Every CVE Search/ Get API key

CVE-2026-53062

dm cache policy smq: fix missing locks in invalidating cache blocks

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

dm cache policy smq: fix missing locks in invalidating cache blocks

In passthrough mode, the policy invalidate_mapping operation is called simultaneously from multiple workers, thus it should be protected by a lock. Otherwise, we might end up with data races on the allocated blocks counter, or even use-after-free issues with internal data structures when doing concurrent writes.

Note that the existing FIXME in smq_invalidate_mapping() doesn't affect passthrough mode since migration tasks don't exist there, but would need attention if supporting fast device shrinking via suspend/resume without target reloading.

Reproduce steps:

  1. Create a cache device consisting of 1024 cache entries

dmsetup create cmeta --table "0 8192 linear /dev/sdc 0" dmsetup create cdata --table "0 131072 linear /dev/sdc 8192" dmsetup create corig --table "0 262144 linear /dev/sdc 262144" dd if=/dev/zero of=/dev/mapper/cmeta bs=4k count=1 oflag=direct dmsetup create cache --table "0 262144 cache /dev/mapper/cmeta
/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0"

  1. Populate the cache, and record the number of cached blocks

fio --name=populate --filename=/dev/mapper/cache --rw=randwrite --bs=4k
--size=64m --direct=1 nr_cached=$(dmsetup status cache | awk '{split($7, a, "/"); print a[1]}')

  1. Reload the cache into passthrough mode

dmsetup suspend cache dmsetup reload cache --table "0 262144 cache /dev/mapper/cmeta
/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 passthrough smq 0" dmsetup resume cache

  1. Write to the passthrough cache. By setting multiple jobs with I/O size equal to the cache block size, cache blocks are invalidated concurrently from different workers.

fio --filename=/dev/mapper/cache --name=test --rw=randwrite --bs=64k
--direct=1 --numjobs=2 --randrepeat=0 --size=64m

  1. Check if demoted matches cached block count. These numbers should match but may differ due to the data race.

nr_demoted=$(dmsetup status cache | awk '{print $12}') echo "$nr_cached, $nr_demoted"

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.10%Down 0.1 points since Jun 25, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.8

dm cache policy smq: fix missing locks in invalidating cache blocks

In the Linux kernel, the following vulnerability has been resolved:

dm cache policy smq: fix missing locks in invalidating cache blocks

In passthrough mode, the policy invalidate_mapping operation is called simultaneously from multiple workers, thus it should be protected by a lock. Otherwise, we might end up with data races on the allocated blocks counter, or even use-after-free issues with internal data structures when doing concurrent writes.

Note that the existing FIXME in smq_invalidate_mapping() doesn't affect passthrough mode since migration tasks don't exist there, but would need attention if supporting fast device shrinking via suspend/resume without target reloading.

Reproduce steps:

  1. Create a cache device consisting of 1024 cache entries

dmsetup create cmeta --table "0 8192 linear /dev/sdc 0" dmsetup create cdata --table "0 131072 linear /dev/sdc 8192" dmsetup create corig --table "0 262144 linear /dev/sdc 262144" dd if=/dev/zero of=/dev/mapper/cmeta bs=4k count=1 oflag=direct dmsetup create cache --table "0 262144 cache /dev/mapper/cmeta
/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0"

  1. Populate the cache, and record the number of cached blocks

fio --name=populate --filename=/dev/mapper/cache --rw=randwrite --bs=4k
--size=64m --direct=1 nr_cached=$(dmsetup status cache | awk '{split($7, a, "/"); print a[1]}')

  1. Reload the cache into passthrough mode

dmsetup suspend cache dmsetup reload cache --table "0 262144 cache /dev/mapper/cmeta
/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 passthrough smq 0" dmsetup resume cache

  1. Write to the passthrough cache. By setting multiple jobs with I/O size equal to the cache block size, cache blocks are invalidated concurrently from different workers.

fio --filename=/dev/mapper/cache --name=test --rw=randwrite --bs=64k
--direct=1 --numjobs=2 --randrepeat=0 --size=64m

  1. Check if demoted matches cached block count. These numbers should match but may differ due to the data race.

nr_demoted=$(dmsetup status cache | awk '{print $12}') echo "$nr_cached, $nr_demoted"

Record
CVE-2026-53062
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-362
Updated
2026-11-02
EUVDEUVD-2026-38930 7.8

In the Linux kernel, the following vulnerability has been resolved:

dm cache policy smq: fix missing locks in invalidating cache blocks

In passthrough mode, the policy invalidate_mapping operation is called simultaneously from multiple workers, thus it should be protected by a lock. Otherwise, we might end up with data races on the allocated blocks counter, or even use-after-free issues with internal data structures when doing concurrent writes.

Note that the existing FIXME in smq_invalidate_mapping() doesn't affect passthrough mode since migration tasks don't exist there, but would need attention if supporting fast device shrinking via suspend/resume without target reloading.

Reproduce steps:

  1. Create a cache device consisting of 1024 cache entries

dmsetup create cmeta --table "0 8192 linear /dev/sdc 0" dmsetup create cdata --table "0 131072 linear /dev/sdc 8192" dmsetup create corig --table "0 262144 linear /dev/sdc 262144" dd if=/dev/zero of=/dev/mapper/cmeta bs=4k count=1 oflag=direct dmsetup create cache --table "0 262144 cache /dev/mapper/cmeta
/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0"

  1. Populate the cache, and record the number of cached blocks

fio --name=populate --filename=/dev/mapper/cache --rw=randwrite --bs=4k
--size=64m --direct=1 nr_cached=$(dmsetup status cache | awk '{split($7, a, "/"); print a[1]}')

  1. Reload the cache into passthrough mode

dmsetup suspend cache dmsetup reload cache --table "0 262144 cache /dev/mapper/cmeta
/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 passthrough smq 0" dmsetup resume cache

  1. Write to the passthrough cache. By setting multiple jobs with I/O size equal to the cache block size, cache blocks are invalidated concurrently from different workers.

fio --filename=/dev/mapper/cache --name=test --rw=randwrite --bs=64k
--direct=1 --numjobs=2 --randrepeat=0 --size=64m

  1. Check if demoted matches cached block count. These numbers should match but may differ due to the data race.

nr_demoted=$(dmsetup status cache | awk '{print $12}') echo "$nr_cached, $nr_demoted"

Record
EUVD-2026-38930
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-4j2m-gfqm-629p 7.8

In the Linux kernel, the following vulnerability has been resolved: dm cache policy smq: fix...

In the Linux kernel, the following vulnerability has been resolved:

dm cache policy smq: fix missing locks in invalidating cache blocks

In passthrough mode, the policy invalidate_mapping operation is called simultaneously from multiple workers, thus it should be protected by a lock. Otherwise, we might end up with data races on the allocated blocks counter, or even use-after-free issues with internal data structures when doing concurrent writes.

Note that the existing FIXME in smq_invalidate_mapping() doesn't affect passthrough mode since migration tasks don't exist there, but would need attention if supporting fast device shrinking via suspend/resume without target reloading.

Reproduce steps:

  1. Create a cache device consisting of 1024 cache entries

dmsetup create cmeta --table "0 8192 linear /dev/sdc 0" dmsetup create cdata --table "0 131072 linear /dev/sdc 8192" dmsetup create corig --table "0 262144 linear /dev/sdc 262144" dd if=/dev/zero of=/dev/mapper/cmeta bs=4k count=1 oflag=direct dmsetup create cache --table "0 262144 cache /dev/mapper/cmeta
/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0"

  1. Populate the cache, and record the number of cached blocks

fio --name=populate --filename=/dev/mapper/cache --rw=randwrite --bs=4k
--size=64m --direct=1 nr_cached=$(dmsetup status cache | awk '{split($7, a, "/"); print a[1]}')

  1. Reload the cache into passthrough mode

dmsetup suspend cache dmsetup reload cache --table "0 262144 cache /dev/mapper/cmeta
/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 passthrough smq 0" dmsetup resume cache

  1. Write to the passthrough cache. By setting multiple jobs with I/O size equal to the cache block size, cache blocks are invalidated concurrently from different workers.

fio --filename=/dev/mapper/cache --name=test --rw=randwrite --bs=64k
--direct=1 --numjobs=2 --randrepeat=0 --size=64m

  1. Check if demoted matches cached block count. These numbers should match but may differ due to the data race.

nr_demoted=$(dmsetup status cache | awk '{print $12}') echo "$nr_cached, $nr_demoted"

Record
GHSA-4j2m-gfqm-629p
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-362, CWE-667
Updated
2026-11-02
NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

dm cache policy smq: fix missing locks in invalidating cache blocks

In passthrough mode, the policy invalidate_mapping operation is called simultaneously from multiple workers, thus it should be protected by a lock. Otherwise, we might end up with data races on the allocated blocks counter, or even use-after-free issues with internal data structures when doing concurrent writes.

Note that the existing FIXME in smq_invalidate_mapping() doesn't affect passthrough mode since migration tasks don't exist there, but would need attention if supporting fast device shrinking via suspend/resume without target reloading.

Reproduce steps:

  1. Create a cache device consisting of 1024 cache entries

dmsetup create cmeta --table "0 8192 linear /dev/sdc 0" dmsetup create cdata --table "0 131072 linear /dev/sdc 8192" dmsetup create corig --table "0 262144 linear /dev/sdc 262144" dd if=/dev/zero of=/dev/mapper/cmeta bs=4k count=1 oflag=direct dmsetup create cache --table "0 262144 cache /dev/mapper/cmeta
/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0"

  1. Populate the cache, and record the number of cached blocks

fio --name=populate --filename=/dev/mapper/cache --rw=randwrite --bs=4k
--size=64m --direct=1 nr_cached=$(dmsetup status cache | awk '{split($7, a, "/"); print a[1]}')

  1. Reload the cache into passthrough mode

dmsetup suspend cache dmsetup reload cache --table "0 262144 cache /dev/mapper/cmeta
/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 passthrough smq 0" dmsetup resume cache

  1. Write to the passthrough cache. By setting multiple jobs with I/O size equal to the cache block size, cache blocks are invalidated concurrently from different workers.

fio --filename=/dev/mapper/cache --name=test --rw=randwrite --bs=64k
--direct=1 --numjobs=2 --randrepeat=0 --size=64m

  1. Check if demoted matches cached block count. These numbers should match but may differ due to the data race.

nr_demoted=$(dmsetup status cache | awk '{print $12}') echo "$nr_cached, $nr_demoted"

Record
CVE-2026-53062
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-667, CWE-362
Updated
2026-11-02
OSVBELL-CVE-2026-53062 7.8
Record
BELL-CVE-2026-53062
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 7.8

dm cache policy smq: fix missing locks in invalidating cache blocks

In the Linux kernel, the following vulnerability has been resolved:

dm cache policy smq: fix missing locks in invalidating cache blocks

In passthrough mode, the policy invalidate_mapping operation is called simultaneously from multiple workers, thus it should be protected by a lock. Otherwise, we might end up with data races on the allocated blocks counter, or even use-after-free issues with internal data structures when doing concurrent writes.

Note that the existing FIXME in smq_invalidate_mapping() doesn't affect passthrough mode since migration tasks don't exist there, but would need attention if supporting fast device shrinking via suspend/resume without target reloading.

Reproduce steps:

  1. Create a cache device consisting of 1024 cache entries

dmsetup create cmeta --table "0 8192 linear /dev/sdc 0" dmsetup create cdata --table "0 131072 linear /dev/sdc 8192" dmsetup create corig --table "0 262144 linear /dev/sdc 262144" dd if=/dev/zero of=/dev/mapper/cmeta bs=4k count=1 oflag=direct dmsetup create cache --table "0 262144 cache /dev/mapper/cmeta
/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0"

  1. Populate the cache, and record the number of cached blocks

fio --name=populate --filename=/dev/mapper/cache --rw=randwrite --bs=4k
--size=64m --direct=1 nr_cached=$(dmsetup status cache | awk '{split($7, a, "/"); print a[1]}')

  1. Reload the cache into passthrough mode

dmsetup suspend cache dmsetup reload cache --table "0 262144 cache /dev/mapper/cmeta
/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 passthrough smq 0" dmsetup resume cache

  1. Write to the passthrough cache. By setting multiple jobs with I/O size equal to the cache block size, cache blocks are invalidated concurrently from different workers.

fio --filename=/dev/mapper/cache --name=test --rw=randwrite --bs=64k
--direct=1 --numjobs=2 --randrepeat=0 --size=64m

  1. Check if demoted matches cached block count. These numbers should match but may differ due to the data race.

nr_demoted=$(dmsetup status cache | awk '{print $12}') echo "$nr_cached, $nr_demoted"

Record
CVE-2026-53062
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 48 moreShow less
OSVDEBIAN-CVE-2026-53062 7.8

In the Linux kernel, the following vulnerability has been resolved: dm cache policy smq: fix missing locks in invalidating cache blocks In passthrough mode, the policy invalidate_mapping operation is called simultaneously from multiple workers, thus it should be protected by a lock. Otherwise, we might end up with data races on the allocated blocks counter, or even use-after-free issues with internal data structures when doing concurrent writes. Note that the existing FIXME in smq_invalidate_mapping() doesn't affect passthrough mode since migration tasks don't exist there, but would need attention if supporting fast device shrinking via suspend/resume without target reloading. Reproduce steps: 1. Create a cache device consisting of 1024 cache entries dmsetup create cmeta --table "0 8192 linear /dev/sdc 0" dmsetup create cdata --table "0 131072 linear /dev/sdc 8192" dmsetup create corig --table "0 262144 linear /dev/sdc 262144" dd if=/dev/zero of=/dev/mapper/cmeta bs=4k count=1 oflag=direct dmsetup create cache --table "0 262144 cache /dev/mapper/cmeta \ /dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0" 2. Populate the cache, and record the number of cached blocks fio --name=populate --filename=/dev/mapper/cache --rw=randwrite --bs=4k \ --size=64m --direct=1 nr_cached=$(dmsetup status cache | awk '{split($7, a, "/"); print a[1]}') 3. Reload the cache into passthrough mode dmsetup suspend cache dmsetup reload cache --table "0 262144 cache /dev/mapper/cmeta \ /dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 passthrough smq 0" dmsetup resume cache 4. Write to the passthrough cache. By setting multiple jobs with I/O size equal to the cache block size, cache blocks are invalidated concurrently from different workers. fio --filename=/dev/mapper/cache --name=test --rw=randwrite --bs=64k \ --direct=1 --numjobs=2 --randrepeat=0 --size=64m 5. Check if demoted matches cached block count. These numbers should match but may differ due to the data race. nr_demoted=$(dmsetup status cache | awk '{print $12}') echo "$nr_cached, $nr_demoted"

Record
DEBIAN-CVE-2026-53062
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:70402 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:70402
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:70403 7.8

Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Record
RHSA-2026:70403
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:70459 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:70459
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:70498 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:70498
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:77216 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:77216
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:84793 7.1

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:84793
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:70402 7.8

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CVE-2025-39964)

  • kernel: Linux kernel Bluetooth: Denial of Service via race condition in hidp_session_thread (CVE-2023-54120)

  • kernel: Bluetooth: L2CAP: Fix potential user-after-free (CVE-2023-54214)

  • kernel: Bluetooth: btusb: revert use of devm_kzalloc in btusb (CVE-2025-71082)

  • kernel: Bluetooth: SMP: force responder MITM requirements before building the pairing response (CVE-2026-43334)

  • kernel: iommu/vt-d: Clear Present bit before tearing down PASID entry (CVE-2026-45894)

  • kernel: RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (CVE-2026-46043)

  • kernel: RDMA/rxe: Reject unknown opcodes before ICRC processing (CVE-2026-46133)

  • kernel: Bluetooth: serialize accept_q access (CVE-2026-52918)

  • kernel: dm cache policy smq: fix missing locks in invalidating cache blocks (CVE-2026-53062)

  • kernel: iommu/amd: Fix clone_alias() to use the original device's devid (CVE-2026-53053)

  • kernel: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CVE-2026-53256)

  • kernel: Bluetooth: RFCOMM: validate skb length in MCC handlers (CVE-2026-53254)

  • kernel: keys: Pin request_key_auth payload in instantiate paths (CVE-2026-63823)

  • kernel: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CVE-2026-63975)

  • kernel: Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CVE-2026-63947)

  • kernel: nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CVE-2026-64534)

  • kernel: RDMA/rxe: Fix a use-after-free problem in rxe_mmap (CVE-2026-64582)

  • kernel: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CVE-2026-68293)

  • kernel: Linux kernel Bluetooth RFCOMM: Denial of Service via use-after-free in set_termios (CVE-2026-68188)

Bug Fix(es) and Enhancement(s):

  • Intel IOMMU: possible circular locking dependency (JIRA:Rocky Linux-243217)

  • xfs: repeated xfs_trans_cancel called from xfs_iomap_write_direct (JIRA:Rocky Linux-251578)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:70402
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:70403 7.8

Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CVE-2025-39964)

  • kernel: Linux kernel Bluetooth: Denial of Service via race condition in hidp_session_thread (CVE-2023-54120)

  • kernel: Bluetooth: L2CAP: Fix potential user-after-free (CVE-2023-54214)

  • kernel: Bluetooth: btusb: revert use of devm_kzalloc in btusb (CVE-2025-71082)

  • kernel: Bluetooth: SMP: force responder MITM requirements before building the pairing response (CVE-2026-43334)

  • kernel: iommu/vt-d: Clear Present bit before tearing down PASID entry (CVE-2026-45894)

  • kernel: RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (CVE-2026-46043)

  • kernel: RDMA/rxe: Reject unknown opcodes before ICRC processing (CVE-2026-46133)

  • kernel: Bluetooth: serialize accept_q access (CVE-2026-52918)

  • kernel: dm cache policy smq: fix missing locks in invalidating cache blocks (CVE-2026-53062)

  • kernel: iommu/amd: Fix clone_alias() to use the original device's devid (CVE-2026-53053)

  • kernel: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CVE-2026-53256)

  • kernel: Bluetooth: RFCOMM: validate skb length in MCC handlers (CVE-2026-53254)

  • kernel: keys: Pin request_key_auth payload in instantiate paths (CVE-2026-63823)

  • kernel: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CVE-2026-63975)

  • kernel: Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CVE-2026-63947)

  • kernel: nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CVE-2026-64534)

  • kernel: RDMA/rxe: Fix a use-after-free problem in rxe_mmap (CVE-2026-64582)

  • kernel: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CVE-2026-68293)

  • kernel: Linux kernel Bluetooth RFCOMM: Denial of Service via use-after-free in set_termios (CVE-2026-68188)

Bug Fix(es) and Enhancement(s):

  • Intel IOMMU: possible circular locking dependency (JIRA:Rocky Linux-243217)

  • xfs: repeated xfs_trans_cancel called from xfs_iomap_write_direct (JIRA:Rocky Linux-251578)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:70403
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:70459 7.8

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CVE-2025-39964)

  • kernel: iommu/vt-d: Clear Present bit before tearing down PASID entry (CVE-2026-45894)

  • kernel: crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CVE-2026-45959)

  • kernel: dm cache policy smq: fix missing locks in invalidating cache blocks (CVE-2026-53062)

  • kernel: keys: Pin request_key_auth payload in instantiate paths (CVE-2026-63823)

  • kernel: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CVE-2026-68293)

  • kernel: Linux kernel: libceph null pointer dereference leads to denial of service (CVE-2026-68157)

  • kernel: Linux kernel Bluetooth RFCOMM: Denial of Service via use-after-free in set_termios (CVE-2026-68188)

  • kernel: libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CVE-2026-68156)

  • kernel: Linux kernel (libceph): Denial of Service due to malformed monitor maps (CVE-2026-68155)

  • kernel: Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CVE-2026-68391)

  • kernel: net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (CVE-2026-72072)

  • kernel: mm/hugetlb: fix list corruption in allocate_file_region_entries() (CVE-2026-74518)

Bug Fix(es) and Enhancement(s):

  • [Intel 9.8 FEAT] ice: Driver Update [rhel-9.8.z] (JIRA:Rocky Linux-213003)

  • Rocky Linux 9.8: Multiuser Kerberized DFS shares fail to mount with UID mount option [rhel-9.8.z] (JIRA:Rocky Linux-254108)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:70459
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:70498 8.8

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CVE-2025-39964)

  • kernel: iommu/vt-d: Clear Present bit before tearing down PASID entry (CVE-2026-45894)

  • kernel: crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CVE-2026-45959)

  • kernel: dm cache policy smq: fix missing locks in invalidating cache blocks (CVE-2026-53062)

  • kernel: keys: Pin request_key_auth payload in instantiate paths (CVE-2026-63823)

  • kernel: nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CVE-2026-64534)

  • kernel: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CVE-2026-68293)

  • kernel: Linux kernel: libceph stack out-of-bounds write via crafted OSDMap (CVE-2026-68159)

  • kernel: Linux kernel Bluetooth RFCOMM: Denial of Service via use-after-free in set_termios (CVE-2026-68188)

  • kernel: Linux kernel (libceph): Denial of Service due to malformed monitor maps (CVE-2026-68155)

  • kernel: Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CVE-2026-68391)

  • kernel: mm/hugetlb: fix list corruption in allocate_file_region_entries() (CVE-2026-74518)

Bug Fix(es) and Enhancement(s):

  • Update kernel to use new certificate paths [rhel-10.2.z] (JIRA:Rocky Linux-169478)

  • RHIVOS - [backport] S32G Driver Enablement - PWM (JIRA:Rocky Linux-255517)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:70498
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-53062 7.8

In the Linux kernel, the following vulnerability has been resolved: dm cache policy smq: fix missing locks in invalidating cache blocks In passthrough mode, the policy invalidate_mapping operation is called simultaneously from multiple workers, thus it should be protected by a lock. Otherwise, we might end up with data races on the allocated blocks counter, or even use-after-free issues with internal data structures when doing concurrent writes. Note that the existing FIXME in smq_invalidate_mapping() doesn't affect passthrough mode since migration tasks don't exist there, but would need attention if supporting fast device shrinking via suspend/resume without target reloading. Reproduce steps: 1. Create a cache device consisting of 1024 cache entries dmsetup create cmeta --table "0 8192 linear /dev/sdc 0" dmsetup create cdata --table "0 131072 linear /dev/sdc 8192" dmsetup create corig --table "0 262144 linear /dev/sdc 262144" dd if=/dev/zero of=/dev/mapper/cmeta bs=4k count=1 oflag=direct dmsetup create cache --table "0 262144 cache /dev/mapper/cmeta \ /dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0" 2. Populate the cache, and record the number of cached blocks fio --name=populate --filename=/dev/mapper/cache --rw=randwrite --bs=4k \ --size=64m --direct=1 nr_cached=$(dmsetup status cache | awk '{split($7, a, "/"); print a[1]}') 3. Reload the cache into passthrough mode dmsetup suspend cache dmsetup reload cache --table "0 262144 cache /dev/mapper/cmeta \ /dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 passthrough smq 0" dmsetup resume cache 4. Write to the passthrough cache. By setting multiple jobs with I/O size equal to the cache block size, cache blocks are invalidated concurrently from different workers. fio --filename=/dev/mapper/cache --name=test --rw=randwrite --bs=64k \ --direct=1 --numjobs=2 --randrepeat=0 --size=64m 5. Check if demoted matches cached block count. These numbers should match but may differ due to the data race. nr_demoted=$(dmsetup status cache | awk '{print $12}') echo "$nr_cached, $nr_demoted"

Record
UBUNTU-CVE-2026-53062
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-10
OSVALSA-2026:70402 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CVE-2025-39964)
  • kernel: Linux kernel Bluetooth: Denial of Service via race condition in hidp_session_thread (CVE-2023-54120)
  • kernel: Bluetooth: L2CAP: Fix potential user-after-free (CVE-2023-54214)
  • kernel: Bluetooth: btusb: revert use of devm_kzalloc in btusb (CVE-2025-71082)
  • kernel: Bluetooth: SMP: force responder MITM requirements before building the pairing response (CVE-2026-43334)
  • kernel: iommu/vt-d: Clear Present bit before tearing down PASID entry (CVE-2026-45894)
  • kernel: RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (CVE-2026-46043)
  • kernel: RDMA/rxe: Reject unknown opcodes before ICRC processing (CVE-2026-46133)
  • kernel: Bluetooth: serialize accept_q access (CVE-2026-52918)
  • kernel: dm cache policy smq: fix missing locks in invalidating cache blocks (CVE-2026-53062)
  • kernel: iommu/amd: Fix clone_alias() to use the original device's devid (CVE-2026-53053)
  • kernel: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CVE-2026-53256)
  • kernel: Bluetooth: RFCOMM: validate skb length in MCC handlers (CVE-2026-53254)
  • kernel: keys: Pin request_key_auth payload in instantiate paths (CVE-2026-63823)
  • kernel: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CVE-2026-63975)
  • kernel: Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CVE-2026-63947)
  • kernel: nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CVE-2026-64534)
  • kernel: RDMA/rxe: Fix a use-after-free problem in rxe_mmap (CVE-2026-64582)
  • kernel: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CVE-2026-68293)
  • kernel: Linux kernel Bluetooth RFCOMM: Denial of Service via use-after-free in set_termios (CVE-2026-68188)

Bug Fix(es) and Enhancement(s):

  • Intel IOMMU: possible circular locking dependency (JIRA:AlmaLinux-243217)
  • xfs: repeated xfs_trans_cancel called from xfs_iomap_write_direct (JIRA:AlmaLinux-251578)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:70402
Updated
2026-11-02
OSVALSA-2026:70403 No score

Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CVE-2025-39964)
  • kernel: Linux kernel Bluetooth: Denial of Service via race condition in hidp_session_thread (CVE-2023-54120)
  • kernel: Bluetooth: L2CAP: Fix potential user-after-free (CVE-2023-54214)
  • kernel: Bluetooth: btusb: revert use of devm_kzalloc in btusb (CVE-2025-71082)
  • kernel: Bluetooth: SMP: force responder MITM requirements before building the pairing response (CVE-2026-43334)
  • kernel: iommu/vt-d: Clear Present bit before tearing down PASID entry (CVE-2026-45894)
  • kernel: RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (CVE-2026-46043)
  • kernel: RDMA/rxe: Reject unknown opcodes before ICRC processing (CVE-2026-46133)
  • kernel: Bluetooth: serialize accept_q access (CVE-2026-52918)
  • kernel: dm cache policy smq: fix missing locks in invalidating cache blocks (CVE-2026-53062)
  • kernel: iommu/amd: Fix clone_alias() to use the original device's devid (CVE-2026-53053)
  • kernel: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CVE-2026-53256)
  • kernel: Bluetooth: RFCOMM: validate skb length in MCC handlers (CVE-2026-53254)
  • kernel: keys: Pin request_key_auth payload in instantiate paths (CVE-2026-63823)
  • kernel: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CVE-2026-63975)
  • kernel: Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CVE-2026-63947)
  • kernel: nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CVE-2026-64534)
  • kernel: RDMA/rxe: Fix a use-after-free problem in rxe_mmap (CVE-2026-64582)
  • kernel: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CVE-2026-68293)
  • kernel: Linux kernel Bluetooth RFCOMM: Denial of Service via use-after-free in set_termios (CVE-2026-68188)

Bug Fix(es) and Enhancement(s):

  • Intel IOMMU: possible circular locking dependency (JIRA:AlmaLinux-243217)
  • xfs: repeated xfs_trans_cancel called from xfs_iomap_write_direct (JIRA:AlmaLinux-251578)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:70403
Updated
2026-11-02
OSVALSA-2026:70459 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CVE-2025-39964)
  • kernel: iommu/vt-d: Clear Present bit before tearing down PASID entry (CVE-2026-45894)
  • kernel: crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CVE-2026-45959)
  • kernel: dm cache policy smq: fix missing locks in invalidating cache blocks (CVE-2026-53062)
  • kernel: keys: Pin request_key_auth payload in instantiate paths (CVE-2026-63823)
  • kernel: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CVE-2026-68293)
  • kernel: Linux kernel: libceph null pointer dereference leads to denial of service (CVE-2026-68157)
  • kernel: Linux kernel Bluetooth RFCOMM: Denial of Service via use-after-free in set_termios (CVE-2026-68188)
  • kernel: libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CVE-2026-68156)
  • kernel: Linux kernel (libceph): Denial of Service due to malformed monitor maps (CVE-2026-68155)
  • kernel: Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CVE-2026-68391)
  • kernel: net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (CVE-2026-72072)
  • kernel: mm/hugetlb: fix list corruption in allocate_file_region_entries() (CVE-2026-74518)

Bug Fix(es) and Enhancement(s):

  • [Intel 9.8 FEAT] ice: Driver Update [almalinux-9.8.z] (JIRA:AlmaLinux-213003)
  • AlmaLinux 9.8: Multiuser Kerberized DFS shares fail to mount with UID mount option [almalinux-9.8.z] (JIRA:AlmaLinux-254108)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:70459
Updated
2026-11-02
OSVALSA-2026:70498 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CVE-2025-39964)
  • kernel: iommu/vt-d: Clear Present bit before tearing down PASID entry (CVE-2026-45894)
  • kernel: crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CVE-2026-45959)
  • kernel: dm cache policy smq: fix missing locks in invalidating cache blocks (CVE-2026-53062)
  • kernel: keys: Pin request_key_auth payload in instantiate paths (CVE-2026-63823)
  • kernel: nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CVE-2026-64534)
  • kernel: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CVE-2026-68293)
  • kernel: Linux kernel: libceph stack out-of-bounds write via crafted OSDMap (CVE-2026-68159)
  • kernel: Linux kernel Bluetooth RFCOMM: Denial of Service via use-after-free in set_termios (CVE-2026-68188)
  • kernel: Linux kernel (libceph): Denial of Service due to malformed monitor maps (CVE-2026-68155)
  • kernel: Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CVE-2026-68391)
  • kernel: mm/hugetlb: fix list corruption in allocate_file_region_entries() (CVE-2026-74518)

Bug Fix(es) and Enhancement(s):

  • Update kernel to use new certificate paths [almalinux-10.2.z] (JIRA:AlmaLinux-169478)
  • RHIVOS - [backport] S32G Driver Enablement - PWM (JIRA:AlmaLinux-255517)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:70498
Updated
2026-11-02
OSVCLSA-2026-1788170774 No score

kernel: Fix of 132 CVEs

  • sctp: fix potential deadlock on &net->sctp.addr_wq_lock {CVE-2024-0639}
  • sctp: delay auto_asconf init until binding the first addr {CVE-2021-23133}
  • netfilter: nf_log: validate MAC header was set before dumping it {CVE-2026-52942}
  • netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check {CVE-2026-52998}
  • drm/nouveau: fix u32 overflow in pushbuf reloc bounds check {CVE-2026-46006}
  • btrfs: fix use-after-free when attempting to join an aborted transaction {CVE-2025-21753}
  • btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
  • team: fix header_ops type confusion with non-Ethernet ports {CVE-2026-31502}
  • xfrm: Fix dev use-after-free in xfrm async resumption {CVE-2026-72463}
  • xfrm: hold dev ref until after transport_finish NF_HOOK {CVE-2026-31663}
  • xen/privcmd: restrict usage in unprivileged domU {CVE-2026-31788}
  • xen/privcmd: add IOCTL_PRIVCMD_RESTRICT {CVE-2026-31788}
  • Bluetooth: L2CAP: make l2cap_connect() return void {CVE-2024-36013}
  • btrfs: fix incorrect splitting in btrfs_drop_extent_map_range {CVE-2023-54121}
  • netfilter: nf_conntrack: defer invalid log until after unlock {CVE-2026-74624}
  • NFS: Pin the 'struct nfs_server' during a FREE_STATEID call {CVE-2026-74730}
  • dm cache: fix flushing uninitialized delayed_work on cache_ctr error {CVE-2024-50280}
  • audit: fix recursive locking deadlock in audit_dupe_exe() {CVE-2026-68096}
  • RDMA/rxe: Reject unknown opcodes before ICRC processing {CVE-2026-46133}
  • Bluetooth: bnep: reject short frames before parsing {CVE-2026-53253}
  • net: pull headers in qdisc_pkt_len_segs_init() {CVE-2026-53091}
  • inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266}
  • Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
  • sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed {CVE-2022-50103}
  • btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
  • fanotify: fix false positive on permission events {CVE-2026-46150}
  • HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103}
  • ext4: fix e4b bitmap inconsistency reports {CVE-2026-45942}
  • Bluetooth: serialize accept_q access {CVE-2026-52918}
  • ALSA: usb-audio: Add sanity check for OOB writes at silencing {CVE-2026-43279}
  • RDMA/bnxt_re: zero shared page before exposing to userspace {CVE-2026-74584}
  • sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
  • ipvs: clear IPv4 options after rebasing tunnel ICMP errors {CVE-2026-74669}
  • wifi: cfg80211: Partial revert "wifi: cfg80211: Fix use after free for wext" {CVE-2023-53153}
  • net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
  • nfs: use nfsi->rwsem to protect traversal of the file lock list {CVE-2026-72472}
  • Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}
  • drm/amdgpu/vce: fix integer overflow in image size {CVE-2026-68108}
  • ALSA: seq: close a re-opened queue timer in the destructor {CVE-2026-68202}
  • ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() {CVE-2026-74499}
  • USB: serial: io_edgeport: cap received transmit credits {CVE-2026-68365}
  • net: slip: serialize receive against buffer reallocation {CVE-2026-68143}
  • wifi: cfg80211: cancel sched scan results work on unregister {CVE-2026-68414}
  • sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}
  • sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}
  • pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}
  • ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() {CVE-2026-68160}
  • libceph: refresh auth->authorizer_buf{,_len} after authorizer update {CVE-2026-68156}
  • libceph: remove debugfs files before client teardown {CVE-2026-68153}
  • libceph: Fix multiplication overflow in decode_new_up_state_weight() {CVE-2026-68158}
  • libceph: reject zero bucket types in crush_decode {CVE-2026-68154}
  • libceph: bound…
Record
CLSA-2026-1788170774
Updated
2026-11-02
OSVCLSA-2026-1788257079 No score

kernel: Fix of 131 CVEs

  • sctp: fix potential deadlock on &net->sctp.addr_wq_lock {CVE-2024-0639}
  • sctp: delay auto_asconf init until binding the first addr {CVE-2021-23133}
  • netfilter: nf_log: validate MAC header was set before dumping it {CVE-2026-52942}
  • netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check {CVE-2026-52998}
  • drm/nouveau: fix u32 overflow in pushbuf reloc bounds check {CVE-2026-46006}
  • btrfs: fix use-after-free when attempting to join an aborted transaction {CVE-2025-21753}
  • btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
  • team: fix header_ops type confusion with non-Ethernet ports {CVE-2026-31502}
  • xfrm: Fix dev use-after-free in xfrm async resumption {CVE-2026-72463}
  • xfrm: hold dev ref until after transport_finish NF_HOOK {CVE-2026-31663}
  • xen/privcmd: restrict usage in unprivileged domU {CVE-2026-31788}
  • xen/privcmd: add IOCTL_PRIVCMD_RESTRICT {CVE-2026-31788}
  • Bluetooth: L2CAP: make l2cap_connect() return void {CVE-2024-36013}
  • btrfs: fix incorrect splitting in btrfs_drop_extent_map_range {CVE-2023-54121}
  • netfilter: nf_conntrack: defer invalid log until after unlock {CVE-2026-74624}
  • NFS: Pin the 'struct nfs_server' during a FREE_STATEID call {CVE-2026-74730}
  • dm cache: fix flushing uninitialized delayed_work on cache_ctr error {CVE-2024-50280}
  • audit: fix recursive locking deadlock in audit_dupe_exe() {CVE-2026-68096}
  • RDMA/rxe: Reject unknown opcodes before ICRC processing {CVE-2026-46133}
  • Bluetooth: bnep: reject short frames before parsing {CVE-2026-53253}
  • net: pull headers in qdisc_pkt_len_segs_init() {CVE-2026-53091}
  • inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266}
  • Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
  • sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed {CVE-2022-50103}
  • btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
  • fanotify: fix false positive on permission events {CVE-2026-46150}
  • HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103}
  • ext4: fix e4b bitmap inconsistency reports {CVE-2026-45942}
  • Bluetooth: serialize accept_q access {CVE-2026-52918}
  • ALSA: usb-audio: Add sanity check for OOB writes at silencing {CVE-2026-43279}
  • RDMA/bnxt_re: zero shared page before exposing to userspace {CVE-2026-74584}
  • sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
  • ipvs: clear IPv4 options after rebasing tunnel ICMP errors {CVE-2026-74669}
  • wifi: cfg80211: Partial revert "wifi: cfg80211: Fix use after free for wext" {CVE-2023-53153}
  • net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
  • nfs: use nfsi->rwsem to protect traversal of the file lock list {CVE-2026-72472}
  • Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}
  • drm/amdgpu/vce: fix integer overflow in image size {CVE-2026-68108}
  • ALSA: seq: close a re-opened queue timer in the destructor {CVE-2026-68202}
  • ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() {CVE-2026-74499}
  • USB: serial: io_edgeport: cap received transmit credits {CVE-2026-68365}
  • net: slip: serialize receive against buffer reallocation {CVE-2026-68143}
  • wifi: cfg80211: cancel sched scan results work on unregister {CVE-2026-68414}
  • sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}
  • sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}
  • pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}
  • ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() {CVE-2026-68160}
  • libceph: refresh auth->authorizer_buf{,_len} after authorizer update {CVE-2026-68156}
  • libceph: remove debugfs files before client teardown {CVE-2026-68153}
  • libceph: Fix multiplication overflow in decode_new_up_state_weight() {CVE-2026-68158}
  • libceph: reject zero bucket types in crush_decode {CVE-2026-68154}
  • libceph: bound…
Record
CLSA-2026-1788257079
Updated
2026-11-02
OSVCLSA-2026-1788259625 No score

kernel: Fix of 132 CVEs

  • sctp: fix potential deadlock on &net->sctp.addr_wq_lock {CVE-2024-0639}
  • sctp: delay auto_asconf init until binding the first addr {CVE-2021-23133}
  • netfilter: nf_log: validate MAC header was set before dumping it {CVE-2026-52942}
  • netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check {CVE-2026-52998}
  • drm/nouveau: fix u32 overflow in pushbuf reloc bounds check {CVE-2026-46006}
  • btrfs: fix use-after-free when attempting to join an aborted transaction {CVE-2025-21753}
  • btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
  • team: fix header_ops type confusion with non-Ethernet ports {CVE-2026-31502}
  • xfrm: Fix dev use-after-free in xfrm async resumption {CVE-2026-72463}
  • xfrm: hold dev ref until after transport_finish NF_HOOK {CVE-2026-31663}
  • xen/privcmd: restrict usage in unprivileged domU {CVE-2026-31788}
  • xen/privcmd: add IOCTL_PRIVCMD_RESTRICT {CVE-2026-31788}
  • Bluetooth: L2CAP: make l2cap_connect() return void {CVE-2024-36013}
  • btrfs: fix incorrect splitting in btrfs_drop_extent_map_range {CVE-2023-54121}
  • netfilter: nf_conntrack: defer invalid log until after unlock {CVE-2026-74624}
  • NFS: Pin the 'struct nfs_server' during a FREE_STATEID call {CVE-2026-74730}
  • dm cache: fix flushing uninitialized delayed_work on cache_ctr error {CVE-2024-50280}
  • audit: fix recursive locking deadlock in audit_dupe_exe() {CVE-2026-68096}
  • RDMA/rxe: Reject unknown opcodes before ICRC processing {CVE-2026-46133}
  • Bluetooth: bnep: reject short frames before parsing {CVE-2026-53253}
  • net: pull headers in qdisc_pkt_len_segs_init() {CVE-2026-53091}
  • inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266}
  • Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
  • sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed {CVE-2022-50103}
  • btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
  • fanotify: fix false positive on permission events {CVE-2026-46150}
  • HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103}
  • ext4: fix e4b bitmap inconsistency reports {CVE-2026-45942}
  • Bluetooth: serialize accept_q access {CVE-2026-52918}
  • ALSA: usb-audio: Add sanity check for OOB writes at silencing {CVE-2026-43279}
  • RDMA/bnxt_re: zero shared page before exposing to userspace {CVE-2026-74584}
  • sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
  • ipvs: clear IPv4 options after rebasing tunnel ICMP errors {CVE-2026-74669}
  • wifi: cfg80211: Partial revert "wifi: cfg80211: Fix use after free for wext" {CVE-2023-53153}
  • net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
  • nfs: use nfsi->rwsem to protect traversal of the file lock list {CVE-2026-72472}
  • Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}
  • drm/amdgpu/vce: fix integer overflow in image size {CVE-2026-68108}
  • ALSA: seq: close a re-opened queue timer in the destructor {CVE-2026-68202}
  • ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() {CVE-2026-74499}
  • USB: serial: io_edgeport: cap received transmit credits {CVE-2026-68365}
  • net: slip: serialize receive against buffer reallocation {CVE-2026-68143}
  • wifi: cfg80211: cancel sched scan results work on unregister {CVE-2026-68414}
  • sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}
  • sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}
  • pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}
  • ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() {CVE-2026-68160}
  • libceph: refresh auth->authorizer_buf{,_len} after authorizer update {CVE-2026-68156}
  • libceph: remove debugfs files before client teardown {CVE-2026-68153}
  • libceph: Fix multiplication overflow in decode_new_up_state_weight() {CVE-2026-68158}
  • libceph: reject zero bucket types in crush_decode {CVE-2026-68154}
  • libceph: bound…
Record
CLSA-2026-1788259625
Updated
2026-11-02
OSVCLSA-2026-1791132071 No score

Fix of 159 CVEs

  • CVE-2026-64375
    • proc: protect ptrace_may_access() with exec_update_lock (FD links) {CVE-2026-64375}
    • exec: Add exec_update_mutex to replace cred_guard_mutex {CVE-2026-64375}
  • CVE-2026-53266
    • netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
  • CVE-2025-39964
    • crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
  • CVE-2026-90413
    • IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413}
  • CVE-2026-53062
    • dm cache policy smq: test e->allocated under the policy lock {CVE-2026-53062}
    • dm cache policy smq: fix missing locks in invalidating cache blocks {CVE-2026-53062}
  • CVE-2026-64237
    • Input: elan_i2c - release the firmware on the short-file path {CVE-2026-64237}
    • Input: elan_i2c - validate firmware size before use {CVE-2026-64237}
  • CVE-2026-64109
    • af_unix: fix the UAF read of tail->len without losing the wakeup condition {CVE-2026-64109}
    • af_unix: Fix UAF read of tail->len in unix_stream_data_wait() {CVE-2026-64109}
  • CVE-2025-38512
    • wifi: prevent A-MSDU attacks in mesh networks {CVE-2025-38512}
  • CVE-2025-38117
    • Bluetooth: MGMT: Protect mgmt_pending list with its own lock {CVE-2025-38117}
  • CVE-2026-22980
    • nfsd: provide locking for v4_end_grace {CVE-2026-22980}
  • CVE-2023-53254
    • cacheinfo: Fix shared_cpu_map to handle shared caches at different levels {CVE-2023-53254}
  • CVE-2025-37885
    • KVM: x86: Reset IRTE to host control if new route isn't postable {CVE-2025-37885}
  • CVE-2026-23191
    • ALSA: aloop: Fix racy access at PCM trigger {CVE-2026-23191}
  • CVE-2025-37879
    • 9p/net: fix improper handling of bogus negative read/write replies {CVE-2025-37879}
  • CVE-2023-53039
    • HID: intel-ish-hid: ipc: Fix potential use-after-free in work function {CVE-2023-53039}
  • CVE-2019-12456
    • scsi: mpt3sas_ctl: fix double-fetch bug in _ctl_ioctl_main() {CVE-2019-12456}
  • CVE-2024-46812
    • drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration {CVE-2024-46812}
  • CVE-2026-31761
    • iio: gyro: mpu3050: Move iio_device_register() to correct location {CVE-2026-31761}
  • CVE-2026-53120
    • PCI: RCU-protect driver_override against pci_match_device() UAF {CVE-2026-53120}
  • CVE-2026-31598
    • ocfs2: fix possible deadlock between unlink and dio_end_io_write {CVE-2026-31598}
  • CVE-2026-43075
    • ocfs2: fix out-of-bounds write in ocfs2_write_end_inline {CVE-2026-43075}
  • CVE-2024-41013
    • xfs: don't walk off the end of a directory data block {CVE-2024-41013}
  • CVE-2026-31527
    • driver core: platform: RCU-protect driver_override against match() UAF {CVE-2026-31527}
  • CVE-2022-48744
    • net/mlx5e: Avoid field-overflowing memcpy() {CVE-2022-48744}
  • CVE-2023-53510
    • scsi: ufs: core: Fix handling of lrbp->cmd {CVE-2023-53510}
  • CVE-2026-23268
    • apparmor: fix unprivileged local user can do privileged policy management {CVE-2026-23268}
  • CVE-2026-23269
    • apparmor: validate DFA start states are in bounds in unpack_pdb {CVE-2026-23269}
  • CVE-2025-21812
    • ax25: rcu protect dev->ax25_ptr {CVE-2025-21812}
  • CVE-2026-46266
    • inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266}
  • CVE-2026-53228
    • ipv6: sit: reload inner IPv6 header after GSO offloads {CVE-2026-53228}
  • CVE-2026-53355
    • net: rds: clear i_sends on setup unwind {CVE-2026-53355}
  • CVE-2026-45970
    • bonding: alb: fix UAF in rlb_arp_recv during bond up/down {CVE-2026-45970}
  • CVE-2023-52922
    • can: bcm: Fix UAF in bcm_proc_show() {CVE-2023-52922}
  • CVE-2026-52920
    • netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920} *…
Record
CLSA-2026-1791132071
Updated
2026-11-02
OSVCLSA-2026-1791132078 No score

Fix of 160 CVEs

  • CVE-2026-64375
    • proc: protect ptrace_may_access() with exec_update_lock (FD links) {CVE-2026-64375}
    • exec: Add exec_update_mutex to replace cred_guard_mutex {CVE-2026-64375}
  • CVE-2026-53266
    • netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
  • CVE-2025-39964
    • crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
  • CVE-2026-90413
    • IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413}
  • CVE-2026-53062
    • dm cache policy smq: test e->allocated under the policy lock {CVE-2026-53062}
    • dm cache policy smq: fix missing locks in invalidating cache blocks {CVE-2026-53062}
  • CVE-2026-64237
    • Input: elan_i2c - release the firmware on the short-file path {CVE-2026-64237}
    • Input: elan_i2c - validate firmware size before use {CVE-2026-64237}
  • CVE-2026-64109
    • af_unix: fix the UAF read of tail->len without losing the wakeup condition {CVE-2026-64109}
    • af_unix: Fix UAF read of tail->len in unix_stream_data_wait() {CVE-2026-64109}
  • CVE-2025-38512
    • wifi: prevent A-MSDU attacks in mesh networks {CVE-2025-38512}
  • CVE-2025-38117
    • Bluetooth: MGMT: Protect mgmt_pending list with its own lock {CVE-2025-38117}
  • CVE-2026-22980
    • nfsd: provide locking for v4_end_grace {CVE-2026-22980}
  • CVE-2023-53254
    • cacheinfo: Fix shared_cpu_map to handle shared caches at different levels {CVE-2023-53254}
  • CVE-2025-37885
    • KVM: x86: Reset IRTE to host control if new route isn't postable {CVE-2025-37885}
  • CVE-2026-23191
    • ALSA: aloop: Fix racy access at PCM trigger {CVE-2026-23191}
  • CVE-2025-37879
    • 9p/net: fix improper handling of bogus negative read/write replies {CVE-2025-37879}
  • CVE-2023-53039
    • HID: intel-ish-hid: ipc: Fix potential use-after-free in work function {CVE-2023-53039}
  • CVE-2019-12456
    • scsi: mpt3sas_ctl: fix double-fetch bug in _ctl_ioctl_main() {CVE-2019-12456}
  • CVE-2024-46812
    • drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration {CVE-2024-46812}
  • CVE-2026-31761
    • iio: gyro: mpu3050: Move iio_device_register() to correct location {CVE-2026-31761}
  • CVE-2026-53120
    • PCI: RCU-protect driver_override against pci_match_device() UAF {CVE-2026-53120}
  • CVE-2026-31598
    • ocfs2: fix possible deadlock between unlink and dio_end_io_write {CVE-2026-31598}
  • CVE-2026-43075
    • ocfs2: fix out-of-bounds write in ocfs2_write_end_inline {CVE-2026-43075}
  • CVE-2024-41013
    • xfs: don't walk off the end of a directory data block {CVE-2024-41013}
  • CVE-2026-31527
    • driver core: platform: RCU-protect driver_override against match() UAF {CVE-2026-31527}
  • CVE-2022-48744
    • net/mlx5e: Avoid field-overflowing memcpy() {CVE-2022-48744}
  • CVE-2023-53510
    • scsi: ufs: core: Fix handling of lrbp->cmd {CVE-2023-53510}
  • CVE-2026-23268
    • apparmor: fix unprivileged local user can do privileged policy management {CVE-2026-23268}
  • CVE-2026-23269
    • apparmor: validate DFA start states are in bounds in unpack_pdb {CVE-2026-23269}
  • CVE-2025-21812
    • ax25: rcu protect dev->ax25_ptr {CVE-2025-21812}
  • CVE-2026-46266
    • inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266}
  • CVE-2026-53228
    • ipv6: sit: reload inner IPv6 header after GSO offloads {CVE-2026-53228}
  • CVE-2026-53355
    • net: rds: clear i_sends on setup unwind {CVE-2026-53355}
  • CVE-2026-45970
    • bonding: alb: fix UAF in rlb_arp_recv during bond up/down {CVE-2026-45970}
  • CVE-2023-52922
    • can: bcm: Fix UAF in bcm_proc_show() {CVE-2023-52922}
  • CVE-2026-52920
    • netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920} *…
Record
CLSA-2026-1791132078
Updated
2026-11-02
OSVCLSA-2026-1792759740 No score

kernel: Fix of 134 CVEs

  • net: skbuff: propagate shared-frag marker in skb_zerocopy()
  • net: bridge: stop fast-leave after deleting a port group {CVE-2026-74480}
  • net: ipv6: clear suppressed fib6 rule result {CVE-2026-74581}
  • ipvs: do not propagate one-packet flag to synced conns {CVE-2026-80714}
  • net: skbuff: propagate shared-frag marker through frag-transfer helpers {CVE-2026-43503}
  • net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow {CVE-2026-98025}
  • ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF {CVE-2026-98116}
  • sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START {CVE-2026-98130}
  • dm cache policy smq: check allocation under invalidate lock {CVE-2026-53265}
  • RDMA/siw: Bound fragmented header copies by the remaining length {CVE-2026-98323}
  • tty: clear cdev pointer after cdev_add() failure {CVE-2026-90334}
  • tty: skip cdev_del() when no cdev is registered {CVE-2026-90335}
  • procfs: fix missing RCU protection when reading real_parent in do_task_stat() {CVE-2026-46259}
  • sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL {CVE-2026-46227}
  • drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() {CVE-2026-46209}
  • drm: Remove plane hsub/vsub alignment requirement for core helpers {CVE-2026-46209}
  • RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path {CVE-2026-46189}
  • RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() {CVE-2026-46181}
  • scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() {CVE-2026-46149}
  • RDMA/rxe: Reject unknown opcodes before ICRC processing {CVE-2026-46133}
  • ip6_gre: Use cached t->net in ip6erspan_changelink(). {CVE-2026-46120}
  • libceph: Fix slab-out-of-bounds access in auth message processing {CVE-2026-46119}
  • Bluetooth: hci_event: fix potential UAF in SSP passkey handlers {CVE-2026-46056}
  • net: qrtr: ns: Fix use-after-free in driver remove() {CVE-2026-46047}
  • RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv {CVE-2026-46043}
  • gfs2: Fix use-after-free in iomap inline data write path {CVE-2026-45984}
  • gfs2: Add metapath_dibh helper {CVE-2026-45984}
  • bonding: alb: fix UAF in rlb_arp_recv during bond up/down {CVE-2026-45970}
  • gfs2: Fix slab-use-after-free in qd_put {CVE-2026-45861}
  • RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send {CVE-2026-45856}
  • dm: fix a buffer overflow in ioctl processing {CVE-2026-46294}
  • wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task {CVE-2026-46180}
  • netfilter: nf_log: validate MAC header was set before dumping it {CVE-2026-52942}
  • xfrm: espintcp: do not reuse an in-progress partial send {CVE-2026-52935}
  • sctp: purge outqueue on stale COOKIE-ECHO handling {CVE-2026-52924}
  • ipc: limit next_id allocation to the valid ID range {CVE-2026-52923}
  • netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920}
  • netfilter: nf_queue: hold bridge skb->dev while queued {CVE-2026-52912}
  • ipvs: clear the svc scheduler ptr early on edit {CVE-2026-53270}
  • netfilter: conntrack_irc: fix possible out-of-bounds read {CVE-2026-53268}
  • net/sched: act_api: use RCU with deferred freeing for action lifecycle {CVE-2026-53264}
  • Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() {CVE-2026-53256}
  • Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
  • xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() {CVE-2026-53239}
  • ipv6: sit: reload inner IPv6 header after GSO offloads {CVE-2026-53228}
  • net: guard timestamp cmsgs to real error queue skbs {CVE-2026-53223}
  • USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() {CVE-2026-53195}
  • wifi: nl80211: reject oversized EMA RNR lists {CVE-2026-53182}
  • netfilter: require Ethernet MAC header before using eth_hdr() {CVE-2026-53131}
  • bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops {CVE-2026-53078}
  • ppp: require CAP_NET_ADMIN in target…
Record
CLSA-2026-1792759740
Updated
2026-11-02
OSVopenSUSE-SU-2026:21555-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
  • CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
  • CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
  • CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
  • CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
  • CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
  • CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
  • CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
  • CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
  • CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
  • CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
  • CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
  • CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46023: dm mirror: fix integer…
Record
openSUSE-SU-2026:21555-1
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2026-53062 No score

CVE-2026-53062 in linux - Patched by Root

Root has patched CVE-2026-53062 in the linux package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2026-53062
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2026-53062 No score

CVE-2026-53062 in linux - Patched by Root

Root has patched CVE-2026-53062 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2026-53062
Updated
2026-11-02
OSVROOT-OS-UBUNTU-2204-CVE-2026-53062 No score

CVE-2026-53062 in linux - Patched by Root

Root has patched CVE-2026-53062 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2204-CVE-2026-53062
Updated
2026-11-06
OSVROOT-OS-UBUNTU-2404-CVE-2026-53062 No score

CVE-2026-53062 in linux - Patched by Root

Root has patched CVE-2026-53062 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2404-CVE-2026-53062
Updated
2026-11-06
OSVSUSE-SU-2026:23066-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
  • CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
  • CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
  • CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
  • CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
  • CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
  • CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
  • CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
  • CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
  • CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
  • CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
  • CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
  • CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46023: dm mirror: fix integer…
Record
SUSE-SU-2026:23066-1
Updated
2026-11-02
OSVSUSE-SU-2026:23068-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
  • CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
  • CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
  • CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
  • CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
  • CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
  • CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
  • CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
  • CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
  • CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
  • CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
  • CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
  • CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46023: dm mirror: fix integer…
Record
SUSE-SU-2026:23068-1
Updated
2026-11-02
OSVSUSE-SU-2026:23193-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
  • CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" (bsc#1256675).
  • CVE-2026-23097: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).
  • CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43130: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).
  • CVE-2026-43161: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (bsc#1264333).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43170: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43328: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832).
  • CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
  • CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45877: HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (bsc#1266468).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
  • CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46023: dm mirror: fix integer overflow in create_dirty_log() (bsc#1267449).
  • CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).
  • CVE-2026-46027: net/smc: avoid early lgr access in smc_clc_wait_msg (bsc#1266744).
  • CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).
  • CVE-2026-46040: inotify:…
Record
SUSE-SU-2026:23193-1
Updated
2026-11-02
OSVSUSE-SU-2026:23194-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
  • CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" (bsc#1256675).
  • CVE-2026-23097: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).
  • CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43130: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).
  • CVE-2026-43161: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (bsc#1264333).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43170: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43328: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832).
  • CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
  • CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45877: HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (bsc#1266468).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
  • CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46023: dm mirror: fix integer overflow in create_dirty_log() (bsc#1267449).
  • CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).
  • CVE-2026-46027: net/smc: avoid early lgr access in smc_clc_wait_msg (bsc#1266744).
  • CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).
  • CVE-2026-46040: inotify: fix…
Record
SUSE-SU-2026:23194-1
Updated
2026-11-02
OSVSUSE-SU-2026:23221-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
  • CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
  • CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
  • CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
  • CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
  • CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
  • CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
  • CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
  • CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
  • CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
  • CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
  • CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
  • CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46023: dm mirror: fix integer…
Record
SUSE-SU-2026:23221-1
Updated
2026-11-02
OSVSUSE-SU-2026:23231-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
  • CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
  • CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
  • CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
  • CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
  • CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
  • CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
  • CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
  • CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
  • CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
  • CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
  • CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
  • CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46023: dm mirror: fix integer…
Record
SUSE-SU-2026:23231-1
Updated
2026-11-02
OSVSUSE-SU-2026:23237-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
  • CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
  • CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
  • CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
  • CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
  • CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
  • CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
  • CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
  • CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
  • CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
  • CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
  • CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
  • CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46023: dm mirror: fix integer…
Record
SUSE-SU-2026:23237-1
Updated
2026-11-02
OSVSUSE-SU-2026:23241-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
  • CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" (bsc#1256675).
  • CVE-2026-23097: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).
  • CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43130: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).
  • CVE-2026-43161: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (bsc#1264333).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43170: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43328: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832).
  • CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
  • CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45877: HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (bsc#1266468).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
  • CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46023: dm mirror: fix integer overflow in create_dirty_log() (bsc#1267449).
  • CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).
  • CVE-2026-46027: net/smc: avoid early lgr access in smc_clc_wait_msg (bsc#1266744).
  • CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).
  • CVE-2026-46040: inotify:…
Record
SUSE-SU-2026:23241-1
Updated
2026-11-02
OSVSUSE-SU-2026:23244-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
  • CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" (bsc#1256675).
  • CVE-2026-23097: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).
  • CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43130: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).
  • CVE-2026-43161: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (bsc#1264333).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43170: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43328: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832).
  • CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
  • CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45877: HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (bsc#1266468).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
  • CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46023: dm mirror: fix integer overflow in create_dirty_log() (bsc#1267449).
  • CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).
  • CVE-2026-46027: net/smc: avoid early lgr access in smc_clc_wait_msg (bsc#1266744).
  • CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).
  • CVE-2026-46040: inotify: fix…
Record
SUSE-SU-2026:23244-1
Updated
2026-11-02
OSVSUSE-SU-2026:3594-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
  • CVE-2026-31510: Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb (bsc#1262603).
  • CVE-2026-31624: HID: core: clamp report_size in s32ton() to avoid undefined shift (bsc#1263657).
  • CVE-2026-43068: ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() (bsc#1264255).
  • CVE-2026-43069: Bluetooth: hci_ll: Fix firmware leak on error path (bsc#1264190).
  • CVE-2026-43123: fbcon: check return value of con2fb_acquire_newinfo() (bsc#1264598).
  • CVE-2026-43124: pstore: ram_core: fix incorrect success return when vmap() fails (bsc#1264545).
  • CVE-2026-43156: net: usb: pegasus: enable basic endpoint checking (bsc#1265092).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43180: net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode (bsc#1265093).
  • CVE-2026-43211: PCI: Fix pci_slot_trylock() error handling (bsc#1264387).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43226: net/rds: No shortcut out of RDS_CONN_ERROR (bsc#1264544).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
  • CVE-2026-43253: iommu/amd: move wait_on_sem() out of spinlock (bsc#1264419).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43268: hfsplus: pretend special inodes as regular files (bsc#1265083).
  • CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43287: drm: Account property blob allocations to memcg (bsc#1265037).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43313: ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() (bsc#1264821).
  • CVE-2026-43370: drm/amdgpu: Fix use-after-free race in VM acquire (bsc#1264782).
  • CVE-2026-43373: net: ncsi: fix skb leak in error paths (bsc#1265079).
  • CVE-2026-43383: net/tcp-md5: Fix MAC comparison to be constant-time (bsc#1264744).
  • CVE-2026-43425: usb: image: mdc800: kill download URB on timeout (bsc#1265133).
  • CVE-2026-43427: usb: class: cdc-wdm: fix reordering issue in read code path (bsc#1264746).
  • CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
  • CVE-2026-43449: nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set (bsc#1265023).
  • CVE-2026-43450: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (bsc#1264794).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-43452: netfilter: x_tables: guard option walkers against 1-byte tail reads (bsc#1265142).
  • CVE-2026-43466: net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (bsc#1264790).
  • CVE-2026-43493: crypto: pcrypt - Fix handling of MAY_BACKLOG requests (bsc#1265627).
  • CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
  • CVE-2026-45857: scsi: csiostor: Fix dereference of null pointer rn (bsc#1266458).
  • CVE-2026-45858: ext4: subdivide EXT4_EXT_DATA_VALID1 (bsc#1266773).
  • CVE-2026-45871: tpm: st33zp24: Fix missing cleanup on get_burstcount() error (bsc#1266755).
  • CVE-2026-45877: HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (bsc#1266468).
  • CVE-2026-45899: ext4: drop extent cache when splitting extent fails (bsc#1266883).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45915:…
Record
SUSE-SU-2026:3594-1
Updated
2026-11-02
OSVSUSE-SU-2026:3790-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
  • CVE-2025-68818: scsi: Revert 'scsi: qla2xxx: Perform lockless command completion in abort path' (bsc#1256675).
  • CVE-2026-23097: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).
  • CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43130: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).
  • CVE-2026-43161: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (bsc#1264333).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43170: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43328: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).
  • CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).
  • CVE-2026-46137: mptcp: pm: ADD_ADDR rtx: fix potential data-race (bsc#1267570).
  • CVE-2026-46147: KVM: arm64: Factor out pKVM hyp vcpu creation to separate function (bsc#1267689).
  • CVE-2026-46158: mptcp: pm: ADD_ADDR rtx: always decrease sk refcount (bsc#1266880).
  • CVE-2026-46168: mptcp: sockopt: set timestamp flags on subflow socket, not msk (bsc#1266869).
  • CVE-2026-46170: mptcp: pm: reuse ID 0 after delete and re-add (bsc#1267714).
  • CVE-2026-46180: wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task (bsc#1266813).
  • CVE-2026-46189: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (bsc#1266918).
  • CVE-2026-46193: xfrm: ah: account for ESN high bits in async callbacks (bsc#1267656).
  • CVE-2026-46234: vsock: fix buffer size clamping order (bsc#1266904).
  • CVE-2026-46245: drm/amd/display: Fix dc_link NULL handling in HPD init (bsc#1267678). -…
Record
SUSE-SU-2026:3790-1
Updated
2026-11-02
OSVSUSE-SU-2026:3810-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
  • CVE-2025-68818: scsi: Revert 'scsi: qla2xxx: Perform lockless command completion in abort path' (bsc#1256675).
  • CVE-2026-23097: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).
  • CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43130: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).
  • CVE-2026-43161: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (bsc#1264333).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43170: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43328: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).
  • CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).
  • CVE-2026-46137: mptcp: pm: ADD_ADDR rtx: fix potential data-race (bsc#1267570).
  • CVE-2026-46147: KVM: arm64: Factor out pKVM hyp vcpu creation to separate function (bsc#1267689).
  • CVE-2026-46158: mptcp: pm: ADD_ADDR rtx: always decrease sk refcount (bsc#1266880).
  • CVE-2026-46168: mptcp: sockopt: set timestamp flags on subflow socket, not msk (bsc#1266869).
  • CVE-2026-46170: mptcp: pm: reuse ID 0 after delete and re-add (bsc#1267714).
  • CVE-2026-46180: wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task (bsc#1266813).
  • CVE-2026-46189: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (bsc#1266918).
  • CVE-2026-46193: xfrm: ah: account for ESN high bits in async callbacks (bsc#1267656).
  • CVE-2026-46234: vsock: fix buffer size clamping order (bsc#1266904).
  • CVE-2026-46245: drm/amd/display: Fix dc_link NULL handling in HPD init (bsc#1267678). -…
Record
SUSE-SU-2026:3810-1
Updated
2026-11-02
OSVUSN-8566-1 No score

linux, linux-gcp, linux-gke, linux-realtime vulnerabilities

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PSP security protocol;
  • ARM64 architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Intel NPU Driver;
  • DRBD Distributed Replicated Block Device drivers;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • Clock framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • EDAC drivers;
  • EFI core;
  • FWCTL subsystem;
  • GPU drivers;
  • HID subsystem;
  • I3C subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • MediaTek network drivers;
  • NVME drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Chrome hardware platform drivers;
  • ACPI WMI driver;
  • x86 platform drivers;
  • Generic PM domains;
  • MediaTek PM domains;
  • Power supply drivers;
  • MPAM driver;
  • Amlogic Meson reset controller drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • NVIDIA Tegra Control Backbone (CBB) driver;
  • SPI subsystem;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • TTY drivers;
  • USB Device Class drivers;
  • ULPI bus;
  • USB Type-C support driver;
  • TI TPS6598x USB Power Delivery controller driver;
  • vDPA drivers;
  • VFIO drivers;
  • Framebuffer layer;
  • TSM AMD SEV Guest driver;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS+ file system;
  • HugeTLB file system;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • Overlay file system;
  • Diskquota system;
  • SMB network file system;
  • Tracing file system;
  • DRM TTM subsystem;
  • Control group (cgroup);
  • Kernel CPU control infrastructure;
  • QorIQ DPAA2 FSL-MC bus driver;
  • Freescale ENETC Ethernet drivers;
  • Memory Management;
  • padata parallel execution mechanism;
  • PPP protocol drivers and compressors;
  • Bluetooth subsystem;
  • Networking core;
  • Netfilter;
  • Network traffic control;
  • io_uring subsystem;
  • IPC subsystem;
  • Audit subsystem;
  • BPF subsystem;
  • Kernel exit() syscall;
  • Kernel fork() syscall;
  • Kernel futex primitives;
  • Padata parallel execution mechanism;
  • Scheduler infrastructure;
  • Tracing infrastructure;
  • Cryptographic library;
  • Memory management;
  • 802.1Q VLAN protocol;
  • B.A.T.M.A.N. meshing protocol;
  • Ethernet bridge;
  • Ceph Core library;
  • Distributed Switch Architecture;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Open vSwitch;
  • Phonet protocol;
  • RDS protocol;
  • SCTP protocol;
  • SMC sockets;
  • TIPC protocol;
  • TLS protocol;
  • Unix domain sockets;
  • VMware vSockets driver;
  • XFRM subsystem;
  • Integrity Measurement Architecture(IMA) framework;
  • SELinux security module;
  • ALSA framework;
  • HD-audio driver;
  • QCOM ASoC drivers; -…
Record
USN-8566-1
Updated
2026-11-07
OSVUSN-8567-1 No score

linux, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-realtime, linux-realtime-6.8 vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • Power management core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • Counter interface drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • DMA engine subsystem;
  • EDAC drivers;
  • EFI core;
  • GPU drivers;
  • Greybus drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MediaTek SMI driver;
  • NVIDIA Tegra memory controller driver;
  • Fastrpc Driver;
  • IBM Advanced System Management driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Ethernet team driver;
  • MediaTek network drivers;
  • Near Field Communication (NFC) drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Broadcom BCM2835 power domain driver;
  • Generic PM domains;
  • i.MX PM domains;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • Freescale SoC drivers;
  • Microchip PolarFire SoC system controller driver;
  • SPI subsystem;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • SM750 framebuffer staging driver;
  • TCM subsystem;
  • Thermal drivers;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • USB core drivers;
  • DesignWare USB2 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Mustek MDC800 USB digital camera driver;
  • USB YUREX driver;
  • Renesas USBHS Controller drivers;
  • USB Type-C Connector System Software Interface driver;
  • VFIO drivers;
  • Framebuffer layer;
  • TSM TDX Guest driver;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS+ file system;
  • Journaling layer for block devices (JBD2);
  • Network file systems library;
  • Network…
Record
USN-8567-1
Updated
2026-11-07
OSVUSN-8568-1 No score

linux-oem-7.0 vulnerabilities

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PSP security protocol;
  • ARM64 architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Intel NPU Driver;
  • DRBD Distributed Replicated Block Device drivers;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • Clock framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • EDAC drivers;
  • EFI core;
  • FWCTL subsystem;
  • GPU drivers;
  • HID subsystem;
  • I3C subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • MediaTek network drivers;
  • NVME drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Chrome hardware platform drivers;
  • ACPI WMI driver;
  • x86 platform drivers;
  • Generic PM domains;
  • MediaTek PM domains;
  • Power supply drivers;
  • MPAM driver;
  • Amlogic Meson reset controller drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • NVIDIA Tegra Control Backbone (CBB) driver;
  • SPI subsystem;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • TTY drivers;
  • USB Device Class drivers;
  • ULPI bus;
  • USB Type-C support driver;
  • TI TPS6598x USB Power Delivery controller driver;
  • vDPA drivers;
  • VFIO drivers;
  • Framebuffer layer;
  • TSM AMD SEV Guest driver;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS+ file system;
  • HugeTLB file system;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • Diskquota system;
  • SMB network file system;
  • Tracing file system;
  • DRM TTM subsystem;
  • Control group (cgroup);
  • Kernel CPU control infrastructure;
  • QorIQ DPAA2 FSL-MC bus driver;
  • Freescale ENETC Ethernet drivers;
  • Memory Management;
  • padata parallel execution mechanism;
  • PPP protocol drivers and compressors;
  • Bluetooth subsystem;
  • Networking core;
  • Netfilter;
  • Network traffic control;
  • io_uring subsystem;
  • IPC subsystem;
  • Audit subsystem;
  • BPF subsystem;
  • Kernel exit() syscall;
  • Kernel fork() syscall;
  • Kernel futex primitives;
  • Padata parallel execution mechanism;
  • Scheduler infrastructure;
  • Tracing infrastructure;
  • Cryptographic library;
  • Memory management;
  • 802.1Q VLAN protocol;
  • B.A.T.M.A.N. meshing protocol;
  • Ethernet bridge;
  • Ceph Core library;
  • Distributed Switch Architecture;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Open vSwitch;
  • Phonet protocol;
  • RDS protocol;
  • SCTP protocol;
  • SMC sockets;
  • TIPC protocol;
  • TLS protocol;
  • Unix domain sockets;
  • VMware vSockets driver;
  • XFRM subsystem;
  • Integrity Measurement Architecture(IMA) framework;
  • SELinux security module;
  • ALSA framework;
  • HD-audio driver;
  • QCOM ASoC drivers;
  • SOF drivers;
  • STI ASoC…
Record
USN-8568-1
Updated
2026-11-07
OSVUSN-8569-1 No score

linux-hwe-7.0 vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43284, CVE-2026-43500, CVE-2026-45998, CVE-2026-46000)

It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43503, CVE-2026-46300)

Qualys discovered that a race condition existed in the ptrace subsystem of the Linux kernel when privileged processes are exiting. An unprivileged local attacker could use this issue to expose sensitive information. (CVE-2026-46333)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contain a memory leak when handling AppArmor notifications. A local attacker could use this to cause resource exhaustion. (CVE-2026-47326)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contain a NULL pointer dereference when handling AppArmor notifications. A local attacker could use this to cause a kernel oops. (CVE-2026-47327)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained an invalid free when handling AppArmor notifications. A local attacker could use this to corrupt kernel memory. (CVE-2026-47328)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained insufficient validation of AppArmor notification responses. A local attacker could use this to allow crafted responses to be processed. (CVE-2026-47329)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 used an uninitialized variable when handling AppArmor notifications. A local attacker could use this to cause incorrect caching of data. (CVE-2026-47330)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained an out-of-bounds (OOB) read when handling AppArmor notifications. A local attacker could use this to cause information disclosure of kernel memory. (CVE-2026-47332)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained a out-of-bounds (OOB) read when handling AppArmor notifications. A local attacker could use this to cause kernel memory corruption and, theoretically, influence processing of AppArmor policies. (CVE-2026-47333)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained incorrect holding of locks when handling AppArmor notifications. A local attacker could use this to cause a kernel panic or deadlock. (CVE-2026-47334)

Tristan Madani and Trevor Lawrence have each independently discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained a NULL pointer dereference when handling AppArmor network socket mediation. A local attacker could use this to cause a kernel oops. (CVE-2026-47337)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PSP security protocol;
  • ARM64 architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Intel…
Record
USN-8569-1
Updated
2026-11-07
OSVUSN-8574-1 No score

linux-gcp-fips vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • Power management core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • Counter interface drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • DMA engine subsystem;
  • EDAC drivers;
  • EFI core;
  • GPU drivers;
  • Greybus drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MediaTek SMI driver;
  • NVIDIA Tegra memory controller driver;
  • Fastrpc Driver;
  • IBM Advanced System Management driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Ethernet team driver;
  • MediaTek network drivers;
  • Near Field Communication (NFC) drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Broadcom BCM2835 power domain driver;
  • Generic PM domains;
  • i.MX PM domains;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • Freescale SoC drivers;
  • Microchip PolarFire SoC system controller driver;
  • SPI subsystem;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • SM750 framebuffer staging driver;
  • TCM subsystem;
  • Thermal drivers;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • USB core drivers;
  • DesignWare USB2 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Mustek MDC800 USB digital camera driver;
  • USB YUREX driver;
  • Renesas USBHS Controller drivers;
  • USB Type-C Connector System Software Interface driver;
  • VFIO drivers;
  • Framebuffer layer;
  • TSM TDX Guest driver;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS+ file system;
  • Journaling layer for block devices (JBD2);
  • Network file systems library;
  • Network…
Record
USN-8574-1
Updated
2026-11-07
OSVUSN-8574-2 No score

linux-fips, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • Power management core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • Counter interface drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • DMA engine subsystem;
  • EDAC drivers;
  • EFI core;
  • GPU drivers;
  • Greybus drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MediaTek SMI driver;
  • NVIDIA Tegra memory controller driver;
  • Fastrpc Driver;
  • IBM Advanced System Management driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Ethernet team driver;
  • MediaTek network drivers;
  • Near Field Communication (NFC) drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Broadcom BCM2835 power domain driver;
  • Generic PM domains;
  • i.MX PM domains;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • Freescale SoC drivers;
  • Microchip PolarFire SoC system controller driver;
  • SPI subsystem;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • SM750 framebuffer staging driver;
  • TCM subsystem;
  • Thermal drivers;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • USB core drivers;
  • DesignWare USB2 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Mustek MDC800 USB digital camera driver;
  • USB YUREX driver;
  • Renesas USBHS Controller drivers;
  • USB Type-C Connector System Software Interface driver;
  • VFIO drivers;
  • Framebuffer layer;
  • TSM TDX Guest driver;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS+ file system;
  • Journaling layer for block devices (JBD2);
  • Network file systems library;
  • Network…
Record
USN-8574-2
Updated
2026-11-07
OSVUSN-8574-3 No score

linux-ibm, linux-ibm-6.8, linux-nvidia-tegra, linux-xilinx vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • Power management core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • Counter interface drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • DMA engine subsystem;
  • EDAC drivers;
  • EFI core;
  • GPU drivers;
  • Greybus drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MediaTek SMI driver;
  • NVIDIA Tegra memory controller driver;
  • Fastrpc Driver;
  • IBM Advanced System Management driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Ethernet team driver;
  • MediaTek network drivers;
  • Near Field Communication (NFC) drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Broadcom BCM2835 power domain driver;
  • Generic PM domains;
  • i.MX PM domains;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • Freescale SoC drivers;
  • Microchip PolarFire SoC system controller driver;
  • SPI subsystem;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • SM750 framebuffer staging driver;
  • TCM subsystem;
  • Thermal drivers;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • USB core drivers;
  • DesignWare USB2 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Mustek MDC800 USB digital camera driver;
  • USB YUREX driver;
  • Renesas USBHS Controller drivers;
  • USB Type-C Connector System Software Interface driver;
  • VFIO drivers;
  • Framebuffer layer;
  • TSM TDX Guest driver;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS+ file system;
  • Journaling layer for block devices (JBD2);
  • Network file systems library;
  • Network…
Record
USN-8574-3
Updated
2026-11-07
OSVUSN-8575-1 No score

linux, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-realtime, linux-xilinx-zynqmp vulnerabilities

Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose sensitive information (kernel memory). (CVE-2023-45896)

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Power management core;
  • DRBD Distributed Replicated Block Device drivers;
  • RNBD block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clocksource drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • CPU idle management framework;
  • Hardware crypto device drivers;
  • DMA engine subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • EFI core;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MediaTek SMI driver;
  • NVIDIA Tegra memory controller driver;
  • Multifunction device drivers;
  • IBM Advanced System Management driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • MediaTek network drivers;
  • Near Field Communication (NFC) drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Broadcom BCM2835 power domain driver;
  • Power supply drivers;
  • RapidIO drivers;
  • Remote Processor subsystem;
  • RPMSG subsystem;
  • SCSI subsystem;
  • Freescale SoC drivers;
  • Texas Instruments SoC drivers;
  • SPI subsystem;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • SM750 framebuffer staging driver;
  • TCM subsystem;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • USB core drivers;
  • DesignWare USB2 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Mustek MDC800 USB digital camera driver;
  • USB YUREX driver;
  • Renesas USBHS Controller drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • FAT file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS+ file system;
  • JFS file system;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • Proc file system;
  • Pstore file system;
  • Diskquota system;
  • SMB network file system;
  • SquashFS file system;
  • UDF file system; -…
Record
USN-8575-1
Updated
2026-11-07
OSVUSN-8575-2 No score

linux-aws, linux-aws-5.15, linux-aws-fips, linux-fips, linux-ibm, linux-nvidia vulnerabilities

Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose sensitive information (kernel memory). (CVE-2023-45896)

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Power management core;
  • DRBD Distributed Replicated Block Device drivers;
  • RNBD block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clocksource drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • CPU idle management framework;
  • Hardware crypto device drivers;
  • DMA engine subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • EFI core;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MediaTek SMI driver;
  • NVIDIA Tegra memory controller driver;
  • Multifunction device drivers;
  • IBM Advanced System Management driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • MediaTek network drivers;
  • Near Field Communication (NFC) drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Broadcom BCM2835 power domain driver;
  • Power supply drivers;
  • RapidIO drivers;
  • Remote Processor subsystem;
  • RPMSG subsystem;
  • SCSI subsystem;
  • Freescale SoC drivers;
  • Texas Instruments SoC drivers;
  • SPI subsystem;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • SM750 framebuffer staging driver;
  • TCM subsystem;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • USB core drivers;
  • DesignWare USB2 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Mustek MDC800 USB digital camera driver;
  • USB YUREX driver;
  • Renesas USBHS Controller drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • FAT file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS+ file system;
  • JFS file system;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • Proc file system;
  • Pstore file system;
  • Diskquota system;
  • SMB network file system;
  • SquashFS file system;
  • UDF file system; -…
Record
USN-8575-2
Updated
2026-11-07

Affected products

Affected packages

Affected packages
PackageAffectedFixed
bpftool
AlmaLinux:8
From an advisory covering 20 CVEs
 before 4.18.0-553.166.1.el8_10
4.18.0-553.166.1.el8_10
kernel
AlmaLinux:8
From an advisory covering 20 CVEs
 before 4.18.0-553.166.1.el8_10
4.18.0-553.166.1.el8_10
kernel-abi-stablelists
AlmaLinux:8
From an advisory covering 20 CVEs
 before 4.18.0-553.166.1.el8_10
4.18.0-553.166.1.el8_10
kernel-core
AlmaLinux:8
From an advisory covering 20 CVEs
 before 4.18.0-553.166.1.el8_10
4.18.0-553.166.1.el8_10
kernel-cross-headers
AlmaLinux:8
From an advisory covering 20 CVEs
 before 4.18.0-553.166.1.el8_10
4.18.0-553.166.1.el8_10
kernel-debug
AlmaLinux:8
From an advisory covering 20 CVEs
 before 4.18.0-553.166.1.el8_10
4.18.0-553.166.1.el8_10
kernel-debug-core
AlmaLinux:8
From an advisory covering 20 CVEs
 before 4.18.0-553.166.1.el8_10
4.18.0-553.166.1.el8_10
kernel-debug-devel
AlmaLinux:8
From an advisory covering 20 CVEs
 before 4.18.0-553.166.1.el8_10
4.18.0-553.166.1.el8_10
kernel-debug-modules
AlmaLinux:8
From an advisory covering 20 CVEs
 before 4.18.0-553.166.1.el8_10
4.18.0-553.166.1.el8_10
kernel-debug-modules-extra
AlmaLinux:8
From an advisory covering 20 CVEs
 before 4.18.0-553.166.1.el8_10
4.18.0-553.166.1.el8_10
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-devel
AlmaLinux:8
From an advisory covering 20 CVEs
 before 4.18.0-553.166.1.el8_10
4.18.0-553.166.1.el8_10
kernel-doc
AlmaLinux:8
From an advisory covering 20 CVEs
 before 4.18.0-553.166.1.el8_10
4.18.0-553.166.1.el8_10
kernel-headers
AlmaLinux:8
From an advisory covering 20 CVEs
 before 4.18.0-553.166.1.el8_10
4.18.0-553.166.1.el8_10
kernel-modules
AlmaLinux:8
From an advisory covering 20 CVEs
 before 4.18.0-553.166.1.el8_10
4.18.0-553.166.1.el8_10
kernel-modules-extra
AlmaLinux:8
From an advisory covering 20 CVEs
 before 4.18.0-553.166.1.el8_10
4.18.0-553.166.1.el8_10
kernel-tools
AlmaLinux:8
From an advisory covering 20 CVEs
 before 4.18.0-553.166.1.el8_10
4.18.0-553.166.1.el8_10
kernel-tools-libs
AlmaLinux:8
From an advisory covering 20 CVEs
 before 4.18.0-553.166.1.el8_10
4.18.0-553.166.1.el8_10
kernel-tools-libs-devel
AlmaLinux:8
From an advisory covering 20 CVEs
 before 4.18.0-553.166.1.el8_10
4.18.0-553.166.1.el8_10
kernel-zfcpdump
AlmaLinux:8
From an advisory covering 20 CVEs
 before 4.18.0-553.166.1.el8_10
4.18.0-553.166.1.el8_10
kernel-zfcpdump-core
AlmaLinux:8
From an advisory covering 20 CVEs
 before 4.18.0-553.166.1.el8_10
4.18.0-553.166.1.el8_10
kernel-zfcpdump-devel
AlmaLinux:8
From an advisory covering 20 CVEs
 before 4.18.0-553.166.1.el8_10
4.18.0-553.166.1.el8_10
kernel-zfcpdump-modules
AlmaLinux:8
From an advisory covering 20 CVEs
 before 4.18.0-553.166.1.el8_10
4.18.0-553.166.1.el8_10
kernel-zfcpdump-modules-extra
AlmaLinux:8
From an advisory covering 20 CVEs
 before 4.18.0-553.166.1.el8_10
4.18.0-553.166.1.el8_10
perf
AlmaLinux:8
From an advisory covering 20 CVEs
 before 4.18.0-553.166.1.el8_10
4.18.0-553.166.1.el8_10
python3-perf
AlmaLinux:8
From an advisory covering 20 CVEs
 before 4.18.0-553.166.1.el8_10
4.18.0-553.166.1.el8_10
kernel-rt
AlmaLinux:8
From an advisory covering 20 CVEs
 before 4.18.0-553.166.1.rt7.507.el8_10
4.18.0-553.166.1.rt7.507.el8_10
kernel-rt-core
AlmaLinux:8
From an advisory covering 20 CVEs
 before 4.18.0-553.166.1.rt7.507.el8_10
4.18.0-553.166.1.rt7.507.el8_10
kernel-rt-debug
AlmaLinux:8
From an advisory covering 20 CVEs
 before 4.18.0-553.166.1.rt7.507.el8_10
4.18.0-553.166.1.rt7.507.el8_10
kernel-rt-debug-core
AlmaLinux:8
From an advisory covering 20 CVEs
 before 4.18.0-553.166.1.rt7.507.el8_10
4.18.0-553.166.1.rt7.507.el8_10
kernel-rt-debug-devel
AlmaLinux:8
From an advisory covering 20 CVEs
 before 4.18.0-553.166.1.rt7.507.el8_10
4.18.0-553.166.1.rt7.507.el8_10
kernel-rt-debug-modules
AlmaLinux:8
From an advisory covering 20 CVEs
 before 4.18.0-553.166.1.rt7.507.el8_10
4.18.0-553.166.1.rt7.507.el8_10
kernel-rt-debug-modules-extra
AlmaLinux:8
From an advisory covering 20 CVEs
 before 4.18.0-553.166.1.rt7.507.el8_10
4.18.0-553.166.1.rt7.507.el8_10
kernel-rt-devel
AlmaLinux:8
From an advisory covering 20 CVEs
 before 4.18.0-553.166.1.rt7.507.el8_10
4.18.0-553.166.1.rt7.507.el8_10
kernel-rt-modules
AlmaLinux:8
From an advisory covering 20 CVEs
 before 4.18.0-553.166.1.rt7.507.el8_10
4.18.0-553.166.1.rt7.507.el8_10
kernel-rt-modules-extra
AlmaLinux:8
From an advisory covering 20 CVEs
 before 4.18.0-553.166.1.rt7.507.el8_10
4.18.0-553.166.1.rt7.507.el8_10
kernel
AlmaLinux:9
From an advisory covering 13 CVEs
 before 5.14.0-687.50.1.el9_8
5.14.0-687.50.1.el9_8
kernel-64k
AlmaLinux:9
From an advisory covering 13 CVEs
 before 5.14.0-687.50.1.el9_8
5.14.0-687.50.1.el9_8
kernel-64k-core
AlmaLinux:9
From an advisory covering 13 CVEs
 before 5.14.0-687.50.1.el9_8
5.14.0-687.50.1.el9_8
kernel-64k-debug
AlmaLinux:9
From an advisory covering 13 CVEs
 before 5.14.0-687.50.1.el9_8
5.14.0-687.50.1.el9_8
kernel-64k-debug-core
AlmaLinux:9
From an advisory covering 13 CVEs
 before 5.14.0-687.50.1.el9_8
5.14.0-687.50.1.el9_8
kernel-64k-debug-devel
AlmaLinux:9
From an advisory covering 13 CVEs
 before 5.14.0-687.50.1.el9_8
5.14.0-687.50.1.el9_8
kernel-64k-debug-devel-matched
AlmaLinux:9
From an advisory covering 13 CVEs
 before 5.14.0-687.50.1.el9_8
5.14.0-687.50.1.el9_8
kernel-64k-debug-modules
AlmaLinux:9
From an advisory covering 13 CVEs
 before 5.14.0-687.50.1.el9_8
5.14.0-687.50.1.el9_8
kernel-64k-debug-modules-core
AlmaLinux:9
From an advisory covering 13 CVEs
 before 5.14.0-687.50.1.el9_8
5.14.0-687.50.1.el9_8
kernel-64k-debug-modules-extra
AlmaLinux:9
From an advisory covering 13 CVEs
 before 5.14.0-687.50.1.el9_8
5.14.0-687.50.1.el9_8
kernel-64k-devel
AlmaLinux:9
From an advisory covering 13 CVEs
 before 5.14.0-687.50.1.el9_8
5.14.0-687.50.1.el9_8
kernel-64k-devel-matched
AlmaLinux:9
From an advisory covering 13 CVEs
 before 5.14.0-687.50.1.el9_8
5.14.0-687.50.1.el9_8
kernel-64k-modules
AlmaLinux:9
From an advisory covering 13 CVEs
 before 5.14.0-687.50.1.el9_8
5.14.0-687.50.1.el9_8
kernel-64k-modules-core
AlmaLinux:9
From an advisory covering 13 CVEs
 before 5.14.0-687.50.1.el9_8
5.14.0-687.50.1.el9_8
kernel-64k-modules-extra
AlmaLinux:9
From an advisory covering 13 CVEs
 before 5.14.0-687.50.1.el9_8
5.14.0-687.50.1.el9_8
kernel-abi-stablelists
AlmaLinux:9
From an advisory covering 13 CVEs
 before 5.14.0-687.50.1.el9_8
5.14.0-687.50.1.el9_8
kernel-core
AlmaLinux:9
From an advisory covering 13 CVEs
 before 5.14.0-687.50.1.el9_8
5.14.0-687.50.1.el9_8
kernel-cross-headers
AlmaLinux:9
From an advisory covering 13 CVEs
 before 5.14.0-687.50.1.el9_8
5.14.0-687.50.1.el9_8
kernel-debug
AlmaLinux:9
From an advisory covering 13 CVEs
 before 5.14.0-687.50.1.el9_8
5.14.0-687.50.1.el9_8
linux-lts
Alpaquita:23
 6.1.174-r0 up to 6.1.175-r0
6.1.175-r0
linux-lts
Alpaquita:25
 6.12.87-r0 up to 6.12.92-r0
6.12.92-r0
linux-lts
Alpaquita:stream
 6.12.92-r1 up to 6.18.35-r1
6.18.35-r1
bpftool
TuxCare:CentOS:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel
TuxCare:CentOS:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-debug
TuxCare:CentOS:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-debug-devel
TuxCare:CentOS:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-devel
TuxCare:CentOS:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-doc
TuxCare:CentOS:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-headers
TuxCare:CentOS:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-tools
TuxCare:CentOS:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-tools-libs
TuxCare:CentOS:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-tools-libs-devel
TuxCare:CentOS:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
perf
TuxCare:CentOS:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
python-perf
TuxCare:CentOS:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
bpftool
TuxCare:OracleLinux:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel
TuxCare:OracleLinux:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-debug
TuxCare:OracleLinux:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-debug-devel
TuxCare:OracleLinux:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-devel
TuxCare:OracleLinux:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-doc
TuxCare:OracleLinux:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-headers
TuxCare:OracleLinux:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-tools
TuxCare:OracleLinux:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-tools-libs
TuxCare:OracleLinux:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-tools-libs-devel
TuxCare:OracleLinux:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
perf
TuxCare:OracleLinux:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
python-perf
TuxCare:OracleLinux:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
bpftool
TuxCare:RHEL:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel
TuxCare:RHEL:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-debug
TuxCare:RHEL:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-debug-devel
TuxCare:RHEL:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-devel
TuxCare:RHEL:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-doc
TuxCare:RHEL:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-headers
TuxCare:RHEL:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-tools
TuxCare:RHEL:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-tools-libs
TuxCare:RHEL:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-tools-libs-devel
TuxCare:RHEL:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
perf
TuxCare:RHEL:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
python-perf
TuxCare:RHEL:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
linux-buildinfo-4.15.0-265-generic
TuxCare:Ubuntu:18.04
From an advisory covering 160 CVEs
 before 4.15.0-265.276+tuxcare.els1
4.15.0-265.276+tuxcare.els1
linux-buildinfo-4.15.0-265-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 160 CVEs
 before 4.15.0-265.276+tuxcare.els1
4.15.0-265.276+tuxcare.els1
linux-cloud-tools-4.15.0-265
TuxCare:Ubuntu:18.04
From an advisory covering 160 CVEs
 before 4.15.0-265.276+tuxcare.els1
4.15.0-265.276+tuxcare.els1
linux-cloud-tools-4.15.0-265-generic
TuxCare:Ubuntu:18.04
From an advisory covering 160 CVEs
 before 4.15.0-265.276+tuxcare.els1
4.15.0-265.276+tuxcare.els1
linux-cloud-tools-4.15.0-265-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 160 CVEs
 before 4.15.0-265.276+tuxcare.els1
4.15.0-265.276+tuxcare.els1
linux-cloud-tools-common
TuxCare:Ubuntu:18.04
From an advisory covering 160 CVEs
 before 4.15.0-265.276+tuxcare.els1
4.15.0-265.276+tuxcare.els1
linux-doc
TuxCare:Ubuntu:18.04
From an advisory covering 160 CVEs
 before 4.15.0-265.276+tuxcare.els1
4.15.0-265.276+tuxcare.els1
linux-headers-4.15.0-265
TuxCare:Ubuntu:18.04
From an advisory covering 160 CVEs
 before 4.15.0-265.276+tuxcare.els1
4.15.0-265.276+tuxcare.els1
linux-headers-4.15.0-265-generic
TuxCare:Ubuntu:18.04
From an advisory covering 160 CVEs
 before 4.15.0-265.276+tuxcare.els1
4.15.0-265.276+tuxcare.els1
linux-headers-4.15.0-265-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 160 CVEs
 before 4.15.0-265.276+tuxcare.els1
4.15.0-265.276+tuxcare.els1
linux-image-unsigned-4.15.0-265-generic
TuxCare:Ubuntu:18.04
From an advisory covering 160 CVEs
 before 4.15.0-265.276+tuxcare.els1
4.15.0-265.276+tuxcare.els1
linux-image-unsigned-4.15.0-265-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 160 CVEs
 before 4.15.0-265.276+tuxcare.els1
4.15.0-265.276+tuxcare.els1
linux-libc-dev
TuxCare:Ubuntu:18.04
From an advisory covering 160 CVEs
 before 4.15.0-265.276+tuxcare.els1
4.15.0-265.276+tuxcare.els1
linux-modules-4.15.0-265-generic
TuxCare:Ubuntu:18.04
From an advisory covering 160 CVEs
 before 4.15.0-265.276+tuxcare.els1
4.15.0-265.276+tuxcare.els1
linux-modules-4.15.0-265-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 160 CVEs
 before 4.15.0-265.276+tuxcare.els1
4.15.0-265.276+tuxcare.els1
linux-modules-extra-4.15.0-265-generic
TuxCare:Ubuntu:18.04
From an advisory covering 160 CVEs
 before 4.15.0-265.276+tuxcare.els1
4.15.0-265.276+tuxcare.els1
linux-source-4.15.0
TuxCare:Ubuntu:18.04
From an advisory covering 160 CVEs
 before 4.15.0-265.276+tuxcare.els1
4.15.0-265.276+tuxcare.els1
linux-tools-4.15.0-265
TuxCare:Ubuntu:18.04
From an advisory covering 160 CVEs
 before 4.15.0-265.276+tuxcare.els1
4.15.0-265.276+tuxcare.els1
Kernel
Linux
 4.12.0 up to 5.10.258, 5.11.0 up to 5.15.209, 5.16.0 up to 6.1.175, 6.2.0 up to 6.6.141, 6.7.0 up to 6.12.91, 6.13.0 up to 6.18.33, 6.19.0 up to 7.0.10
5.10.2585.15.2096.1.1756.6.1416.12.916.18.337.0.10
linux
Debian:12
 before 6.1.176-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 45 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.170-16.1.170-26.1.170-36.1.172-16.1.174-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-1
6.1.176-1
linux
Debian:13
 before 6.12.94-1, plus listed versions
6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-1
Show 22 moreShow less
6.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-1~bpo12+1
6.12.94-1
linux
Debian:14
 before 7.0.10-1, plus listed versions
6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1
Show 45 moreShow less
6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1
7.0.10-1
bpftool
Red Hat:enterprise_linux:8::baseos
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
bpftool-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
kernel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
kernel-abi-stablelists
Red Hat:enterprise_linux:8::baseos
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
kernel-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
kernel-debug
Red Hat:enterprise_linux:8::baseos
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
kernel-debug-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
kernel-debug-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
kernel-debug-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
kernel-debug-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
kernel-debug-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
kernel-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:8::baseos
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:8::baseos
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:8::baseos
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::baseos
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
kernel-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
kernel-doc
Red Hat:enterprise_linux:8::baseos
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
kernel-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
kernel-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
kernel-tools
Red Hat:enterprise_linux:8::baseos
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
kernel-tools-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
kernel-tools-libs
Red Hat:enterprise_linux:8::baseos
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
kernel-zfcpdump
Red Hat:enterprise_linux:8::baseos
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
kernel-zfcpdump-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
kernel-zfcpdump-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
kernel-zfcpdump-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
kernel-zfcpdump-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
perf
Red Hat:enterprise_linux:8::baseos
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
perf-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
python3-perf
Red Hat:enterprise_linux:8::baseos
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
python3-perf-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
bpftool-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
kernel-debug-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
kernel-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:8::crb
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:8::crb
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::crb
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
kernel-tools-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
kernel-tools-libs-devel
Red Hat:enterprise_linux:8::crb
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
perf-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
python3-perf-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
kernel-rt
Red Hat:enterprise_linux:8::nfv
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.rt7.507.el8_10
0:4.18.0-553.166.1.rt7.507.el8_10
kernel-rt-core
Red Hat:enterprise_linux:8::nfv
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.rt7.507.el8_10
0:4.18.0-553.166.1.rt7.507.el8_10
kernel-rt-debug
Red Hat:enterprise_linux:8::nfv
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.rt7.507.el8_10
0:4.18.0-553.166.1.rt7.507.el8_10
kernel-rt-debug-core
Red Hat:enterprise_linux:8::nfv
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.rt7.507.el8_10
0:4.18.0-553.166.1.rt7.507.el8_10
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:8::nfv
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.rt7.507.el8_10
0:4.18.0-553.166.1.rt7.507.el8_10
kernel-rt-debug-devel
Red Hat:enterprise_linux:8::nfv
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.rt7.507.el8_10
0:4.18.0-553.166.1.rt7.507.el8_10
kernel-rt-debug-kvm
Red Hat:enterprise_linux:8::nfv
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.rt7.507.el8_10
0:4.18.0-553.166.1.rt7.507.el8_10
kernel-rt-debug-modules
Red Hat:enterprise_linux:8::nfv
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.rt7.507.el8_10
0:4.18.0-553.166.1.rt7.507.el8_10
kernel-rt-debug-modules-extra
Red Hat:enterprise_linux:8::nfv
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.rt7.507.el8_10
0:4.18.0-553.166.1.rt7.507.el8_10
kernel-rt-debuginfo
Red Hat:enterprise_linux:8::nfv
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.rt7.507.el8_10
0:4.18.0-553.166.1.rt7.507.el8_10
kernel-rt-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::nfv
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.rt7.507.el8_10
0:4.18.0-553.166.1.rt7.507.el8_10
kernel
Rocky Linux:8
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.el8_10
0:4.18.0-553.166.1.el8_10
kernel-rt
Rocky Linux:8
From an advisory covering 20 CVEs
 before 0:4.18.0-553.166.1.rt7.507.el8_10
0:4.18.0-553.166.1.rt7.507.el8_10
kernel
Rocky Linux:9
From an advisory covering 13 CVEs
 before 0:5.14.0-687.50.1.el9_8
0:5.14.0-687.50.1.el9_8
kernel
Rocky Linux:10
From an advisory covering 12 CVEs
 before 0:6.12.0-211.58.1.el10_2
0:6.12.0-211.58.1.el10_2
linux
Root:Debian:11
 before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
rootio-linux
Root:Debian:11
 before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
rootio-linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
rootio-linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
rootio-linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
kernel-obs-build
SUSE:Linux Micro Extras 6.2
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-syms
SUSE:Linux Micro Extras 6.2
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-64kb
SUSE:Linux Micro 6.2
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-default
SUSE:Linux Micro 6.2
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-default-base
SUSE:Linux Micro 6.2
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1.160000.2.19
6.12.0-160000.37.1.160000.2.19
kernel-rt
SUSE:Linux Micro 6.2
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-source
SUSE:Linux Micro 6.2
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-rt
SUSE:Linux Micro 6.1
From an advisory covering 648 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-source-rt
SUSE:Linux Micro 6.1
From an advisory covering 648 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-default
SUSE:Linux Micro 6.1
From an advisory covering 647 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-kvmsmall
SUSE:Linux Micro 6.1
From an advisory covering 647 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-source
SUSE:Linux Micro 6.1
From an advisory covering 647 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-64kb
SUSE:Linux Enterprise Server 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-azure
SUSE:Linux Enterprise Server 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-default
SUSE:Linux Enterprise Server 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-default-base
SUSE:Linux Enterprise Server 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1.160000.2.19
6.12.0-160000.37.1.160000.2.19
kernel-docs
SUSE:Linux Enterprise Server 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-kvmsmall
SUSE:Linux Enterprise Server 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-obs-qa
SUSE:Linux Enterprise Server 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-source
SUSE:Linux Enterprise Server 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-syms
SUSE:Linux Enterprise Server 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-64kb
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-azure
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-default
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1.160000.2.19
6.12.0-160000.37.1.160000.2.19
kernel-docs
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-kvmsmall
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-obs-qa
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-source
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-syms
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-zfcpdump
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-rt
SUSE:Linux Micro 6.0
From an advisory covering 648 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-source-rt
SUSE:Linux Micro 6.0
From an advisory covering 648 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-default
SUSE:Linux Micro 6.0
From an advisory covering 647 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-kvmsmall
SUSE:Linux Micro 6.0
From an advisory covering 647 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-source
SUSE:Linux Micro 6.0
From an advisory covering 647 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-default
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 189 CVEs
 before 4.12.14-122.323.1
4.12.14-122.323.1
kgraft-patch-SLE12-SP5_Update_86
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 189 CVEs
 before 1-8.3.1
1-8.3.1
kernel-default
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 189 CVEs
 before 4.12.14-122.323.1
4.12.14-122.323.1
kernel-source
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 189 CVEs
 before 4.12.14-122.323.1
4.12.14-122.323.1
kernel-syms
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 189 CVEs
 before 4.12.14-122.323.1
4.12.14-122.323.1
kernel-default
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 189 CVEs
 before 4.12.14-122.323.1
4.12.14-122.323.1
kernel-source
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 189 CVEs
 before 4.12.14-122.323.1
4.12.14-122.323.1
kernel-syms
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 189 CVEs
 before 4.12.14-122.323.1
4.12.14-122.323.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 268 CVEs
 before 6.4.0-150700.53.78.1
6.4.0-150700.53.78.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 268 CVEs
 before 6.4.0-150700.53.78.1
6.4.0-150700.53.78.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 268 CVEs
 before 6.4.0-150700.53.78.1.150700.17.43.2
6.4.0-150700.53.78.1.150700.17.43.2
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 268 CVEs
 before 6.4.0-150700.53.78.1
6.4.0-150700.53.78.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 268 CVEs
 before 6.4.0-150700.53.78.1
6.4.0-150700.53.78.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 268 CVEs
 before 6.4.0-150700.53.78.1
6.4.0-150700.53.78.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 268 CVEs
 before 6.4.0-150700.53.78.1
6.4.0-150700.53.78.1
linux-azure
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2
Show 45 moreShow less
4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1
 None known
linux-aws-hwe
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1
Show 45 moreShow less
4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1
 None known
linux-azure
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 45 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71
 None known
linux-gcp
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
Show 45 moreShow less
4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1
 None known
linux-hwe
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 45 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1
 None known
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-oracle
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1
Show 45 moreShow less
4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1
 None known
linux
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 45 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107
 None known
linux-aws
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 45 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-aws-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-4.15
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102
Show 45 moreShow less
4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1
Show 45 moreShow less
5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-4.15
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92
Show 45 moreShow less
4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gcp-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 45 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-ibm-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1
Show 45 moreShow less
5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1
 None known
linux-kvm
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8
Show 45 moreShow less
4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13
Show 45 moreShow less
4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-oracle-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1
 None known
linux-raspi-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1
Show 45 moreShow less
5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1
 None known
linux-aws-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24
Show 45 moreShow less
4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93
 None known
linux-azure-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10
Show 45 moreShow less
4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80
 None known
linux-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42
Show 45 moreShow less
4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21
Show 45 moreShow less
4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.794.15.0-2075.804.15.0-2076.814.15.0-2077.83
 None known
linux-aws-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.4
 None known
linux-azure-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.2
 None known
linux-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1011.12
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.1
 None known
linux
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 45 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110
 None known
linux-aws
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5
Show 45 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1112.119~20.04.1, plus listed versions
5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1
Show 45 moreShow less
5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1
5.15.0-1112.119~20.04.1
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8
Show 45 moreShow less
5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
linux-azure-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
 None known
linux-azure-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1117.126~20.04.1, plus listed versions
5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1
Show 45 moreShow less
5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1
5.15.0-1117.126~20.04.1
dtb-aarch64
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-64kb
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-azure
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-default
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-default-base
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1.160000.2.19
6.12.0-160000.37.1.160000.2.19
kernel-docs
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-kvmsmall
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-obs-build
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-obs-qa
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-rt
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-source
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-syms
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-zfcpdump
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1

History

History
RecordedChangedSources
affectedOSV
affectedOSV
affectedOSV
affectedOSV
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-53062 is a high vulnerability (CVSS 7.8) in Linux, published June 24, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.10%, the 0th percentile. Fixed in linux-lts 6.1.175-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 828 package rows, 1,918 versions, 5,000 references and the rest of 28 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 28 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open