Every CVE Search/ Get API key

CVE-2026-53059

dm log: fix out-of-bounds write due to region_count overflow

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

dm log: fix out-of-bounds write due to region_count overflow

The local variable region_count in create_log_context() is declared as unsigned int (32-bit), but dm_sector_div_up() returns sector_t (64-bit). When a device-mapper target has a sufficiently large ti->len with a small region_size, the division result can exceed UINT_MAX. The truncated value is then used to calculate bitset_size, causing clean_bits, sync_bits, and recovering_bits to be allocated far smaller than needed for the actual number of regions.

Subsequent log operations (log_set_bit, log_clear_bit, log_test_bit) use region indices derived from the full untruncated region space, causing out-of-bounds writes to kernel heap memory allocated by vmalloc.

This can be reproduced by creating a mirror target whose region_count overflows 32 bits:

dmsetup create bigzero --table '0 8589934594 zero' dmsetup create mymirror --table '0 8589934594 mirror
core 2 2 nosync 2 /dev/mapper/bigzero 0
/dev/mapper/bigzero 0'

The status output confirms the truncation (sync_count=1 instead of 4294967297, because 0x100000001 was truncated to 1):

$ dmsetup status mymirror 0 8589934594 mirror 2 254:1 254:1 1/4294967297 ...

This leads to a kernel crash in core_in_sync:

BUG: scheduling while atomic: (udev-worker)/9150/0x00000000 RIP: 0010:core_in_sync+0x14/0x30 [dm_log] CR2: 0000000000000008 Fixing recursive fault but reboot is needed!

Fix by widening the local region_count to sector_t and adding an explicit overflow check before the value is assigned to lc->region_count.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.14%Unchanged since Jun 25, 2026
90%50%10%1%

What each source reports

NVD Score used 7.8

In the Linux kernel, the following vulnerability has been resolved:

dm log: fix out-of-bounds write due to region_count overflow

The local variable region_count in create_log_context() is declared as unsigned int (32-bit), but dm_sector_div_up() returns sector_t (64-bit). When a device-mapper target has a sufficiently large ti->len with a small region_size, the division result can exceed UINT_MAX. The truncated value is then used to calculate bitset_size, causing clean_bits, sync_bits, and recovering_bits to be allocated far smaller than needed for the actual number of regions.

Subsequent log operations (log_set_bit, log_clear_bit, log_test_bit) use region indices derived from the full untruncated region space, causing out-of-bounds writes to kernel heap memory allocated by vmalloc.

This can be reproduced by creating a mirror target whose region_count overflows 32 bits:

dmsetup create bigzero --table '0 8589934594 zero' dmsetup create mymirror --table '0 8589934594 mirror
core 2 2 nosync 2 /dev/mapper/bigzero 0
/dev/mapper/bigzero 0'

The status output confirms the truncation (sync_count=1 instead of 4294967297, because 0x100000001 was truncated to 1):

$ dmsetup status mymirror 0 8589934594 mirror 2 254:1 254:1 1/4294967297 ...

This leads to a kernel crash in core_in_sync:

BUG: scheduling while atomic: (udev-worker)/9150/0x00000000 RIP: 0010:core_in_sync+0x14/0x30 [dm_log] CR2: 0000000000000008 Fixing recursive fault but reboot is needed!

Fix by widening the local region_count to sector_t and adding an explicit overflow check before the value is assigned to lc->region_count.

Record
CVE-2026-53059
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1
6.3 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness
CWE-787, CWE-190
Updated
2026-11-06
CVE List 6.3

dm log: fix out-of-bounds write due to region_count overflow

In the Linux kernel, the following vulnerability has been resolved:

dm log: fix out-of-bounds write due to region_count overflow

The local variable region_count in create_log_context() is declared as unsigned int (32-bit), but dm_sector_div_up() returns sector_t (64-bit). When a device-mapper target has a sufficiently large ti->len with a small region_size, the division result can exceed UINT_MAX. The truncated value is then used to calculate bitset_size, causing clean_bits, sync_bits, and recovering_bits to be allocated far smaller than needed for the actual number of regions.

Subsequent log operations (log_set_bit, log_clear_bit, log_test_bit) use region indices derived from the full untruncated region space, causing out-of-bounds writes to kernel heap memory allocated by vmalloc.

This can be reproduced by creating a mirror target whose region_count overflows 32 bits:

dmsetup create bigzero --table '0 8589934594 zero' dmsetup create mymirror --table '0 8589934594 mirror
core 2 2 nosync 2 /dev/mapper/bigzero 0
/dev/mapper/bigzero 0'

The status output confirms the truncation (sync_count=1 instead of 4294967297, because 0x100000001 was truncated to 1):

$ dmsetup status mymirror 0 8589934594 mirror 2 254:1 254:1 1/4294967297 ...

This leads to a kernel crash in core_in_sync:

BUG: scheduling while atomic: (udev-worker)/9150/0x00000000 RIP: 0010:core_in_sync+0x14/0x30 [dm_log] CR2: 0000000000000008 Fixing recursive fault but reboot is needed!

Fix by widening the local region_count to sector_t and adding an explicit overflow check before the value is assigned to lc->region_count.

Record
CVE-2026-53059
CVSS 3.1
6.3 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness
CWE-190
Updated
2026-11-06
EUVDEUVD-2026-38927 6.3

In the Linux kernel, the following vulnerability has been resolved:

dm log: fix out-of-bounds write due to region_count overflow

The local variable region_count in create_log_context() is declared as unsigned int (32-bit), but dm_sector_div_up() returns sector_t (64-bit). When a device-mapper target has a sufficiently large ti->len with a small region_size, the division result can exceed UINT_MAX. The truncated value is then used to calculate bitset_size, causing clean_bits, sync_bits, and recovering_bits to be allocated far smaller than needed for the actual number of regions.

Subsequent log operations (log_set_bit, log_clear_bit, log_test_bit) use region indices derived from the full untruncated region space, causing out-of-bounds writes to kernel heap memory allocated by vmalloc.

This can be reproduced by creating a mirror target whose region_count overflows 32 bits:

dmsetup create bigzero --table '0 8589934594 zero' dmsetup create mymirror --table '0 8589934594 mirror
core 2 2 nosync 2 /dev/mapper/bigzero 0
/dev/mapper/bigzero 0'

The status output confirms the truncation (sync_count=1 instead of 4294967297, because 0x100000001 was truncated to 1):

$ dmsetup status mymirror 0 8589934594 mirror 2 254:1 254:1 1/4294967297 ...

This leads to a kernel crash in core_in_sync:

BUG: scheduling while atomic: (udev-worker)/9150/0x00000000 RIP: 0010:core_in_sync+0x14/0x30 [dm_log] CR2: 0000000000000008 Fixing recursive fault but reboot is needed!

Fix by widening the local region_count to sector_t and adding an explicit overflow check before the value is assigned to lc->region_count.

Record
EUVD-2026-38927
CVSS 3.1
6.3 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-06
GitHub AdvisoriesGHSA-vj88-ppr4-hj46 7.0

In the Linux kernel, the following vulnerability has been resolved: dm log: fix out-of-bounds...

In the Linux kernel, the following vulnerability has been resolved:

dm log: fix out-of-bounds write due to region_count overflow

The local variable region_count in create_log_context() is declared as unsigned int (32-bit), but dm_sector_div_up() returns sector_t (64-bit). When a device-mapper target has a sufficiently large ti->len with a small region_size, the division result can exceed UINT_MAX. The truncated value is then used to calculate bitset_size, causing clean_bits, sync_bits, and recovering_bits to be allocated far smaller than needed for the actual number of regions.

Subsequent log operations (log_set_bit, log_clear_bit, log_test_bit) use region indices derived from the full untruncated region space, causing out-of-bounds writes to kernel heap memory allocated by vmalloc.

This can be reproduced by creating a mirror target whose region_count overflows 32 bits:

dmsetup create bigzero --table '0 8589934594 zero' dmsetup create mymirror --table '0 8589934594 mirror
core 2 2 nosync 2 /dev/mapper/bigzero 0
/dev/mapper/bigzero 0'

The status output confirms the truncation (sync_count=1 instead of 4294967297, because 0x100000001 was truncated to 1):

$ dmsetup status mymirror 0 8589934594 mirror 2 254:1 254:1 1/4294967297 ...

This leads to a kernel crash in core_in_sync:

BUG: scheduling while atomic: (udev-worker)/9150/0x00000000 RIP: 0010:core_in_sync+0x14/0x30 [dm_log] CR2: 0000000000000008 Fixing recursive fault but reboot is needed!

Fix by widening the local region_count to sector_t and adding an explicit overflow check before the value is assigned to lc->region_count.

Record
GHSA-vj88-ppr4-hj46
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-190, CWE-787
Updated
2026-11-02
OSVBELL-CVE-2026-53059 6.3
Record
BELL-CVE-2026-53059
CVSS 3.1
6.3 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSV 6.3

dm log: fix out-of-bounds write due to region_count overflow

In the Linux kernel, the following vulnerability has been resolved:

dm log: fix out-of-bounds write due to region_count overflow

The local variable region_count in create_log_context() is declared as unsigned int (32-bit), but dm_sector_div_up() returns sector_t (64-bit). When a device-mapper target has a sufficiently large ti->len with a small region_size, the division result can exceed UINT_MAX. The truncated value is then used to calculate bitset_size, causing clean_bits, sync_bits, and recovering_bits to be allocated far smaller than needed for the actual number of regions.

Subsequent log operations (log_set_bit, log_clear_bit, log_test_bit) use region indices derived from the full untruncated region space, causing out-of-bounds writes to kernel heap memory allocated by vmalloc.

This can be reproduced by creating a mirror target whose region_count overflows 32 bits:

dmsetup create bigzero --table '0 8589934594 zero' dmsetup create mymirror --table '0 8589934594 mirror
core 2 2 nosync 2 /dev/mapper/bigzero 0
/dev/mapper/bigzero 0'

The status output confirms the truncation (sync_count=1 instead of 4294967297, because 0x100000001 was truncated to 1):

$ dmsetup status mymirror 0 8589934594 mirror 2 254:1 254:1 1/4294967297 ...

This leads to a kernel crash in core_in_sync:

BUG: scheduling while atomic: (udev-worker)/9150/0x00000000 RIP: 0010:core_in_sync+0x14/0x30 [dm_log] CR2: 0000000000000008 Fixing recursive fault but reboot is needed!

Fix by widening the local region_count to sector_t and adding an explicit overflow check before the value is assigned to lc->region_count.

Record
CVE-2026-53059
CVSS 3.1
6.3 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-07
Show 48 moreShow less
OSVDEBIAN-CVE-2026-53059 7.8

In the Linux kernel, the following vulnerability has been resolved: dm log: fix out-of-bounds write due to region_count overflow The local variable region_count in create_log_context() is declared as unsigned int (32-bit), but dm_sector_div_up() returns sector_t (64-bit). When a device-mapper target has a sufficiently large ti->len with a small region_size, the division result can exceed UINT_MAX. The truncated value is then used to calculate bitset_size, causing clean_bits, sync_bits, and recovering_bits to be allocated far smaller than needed for the actual number of regions. Subsequent log operations (log_set_bit, log_clear_bit, log_test_bit) use region indices derived from the full untruncated region space, causing out-of-bounds writes to kernel heap memory allocated by vmalloc. This can be reproduced by creating a mirror target whose region_count overflows 32 bits: dmsetup create bigzero --table '0 8589934594 zero' dmsetup create mymirror --table '0 8589934594 mirror \ core 2 2 nosync 2 /dev/mapper/bigzero 0 \ /dev/mapper/bigzero 0' The status output confirms the truncation (sync_count=1 instead of 4294967297, because 0x100000001 was truncated to 1): $ dmsetup status mymirror 0 8589934594 mirror 2 254:1 254:1 1/4294967297 ... This leads to a kernel crash in core_in_sync: BUG: scheduling while atomic: (udev-worker)/9150/0x00000000 RIP: 0010:core_in_sync+0x14/0x30 [dm_log] CR2: 0000000000000008 Fixing recursive fault but reboot is needed! Fix by widening the local region_count to sector_t and adding an explicit overflow check before the value is assigned to lc->region_count.

Record
DEBIAN-CVE-2026-53059
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-07
OSVRHSA-2026:45114 7.3

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:45114
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated
2026-11-02
OSVRHSA-2026:45115 7.0

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:45115
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:45116 7.0

Red Hat Security Advisory: kernel-rt security update

Record
RHSA-2026:45116
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:45192 7.0

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:45192
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:47248 8.4

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:47248
CVSS 3.1
8.4 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:52649 8.4

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:52649
CVSS 3.1
8.4 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:53989 8.1

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:53989
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:55445 8.4

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:55445
CVSS 3.1
8.4 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:56574 7.1

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:56574
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:59662 8.7

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:59662
CVSS 3.1
8.7 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:H
Updated
2026-11-02
OSVRHSA-2026:59663 8.7

Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Record
RHSA-2026:59663
CVSS 3.1
8.7 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:H
Updated
2026-11-02
OSVRHSA-2026:61692 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:61692
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:63189 7.8

Red Hat Security Advisory: kernel-rt security update

Record
RHSA-2026:63189
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:73645 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:73645
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:45114 7.1

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: fs/notify: call exportfs_encode_fid with s_umount (CVE-2025-40237)
  • kernel: scsi: core: Wake up the error handler when final completions race against each other (CVE-2026-23110)
  • kernel: rtnetlink: add missing netlink_ns_capable() check for peer netns (CVE-2026-31692)
  • kernel: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (CVE-2026-46099)
  • kernel: futex: Drop CLONE_THREAD requirement for private default hash alloc (CVE-2026-52973)
  • kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059)
Record
RLSA-2026:45114
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:45115 7.0

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (CVE-2025-40026)

  • kernel: xfrm single-frag length not properly limited

  • kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059)

  • kernel: tipc: fix double-free in tipc_buf_append() (CVE-2026-52993)

Record
RLSA-2026:45115
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:45116 7.0

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (CVE-2025-40026)

  • kernel: xfrm single-frag length not properly limited

  • kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059)

  • kernel: tipc: fix double-free in tipc_buf_append() (CVE-2026-52993)

Record
RLSA-2026:45116
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:45192 7.0

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (CVE-2025-40026)

  • kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059)

  • kernel: drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CVE-2026-52976)

  • kernel: drm/xe/dma-buf: fix UAF with retry loop (CVE-2026-52950)

  • kernel: ipv6: fix possible UAF in icmpv6_rcv() (CVE-2026-53006)

Bug Fix(es) and Enhancement(s):

  • scsi device removal may hang from race with error recovery [rhel-9.8.z] (JIRA:Rocky Linux-187412)

  • [Rocky Linux9] kvm fixes for 2026-07-21 [rhel-9.8.z] (JIRA:Rocky Linux-213468)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:45192
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRXSA-2026:45115 7.0

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (CVE-2025-40026)

  • kernel: xfrm single-frag length not properly limited

  • kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059)

  • kernel: tipc: fix double-free in tipc_buf_append() (CVE-2026-52993)

Record
RXSA-2026:45115
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRXSA-2026:45192 7.0

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (CVE-2025-40026)

  • kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059)

  • kernel: drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CVE-2026-52976)

  • kernel: drm/xe/dma-buf: fix UAF with retry loop (CVE-2026-52950)

  • kernel: ipv6: fix possible UAF in icmpv6_rcv() (CVE-2026-53006)

Bug Fix(es) and Enhancement(s):

  • scsi device removal may hang from race with error recovery [rhel-9.8.z] (JIRA:Rocky Linux SIG Cloud-187412)

  • [Rocky Linux SIG Cloud9] kvm fixes for 2026-07-21 [rhel-9.8.z] (JIRA:Rocky Linux SIG Cloud-213468)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RXSA-2026:45192
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-53059 6.3

In the Linux kernel, the following vulnerability has been resolved: dm log: fix out-of-bounds write due to region_count overflow The local variable region_count in create_log_context() is declared as unsigned int (32-bit), but dm_sector_div_up() returns sector_t (64-bit). When a device-mapper target has a sufficiently large ti->len with a small region_size, the division result can exceed UINT_MAX. The truncated value is then used to calculate bitset_size, causing clean_bits, sync_bits, and recovering_bits to be allocated far smaller than needed for the actual number of regions. Subsequent log operations (log_set_bit, log_clear_bit, log_test_bit) use region indices derived from the full untruncated region space, causing out-of-bounds writes to kernel heap memory allocated by vmalloc. This can be reproduced by creating a mirror target whose region_count overflows 32 bits: dmsetup create bigzero --table '0 8589934594 zero' dmsetup create mymirror --table '0 8589934594 mirror \ core 2 2 nosync 2 /dev/mapper/bigzero 0 \ /dev/mapper/bigzero 0' The status output confirms the truncation (sync_count=1 instead of 4294967297, because 0x100000001 was truncated to 1): $ dmsetup status mymirror 0 8589934594 mirror 2 254:1 254:1 1/4294967297 ... This leads to a kernel crash in core_in_sync: BUG: scheduling while atomic: (udev-worker)/9150/0x00000000 RIP: 0010:core_in_sync+0x14/0x30 [dm_log] CR2: 0000000000000008 Fixing recursive fault but reboot is needed! Fix by widening the local region_count to sector_t and adding an explicit overflow check before the value is assigned to lc->region_count.

Record
UBUNTU-CVE-2026-53059
CVSS 3.1
6.3 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVALSA-2026:45114 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: fs/notify: call exportfs_encode_fid with s_umount (CVE-2025-40237)
  • kernel: scsi: core: Wake up the error handler when final completions race against each other (CVE-2026-23110)
  • kernel: rtnetlink: add missing netlink_ns_capable() check for peer netns (CVE-2026-31692)
  • kernel: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (CVE-2026-46099)
  • kernel: futex: Drop CLONE_THREAD requirement for private default hash alloc (CVE-2026-52973)
  • kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059)
Record
ALSA-2026:45114
Updated
2026-11-02
OSVALSA-2026:45115 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (CVE-2025-40026)
  • kernel: xfrm single-frag length not properly limited
  • kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059)
  • kernel: tipc: fix double-free in tipc_buf_append() (CVE-2026-52993)
Record
ALSA-2026:45115
Updated
2026-11-02
OSVALSA-2026:45116 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables
fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (CVE-2025-40026)
  • kernel: xfrm single-frag length not properly limited
  • kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059)
  • kernel: tipc: fix double-free in tipc_buf_append() (CVE-2026-52993)
Record
ALSA-2026:45116
Updated
2026-11-02
OSVALSA-2026:45192 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (CVE-2025-40026)
  • kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059)
  • kernel: drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CVE-2026-52976)
  • kernel: drm/xe/dma-buf: fix UAF with retry loop (CVE-2026-52950)
  • kernel: ipv6: fix possible UAF in icmpv6_rcv() (CVE-2026-53006)

Bug Fix(es) and Enhancement(s):

  • scsi device removal may hang from race with error recovery [almalinux-9.8.z] (JIRA:AlmaLinux-187412)
  • [AlmaLinux9] kvm fixes for 2026-07-21 [almalinux-9.8.z] (JIRA:AlmaLinux-213468)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:45192
Updated
2026-11-02
OSVCLSA-2026-1789960079 No score

kernel: Fix of 56 CVEs

  • usb: free iso schedules on failed submit {CVE-2026-64348}
  • udf: validate VAT header length against the VAT inode size {CVE-2026-64323}
  • USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}
  • USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343}
  • USB: iowarrior: fix use-after-free on disconnect race {CVE-2026-64341}
  • USB: iowarrior: fix use-after-free on disconnect {CVE-2026-64342}
  • can: bcm: restore op->flags assignment lost in the bcm_tx_lock backport {CVE-2025-38004}
  • can: bcm: fix out-of-bounds frame read introduced by the bcm_tx_lock backport {CVE-2025-38004}
  • dm-log: fix a bitset_size overflow on 32bit machines {CVE-2026-72105}
  • scsi: aic94xx: fix use-after-free in device removal path {CVE-2025-71075}
  • dm log: fix out-of-bounds write due to region_count overflow {CVE-2026-53059}
  • netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920}
  • phonet: pep: fix use-after-free in pep_get_sb() {CVE-2026-68144}
  • ipv4: raw: reject IP_HDRINCL packets with ihl < 5 {CVE-2026-64114}
  • Input: touchwin - reset the packet index on every complete packet {CVE-2026-64271}
  • IB/mad: Drop unmatched RMPP responses before reassembly {CVE-2026-68425}
  • wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one() {CVE-2026-68413}
  • Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}
  • sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}
  • net: slip: serialize receive against buffer reallocation {CVE-2026-68143}
  • pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}
  • Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame {CVE-2026-53254}
  • net: af_key: zero aligned sockaddr tail in PF_KEY exports {CVE-2026-43088}
  • netfilter: nf_conntrack_sip: don't use simple_strtoul {CVE-2026-52986}
  • tcp: fix potential race in tcp_v6_syn_recv_sock() {CVE-2026-43198}
  • netfilter: ctnetlink: ensure safe access to master conntrack {CVE-2026-43116}
  • scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress {CVE-2023-52974}
  • Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() {CVE-2026-53256}
  • Bluetooth: bnep: reject short frames before parsing {CVE-2026-53253}
  • Bluetooth: SCO: Fix use-after-free in sco_recv_frame() {CVE-2026-31408}
  • ext4: fix e4b bitmap inconsistency reports {CVE-2026-45942}
  • RDMA/srp: bound SRP_RSP sense copy by the received length {CVE-2026-53186}
  • inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266}
  • nfsd: fix heap overflow in NFSv4.0 LOCK replay cache {CVE-2026-31402}
  • ipv6: mcast: Fix use-after-free when processing MLD queries {CVE-2026-53275}
  • netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check {CVE-2026-52998}
  • RDMA/umad: Reject negative data_len in ib_umad_write() {CVE-2026-23243}
  • can: bcm: Fix UAF in bcm_proc_show() {CVE-2023-52922}
  • netfilter: xt_tcpmss: check remaining length before reading option length {CVE-2026-43190}
  • netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() {CVE-2026-23455}
  • netfilter: nf_conntrack_irc: fix possible out-of-bounds read {CVE-2026-53268}
  • scsi: libfc: Fix use after free in fc_exch_abts_resp() {CVE-2022-49114}
  • drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers() {CVE-2022-50185}
  • wifi: libertas: fix use-after-free in lbs_free_adapter() {CVE-2026-23281}
  • ALSA: usb-audio: Fix an OOB bug in parse_audio_mixer_unit {CVE-2019-15117}
  • vfs: introduce FMODE_UNSIGNED_OFFSET for allowing negative f_pos {CVE-2019-18675}
  • infiniband: fix a possible use-after-free bug {CVE-2018-14734}
  • phonet: pep: fix use-after-free in pep_get_sb() {CVE-2026-68144}
  • Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
  • Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold {CVE-2026-31408}
  • xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete {CVE-2026-46116}
  • netfilter: require Ethernet MAC header before using eth_hdr()…
Record
CLSA-2026-1789960079
Updated
2026-11-02
OSVCLSA-2026-1790030905 No score

kernel: Fix of 56 CVEs

  • usb: free iso schedules on failed submit {CVE-2026-64348}
  • udf: validate VAT header length against the VAT inode size {CVE-2026-64323}
  • USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}
  • USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343}
  • USB: iowarrior: fix use-after-free on disconnect race {CVE-2026-64341}
  • USB: iowarrior: fix use-after-free on disconnect {CVE-2026-64342}
  • can: bcm: restore op->flags assignment lost in the bcm_tx_lock backport {CVE-2025-38004}
  • can: bcm: fix out-of-bounds frame read introduced by the bcm_tx_lock backport {CVE-2025-38004}
  • dm-log: fix a bitset_size overflow on 32bit machines {CVE-2026-72105}
  • scsi: aic94xx: fix use-after-free in device removal path {CVE-2025-71075}
  • dm log: fix out-of-bounds write due to region_count overflow {CVE-2026-53059}
  • netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920}
  • phonet: pep: fix use-after-free in pep_get_sb() {CVE-2026-68144}
  • ipv4: raw: reject IP_HDRINCL packets with ihl < 5 {CVE-2026-64114}
  • Input: touchwin - reset the packet index on every complete packet {CVE-2026-64271}
  • IB/mad: Drop unmatched RMPP responses before reassembly {CVE-2026-68425}
  • wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one() {CVE-2026-68413}
  • Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}
  • sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}
  • net: slip: serialize receive against buffer reallocation {CVE-2026-68143}
  • pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}
  • Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame {CVE-2026-53254}
  • net: af_key: zero aligned sockaddr tail in PF_KEY exports {CVE-2026-43088}
  • netfilter: nf_conntrack_sip: don't use simple_strtoul {CVE-2026-52986}
  • tcp: fix potential race in tcp_v6_syn_recv_sock() {CVE-2026-43198}
  • netfilter: ctnetlink: ensure safe access to master conntrack {CVE-2026-43116}
  • scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress {CVE-2023-52974}
  • Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() {CVE-2026-53256}
  • Bluetooth: bnep: reject short frames before parsing {CVE-2026-53253}
  • Bluetooth: SCO: Fix use-after-free in sco_recv_frame() {CVE-2026-31408}
  • ext4: fix e4b bitmap inconsistency reports {CVE-2026-45942}
  • RDMA/srp: bound SRP_RSP sense copy by the received length {CVE-2026-53186}
  • inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266}
  • nfsd: fix heap overflow in NFSv4.0 LOCK replay cache {CVE-2026-31402}
  • ipv6: mcast: Fix use-after-free when processing MLD queries {CVE-2026-53275}
  • netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check {CVE-2026-52998}
  • RDMA/umad: Reject negative data_len in ib_umad_write() {CVE-2026-23243}
  • can: bcm: Fix UAF in bcm_proc_show() {CVE-2023-52922}
  • netfilter: xt_tcpmss: check remaining length before reading option length {CVE-2026-43190}
  • netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() {CVE-2026-23455}
  • netfilter: nf_conntrack_irc: fix possible out-of-bounds read {CVE-2026-53268}
  • scsi: libfc: Fix use after free in fc_exch_abts_resp() {CVE-2022-49114}
  • drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers() {CVE-2022-50185}
  • wifi: libertas: fix use-after-free in lbs_free_adapter() {CVE-2026-23281}
  • ALSA: usb-audio: Fix an OOB bug in parse_audio_mixer_unit {CVE-2019-15117}
  • vfs: introduce FMODE_UNSIGNED_OFFSET for allowing negative f_pos {CVE-2019-18675}
  • infiniband: fix a possible use-after-free bug {CVE-2018-14734}
  • phonet: pep: fix use-after-free in pep_get_sb() {CVE-2026-68144}
  • Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
  • Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold {CVE-2026-31408}
  • xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete {CVE-2026-46116}
  • netfilter: require Ethernet MAC header before using eth_hdr()…
Record
CLSA-2026-1790030905
Updated
2026-11-02
OSVCLSA-2026-1791730242 No score

kernel: Fix of 32 CVEs

  • ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF {CVE-2023-0266}
  • net: account for encap headers in qdisc pkt len {CVE-2026-53091}
  • kabi: add tcp_v4_syn_recv_sock to the x86_64 kABI whitelist {CVE-2026-43198}
  • Update to kernel 3.10.0-1160.164.1.el7
  • netfilter: ctnetlink: ensure safe access to master conntrack {CVE-2026-43116}
  • netfilter: expect: fix crash when putting uninited expectation {CVE-2026-43116}
  • netfilter: nf_ct_expect: Add nf_ct_remove_expect() {CVE-2026-43116}
  • Revert "netfilter: ctnetlink: ensure safe access to master conntrack {CVE-2026-43116}"
  • netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
  • sctp: prevent peer transport count overflow {CVE-2026-74469}
  • xfrm: ah6: validate routing header segments_left {CVE-2026-80844}
  • i2c: stub: Reject I2C block transfers with invalid length {CVE-2026-64191}
  • i2c: stub: Avoid an array overrun on I2C block transfers {CVE-2026-64191}
  • USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() {CVE-2026-53195}
  • USB: serial: io_ti: fix heap overflow in get_manuf_info() {CVE-2026-53196}
  • netfilter: nft_rbtree: ignore inactive matching element with no descendants
  • netfilter: nft_rbtree: introduce nft_rbtree_interval_end() helper
  • net: bridge: stop fast-leave after deleting a port group {CVE-2026-74480}
  • netfilter: conntrack: check netns when walking expect hash
  • netfilter: nf_tables: don't skip expired elements during walk {CVE-2023-52924}
  • net: atm: fix crash due to unvalidated vcc pointer in sigd_send() {CVE-2026-31411}
  • dm log: fix out-of-bounds write due to region_count overflow {CVE-2026-53059}
  • ipc: limit next_id allocation to the valid ID range {CVE-2026-52923}
  • macsec: don't read an unset MAC header in macsec_encrypt() {CVE-2026-72019}
  • dm-ioctl: fix a possible overflow in list_version_get_info {CVE-2026-72106}
  • drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON() {CVE-2026-68111}
  • drm/amdgpu: fix division by zero with invalid uvd dimensions {CVE-2026-68106}
  • driver core: enforce device_lock for driver_match_device() {CVE-2026-31688}
  • proc: protect ptrace_may_access() with exec_update_lock (FD links) {CVE-2026-64375}
  • net: tun: bound receive headroom {CVE-2026-81000}
  • cpufreq: pcc: fix use-after-free and double free in _OSC evaluation {CVE-2026-64372}
  • wifi: rt2x00: avoid full teardown before work setup in probe {CVE-2026-72005}
  • ipvs: reset full ip_vs_seq structs in ip_vs_conn_new {CVE-2026-72020}
  • scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE {CVE-2026-72083}
  • bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp() {CVE-2026-72039}
  • net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked {CVE-2026-72036}
  • vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets {CVE-2026-68299}
  • drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved {CVE-2026-68234}
  • tracing: Fix resource leak on mmiotrace trace_pipe close {CVE-2026-68175}
  • media: pci: dm1105: Free allocated workqueue {CVE-2026-68218}
  • IB/mad: Drop unmatched RMPP responses before reassembly {CVE-2026-68425}
  • USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343}
  • USB: legousbtower: fix use-after-free on disconnect race {CVE-2026-64340}
  • bpf: Preserve pointer state for commuted arithmetic {CVE-2026-74720}
  • ALSA: usb-audio: Fix out of bounds reads when finding clock sources {CVE-2024-53150}
  • tcp: keep kABI of tcp_v4_syn_recv_sock() for the CVE-2026-43198 fix
  • crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
  • tracing: Free buffers when a used dynamic event is removed {CVE-2022-49006}
Record
CLSA-2026-1791730242
Updated
2026-11-02
OSVCLSA-2026-1791796397 No score

kernel: Fix of 32 CVEs

  • ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF {CVE-2023-0266}
  • net: account for encap headers in qdisc pkt len {CVE-2026-53091}
  • kabi: add tcp_v4_syn_recv_sock to the x86_64 kABI whitelist {CVE-2026-43198}
  • Update to kernel 3.10.0-1160.164.1.el7
  • netfilter: ctnetlink: ensure safe access to master conntrack {CVE-2026-43116}
  • netfilter: expect: fix crash when putting uninited expectation {CVE-2026-43116}
  • netfilter: nf_ct_expect: Add nf_ct_remove_expect() {CVE-2026-43116}
  • Revert "netfilter: ctnetlink: ensure safe access to master conntrack {CVE-2026-43116}"
  • netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
  • sctp: prevent peer transport count overflow {CVE-2026-74469}
  • xfrm: ah6: validate routing header segments_left {CVE-2026-80844}
  • i2c: stub: Reject I2C block transfers with invalid length {CVE-2026-64191}
  • i2c: stub: Avoid an array overrun on I2C block transfers {CVE-2026-64191}
  • USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() {CVE-2026-53195}
  • USB: serial: io_ti: fix heap overflow in get_manuf_info() {CVE-2026-53196}
  • netfilter: nft_rbtree: ignore inactive matching element with no descendants
  • netfilter: nft_rbtree: introduce nft_rbtree_interval_end() helper
  • net: bridge: stop fast-leave after deleting a port group {CVE-2026-74480}
  • netfilter: conntrack: check netns when walking expect hash
  • netfilter: nf_tables: don't skip expired elements during walk {CVE-2023-52924}
  • net: atm: fix crash due to unvalidated vcc pointer in sigd_send() {CVE-2026-31411}
  • dm log: fix out-of-bounds write due to region_count overflow {CVE-2026-53059}
  • ipc: limit next_id allocation to the valid ID range {CVE-2026-52923}
  • macsec: don't read an unset MAC header in macsec_encrypt() {CVE-2026-72019}
  • dm-ioctl: fix a possible overflow in list_version_get_info {CVE-2026-72106}
  • drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON() {CVE-2026-68111}
  • drm/amdgpu: fix division by zero with invalid uvd dimensions {CVE-2026-68106}
  • driver core: enforce device_lock for driver_match_device() {CVE-2026-31688}
  • proc: protect ptrace_may_access() with exec_update_lock (FD links) {CVE-2026-64375}
  • net: tun: bound receive headroom {CVE-2026-81000}
  • cpufreq: pcc: fix use-after-free and double free in _OSC evaluation {CVE-2026-64372}
  • wifi: rt2x00: avoid full teardown before work setup in probe {CVE-2026-72005}
  • ipvs: reset full ip_vs_seq structs in ip_vs_conn_new {CVE-2026-72020}
  • scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE {CVE-2026-72083}
  • bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp() {CVE-2026-72039}
  • net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked {CVE-2026-72036}
  • vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets {CVE-2026-68299}
  • drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved {CVE-2026-68234}
  • tracing: Fix resource leak on mmiotrace trace_pipe close {CVE-2026-68175}
  • media: pci: dm1105: Free allocated workqueue {CVE-2026-68218}
  • IB/mad: Drop unmatched RMPP responses before reassembly {CVE-2026-68425}
  • USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343}
  • USB: legousbtower: fix use-after-free on disconnect race {CVE-2026-64340}
  • bpf: Preserve pointer state for commuted arithmetic {CVE-2026-74720}
  • ALSA: usb-audio: Fix out of bounds reads when finding clock sources {CVE-2024-53150}
  • tcp: keep kABI of tcp_v4_syn_recv_sock() for the CVE-2026-43198 fix
  • crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
  • tracing: Free buffers when a used dynamic event is removed {CVE-2022-49006}
Record
CLSA-2026-1791796397
Updated
2026-11-02
OSVCLSA-2026-1791796862 No score

kernel: Fix of 32 CVEs

  • ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF {CVE-2023-0266}
  • net: account for encap headers in qdisc pkt len {CVE-2026-53091}
  • kabi: add tcp_v4_syn_recv_sock to the x86_64 kABI whitelist {CVE-2026-43198}
  • Update to kernel 3.10.0-1160.164.1.el7
  • netfilter: ctnetlink: ensure safe access to master conntrack {CVE-2026-43116}
  • netfilter: expect: fix crash when putting uninited expectation {CVE-2026-43116}
  • netfilter: nf_ct_expect: Add nf_ct_remove_expect() {CVE-2026-43116}
  • Revert "netfilter: ctnetlink: ensure safe access to master conntrack {CVE-2026-43116}"
  • netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
  • sctp: prevent peer transport count overflow {CVE-2026-74469}
  • xfrm: ah6: validate routing header segments_left {CVE-2026-80844}
  • i2c: stub: Reject I2C block transfers with invalid length {CVE-2026-64191}
  • i2c: stub: Avoid an array overrun on I2C block transfers {CVE-2026-64191}
  • USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() {CVE-2026-53195}
  • USB: serial: io_ti: fix heap overflow in get_manuf_info() {CVE-2026-53196}
  • netfilter: nft_rbtree: ignore inactive matching element with no descendants
  • netfilter: nft_rbtree: introduce nft_rbtree_interval_end() helper
  • net: bridge: stop fast-leave after deleting a port group {CVE-2026-74480}
  • netfilter: conntrack: check netns when walking expect hash
  • netfilter: nf_tables: don't skip expired elements during walk {CVE-2023-52924}
  • net: atm: fix crash due to unvalidated vcc pointer in sigd_send() {CVE-2026-31411}
  • dm log: fix out-of-bounds write due to region_count overflow {CVE-2026-53059}
  • ipc: limit next_id allocation to the valid ID range {CVE-2026-52923}
  • macsec: don't read an unset MAC header in macsec_encrypt() {CVE-2026-72019}
  • dm-ioctl: fix a possible overflow in list_version_get_info {CVE-2026-72106}
  • drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON() {CVE-2026-68111}
  • drm/amdgpu: fix division by zero with invalid uvd dimensions {CVE-2026-68106}
  • driver core: enforce device_lock for driver_match_device() {CVE-2026-31688}
  • proc: protect ptrace_may_access() with exec_update_lock (FD links) {CVE-2026-64375}
  • net: tun: bound receive headroom {CVE-2026-81000}
  • cpufreq: pcc: fix use-after-free and double free in _OSC evaluation {CVE-2026-64372}
  • wifi: rt2x00: avoid full teardown before work setup in probe {CVE-2026-72005}
  • ipvs: reset full ip_vs_seq structs in ip_vs_conn_new {CVE-2026-72020}
  • scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE {CVE-2026-72083}
  • bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp() {CVE-2026-72039}
  • net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked {CVE-2026-72036}
  • vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets {CVE-2026-68299}
  • drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved {CVE-2026-68234}
  • tracing: Fix resource leak on mmiotrace trace_pipe close {CVE-2026-68175}
  • media: pci: dm1105: Free allocated workqueue {CVE-2026-68218}
  • IB/mad: Drop unmatched RMPP responses before reassembly {CVE-2026-68425}
  • USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343}
  • USB: legousbtower: fix use-after-free on disconnect race {CVE-2026-64340}
  • bpf: Preserve pointer state for commuted arithmetic {CVE-2026-74720}
  • ALSA: usb-audio: Fix out of bounds reads when finding clock sources {CVE-2024-53150}
  • tcp: keep kABI of tcp_v4_syn_recv_sock() for the CVE-2026-43198 fix
  • crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
  • tracing: Free buffers when a used dynamic event is removed {CVE-2022-49006}
Record
CLSA-2026-1791796862
Updated
2026-11-02
OSVCLSA-2026-1791858923 No score

Fix of 174 CVEs

  • CVE-2026-90205
    • ocfs2: validate orphan slot during inode read {CVE-2026-90205}
  • CVE-2026-93054
    • uio: Fix stale info pointer in failed registration path {CVE-2026-93054}
  • CVE-2026-93103
    • RDMA/hfi1: Preserve unit 0 on allocation failure {CVE-2026-93103}
  • CVE-2026-89833
    • f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages() {CVE-2026-89833}
  • CVE-2026-89878
    • media: s2255: check firmware size before reading trailing marker {CVE-2026-89878}
  • CVE-2026-90037
    • NFSD: Prevent client use-after-free during close_lru reaping {CVE-2026-90037}
  • CVE-2026-90296
    • cpufreq: imx6q: fix devres accumulation across driver rebind {CVE-2026-90296}
  • CVE-2026-90415
    • RDMA/cxgb4: free STAG index when TPT entry write fails {CVE-2026-90415}
  • CVE-2026-90081
    • net/rds: use wq_has_sleeper() in rds_cong_map_updated() {CVE-2026-90081}
  • CVE-2026-90420
    • nilfs2: fix infinite loop in nilfs_clean_segments() {CVE-2026-90420}
  • CVE-2026-90116
    • ALSA: mtpav: shut down output timer before card teardown {CVE-2026-90116}
  • CVE-2026-90070
    • tpm: st33zp24: Return zero on status read failure {CVE-2026-90070}
  • CVE-2026-89845
    • scsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry() {CVE-2026-89845}
  • CVE-2026-89944
    • ASoC: hdac_hda: Fix hlink refcount leak on component registration failure {CVE-2026-89944}
  • CVE-2026-90018
    • staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() {CVE-2026-90018}
  • CVE-2026-89860
    • scsi: qla2xxx: Initialize NVMe abort_work once at submission {CVE-2026-89860}
  • CVE-2026-90007
    • scsi: pm8001: Use rollback index when freeing MSI-X vectors {CVE-2026-90007}
  • CVE-2026-90044
    • usb: gadget: f_fs: Fix Use-After-Free in AIO error path {CVE-2026-90044}
  • CVE-2026-68289
    • tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream() {CVE-2026-68289}
  • CVE-2026-90143
    • net: kcm: Hold RCU read lock while running BPF parser {CVE-2026-90143}
  • CVE-2026-90111
    • ip6mr: do not clone dst in ip6mr_cache_report() {CVE-2026-90111}
  • CVE-2026-90283
    • hugetlbfs: release subpool on fill_super failure {CVE-2026-90283}
  • CVE-2026-92521
    • ACPI: PCI: Clear driver_data on all paths that free the acpi_pci_root {CVE-2026-92521}
  • CVE-2026-93048
    • mtd: part: reject MTDPART_OFS_RETAIN in mtd_add_partition() {CVE-2026-93048}
  • CVE-2026-93160
    • crypto: atmel-ecc - reject hardware ECDH without a public key {CVE-2026-93160}
  • CVE-2026-93199
    • i3c: master: Do not treat master device as a duplicate target {CVE-2026-93199}
  • CVE-2026-89953
    • mtd: mtdoops: free page bitmap when the backing MTD is removed {CVE-2026-89953}
  • CVE-2026-89822
    • drm/i915: Guard against NULL driver_data in i915_pci_probe() {CVE-2026-89822}
  • CVE-2026-89937
    • iio: chemical: sgp30: Handle IAQ thread creation failure {CVE-2026-89937}
  • CVE-2026-89993
    • dmaengine: dw-edma: Initialize IRQ data before requesting IRQs {CVE-2026-89993}
  • CVE-2026-89972
    • nvme: add missing SRCU grace period in error path {CVE-2026-89972}
  • CVE-2026-89892
    • media: em28xx: defer audio-only extension registration {CVE-2026-89892}
  • CVE-2026-90023
    • usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers() {CVE-2026-90023}
  • CVE-2026-90020
    • USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() {CVE-2026-90020}
  • CVE-2026-90017
    • staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() {CVE-2026-90017}
  • CVE-2026-90016
    • staging: rtl8723bs: fix OOB read in rtw_restruct_wmm_ie() {CVE-2026-90016}
  • CVE-2026-90329
    • HID: synchronize input before cleaning up a failed probe {CVE-2026-90329} *…
Record
CLSA-2026-1791858923
Updated
2026-11-02
OSVCLSA-2026-1792750763 No score

kernel: Fix of 91 CVEs

  • net: skbuff: propagate shared-frag marker in skb_zerocopy()
  • net: bridge: stop fast-leave after deleting a port group {CVE-2026-74480}
  • net: ipv6: clear suppressed fib6 rule result {CVE-2026-74581}
  • net/sched: fix pedit partial COW leading to page cache corruption {CVE-2026-46331}
  • ipvs: do not propagate one-packet flag to synced conns {CVE-2026-80714}
  • net: skbuff: propagate shared-frag marker through frag-transfer helpers {CVE-2026-43503}
  • smb: client: harden POSIX SID length parsing {CVE-2026-64380}
  • RDMA: Fix use-after-free in rxe_queue_cleanup {CVE-2021-47616}
  • nfsd: validate symlink target length in NFSv4 CREATE {CVE-2026-89699}
  • sctp: fix addr_wq_timer race in sctp_free_addr_wq() {CVE-2026-72383}
  • isofs: fix out-of-bounds page array access on empty zisofs block {CVE-2026-89778}
  • configfs: unhash the dentry before dropping the item in rmdir {CVE-2026-97949}
  • netfilter: ipset: fix race between dump and ip_set_list resize {CVE-2026-64189}
  • netfilter: conntrack_irc: fix possible out-of-bounds read {CVE-2026-53268}
  • ipvs: clear the svc scheduler ptr early on edit {CVE-2026-53270}
  • netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920}
  • media: cx23885: cancel NetUP CI work before teardown {CVE-2026-89893}
  • dmaengine: Fix possible use after free {CVE-2026-72476}
  • net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring {CVE-2026-64047}
  • tipc: prevent snt_unacked underflow on CONN_ACK {CVE-2026-74282}
  • xfrm: hold net_device reference under RCU in bundle creation {CVE-2026-98364}
  • xfrm: Check for underflow in xfrm_state_mtu {CVE-2026-64009}
  • net: mpls: clear inner_protocol when the last label is popped {CVE-2026-97612}
  • net: guard timestamp cmsgs to real error queue skbs {CVE-2026-53223}
  • thunderbolt: Bound root directory content to block size {CVE-2026-53149}
  • SUNRPC: always drain cache_cleaner before destroying a cache_detail {CVE-2026-89548}
  • SUNRPC: harden gss_krb5_unwrap_v2 against short tokens {CVE-2026-89542}
  • SUNRPC: svcauth_gss: enforce krb5 token minimum length {CVE-2026-89550}
  • SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 {CVE-2026-89537}
  • SUNRPC: make sure cache entry active before cache_show {CVE-2024-53174}
  • ipv6: fix fib6 walker UAF on seq stop {CVE-2026-97940}
  • ipv6: sr: restore network header before routing and forwarding {CVE-2026-98096}
  • ipv6: sit: reload inner IPv6 header after GSO offloads {CVE-2026-53228}
  • ipv6: mcast: Fix use-after-free when processing MLD queries {CVE-2026-53275}
  • ipv6: exthdrs: refresh nh after handling HAO option {CVE-2026-63922}
  • ip6_gre: Use cached t->net in ip6erspan_changelink(). {CVE-2026-46120}
  • ipv6: fix possible UAF in icmpv6_rcv() {CVE-2026-53006}
  • ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() {CVE-2026-64002}
  • Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count {CVE-2026-64276}
  • ACPICA: Add validation for node in acpi_ns_build_normalized_path() {CVE-2026-97448}
  • scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() {CVE-2026-46149}
  • usb: xusbatm: don't rely on id table pointer arithmetic {CVE-2026-97539}
  • USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() {CVE-2026-53195}
  • mrp: introduce active flags to prevent UAF when applicant uninit {CVE-2022-50697}
  • HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature {CVE-2026-89729}
  • net/sched: defer qdisc freeing after failed creation {CVE-2026-98017}
  • Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp {CVE-2026-53071}
  • Bluetooth: L2CAP: Fix invalid access if ECRED Reconfigure fails {CVE-2026-53071}
  • scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation {CVE-2026-89856}
  • drm: fix race between partial drm_dev_register() failure and ioctl {CVE-2026-89823}
  • drm/amd/pm: bound pp_dpm_set_pp_table() memcpy {CVE-2026-97427}
  • dm log: fix out-of-bounds write due to region_count overflow {CVE-2026-53059} -…
Record
CLSA-2026-1792750763
Updated
2026-11-02
OSVCLSA-2026-1792751700 No score

kernel: Fix of 106 CVEs

  • net: skbuff: propagate shared-frag marker in skb_zerocopy()
  • net: ipv6: clear suppressed fib6 rule result {CVE-2026-74581}
  • net: skbuff: propagate shared-frag marker through frag-transfer helpers {CVE-2026-43503}
  • ALSA: virtio: reset device before deleting virtqueues {CVE-2026-98264}
  • ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() {CVE-2026-90033}
  • ALSA: 6fire: Fix UAF at error handling during probe {CVE-2026-74505}
  • net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring {CVE-2026-64047}
  • SUNRPC: Fix a server shutdown leak {CVE-2023-53131}
  • libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() {CVE-2026-52956}
  • usb: xusbatm: don't rely on id table pointer arithmetic {CVE-2026-97539}
  • thunderbolt: Keep XDomain reference during the lifetime of a service {CVE-2026-97509}
  • nvdimm/btt: reject an arena whose nfree is below the lane count {CVE-2026-89965}
  • libnvdimm/labels: Prevent integer overflow in __nd_label_validate() {CVE-2026-89559}
  • wifi: brcmsmac: fix UAF in brcms_free_timer() {CVE-2026-98196}
  • wifi: mwifiex: validate scan response extents {CVE-2026-98185}
  • net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow {CVE-2026-98025}
  • net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put {CVE-2026-98015}
  • qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info {CVE-2023-53066}
  • Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count {CVE-2026-64276}
  • Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count {CVE-2026-64277}
  • dmaengine: Fix possible use after free {CVE-2026-72476}
  • netfilter: nf_log: unregister loggers before per-net teardown {CVE-2026-97608}
  • netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state {CVE-2026-93288}
  • mpls: add seqcount to protect the platform_label{,s} pair {CVE-2026-43042}
  • Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp {CVE-2026-74540}
  • usb: dwc2: Fix use after free in debug code {CVE-2026-63927}
  • KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path {CVE-2026-63794}
  • KVM: nVMX: Always flush vpid02 on first use {CVE-2026-89932}
  • x86/mm/ident_map: Use gbpages only where full GB page should be mapped. {CVE-2024-50017}
  • crypto: authencesn - reject short ahash digests during instance creation {CVE-2026-46033}
  • ACPICA: Add validation for node in acpi_ns_build_normalized_path() {CVE-2026-97448}
  • drm/amd/pm: bound pp_dpm_set_pp_table() memcpy {CVE-2026-97427}
  • drm/vmwgfx: validate DRAW_PRIMITIVES header size before division {CVE-2026-74444}
  • HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature {CVE-2026-89729}
  • i2c: stub: Reject I2C block transfers with invalid length {CVE-2026-64191}
  • RDMA/ucma: Lock the handler in ucma_set_ib_path() {CVE-2026-89508}
  • RDMA/srpt: fix integer overflow in immediate data length check {CVE-2026-74394}
  • dm log: fix out-of-bounds write due to region_count overflow {CVE-2026-53059}
  • dm raid1: reserve space for NUL-terminator in build_constructor_string() {CVE-2026-89575}
  • veth: fix NAPI leak in XDP enable error path {CVE-2026-80613}
  • net: hns3: fix kernel crash when 1588 is received on HIP08 devices {CVE-2024-26881}
  • ixgbevf: fix use-after-free in VEPA multicast source pruning {CVE-2026-64113}
  • net: mana: validate rx_req_idx to prevent out-of-bounds array access {CVE-2026-64018}
  • net: stmmac: xgmac2: disable RBUE in default RX interrupt mask {CVE-2026-93830}
  • net: usb: kalmia: bound RX frame length in kalmia_rx_fixup() {CVE-2026-64351}
  • net: usb: pegasus: don't rely on id table pointer arithmetic {CVE-2026-97540}
  • vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() {CVE-2026-63993}
  • wifi: ath9k: fix OOB access from firmware tx status queue ID {CVE-2026-74408}
  • PCI: iproc: Protect root bus removal with rescan lock {CVE-2026-93822}
  • scsi: qla2xxx: Avoid double completion in async IOCB timeout {CVE-2026-89847}
  • fs/mbcache: cancel…
Record
CLSA-2026-1792751700
Updated
2026-11-02
OSVCLSA-2026-1792753605 No score

Fix of 16 CVEs

  • CVE-2026-74581
    • net: ipv6: clear suppressed fib6 rule result {CVE-2026-74581}
  • CVE-2026-46331
    • net/sched: fix pedit partial COW leading to page cache corruption {CVE-2026-46331}
  • CVE-2026-64007
    • netfilter: synproxy: refresh tcphdr after skb_ensure_writable {CVE-2026-64007}
  • CVE-2026-31532
    • can: raw: fix ro->uniq use-after-free in raw_rcv() {CVE-2026-31532}
  • CVE-2026-98375
    • xen/netfront: drop RX packets with a short Ethernet header {CVE-2026-98375}
  • CVE-2026-98266
    • ALSA: core: Fix potential UAF after asynchronous card release {CVE-2026-98266}
  • CVE-2026-98194
    • wifi: libertas_tf: fix UAF in lbtf_free_adapter() {CVE-2026-98194}
  • CVE-2026-98196
    • wifi: brcmsmac: fix UAF in brcms_free_timer() {CVE-2026-98196}
  • CVE-2026-98349
    • wifi: libipw: reject too-short beacon and probe responses {CVE-2026-98349}
  • CVE-2026-98348
    • wifi: libipw: reject too-short association responses {CVE-2026-98348}
  • CVE-2026-98217
    • IB/mlx4: Fix use-after-free on pkey sysfs registration failure {CVE-2026-98217}
  • CVE-2026-64002
    • ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() {CVE-2026-64002}
  • CVE-2026-98193
    • wifi: libipw: reject TKIP frames without a full MIC {CVE-2026-98193}
  • CVE-2026-53059
    • dm log: fix out-of-bounds write due to region_count overflow {CVE-2026-53059}
  • CVE-2022-50103
    • sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed {CVE-2022-50103}
  • CVE-2025-38563
    • perf/core: Prevent VMA split of buffer mappings {CVE-2025-38563}
  • CVE-2025-39839
    • batman-adv: fix OOB read/write in network-coding decode {CVE-2025-39839}
  • Bump ABI 4.4.0-290
Record
CLSA-2026-1792753605
Updated
2026-11-02
OSVCLSA-2026-1792753697 No score

Fix of 14 CVEs

  • CVE-2026-74480
    • net: bridge: stop fast-leave after deleting a port group {CVE-2026-74480}
  • CVE-2026-74581
    • net: ipv6: clear suppressed fib6 rule result {CVE-2026-74581}
  • CVE-2026-80714
    • ipvs: do not propagate one-packet flag to synced conns {CVE-2026-80714}
  • CVE-2026-43503
    • net: skbuff: propagate shared-frag marker through frag-transfer helpers {CVE-2026-43503}
  • CVE-2026-93204
    • batman-adv: dat: atomically update mac addresses {CVE-2026-93204}
  • CVE-2026-90293
    • IB/isert: post the full-feature receive buffers after session registration {CVE-2026-90293}
  • CVE-2026-90207
    • ALSA: seq: midi: Serialize input teardown with event_input {CVE-2026-90207}
  • CVE-2026-93051
    • misc: ad525x_dpot: use driver core groups for sysfs files {CVE-2026-93051}
  • CVE-2026-90302
    • ocfs2: synchronize heartbeat callbacks with o2net teardown {CVE-2026-90302}
  • CVE-2026-90112
    • net: qlcnic: validate unified ROM sections before loading {CVE-2026-90112}
  • CVE-2026-90294
    • IB/isert: delay the final Login Response until the session is registered {CVE-2026-90294}
  • CVE-2026-53059
    • dm log: fix out-of-bounds write due to region_count overflow {CVE-2026-53059}
  • CVE-2026-89723
    • nilfs2: fix slab-out-of-bounds in nilfs_direct_propagate after truncation {CVE-2026-89723}
  • CVE-2026-97938
    • reboot: fix cad_pid use-after-free race {CVE-2026-97938}
  • CVE-2026-52955
    • libceph: Fix potential out-of-bounds access in crush_decode() {CVE-2026-52955}
  • Miscellaneous upstream changes
    • net: skbuff: propagate shared-frag marker in skb_zerocopy()
  • Bump ABI 4.15.0-269
Record
CLSA-2026-1792753697
Updated
2026-11-02
OSVCLSA-2026-1792753995 No score

Fix of 14 CVEs

  • CVE-2026-74480
    • net: bridge: stop fast-leave after deleting a port group {CVE-2026-74480}
  • CVE-2026-74581
    • net: ipv6: clear suppressed fib6 rule result {CVE-2026-74581}
  • CVE-2026-80714
    • ipvs: do not propagate one-packet flag to synced conns {CVE-2026-80714}
  • CVE-2026-43503
    • net: skbuff: propagate shared-frag marker through frag-transfer helpers {CVE-2026-43503}
  • CVE-2026-93204
    • batman-adv: dat: atomically update mac addresses {CVE-2026-93204}
  • CVE-2026-90293
    • IB/isert: post the full-feature receive buffers after session registration {CVE-2026-90293}
  • CVE-2026-90207
    • ALSA: seq: midi: Serialize input teardown with event_input {CVE-2026-90207}
  • CVE-2026-93051
    • misc: ad525x_dpot: use driver core groups for sysfs files {CVE-2026-93051}
  • CVE-2026-90302
    • ocfs2: synchronize heartbeat callbacks with o2net teardown {CVE-2026-90302}
  • CVE-2026-90112
    • net: qlcnic: validate unified ROM sections before loading {CVE-2026-90112}
  • CVE-2026-90294
    • IB/isert: delay the final Login Response until the session is registered {CVE-2026-90294}
  • CVE-2026-53059
    • dm log: fix out-of-bounds write due to region_count overflow {CVE-2026-53059}
  • CVE-2026-89723
    • nilfs2: fix slab-out-of-bounds in nilfs_direct_propagate after truncation {CVE-2026-89723}
  • CVE-2026-97938
    • reboot: fix cad_pid use-after-free race {CVE-2026-97938}
  • CVE-2026-52955
    • libceph: Fix potential out-of-bounds access in crush_decode() {CVE-2026-52955}
  • Miscellaneous upstream changes
    • net: skbuff: propagate shared-frag marker in skb_zerocopy()
  • Bump ABI 4.15.0-269
Record
CLSA-2026-1792753995
Updated
2026-11-02
OSVCLSA-2026-1792759740 No score

kernel: Fix of 134 CVEs

  • net: skbuff: propagate shared-frag marker in skb_zerocopy()
  • net: bridge: stop fast-leave after deleting a port group {CVE-2026-74480}
  • net: ipv6: clear suppressed fib6 rule result {CVE-2026-74581}
  • ipvs: do not propagate one-packet flag to synced conns {CVE-2026-80714}
  • net: skbuff: propagate shared-frag marker through frag-transfer helpers {CVE-2026-43503}
  • net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow {CVE-2026-98025}
  • ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF {CVE-2026-98116}
  • sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START {CVE-2026-98130}
  • dm cache policy smq: check allocation under invalidate lock {CVE-2026-53265}
  • RDMA/siw: Bound fragmented header copies by the remaining length {CVE-2026-98323}
  • tty: clear cdev pointer after cdev_add() failure {CVE-2026-90334}
  • tty: skip cdev_del() when no cdev is registered {CVE-2026-90335}
  • procfs: fix missing RCU protection when reading real_parent in do_task_stat() {CVE-2026-46259}
  • sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL {CVE-2026-46227}
  • drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() {CVE-2026-46209}
  • drm: Remove plane hsub/vsub alignment requirement for core helpers {CVE-2026-46209}
  • RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path {CVE-2026-46189}
  • RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() {CVE-2026-46181}
  • scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() {CVE-2026-46149}
  • RDMA/rxe: Reject unknown opcodes before ICRC processing {CVE-2026-46133}
  • ip6_gre: Use cached t->net in ip6erspan_changelink(). {CVE-2026-46120}
  • libceph: Fix slab-out-of-bounds access in auth message processing {CVE-2026-46119}
  • Bluetooth: hci_event: fix potential UAF in SSP passkey handlers {CVE-2026-46056}
  • net: qrtr: ns: Fix use-after-free in driver remove() {CVE-2026-46047}
  • RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv {CVE-2026-46043}
  • gfs2: Fix use-after-free in iomap inline data write path {CVE-2026-45984}
  • gfs2: Add metapath_dibh helper {CVE-2026-45984}
  • bonding: alb: fix UAF in rlb_arp_recv during bond up/down {CVE-2026-45970}
  • gfs2: Fix slab-use-after-free in qd_put {CVE-2026-45861}
  • RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send {CVE-2026-45856}
  • dm: fix a buffer overflow in ioctl processing {CVE-2026-46294}
  • wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task {CVE-2026-46180}
  • netfilter: nf_log: validate MAC header was set before dumping it {CVE-2026-52942}
  • xfrm: espintcp: do not reuse an in-progress partial send {CVE-2026-52935}
  • sctp: purge outqueue on stale COOKIE-ECHO handling {CVE-2026-52924}
  • ipc: limit next_id allocation to the valid ID range {CVE-2026-52923}
  • netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920}
  • netfilter: nf_queue: hold bridge skb->dev while queued {CVE-2026-52912}
  • ipvs: clear the svc scheduler ptr early on edit {CVE-2026-53270}
  • netfilter: conntrack_irc: fix possible out-of-bounds read {CVE-2026-53268}
  • net/sched: act_api: use RCU with deferred freeing for action lifecycle {CVE-2026-53264}
  • Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() {CVE-2026-53256}
  • Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
  • xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() {CVE-2026-53239}
  • ipv6: sit: reload inner IPv6 header after GSO offloads {CVE-2026-53228}
  • net: guard timestamp cmsgs to real error queue skbs {CVE-2026-53223}
  • USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() {CVE-2026-53195}
  • wifi: nl80211: reject oversized EMA RNR lists {CVE-2026-53182}
  • netfilter: require Ethernet MAC header before using eth_hdr() {CVE-2026-53131}
  • bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops {CVE-2026-53078}
  • ppp: require CAP_NET_ADMIN in target…
Record
CLSA-2026-1792759740
Updated
2026-11-02
OSVCLSA-2026-1792762308 No score

kernel: Fix of 128 CVEs

  • net: skbuff: propagate shared-frag marker in skb_zerocopy()
  • net: bridge: stop fast-leave after deleting a port group {CVE-2026-74480}
  • net: ipv6: clear suppressed fib6 rule result {CVE-2026-74581}
  • net: skbuff: propagate shared-frag marker through frag-transfer helpers {CVE-2026-43503}
  • ALSA: virtio: reset device before deleting virtqueues {CVE-2026-98264}
  • ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() {CVE-2026-90033}
  • ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set {CVE-2026-74498}
  • ALSA: caiaq: Fix potential double-free at error path {CVE-2026-98066}
  • ASoC: Intel: avs: Disable periods-elapsed work when closing PCM {CVE-2025-40344}
  • ALSA: timer: drain a slave's callback before its master detaches it {CVE-2026-68201}
  • ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams {CVE-2026-53242}
  • ALSA: seq: midi: Serialize output teardown with event_input {CVE-2026-74387}
  • security/keys: fix missed RCU read section on lookup {CVE-2026-64015}
  • SUNRPC: harden gss_krb5_unwrap_v2 against short tokens {CVE-2026-89542}
  • sctp: fix err_chunk memory leaks in INIT handling {CVE-2026-72413}
  • netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() {CVE-2026-98077}
  • netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() {CVE-2026-74569}
  • mm/hugetlb: fix list corruption in allocate_file_region_entries() {CVE-2026-74518}
  • rcu: Fix rcu_read_unlock() deadloop due to softirq {CVE-2026-45957}
  • bpf: Fix potential UAF in bpf_netns_link_update_prog {CVE-2026-90393}
  • bpf: Fix use-after-free in offloaded map/prog info fill {CVE-2026-53089}
  • NFSv4.2: fix LAYOUTSTATS send buffer exhaustion {CVE-2026-90103}
  • uio: Fix stale info pointer in failed registration path {CVE-2026-93054}
  • tty: clear cdev pointer after cdev_add() failure {CVE-2026-90334}
  • tty: skip cdev_del() when no cdev is registered {CVE-2026-90335}
  • scsi: qla2xxx: Avoid double completion in async IOCB timeout {CVE-2026-89847}
  • scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue {CVE-2025-37861}
  • scsi: csiostor: Fix dereference of null pointer rn {CVE-2026-45857}
  • scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write {CVE-2026-74470}
  • wifi: brcmsmac: fix UAF in brcms_free_timer() {CVE-2026-98196}
  • wifi: mwifiex: validate scan response extents {CVE-2026-98185}
  • wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length {CVE-2026-90382}
  • wifi: iwlwifi: mvm: add a check on the tid coming from the firmware {CVE-2026-93791}
  • wifi: ath9k: fix OOB access from firmware tx status queue ID {CVE-2026-74408}
  • net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow {CVE-2026-98025}
  • net: thunderbolt: Fix frags[] overflow by bounding frame_count {CVE-2026-72157}
  • net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put {CVE-2026-98015}
  • net: stmmac: xgmac2: disable RBUE in default RX interrupt mask {CVE-2026-93830}
  • net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list {CVE-2026-53230}
  • xen/netfront: drop RX packets with a short Ethernet header {CVE-2026-98375}
  • veth: fix NAPI leak in XDP enable error path {CVE-2026-80613}
  • RDMA/rxe: Fix double free in rxe_srq_from_init {CVE-2026-45852}
  • RDMA/iwcm: Fix workqueue list corruption by removing work_list {CVE-2026-45898}
  • ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control {CVE-2026-72261}
  • svcrdma: Fix offset arithmetic in read_chunk_range {CVE-2026-89533}
  • SUNRPC: svcauth_gss: enforce krb5 token minimum length {CVE-2026-89550}
  • xprtrdma: Fix ep kref imbalance on ADDR_CHANGE {CVE-2026-72469}
  • sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START {CVE-2026-98130}
  • sctp: drop a chunk if its transport was removed {CVE-2026-89478}
  • sctp: prevent peer transport count overflow {CVE-2026-74469}
  • sctp: validate embedded address parameter length {CVE-2026-74287}
  • sctp: revalidate list cursor after…
Record
CLSA-2026-1792762308
Updated
2026-11-02
OSVopenSUSE-SU-2026:21910-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (bsc#1256671).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-23113: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).
  • CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
  • CVE-2026-23348: cxl/mem: Clarify @host for devm_cxl_add_nvdimm() (bsc#1260577).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31530: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (bsc#1262756).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132).
  • CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
  • CVE-2026-46135: nvmet-tcp: remove redundant calls to nvmet_tcp_fatal_error() (bsc#1267373).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). -…
Record
openSUSE-SU-2026:21910-1
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2026-53059 No score

CVE-2026-53059 in linux - Patched by Root

Root has patched CVE-2026-53059 in the linux package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2026-53059
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2026-53059 No score

CVE-2026-53059 in linux - Patched by Root

Root has patched CVE-2026-53059 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2026-53059
Updated
2026-11-02
OSVROOT-OS-UBUNTU-2204-CVE-2026-53059 No score

CVE-2026-53059 in linux - Patched by Root

Root has patched CVE-2026-53059 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2204-CVE-2026-53059
Updated
2026-11-06
OSVROOT-OS-UBUNTU-2404-CVE-2026-53059 No score

CVE-2026-53059 in linux - Patched by Root

Root has patched CVE-2026-53059 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2404-CVE-2026-53059
Updated
2026-11-06
OSVSUSE-SU-2026:23477-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1235944)
  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-31392: smb: client: fix krb5 mount with username option (bsc#1261788).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).
  • CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
  • CVE-2026-43278: dm: clear cloned request bio pointer when last clone bio completes (bsc#1264584).
  • CVE-2026-43319: spi: spidev: fix lock inversion between spi_lock and buf_lock (bsc#1264788).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).
  • CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).
  • CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).
  • CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).
  • CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).
  • CVE-2026-53076: bpf: Fix OOB in pcpu_init_value (bsc#1269695).
  • CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412).
  • CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783).
  • CVE-2026-53091: net: account for encap headers in qdisc pkt len (bsc#1269530).
  • CVE-2026-53094: bpf: Fix stale offload->prog pointer after constant blinding (bsc#1269965).
  • CVE-2026-53096: bpf: Use RCU-safe iteration in…
Record
SUSE-SU-2026:23477-1
Updated
2026-11-02
OSVSUSE-SU-2026:23481-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1269731).
  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-31392: smb: client: fix krb5 mount with username option (bsc#1261788).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).
  • CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
  • CVE-2026-43278: dm: clear cloned request bio pointer when last clone bio completes (bsc#1264584).
  • CVE-2026-43319: spi: spidev: fix lock inversion between spi_lock and buf_lock (bsc#1264788).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).
  • CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).
  • CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).
  • CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).
  • CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).
  • CVE-2026-53076: bpf: Fix OOB in pcpu_init_value (bsc#1269695).
  • CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412).
  • CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783).
  • CVE-2026-53091: net: account for encap headers in qdisc pkt len (bsc#1269530).
  • CVE-2026-53094: bpf: Fix stale offload->prog pointer after constant blinding (bsc#1269965).
  • CVE-2026-53096: bpf: Use RCU-safe iteration in…
Record
SUSE-SU-2026:23481-1
Updated
2026-11-02
OSVSUSE-SU-2026:23528-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1235944)
  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-31392: smb: client: fix krb5 mount with username option (bsc#1261788).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).
  • CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
  • CVE-2026-43278: dm: clear cloned request bio pointer when last clone bio completes (bsc#1264584).
  • CVE-2026-43319: spi: spidev: fix lock inversion between spi_lock and buf_lock (bsc#1264788).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).
  • CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).
  • CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).
  • CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).
  • CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).
  • CVE-2026-53076: bpf: Fix OOB in pcpu_init_value (bsc#1269695).
  • CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412).
  • CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783).
  • CVE-2026-53091: net: account for encap headers in qdisc pkt len (bsc#1269530).
  • CVE-2026-53094: bpf: Fix stale offload->prog pointer after constant blinding (bsc#1269965).
  • CVE-2026-53096: bpf: Use RCU-safe iteration in…
Record
SUSE-SU-2026:23528-1
Updated
2026-11-02
OSVSUSE-SU-2026:23529-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1269731).
  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-31392: smb: client: fix krb5 mount with username option (bsc#1261788).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).
  • CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
  • CVE-2026-43278: dm: clear cloned request bio pointer when last clone bio completes (bsc#1264584).
  • CVE-2026-43319: spi: spidev: fix lock inversion between spi_lock and buf_lock (bsc#1264788).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).
  • CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).
  • CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).
  • CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).
  • CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).
  • CVE-2026-53076: bpf: Fix OOB in pcpu_init_value (bsc#1269695).
  • CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412).
  • CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783).
  • CVE-2026-53091: net: account for encap headers in qdisc pkt len (bsc#1269530).
  • CVE-2026-53094: bpf: Fix stale offload->prog pointer after constant blinding (bsc#1269965).
  • CVE-2026-53096: bpf: Use RCU-safe iteration in…
Record
SUSE-SU-2026:23529-1
Updated
2026-11-02

Affected products

Show 4 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
kernel
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-64k
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-64k-core
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-64k-debug
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-64k-debug-core
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-64k-debug-devel
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-64k-debug-devel-matched
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-64k-debug-modules
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-64k-debug-modules-core
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-64k-debug-modules-extra
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-64k-devel
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-64k-devel-matched
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-64k-modules
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-64k-modules-core
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-64k-modules-extra
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-abi-stablelists
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-core
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-cross-headers
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-debug
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-debug-core
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-debug-devel
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-debug-devel-matched
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-debug-modules
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-debug-modules-core
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-debug-modules-extra
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-debug-uki-virt
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-devel
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-devel-matched
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-doc
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-headers
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-modules
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-modules-core
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-modules-extra
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-modules-extra-matched
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-rt
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-rt-64k
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-rt-64k-core
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-rt-64k-debug
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-rt-64k-debug-core
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-rt-64k-debug-devel
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-rt-64k-debug-modules
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-rt-64k-debug-modules-core
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-rt-64k-debug-modules-extra
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-rt-64k-devel
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-rt-64k-modules
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-rt-64k-modules-core
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-rt-64k-modules-extra
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-rt-core
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-rt-debug
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-rt-debug-core
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-rt-debug-devel
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-rt-debug-modules
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-rt-debug-modules-core
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
kernel-rt-debug-modules-extra
AlmaLinux:10
From an advisory covering 7 CVEs
before 6.12.0-211.39.1.el10_2
6.12.0-211.39.1.el10_2
linux-lts
Alpaquita:23
6.1.174-r0 up to 6.1.175-r0
6.1.175-r0
linux-lts
Alpaquita:25
6.12.87-r0 up to 6.12.92-r0
6.12.92-r0
linux-lts
Alpaquita:stream
6.12.92-r1 up to 6.18.35-r1
6.18.35-r1
kernel
TuxCare:CentOS:6
From an advisory covering 57 CVEs
before 2.6.32-754.35.8.el6.tuxcare.els35
2.6.32-754.35.8.el6.tuxcare.els35
kernel-abi-whitelists
TuxCare:CentOS:6
From an advisory covering 57 CVEs
before 2.6.32-754.35.8.el6.tuxcare.els35
2.6.32-754.35.8.el6.tuxcare.els35
kernel-debug
TuxCare:CentOS:6
From an advisory covering 57 CVEs
before 2.6.32-754.35.8.el6.tuxcare.els35
2.6.32-754.35.8.el6.tuxcare.els35
kernel-debug-devel
TuxCare:CentOS:6
From an advisory covering 57 CVEs
before 2.6.32-754.35.8.el6.tuxcare.els35
2.6.32-754.35.8.el6.tuxcare.els35
kernel-devel
TuxCare:CentOS:6
From an advisory covering 57 CVEs
before 2.6.32-754.35.8.el6.tuxcare.els35
2.6.32-754.35.8.el6.tuxcare.els35
kernel-doc
TuxCare:CentOS:6
From an advisory covering 57 CVEs
before 2.6.32-754.35.8.el6.tuxcare.els35
2.6.32-754.35.8.el6.tuxcare.els35
kernel-firmware
TuxCare:CentOS:6
From an advisory covering 57 CVEs
before 2.6.32-754.35.8.el6.tuxcare.els35
2.6.32-754.35.8.el6.tuxcare.els35
kernel-headers
TuxCare:CentOS:6
From an advisory covering 57 CVEs
before 2.6.32-754.35.8.el6.tuxcare.els35
2.6.32-754.35.8.el6.tuxcare.els35
perf
TuxCare:CentOS:6
From an advisory covering 57 CVEs
before 2.6.32-754.35.8.el6.tuxcare.els35
2.6.32-754.35.8.el6.tuxcare.els35
python-perf
TuxCare:CentOS:6
From an advisory covering 57 CVEs
before 2.6.32-754.35.8.el6.tuxcare.els35
2.6.32-754.35.8.el6.tuxcare.els35
kernel
TuxCare:OracleLinux:6
From an advisory covering 57 CVEs
before 2.6.32-754.35.8.el6.tuxcare.els35
2.6.32-754.35.8.el6.tuxcare.els35
kernel-abi-whitelists
TuxCare:OracleLinux:6
From an advisory covering 57 CVEs
before 2.6.32-754.35.8.el6.tuxcare.els35
2.6.32-754.35.8.el6.tuxcare.els35
kernel-debug
TuxCare:OracleLinux:6
From an advisory covering 57 CVEs
before 2.6.32-754.35.8.el6.tuxcare.els35
2.6.32-754.35.8.el6.tuxcare.els35
kernel-debug-devel
TuxCare:OracleLinux:6
From an advisory covering 57 CVEs
before 2.6.32-754.35.8.el6.tuxcare.els35
2.6.32-754.35.8.el6.tuxcare.els35
kernel-devel
TuxCare:OracleLinux:6
From an advisory covering 57 CVEs
before 2.6.32-754.35.8.el6.tuxcare.els35
2.6.32-754.35.8.el6.tuxcare.els35
kernel-doc
TuxCare:OracleLinux:6
From an advisory covering 57 CVEs
before 2.6.32-754.35.8.el6.tuxcare.els35
2.6.32-754.35.8.el6.tuxcare.els35
kernel-firmware
TuxCare:OracleLinux:6
From an advisory covering 57 CVEs
before 2.6.32-754.35.8.el6.tuxcare.els35
2.6.32-754.35.8.el6.tuxcare.els35
kernel-headers
TuxCare:OracleLinux:6
From an advisory covering 57 CVEs
before 2.6.32-754.35.8.el6.tuxcare.els35
2.6.32-754.35.8.el6.tuxcare.els35
perf
TuxCare:OracleLinux:6
From an advisory covering 57 CVEs
before 2.6.32-754.35.8.el6.tuxcare.els35
2.6.32-754.35.8.el6.tuxcare.els35
python-perf
TuxCare:OracleLinux:6
From an advisory covering 57 CVEs
before 2.6.32-754.35.8.el6.tuxcare.els35
2.6.32-754.35.8.el6.tuxcare.els35
bpftool
TuxCare:CentOS:7
From an advisory covering 39 CVEs
before 3.10.0-1160.164.1.el7.tuxcare.els1
3.10.0-1160.164.1.el7.tuxcare.els1
kernel
TuxCare:CentOS:7
From an advisory covering 39 CVEs
before 3.10.0-1160.164.1.el7.tuxcare.els1
3.10.0-1160.164.1.el7.tuxcare.els1
kernel-debug
TuxCare:CentOS:7
From an advisory covering 39 CVEs
before 3.10.0-1160.164.1.el7.tuxcare.els1
3.10.0-1160.164.1.el7.tuxcare.els1
kernel-debug-devel
TuxCare:CentOS:7
From an advisory covering 39 CVEs
before 3.10.0-1160.164.1.el7.tuxcare.els1
3.10.0-1160.164.1.el7.tuxcare.els1
kernel-devel
TuxCare:CentOS:7
From an advisory covering 39 CVEs
before 3.10.0-1160.164.1.el7.tuxcare.els1
3.10.0-1160.164.1.el7.tuxcare.els1
kernel-doc
TuxCare:CentOS:7
From an advisory covering 39 CVEs
before 3.10.0-1160.164.1.el7.tuxcare.els1
3.10.0-1160.164.1.el7.tuxcare.els1
kernel-headers
TuxCare:CentOS:7
From an advisory covering 39 CVEs
before 3.10.0-1160.164.1.el7.tuxcare.els1
3.10.0-1160.164.1.el7.tuxcare.els1
kernel-tools
TuxCare:CentOS:7
From an advisory covering 39 CVEs
before 3.10.0-1160.164.1.el7.tuxcare.els1
3.10.0-1160.164.1.el7.tuxcare.els1
kernel-tools-libs
TuxCare:CentOS:7
From an advisory covering 39 CVEs
before 3.10.0-1160.164.1.el7.tuxcare.els1
3.10.0-1160.164.1.el7.tuxcare.els1
kernel-tools-libs-devel
TuxCare:CentOS:7
From an advisory covering 39 CVEs
before 3.10.0-1160.164.1.el7.tuxcare.els1
3.10.0-1160.164.1.el7.tuxcare.els1
perf
TuxCare:CentOS:7
From an advisory covering 39 CVEs
before 3.10.0-1160.164.1.el7.tuxcare.els1
3.10.0-1160.164.1.el7.tuxcare.els1
python-perf
TuxCare:CentOS:7
From an advisory covering 39 CVEs
before 3.10.0-1160.164.1.el7.tuxcare.els1
3.10.0-1160.164.1.el7.tuxcare.els1
bpftool
TuxCare:OracleLinux:7
From an advisory covering 39 CVEs
before 3.10.0-1160.164.1.el7.tuxcare.els1
3.10.0-1160.164.1.el7.tuxcare.els1
kernel
TuxCare:OracleLinux:7
From an advisory covering 39 CVEs
before 3.10.0-1160.164.1.el7.tuxcare.els1
3.10.0-1160.164.1.el7.tuxcare.els1
kernel-debug
TuxCare:OracleLinux:7
From an advisory covering 39 CVEs
before 3.10.0-1160.164.1.el7.tuxcare.els1
3.10.0-1160.164.1.el7.tuxcare.els1
kernel-debug-devel
TuxCare:OracleLinux:7
From an advisory covering 39 CVEs
before 3.10.0-1160.164.1.el7.tuxcare.els1
3.10.0-1160.164.1.el7.tuxcare.els1
kernel-devel
TuxCare:OracleLinux:7
From an advisory covering 39 CVEs
before 3.10.0-1160.164.1.el7.tuxcare.els1
3.10.0-1160.164.1.el7.tuxcare.els1
kernel-doc
TuxCare:OracleLinux:7
From an advisory covering 39 CVEs
before 3.10.0-1160.164.1.el7.tuxcare.els1
3.10.0-1160.164.1.el7.tuxcare.els1
kernel-headers
TuxCare:OracleLinux:7
From an advisory covering 39 CVEs
before 3.10.0-1160.164.1.el7.tuxcare.els1
3.10.0-1160.164.1.el7.tuxcare.els1
kernel-tools
TuxCare:OracleLinux:7
From an advisory covering 39 CVEs
before 3.10.0-1160.164.1.el7.tuxcare.els1
3.10.0-1160.164.1.el7.tuxcare.els1
kernel-tools-libs
TuxCare:OracleLinux:7
From an advisory covering 39 CVEs
before 3.10.0-1160.164.1.el7.tuxcare.els1
3.10.0-1160.164.1.el7.tuxcare.els1
kernel-tools-libs-devel
TuxCare:OracleLinux:7
From an advisory covering 39 CVEs
before 3.10.0-1160.164.1.el7.tuxcare.els1
3.10.0-1160.164.1.el7.tuxcare.els1
perf
TuxCare:OracleLinux:7
From an advisory covering 39 CVEs
before 3.10.0-1160.164.1.el7.tuxcare.els1
3.10.0-1160.164.1.el7.tuxcare.els1
python-perf
TuxCare:OracleLinux:7
From an advisory covering 39 CVEs
before 3.10.0-1160.164.1.el7.tuxcare.els1
3.10.0-1160.164.1.el7.tuxcare.els1
bpftool
TuxCare:RHEL:7
From an advisory covering 39 CVEs
before 3.10.0-1160.164.1.el7.tuxcare.els1
3.10.0-1160.164.1.el7.tuxcare.els1
kernel
TuxCare:RHEL:7
From an advisory covering 39 CVEs
before 3.10.0-1160.164.1.el7.tuxcare.els1
3.10.0-1160.164.1.el7.tuxcare.els1
kernel-debug
TuxCare:RHEL:7
From an advisory covering 39 CVEs
before 3.10.0-1160.164.1.el7.tuxcare.els1
3.10.0-1160.164.1.el7.tuxcare.els1
kernel-debug-devel
TuxCare:RHEL:7
From an advisory covering 39 CVEs
before 3.10.0-1160.164.1.el7.tuxcare.els1
3.10.0-1160.164.1.el7.tuxcare.els1
kernel-devel
TuxCare:RHEL:7
From an advisory covering 39 CVEs
before 3.10.0-1160.164.1.el7.tuxcare.els1
3.10.0-1160.164.1.el7.tuxcare.els1
kernel-doc
TuxCare:RHEL:7
From an advisory covering 39 CVEs
before 3.10.0-1160.164.1.el7.tuxcare.els1
3.10.0-1160.164.1.el7.tuxcare.els1
kernel-headers
TuxCare:RHEL:7
From an advisory covering 39 CVEs
before 3.10.0-1160.164.1.el7.tuxcare.els1
3.10.0-1160.164.1.el7.tuxcare.els1
kernel-tools
TuxCare:RHEL:7
From an advisory covering 39 CVEs
before 3.10.0-1160.164.1.el7.tuxcare.els1
3.10.0-1160.164.1.el7.tuxcare.els1
kernel-tools-libs
TuxCare:RHEL:7
From an advisory covering 39 CVEs
before 3.10.0-1160.164.1.el7.tuxcare.els1
3.10.0-1160.164.1.el7.tuxcare.els1
Kernel
Linux
2.6.12 up to 5.10.258, 5.11.0 up to 5.15.209, 5.16.0 up to 6.1.175, 6.2.0 up to 6.6.141, 6.7.0 up to 6.12.91, 6.13.0 up to 6.18.33, 6.19.0 up to 7.0.10
5.10.2585.15.2096.1.1756.6.1416.12.916.18.337.0.10
linux
Debian:12
before 6.1.176-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 45 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.170-16.1.170-26.1.170-36.1.172-16.1.174-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-1
6.1.176-1
linux
Debian:13
before 6.12.94-1, plus listed versions
6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-1
Show 22 moreShow less
6.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-1~bpo12+1
6.12.94-1
linux
Debian:14
before 7.0.10-1, plus listed versions
6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1
Show 45 moreShow less
6.12.113-16.12.115-16.12.115-26.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp1
7.0.10-1
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-64k-debug-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-64k-debug-devel-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-64k-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-64k-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-64k-devel-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-debug-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-debug-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-debug-devel-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-devel-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-doc
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-rt-64k-debug-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-rt-64k-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-rt-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-tools-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-zfcpdump-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-zfcpdump-devel-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
libperf-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
perf
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
perf-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
python3-perf
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
python3-perf-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
rtla
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
rv
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-64k
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-64k-core
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-64k-debug
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-64k-debug-core
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-64k-debug-modules
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-64k-debug-modules-core
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-64k-debug-modules-extra
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-64k-modules
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-64k-modules-core
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-64k-modules-extra
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-abi-stablelists
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-core
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-debug
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-debug-core
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-debug-modules
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-debug-modules-core
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-debug-modules-extra
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-debug-uki-virt
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-modules
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel-modules-core
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel
Rocky Linux:10
From an advisory covering 6 CVEs
before 0:6.12.0-211.39.1.el10_2
0:6.12.0-211.39.1.el10_2
kernel
Rocky Linux:8
From an advisory covering 3 CVEs
before 0:4.18.0-553.147.1.el8_10
0:4.18.0-553.147.1.el8_10
kernel-rt
Rocky Linux:8
From an advisory covering 3 CVEs
before 0:4.18.0-553.147.1.rt7.488.el8_10
0:4.18.0-553.147.1.rt7.488.el8_10
kernel
Rocky Linux:9
From an advisory covering 5 CVEs
before 0:5.14.0-687.30.1.el9_8
0:5.14.0-687.30.1.el9_8
linux
Root:Debian:11
before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
rootio-linux
Root:Debian:11
before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
linux
Root:Debian:12
before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
rootio-linux
Root:Debian:12
before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
linux
Root:Ubuntu:22.04
before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
rootio-linux
Root:Ubuntu:22.04
before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
linux
Root:Ubuntu:24.04
before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
rootio-linux
Root:Ubuntu:24.04
before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
kernel
Rocky Linux:8
From an advisory covering 3 CVEs
before 0:4.18.0-553.147.1.el8_10.cloud.0.1
0:4.18.0-553.147.1.el8_10.cloud.0.1
kernel
Rocky Linux:9
From an advisory covering 5 CVEs
before 0:5.14.0-687.30.1.el9_8.cloud.1.0
0:5.14.0-687.30.1.el9_8.cloud.1.0
kernel-rt
SUSE:Linux Micro 6.0
From an advisory covering 588 CVEs
before 6.4.0-52.1
6.4.0-52.1
kernel-source-rt
SUSE:Linux Micro 6.0
From an advisory covering 588 CVEs
before 6.4.0-52.1
6.4.0-52.1
kernel-default
SUSE:Linux Micro 6.0
From an advisory covering 588 CVEs
before 6.4.0-52.1
6.4.0-52.1
kernel-default-base
SUSE:Linux Micro 6.0
From an advisory covering 588 CVEs
before 6.4.0-52.1.21.36
6.4.0-52.1.21.36
kernel-kvmsmall
SUSE:Linux Micro 6.0
From an advisory covering 588 CVEs
before 6.4.0-52.1
6.4.0-52.1
kernel-source
SUSE:Linux Micro 6.0
From an advisory covering 588 CVEs
before 6.4.0-52.1
6.4.0-52.1
kernel-rt
SUSE:Linux Micro 6.1
From an advisory covering 588 CVEs
before 6.4.0-52.1
6.4.0-52.1
kernel-source-rt
SUSE:Linux Micro 6.1
From an advisory covering 588 CVEs
before 6.4.0-52.1
6.4.0-52.1
kernel-default
SUSE:Linux Micro 6.1
From an advisory covering 588 CVEs
before 6.4.0-52.1
6.4.0-52.1
kernel-default-base
SUSE:Linux Micro 6.1
From an advisory covering 588 CVEs
before 6.4.0-52.1.21.34
6.4.0-52.1.21.34
kernel-kvmsmall
SUSE:Linux Micro 6.1
From an advisory covering 588 CVEs
before 6.4.0-52.1
6.4.0-52.1
kernel-source
SUSE:Linux Micro 6.1
From an advisory covering 588 CVEs
before 6.4.0-52.1
6.4.0-52.1
kernel-obs-build
SUSE:Linux Micro Extras 6.2
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-syms
SUSE:Linux Micro Extras 6.2
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-64kb
SUSE:Linux Micro 6.2
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default
SUSE:Linux Micro 6.2
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default-base
SUSE:Linux Micro 6.2
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1.160000.2.23
6.12.0-160000.38.1.160000.2.23
kernel-rt
SUSE:Linux Micro 6.2
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-source
SUSE:Linux Micro 6.2
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-64kb
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-azure
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default-base
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1.160000.2.23
6.12.0-160000.38.1.160000.2.23
kernel-docs
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-kvmsmall
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-obs-qa
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-source
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-syms
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-64kb
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-azure
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1.160000.2.23
6.12.0-160000.38.1.160000.2.23
kernel-docs
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-kvmsmall
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-obs-qa
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-source
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-syms
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-zfcpdump
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default
SUSE:Linux Micro 6.0
From an advisory covering 1056 CVEs
before 6.4.0-159998.55.1
6.4.0-159998.55.1
kernel-default-base
SUSE:Linux Micro 6.0
From an advisory covering 1056 CVEs
before 6.4.0-159998.55.1.159998.21.42
6.4.0-159998.55.1.159998.21.42
kernel-kvmsmall
SUSE:Linux Micro 6.0
From an advisory covering 1056 CVEs
before 6.4.0-159998.55.1
6.4.0-159998.55.1
kernel-source
SUSE:Linux Micro 6.0
From an advisory covering 1056 CVEs
before 6.4.0-159998.55.1
6.4.0-159998.55.1
kernel-livepatch-SLE15-SP7-RT_Update_20
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 662 CVEs
before 1-150700.1.3.1
1-150700.1.3.1
kernel-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 662 CVEs
before 6.4.0-150700.7.75.1
6.4.0-150700.7.75.1
kernel-source-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 662 CVEs
before 6.4.0-150700.7.75.1
6.4.0-150700.7.75.1
kernel-syms-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 662 CVEs
before 6.4.0-150700.7.75.1
6.4.0-150700.7.75.1
kernel-default
SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE
From an advisory covering 9 CVEs
before 3.0.101-108.220.1
3.0.101-108.220.1
kernel-docs
SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE
From an advisory covering 9 CVEs
before 3.0.101-108.220.1
3.0.101-108.220.1
kernel-ec2
SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE
From an advisory covering 9 CVEs
before 3.0.101-108.220.1
3.0.101-108.220.1
kernel-source
SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE
From an advisory covering 9 CVEs
before 3.0.101-108.220.1
3.0.101-108.220.1
kernel-syms
SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE
From an advisory covering 9 CVEs
before 3.0.101-108.220.1
3.0.101-108.220.1
linux
Ubuntu:Pro:14.04:LTS
All versions, plus listed versions
3.11.0-12.193.12.0-1.33.12.0-2.53.12.0-2.73.12.0-3.8
Show 45 moreShow less
3.12.0-3.93.12.0-4.103.12.0-4.123.12.0-5.133.12.0-7.153.13.0-1.163.13.0-2.173.13.0-3.183.13.0-4.193.13.0-5.203.13.0-6.233.13.0-7.253.13.0-7.263.13.0-8.273.13.0-8.283.13.0-10.303.13.0-11.313.13.0-12.323.13.0-13.333.13.0-14.343.13.0-15.353.13.0-16.363.13.0-17.373.13.0-18.383.13.0-19.393.13.0-19.403.13.0-20.423.13.0-21.433.13.0-22.443.13.0-23.453.13.0-24.463.13.0-24.473.13.0-27.503.13.0-29.533.13.0-30.543.13.0-30.553.13.0-32.573.13.0-33.583.13.0-34.603.13.0-35.623.13.0-36.633.13.0-37.643.13.0-39.663.13.0-40.693.13.0-41.70
None known
linux-aws
Ubuntu:Pro:14.04:LTS
All versions, plus listed versions
4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9
Show 45 moreShow less
4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80
None known
linux-azure
Ubuntu:Pro:14.04:LTS
All versions, plus listed versions
4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2
Show 45 moreShow less
4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1
None known
linux-lts-xenial
Ubuntu:Pro:14.04:LTS
All versions, plus listed versions
4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1
Show 45 moreShow less
4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1
None known
linux
Ubuntu:Pro:16.04:LTS
All versions, plus listed versions
4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11
Show 45 moreShow less
4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96
None known
linux-aws
Ubuntu:Pro:16.04:LTS
All versions, plus listed versions
4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18
Show 45 moreShow less
4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93
None known
linux-aws-hwe
Ubuntu:Pro:16.04:LTS
All versions, plus listed versions
4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1
Show 45 moreShow less
4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1
None known
linux-azure
Ubuntu:Pro:16.04:LTS
All versions, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 45 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71
None known
linux-gcp
Ubuntu:Pro:16.04:LTS
All versions, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
Show 45 moreShow less
4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1
None known
linux-hwe
Ubuntu:Pro:16.04:LTS
All versions, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 45 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1
None known
linux-hwe-edge
Ubuntu:16.04:LTS
All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
None known
linux-kvm
Ubuntu:Pro:16.04:LTS
All versions, plus listed versions
4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15
Show 45 moreShow less
4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.674.4.0-1062.694.4.0-1063.704.4.0-1064.714.4.0-1065.724.4.0-1066.734.4.0-1068.754.4.0-1069.764.4.0-1070.774.4.0-1071.784.4.0-1075.824.4.0-1076.834.4.0-1077.84
None known
linux-oracle
Ubuntu:Pro:16.04:LTS
All versions, plus listed versions
4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1
Show 45 moreShow less
4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1
None known
linux-fips
Ubuntu:Pro:FIPS-updates:16.04:LTS
All versions, plus listed versions
4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13
Show 45 moreShow less
4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78
None known
linux-fips
Ubuntu:Pro:FIPS:16.04:LTS
All versions, plus listed versions
4.4.0-1001.14.4.0-1002.2
None known
linux
Ubuntu:Pro:18.04:LTS
All versions, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 45 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107
None known
linux-aws
Ubuntu:Pro:18.04:LTS
All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 45 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87
None known
linux-aws-5.0
Ubuntu:18.04:LTS
All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
None known
linux-aws-5.3
Ubuntu:18.04:LTS
All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
None known
linux-aws-5.4
Ubuntu:Pro:18.04:LTS
All versions, plus listed versions
5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2
None known
linux-azure
Ubuntu:18.04:LTS
All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
None known
linux-azure-4.15
Ubuntu:Pro:18.04:LTS
All versions, plus listed versions
4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102
Show 45 moreShow less
4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176
None known
linux-azure-5.3
Ubuntu:18.04:LTS
All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
None known
linux-azure-5.4
Ubuntu:Pro:18.04:LTS
All versions, plus listed versions
5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1
Show 45 moreShow less
5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1
None known
linux-azure-edge
Ubuntu:18.04:LTS
All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
None known
linux-gcp
Ubuntu:18.04:LTS
All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
None known
linux-gcp-4.15
Ubuntu:Pro:18.04:LTS
All versions, plus listed versions
4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92
Show 45 moreShow less
4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161
None known
linux-gcp-5.3
Ubuntu:18.04:LTS
All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
None known
linux-gcp-5.4
Ubuntu:Pro:18.04:LTS
All versions, plus listed versions
5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2
None known
linux-gke-4.15
Ubuntu:18.04:LTS
All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
None known
linux-gke-5.4
Ubuntu:18.04:LTS
All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
None known
linux-hwe
Ubuntu:18.04:LTS
All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
None known
linux-hwe-5.4
Ubuntu:Pro:18.04:LTS
All versions, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 45 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1
None known
linux-hwe-edge
Ubuntu:18.04:LTS
All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
None known
linux-ibm-5.4
Ubuntu:Pro:18.04:LTS
All versions, plus listed versions
5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1
Show 45 moreShow less
5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1
None known
linux-kvm
Ubuntu:Pro:18.04:LTS
All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8
Show 45 moreShow less
4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83
None known
linux-oem
Ubuntu:18.04:LTS
All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
None known
linux-oracle
Ubuntu:Pro:18.04:LTS
All versions, plus listed versions
4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13
Show 45 moreShow less
4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88
None known
linux-oracle-5.0
Ubuntu:18.04:LTS
All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
None known
linux-oracle-5.3
Ubuntu:18.04:LTS
All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
None known
linux-oracle-5.4
Ubuntu:Pro:18.04:LTS
All versions, plus listed versions
5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1
None known
linux-raspi-5.4
Ubuntu:Pro:18.04:LTS
All versions, plus listed versions
5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1
Show 45 moreShow less
5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1
None known
linux-aws-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
All versions, plus listed versions
4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24
Show 45 moreShow less
4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93
None known
linux-azure-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
All versions, plus listed versions
4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10
Show 45 moreShow less
4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80
None known
linux-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
All versions, plus listed versions
4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42
Show 45 moreShow less
4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110
None known
linux-gcp-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
All versions, plus listed versions
4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21
Show 45 moreShow less
4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.794.15.0-2075.804.15.0-2076.814.15.0-2077.83
None known
linux-aws-fips
Ubuntu:Pro:FIPS:18.04:LTS
All versions, plus listed versions
4.15.0-2000.4
None known
linux-azure-fips
Ubuntu:Pro:FIPS:18.04:LTS
All versions, plus listed versions
4.15.0-1002.2
None known
linux-fips
Ubuntu:Pro:FIPS:18.04:LTS
All versions, plus listed versions
4.15.0-1011.12
None known
linux-gcp-fips
Ubuntu:Pro:FIPS:18.04:LTS
All versions, plus listed versions
4.15.0-1001.1
None known
linux
Ubuntu:Pro:20.04:LTS
All versions, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 45 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110
None known
linux-aws
Ubuntu:Pro:20.04:LTS
All versions, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5
Show 45 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78
None known
dtb-aarch64
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-64kb
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-azure
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default-base
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1.160000.2.22
6.12.0-160000.38.1.160000.2.22
kernel-docs
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-kvmsmall
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-obs-build
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-obs-qa
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-rt
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-source
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-syms
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-zfcpdump
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1

History

History
RecordedChangedSources
affectedNVD, OSV
affected, aliases, aliases_more, referencesCVE List, EUVD, OSV
affectedOSV
affectedOSV
affected, aliases, aliases_more, referencesOSV
affectedOSV
affected, aliases, aliases_more, referencesOSV
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-53059 is a high vulnerability (CVSS 7.8) in Linux, published June 24, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.14%, the 3rd percentile. Fixed in linux-lts 6.1.175-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 1,769 package rows, 2,506 versions, 7,567 references and the rest of 12 source descriptions. The JSON record has them. Also not on the record: 4 aliases. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 53 source records.

MoveEnter Open