Every CVE Search/ Get API key

CVE-2026-53009

ice: fix double-free of tx_buf skb

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

ice: fix double-free of tx_buf skb

If ice_tso() or ice_tx_csum() fail, the error path in ice_xmit_frame_ring() frees the skb, but the 'first' tx_buf still points to it and is marked as valid (ICE_TX_BUF_SKB). 'next_to_use' remains unchanged, so the potential problem will likely fix itself when the next packet is transmitted and the tx_buf gets overwritten. But if there is no next packet and the interface is brought down instead, ice_clean_tx_ring() -> ice_unmap_and_free_tx_buf() will find the tx_buf and free the skb for the second time.

The fix is to reset the tx_buf type to ICE_TX_BUF_EMPTY in the error path, so that ice_unmap_and_free_tx_buf(). Move the initialization of 'first' up, to ensure it's already valid in case we hit the linearization error path.

The bug was spotted by AI while I had it looking for something else. It also proposed an initial version of the patch.

I reproduced the bug and tested the fix by adding code to inject failures, on a build with KASAN.

I looked for similar bugs in related Intel drivers and did not find any.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.18%Unchanged since Jun 25, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.8

ice: fix double-free of tx_buf skb

In the Linux kernel, the following vulnerability has been resolved:

ice: fix double-free of tx_buf skb

If ice_tso() or ice_tx_csum() fail, the error path in ice_xmit_frame_ring() frees the skb, but the 'first' tx_buf still points to it and is marked as valid (ICE_TX_BUF_SKB). 'next_to_use' remains unchanged, so the potential problem will likely fix itself when the next packet is transmitted and the tx_buf gets overwritten. But if there is no next packet and the interface is brought down instead, ice_clean_tx_ring() -> ice_unmap_and_free_tx_buf() will find the tx_buf and free the skb for the second time.

The fix is to reset the tx_buf type to ICE_TX_BUF_EMPTY in the error path, so that ice_unmap_and_free_tx_buf(). Move the initialization of 'first' up, to ensure it's already valid in case we hit the linearization error path.

The bug was spotted by AI while I had it looking for something else. It also proposed an initial version of the patch.

I reproduced the bug and tested the fix by adding code to inject failures, on a build with KASAN.

I looked for similar bugs in related Intel drivers and did not find any.

Record
CVE-2026-53009
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416, CWE-416
Updated
2026-11-02
EUVDEUVD-2026-38877 7.8

In the Linux kernel, the following vulnerability has been resolved:

ice: fix double-free of tx_buf skb

If ice_tso() or ice_tx_csum() fail, the error path in ice_xmit_frame_ring() frees the skb, but the 'first' tx_buf still points to it and is marked as valid (ICE_TX_BUF_SKB). 'next_to_use' remains unchanged, so the potential problem will likely fix itself when the next packet is transmitted and the tx_buf gets overwritten. But if there is no next packet and the interface is brought down instead, ice_clean_tx_ring() -> ice_unmap_and_free_tx_buf() will find the tx_buf and free the skb for the second time.

The fix is to reset the tx_buf type to ICE_TX_BUF_EMPTY in the error path, so that ice_unmap_and_free_tx_buf(). Move the initialization of 'first' up, to ensure it's already valid in case we hit the linearization error path.

The bug was spotted by AI while I had it looking for something else. It also proposed an initial version of the patch.

I reproduced the bug and tested the fix by adding code to inject failures, on a build with KASAN.

I looked for similar bugs in related Intel drivers and did not find any.

Record
EUVD-2026-38877
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-67p5-53x6-9j7q 7.8

In the Linux kernel, the following vulnerability has been resolved: ice: fix double-free of...

In the Linux kernel, the following vulnerability has been resolved:

ice: fix double-free of tx_buf skb

If ice_tso() or ice_tx_csum() fail, the error path in ice_xmit_frame_ring() frees the skb, but the 'first' tx_buf still points to it and is marked as valid (ICE_TX_BUF_SKB). 'next_to_use' remains unchanged, so the potential problem will likely fix itself when the next packet is transmitted and the tx_buf gets overwritten. But if there is no next packet and the interface is brought down instead, ice_clean_tx_ring() -> ice_unmap_and_free_tx_buf() will find the tx_buf and free the skb for the second time.

The fix is to reset the tx_buf type to ICE_TX_BUF_EMPTY in the error path, so that ice_unmap_and_free_tx_buf(). Move the initialization of 'first' up, to ensure it's already valid in case we hit the linearization error path.

The bug was spotted by AI while I had it looking for something else. It also proposed an initial version of the patch.

I reproduced the bug and tested the fix by adding code to inject failures, on a build with KASAN.

I looked for similar bugs in related Intel drivers and did not find any.

Record
GHSA-67p5-53x6-9j7q
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-415, CWE-416, CWE-1341
Updated
2026-11-02
NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

ice: fix double-free of tx_buf skb

If ice_tso() or ice_tx_csum() fail, the error path in ice_xmit_frame_ring() frees the skb, but the 'first' tx_buf still points to it and is marked as valid (ICE_TX_BUF_SKB). 'next_to_use' remains unchanged, so the potential problem will likely fix itself when the next packet is transmitted and the tx_buf gets overwritten. But if there is no next packet and the interface is brought down instead, ice_clean_tx_ring() -> ice_unmap_and_free_tx_buf() will find the tx_buf and free the skb for the second time.

The fix is to reset the tx_buf type to ICE_TX_BUF_EMPTY in the error path, so that ice_unmap_and_free_tx_buf(). Move the initialization of 'first' up, to ensure it's already valid in case we hit the linearization error path.

The bug was spotted by AI while I had it looking for something else. It also proposed an initial version of the patch.

I reproduced the bug and tested the fix by adding code to inject failures, on a build with KASAN.

I looked for similar bugs in related Intel drivers and did not find any.

Record
CVE-2026-53009
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-415, CWE-416
Updated
2026-11-02
OSVBELL-CVE-2026-53009 7.8
Record
BELL-CVE-2026-53009
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-04
OSV 7.8

ice: fix double-free of tx_buf skb

In the Linux kernel, the following vulnerability has been resolved:

ice: fix double-free of tx_buf skb

If ice_tso() or ice_tx_csum() fail, the error path in ice_xmit_frame_ring() frees the skb, but the 'first' tx_buf still points to it and is marked as valid (ICE_TX_BUF_SKB). 'next_to_use' remains unchanged, so the potential problem will likely fix itself when the next packet is transmitted and the tx_buf gets overwritten. But if there is no next packet and the interface is brought down instead, ice_clean_tx_ring() -> ice_unmap_and_free_tx_buf() will find the tx_buf and free the skb for the second time.

The fix is to reset the tx_buf type to ICE_TX_BUF_EMPTY in the error path, so that ice_unmap_and_free_tx_buf(). Move the initialization of 'first' up, to ensure it's already valid in case we hit the linearization error path.

The bug was spotted by AI while I had it looking for something else. It also proposed an initial version of the patch.

I reproduced the bug and tested the fix by adding code to inject failures, on a build with KASAN.

I looked for similar bugs in related Intel drivers and did not find any.

Record
CVE-2026-53009
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 48 moreShow less
OSVDEBIAN-CVE-2026-53009 7.8

In the Linux kernel, the following vulnerability has been resolved: ice: fix double-free of tx_buf skb If ice_tso() or ice_tx_csum() fail, the error path in ice_xmit_frame_ring() frees the skb, but the 'first' tx_buf still points to it and is marked as valid (ICE_TX_BUF_SKB). 'next_to_use' remains unchanged, so the potential problem will likely fix itself when the next packet is transmitted and the tx_buf gets overwritten. But if there is no next packet and the interface is brought down instead, ice_clean_tx_ring() -> ice_unmap_and_free_tx_buf() will find the tx_buf and free the skb for the second time. The fix is to reset the tx_buf type to ICE_TX_BUF_EMPTY in the error path, so that ice_unmap_and_free_tx_buf(). Move the initialization of 'first' up, to ensure it's already valid in case we hit the linearization error path. The bug was spotted by AI while I had it looking for something else. It also proposed an initial version of the patch. I reproduced the bug and tested the fix by adding code to inject failures, on a build with KASAN. I looked for similar bugs in related Intel drivers and did not find any.

Record
DEBIAN-CVE-2026-53009
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-3156 9.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

drbd: add missing kref_get in handle_write_conflicts

With two-primaries enabled, DRBD tries to detect "concurrent" writes and handle write conflicts, so that even if you write to the same sector simultaneously on both nodes, they end up with the identical data once the writes are completed.

In handling "superseeded" writes, we forgot a kref_get, resulting in a premature drbd_destroy_device and use after free, and further to kernel crashes with symptoms.

Relevance: No one should use DRBD as a random data generator, and apparently all users of "two-primaries" handle concurrent writes correctly on layer up. That is cluster file systems use some distributed lock manager, and live migration in virtualization environments stops writes on one node before starting writes on the other node.

Which means that other than for "test cases", this code path is never taken in real life.

FYI, in DRBD 9, things are handled differently nowadays. We still detect "write conflicts", but no longer try to be smart about them. We decided to disconnect hard instead: upper layers must not submit concurrent writes. If they do, that's their fault.(CVE-2025-38708)

In the Linux kernel, the following vulnerability has been resolved:

wifi: mwifiex: Initialize the chan_stats array to zero

The adapter->chan_stats[] array is initialized in mwifiex_init_channel_scan_gap() with vmalloc(), which doesn't zero out memory. The array is filled in mwifiex_update_chan_statistics() and then the user can query the data in mwifiex_cfg80211_dump_survey().

There are two potential issues here. What if the user calls mwifiex_cfg80211_dump_survey() before the data has been filled in. Also the mwifiex_update_chan_statistics() function doesn't necessarily initialize the whole array. Since the array was not initialized at the start that could result in an information leak.

Also this array is pretty small. It's a maximum of 900 bytes so it's more appropriate to use kcalloc() instead vmalloc().(CVE-2025-39891)

In the Linux kernel, the following vulnerability has been resolved:

ALSA: ctxfi: Fix potential OOB access in audio mixer handling

In the audio mixer handling code of ctxfi driver, the conf field is used as a kind of loop index, and it's referred in the index callbacks (amixer_index() and sum_index()).

As spotted recently by fuzzers, the current code causes OOB access at those functions. | UBSAN: array-index-out-of-bounds in /build/reproducible-path/linux-6.17.8/sound/pci/ctxfi/ctamixer.c:347:48 | index 8 is out of range for type 'unsigned char [8]'

After the analysis, the cause was found to be the lack of the proper (re-)initialization of conj field.

This patch addresses those OOB accesses by adding the proper initializations of the loop indices.(CVE-2026-23076)

In the Linux kernel, the following vulnerability has been resolved:

rxrpc: Fix call removal to use RCU safe deletion

Fix rxrpc call removal from the rxnet->calls list to use list_del_rcu() rather than list_del_init() to prevent stuffing up reading /proc/net/rxrpc/calls from potentially getting into an infinite loop.

This, however, means that list_empty() no longer works on an entry that's been deleted from the list, making it harder to detect prior deletion. Fix this by:

Firstly, make rxrpc_destroy_all_calls() only dump the first ten calls that are unexpectedly still on the list. Limiting the number of steps means there's no need to call cond_resched() or to remove calls from the list here, thereby eliminating the need for rxrpc_put_call() to check for that.

rxrpc_put_call() can then be fixed to unconditionally delete the call from the list as it is the only place that the deletion occurs.(CVE-2026-31642)

In the Linux kernel, the following…

Record
OESA-2026-3156
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:42919 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:42919
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:54246 7.0

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:54246
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:54247 7.0

Red Hat Security Advisory: kernel-rt security update

Record
RHSA-2026:54247
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:65711 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:65711
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:65712 8.1

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:65712
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:69089 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:69089
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:77214 8.8

Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Record
RHSA-2026:77214
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:77215 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:77215
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:42919 7.8

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CVE-2025-71113)

  • kernel: Linux kernel: Denial of Service due to memory leak in tpm2_load_cmd (CVE-2025-71147)

  • kernel: flex_proportions: make fprop_new_period() hardirq safe (CVE-2026-23168)

  • kernel: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (CVE-2026-31530)

  • kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (CVE-2026-46116)

  • kernel: fanotify: fix false positive on permission events (CVE-2026-46150)

  • kernel: drm: Set old handle to NULL before prime swap in change_handle (CVE-2026-46215)

  • kernel: drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CVE-2026-52976)

  • kernel: drm/xe/dma-buf: fix UAF with retry loop (CVE-2026-52950)

  • kernel: ice: fix double-free of tx_buf skb (CVE-2026-53009)

  • kernel: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CVE-2026-53071)

  • kernel: can: bcm: thrtimer use-after-free during RX operation teardown ()

Bug Fix(es) and Enhancement(s):

  • nfsd_file slab cache objects remaining on kmem_cache_shutdown during nfsd teardown while running bz1477872 testcase (JIRA:Rocky Linux-173103)

  • tools/lib/perf/Makefile: libperf includes appended after CFLAGS causes parallel build race, breaking kernel builds [rhel-10.2.z] (JIRA:Rocky Linux-183975)

  • [Rocky Linux10-debug]: BUG: KASAN: slab-use-after-free in __pv_queued_spin_lock_slowpath [rhel-10.2.z] (JIRA:Rocky Linux-186311)

  • ice: driver update 2026-06, part 1 [rhel-10.2.z] (JIRA:Rocky Linux-191324)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:42919
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:54246 7.0

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: udf: fix partition descriptor append bookkeeping (CVE-2026-45991)

  • kernel: ice: fix double-free of tx_buf skb (CVE-2026-53009)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:54246
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:54247 7.0

Moderate: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: udf: fix partition descriptor append bookkeeping (CVE-2026-45991)

  • kernel: ice: fix double-free of tx_buf skb (CVE-2026-53009)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:54247
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-53009 5.4

In the Linux kernel, the following vulnerability has been resolved: ice: fix double-free of tx_buf skb If ice_tso() or ice_tx_csum() fail, the error path in ice_xmit_frame_ring() frees the skb, but the 'first' tx_buf still points to it and is marked as valid (ICE_TX_BUF_SKB). 'next_to_use' remains unchanged, so the potential problem will likely fix itself when the next packet is transmitted and the tx_buf gets overwritten. But if there is no next packet and the interface is brought down instead, ice_clean_tx_ring() -> ice_unmap_and_free_tx_buf() will find the tx_buf and free the skb for the second time. The fix is to reset the tx_buf type to ICE_TX_BUF_EMPTY in the error path, so that ice_unmap_and_free_tx_buf(). Move the initialization of 'first' up, to ensure it's already valid in case we hit the linearization error path. The bug was spotted by AI while I had it looking for something else. It also proposed an initial version of the patch. I reproduced the bug and tested the fix by adding code to inject failures, on a build with KASAN. I looked for similar bugs in related Intel drivers and did not find any.

Record
UBUNTU-CVE-2026-53009
CVSS 4.0
5.4 MediumCVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVALSA-2026:42919 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CVE-2025-71113)
  • kernel: Linux kernel: Denial of Service due to memory leak in tpm2_load_cmd (CVE-2025-71147)
  • kernel: flex_proportions: make fprop_new_period() hardirq safe (CVE-2026-23168)
  • kernel: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (CVE-2026-31530)
  • kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (CVE-2026-46116)
  • kernel: fanotify: fix false positive on permission events (CVE-2026-46150)
  • kernel: drm: Set old handle to NULL before prime swap in change_handle (CVE-2026-46215)
  • kernel: drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CVE-2026-52976)
  • kernel: drm/xe/dma-buf: fix UAF with retry loop (CVE-2026-52950)
  • kernel: ice: fix double-free of tx_buf skb (CVE-2026-53009)
  • kernel: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CVE-2026-53071)
  • kernel: can: bcm: thrtimer use-after-free during RX operation teardown ()

Bug Fix(es) and Enhancement(s):

  • nfsd_file slab cache objects remaining on kmem_cache_shutdown during nfsd teardown while running bz1477872 testcase (JIRA:AlmaLinux-173103)
  • tools/lib/perf/Makefile: libperf includes appended after CFLAGS causes parallel build race, breaking kernel builds [almalinux-10.2.z] (JIRA:AlmaLinux-183975)
  • [AlmaLinux10-debug]: BUG: KASAN: slab-use-after-free in __pv_queued_spin_lock_slowpath [almalinux-10.2.z] (JIRA:AlmaLinux-186311)
  • ice: driver update 2026-06, part 1 [almalinux-10.2.z] (JIRA:AlmaLinux-191324)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:42919
Updated
2026-11-02
OSVALSA-2026:54246 No score

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: udf: fix partition descriptor append bookkeeping (CVE-2026-45991)
  • kernel: ice: fix double-free of tx_buf skb (CVE-2026-53009)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:54246
Updated
2026-11-02
OSVALSA-2026:54247 No score

Moderate: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: udf: fix partition descriptor append bookkeeping (CVE-2026-45991)
  • kernel: ice: fix double-free of tx_buf skb (CVE-2026-53009)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:54247
Updated
2026-11-02
OSVAZL-90678 No score

CVE-2026-53009 affecting package kernel 6.6.161.1-1

In the Linux kernel, the following vulnerability has been resolved:

ice: fix double-free of tx_buf skb

If ice_tso() or ice_tx_csum() fail, the error path in ice_xmit_frame_ring() frees the skb, but the 'first' tx_buf still points to it and is marked as valid (ICE_TX_BUF_SKB). 'next_to_use' remains unchanged, so the potential problem will likely fix itself when the next packet is transmitted and the tx_buf gets overwritten. But if there is no next packet and the interface is brought down instead, ice_clean_tx_ring() -> ice_unmap_and_free_tx_buf() will find the tx_buf and free the skb for the second time.

The fix is to reset the tx_buf type to ICE_TX_BUF_EMPTY in the error path, so that ice_unmap_and_free_tx_buf(). Move the initialization of 'first' up, to ensure it's already valid in case we hit the linearization error path.

The bug was spotted by AI while I had it looking for something else. It also proposed an initial version of the patch.

I reproduced the bug and tested the fix by adding code to inject failures, on a build with KASAN.

I looked for similar bugs in related Intel drivers and did not find any.

Record
AZL-90678
Updated
2026-11-05
OSVCLSA-2026-1788170774 No score

kernel: Fix of 132 CVEs

  • sctp: fix potential deadlock on &net->sctp.addr_wq_lock {CVE-2024-0639}
  • sctp: delay auto_asconf init until binding the first addr {CVE-2021-23133}
  • netfilter: nf_log: validate MAC header was set before dumping it {CVE-2026-52942}
  • netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check {CVE-2026-52998}
  • drm/nouveau: fix u32 overflow in pushbuf reloc bounds check {CVE-2026-46006}
  • btrfs: fix use-after-free when attempting to join an aborted transaction {CVE-2025-21753}
  • btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
  • team: fix header_ops type confusion with non-Ethernet ports {CVE-2026-31502}
  • xfrm: Fix dev use-after-free in xfrm async resumption {CVE-2026-72463}
  • xfrm: hold dev ref until after transport_finish NF_HOOK {CVE-2026-31663}
  • xen/privcmd: restrict usage in unprivileged domU {CVE-2026-31788}
  • xen/privcmd: add IOCTL_PRIVCMD_RESTRICT {CVE-2026-31788}
  • Bluetooth: L2CAP: make l2cap_connect() return void {CVE-2024-36013}
  • btrfs: fix incorrect splitting in btrfs_drop_extent_map_range {CVE-2023-54121}
  • netfilter: nf_conntrack: defer invalid log until after unlock {CVE-2026-74624}
  • NFS: Pin the 'struct nfs_server' during a FREE_STATEID call {CVE-2026-74730}
  • dm cache: fix flushing uninitialized delayed_work on cache_ctr error {CVE-2024-50280}
  • audit: fix recursive locking deadlock in audit_dupe_exe() {CVE-2026-68096}
  • RDMA/rxe: Reject unknown opcodes before ICRC processing {CVE-2026-46133}
  • Bluetooth: bnep: reject short frames before parsing {CVE-2026-53253}
  • net: pull headers in qdisc_pkt_len_segs_init() {CVE-2026-53091}
  • inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266}
  • Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
  • sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed {CVE-2022-50103}
  • btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
  • fanotify: fix false positive on permission events {CVE-2026-46150}
  • HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103}
  • ext4: fix e4b bitmap inconsistency reports {CVE-2026-45942}
  • Bluetooth: serialize accept_q access {CVE-2026-52918}
  • ALSA: usb-audio: Add sanity check for OOB writes at silencing {CVE-2026-43279}
  • RDMA/bnxt_re: zero shared page before exposing to userspace {CVE-2026-74584}
  • sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
  • ipvs: clear IPv4 options after rebasing tunnel ICMP errors {CVE-2026-74669}
  • wifi: cfg80211: Partial revert "wifi: cfg80211: Fix use after free for wext" {CVE-2023-53153}
  • net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
  • nfs: use nfsi->rwsem to protect traversal of the file lock list {CVE-2026-72472}
  • Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}
  • drm/amdgpu/vce: fix integer overflow in image size {CVE-2026-68108}
  • ALSA: seq: close a re-opened queue timer in the destructor {CVE-2026-68202}
  • ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() {CVE-2026-74499}
  • USB: serial: io_edgeport: cap received transmit credits {CVE-2026-68365}
  • net: slip: serialize receive against buffer reallocation {CVE-2026-68143}
  • wifi: cfg80211: cancel sched scan results work on unregister {CVE-2026-68414}
  • sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}
  • sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}
  • pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}
  • ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() {CVE-2026-68160}
  • libceph: refresh auth->authorizer_buf{,_len} after authorizer update {CVE-2026-68156}
  • libceph: remove debugfs files before client teardown {CVE-2026-68153}
  • libceph: Fix multiplication overflow in decode_new_up_state_weight() {CVE-2026-68158}
  • libceph: reject zero bucket types in crush_decode {CVE-2026-68154}
  • libceph: bound…
Record
CLSA-2026-1788170774
Updated
2026-11-02
OSVCLSA-2026-1788257079 No score

kernel: Fix of 131 CVEs

  • sctp: fix potential deadlock on &net->sctp.addr_wq_lock {CVE-2024-0639}
  • sctp: delay auto_asconf init until binding the first addr {CVE-2021-23133}
  • netfilter: nf_log: validate MAC header was set before dumping it {CVE-2026-52942}
  • netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check {CVE-2026-52998}
  • drm/nouveau: fix u32 overflow in pushbuf reloc bounds check {CVE-2026-46006}
  • btrfs: fix use-after-free when attempting to join an aborted transaction {CVE-2025-21753}
  • btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
  • team: fix header_ops type confusion with non-Ethernet ports {CVE-2026-31502}
  • xfrm: Fix dev use-after-free in xfrm async resumption {CVE-2026-72463}
  • xfrm: hold dev ref until after transport_finish NF_HOOK {CVE-2026-31663}
  • xen/privcmd: restrict usage in unprivileged domU {CVE-2026-31788}
  • xen/privcmd: add IOCTL_PRIVCMD_RESTRICT {CVE-2026-31788}
  • Bluetooth: L2CAP: make l2cap_connect() return void {CVE-2024-36013}
  • btrfs: fix incorrect splitting in btrfs_drop_extent_map_range {CVE-2023-54121}
  • netfilter: nf_conntrack: defer invalid log until after unlock {CVE-2026-74624}
  • NFS: Pin the 'struct nfs_server' during a FREE_STATEID call {CVE-2026-74730}
  • dm cache: fix flushing uninitialized delayed_work on cache_ctr error {CVE-2024-50280}
  • audit: fix recursive locking deadlock in audit_dupe_exe() {CVE-2026-68096}
  • RDMA/rxe: Reject unknown opcodes before ICRC processing {CVE-2026-46133}
  • Bluetooth: bnep: reject short frames before parsing {CVE-2026-53253}
  • net: pull headers in qdisc_pkt_len_segs_init() {CVE-2026-53091}
  • inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266}
  • Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
  • sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed {CVE-2022-50103}
  • btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
  • fanotify: fix false positive on permission events {CVE-2026-46150}
  • HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103}
  • ext4: fix e4b bitmap inconsistency reports {CVE-2026-45942}
  • Bluetooth: serialize accept_q access {CVE-2026-52918}
  • ALSA: usb-audio: Add sanity check for OOB writes at silencing {CVE-2026-43279}
  • RDMA/bnxt_re: zero shared page before exposing to userspace {CVE-2026-74584}
  • sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
  • ipvs: clear IPv4 options after rebasing tunnel ICMP errors {CVE-2026-74669}
  • wifi: cfg80211: Partial revert "wifi: cfg80211: Fix use after free for wext" {CVE-2023-53153}
  • net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
  • nfs: use nfsi->rwsem to protect traversal of the file lock list {CVE-2026-72472}
  • Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}
  • drm/amdgpu/vce: fix integer overflow in image size {CVE-2026-68108}
  • ALSA: seq: close a re-opened queue timer in the destructor {CVE-2026-68202}
  • ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() {CVE-2026-74499}
  • USB: serial: io_edgeport: cap received transmit credits {CVE-2026-68365}
  • net: slip: serialize receive against buffer reallocation {CVE-2026-68143}
  • wifi: cfg80211: cancel sched scan results work on unregister {CVE-2026-68414}
  • sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}
  • sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}
  • pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}
  • ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() {CVE-2026-68160}
  • libceph: refresh auth->authorizer_buf{,_len} after authorizer update {CVE-2026-68156}
  • libceph: remove debugfs files before client teardown {CVE-2026-68153}
  • libceph: Fix multiplication overflow in decode_new_up_state_weight() {CVE-2026-68158}
  • libceph: reject zero bucket types in crush_decode {CVE-2026-68154}
  • libceph: bound…
Record
CLSA-2026-1788257079
Updated
2026-11-02
OSVCLSA-2026-1788259625 No score

kernel: Fix of 132 CVEs

  • sctp: fix potential deadlock on &net->sctp.addr_wq_lock {CVE-2024-0639}
  • sctp: delay auto_asconf init until binding the first addr {CVE-2021-23133}
  • netfilter: nf_log: validate MAC header was set before dumping it {CVE-2026-52942}
  • netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check {CVE-2026-52998}
  • drm/nouveau: fix u32 overflow in pushbuf reloc bounds check {CVE-2026-46006}
  • btrfs: fix use-after-free when attempting to join an aborted transaction {CVE-2025-21753}
  • btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
  • team: fix header_ops type confusion with non-Ethernet ports {CVE-2026-31502}
  • xfrm: Fix dev use-after-free in xfrm async resumption {CVE-2026-72463}
  • xfrm: hold dev ref until after transport_finish NF_HOOK {CVE-2026-31663}
  • xen/privcmd: restrict usage in unprivileged domU {CVE-2026-31788}
  • xen/privcmd: add IOCTL_PRIVCMD_RESTRICT {CVE-2026-31788}
  • Bluetooth: L2CAP: make l2cap_connect() return void {CVE-2024-36013}
  • btrfs: fix incorrect splitting in btrfs_drop_extent_map_range {CVE-2023-54121}
  • netfilter: nf_conntrack: defer invalid log until after unlock {CVE-2026-74624}
  • NFS: Pin the 'struct nfs_server' during a FREE_STATEID call {CVE-2026-74730}
  • dm cache: fix flushing uninitialized delayed_work on cache_ctr error {CVE-2024-50280}
  • audit: fix recursive locking deadlock in audit_dupe_exe() {CVE-2026-68096}
  • RDMA/rxe: Reject unknown opcodes before ICRC processing {CVE-2026-46133}
  • Bluetooth: bnep: reject short frames before parsing {CVE-2026-53253}
  • net: pull headers in qdisc_pkt_len_segs_init() {CVE-2026-53091}
  • inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266}
  • Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
  • sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed {CVE-2022-50103}
  • btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
  • fanotify: fix false positive on permission events {CVE-2026-46150}
  • HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103}
  • ext4: fix e4b bitmap inconsistency reports {CVE-2026-45942}
  • Bluetooth: serialize accept_q access {CVE-2026-52918}
  • ALSA: usb-audio: Add sanity check for OOB writes at silencing {CVE-2026-43279}
  • RDMA/bnxt_re: zero shared page before exposing to userspace {CVE-2026-74584}
  • sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
  • ipvs: clear IPv4 options after rebasing tunnel ICMP errors {CVE-2026-74669}
  • wifi: cfg80211: Partial revert "wifi: cfg80211: Fix use after free for wext" {CVE-2023-53153}
  • net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
  • nfs: use nfsi->rwsem to protect traversal of the file lock list {CVE-2026-72472}
  • Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}
  • drm/amdgpu/vce: fix integer overflow in image size {CVE-2026-68108}
  • ALSA: seq: close a re-opened queue timer in the destructor {CVE-2026-68202}
  • ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() {CVE-2026-74499}
  • USB: serial: io_edgeport: cap received transmit credits {CVE-2026-68365}
  • net: slip: serialize receive against buffer reallocation {CVE-2026-68143}
  • wifi: cfg80211: cancel sched scan results work on unregister {CVE-2026-68414}
  • sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}
  • sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}
  • pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}
  • ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() {CVE-2026-68160}
  • libceph: refresh auth->authorizer_buf{,_len} after authorizer update {CVE-2026-68156}
  • libceph: remove debugfs files before client teardown {CVE-2026-68153}
  • libceph: Fix multiplication overflow in decode_new_up_state_weight() {CVE-2026-68158}
  • libceph: reject zero bucket types in crush_decode {CVE-2026-68154}
  • libceph: bound…
Record
CLSA-2026-1788259625
Updated
2026-11-02
OSVCLSA-2026-1788449727 No score

Fix of 235 CVEs

  • Bump kernel ABI to 29: ship the ELS kernel as 4.19.0-29-*, distinct from the prior 4.19.0-28.
  • CVE-2021-46984
    • kyber: fix out of bounds access when preempted {CVE-2021-46984}
  • CVE-2021-47049
    • Drivers: hv: vmbus: Use after free in __vmbus_open() {CVE-2021-47049}
  • CVE-2021-47101
    • asix: fix uninit-value in asix_mdio_read() {CVE-2021-47101}
  • CVE-2021-47191
    • scsi: scsi_debug: Fix out-of-bound read in resp_readcap16() {CVE-2021-47191}
  • CVE-2021-47352
    • virtio-net: Add validation for used length {CVE-2021-47352}
  • CVE-2021-47379
    • blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd {CVE-2021-47379}
  • CVE-2021-47391
    • RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests {CVE-2021-47391}
  • CVE-2021-47479
    • staging: rtl8712: fix use-after-free in rtl8712_dl_fw {CVE-2021-47479}
  • CVE-2022-21546
    • scsi: target: Fix WRITE_SAME No Data Buffer crash {CVE-2022-21546}
  • CVE-2022-39189
    • KVM: x86: do not report a vCPU as preempted outside instruction boundaries {CVE-2022-39189}
  • CVE-2022-43945
    • SUNRPC: Fix svcxdr_init_encode's buflen calculation {CVE-2022-43945}
    • NFSD: Cap rsize_bop result based on send buffer size {CVE-2022-43945}
  • CVE-2022-48744
    • net/mlx5e: Avoid field-overflowing memcpy() {CVE-2022-48744}
  • CVE-2022-49026
    • e100: Fix possible use after free in e100_xmit_prepare {CVE-2022-49026}
  • CVE-2022-49720
    • block: Fix handling of offline queues in blk_mq_alloc_request_hctx() {CVE-2022-49720}
  • CVE-2022-49975
    • bpf: Don't redirect packets with invalid pkt_len {CVE-2022-49975}
    • bpf: Move skb->len == 0 checks into __bpf_redirect {CVE-2022-49975}
  • CVE-2022-50066
    • net: atlantic: fix aq_vec index out of range error {CVE-2022-50066}
  • CVE-2022-50103
    • sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed {CVE-2022-50103}
  • CVE-2022-50129
    • RDMA/srpt: Introduce a reference count in struct srpt_device {CVE-2022-50129}
    • RDMA/srpt: Fix a use-after-free {CVE-2022-50129}
  • CVE-2022-50300
    • btrfs: fix extent map use-after-free when handling missing device in read_one_chunk {CVE-2022-50300}
  • CVE-2022-50406
    • iomap: iomap: fix memory corruption when recording errors during writeback {CVE-2022-50406}
  • CVE-2022-50422
    • scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() {CVE-2022-50422}
  • CVE-2022-50552
    • blk-mq: use quiesced elevator switch when reinitializing queues {CVE-2022-50552}
  • CVE-2023-51779
    • Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2023-51779}
  • CVE-2023-52434
    • smb: client: fix potential OOBs in smb2_parse_contexts() {CVE-2023-52434}
  • CVE-2023-52515
    • RDMA/srp: Do not call scsi_done() from srp_abort() {CVE-2023-52515}
  • CVE-2023-52531
    • wifi: iwlwifi: mvm: Fix a memory corruption issue {CVE-2023-52531}
  • CVE-2023-52741
    • cifs: Fix use-after-free in rdata->read_into_pages() {CVE-2023-52741}
  • CVE-2023-53000
    • netlink: prevent potential spectre v1 gadgets {CVE-2023-53000}
  • CVE-2023-53039
    • workqueue: Add resource managed version of delayed work init {CVE-2023-53039}
    • devm-helpers: Fix devm_delayed_work_autocancel() kerneldoc {CVE-2023-53039}
    • devm-helpers: Add resource managed version of work init {CVE-2023-53039}
    • HID: intel-ish-hid: ipc: Fix potential use-after-free in work function {CVE-2023-53039}
    • HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev->devc {CVE-2023-53039}
  • CVE-2023-53111
    • loop: Fix use-after-free issues {CVE-2023-53111}
  • CVE-2023-53254
    • cacheinfo: Fix shared_cpu_map to handle shared caches at different levels…
Record
CLSA-2026-1788449727
Updated
2026-11-02
OSVCLSA-2026-1789460387 No score

Fix of 134 CVEs

  • CVE-2026-72463
    • xfrm: Fix dev use-after-free in xfrm async resumption {CVE-2026-72463}
  • CVE-2026-64600
    • xfs: resample the data fork mapping after cycling ILOCK {CVE-2026-64600}
  • CVE-2026-46175
    • f2fs: fix fsck inconsistency caused by FGGC of node block {CVE-2026-46175}
  • CVE-2025-68254
    • staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing {CVE-2025-68254}
  • CVE-2025-68255
    • staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing {CVE-2025-68255}
  • CVE-2026-64268
    • RDMA/siw: bound Read Response placement to the RREAD length {CVE-2026-64268}
  • CVE-2025-68286
    • drm/amd/display: Check NULL before accessing {CVE-2025-68286}
  • CVE-2026-53024
    • greybus: raw: fix use-after-free if write is called after disconnect {CVE-2026-53024}
  • CVE-2026-53025
    • greybus: raw: fix use-after-free on cdev close {CVE-2026-53025}
  • CVE-2026-52934
    • batman-adv: tvlv: reject oversized TVLV packets {CVE-2026-52934}
  • CVE-2025-68303
    • platform/x86: intel: punit_ipc: fix memory corruption {CVE-2025-68303}
  • CVE-2026-64280
    • fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() {CVE-2026-64280}
  • CVE-2026-64188
    • net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() {CVE-2026-64188}
  • CVE-2026-64109
    • af_unix: Fix UAF read of tail->len in unix_stream_data_wait() {CVE-2026-64109}
  • CVE-2026-64274
    • Input: goodix - clamp the device-reported contact count {CVE-2026-64274}
  • CVE-2026-64270
    • Input: mms114 - reject an oversized device packet size {CVE-2026-64270}
  • CVE-2026-64093
    • batman-adv: tp_meter: directly shut down timer on cleanup {CVE-2026-64093}
  • CVE-2026-64091
    • batman-adv: tt: fix TOCTOU race for reported vlans {CVE-2026-64091}
  • CVE-2026-53329
    • drm/amd/display: Use krealloc_array() in dal_vector_reserve() {CVE-2026-53329}
  • CVE-2026-64298
    • NFSv4: include MAY_WRITE in open permission mask for O_TRUNC {CVE-2026-64298}
  • CVE-2026-64276
    • Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count {CVE-2026-64276}
  • CVE-2026-64273
    • Input: iforce - bound the device-reported force-feedback effect index {CVE-2026-64273}
  • CVE-2026-64271
    • Input: touchwin - reset the packet index on every complete packet {CVE-2026-64271}
  • CVE-2026-64266
    • fuse: re-lock request before returning from fuse_ref_folio() {CVE-2026-64266}
  • CVE-2026-64191
    • i2c: stub: Reject I2C block transfers with invalid length {CVE-2026-64191}
  • CVE-2026-64189
    • netfilter: ipset: fix race between dump and ip_set_list resize {CVE-2026-64189}
  • CVE-2026-31786
    • Buffer overflow in drivers/xen/sys-hypervisor.c {CVE-2026-31786}
  • CVE-2025-68799
    • caif: fix integer underflow in cffrml_receive() {CVE-2025-68799}
  • CVE-2025-68302
    • net: sxgbe: fix potential NULL dereference in sxgbe_rx() {CVE-2025-68302}
  • CVE-2025-40243
    • hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits() {CVE-2025-40243}
  • CVE-2025-40233
    • ocfs2: clear extent cache after moving/defragmenting extents {CVE-2025-40233}
  • CVE-2026-23269
    • apparmor: validate DFA start states are in bounds in unpack_pdb {CVE-2026-23269}
  • CVE-2026-43249
    • 9p/xen: protect xen_9pfs_front_free against concurrent calls {CVE-2026-43249}
  • CVE-2026-31657
    • batman-adv: hold claim backbone gateways by reference {CVE-2026-31657}
  • CVE-2026-31598
    • ocfs2: fix possible deadlock between unlink and dio_end_io_write {CVE-2026-31598}
  • CVE-2026-31768
    • iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() {CVE-2026-31768}
  • CVE-2026-23216
    • scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() {CVE-2026-23216} *…
Record
CLSA-2026-1789460387
Updated
2026-11-02
OSVCLSA-2026-1792749577 No score

kernel: Fix of 97 CVEs

  • net: skbuff: propagate shared-frag marker in skb_zerocopy()
  • net: bridge: stop fast-leave after deleting a port group {CVE-2026-74480}
  • net: ipv6: clear suppressed fib6 rule result {CVE-2026-74581}
  • net/sched: fix pedit partial COW leading to page cache corruption {CVE-2026-46331}
  • ipvs: do not propagate one-packet flag to synced conns {CVE-2026-80714}
  • net: skbuff: propagate shared-frag marker through frag-transfer helpers {CVE-2026-43503}
  • sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START {CVE-2026-98130}
  • tipc: require net admin for TIPCv2 netlink mutators {CVE-2026-74283}
  • sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks {CVE-2026-53004}
  • usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() {CVE-2026-63962}
  • ice: fix double-free of tx_buf skb {CVE-2026-53009}
  • configfs: unhash the dentry before dropping the item in rmdir {CVE-2026-97949}
  • configfs_lookup(): don't leave ->s_dentry dangling on failure {CVE-2026-74359}
  • xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() {CVE-2026-53239}
  • bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops {CVE-2026-53078}
  • crypto: authencesn - reject short ahash digests during instance creation {CVE-2026-46033}
  • smb: client: reject userspace cifs.idmap descriptions {CVE-2026-97564}
  • HID: lg-g15: cancel pending work on remove to fix a use-after-free {CVE-2026-64362}
  • HID: hidpp: fix potential UAF in hidpp_connect_event() {CVE-2026-93826}
  • hid: hid-logitech-hidpp: avoid unnecessary assignments in hidpp_connect_event {CVE-2026-93826}
  • KEYS: encrypted: fix integer overflow of datablob_len {CVE-2026-98222}
  • scsi: qla2xxx: Skip vport under deletion in report ID acquisition {CVE-2026-97531}
  • dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() {CVE-2026-98343}
  • tipc: prevent snt_unacked underflow on CONN_ACK {CVE-2026-74282}
  • libceph: Fix potential null-ptr-deref in decode_choose_args() {CVE-2026-52957}
  • libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() {CVE-2026-52956}
  • sctp: prevent peer transport count overflow {CVE-2026-74469}
  • sctp: fix addr_wq_timer race in sctp_free_addr_wq() {CVE-2026-72383}
  • sctp: fix err_chunk memory leaks in INIT handling {CVE-2026-72413}
  • nvme: add missing SRCU grace period in error path {CVE-2026-89972}
  • nvme-tcp: fix host memory disclosure on R2T for a read command {CVE-2026-89481}
  • drm/vmwgfx: validate DRAW_PRIMITIVES header size before division {CVE-2026-74444}
  • drm/amd/display: Fix dangling pointer in CRTC reset function {CVE-2026-93175}
  • nouveau/gem: reserve the bo in the info ioctl around the vma lookup {CVE-2026-89553}
  • usb: fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-93117}
  • usb: xusbatm: don't rely on id table pointer arithmetic {CVE-2026-97539}
  • USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() {CVE-2026-53195}
  • wifi: brcmsmac: fix UAF in brcms_free_timer() {CVE-2026-98196}
  • slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() {CVE-2026-90057}
  • vxlan: re-fetch eth header after route_shortcircuit() {CVE-2026-80681}
  • net: thunderbolt: Fix frags[] overflow by bounding frame_count {CVE-2026-72157}
  • RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() {CVE-2026-46181}
  • wifi: ath9k: fix OOB access from firmware tx status queue ID {CVE-2026-74408}
  • ppp: require CAP_NET_ADMIN in target netns for unattached ioctls {CVE-2026-53075}
  • wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() {CVE-2026-46069}
  • Bluetooth: btusb: fix use-after-free on registration failure {CVE-2026-64471}
  • scsi: target: iscsi: Reserve a terminator byte for the login payload {CVE-2026-90011}
  • scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() {CVE-2026-46149}
  • pNFS: Fix use-after-free in pnfs_update_layout() {CVE-2026-63800}
  • NFSv4/flexfiles: reject zero filehandle version count {CVE-2026-53392}
  • fs/mbcache: cancel shrink work before destroying the…
Record
CLSA-2026-1792749577
Updated
2026-11-02
OSVCLSA-2026-1792750763 No score

kernel: Fix of 91 CVEs

  • net: skbuff: propagate shared-frag marker in skb_zerocopy()
  • net: bridge: stop fast-leave after deleting a port group {CVE-2026-74480}
  • net: ipv6: clear suppressed fib6 rule result {CVE-2026-74581}
  • net/sched: fix pedit partial COW leading to page cache corruption {CVE-2026-46331}
  • ipvs: do not propagate one-packet flag to synced conns {CVE-2026-80714}
  • net: skbuff: propagate shared-frag marker through frag-transfer helpers {CVE-2026-43503}
  • smb: client: harden POSIX SID length parsing {CVE-2026-64380}
  • RDMA: Fix use-after-free in rxe_queue_cleanup {CVE-2021-47616}
  • nfsd: validate symlink target length in NFSv4 CREATE {CVE-2026-89699}
  • sctp: fix addr_wq_timer race in sctp_free_addr_wq() {CVE-2026-72383}
  • isofs: fix out-of-bounds page array access on empty zisofs block {CVE-2026-89778}
  • configfs: unhash the dentry before dropping the item in rmdir {CVE-2026-97949}
  • netfilter: ipset: fix race between dump and ip_set_list resize {CVE-2026-64189}
  • netfilter: conntrack_irc: fix possible out-of-bounds read {CVE-2026-53268}
  • ipvs: clear the svc scheduler ptr early on edit {CVE-2026-53270}
  • netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920}
  • media: cx23885: cancel NetUP CI work before teardown {CVE-2026-89893}
  • dmaengine: Fix possible use after free {CVE-2026-72476}
  • net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring {CVE-2026-64047}
  • tipc: prevent snt_unacked underflow on CONN_ACK {CVE-2026-74282}
  • xfrm: hold net_device reference under RCU in bundle creation {CVE-2026-98364}
  • xfrm: Check for underflow in xfrm_state_mtu {CVE-2026-64009}
  • net: mpls: clear inner_protocol when the last label is popped {CVE-2026-97612}
  • net: guard timestamp cmsgs to real error queue skbs {CVE-2026-53223}
  • thunderbolt: Bound root directory content to block size {CVE-2026-53149}
  • SUNRPC: always drain cache_cleaner before destroying a cache_detail {CVE-2026-89548}
  • SUNRPC: harden gss_krb5_unwrap_v2 against short tokens {CVE-2026-89542}
  • SUNRPC: svcauth_gss: enforce krb5 token minimum length {CVE-2026-89550}
  • SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 {CVE-2026-89537}
  • SUNRPC: make sure cache entry active before cache_show {CVE-2024-53174}
  • ipv6: fix fib6 walker UAF on seq stop {CVE-2026-97940}
  • ipv6: sr: restore network header before routing and forwarding {CVE-2026-98096}
  • ipv6: sit: reload inner IPv6 header after GSO offloads {CVE-2026-53228}
  • ipv6: mcast: Fix use-after-free when processing MLD queries {CVE-2026-53275}
  • ipv6: exthdrs: refresh nh after handling HAO option {CVE-2026-63922}
  • ip6_gre: Use cached t->net in ip6erspan_changelink(). {CVE-2026-46120}
  • ipv6: fix possible UAF in icmpv6_rcv() {CVE-2026-53006}
  • ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() {CVE-2026-64002}
  • Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count {CVE-2026-64276}
  • ACPICA: Add validation for node in acpi_ns_build_normalized_path() {CVE-2026-97448}
  • scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() {CVE-2026-46149}
  • usb: xusbatm: don't rely on id table pointer arithmetic {CVE-2026-97539}
  • USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() {CVE-2026-53195}
  • mrp: introduce active flags to prevent UAF when applicant uninit {CVE-2022-50697}
  • HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature {CVE-2026-89729}
  • net/sched: defer qdisc freeing after failed creation {CVE-2026-98017}
  • Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp {CVE-2026-53071}
  • Bluetooth: L2CAP: Fix invalid access if ECRED Reconfigure fails {CVE-2026-53071}
  • scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation {CVE-2026-89856}
  • drm: fix race between partial drm_dev_register() failure and ioctl {CVE-2026-89823}
  • drm/amd/pm: bound pp_dpm_set_pp_table() memcpy {CVE-2026-97427}
  • dm log: fix out-of-bounds write due to region_count overflow {CVE-2026-53059} -…
Record
CLSA-2026-1792750763
Updated
2026-11-02
OSVopenSUSE-SU-2026:21555-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
  • CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
  • CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
  • CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
  • CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
  • CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
  • CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
  • CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
  • CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
  • CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
  • CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
  • CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
  • CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46023: dm mirror: fix integer…
Record
openSUSE-SU-2026:21555-1
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2026-53009 No score

CVE-2026-53009 in linux - Patched by Root

Root has patched CVE-2026-53009 in the linux package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2026-53009
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2026-53009 No score

CVE-2026-53009 in linux - Patched by Root

Root has patched CVE-2026-53009 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2026-53009
Updated
2026-11-02
OSVROOT-OS-DEBIAN-13-CVE-2026-53009 No score

CVE-2026-53009 in linux - Patched by Root

Root has patched CVE-2026-53009 in the linux package for Root:Debian:13. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-13-CVE-2026-53009
Updated
2026-11-03
OSVROOT-OS-UBUNTU-2204-CVE-2026-53009 No score

CVE-2026-53009 in linux - Patched by Root

Root has patched CVE-2026-53009 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2204-CVE-2026-53009
Updated
2026-11-06
OSVROOT-OS-UBUNTU-2404-CVE-2026-53009 No score

CVE-2026-53009 in linux - Patched by Root

Root has patched CVE-2026-53009 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2404-CVE-2026-53009
Updated
2026-11-06
OSVSUSE-SU-2026:23066-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
  • CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
  • CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
  • CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
  • CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
  • CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
  • CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
  • CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
  • CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
  • CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
  • CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
  • CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
  • CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46023: dm mirror: fix integer…
Record
SUSE-SU-2026:23066-1
Updated
2026-11-02
OSVSUSE-SU-2026:23068-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
  • CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
  • CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
  • CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
  • CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
  • CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
  • CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
  • CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
  • CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
  • CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
  • CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
  • CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
  • CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46023: dm mirror: fix integer…
Record
SUSE-SU-2026:23068-1
Updated
2026-11-02
OSVSUSE-SU-2026:23193-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
  • CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" (bsc#1256675).
  • CVE-2026-23097: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).
  • CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43130: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).
  • CVE-2026-43161: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (bsc#1264333).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43170: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43328: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832).
  • CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
  • CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45877: HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (bsc#1266468).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
  • CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46023: dm mirror: fix integer overflow in create_dirty_log() (bsc#1267449).
  • CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).
  • CVE-2026-46027: net/smc: avoid early lgr access in smc_clc_wait_msg (bsc#1266744).
  • CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).
  • CVE-2026-46040: inotify:…
Record
SUSE-SU-2026:23193-1
Updated
2026-11-02
OSVSUSE-SU-2026:23194-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
  • CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" (bsc#1256675).
  • CVE-2026-23097: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).
  • CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43130: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).
  • CVE-2026-43161: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (bsc#1264333).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43170: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43328: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832).
  • CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
  • CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45877: HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (bsc#1266468).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
  • CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46023: dm mirror: fix integer overflow in create_dirty_log() (bsc#1267449).
  • CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).
  • CVE-2026-46027: net/smc: avoid early lgr access in smc_clc_wait_msg (bsc#1266744).
  • CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).
  • CVE-2026-46040: inotify: fix…
Record
SUSE-SU-2026:23194-1
Updated
2026-11-02
OSVSUSE-SU-2026:23221-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
  • CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
  • CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
  • CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
  • CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
  • CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
  • CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
  • CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
  • CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
  • CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
  • CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
  • CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
  • CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46023: dm mirror: fix integer…
Record
SUSE-SU-2026:23221-1
Updated
2026-11-02
OSVSUSE-SU-2026:23231-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
  • CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
  • CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
  • CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
  • CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
  • CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
  • CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
  • CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
  • CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
  • CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
  • CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
  • CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
  • CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46023: dm mirror: fix integer…
Record
SUSE-SU-2026:23231-1
Updated
2026-11-02
OSVSUSE-SU-2026:23237-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
  • CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
  • CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
  • CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
  • CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
  • CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
  • CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
  • CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
  • CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
  • CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
  • CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
  • CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
  • CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46023: dm mirror: fix integer…
Record
SUSE-SU-2026:23237-1
Updated
2026-11-02
OSVSUSE-SU-2026:23241-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
  • CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" (bsc#1256675).
  • CVE-2026-23097: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).
  • CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43130: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).
  • CVE-2026-43161: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (bsc#1264333).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43170: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43328: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832).
  • CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
  • CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45877: HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (bsc#1266468).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
  • CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46023: dm mirror: fix integer overflow in create_dirty_log() (bsc#1267449).
  • CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).
  • CVE-2026-46027: net/smc: avoid early lgr access in smc_clc_wait_msg (bsc#1266744).
  • CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).
  • CVE-2026-46040: inotify:…
Record
SUSE-SU-2026:23241-1
Updated
2026-11-02
OSVSUSE-SU-2026:23244-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
  • CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" (bsc#1256675).
  • CVE-2026-23097: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).
  • CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43130: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).
  • CVE-2026-43161: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (bsc#1264333).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43170: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43328: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832).
  • CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
  • CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45877: HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (bsc#1266468).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
  • CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46023: dm mirror: fix integer overflow in create_dirty_log() (bsc#1267449).
  • CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).
  • CVE-2026-46027: net/smc: avoid early lgr access in smc_clc_wait_msg (bsc#1266744).
  • CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).
  • CVE-2026-46040: inotify: fix…
Record
SUSE-SU-2026:23244-1
Updated
2026-11-02
OSVSUSE-SU-2026:3130-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2023-20585: iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 (bsc#1243603).
  • CVE-2025-71302: drm/panthor: fix for dma-fence safe access rules (bsc#1264837).
  • CVE-2026-31479: drm/xe: always keep track of remap prev/next (bsc#1262765).
  • CVE-2026-31503: udp: Fix wildcard bind conflict check when using hash2 (bsc#1263077).
  • CVE-2026-43019: Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync (bsc#1264003).
  • CVE-2026-43057: net: mpls: error out if inner headers are not set (bsc#1264056).
  • CVE-2026-43092: xsk: validate MTU against usable frame size on bind (bsc#1264270).
  • CVE-2026-43124: pstore: ram_core: fix incorrect success return when vmap() fails (bsc#1264545).
  • CVE-2026-43157: octeontx2-af: CGX: fix bitmap leaks (bsc#1264624).
  • CVE-2026-43167: xfrm: always flush state and policy upon NETDEV_UNREGISTER event (bsc#1264580).
  • CVE-2026-43191: drm/amd/display: Adjust PHY FSM transition to TX_EN-to-PLL_ON for TMDS on DCN35 (bsc#1264548).
  • CVE-2026-43194: net: consume xmit errors of GSO frames (bsc#1264304).
  • CVE-2026-43199: net/mlx5e: Fix 'scheduling while atomic' in IPsec MAC address query (bsc#1264556).
  • CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
  • CVE-2026-43205: dpaa2-switch: validate num_ifs to prevent out-of-bounds write (bsc#1264328).
  • CVE-2026-43226: net/rds: No shortcut out of RDS_CONN_ERROR (bsc#1264544).
  • CVE-2026-43240: ima: verify the previous kernel's IMA buffer lies in addressable RAM (bsc#1264386).
  • CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
  • CVE-2026-43248: vhost: move vdpa group bound check to vhost_vdpa (bsc#1264302).
  • CVE-2026-43253: iommu/amd: move wait_on_sem() out of spinlock (bsc#1260593 bsc#1264419).
  • CVE-2026-43260: bnxt_en: Fix RSS context delete logic (bsc#1264429).
  • CVE-2026-43294: drm: renesas: rz-du: mipi_dsi: fix kernel panic when rebooting for some panels (bsc#1264853).
  • CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
  • CVE-2026-43320: drm/amd/display: Fix dsc eDP issue (bsc#1264987).
  • CVE-2026-43337: drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw() (bsc#1265112).
  • CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
  • CVE-2026-43373: net: ncsi: fix skb leak in error paths (bsc#1265079).
  • CVE-2026-43383: net/tcp-md5: Fix MAC comparison to be constant-time (bsc#1264744).
  • CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
  • CVE-2026-43449: nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set (bsc#1265023).
  • CVE-2026-43450: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (bsc#1264794).
  • CVE-2026-43452: netfilter: x_tables: guard option walkers against 1-byte tail reads (bsc#1265142).
  • CVE-2026-43465: net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (bsc#1264997).
  • CVE-2026-43466: net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (bsc#1264790).
  • CVE-2026-43468: net/mlx5: Fix deadlock between devlink lock and esw->wq (bsc#1264978).
  • CVE-2026-43473: scsi: mpi3mr: Add NULL checks when resetting request and reply queues (bsc#1264731).
  • CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
  • CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
  • CVE-2026-45857: scsi: csiostor: Fix dereference of null pointer rn (bsc#1266458).
  • CVE-2026-45858: ext4: subdivide EXT4_EXT_DATA_VALID1 (bsc#1266773).
  • CVE-2026-45899: ext4: drop extent cache when splitting extent fails (bsc#1266883).
  • CVE-2026-45920: ext4: fix dirtyclusters double decrement on fs shutdown (bsc#1266893).
  • CVE-2026-45922: RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (bsc#1266805). -…
Record
SUSE-SU-2026:3130-1
Updated
2026-11-02
OSVSUSE-SU-2026:3166-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-20585: iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 (bsc#1243603).
  • CVE-2025-71302: drm/panthor: fix for dma-fence safe access rules (bsc#1264837).
  • CVE-2026-31479: drm/xe: always keep track of remap prev/next (bsc#1262765).
  • CVE-2026-31503: udp: Fix wildcard bind conflict check when using hash2 (bsc#1263077).
  • CVE-2026-43019: Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync (bsc#1264003).
  • CVE-2026-43057: net: mpls: error out if inner headers are not set (bsc#1264056).
  • CVE-2026-43092: xsk: validate MTU against usable frame size on bind (bsc#1264270).
  • CVE-2026-43124: pstore: ram_core: fix incorrect success return when vmap() fails (bsc#1264545).
  • CVE-2026-43157: octeontx2-af: CGX: fix bitmap leaks (bsc#1264624).
  • CVE-2026-43167: xfrm: always flush state and policy upon NETDEV_UNREGISTER event (bsc#1264580).
  • CVE-2026-43191: drm/amd/display: Adjust PHY FSM transition to TX_EN-to-PLL_ON for TMDS on DCN35 (bsc#1264548).
  • CVE-2026-43194: net: consume xmit errors of GSO frames (bsc#1264304).
  • CVE-2026-43199: net/mlx5e: Fix 'scheduling while atomic' in IPsec MAC address query (bsc#1264556).
  • CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
  • CVE-2026-43205: dpaa2-switch: validate num_ifs to prevent out-of-bounds write (bsc#1264328).
  • CVE-2026-43226: net/rds: No shortcut out of RDS_CONN_ERROR (bsc#1264544).
  • CVE-2026-43240: ima: verify the previous kernel's IMA buffer lies in addressable RAM (bsc#1264386).
  • CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
  • CVE-2026-43248: vhost: move vdpa group bound check to vhost_vdpa (bsc#1264302).
  • CVE-2026-43253: iommu/amd: move wait_on_sem() out of spinlock (bsc#1260593 bsc#1264419).
  • CVE-2026-43260: bnxt_en: Fix RSS context delete logic (bsc#1264429).
  • CVE-2026-43294: drm: renesas: rz-du: mipi_dsi: fix kernel panic when rebooting for some panels (bsc#1264853).
  • CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
  • CVE-2026-43320: drm/amd/display: Fix dsc eDP issue (bsc#1264987).
  • CVE-2026-43337: drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw() (bsc#1265112).
  • CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
  • CVE-2026-43373: net: ncsi: fix skb leak in error paths (bsc#1265079).
  • CVE-2026-43383: net/tcp-md5: Fix MAC comparison to be constant-time (bsc#1264744).
  • CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
  • CVE-2026-43449: nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set (bsc#1265023).
  • CVE-2026-43450: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (bsc#1264794).
  • CVE-2026-43452: netfilter: x_tables: guard option walkers against 1-byte tail reads (bsc#1265142).
  • CVE-2026-43465: net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (bsc#1264997).
  • CVE-2026-43466: net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (bsc#1264790).
  • CVE-2026-43468: net/mlx5: Fix deadlock between devlink lock and esw->wq (bsc#1264978).
  • CVE-2026-43473: scsi: mpi3mr: Add NULL checks when resetting request and reply queues (bsc#1264731).
  • CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
  • CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
  • CVE-2026-45857: scsi: csiostor: Fix dereference of null pointer rn (bsc#1266458).
  • CVE-2026-45858: ext4: subdivide EXT4_EXT_DATA_VALID1 (bsc#1266773).
  • CVE-2026-45899: ext4: drop extent cache when splitting extent fails (bsc#1266883).
  • CVE-2026-45920: ext4: fix dirtyclusters double decrement on fs shutdown (bsc#1266893).
  • CVE-2026-45922: RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (bsc#1266805). -…
Record
SUSE-SU-2026:3166-1
Updated
2026-11-02
OSVUSN-8566-1 No score

linux, linux-gcp, linux-gke, linux-realtime vulnerabilities

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PSP security protocol;
  • ARM64 architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Intel NPU Driver;
  • DRBD Distributed Replicated Block Device drivers;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • Clock framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • EDAC drivers;
  • EFI core;
  • FWCTL subsystem;
  • GPU drivers;
  • HID subsystem;
  • I3C subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • MediaTek network drivers;
  • NVME drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Chrome hardware platform drivers;
  • ACPI WMI driver;
  • x86 platform drivers;
  • Generic PM domains;
  • MediaTek PM domains;
  • Power supply drivers;
  • MPAM driver;
  • Amlogic Meson reset controller drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • NVIDIA Tegra Control Backbone (CBB) driver;
  • SPI subsystem;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • TTY drivers;
  • USB Device Class drivers;
  • ULPI bus;
  • USB Type-C support driver;
  • TI TPS6598x USB Power Delivery controller driver;
  • vDPA drivers;
  • VFIO drivers;
  • Framebuffer layer;
  • TSM AMD SEV Guest driver;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS+ file system;
  • HugeTLB file system;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • Overlay file system;
  • Diskquota system;
  • SMB network file system;
  • Tracing file system;
  • DRM TTM subsystem;
  • Control group (cgroup);
  • Kernel CPU control infrastructure;
  • QorIQ DPAA2 FSL-MC bus driver;
  • Freescale ENETC Ethernet drivers;
  • Memory Management;
  • padata parallel execution mechanism;
  • PPP protocol drivers and compressors;
  • Bluetooth subsystem;
  • Networking core;
  • Netfilter;
  • Network traffic control;
  • io_uring subsystem;
  • IPC subsystem;
  • Audit subsystem;
  • BPF subsystem;
  • Kernel exit() syscall;
  • Kernel fork() syscall;
  • Kernel futex primitives;
  • Padata parallel execution mechanism;
  • Scheduler infrastructure;
  • Tracing infrastructure;
  • Cryptographic library;
  • Memory management;
  • 802.1Q VLAN protocol;
  • B.A.T.M.A.N. meshing protocol;
  • Ethernet bridge;
  • Ceph Core library;
  • Distributed Switch Architecture;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Open vSwitch;
  • Phonet protocol;
  • RDS protocol;
  • SCTP protocol;
  • SMC sockets;
  • TIPC protocol;
  • TLS protocol;
  • Unix domain sockets;
  • VMware vSockets driver;
  • XFRM subsystem;
  • Integrity Measurement Architecture(IMA) framework;
  • SELinux security module;
  • ALSA framework;
  • HD-audio driver;
  • QCOM ASoC drivers; -…
Record
USN-8566-1
Updated
2026-11-07
OSVUSN-8568-1 No score

linux-oem-7.0 vulnerabilities

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PSP security protocol;
  • ARM64 architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Intel NPU Driver;
  • DRBD Distributed Replicated Block Device drivers;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • Clock framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • EDAC drivers;
  • EFI core;
  • FWCTL subsystem;
  • GPU drivers;
  • HID subsystem;
  • I3C subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • MediaTek network drivers;
  • NVME drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Chrome hardware platform drivers;
  • ACPI WMI driver;
  • x86 platform drivers;
  • Generic PM domains;
  • MediaTek PM domains;
  • Power supply drivers;
  • MPAM driver;
  • Amlogic Meson reset controller drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • NVIDIA Tegra Control Backbone (CBB) driver;
  • SPI subsystem;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • TTY drivers;
  • USB Device Class drivers;
  • ULPI bus;
  • USB Type-C support driver;
  • TI TPS6598x USB Power Delivery controller driver;
  • vDPA drivers;
  • VFIO drivers;
  • Framebuffer layer;
  • TSM AMD SEV Guest driver;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS+ file system;
  • HugeTLB file system;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • Diskquota system;
  • SMB network file system;
  • Tracing file system;
  • DRM TTM subsystem;
  • Control group (cgroup);
  • Kernel CPU control infrastructure;
  • QorIQ DPAA2 FSL-MC bus driver;
  • Freescale ENETC Ethernet drivers;
  • Memory Management;
  • padata parallel execution mechanism;
  • PPP protocol drivers and compressors;
  • Bluetooth subsystem;
  • Networking core;
  • Netfilter;
  • Network traffic control;
  • io_uring subsystem;
  • IPC subsystem;
  • Audit subsystem;
  • BPF subsystem;
  • Kernel exit() syscall;
  • Kernel fork() syscall;
  • Kernel futex primitives;
  • Padata parallel execution mechanism;
  • Scheduler infrastructure;
  • Tracing infrastructure;
  • Cryptographic library;
  • Memory management;
  • 802.1Q VLAN protocol;
  • B.A.T.M.A.N. meshing protocol;
  • Ethernet bridge;
  • Ceph Core library;
  • Distributed Switch Architecture;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Open vSwitch;
  • Phonet protocol;
  • RDS protocol;
  • SCTP protocol;
  • SMC sockets;
  • TIPC protocol;
  • TLS protocol;
  • Unix domain sockets;
  • VMware vSockets driver;
  • XFRM subsystem;
  • Integrity Measurement Architecture(IMA) framework;
  • SELinux security module;
  • ALSA framework;
  • HD-audio driver;
  • QCOM ASoC drivers;
  • SOF drivers;
  • STI ASoC…
Record
USN-8568-1
Updated
2026-11-07
OSVUSN-8569-1 No score

linux-hwe-7.0 vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43284, CVE-2026-43500, CVE-2026-45998, CVE-2026-46000)

It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43503, CVE-2026-46300)

Qualys discovered that a race condition existed in the ptrace subsystem of the Linux kernel when privileged processes are exiting. An unprivileged local attacker could use this issue to expose sensitive information. (CVE-2026-46333)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contain a memory leak when handling AppArmor notifications. A local attacker could use this to cause resource exhaustion. (CVE-2026-47326)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contain a NULL pointer dereference when handling AppArmor notifications. A local attacker could use this to cause a kernel oops. (CVE-2026-47327)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained an invalid free when handling AppArmor notifications. A local attacker could use this to corrupt kernel memory. (CVE-2026-47328)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained insufficient validation of AppArmor notification responses. A local attacker could use this to allow crafted responses to be processed. (CVE-2026-47329)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 used an uninitialized variable when handling AppArmor notifications. A local attacker could use this to cause incorrect caching of data. (CVE-2026-47330)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained an out-of-bounds (OOB) read when handling AppArmor notifications. A local attacker could use this to cause information disclosure of kernel memory. (CVE-2026-47332)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained a out-of-bounds (OOB) read when handling AppArmor notifications. A local attacker could use this to cause kernel memory corruption and, theoretically, influence processing of AppArmor policies. (CVE-2026-47333)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained incorrect holding of locks when handling AppArmor notifications. A local attacker could use this to cause a kernel panic or deadlock. (CVE-2026-47334)

Tristan Madani and Trevor Lawrence have each independently discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained a NULL pointer dereference when handling AppArmor network socket mediation. A local attacker could use this to cause a kernel oops. (CVE-2026-47337)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PSP security protocol;
  • ARM64 architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Intel…
Record
USN-8569-1
Updated
2026-11-07
OSVUSN-8593-1 No score

linux-ibm, linux-oracle vulnerabilities

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • x86 platform drivers;
  • PSP security protocol;
  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Intel NPU Driver;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Auxiliary display drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Ublk userspace block driver;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • Clock framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • DPLL subsystem;
  • EDAC drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • EFI core;
  • FWCTL subsystem;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • IOMMU subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NVME drivers;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Chrome hardware platform drivers;
  • ACPI WMI driver;
  • Generic PM domains;
  • MediaTek PM domains;
  • Power supply drivers;
  • MPAM driver;
  • Amlogic Meson reset controller drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • NVIDIA Tegra Control Backbone (CBB) driver;
  • SPI subsystem;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • USB Device Class drivers;
  • ULPI bus;
  • DesignWare USB2 driver;
  • USB Gadget drivers;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • USB Type-C support driver;
  • USB Type-C Port Controller Manager driver;
  • TI TPS6598x USB Power Delivery controller driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • vDPA drivers;
  • VFIO drivers;
  • Framebuffer layer;
  • TSM AMD SEV Guest driver;
  • Xen hypervisor drivers;
  • 9P distributed file system;
  • File systems infrastructure;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS+ file system;
  • HugeTLB file system;
  • Network file systems library;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • Overlay file system;
  • Diskquota system;
  • SMB network file system;
  • Tracing file system;
  • UDF file system;
  • DRM TTM subsystem;
  • Control group (cgroup);
  • Kernel CPU control infrastructure;
  • Tracing infrastructure;
  • QorIQ DPAA2 FSL-MC bus driver;
  • Freescale ENETC Ethernet drivers;
  • Memory management;
  • Memory Management;
  • Linked list library;
  • Netfilter;
  • padata…
Record
USN-8593-1
Updated
2026-11-07
OSVUSN-8603-1 No score

linux-azure, linux-azure-fde vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • x86 platform drivers;
  • PSP security protocol;
  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Intel NPU Driver;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Auxiliary display drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Ublk userspace block driver;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • DPLL subsystem;
  • EDAC drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • EFI core;
  • FWCTL subsystem;
  • GPIO subsystem;
  • GPU drivers;
  • Greybus drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • IOMMU subsystem;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • IBM Advanced System Management driver;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • Device tree and open firmware driver;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Chrome hardware platform drivers;
  • ACPI WMI driver;
  • Generic PM domains;
  • MediaTek PM domains;
  • Power supply drivers;
  • Remote Processor subsystem;
  • MPAM driver;
  • Amlogic Meson reset controller drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • NVIDIA Tegra Control Backbone (CBB) driver;
  • SPI subsystem;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • SM750 framebuffer staging driver;
  • TCM subsystem;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • USB Device Class drivers;
  • ULPI bus;
  • DesignWare USB2 driver;
  • USB Gadget drivers;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • USB Type-C support driver;
  • USB Type-C Port Controller Manager driver;
  • TI TPS6598x USB Power Delivery controller driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • vDPA drivers;
  • VFIO drivers;
  • Framebuffer layer;
  • TSM AMD SEV Guest driver;
  • Xen hypervisor drivers;
  • 9P distributed file system;
  • File systems infrastructure;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS+ file system;
  • HugeTLB file system;
  • Journaling layer for block devices (JBD2);
  • Network file systems…
Record
USN-8603-1
Updated
2026-11-07
OSVUSN-8618-1 No score

linux-aws, linux-raspi vulnerabilities

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • x86 platform drivers;
  • Cryptographic API;
  • PSP security protocol;
  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Intel NPU Driver;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Auxiliary display drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Ublk userspace block driver;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • Clock framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • DPLL subsystem;
  • EDAC drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • EFI core;
  • FWCTL subsystem;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NVME drivers;
  • Parport drivers;
  • PCI subsystem;
  • PHY drivers;
  • Pin controllers subsystem;
  • Chrome hardware platform drivers;
  • ACPI WMI driver;
  • Generic PM domains;
  • MediaTek PM domains;
  • Power supply drivers;
  • Voltage and Current Regulator drivers;
  • MPAM driver;
  • Amlogic Meson reset controller drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • NVIDIA Tegra Control Backbone (CBB) driver;
  • SPI subsystem;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • USB Device Class drivers;
  • ULPI bus;
  • DesignWare USB2 driver;
  • USB Gadget drivers;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • USB Type-C support driver;
  • USB Type-C Port Controller Manager driver;
  • TI TPS6598x USB Power Delivery controller driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • vDPA drivers;
  • VFIO drivers;
  • Framebuffer layer;
  • TSM AMD SEV Guest driver;
  • Xen hypervisor drivers;
  • 9P distributed file system;
  • File systems infrastructure;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS+ file system;
  • HugeTLB file system;
  • Network file systems library;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • Overlay file system;
  • Diskquota system;
  • SMB network file system;
  • Tracing file system;
  • UDF file system;
  • DRM TTM subsystem;
  • Control group (cgroup);
  • Kernel CPU control infrastructure;
  • Tracing infrastructure;
  • QorIQ DPAA2 FSL-MC bus driver;
  • Freescale ENETC Ethernet drivers; -…
Record
USN-8618-1
Updated
2026-11-07

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-64k
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-64k-core
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-64k-debug
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-64k-debug-core
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-64k-debug-devel
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-64k-debug-devel-matched
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-64k-debug-modules
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-64k-debug-modules-core
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-64k-debug-modules-extra
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-64k-devel
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-64k-devel-matched
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-64k-modules
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-64k-modules-core
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-64k-modules-extra
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-abi-stablelists
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-core
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-cross-headers
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-debug
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-debug-core
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-debug-devel
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-debug-devel-matched
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-debug-modules
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-debug-modules-core
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-debug-modules-extra
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-debug-uki-virt
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-devel
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-devel-matched
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-doc
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-headers
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-modules
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-modules-core
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-modules-extra
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-modules-extra-matched
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-rt
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-rt-64k
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-rt-64k-core
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-rt-64k-debug
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-rt-64k-debug-core
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-rt-64k-debug-devel
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-rt-64k-debug-modules
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-rt-64k-debug-modules-core
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-rt-64k-debug-modules-extra
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-rt-64k-devel
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-rt-64k-modules
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-rt-64k-modules-core
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-rt-64k-modules-extra
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-rt-core
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-rt-debug
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-rt-debug-core
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-rt-debug-devel
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-rt-debug-modules
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel-rt-debug-modules-core
AlmaLinux:10
From an advisory covering 12 CVEs
 before 6.12.0-211.37.1.el10_2
6.12.0-211.37.1.el10_2
kernel
Azure Linux:3
 through 6.6.161.1-1 None known
linux-lts
Alpaquita:23
 6.1.189-r0 up to 6.1.191-r0
6.1.191-r0
linux-lts
Alpaquita:25
 6.12.112-r0 up to 6.12.115-r0
6.12.115-r0
linux-lts
Alpaquita:stream
 6.18.55-r0 up to 6.18.58-r0
6.18.58-r0
bpftool
TuxCare:CentOS:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel
TuxCare:CentOS:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-debug
TuxCare:CentOS:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-debug-devel
TuxCare:CentOS:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-devel
TuxCare:CentOS:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-doc
TuxCare:CentOS:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-headers
TuxCare:CentOS:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-tools
TuxCare:CentOS:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-tools-libs
TuxCare:CentOS:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-tools-libs-devel
TuxCare:CentOS:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
perf
TuxCare:CentOS:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
python-perf
TuxCare:CentOS:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
bpftool
TuxCare:OracleLinux:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel
TuxCare:OracleLinux:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-debug
TuxCare:OracleLinux:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-debug-devel
TuxCare:OracleLinux:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-devel
TuxCare:OracleLinux:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-doc
TuxCare:OracleLinux:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-headers
TuxCare:OracleLinux:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-tools
TuxCare:OracleLinux:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-tools-libs
TuxCare:OracleLinux:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-tools-libs-devel
TuxCare:OracleLinux:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
perf
TuxCare:OracleLinux:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
python-perf
TuxCare:OracleLinux:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
bpftool
TuxCare:RHEL:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel
TuxCare:RHEL:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-debug
TuxCare:RHEL:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-debug-devel
TuxCare:RHEL:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-devel
TuxCare:RHEL:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-doc
TuxCare:RHEL:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-headers
TuxCare:RHEL:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-tools
TuxCare:RHEL:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-tools-libs
TuxCare:RHEL:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-tools-libs-devel
TuxCare:RHEL:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
perf
TuxCare:RHEL:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
python-perf
TuxCare:RHEL:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
hyperv-daemons
TuxCare:Debian:10
From an advisory covering 237 CVEs
 before 4.19.325-2+tuxcare.els1
4.19.325-2+tuxcare.els1
libbpf-dev
TuxCare:Debian:10
From an advisory covering 237 CVEs
 before 4.19.325-2+tuxcare.els1
4.19.325-2+tuxcare.els1
libbpf4.19
TuxCare:Debian:10
From an advisory covering 237 CVEs
 before 4.19.325-2+tuxcare.els1
4.19.325-2+tuxcare.els1
libcpupower-dev
TuxCare:Debian:10
From an advisory covering 237 CVEs
 before 4.19.325-2+tuxcare.els1
4.19.325-2+tuxcare.els1
libcpupower1
TuxCare:Debian:10
From an advisory covering 237 CVEs
 before 4.19.325-2+tuxcare.els1
4.19.325-2+tuxcare.els1
linux-compiler-gcc-8-x86
TuxCare:Debian:10
From an advisory covering 237 CVEs
 before 4.19.325-2+tuxcare.els1
4.19.325-2+tuxcare.els1
linux-config-4.19
TuxCare:Debian:10
From an advisory covering 237 CVEs
 before 4.19.325-2+tuxcare.els1
4.19.325-2+tuxcare.els1
linux-cpupower
TuxCare:Debian:10
From an advisory covering 237 CVEs
 before 4.19.325-2+tuxcare.els1
4.19.325-2+tuxcare.els1
linux-doc-4.19
TuxCare:Debian:10
From an advisory covering 237 CVEs
 before 4.19.325-2+tuxcare.els1
4.19.325-2+tuxcare.els1
linux-headers-4.19.0-29-all
TuxCare:Debian:10
From an advisory covering 237 CVEs
 before 4.19.325-2+tuxcare.els1
4.19.325-2+tuxcare.els1
linux-headers-4.19.0-29-all-amd64
TuxCare:Debian:10
From an advisory covering 237 CVEs
 before 4.19.325-2+tuxcare.els1
4.19.325-2+tuxcare.els1
linux-headers-4.19.0-29-amd64
TuxCare:Debian:10
From an advisory covering 237 CVEs
 before 4.19.325-2+tuxcare.els1
4.19.325-2+tuxcare.els1
linux-headers-4.19.0-29-common
TuxCare:Debian:10
From an advisory covering 237 CVEs
 before 4.19.325-2+tuxcare.els1
4.19.325-2+tuxcare.els1
linux-image-4.19.0-29-amd64-unsigned
TuxCare:Debian:10
From an advisory covering 237 CVEs
 before 4.19.325-2+tuxcare.els1
4.19.325-2+tuxcare.els1
linux-image-amd64-signed-template
TuxCare:Debian:10
From an advisory covering 237 CVEs
 before 4.19.325-2+tuxcare.els1
4.19.325-2+tuxcare.els1
linux-kbuild-4.19
TuxCare:Debian:10
From an advisory covering 237 CVEs
 before 4.19.325-2+tuxcare.els1
4.19.325-2+tuxcare.els1
linux-libc-dev
TuxCare:Debian:10
From an advisory covering 237 CVEs
 before 4.19.325-2+tuxcare.els1
4.19.325-2+tuxcare.els1
Kernel
Linux
 4.17.0 up to 6.1.191, 6.2.0 up to 6.6.160, 6.7.0 up to 6.12.114, 6.13.0 up to 6.18.57, 6.19.0 up to 7.0.10
6.1.1916.6.1606.12.1146.18.577.0.10
linux
Debian:12
 All versions, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 45 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.170-16.1.170-26.1.170-36.1.172-16.1.174-16.1.176-16.1.177-16.1.180-16.1.187-16.1.190-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+1
 None known
linux
Debian:13
 before 6.12.115-2, plus listed versions
6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1
Show 33 moreShow less
6.12.113-16.12.115-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-1
6.12.115-2
linux
Debian:14
 before 7.0.10-1, plus listed versions
6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1
Show 45 moreShow less
6.12.113-16.12.115-16.12.115-26.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp1
7.0.10-1
kernel
openEuler:22.03-LTS-SP4
From an advisory covering 17 CVEs
 before 5.10.0-325.0.0.226.oe2203sp4
5.10.0-325.0.0.226.oe2203sp4
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-64k-debug-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-64k-debug-devel-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-64k-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-64k-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-64k-devel-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-debug-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-debug-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-debug-devel-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-devel-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-doc
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-rt-64k-debug-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-rt-64k-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-rt-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-tools-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-zfcpdump-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-zfcpdump-devel-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
libperf-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
perf
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
perf-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
python3-perf
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
python3-perf-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
rtla
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
rv
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-64k
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-64k-core
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-64k-debug
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-64k-debug-core
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-64k-debug-modules
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-64k-debug-modules-core
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-64k-debug-modules-extra
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-64k-modules
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-64k-modules-core
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-64k-modules-extra
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-abi-stablelists
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-core
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-debug
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-debug-core
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-debug-modules
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-debug-modules-core
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-debug-modules-extra
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-debug-uki-virt
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-modules
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel-modules-core
Red Hat:enterprise_linux:10.2
From an advisory covering 12 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel
Rocky Linux:10
From an advisory covering 11 CVEs
 before 0:6.12.0-211.37.1.el10_2
0:6.12.0-211.37.1.el10_2
kernel
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:4.18.0-553.155.1.el8_10
0:4.18.0-553.155.1.el8_10
kernel-rt
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:4.18.0-553.155.1.rt7.496.el8_10
0:4.18.0-553.155.1.rt7.496.el8_10
linux
Root:Debian:11
 before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
rootio-linux
Root:Debian:11
 before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
rootio-linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
linux
Root:Debian:13
 before 6.12.115-2.aikido.164
6.12.115-2.aikido.164
rootio-linux
Root:Debian:13
 before 6.12.115-2.aikido.164
6.12.115-2.aikido.164
linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
rootio-linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
rootio-linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
kernel-obs-build
SUSE:Linux Micro Extras 6.2
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-syms
SUSE:Linux Micro Extras 6.2
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-64kb
SUSE:Linux Micro 6.2
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-default
SUSE:Linux Micro 6.2
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-default-base
SUSE:Linux Micro 6.2
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1.160000.2.19
6.12.0-160000.37.1.160000.2.19
kernel-rt
SUSE:Linux Micro 6.2
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-source
SUSE:Linux Micro 6.2
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-rt
SUSE:Linux Micro 6.1
From an advisory covering 648 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-source-rt
SUSE:Linux Micro 6.1
From an advisory covering 648 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-default
SUSE:Linux Micro 6.1
From an advisory covering 647 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-kvmsmall
SUSE:Linux Micro 6.1
From an advisory covering 647 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-source
SUSE:Linux Micro 6.1
From an advisory covering 647 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-64kb
SUSE:Linux Enterprise Server 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-azure
SUSE:Linux Enterprise Server 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-default
SUSE:Linux Enterprise Server 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-default-base
SUSE:Linux Enterprise Server 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1.160000.2.19
6.12.0-160000.37.1.160000.2.19
kernel-docs
SUSE:Linux Enterprise Server 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-kvmsmall
SUSE:Linux Enterprise Server 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-obs-qa
SUSE:Linux Enterprise Server 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-source
SUSE:Linux Enterprise Server 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-syms
SUSE:Linux Enterprise Server 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-64kb
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-azure
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-default
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1.160000.2.19
6.12.0-160000.37.1.160000.2.19
kernel-docs
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-kvmsmall
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-obs-qa
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-source
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-syms
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-zfcpdump
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-rt
SUSE:Linux Micro 6.0
From an advisory covering 648 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-source-rt
SUSE:Linux Micro 6.0
From an advisory covering 648 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-default
SUSE:Linux Micro 6.0
From an advisory covering 647 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-kvmsmall
SUSE:Linux Micro 6.0
From an advisory covering 647 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-source
SUSE:Linux Micro 6.0
From an advisory covering 647 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-livepatch-SLE15-SP7-RT_Update_18
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 513 CVEs
 before 1-150700.1.5.1
1-150700.1.5.1
kernel-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 513 CVEs
 before 6.4.0-150700.7.67.1
6.4.0-150700.7.67.1
kernel-source-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 513 CVEs
 before 6.4.0-150700.7.67.1
6.4.0-150700.7.67.1
kernel-syms-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 513 CVEs
 before 6.4.0-150700.7.67.1
6.4.0-150700.7.67.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 513 CVEs
 before 6.4.0-150700.53.73.2
6.4.0-150700.53.73.2
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 513 CVEs
 before 6.4.0-150700.53.73.2
6.4.0-150700.53.73.2
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 513 CVEs
 before 6.4.0-150700.53.73.2.150700.17.41.4
6.4.0-150700.53.73.2.150700.17.41.4
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 513 CVEs
 before 6.4.0-150700.53.73.1
6.4.0-150700.53.73.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 513 CVEs
 before 6.4.0-150700.53.73.2
6.4.0-150700.53.73.2
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 513 CVEs
 before 6.4.0-150700.53.73.1
6.4.0-150700.53.73.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 513 CVEs
 before 6.4.0-150700.53.73.2
6.4.0-150700.53.73.2
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 513 CVEs
 before 6.4.0-150700.53.73.1
6.4.0-150700.53.73.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 513 CVEs
 before 6.4.0-150700.53.73.1
6.4.0-150700.53.73.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP7
From an advisory covering 513 CVEs
 before 6.4.0-150700.53.73.2
6.4.0-150700.53.73.2
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 513 CVEs
 before 6.4.0-150700.53.73.2
6.4.0-150700.53.73.2
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-aws-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1
Show 45 moreShow less
5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gcp-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 45 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-ibm-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1
Show 45 moreShow less
5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-oracle-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1
 None known
linux-raspi-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1
Show 45 moreShow less
5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1
 None known
linux
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 45 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110
 None known
linux-aws
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5
Show 45 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.15
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1
Show 45 moreShow less
5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1
 None known
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8
Show 45 moreShow less
5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
linux-azure-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
 None known
linux-azure-5.15
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1
Show 45 moreShow less
5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1
 None known
linux-azure-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
 None known
linux-azure-fde
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
 None known
linux-azure-fde-5.15
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.15.0-1019.24~20.04.1.15.15.0-1020.25~20.04.1.15.15.0-1021.26~20.04.1.15.15.0-1029.36~20.04.1.15.15.0-1030.37~20.04.1.1
Show 45 moreShow less
5.15.0-1031.38~20.04.1.15.15.0-1033.40~20.04.1.15.15.0-1034.41~20.04.1.25.15.0-1035.42~20.04.1.15.15.0-1036.43~20.04.1.15.15.0-1037.44~20.04.1.15.15.0-1038.45~20.04.1.15.15.0-1039.46~20.04.1.15.15.0-1040.47~20.04.1.15.15.0-1041.48~20.04.1.15.15.0-1042.49~20.04.1.15.15.0-1043.50~20.04.1.15.15.0-1046.53~20.04.1.15.15.0-1047.54~20.04.1.15.15.0-1049.56~20.04.1.15.15.0-1050.57~20.04.1.15.15.0-1051.59~20.04.1.15.15.0-1052.60~20.04.1.15.15.0-1053.61~20.04.1.15.15.0-1054.62~20.04.1.15.15.0-1056.64~20.04.1.15.15.0-1057.65~20.04.1.15.15.0-1058.66~20.04.2.15.15.0-1059.67~20.04.1.15.15.0-1060.69~20.04.1.15.15.0-1061.70~20.04.1.15.15.0-1063.72~20.04.1.15.15.0-1064.73~20.04.1.15.15.0-1065.74~20.04.1.15.15.0-1067.76~20.04.1.15.15.0-1068.77~20.04.1.15.15.0-1070.79~20.04.1.15.15.0-1071.80~20.04.1.15.15.0-1072.81~20.04.1.15.15.0-1073.82~20.04.1.15.15.0-1074.83~20.04.1.15.15.0-1076.85~20.04.1.15.15.0-1078.87~20.04.1.15.15.0-1081.90~20.04.1.15.15.0-1082.91~20.04.1.15.15.0-1086.95~20.04.1.15.15.0-1087.96~20.04.1.15.15.0-1088.97~20.04.1.15.15.0-1089.98~20.04.1.15.15.0-1091.100~20.04.1.1
 None known
linux-bluefield
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.4.0-1007.105.4.0-1011.145.4.0-1012.155.4.0-1013.165.4.0-1016.19
Show 45 moreShow less
5.4.0-1019.225.4.0-1020.235.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1030.335.4.0-1032.355.4.0-1035.385.4.0-1036.395.4.0-1040.445.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1049.555.4.0-1050.565.4.0-1054.605.4.0-1058.645.4.0-1059.655.4.0-1060.665.4.0-1062.685.4.0-1064.705.4.0-1065.715.4.0-1066.725.4.0-1068.745.4.0-1070.765.4.0-1071.775.4.0-1072.785.4.0-1073.795.4.0-1074.805.4.0-1075.815.4.0-1076.825.4.0-1077.835.4.0-1078.845.4.0-1079.855.4.0-1080.875.4.0-1081.885.4.0-1082.895.4.0-1083.905.4.0-1084.915.4.0-1085.92
 None known
linux-gcp
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7
Show 45 moreShow less
5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1033.355.4.0-1034.375.4.0-1036.395.4.0-1037.405.4.0-1038.415.4.0-1040.435.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1044.475.4.0-1046.495.4.0-1049.535.4.0-1051.555.4.0-1052.565.4.0-1053.575.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1060.645.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1065.695.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1072.775.4.0-1073.785.4.0-1075.80
 None known
linux-gcp-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1
Show 7 moreShow less
5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3
 None known
linux-gcp-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1
Show 8 moreShow less
5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1
 None known
linux-gcp-5.15
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2
Show 45 moreShow less
5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.15.15.0-1065.73~20.04.15.15.0-1066.74~20.04.15.15.0-1067.75~20.04.15.15.0-1068.76~20.04.15.15.0-1069.77~20.04.15.15.0-1070.78~20.04.15.15.0-1071.79~20.04.15.15.0-1072.80~20.04.15.15.0-1073.81~20.04.15.15.0-1074.83~20.04.1
 None known
linux-gcp-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41
 None known
linux-gke
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
 None known
linux-gke-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1
Show 13 moreShow less
5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1
 None known
linux-gkeop
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13
Show 45 moreShow less
5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77
 None known
linux-gkeop-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2
Show 40 moreShow less
5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1
 None known
linux-hwe-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1
Show 7 moreShow less
5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1
 None known
linux-hwe-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1
Show 11 moreShow less
5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1
 None known
linux-hwe-5.15
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
Show 45 moreShow less
5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1
 None known
linux-hwe-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1
Show 16 moreShow less
5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1
 None known
linux-ibm
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.4.0-1003.45.4.0-1004.55.4.0-1005.65.4.0-1006.75.4.0-1007.8
Show 45 moreShow less
5.4.0-1008.95.4.0-1010.115.4.0-1012.135.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1017.195.4.0-1018.205.4.0-1019.215.4.0-1020.225.4.0-1021.235.4.0-1023.255.4.0-1026.295.4.0-1028.325.4.0-1029.335.4.0-1031.355.4.0-1032.365.4.0-1033.375.4.0-1034.385.4.0-1036.415.4.0-1037.425.4.0-1040.455.4.0-1041.465.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1048.535.4.0-1049.545.4.0-1050.555.4.0-1051.565.4.0-1052.575.4.0-1053.585.4.0-1054.595.4.0-1056.615.4.0-1057.625.4.0-1058.635.4.0-1059.645.4.0-1060.655.4.0-1061.665.4.0-1063.685.4.0-1064.695.4.0-1065.705.4.0-1066.71
 None known
linux-ibm-5.15
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1
Show 45 moreShow less
5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.15.15.0-1057.60~20.04.15.15.0-1058.61~20.04.15.15.0-1059.62~20.04.15.15.0-1060.63~20.04.15.15.0-1061.64~20.04.15.15.0-1062.65~20.04.15.15.0-1063.66~20.04.15.15.0-1064.67~20.04.15.15.0-1065.68~20.04.15.15.0-1066.69~20.04.15.15.0-1067.70~20.04.15.15.0-1068.71~20.04.15.15.0-1069.72~20.04.15.15.0-1074.77~20.04.15.15.0-1075.78~20.04.15.15.0-1076.79~20.04.15.15.0-1078.81~20.04.15.15.0-1079.82~20.04.15.15.0-1080.83~20.04.15.15.0-1081.84~20.04.15.15.0-1083.86~20.04.15.15.0-1085.88~20.04.15.15.0-1086.89~20.04.15.15.0-1087.90~20.04.15.15.0-1089.92~20.04.15.15.0-1090.93~20.04.15.15.0-1091.94~20.04.15.15.0-1092.95~20.04.15.15.0-1093.96~20.04.15.15.0-1094.97~20.04.1
 None known
linux-intel-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19
 None known
dtb-aarch64
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-64kb
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-azure
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-default
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-default-base
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1.160000.2.19
6.12.0-160000.37.1.160000.2.19
kernel-docs
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-kvmsmall
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-obs-build
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-obs-qa
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-rt
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-source
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-syms
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-zfcpdump
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1

History

History
RecordedChangedSources
affectedOSV
affectedOSV
affectedOSV
affectedOSV
affectedOSV
factsOSV
affectedOSV
affectedOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-53009 is a high vulnerability (CVSS 7.8) in Linux, published June 24, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.18%, the 7th percentile. Fixed in linux-lts 6.1.191-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 818 package rows, 1,416 versions, 4,620 references and the rest of 26 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 6 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open