (bsc#1264624).
CVE-2026-43167: xfrm: always flush state and policy upon NETDEV_UNREGISTER event (bsc#1264580).
CVE-2026-43191: drm/amd/display: Adjust PHY FSM transition to TX_EN-to-PLL_ON for TMDS on DCN35 (bsc#1264548).
CVE-2026-43194: net: consume xmit errors of GSO frames (bsc#1264304).
CVE-2026-43199: net/mlx5e: Fix 'scheduling while atomic' in IPsec MAC address query (bsc#1264556).
CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
CVE-2026-43205: dpaa2-switch: validate num_ifs to prevent out-of-bounds write (bsc#1264328).
CVE-2026-43226: net/rds: No shortcut out of RDS_CONN_ERROR (bsc#1264544).
CVE-2026-43240: ima: verify the previous kernel's IMA buffer lies in addressable RAM (bsc#1264386).
CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
CVE-2026-43248: vhost: move vdpa group bound check to vhost_vdpa (bsc#1264302).
CVE-2026-43253: iommu/amd: move wait_on_sem() out of spinlock (bsc#1260593 bsc#1264419).
CVE-2026-43260: bnxt_en: Fix RSS context delete logic (bsc#1264429).
CVE-2026-43294: drm: renesas: rz-du: mipi_dsi: fix kernel panic when rebooting for some panels (bsc#1264853).
CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
CVE-2026-43320: drm/amd/display: Fix dsc eDP issue (bsc#1264987).
CVE-2026-43337: drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw() (bsc#1265112).
CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
CVE-2026-43373: net: ncsi: fix skb leak in error paths (bsc#1265079).
CVE-2026-43383: net/tcp-md5: Fix MAC comparison to be constant-time (bsc#1264744).
CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
CVE-2026-43449: nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set (bsc#1265023).
CVE-2026-43450: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (bsc#1264794).
CVE-2026-43452: netfilter: x_tables: guard option walkers against 1-byte tail reads (bsc#1265142).
CVE-2026-43465: net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (bsc#1264997).
CVE-2026-43466: net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (bsc#1264790).
CVE-2026-43468: net/mlx5: Fix deadlock between devlink lock and esw->wq (bsc#1264978).
CVE-2026-43473: scsi: mpi3mr: Add NULL checks when resetting request and reply queues (bsc#1264731).
CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
CVE-2026-45857: scsi: csiostor: Fix dereference of null pointer rn (bsc#1266458).
CVE-2026-45858: ext4: subdivide EXT4_EXT_DATA_VALID1 (bsc#1266773).
CVE-2026-45899: ext4: drop extent cache when splitting extent fails (bsc#1266883).
CVE-2026-45920: ext4: fix dirtyclusters double decrement on fs shutdown (bsc#1266893).
CVE-2026-45922: RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (bsc#1266805). -…

Record: SUSE-SU-2026:3166-1
Updated: 2026-11-02

OSVUSN-8566-1 No score

linux, linux-gcp, linux-gke, linux-realtime vulnerabilities

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

PSP security protocol;
ARM64 architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Intel NPU Driver;
DRBD Distributed Replicated Block Device drivers;
Ublk userspace block driver;
Bluetooth drivers;
Bus devices;
Character device driver;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
EDAC drivers;
EFI core;
FWCTL subsystem;
GPU drivers;
HID subsystem;
I3C subsystem;
InfiniBand drivers;
IOMMU subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
NVIDIA Tegra memory controller driver;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
MediaTek network drivers;
NVME drivers;
PCI subsystem;
Pin controllers subsystem;
Chrome hardware platform drivers;
ACPI WMI driver;
x86 platform drivers;
Generic PM domains;
MediaTek PM domains;
Power supply drivers;
MPAM driver;
Amlogic Meson reset controller drivers;
S/390 drivers;
SCSI subsystem;
NVIDIA Tegra Control Backbone (CBB) driver;
SPI subsystem;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
TCM subsystem;
TTY drivers;
USB Device Class drivers;
ULPI bus;
USB Type-C support driver;
TI TPS6598x USB Power Delivery controller driver;
vDPA drivers;
VFIO drivers;
Framebuffer layer;
TSM AMD SEV Guest driver;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EROFS file system;
F2FS file system;
FUSE (File system in Userspace);
GFS2 file system;
HFS+ file system;
HugeTLB file system;
Network file system (NFS) server daemon;
NILFS2 file system;
File system notification infrastructure;
NTFS3 file system;
OCFS2 file system;
Overlay file system;
Diskquota system;
SMB network file system;
Tracing file system;
DRM TTM subsystem;
Control group (cgroup);
Kernel CPU control infrastructure;
QorIQ DPAA2 FSL-MC bus driver;
Freescale ENETC Ethernet drivers;
Memory Management;
padata parallel execution mechanism;
PPP protocol drivers and compressors;
Bluetooth subsystem;
Networking core;
Netfilter;
Network traffic control;
io_uring subsystem;
IPC subsystem;
Audit subsystem;
BPF subsystem;
Kernel exit() syscall;
Kernel fork() syscall;
Kernel futex primitives;
Padata parallel execution mechanism;
Scheduler infrastructure;
Tracing infrastructure;
Cryptographic library;
Memory management;
802.1Q VLAN protocol;
B.A.T.M.A.N. meshing protocol;
Ethernet bridge;
Ceph Core library;
Distributed Switch Architecture;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Open vSwitch;
Phonet protocol;
RDS protocol;
SCTP protocol;
SMC sockets;
TIPC protocol;
TLS protocol;
Unix domain sockets;
VMware vSockets driver;
XFRM subsystem;
Integrity Measurement Architecture(IMA) framework;
SELinux security module;
ALSA framework;
HD-audio driver;
QCOM ASoC drivers; -…

Record: USN-8566-1
Updated: 2026-11-07

OSVUSN-8568-1 No score

linux-oem-7.0 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

PSP security protocol;
ARM64 architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Intel NPU Driver;
DRBD Distributed Replicated Block Device drivers;
Ublk userspace block driver;
Bluetooth drivers;
Bus devices;
Character device driver;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
EDAC drivers;
EFI core;
FWCTL subsystem;
GPU drivers;
HID subsystem;
I3C subsystem;
InfiniBand drivers;
IOMMU subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
NVIDIA Tegra memory controller driver;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
MediaTek network drivers;
NVME drivers;
PCI subsystem;
Pin controllers subsystem;
Chrome hardware platform drivers;
ACPI WMI driver;
x86 platform drivers;
Generic PM domains;
MediaTek PM domains;
Power supply drivers;
MPAM driver;
Amlogic Meson reset controller drivers;
S/390 drivers;
SCSI subsystem;
NVIDIA Tegra Control Backbone (CBB) driver;
SPI subsystem;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
TCM subsystem;
TTY drivers;
USB Device Class drivers;
ULPI bus;
USB Type-C support driver;
TI TPS6598x USB Power Delivery controller driver;
vDPA drivers;
VFIO drivers;
Framebuffer layer;
TSM AMD SEV Guest driver;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EROFS file system;
F2FS file system;
FUSE (File system in Userspace);
GFS2 file system;
HFS+ file system;
HugeTLB file system;
Network file system (NFS) server daemon;
NILFS2 file system;
File system notification infrastructure;
NTFS3 file system;
OCFS2 file system;
Diskquota system;
SMB network file system;
Tracing file system;
DRM TTM subsystem;
Control group (cgroup);
Kernel CPU control infrastructure;
QorIQ DPAA2 FSL-MC bus driver;
Freescale ENETC Ethernet drivers;
Memory Management;
padata parallel execution mechanism;
PPP protocol drivers and compressors;
Bluetooth subsystem;
Networking core;
Netfilter;
Network traffic control;
io_uring subsystem;
IPC subsystem;
Audit subsystem;
BPF subsystem;
Kernel exit() syscall;
Kernel fork() syscall;
Kernel futex primitives;
Padata parallel execution mechanism;
Scheduler infrastructure;
Tracing infrastructure;
Cryptographic library;
Memory management;
802.1Q VLAN protocol;
B.A.T.M.A.N. meshing protocol;
Ethernet bridge;
Ceph Core library;
Distributed Switch Architecture;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Open vSwitch;
Phonet protocol;
RDS protocol;
SCTP protocol;
SMC sockets;
TIPC protocol;
TLS protocol;
Unix domain sockets;
VMware vSockets driver;
XFRM subsystem;
Integrity Measurement Architecture(IMA) framework;
SELinux security module;
ALSA framework;
HD-audio driver;
QCOM ASoC drivers;
SOF drivers;
STI ASoC…

Record: USN-8568-1
Updated: 2026-11-07

OSVUSN-8569-1 No score

linux-hwe-7.0 vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43284, CVE-2026-43500, CVE-2026-45998, CVE-2026-46000)

It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43503, CVE-2026-46300)

Qualys discovered that a race condition existed in the ptrace subsystem of the Linux kernel when privileged processes are exiting. An unprivileged local attacker could use this issue to expose sensitive information. (CVE-2026-46333)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contain a memory leak when handling AppArmor notifications. A local attacker could use this to cause resource exhaustion. (CVE-2026-47326)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contain a NULL pointer dereference when handling AppArmor notifications. A local attacker could use this to cause a kernel oops. (CVE-2026-47327)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained an invalid free when handling AppArmor notifications. A local attacker could use this to corrupt kernel memory. (CVE-2026-47328)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained insufficient validation of AppArmor notification responses. A local attacker could use this to allow crafted responses to be processed. (CVE-2026-47329)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 used an uninitialized variable when handling AppArmor notifications. A local attacker could use this to cause incorrect caching of data. (CVE-2026-47330)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained an out-of-bounds (OOB) read when handling AppArmor notifications. A local attacker could use this to cause information disclosure of kernel memory. (CVE-2026-47332)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained a out-of-bounds (OOB) read when handling AppArmor notifications. A local attacker could use this to cause kernel memory corruption and, theoretically, influence processing of AppArmor policies. (CVE-2026-47333)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained incorrect holding of locks when handling AppArmor notifications. A local attacker could use this to cause a kernel panic or deadlock. (CVE-2026-47334)

Tristan Madani and Trevor Lawrence have each independently discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained a NULL pointer dereference when handling AppArmor network socket mediation. A local attacker could use this to cause a kernel oops. (CVE-2026-47337)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

PSP security protocol;
ARM64 architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Intel…

Record: USN-8569-1
Updated: 2026-11-07

OSVUSN-8593-1 No score

linux-ibm, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

x86 platform drivers;
PSP security protocol;
ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Intel NPU Driver;
Compute Acceleration Framework;
ACPI drivers;
Auxiliary display drivers;
Drivers core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
Character device driver;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
DPLL subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
EFI core;
FWCTL subsystem;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
IOMMU subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
NVIDIA Tegra memory controller driver;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Texas Instruments network drivers;
MediaTek network drivers;
NVME drivers;
Parport drivers;
PCI subsystem;
Pin controllers subsystem;
Chrome hardware platform drivers;
ACPI WMI driver;
Generic PM domains;
MediaTek PM domains;
Power supply drivers;
MPAM driver;
Amlogic Meson reset controller drivers;
S/390 drivers;
SCSI subsystem;
NVIDIA Tegra Control Backbone (CBB) driver;
SPI subsystem;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
TCM subsystem;
Thunderbolt and USB4 drivers;
TTY drivers;
Userspace I/O drivers;
USB Device Class drivers;
ULPI bus;
DesignWare USB2 driver;
USB Gadget drivers;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
TI TPS6598x USB Power Delivery controller driver;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
vDPA drivers;
VFIO drivers;
Framebuffer layer;
TSM AMD SEV Guest driver;
Xen hypervisor drivers;
9P distributed file system;
File systems infrastructure;
AFS file system;
BTRFS file system;
Ceph distributed file system;
EROFS file system;
F2FS file system;
FUSE (File system in Userspace);
GFS2 file system;
HFS+ file system;
HugeTLB file system;
Network file systems library;
Network file system (NFS) server daemon;
NILFS2 file system;
File system notification infrastructure;
NTFS3 file system;
OCFS2 file system;
Overlay file system;
Diskquota system;
SMB network file system;
Tracing file system;
UDF file system;
DRM TTM subsystem;
Control group (cgroup);
Kernel CPU control infrastructure;
Tracing infrastructure;
QorIQ DPAA2 FSL-MC bus driver;
Freescale ENETC Ethernet drivers;
Memory management;
Memory Management;
Linked list library;
Netfilter;
padata…

Record: USN-8593-1
Updated: 2026-11-07

OSVUSN-8603-1 No score

linux-azure, linux-azure-fde vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

x86 platform drivers;
PSP security protocol;
ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Intel NPU Driver;
Compute Acceleration Framework;
ACPI drivers;
Auxiliary display drivers;
Drivers core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
DPLL subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
EFI core;
FWCTL subsystem;
GPIO subsystem;
GPU drivers;
Greybus drivers;
HID subsystem;
Microsoft Hyper-V drivers;
Hardware monitoring drivers;
I2C subsystem;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
IOMMU subsystem;
LED subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
NVIDIA Tegra memory controller driver;
IBM Advanced System Management driver;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Texas Instruments network drivers;
MediaTek network drivers;
NTB driver;
NVME drivers;
Device tree and open firmware driver;
Parport drivers;
PCI subsystem;
Pin controllers subsystem;
Chrome hardware platform drivers;
ACPI WMI driver;
Generic PM domains;
MediaTek PM domains;
Power supply drivers;
Remote Processor subsystem;
MPAM driver;
Amlogic Meson reset controller drivers;
S/390 drivers;
SCSI subsystem;
NVIDIA Tegra Control Backbone (CBB) driver;
SPI subsystem;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
SM750 framebuffer staging driver;
TCM subsystem;
Thermal drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
Userspace I/O drivers;
USB Device Class drivers;
ULPI bus;
DesignWare USB2 driver;
USB Gadget drivers;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
TI TPS6598x USB Power Delivery controller driver;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
vDPA drivers;
VFIO drivers;
Framebuffer layer;
TSM AMD SEV Guest driver;
Xen hypervisor drivers;
9P distributed file system;
File systems infrastructure;
AFS file system;
BTRFS file system;
Ceph distributed file system;
EROFS file system;
Ext4 file system;
F2FS file system;
FUSE (File system in Userspace);
GFS2 file system;
HFS+ file system;
HugeTLB file system;
Journaling layer for block devices (JBD2);
Network file systems…

Record: USN-8603-1
Updated: 2026-11-07

OSVUSN-8618-1 No score

linux-aws, linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

x86 platform drivers;
Cryptographic API;
PSP security protocol;
ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Intel NPU Driver;
Compute Acceleration Framework;
ACPI drivers;
Auxiliary display drivers;
Drivers core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
Character device driver;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
DPLL subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
EFI core;
FWCTL subsystem;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Mouse) drivers;
IOMMU subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
NVIDIA Tegra memory controller driver;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Texas Instruments network drivers;
MediaTek network drivers;
NVME drivers;
Parport drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
Chrome hardware platform drivers;
ACPI WMI driver;
Generic PM domains;
MediaTek PM domains;
Power supply drivers;
Voltage and Current Regulator drivers;
MPAM driver;
Amlogic Meson reset controller drivers;
S/390 drivers;
SCSI subsystem;
NVIDIA Tegra Control Backbone (CBB) driver;
SPI subsystem;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
TCM subsystem;
Thunderbolt and USB4 drivers;
TTY drivers;
Userspace I/O drivers;
USB Device Class drivers;
ULPI bus;
DesignWare USB2 driver;
USB Gadget drivers;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
TI TPS6598x USB Power Delivery controller driver;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
vDPA drivers;
VFIO drivers;
Framebuffer layer;
TSM AMD SEV Guest driver;
Xen hypervisor drivers;
9P distributed file system;
File systems infrastructure;
AFS file system;
BTRFS file system;
Ceph distributed file system;
EROFS file system;
F2FS file system;
FUSE (File system in Userspace);
GFS2 file system;
HFS+ file system;
HugeTLB file system;
Network file systems library;
Network file system (NFS) server daemon;
NILFS2 file system;
File system notification infrastructure;
NTFS3 file system;
OCFS2 file system;
Overlay file system;
Diskquota system;
SMB network file system;
Tracing file system;
UDF file system;
DRM TTM subsystem;
Control group (cgroup);
Kernel CPU control infrastructure;
Tracing infrastructure;
QorIQ DPAA2 FSL-MC bus driver;
Freescale ENETC Ethernet drivers; -…

Record: USN-8618-1
Updated: 2026-11-07

OSVUSN-8663-1 No score

linux-nvidia, linux-nvidia-7.0 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

x86 platform drivers;
Cryptographic API;
PSP security protocol;
ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Intel NPU Driver;
Compute Acceleration Framework;
ACPI drivers;
Auxiliary display drivers;
Drivers core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
Character device driver;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
DPLL subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
EFI core;
FWCTL subsystem;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Mouse) drivers;
IOMMU subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
NVIDIA Tegra memory controller driver;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Texas Instruments network drivers;
MediaTek network drivers;
NVME drivers;
Parport drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
Chrome hardware platform drivers;
ACPI WMI driver;
Generic PM domains;
MediaTek PM domains;
Power supply drivers;
Voltage and Current Regulator drivers;
MPAM driver;
Amlogic Meson reset controller drivers;
S/390 drivers;
SCSI subsystem;
NVIDIA Tegra Control Backbone (CBB) driver;
SPI subsystem;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
TCM subsystem;
Thunderbolt and USB4 drivers;
TTY drivers;
Userspace I/O drivers;
USB Device Class drivers;
ULPI bus;
DesignWare USB2 driver;
USB Gadget drivers;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
TI TPS6598x USB Power Delivery controller driver;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
vDPA drivers;
VFIO drivers;
Framebuffer layer;
TSM AMD SEV Guest driver;
Xen hypervisor drivers;
9P distributed file system;
File systems infrastructure;
AFS file system;
BTRFS file system;
Ceph distributed file system;
EROFS file system;
F2FS file system;
FUSE (File system in Userspace);
GFS2 file system;
HFS+ file system;
HugeTLB file system;
Network file systems library;
Network file system (NFS) server daemon;
NILFS2 file system;
File system notification infrastructure;
NTFS3 file system;
OCFS2 file system;
Overlay file system;
Diskquota system;
SMB network file system;
Tracing file system;
UDF file system;
DRM TTM subsystem;
Control group (cgroup);
Kernel CPU control infrastructure;
Tracing infrastructure;
QorIQ DPAA2 FSL-MC bus driver;
Freescale ENETC Ethernet drivers; -…

Record: USN-8663-1
Updated: 2026-11-07

OSVUSN-8664-1 No score

linux-nvidia-bos vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

x86 platform drivers;
Cryptographic API;
PSP security protocol;
ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Intel NPU Driver;
Compute Acceleration Framework;
ACPI drivers;
Auxiliary display drivers;
Drivers core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
Character device driver;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
DPLL subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
EFI core;
FWCTL subsystem;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Mouse) drivers;
IOMMU subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
NVIDIA Tegra memory controller driver;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Texas Instruments network drivers;
MediaTek network drivers;
NVME drivers;
Parport drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
Chrome hardware platform drivers;
ACPI WMI driver;
Generic PM domains;
MediaTek PM domains;
Power supply drivers;
Voltage and Current Regulator drivers;
MPAM driver;
Amlogic Meson reset controller drivers;
S/390 drivers;
SCSI subsystem;
NVIDIA Tegra Control Backbone (CBB) driver;
SPI subsystem;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
TCM subsystem;
Thunderbolt and USB4 drivers;
TTY drivers;
Userspace I/O drivers;
USB Device Class drivers;
ULPI bus;
DesignWare USB2 driver;
USB Gadget drivers;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
TI TPS6598x USB Power Delivery controller driver;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
vDPA drivers;
VFIO drivers;
Framebuffer layer;
TSM AMD SEV Guest driver;
Xen hypervisor drivers;
9P distributed file system;
File systems infrastructure;
AFS file system;
BTRFS file system;
Ceph distributed file system;
EROFS file system;
F2FS file system;
FUSE (File system in Userspace);
GFS2 file system;
HFS+ file system;
HugeTLB file system;
Network file systems library;
Network file system (NFS) server daemon;
NILFS2 file system;
File system notification infrastructure;
NTFS3 file system;
OCFS2 file system;
Overlay file system;
Diskquota system;
SMB network file system;
Tracing file system;
UDF file system;
DRM TTM subsystem;
Control group (cgroup);
Kernel CPU control infrastructure;
Tracing infrastructure;
QorIQ DPAA2 FSL-MC bus driver;
Freescale ENETC Ethernet drivers; -…

Record: USN-8664-1
Updated: 2026-11-07

OSVUSN-8728-1 No score

linux-gcp-7.0 vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

x86 platform drivers;
ARM64 architecture;
Cryptographic API;
PSP security protocol;
User-space API (UAPI);
Kernel build system;
ARM32 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Compute Acceleration Framework;
Intel NPU Driver;
ACPI drivers;
Android drivers;
Auxiliary display drivers;
Drivers core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
Character device driver;
Hardware random number generator core;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
DPLL subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
EFI core;
Intel Stratix 10 firmware drivers;
FPGA Framework;
FWCTL subsystem;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
CoreSight HW tracing drivers;
I2C subsystem;
I3C subsystem;
IIO subsystem;
IIO ADC drivers;
InfiniBand drivers;
Input Device core drivers;
Input Device (Mouse) drivers;
IOMMU subsystem;
IRQ chip drivers;
Mailbox framework;
Multiple devices driver;
Media drivers;
NVIDIA Tegra memory controller driver;
Multifunction device drivers;
Fastrpc Driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Texas Instruments network drivers;
MediaTek network drivers;
NTB driver;
NVME drivers;
NVMEM (Non Volatile Memory) drivers;
Parport drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
Chrome hardware platform drivers;
ACPI WMI driver;
Generic PM domains;
MediaTek PM domains;
System reset/shutdown drivers;
Power sequencing drivers;
Power supply drivers;
PTP clock framework;
Voltage and Current Regulator drivers;
MPAM driver;
Amlogic Meson reset controller drivers;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
SLIMbus drivers;
NVIDIA Tegra Control Backbone (CBB) driver;
SPI subsystem;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
VME bus staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
Userspace I/O drivers;
Cadence USB3 driver;
USB Device Class drivers;
ULPI bus;
DesignWare USB2 driver;
DesignWare USB3 driver;
Faraday FOTG210 USB2 dual-role controller driver;
USB Gadget drivers;
USB Host Controller drivers;
USB ChaosKey driver;
Siemens ID Mouse USB driver;
IOWarrior USB driver;
LD Didactic USB driver;
LEGO USB…

Record: USN-8728-1
Updated: 2026-11-07

OSVUSN-8728-2 No score

linux-azure-7.0 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

x86 platform drivers;
ARM64 architecture;
Cryptographic API;
PSP security protocol;
User-space API (UAPI);
Kernel build system;
ARM32 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Compute Acceleration Framework;
Intel NPU Driver;
ACPI drivers;
Android drivers;
Auxiliary display drivers;
Drivers core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
Character device driver;
Hardware random number generator core;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
DPLL subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
EFI core;
Intel Stratix 10 firmware drivers;
FPGA Framework;
FWCTL subsystem;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
CoreSight HW tracing drivers;
I2C subsystem;
I3C subsystem;
IIO subsystem;
IIO ADC drivers;
InfiniBand drivers;
Input Device core drivers;
Input Device (Mouse) drivers;
IOMMU subsystem;
IRQ chip drivers;
Mailbox framework;
Multiple devices driver;
Media drivers;
NVIDIA Tegra memory controller driver;
Multifunction device drivers;
Fastrpc Driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Texas Instruments network drivers;
MediaTek network drivers;
NTB driver;
NVME drivers;
NVMEM (Non Volatile Memory) drivers;
Parport drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
Chrome hardware platform drivers;
ACPI WMI driver;
Generic PM domains;
MediaTek PM domains;
System reset/shutdown drivers;
Power sequencing drivers;
Power supply drivers;
PTP clock framework;
Voltage and Current Regulator drivers;
MPAM driver;
Amlogic Meson reset controller drivers;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
SLIMbus drivers;
NVIDIA Tegra Control Backbone (CBB) driver;
SPI subsystem;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
VME bus staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
Userspace I/O drivers;
Cadence USB3 driver;
USB Device Class drivers;
ULPI bus;
DesignWare USB2 driver;
DesignWare USB3 driver;
Faraday FOTG210 USB2 dual-role controller driver;
USB Gadget drivers;
USB Host Controller drivers;
USB ChaosKey driver;
Siemens ID Mouse USB driver;
IOWarrior USB driver;
LD Didactic USB driver;
LEGO USB…

Record: USN-8728-2
Updated: 2026-11-07

OSVUSN-8728-3 No score

linux-oracle-7.0 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

x86 platform drivers;
ARM64 architecture;
Cryptographic API;
PSP security protocol;
User-space API (UAPI);
Kernel build system;
ARM32 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Compute Acceleration Framework;
Intel NPU Driver;
ACPI drivers;
Android drivers;
Auxiliary display drivers;
Drivers core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
Character device driver;
Hardware random number generator core;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
DPLL subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
EFI core;
Intel Stratix 10 firmware drivers;
FPGA Framework;
FWCTL subsystem;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
CoreSight HW tracing drivers;
I2C subsystem;
I3C subsystem;
IIO subsystem;
IIO ADC drivers;
InfiniBand drivers;
Input Device core drivers;
Input Device (Mouse) drivers;
IOMMU subsystem;
IRQ chip drivers;
Mailbox framework;
Multiple devices driver;
Media drivers;
NVIDIA Tegra memory controller driver;
Multifunction device drivers;
Fastrpc Driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Texas Instruments network drivers;
MediaTek network drivers;
NTB driver;
NVME drivers;
NVMEM (Non Volatile Memory) drivers;
Parport drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
Chrome hardware platform drivers;
ACPI WMI driver;
Generic PM domains;
MediaTek PM domains;
System reset/shutdown drivers;
Power sequencing drivers;
Power supply drivers;
PTP clock framework;
Voltage and Current Regulator drivers;
MPAM driver;
Amlogic Meson reset controller drivers;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
SLIMbus drivers;
NVIDIA Tegra Control Backbone (CBB) driver;
SPI subsystem;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
VME bus staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
Userspace I/O drivers;
Cadence USB3 driver;
USB Device Class drivers;
ULPI bus;
DesignWare USB2 driver;
DesignWare USB3 driver;
Faraday FOTG210 USB2 dual-role controller driver;
USB Gadget drivers;
USB Host Controller drivers;
USB ChaosKey driver;
Siemens ID Mouse USB driver;
IOWarrior USB driver;
LD Didactic USB driver;
LEGO USB…

Record: USN-8728-3
Updated: 2026-11-07

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`kernel` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-64k` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-64k-core` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-64k-debug` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-64k-debug-core` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-64k-debug-devel` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-64k-debug-devel-matched` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-64k-debug-modules` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-64k-debug-modules-core` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-64k-debug-modules-extra` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-64k-devel` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-64k-devel-matched` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-64k-modules` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-64k-modules-core` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-64k-modules-extra` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-abi-stablelists` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-core` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-cross-headers` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-debug` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-debug-core` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-debug-devel` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-debug-devel-matched` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-debug-modules` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-debug-modules-core` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-debug-modules-extra` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-debug-uki-virt` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-devel` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-devel-matched` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-doc` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-headers` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-modules` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-modules-core` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-modules-extra` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-modules-extra-matched` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-rt` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-rt-64k` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-rt-64k-core` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-rt-64k-debug` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-rt-64k-debug-core` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-rt-64k-debug-devel` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-rt-64k-debug-modules` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-rt-64k-debug-modules-core` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-rt-64k-debug-modules-extra` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-rt-64k-devel` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-rt-64k-modules` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-rt-64k-modules-core` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-rt-64k-modules-extra` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-rt-core` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-rt-debug` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-rt-debug-core` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-rt-debug-devel` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-rt-debug-modules` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-rt-debug-modules-core` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-rt-debug-modules-extra` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-rt-devel` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-rt-modules` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-rt-modules-core` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-rt-modules-extra` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-tools` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-tools-libs` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-tools-libs-devel` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-uki-virt` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-uki-virt-addons` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-zfcpdump` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-zfcpdump-core` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-zfcpdump-devel` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-zfcpdump-devel-matched` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-zfcpdump-modules` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-zfcpdump-modules-core` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel-zfcpdump-modules-extra` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`libperf` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`perf` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`python3-perf` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`rtla` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`rv` AlmaLinux:10 From an advisory covering 12 CVEs	before 6.12.0-211.37.1.el10_2	6.12.0-211.37.1.el10_2
`kernel` AlmaLinux:9 From an advisory covering 6 CVEs	before 5.14.0-687.30.1.el9_8	5.14.0-687.30.1.el9_8
`kernel-64k` AlmaLinux:9 From an advisory covering 6 CVEs	before 5.14.0-687.30.1.el9_8	5.14.0-687.30.1.el9_8
`kernel-64k-core` AlmaLinux:9 From an advisory covering 6 CVEs	before 5.14.0-687.30.1.el9_8	5.14.0-687.30.1.el9_8
`linux-lts` Alpaquita:25	6.12.87-r0 up to 6.12.92-r0	6.12.92-r0
`linux-lts` Alpaquita:stream	6.12.92-r1 up to 6.18.35-r1	6.18.35-r1
`Kernel` Linux	6.12.0 up to 6.12.91, 6.13.0 up to 6.18.33, 6.19.0 up to 7.0.10	6.12.916.18.337.0.10
`linux` Debian:13	before 6.12.94-1, plus listed versions 6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-1 Show 22 moreShow less 6.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-1~bpo12+1	6.12.94-1
`linux` Debian:14	before 7.0.10-1, plus listed versions 6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1 Show 45 moreShow less 6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1	7.0.10-1
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-64k-debug-devel` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-64k-debug-devel-matched` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-64k-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-64k-devel` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-64k-devel-matched` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-debug-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-debug-devel` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-debug-devel-matched` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-devel` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-devel-matched` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-doc` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-rt-64k-debug-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-rt-64k-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-rt-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-tools-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-zfcpdump-devel-matched` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`libperf-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`perf` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`perf-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`python3-perf` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`python3-perf-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`rtla` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`rv` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-64k` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-64k-core` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-64k-debug` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-64k-debug-core` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-64k-debug-modules` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-64k-debug-modules-core` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-64k-debug-modules-extra` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-64k-modules` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-64k-modules-core` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-64k-modules-extra` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-abi-stablelists` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-core` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-debug` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-debug-core` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-debug-modules` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-debug-modules-core` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-debug-modules-extra` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-debug-uki-virt` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-modules` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-modules-core` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-modules-extra` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-modules-extra-matched` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-tools` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-tools-libs` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-uki-virt` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-uki-virt-addons` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-zfcpdump` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-zfcpdump-core` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-zfcpdump-modules` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-zfcpdump-modules-core` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-zfcpdump-modules-extra` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-tools-libs-devel` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`libperf` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-rt` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-rt-core` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-rt-debug` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-rt-debug-core` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-rt-debug-devel` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-rt-debug-modules` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-rt-debug-modules-core` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-rt-debug-modules-extra` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-rt-devel` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-rt-modules` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel-rt-modules-core` Red Hat:enterprise_linux:10.2 From an advisory covering 12 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel` Rocky Linux:10 From an advisory covering 11 CVEs	before 0:6.12.0-211.37.1.el10_2	0:6.12.0-211.37.1.el10_2
`kernel` Rocky Linux:9 From an advisory covering 5 CVEs	before 0:5.14.0-687.30.1.el9_8	0:5.14.0-687.30.1.el9_8
`kernel` Rocky Linux:9 From an advisory covering 5 CVEs	before 0:5.14.0-687.30.1.el9_8.cloud.1.0	0:5.14.0-687.30.1.el9_8.cloud.1.0
`kernel-obs-build` SUSE:Linux Micro Extras 6.2 From an advisory covering 894 CVEs	before 6.12.0-160000.37.1	6.12.0-160000.37.1
`kernel-syms` SUSE:Linux Micro Extras 6.2 From an advisory covering 894 CVEs	before 6.12.0-160000.37.1	6.12.0-160000.37.1
`kernel-64kb` SUSE:Linux Micro 6.2 From an advisory covering 894 CVEs	before 6.12.0-160000.37.1	6.12.0-160000.37.1
`kernel-default` SUSE:Linux Micro 6.2 From an advisory covering 894 CVEs	before 6.12.0-160000.37.1	6.12.0-160000.37.1
`kernel-default-base` SUSE:Linux Micro 6.2 From an advisory covering 894 CVEs	before 6.12.0-160000.37.1.160000.2.19	6.12.0-160000.37.1.160000.2.19
`kernel-rt` SUSE:Linux Micro 6.2 From an advisory covering 894 CVEs	before 6.12.0-160000.37.1	6.12.0-160000.37.1
`kernel-source` SUSE:Linux Micro 6.2 From an advisory covering 894 CVEs	before 6.12.0-160000.37.1	6.12.0-160000.37.1
`kernel-64kb` SUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs	before 6.12.0-160000.37.1	6.12.0-160000.37.1
`kernel-azure` SUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs	before 6.12.0-160000.37.1	6.12.0-160000.37.1
`kernel-default` SUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs	before 6.12.0-160000.37.1	6.12.0-160000.37.1
`kernel-default-base` SUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs	before 6.12.0-160000.37.1.160000.2.19	6.12.0-160000.37.1.160000.2.19
`kernel-docs` SUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs	before 6.12.0-160000.37.1	6.12.0-160000.37.1
`kernel-kvmsmall` SUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs	before 6.12.0-160000.37.1	6.12.0-160000.37.1
`kernel-obs-qa` SUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs	before 6.12.0-160000.37.1	6.12.0-160000.37.1
`kernel-source` SUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs	before 6.12.0-160000.37.1	6.12.0-160000.37.1
`kernel-syms` SUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs	before 6.12.0-160000.37.1	6.12.0-160000.37.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs	before 6.12.0-160000.37.1	6.12.0-160000.37.1
`kernel-64kb` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs	before 6.12.0-160000.37.1	6.12.0-160000.37.1
`kernel-azure` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs	before 6.12.0-160000.37.1	6.12.0-160000.37.1
`kernel-default` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs	before 6.12.0-160000.37.1	6.12.0-160000.37.1
`kernel-default-base` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs	before 6.12.0-160000.37.1.160000.2.19	6.12.0-160000.37.1.160000.2.19
`kernel-docs` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs	before 6.12.0-160000.37.1	6.12.0-160000.37.1
`kernel-kvmsmall` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs	before 6.12.0-160000.37.1	6.12.0-160000.37.1
`kernel-obs-qa` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs	before 6.12.0-160000.37.1	6.12.0-160000.37.1
`kernel-source` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs	before 6.12.0-160000.37.1	6.12.0-160000.37.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs	before 6.12.0-160000.37.1	6.12.0-160000.37.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs	before 6.12.0-160000.37.1	6.12.0-160000.37.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 16.0 From an advisory covering 894 CVEs	before 6.12.0-160000.37.1	6.12.0-160000.37.1
`kernel-livepatch-SLE15-SP7-RT_Update_18` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 513 CVEs	before 1-150700.1.5.1	1-150700.1.5.1
`kernel-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 513 CVEs	before 6.4.0-150700.7.67.1	6.4.0-150700.7.67.1
`kernel-source-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 513 CVEs	before 6.4.0-150700.7.67.1	6.4.0-150700.7.67.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 513 CVEs	before 6.4.0-150700.7.67.1	6.4.0-150700.7.67.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 513 CVEs	before 6.4.0-150700.53.73.2	6.4.0-150700.53.73.2
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 513 CVEs	before 6.4.0-150700.53.73.2	6.4.0-150700.53.73.2
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 513 CVEs	before 6.4.0-150700.53.73.2.150700.17.41.4	6.4.0-150700.53.73.2.150700.17.41.4
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 513 CVEs	before 6.4.0-150700.53.73.1	6.4.0-150700.53.73.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 513 CVEs	before 6.4.0-150700.53.73.2	6.4.0-150700.53.73.2
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 513 CVEs	before 6.4.0-150700.53.73.1	6.4.0-150700.53.73.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 513 CVEs	before 6.4.0-150700.53.73.2	6.4.0-150700.53.73.2
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 513 CVEs	before 6.4.0-150700.53.73.1	6.4.0-150700.53.73.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 513 CVEs	before 6.4.0-150700.53.73.1	6.4.0-150700.53.73.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP7 From an advisory covering 513 CVEs	before 6.4.0-150700.53.73.2	6.4.0-150700.53.73.2
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 513 CVEs	before 6.4.0-150700.53.73.2	6.4.0-150700.53.73.2
`kernel-livepatch-SLE15-SP7_Update_19` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 513 CVEs	before 1-150700.15.3.4	1-150700.15.3.4
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7 From an advisory covering 513 CVEs	before 6.4.0-150700.53.73.2	6.4.0-150700.53.73.2
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP7 From an advisory covering 513 CVEs	before 6.4.0-150700.53.73.2	6.4.0-150700.53.73.2
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP7 From an advisory covering 513 CVEs	before 6.4.0-150700.53.73.2	6.4.0-150700.53.73.2
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-aws-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-aws-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less 5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1	None known
`linux-aws-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1	None known
`linux-azure-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less 5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2	None known
`linux-azure-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less 5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1	None known
`linux-azure-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1	None known
`linux-azure-fde` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less 5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1	None known
`linux-gcp-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less 5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3	None known
`linux-gcp-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less 5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1	None known
`linux-gcp-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41	None known
`linux-gke` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less 5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111	None known
`linux-gke-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less 5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1	None known
`linux-gkeop` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less 5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77	None known
`linux-gkeop-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 40 moreShow less 5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1	None known
`linux-hwe-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less 5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1	None known
`linux-hwe-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less 5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1	None known
`linux-hwe-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less 5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1	None known
`linux-intel-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19	None known
`linux-oem-5.10` Ubuntu:20.04:LTS	All versions, plus listed versions 5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17 Show 21 moreShow less 5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61	None known
`linux-oem-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21 Show 7 moreShow less 5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36	None known
`linux-oem-5.14` Ubuntu:20.04:LTS	All versions, plus listed versions 5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10 Show 30 moreShow less 5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67	None known
`linux-oem-5.6` Ubuntu:20.04:LTS	All versions, plus listed versions 5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13 Show 24 moreShow less 5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60	None known
`linux-oracle-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-oracle-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1 Show 7 moreShow less 5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1	None known
`linux-oracle-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1	None known
`linux-raspi2` Ubuntu:20.04:LTS	All versions, plus listed versions 5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6	None known
`linux-riscv` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34 Show 7 moreShow less 5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45	None known
`linux-riscv-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1 Show 8 moreShow less 5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35	None known
`linux-riscv-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1 Show 5 moreShow less 5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1	None known
`linux-allwinner-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1	None known
`linux-aws-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1 Show 5 moreShow less 5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1	None known
`linux-aws-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 9 moreShow less 6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1	None known
`linux-aws-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1 Show 9 moreShow less 6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1	None known
`linux-azure-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2	None known
`linux-azure-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 8 moreShow less 6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1	None known
`linux-azure-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1 Show 9 moreShow less 6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1	None known
`linux-azure-fde-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1	None known
`linux-azure-fde-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1 Show 5 moreShow less 6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1	None known
`linux-gcp-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1020.22~22.04.25.19.0-1021.23~22.04.15.19.0-1022.24~22.04.15.19.0-1024.26~22.04.15.19.0-1025.27~22.04.15.19.0-1026.28~22.04.15.19.0-1027.29~22.04.15.19.0-1030.32~22.04.1	None known
`linux-gcp-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1009.9~22.04.36.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1011.11~22.04.36.2.0-1012.12~22.04.1 Show 7 moreShow less 6.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1016.18~22.04.16.2.0-1017.19~22.04.16.2.0-1018.20~22.04.16.2.0-1019.21~22.04.16.2.0-1021.23~22.04.1	None known
`linux-gcp-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1010.10~22.04.36.5.0-1011.11~22.04.16.5.0-1013.13~22.04.16.5.0-1014.14~22.04.16.5.0-1015.15~22.04.1 Show 8 moreShow less 6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1022.24~22.04.16.5.0-1023.25~22.04.16.5.0-1024.26~22.04.16.5.0-1025.27~22.04.1	None known
`linux-hwe-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-28.29~22.04.15.19.0-32.33~22.04.15.19.0-35.36~22.04.15.19.0-38.39~22.04.15.19.0-40.41~22.04.1 Show 6 moreShow less 5.19.0-41.42~22.04.15.19.0-42.43~22.04.15.19.0-43.44~22.04.15.19.0-45.46~22.04.15.19.0-46.47~22.04.15.19.0-50.50	None known
`linux-hwe-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-25.25~22.04.26.2.0-26.26~22.04.16.2.0-31.31~22.04.16.2.0-32.32~22.04.16.2.0-33.33~22.04.1 Show 5 moreShow less 6.2.0-34.34~22.04.16.2.0-35.35~22.04.16.2.0-36.37~22.04.16.2.0-37.38~22.04.16.2.0-39.40~22.04.1	None known
`linux-hwe-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-14.14~22.04.16.5.0-15.15~22.04.16.5.0-17.17~22.04.16.5.0-18.18~22.04.16.5.0-21.21~22.04.1 Show 8 moreShow less 6.5.0-25.25~22.04.16.5.0-26.26~22.04.16.5.0-27.28~22.04.16.5.0-28.29~22.04.16.5.0-35.35~22.04.16.5.0-41.41~22.04.26.5.0-44.44~22.04.16.5.0-45.45~22.04.1	None known
`linux-intel-iot-realtime` Ubuntu:22.04:LTS	All versions, plus listed versions 5.15.0-1073.75	None known
`linux-lowlatency-hwe-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.1 Show 5 moreShow less 5.19.0-1024.25~22.04.15.19.0-1025.26~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1030.30	None known
`linux-lowlatency-hwe-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1008.8~22.04.16.2.0-1009.9~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.1 Show 5 moreShow less 6.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1	None known
`linux-lowlatency-hwe-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-14.14.1~22.04.16.5.0-15.15.1.1~22.04.16.5.0-17.17.1.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.1 Show 8 moreShow less 6.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.16.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-41.41.1~22.04.16.5.0-42.42.1~22.04.16.5.0-44.44.1~22.04.16.5.0-45.45.1~22.04.1	None known
`linux-nvidia-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1003.3~22.04.16.2.0-1009.96.2.0-1010.106.2.0-1011.116.2.0-1012.126.2.0-1013.136.2.0-1015.15	None known
`linux-nvidia-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1004.46.5.0-1007.76.5.0-1013.136.5.0-1014.146.5.0-1015.15 Show 6 moreShow less 6.5.0-1018.186.5.0-1019.196.5.0-1021.226.5.0-1022.236.5.0-1023.246.5.0-1024.25	None known
`linux-oem-5.17` Ubuntu:22.04:LTS	All versions, plus listed versions 5.17.0-1003.35.17.0-1004.45.17.0-1006.65.17.0-1011.125.17.0-1012.13 Show 21 moreShow less 5.17.0-1013.145.17.0-1014.155.17.0-1015.165.17.0-1016.175.17.0-1017.185.17.0-1018.195.17.0-1019.205.17.0-1020.215.17.0-1021.225.17.0-1024.255.17.0-1025.265.17.0-1026.275.17.0-1027.285.17.0-1028.295.17.0-1029.305.17.0-1030.315.17.0-1031.325.17.0-1032.335.17.0-1033.345.17.0-1034.355.17.0-1035.36	None known
`linux-oem-6.0` Ubuntu:22.04:LTS	All versions, plus listed versions 6.0.0-1006.66.0.0-1007.76.0.0-1008.86.0.0-1009.96.0.0-1010.10 Show 11 moreShow less 6.0.0-1011.116.0.0-1012.126.0.0-1013.136.0.0-1014.146.0.0-1015.156.0.0-1016.166.0.0-1017.176.0.0-1018.186.0.0-1019.196.0.0-1020.206.0.0-1021.21	None known
`linux-oem-6.1` Ubuntu:22.04:LTS	All versions, plus listed versions 6.1.0-1004.46.1.0-1006.66.1.0-1007.76.1.0-1008.86.1.0-1009.9 Show 22 moreShow less 6.1.0-1010.106.1.0-1012.126.1.0-1013.136.1.0-1014.146.1.0-1015.156.1.0-1016.166.1.0-1017.176.1.0-1019.196.1.0-1020.206.1.0-1021.216.1.0-1022.226.1.0-1023.236.1.0-1024.246.1.0-1025.256.1.0-1026.266.1.0-1027.276.1.0-1028.286.1.0-1029.296.1.0-1033.336.1.0-1034.346.1.0-1035.356.1.0-1036.36	None known
`linux-oem-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1003.36.5.0-1004.46.5.0-1006.66.5.0-1007.76.5.0-1008.8 Show 14 moreShow less 6.5.0-1009.106.5.0-1011.126.5.0-1013.146.5.0-1014.156.5.0-1015.166.5.0-1016.176.5.0-1018.196.5.0-1019.206.5.0-1020.216.5.0-1022.236.5.0-1023.246.5.0-1024.256.5.0-1025.266.5.0-1027.28	None known
`linux-oracle-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1013.13~22.04.46.5.0-1014.14~22.04.16.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1018.18~22.04.1 Show 8 moreShow less 6.5.0-1019.19~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.16.5.0-1025.25~22.04.16.5.0-1026.26~22.04.16.5.0-1027.27~22.04.1	None known
`linux-realtime` Ubuntu:22.04:LTS	All versions, plus listed versions 5.15.0-1032.35	None known
`linux-riscv` Ubuntu:22.04:LTS	All versions, plus listed versions 5.13.0-1004.45.13.0-1006.6+22.04.15.13.0-1007.7+22.04.15.13.0-1010.11+22.04.15.15.0-1004.4 Show 18 moreShow less 5.15.0-1005.55.15.0-1006.65.15.0-1007.75.15.0-1008.85.15.0-1011.125.15.0-1012.135.15.0-1014.165.15.0-1015.175.15.0-1016.185.15.0-1017.195.15.0-1018.215.15.0-1019.225.15.0-1020.235.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.32	None known
`linux-riscv-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1012.13~22.04.15.19.0-1015.16~22.04.15.19.0-1016.17~22.04.15.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.15.19.0-1021.23~22.04.1	None known
`linux-riscv-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-17.17.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.16.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.1 Show 5 moreShow less 6.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-40.40.1~22.04.16.5.0-42.42.1~22.04.16.5.0-45.45.1~22.04.1	None known
`linux-starfive-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1014.16~22.04.15.19.0-1015.17~22.04.15.19.0-1016.18~22.04.15.19.0-1017.19~22.04.15.19.0-1018.20~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.1	None known
`linux-starfive-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1006.7~22.04.16.2.0-1007.8~22.04.16.2.0-1009.10~22.04.1	None known
`dtb-aarch64` openSUSE:Leap 16.0 From an advisory covering 894 CVEs	before 6.12.0-160000.37.1	6.12.0-160000.37.1
`kernel-64kb` openSUSE:Leap 16.0 From an advisory covering 894 CVEs	before 6.12.0-160000.37.1	6.12.0-160000.37.1
`kernel-azure` openSUSE:Leap 16.0 From an advisory covering 894 CVEs	before 6.12.0-160000.37.1	6.12.0-160000.37.1
`kernel-default` openSUSE:Leap 16.0 From an advisory covering 894 CVEs	before 6.12.0-160000.37.1	6.12.0-160000.37.1
`kernel-default-base` openSUSE:Leap 16.0 From an advisory covering 894 CVEs	before 6.12.0-160000.37.1.160000.2.19	6.12.0-160000.37.1.160000.2.19
`kernel-docs` openSUSE:Leap 16.0 From an advisory covering 894 CVEs	before 6.12.0-160000.37.1	6.12.0-160000.37.1
`kernel-kvmsmall` openSUSE:Leap 16.0 From an advisory covering 894 CVEs	before 6.12.0-160000.37.1	6.12.0-160000.37.1
`kernel-obs-build` openSUSE:Leap 16.0 From an advisory covering 894 CVEs	before 6.12.0-160000.37.1	6.12.0-160000.37.1
`kernel-obs-qa` openSUSE:Leap 16.0 From an advisory covering 894 CVEs	before 6.12.0-160000.37.1	6.12.0-160000.37.1
`kernel-rt` openSUSE:Leap 16.0 From an advisory covering 894 CVEs	before 6.12.0-160000.37.1	6.12.0-160000.37.1
`kernel-source` openSUSE:Leap 16.0 From an advisory covering 894 CVEs	before 6.12.0-160000.37.1	6.12.0-160000.37.1
`kernel-syms` openSUSE:Leap 16.0 From an advisory covering 894 CVEs	before 6.12.0-160000.37.1	6.12.0-160000.37.1
`kernel-zfcpdump` openSUSE:Leap 16.0 From an advisory covering 894 CVEs	before 6.12.0-160000.37.1	6.12.0-160000.37.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected	OSV
Nov 3, 2026	facts	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-52976 is a high vulnerability (CVSS 7.8) in Linux, published June 24, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.18%, the 8th percentile. Fixed in linux-lts 6.12.92-r0.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 571 package rows, 121 versions, 3,656 references and the rest of 19 source descriptions. The JSON record has them.