CVE-2026-53281
iommu/vt-d: Avoid NULL pointer dereference or refcount corruption
In the Linux kernel, the following vulnerability has been resolved:
iommu/vt-d: Avoid NULL pointer dereference or refcount corruption
Commit 60f030f7418d ("iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE") fixed a NULL pointer dereference in an unlikely situation partly.
If dev_pasid is not found in the dev_pasids list, it remains NULL. However, the teardown operations are executed unconditionally, this lead to a NULL pointer dereference or refcount corruption.
If the domain was never attached to this IOMMU, info will be NULL, which would cause an immediate dereference when checking --info->refcnt.
Even if info is not NULL, decrementing the refcount without having removed a valid PASID might unbalance the count. This could lead to premature dropping of the refcount to 0, potentially causing a use-after-free for the remaining active devices sharing the domain.
Fix it by returning early if dev_pasid is NULL, before executing the teardown operations.
Issue found by AI review and suggested by Kevin Tian. https://sashiko.dev/#/patchset/20260421031347.1408890-1-zhenzhong.duan%40intel.com
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
8.8
iommu/vt-d: Avoid NULL pointer dereference or refcount corruption
In the Linux kernel, the following vulnerability has been resolved:
iommu/vt-d: Avoid NULL pointer dereference or refcount corruption
Commit 60f030f7418d ("iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE") fixed a NULL pointer dereference in an unlikely situation partly.
If dev_pasid is not found in the dev_pasids list, it remains NULL. However, the teardown operations are executed unconditionally, this lead to a NULL pointer dereference or refcount corruption.
If the domain was never attached to this IOMMU, info will be NULL, which would cause an immediate dereference when checking --info->refcnt.
Even if info is not NULL, decrementing the refcount without having removed a valid PASID might unbalance the count. This could lead to premature dropping of the refcount to 0, potentially causing a use-after-free for the remaining active devices sharing the domain.
Fix it by returning early if dev_pasid is NULL, before executing the teardown operations.
Issue found by AI review and suggested by Kevin Tian. https://sashiko.dev/#/patchset/20260421031347.1408890-1-zhenzhong.duan%40intel.com
- Record
CVE-2026-53281- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-476
- Updated
- 2026-11-02
EUVDEUVD-2026-39886
8.8
In the Linux kernel, the following vulnerability has been resolved:
iommu/vt-d: Avoid NULL pointer dereference or refcount corruption
Commit 60f030f7418d ("iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE") fixed a NULL pointer dereference in an unlikely situation partly.
If dev_pasid is not found in the dev_pasids list, it remains NULL. However, the teardown operations are executed unconditionally, this lead to a NULL pointer dereference or refcount corruption.
If the domain was never attached to this IOMMU, info will be NULL, which would cause an immediate dereference when checking --info->refcnt.
Even if info is not NULL, decrementing the refcount without having removed a valid PASID might unbalance the count. This could lead to premature dropping of the refcount to 0, potentially causing a use-after-free for the remaining active devices sharing the domain.
Fix it by returning early if dev_pasid is NULL, before executing the teardown operations.
Issue found by AI review and suggested by Kevin Tian. https://sashiko.dev/#/patchset/20260421031347.1408890-1-zhenzhong.duan%40intel.com
- Record
EUVD-2026-39886- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-p9cf-q2gf-35mq
8.8
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid NULL...
In the Linux kernel, the following vulnerability has been resolved:
iommu/vt-d: Avoid NULL pointer dereference or refcount corruption
Commit 60f030f7418d ("iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE") fixed a NULL pointer dereference in an unlikely situation partly.
If dev_pasid is not found in the dev_pasids list, it remains NULL. However, the teardown operations are executed unconditionally, this lead to a NULL pointer dereference or refcount corruption.
If the domain was never attached to this IOMMU, info will be NULL, which would cause an immediate dereference when checking --info->refcnt.
Even if info is not NULL, decrementing the refcount without having removed a valid PASID might unbalance the count. This could lead to premature dropping of the refcount to 0, potentially causing a use-after-free for the remaining active devices sharing the domain.
Fix it by returning early if dev_pasid is NULL, before executing the teardown operations.
Issue found by AI review and suggested by Kevin Tian. https://sashiko.dev/#/patchset/20260421031347.1408890-1-zhenzhong.duan%40intel.com
- Record
GHSA-p9cf-q2gf-35mq- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-476
- Updated
- 2026-11-02
NVD
8.8
In the Linux kernel, the following vulnerability has been resolved:
iommu/vt-d: Avoid NULL pointer dereference or refcount corruption
Commit 60f030f7418d ("iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE") fixed a NULL pointer dereference in an unlikely situation partly.
If dev_pasid is not found in the dev_pasids list, it remains NULL. However, the teardown operations are executed unconditionally, this lead to a NULL pointer dereference or refcount corruption.
If the domain was never attached to this IOMMU, info will be NULL, which would cause an immediate dereference when checking --info->refcnt.
Even if info is not NULL, decrementing the refcount without having removed a valid PASID might unbalance the count. This could lead to premature dropping of the refcount to 0, potentially causing a use-after-free for the remaining active devices sharing the domain.
Fix it by returning early if dev_pasid is NULL, before executing the teardown operations.
Issue found by AI review and suggested by Kevin Tian. https://sashiko.dev/#/patchset/20260421031347.1408890-1-zhenzhong.duan%40intel.com
- Record
CVE-2026-53281- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-476
- Updated
- 2026-11-02
OSVBELL-CVE-2026-53281
8.8
- Record
BELL-CVE-2026-53281- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-03
OSV
8.8
iommu/vt-d: Avoid NULL pointer dereference or refcount corruption
In the Linux kernel, the following vulnerability has been resolved:
iommu/vt-d: Avoid NULL pointer dereference or refcount corruption
Commit 60f030f7418d ("iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE") fixed a NULL pointer dereference in an unlikely situation partly.
If dev_pasid is not found in the dev_pasids list, it remains NULL. However, the teardown operations are executed unconditionally, this lead to a NULL pointer dereference or refcount corruption.
If the domain was never attached to this IOMMU, info will be NULL, which would cause an immediate dereference when checking --info->refcnt.
Even if info is not NULL, decrementing the refcount without having removed a valid PASID might unbalance the count. This could lead to premature dropping of the refcount to 0, potentially causing a use-after-free for the remaining active devices sharing the domain.
Fix it by returning early if dev_pasid is NULL, before executing the teardown operations.
Issue found by AI review and suggested by Kevin Tian. https://sashiko.dev/#/patchset/20260421031347.1408890-1-zhenzhong.duan%40intel.com
- Record
CVE-2026-53281- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
Show 34 moreShow less
OSVDEBIAN-CVE-2026-53281
8.8
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid NULL pointer dereference or refcount corruption Commit 60f030f7418d ("iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE") fixed a NULL pointer dereference in an unlikely situation partly. If dev_pasid is not found in the dev_pasids list, it remains NULL. However, the teardown operations are executed unconditionally, this lead to a NULL pointer dereference or refcount corruption. If the domain was never attached to this IOMMU, info will be NULL, which would cause an immediate dereference when checking --info->refcnt. Even if info is not NULL, decrementing the refcount without having removed a valid PASID might unbalance the count. This could lead to premature dropping of the refcount to 0, potentially causing a use-after-free for the remaining active devices sharing the domain. Fix it by returning early if dev_pasid is NULL, before executing the teardown operations. Issue found by AI review and suggested by Kevin Tian. https://sashiko.dev/#/patchset/20260421031347.1408890-1-zhenzhong.duan%40intel.com
- Record
DEBIAN-CVE-2026-53281- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:47017
7.8
Red Hat Security Advisory: kernel security, bug fix, and enhancement update
- Record
RHSA-2026:47017- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:47040
7.0
Red Hat Security Advisory: kernel security, bug fix, and enhancement update
- Record
RHSA-2026:47040- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRLSA-2026:47017
7.0
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
-
kernel: net: bridge: use a stable FDB dst snapshot in RCU readers (CVE-2026-46086)
-
kernel: ipv6: fix possible UAF in icmpv6_rcv() (CVE-2026-53006)
-
kernel: tipc: fix double-free in tipc_buf_append() (CVE-2026-52993)
-
kernel: iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (CVE-2026-53281)
Bug Fix(es) and Enhancement(s):
- rxrpc: Address CVE-2026-43500 [rhel-10.2.z] (JIRA:Rocky Linux-178254)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:47017- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRLSA-2026:47040
7.0
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
-
kernel: xfrm: Duplicate SPI Handling (CVE-2025-39797)
-
kernel: lib/buildid: use __kernel_read() for sleepable context (CVE-2026-23002)
-
kernel: futex: Drop CLONE_THREAD requirement for private default hash alloc (CVE-2026-52973)
-
kernel: iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (CVE-2026-53281)
-
kernel: blk-mq: pop cached request if it is usable (CVE-2026-64017)
Bug Fix(es) and Enhancement(s):
-
general protection fault during exportfs / nfsd4_revoke_states [rhel-9.8.z] (JIRA:Rocky Linux-188257)
-
Enable Pretimeout Watchdog Panic Functionality on x86 [rhel-9.8.z] (JIRA:Rocky Linux-193729)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:47040- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-53281
7.1
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid NULL pointer dereference or refcount corruption Commit 60f030f7418d ("iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE") fixed a NULL pointer dereference in an unlikely situation partly. If dev_pasid is not found in the dev_pasids list, it remains NULL. However, the teardown operations are executed unconditionally, this lead to a NULL pointer dereference or refcount corruption. If the domain was never attached to this IOMMU, info will be NULL, which would cause an immediate dereference when checking --info->refcnt. Even if info is not NULL, decrementing the refcount without having removed a valid PASID might unbalance the count. This could lead to premature dropping of the refcount to 0, potentially causing a use-after-free for the remaining active devices sharing the domain. Fix it by returning early if dev_pasid is NULL, before executing the teardown operations. Issue found by AI review and suggested by Kevin Tian. https://sashiko.dev/#/patchset/20260421031347.1408890-1-zhenzhong.duan%40intel.com
- Record
UBUNTU-CVE-2026-53281- CVSS 4.0
- 7.1 High
CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N - CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-06
OSVALSA-2026:47017 No score
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
- kernel: net: bridge: use a stable FDB dst snapshot in RCU readers (CVE-2026-46086)
- kernel: ipv6: fix possible UAF in icmpv6_rcv() (CVE-2026-53006)
- kernel: tipc: fix double-free in tipc_buf_append() (CVE-2026-52993)
- kernel: iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (CVE-2026-53281)
Bug Fix(es) and Enhancement(s):
- rxrpc: Address CVE-2026-43500 [almalinux-10.2.z] (JIRA:AlmaLinux-178254)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:47017- Updated
- 2026-11-02
OSVALSA-2026:47040 No score
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
- kernel: xfrm: Duplicate SPI Handling (CVE-2025-39797)
- kernel: lib/buildid: use __kernel_read() for sleepable context (CVE-2026-23002)
- kernel: futex: Drop CLONE_THREAD requirement for private default hash alloc (CVE-2026-52973)
- kernel: iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (CVE-2026-53281)
- kernel: blk-mq: pop cached request if it is usable (CVE-2026-64017)
Bug Fix(es) and Enhancement(s):
- general protection fault during exportfs / nfsd4_revoke_states [almalinux-9.8.z] (JIRA:AlmaLinux-188257)
- Enable Pretimeout Watchdog Panic Functionality on x86 [almalinux-9.8.z] (JIRA:AlmaLinux-193729)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:47040- Updated
- 2026-11-02
OSVCLSA-2026-1789986443 No score
kernel: Fix of 121 CVEs
- dlm: validate length in dlm_search_rsb_tree {CVE-2026-43125}
- mm/damon/core: validate ranges in damon_set_regions() {CVE-2026-68165}
- netpoll: Fix deadlock in memory allocation under spinlock {CVE-2025-68169}
- drm/amdkfd: Check bounds on CRIU restore queue type and mqd size {CVE-2026-68258}
- gve: fix Rx queue stall on alloc failure {CVE-2026-68129}
- drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved {CVE-2026-68234}
- libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE {CVE-2026-68159}
- media: v4l2-ctrls: validate HEVC active reference counts {CVE-2026-68206}
- drm/i915/hdcp: check streams[] bounds before overflow {CVE-2026-68253}
- drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() {CVE-2026-68245}
- drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON() {CVE-2026-68115}
- drm/i915: Return NULL on error in active_instance {CVE-2026-68248}
- smb: client: validate DFS referral PathConsumed {CVE-2026-68343}
- ext4: fix use-after-free in update_super_work when racing with umount {CVE-2026-31446}
- debugobjects: Plug race against a concurrent OOM disable {CVE-2026-68090}
- HID: wacom: stop hardware after post-start probe failures {CVE-2026-68091}
- drm/xe/pt: Reset current_op in xe_pt_update_ops_init() {CVE-2026-68264}
- net: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOAD {CVE-2026-68288}
- drm/amdgpu/gfx12: replace BUG_ON() with WARN_ON() {CVE-2026-68113}
- openvswitch: fix GSO userspace truncation underflow {CVE-2026-68123}
- drm/amd/display: use kvzalloc to allocate struct dc {CVE-2026-68436}
- drm/i915/gem: Add missing nospec on parallel submit slot {CVE-2026-68269}
- Bluetooth: MGMT: revalidate LOAD_CONN_PARAM queued update {CVE-2026-68394}
- sctp: avoid auth_enable sysctl UAF during netns teardown {CVE-2026-68162}
- wifi: mt76: mt7925: fix crash in reset link replay {CVE-2026-68307}
- Bluetooth: hci_sync: extend conn_hash lookup critical sections {CVE-2026-68393}
- drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU {CVE-2026-68243}
- block: fix memory leak in __blkdev_issue_zero_pages {CVE-2026-68348}
- drm/amdgpu/gfx: fix cleaner shader IB buffer overflow {CVE-2026-68276}
- tracing: Do not call map->ops->elt_free() if elt_alloc() fails {CVE-2026-64173}
- wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin {CVE-2026-68362}
- ovl: check access to copy_file_range source with src mounter creds {CVE-2026-68448}
- drm/nouveau: fix reversed error cleanup order in ucopy functions {CVE-2026-68271}
- vxlan: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-68432}
- drm/vmwgfx: Validate vmw_surface_metadata::array_size {CVE-2026-68446}
- net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM {CVE-2026-68296}
- Input: elan_i2c - prevent division by zero and arithmetic underflow {CVE-2026-64275}
- iomap: fix out-of-bounds bitmap_set() with zero-length range {CVE-2026-68145}
- vsock: fix lock inversion in vsock_assign_transport() {CVE-2025-40231}
- ASoC: nau8821: Cancel delayed work on component remove {CVE-2026-45963}
- ext4: validate p_idx bounds in ext4_ext_correct_indexes {CVE-2026-31449}
- ipc: fix memleak if msg_init_ns failed in create_ipc_ns {CVE-2024-53175}
- tls: make sure to abort the stream if headers are bogus {CVE-2025-39946}
- ipv6: prevent infinite loop in rt6_nlmsg_size() {CVE-2025-38588}
- gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL {CVE-2026-23386}
- xsk: validate MTU against usable frame size on bind {CVE-2026-43092}
- RDMA/irdma: Harden depth calculation functions {CVE-2026-31491}
- iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() {CVE-2026-31505}
- net/ip6_tunnel: Prevent perpetual tunnel growth {CVE-2025-40173}
- net/mlx5: Fix deadlock between devlink lock and esw->wq {CVE-2026-43468}
- mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0] {CVE-2026-31458}
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling {CVE-2026-52946}
- nvmet: move async event…
- Record
CLSA-2026-1789986443- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:21388-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2025-10263: arm64: cputype: Add C1-Premium definitions (bsc#1266290).
- CVE-2025-39894: netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm (bsc#1262430).
- CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
- CVE-2026-23248: perf: Make perf_pmu_unregister() useable (bsc#1259800).
- CVE-2026-23394: Revert: "af_unix: Remove lock dance in unix_peek_fds()." (bsc#1260565).
- CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
- CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
- CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
- CVE-2026-31438: netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators (bsc#1267824).
- CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
- CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
- CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
- CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (bsc#1267816).
- CVE-2026-31479: drm/xe: always keep track of remap prev/next (bsc#1262765).
- CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
- CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
- CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
- CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
- CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
- CVE-2026-31560: spi: spi-dw-dma: fix print error log when wait finish transaction (bsc#1263057).
- CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
- CVE-2026-31646: net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() (bsc#1263796).
- CVE-2026-31647: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (bsc#1263581).
- CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
- CVE-2026-31664: xfrm: clear trailing padding in build_polexpire() (bsc#1263578).
- CVE-2026-31665: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
- CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
- CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
- CVE-2026-31674: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (bsc#1263568).
- CVE-2026-31680: net: ipv6: flowlabel: defer exclusive option free until RCU teardown (bsc#1263563).
- CVE-2026-31693: cifs: some missing initializations on replay (bsc#1267744).
- CVE-2026-31743: nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy (bsc#1264067).
- CVE-2026-31752: bridge: br_nd_send: validate ND option lengths (bsc#1264045).
- CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
- CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
- CVE-2026-43014,CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010 bsc#1264012).
- CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
- CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
- CVE-2026-43024: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).
- CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934).
- CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
- CVE-2026-43035: net:…
- Record
openSUSE-SU-2026:21388-1- Updated
- 2026-11-02
OSVROOT-OS-DEBIAN-13-CVE-2026-53281 No score
CVE-2026-53281 in linux - Patched by Root
Root has patched CVE-2026-53281 in the linux package for Root:Debian:13. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-13-CVE-2026-53281- Updated
- 2026-11-03
OSVROOT-OS-UBUNTU-2404-CVE-2026-53281 No score
CVE-2026-53281 in linux - Patched by Root
Root has patched CVE-2026-53281 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.
- Record
ROOT-OS-UBUNTU-2404-CVE-2026-53281- Updated
- 2026-11-06
OSVSUSE-SU-2026:22521-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
- CVE-2025-71294: drm/amdgpu: fix NULL pointer issue buffer funcs (bsc#1264562).
- CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
- CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
- CVE-2026-31462: drm/amdgpu: prevent immediate PASID reuse case (bsc#1262655).
- CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
- CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
- CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
- CVE-2026-31677: crypto: af_alg - limit RX SG extraction by receive buffer budget (bsc#1263560).
- CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
- CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
- CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
- CVE-2026-43079: perf/x86/intel/uncore: Skip discovery table for offline dies (bsc#1264228).
- CVE-2026-43080: l2tp: Drop large packets with UDP encap (bsc#1264236).
- CVE-2026-43081: net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ (bsc#1264241).
- CVE-2026-43085: netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (bsc#1264230).
- CVE-2026-43086: ipvs: fix NULL deref in ip_vs_add_service error path (bsc#1264286).
- CVE-2026-43089: xfrm_user: fix info leak in build_mapping() (bsc#1264261).
- CVE-2026-43093: xsk: tighten UMEM headroom validation to account for tailroom and min frame (bsc#1264254).
- CVE-2026-43107: xfrm: account XFRMA_IF_ID in aevent size calculation (bsc#1264258).
- CVE-2026-43128: RDMA/umem: Fix double dma_buf_unpin in failure path (bsc#1264612).
- CVE-2026-43139: xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (bsc#1264294).
- CVE-2026-43233: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (bsc#1264337).
- CVE-2026-43238: net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() (bsc#1264320).
- CVE-2026-43303: mm/page_alloc: clear page->private in free_pages_prepare() (bsc#1264974).
- CVE-2026-43336: lib/crypto: chacha: Zeroize permuted_state before it leaves scope (bsc#1265113).
- CVE-2026-43420: ceph: fix i_nlink underrun during async unlink (bsc#1264814).
- CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).
- CVE-2026-43472: unshare: fix unshare_fs() handling (bsc#1264748).
- CVE-2026-43492: lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() (bsc#1265629).
- CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
- CVE-2026-45838: bpf: fix end-of-list detection in cgroup_storage_get_next_key() (bsc#1266396).
- CVE-2026-45848: apparmor: fix NULL sock in aa_sock_file_perm (bsc#1266734).
- CVE-2026-45891: net: hns3: fix double free issue for tx spare buffer (bsc#1266717).
- CVE-2026-45912: ext4: don't cache extent during splitting extent (bsc#1266899).
- CVE-2026-45948: ext4: fix memory leak in ext4_ext_shift_extents() (bsc#1266929).
- CVE-2026-45985: ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O (bsc#1266700).
- CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).
- CVE-2026-46053: net: rds: fix MR cleanup on copy error (bsc#1267427).
- CVE-2026-46063: x86/shstk: Prevent deadlock during shstk sigreturn (bsc#1267228).
- CVE-2026-46065: fbdev: defio: Disconnect deferred I/O from the lifetime of struct (bsc#1267458).
- CVE-2026-46069: wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() (bsc#1267437).
- CVE-2026-46071: KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12 (bsc#1267591).…
- Record
SUSE-SU-2026:22521-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:22522-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
- CVE-2025-71294: drm/amdgpu: fix NULL pointer issue buffer funcs (bsc#1264562).
- CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
- CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
- CVE-2026-31462: drm/amdgpu: prevent immediate PASID reuse case (bsc#1262655).
- CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
- CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
- CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
- CVE-2026-31677: crypto: af_alg - limit RX SG extraction by receive buffer budget (bsc#1263560).
- CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
- CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
- CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
- CVE-2026-43079: perf/x86/intel/uncore: Skip discovery table for offline dies (bsc#1264228).
- CVE-2026-43080: l2tp: Drop large packets with UDP encap (bsc#1264236).
- CVE-2026-43081: net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ (bsc#1264241).
- CVE-2026-43085: netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (bsc#1264230).
- CVE-2026-43086: ipvs: fix NULL deref in ip_vs_add_service error path (bsc#1264286).
- CVE-2026-43089: xfrm_user: fix info leak in build_mapping() (bsc#1264261).
- CVE-2026-43093: xsk: tighten UMEM headroom validation to account for tailroom and min frame (bsc#1264254).
- CVE-2026-43107: xfrm: account XFRMA_IF_ID in aevent size calculation (bsc#1264258).
- CVE-2026-43128: RDMA/umem: Fix double dma_buf_unpin in failure path (bsc#1264612).
- CVE-2026-43139: xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (bsc#1264294).
- CVE-2026-43233: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (bsc#1264337).
- CVE-2026-43238: net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() (bsc#1264320).
- CVE-2026-43303: mm/page_alloc: clear page->private in free_pages_prepare() (bsc#1264974).
- CVE-2026-43336: lib/crypto: chacha: Zeroize permuted_state before it leaves scope (bsc#1265113).
- CVE-2026-43420: ceph: fix i_nlink underrun during async unlink (bsc#1264814).
- CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).
- CVE-2026-43472: unshare: fix unshare_fs() handling (bsc#1264748).
- CVE-2026-43492: lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() (bsc#1265629).
- CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
- CVE-2026-45838: bpf: fix end-of-list detection in cgroup_storage_get_next_key() (bsc#1266396).
- CVE-2026-45848: apparmor: fix NULL sock in aa_sock_file_perm (bsc#1266734).
- CVE-2026-45891: net: hns3: fix double free issue for tx spare buffer (bsc#1266717).
- CVE-2026-45912: ext4: don't cache extent during splitting extent (bsc#1266899).
- CVE-2026-45948: ext4: fix memory leak in ext4_ext_shift_extents() (bsc#1266929).
- CVE-2026-45985: ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O (bsc#1266700).
- CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).
- CVE-2026-46053: net: rds: fix MR cleanup on copy error (bsc#1267427).
- CVE-2026-46063: x86/shstk: Prevent deadlock during shstk sigreturn (bsc#1267228).
- CVE-2026-46065: fbdev: defio: Disconnect deferred I/O from the lifetime of struct (bsc#1267458).
- CVE-2026-46069: wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() (bsc#1267437).
- CVE-2026-46071: KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12…
- Record
SUSE-SU-2026:22522-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:22665-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
- CVE-2025-71294: drm/amdgpu: fix NULL pointer issue buffer funcs (bsc#1264562).
- CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
- CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
- CVE-2026-31462: drm/amdgpu: prevent immediate PASID reuse case (bsc#1262655).
- CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
- CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
- CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
- CVE-2026-31677: crypto: af_alg - limit RX SG extraction by receive buffer budget (bsc#1263560).
- CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
- CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
- CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
- CVE-2026-43079: perf/x86/intel/uncore: Skip discovery table for offline dies (bsc#1264228).
- CVE-2026-43080: l2tp: Drop large packets with UDP encap (bsc#1264236).
- CVE-2026-43081: net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ (bsc#1264241).
- CVE-2026-43085: netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (bsc#1264230).
- CVE-2026-43086: ipvs: fix NULL deref in ip_vs_add_service error path (bsc#1264286).
- CVE-2026-43089: xfrm_user: fix info leak in build_mapping() (bsc#1264261).
- CVE-2026-43093: xsk: tighten UMEM headroom validation to account for tailroom and min frame (bsc#1264254).
- CVE-2026-43107: xfrm: account XFRMA_IF_ID in aevent size calculation (bsc#1264258).
- CVE-2026-43128: RDMA/umem: Fix double dma_buf_unpin in failure path (bsc#1264612).
- CVE-2026-43139: xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (bsc#1264294).
- CVE-2026-43233: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (bsc#1264337).
- CVE-2026-43238: net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() (bsc#1264320).
- CVE-2026-43303: mm/page_alloc: clear page->private in free_pages_prepare() (bsc#1264974).
- CVE-2026-43336: lib/crypto: chacha: Zeroize permuted_state before it leaves scope (bsc#1265113).
- CVE-2026-43420: ceph: fix i_nlink underrun during async unlink (bsc#1264814).
- CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).
- CVE-2026-43472: unshare: fix unshare_fs() handling (bsc#1264748).
- CVE-2026-43492: lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() (bsc#1265629).
- CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
- CVE-2026-45838: bpf: fix end-of-list detection in cgroup_storage_get_next_key() (bsc#1266396).
- CVE-2026-45848: apparmor: fix NULL sock in aa_sock_file_perm (bsc#1266734).
- CVE-2026-45891: net: hns3: fix double free issue for tx spare buffer (bsc#1266717).
- CVE-2026-45912: ext4: don't cache extent during splitting extent (bsc#1266899).
- CVE-2026-45948: ext4: fix memory leak in ext4_ext_shift_extents() (bsc#1266929).
- CVE-2026-45985: ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O (bsc#1266700).
- CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).
- CVE-2026-46053: net: rds: fix MR cleanup on copy error (bsc#1267427).
- CVE-2026-46063: x86/shstk: Prevent deadlock during shstk sigreturn (bsc#1267228).
- CVE-2026-46065: fbdev: defio: Disconnect deferred I/O from the lifetime of struct (bsc#1267458).
- CVE-2026-46069: wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() (bsc#1267437).
- CVE-2026-46071: KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12 (bsc#1267591).…
- Record
SUSE-SU-2026:22665-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:22666-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
- CVE-2025-71294: drm/amdgpu: fix NULL pointer issue buffer funcs (bsc#1264562).
- CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
- CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
- CVE-2026-31462: drm/amdgpu: prevent immediate PASID reuse case (bsc#1262655).
- CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
- CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
- CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
- CVE-2026-31677: crypto: af_alg - limit RX SG extraction by receive buffer budget (bsc#1263560).
- CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
- CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
- CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
- CVE-2026-43079: perf/x86/intel/uncore: Skip discovery table for offline dies (bsc#1264228).
- CVE-2026-43080: l2tp: Drop large packets with UDP encap (bsc#1264236).
- CVE-2026-43081: net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ (bsc#1264241).
- CVE-2026-43085: netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (bsc#1264230).
- CVE-2026-43086: ipvs: fix NULL deref in ip_vs_add_service error path (bsc#1264286).
- CVE-2026-43089: xfrm_user: fix info leak in build_mapping() (bsc#1264261).
- CVE-2026-43093: xsk: tighten UMEM headroom validation to account for tailroom and min frame (bsc#1264254).
- CVE-2026-43107: xfrm: account XFRMA_IF_ID in aevent size calculation (bsc#1264258).
- CVE-2026-43128: RDMA/umem: Fix double dma_buf_unpin in failure path (bsc#1264612).
- CVE-2026-43139: xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (bsc#1264294).
- CVE-2026-43233: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (bsc#1264337).
- CVE-2026-43238: net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() (bsc#1264320).
- CVE-2026-43303: mm/page_alloc: clear page->private in free_pages_prepare() (bsc#1264974).
- CVE-2026-43336: lib/crypto: chacha: Zeroize permuted_state before it leaves scope (bsc#1265113).
- CVE-2026-43420: ceph: fix i_nlink underrun during async unlink (bsc#1264814).
- CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).
- CVE-2026-43472: unshare: fix unshare_fs() handling (bsc#1264748).
- CVE-2026-43492: lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() (bsc#1265629).
- CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
- CVE-2026-45838: bpf: fix end-of-list detection in cgroup_storage_get_next_key() (bsc#1266396).
- CVE-2026-45848: apparmor: fix NULL sock in aa_sock_file_perm (bsc#1266734).
- CVE-2026-45891: net: hns3: fix double free issue for tx spare buffer (bsc#1266717).
- CVE-2026-45912: ext4: don't cache extent during splitting extent (bsc#1266899).
- CVE-2026-45948: ext4: fix memory leak in ext4_ext_shift_extents() (bsc#1266929).
- CVE-2026-45985: ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O (bsc#1266700).
- CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).
- CVE-2026-46053: net: rds: fix MR cleanup on copy error (bsc#1267427).
- CVE-2026-46063: x86/shstk: Prevent deadlock during shstk sigreturn (bsc#1267228).
- CVE-2026-46065: fbdev: defio: Disconnect deferred I/O from the lifetime of struct (bsc#1267458).
- CVE-2026-46069: wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() (bsc#1267437).
- CVE-2026-46071: KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12…
- Record
SUSE-SU-2026:22666-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:22742-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2025-10263: arm64: cputype: Add C1-Premium definitions (bsc#1266290).
- CVE-2025-39894: netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm (bsc#1262430).
- CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
- CVE-2026-23248: perf: Make perf_pmu_unregister() useable (bsc#1259800).
- CVE-2026-23394: Revert: "af_unix: Remove lock dance in unix_peek_fds()." (bsc#1260565).
- CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
- CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
- CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
- CVE-2026-31438: netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators (bsc#1267824).
- CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
- CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
- CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
- CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (bsc#1267816).
- CVE-2026-31479: drm/xe: always keep track of remap prev/next (bsc#1262765).
- CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
- CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
- CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
- CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
- CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
- CVE-2026-31560: spi: spi-dw-dma: fix print error log when wait finish transaction (bsc#1263057).
- CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
- CVE-2026-31646: net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() (bsc#1263796).
- CVE-2026-31647: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (bsc#1263581).
- CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
- CVE-2026-31664: xfrm: clear trailing padding in build_polexpire() (bsc#1263578).
- CVE-2026-31665: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
- CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
- CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
- CVE-2026-31674: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (bsc#1263568).
- CVE-2026-31680: net: ipv6: flowlabel: defer exclusive option free until RCU teardown (bsc#1263563).
- CVE-2026-31693: cifs: some missing initializations on replay (bsc#1267744).
- CVE-2026-31743: nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy (bsc#1264067).
- CVE-2026-31752: bridge: br_nd_send: validate ND option lengths (bsc#1264045).
- CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
- CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
- CVE-2026-43014,CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010 bsc#1264012).
- CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
- CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
- CVE-2026-43024: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).
- CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934).
- CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
- CVE-2026-43035: net:…
- Record
SUSE-SU-2026:22742-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:22769-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2025-10263: arm64: cputype: Add C1-Premium definitions (bsc#1266290).
- CVE-2025-39894: netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm (bsc#1262430).
- CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
- CVE-2026-23248: perf: Make perf_pmu_unregister() useable (bsc#1259800).
- CVE-2026-23394: Revert: "af_unix: Remove lock dance in unix_peek_fds()." (bsc#1260565).
- CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
- CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
- CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
- CVE-2026-31438: netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators (bsc#1267824).
- CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
- CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
- CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
- CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (bsc#1267816).
- CVE-2026-31479: drm/xe: always keep track of remap prev/next (bsc#1262765).
- CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
- CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
- CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
- CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
- CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
- CVE-2026-31560: spi: spi-dw-dma: fix print error log when wait finish transaction (bsc#1263057).
- CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
- CVE-2026-31646: net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() (bsc#1263796).
- CVE-2026-31647: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (bsc#1263581).
- CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
- CVE-2026-31664: xfrm: clear trailing padding in build_polexpire() (bsc#1263578).
- CVE-2026-31665: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
- CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
- CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
- CVE-2026-31674: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (bsc#1263568).
- CVE-2026-31680: net: ipv6: flowlabel: defer exclusive option free until RCU teardown (bsc#1263563).
- CVE-2026-31693: cifs: some missing initializations on replay (bsc#1267744).
- CVE-2026-31743: nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy (bsc#1264067).
- CVE-2026-31752: bridge: br_nd_send: validate ND option lengths (bsc#1264045).
- CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
- CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
- CVE-2026-43014,CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010 bsc#1264012).
- CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
- CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
- CVE-2026-43024: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).
- CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934).
- CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
- CVE-2026-43035: net:…
- Record
SUSE-SU-2026:22769-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:22812-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2025-10263: arm64: cputype: Add C1-Premium definitions (bsc#1266290).
- CVE-2025-39894: netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm (bsc#1262430).
- CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
- CVE-2026-23248: perf: Make perf_pmu_unregister() useable (bsc#1259800).
- CVE-2026-23394: Revert: "af_unix: Remove lock dance in unix_peek_fds()." (bsc#1260565).
- CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
- CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
- CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
- CVE-2026-31438: netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators (bsc#1267824).
- CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
- CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
- CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
- CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (bsc#1267816).
- CVE-2026-31479: drm/xe: always keep track of remap prev/next (bsc#1262765).
- CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
- CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
- CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
- CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
- CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
- CVE-2026-31560: spi: spi-dw-dma: fix print error log when wait finish transaction (bsc#1263057).
- CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
- CVE-2026-31646: net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() (bsc#1263796).
- CVE-2026-31647: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (bsc#1263581).
- CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
- CVE-2026-31664: xfrm: clear trailing padding in build_polexpire() (bsc#1263578).
- CVE-2026-31665: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
- CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
- CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
- CVE-2026-31674: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (bsc#1263568).
- CVE-2026-31680: net: ipv6: flowlabel: defer exclusive option free until RCU teardown (bsc#1263563).
- CVE-2026-31693: cifs: some missing initializations on replay (bsc#1267744).
- CVE-2026-31743: nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy (bsc#1264067).
- CVE-2026-31752: bridge: br_nd_send: validate ND option lengths (bsc#1264045).
- CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
- CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
- CVE-2026-43014,CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010 bsc#1264012).
- CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
- CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
- CVE-2026-43024: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).
- CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934).
- CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
- CVE-2026-43035: net:…
- Record
SUSE-SU-2026:22812-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:22835-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2025-10263: arm64: cputype: Add C1-Premium definitions (bsc#1266290).
- CVE-2025-39894: netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm (bsc#1262430).
- CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
- CVE-2026-23248: perf: Make perf_pmu_unregister() useable (bsc#1259800).
- CVE-2026-23394: Revert: "af_unix: Remove lock dance in unix_peek_fds()." (bsc#1260565).
- CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
- CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
- CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
- CVE-2026-31438: netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators (bsc#1267824).
- CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
- CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
- CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
- CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (bsc#1267816).
- CVE-2026-31479: drm/xe: always keep track of remap prev/next (bsc#1262765).
- CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
- CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
- CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
- CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
- CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
- CVE-2026-31560: spi: spi-dw-dma: fix print error log when wait finish transaction (bsc#1263057).
- CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
- CVE-2026-31646: net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() (bsc#1263796).
- CVE-2026-31647: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (bsc#1263581).
- CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
- CVE-2026-31664: xfrm: clear trailing padding in build_polexpire() (bsc#1263578).
- CVE-2026-31665: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
- CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
- CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
- CVE-2026-31674: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (bsc#1263568).
- CVE-2026-31680: net: ipv6: flowlabel: defer exclusive option free until RCU teardown (bsc#1263563).
- CVE-2026-31693: cifs: some missing initializations on replay (bsc#1267744).
- CVE-2026-31743: nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy (bsc#1264067).
- CVE-2026-31752: bridge: br_nd_send: validate ND option lengths (bsc#1264045).
- CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
- CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
- CVE-2026-43014,CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010 bsc#1264012).
- CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
- CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
- CVE-2026-43024: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).
- CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934).
- CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
- CVE-2026-43035: net:…
- Record
SUSE-SU-2026:22835-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:2799-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2025-10263: arm64: cputype: Add C1-Ultra definitions (bsc#1266290).
- CVE-2025-40216: io_uring/rsrc: don't rely on user vaddr alignment (bsc#1259764).
- CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
- CVE-2025-68822: Input: alps - fix use-after-free bugs caused by dev3_register_work (bsc#1256668).
- CVE-2025-71294: drm/amdgpu: fix NULL pointer issue buffer funcs (bsc#1264562).
- CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
- CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
- CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
- CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
- CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
- CVE-2026-31462: drm/amdgpu: prevent immediate PASID reuse case (bsc#1262655).
- CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
- CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (bsc#1267816).
- CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
- CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
- CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
- CVE-2026-31500: Bluetooth: hci_sync: Remove remaining dependencies of hci_request (bsc#1262993).
- CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
- CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
- CVE-2026-31560: spi: spi-dw-dma: fix print error log when wait finish transaction (bsc#1263057).
- CVE-2026-31592: KVM: SEV: Protect all of sev_mem_enc_register_region() with kvm->lock (bsc#1263123).
- CVE-2026-31593: KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU (bsc#1263124).
- CVE-2026-31647: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (bsc#1263581).
- CVE-2026-31664: xfrm: clear trailing padding in build_polexpire() (bsc#1263578).
- CVE-2026-31665: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
- CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
- CVE-2026-31674: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (bsc#1263568).
- CVE-2026-31677: crypto: af_alg - limit RX SG extraction by receive buffer budget (bsc#1263560).
- CVE-2026-31680: net: ipv6: flowlabel: defer exclusive option free until RCU teardown (bsc#1263563).
- CVE-2026-31693: cifs: some missing initializations on replay (bsc#1267744).
- CVE-2026-31697: crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed (bsc#1264116).
- CVE-2026-31698: crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed (bsc#1263880).
- CVE-2026-31699: crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed (bsc#1263879).
- CVE-2026-31752: bridge: br_nd_send: validate ND option lengths (bsc#1264045).
- CVE-2026-31759: usb: ulpi: fix double free in ulpi_register_interface() error path (bsc#1264076).
- CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
- CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
- CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
- CVE-2026-43023: Bluetooth: SCO: fix race conditions in sco_sock_connect() (bsc#1264137).
- CVE-2026-43024: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).
- CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated…
- Record
SUSE-SU-2026:2799-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:2800-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2025-40216: io_uring/rsrc: don't rely on user vaddr alignment (bsc#1259764).
- CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
- CVE-2025-71294: drm/amdgpu: fix NULL pointer issue buffer funcs (bsc#1264562).
- CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
- CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
- CVE-2026-31462: drm/amdgpu: prevent immediate PASID reuse case (bsc#1262655).
- CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
- CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
- CVE-2026-31647: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (bsc#1263581).
- CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
- CVE-2026-31677: crypto: af_alg - limit RX SG extraction by receive buffer budget (bsc#1263560).
- CVE-2026-31697: crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed (bsc#1264116).
- CVE-2026-31698: crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed (bsc#1263880).
- CVE-2026-31699: crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed (bsc#1263879).
- CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
- CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
- CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
- CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
- CVE-2026-43053: xfs: close crash window in attr dabtree inactivation (bsc#1264084).
- CVE-2026-43074: eventpoll: defer struct eventpoll free to RCU grace period (bsc#1264263).
- CVE-2026-43079: perf/x86/intel/uncore: Skip discovery table for offline dies (bsc#1264228).
- CVE-2026-43080: l2tp: Drop large packets with UDP encap (bsc#1264236).
- CVE-2026-43081: net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ (bsc#1264241).
- CVE-2026-43085: netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (bsc#1264230).
- CVE-2026-43086: ipvs: fix NULL deref in ip_vs_add_service error path (bsc#1264286).
- CVE-2026-43089: xfrm_user: fix info leak in build_mapping() (bsc#1264261).
- CVE-2026-43093: xsk: tighten UMEM headroom validation to account for tailroom and min frame (bsc#1264254).
- CVE-2026-43094: ixgbevf: add missing negotiate_features op to Hyper-V ops table (bsc#1264231).
- CVE-2026-43107: xfrm: account XFRMA_IF_ID in aevent size calculation (bsc#1264258).
- CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1264484).
- CVE-2026-43128: RDMA/umem: Fix double dma_buf_unpin in failure path (bsc#1264612).
- CVE-2026-43139: xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (bsc#1264294).
- CVE-2026-43233: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (bsc#1264337).
- CVE-2026-43238: net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() (bsc#1264320).
- CVE-2026-43303: mm/page_alloc: clear page->private in free_pages_prepare() (bsc#1264974).
- CVE-2026-43336: lib/crypto: chacha: Zeroize permuted_state before it leaves scope (bsc#1265113).
- CVE-2026-43420: ceph: fix i_nlink underrun during async unlink (bsc#1264814).
- CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).
- CVE-2026-43472: unshare: fix unshare_fs() handling (bsc#1264748).
- CVE-2026-43492: lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() (bsc#1265629).
- CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
- CVE-2026-45838: bpf: fix end-of-list detection in cgroup_storage_get_next_key()…
- Record
SUSE-SU-2026:2800-1- Updated
- 2026-11-02
OSVUSN-8566-1 No score
linux, linux-gcp, linux-gke, linux-realtime vulnerabilities
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- PSP security protocol;
- ARM64 architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Intel NPU Driver;
- DRBD Distributed Replicated Block Device drivers;
- Ublk userspace block driver;
- Bluetooth drivers;
- Bus devices;
- Character device driver;
- Clock framework and drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- EDAC drivers;
- EFI core;
- FWCTL subsystem;
- GPU drivers;
- HID subsystem;
- I3C subsystem;
- InfiniBand drivers;
- IOMMU subsystem;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- NVIDIA Tegra memory controller driver;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- STMicroelectronics network drivers;
- MediaTek network drivers;
- NVME drivers;
- PCI subsystem;
- Pin controllers subsystem;
- Chrome hardware platform drivers;
- ACPI WMI driver;
- x86 platform drivers;
- Generic PM domains;
- MediaTek PM domains;
- Power supply drivers;
- MPAM driver;
- Amlogic Meson reset controller drivers;
- S/390 drivers;
- SCSI subsystem;
- NVIDIA Tegra Control Backbone (CBB) driver;
- SPI subsystem;
- Greybus lights staging drivers;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- TCM subsystem;
- TTY drivers;
- USB Device Class drivers;
- ULPI bus;
- USB Type-C support driver;
- TI TPS6598x USB Power Delivery controller driver;
- vDPA drivers;
- VFIO drivers;
- Framebuffer layer;
- TSM AMD SEV Guest driver;
- Xen hypervisor drivers;
- File systems infrastructure;
- BTRFS file system;
- Ceph distributed file system;
- EROFS file system;
- F2FS file system;
- FUSE (File system in Userspace);
- GFS2 file system;
- HFS+ file system;
- HugeTLB file system;
- Network file system (NFS) server daemon;
- NILFS2 file system;
- File system notification infrastructure;
- NTFS3 file system;
- OCFS2 file system;
- Overlay file system;
- Diskquota system;
- SMB network file system;
- Tracing file system;
- DRM TTM subsystem;
- Control group (cgroup);
- Kernel CPU control infrastructure;
- QorIQ DPAA2 FSL-MC bus driver;
- Freescale ENETC Ethernet drivers;
- Memory Management;
- padata parallel execution mechanism;
- PPP protocol drivers and compressors;
- Bluetooth subsystem;
- Networking core;
- Netfilter;
- Network traffic control;
- io_uring subsystem;
- IPC subsystem;
- Audit subsystem;
- BPF subsystem;
- Kernel exit() syscall;
- Kernel fork() syscall;
- Kernel futex primitives;
- Padata parallel execution mechanism;
- Scheduler infrastructure;
- Tracing infrastructure;
- Cryptographic library;
- Memory management;
- 802.1Q VLAN protocol;
- B.A.T.M.A.N. meshing protocol;
- Ethernet bridge;
- Ceph Core library;
- Distributed Switch Architecture;
- IPv4 networking;
- IPv6 networking;
- MAC80211 subsystem;
- Multipath TCP;
- Open vSwitch;
- Phonet protocol;
- RDS protocol;
- SCTP protocol;
- SMC sockets;
- TIPC protocol;
- TLS protocol;
- Unix domain sockets;
- VMware vSockets driver;
- XFRM subsystem;
- Integrity Measurement Architecture(IMA) framework;
- SELinux security module;
- ALSA framework;
- HD-audio driver;
- QCOM ASoC drivers; -…
- Record
USN-8566-1- Updated
- 2026-11-07
OSVUSN-8568-1 No score
linux-oem-7.0 vulnerabilities
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- PSP security protocol;
- ARM64 architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Intel NPU Driver;
- DRBD Distributed Replicated Block Device drivers;
- Ublk userspace block driver;
- Bluetooth drivers;
- Bus devices;
- Character device driver;
- Clock framework and drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- EDAC drivers;
- EFI core;
- FWCTL subsystem;
- GPU drivers;
- HID subsystem;
- I3C subsystem;
- InfiniBand drivers;
- IOMMU subsystem;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- NVIDIA Tegra memory controller driver;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- STMicroelectronics network drivers;
- MediaTek network drivers;
- NVME drivers;
- PCI subsystem;
- Pin controllers subsystem;
- Chrome hardware platform drivers;
- ACPI WMI driver;
- x86 platform drivers;
- Generic PM domains;
- MediaTek PM domains;
- Power supply drivers;
- MPAM driver;
- Amlogic Meson reset controller drivers;
- S/390 drivers;
- SCSI subsystem;
- NVIDIA Tegra Control Backbone (CBB) driver;
- SPI subsystem;
- Greybus lights staging drivers;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- TCM subsystem;
- TTY drivers;
- USB Device Class drivers;
- ULPI bus;
- USB Type-C support driver;
- TI TPS6598x USB Power Delivery controller driver;
- vDPA drivers;
- VFIO drivers;
- Framebuffer layer;
- TSM AMD SEV Guest driver;
- Xen hypervisor drivers;
- File systems infrastructure;
- BTRFS file system;
- Ceph distributed file system;
- EROFS file system;
- F2FS file system;
- FUSE (File system in Userspace);
- GFS2 file system;
- HFS+ file system;
- HugeTLB file system;
- Network file system (NFS) server daemon;
- NILFS2 file system;
- File system notification infrastructure;
- NTFS3 file system;
- OCFS2 file system;
- Diskquota system;
- SMB network file system;
- Tracing file system;
- DRM TTM subsystem;
- Control group (cgroup);
- Kernel CPU control infrastructure;
- QorIQ DPAA2 FSL-MC bus driver;
- Freescale ENETC Ethernet drivers;
- Memory Management;
- padata parallel execution mechanism;
- PPP protocol drivers and compressors;
- Bluetooth subsystem;
- Networking core;
- Netfilter;
- Network traffic control;
- io_uring subsystem;
- IPC subsystem;
- Audit subsystem;
- BPF subsystem;
- Kernel exit() syscall;
- Kernel fork() syscall;
- Kernel futex primitives;
- Padata parallel execution mechanism;
- Scheduler infrastructure;
- Tracing infrastructure;
- Cryptographic library;
- Memory management;
- 802.1Q VLAN protocol;
- B.A.T.M.A.N. meshing protocol;
- Ethernet bridge;
- Ceph Core library;
- Distributed Switch Architecture;
- IPv4 networking;
- IPv6 networking;
- MAC80211 subsystem;
- Multipath TCP;
- Open vSwitch;
- Phonet protocol;
- RDS protocol;
- SCTP protocol;
- SMC sockets;
- TIPC protocol;
- TLS protocol;
- Unix domain sockets;
- VMware vSockets driver;
- XFRM subsystem;
- Integrity Measurement Architecture(IMA) framework;
- SELinux security module;
- ALSA framework;
- HD-audio driver;
- QCOM ASoC drivers;
- SOF drivers;
- STI ASoC…
- Record
USN-8568-1- Updated
- 2026-11-07
OSVUSN-8569-1 No score
linux-hwe-7.0 vulnerabilities
It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)
It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43284, CVE-2026-43500, CVE-2026-45998, CVE-2026-46000)
It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43503, CVE-2026-46300)
Qualys discovered that a race condition existed in the ptrace subsystem of the Linux kernel when privileged processes are exiting. An unprivileged local attacker could use this issue to expose sensitive information. (CVE-2026-46333)
Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contain a memory leak when handling AppArmor notifications. A local attacker could use this to cause resource exhaustion. (CVE-2026-47326)
Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contain a NULL pointer dereference when handling AppArmor notifications. A local attacker could use this to cause a kernel oops. (CVE-2026-47327)
Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained an invalid free when handling AppArmor notifications. A local attacker could use this to corrupt kernel memory. (CVE-2026-47328)
Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained insufficient validation of AppArmor notification responses. A local attacker could use this to allow crafted responses to be processed. (CVE-2026-47329)
Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 used an uninitialized variable when handling AppArmor notifications. A local attacker could use this to cause incorrect caching of data. (CVE-2026-47330)
Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained an out-of-bounds (OOB) read when handling AppArmor notifications. A local attacker could use this to cause information disclosure of kernel memory. (CVE-2026-47332)
Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained a out-of-bounds (OOB) read when handling AppArmor notifications. A local attacker could use this to cause kernel memory corruption and, theoretically, influence processing of AppArmor policies. (CVE-2026-47333)
Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained incorrect holding of locks when handling AppArmor notifications. A local attacker could use this to cause a kernel panic or deadlock. (CVE-2026-47334)
Tristan Madani and Trevor Lawrence have each independently discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained a NULL pointer dereference when handling AppArmor network socket mediation. A local attacker could use this to cause a kernel oops. (CVE-2026-47337)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- PSP security protocol;
- ARM64 architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Intel…
- Record
USN-8569-1- Updated
- 2026-11-07
OSVUSN-8593-1 No score
linux-ibm, linux-oracle vulnerabilities
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- x86 platform drivers;
- PSP security protocol;
- ARM32 architecture;
- ARM64 architecture;
- MIPS architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Intel NPU Driver;
- Compute Acceleration Framework;
- ACPI drivers;
- Auxiliary display drivers;
- Drivers core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Ublk userspace block driver;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Bus devices;
- Character device driver;
- Clock framework and drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- Buffer Sharing and Synchronization framework;
- DPLL subsystem;
- EDAC drivers;
- Arm Firmware Framework for ARMv8-A(FFA);
- EFI core;
- FWCTL subsystem;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- Hardware monitoring drivers;
- I2C subsystem;
- I3C subsystem;
- IIO ADC drivers;
- IIO subsystem;
- InfiniBand drivers;
- Input Device core drivers;
- IOMMU subsystem;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- NVIDIA Tegra memory controller driver;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- STMicroelectronics network drivers;
- Texas Instruments network drivers;
- MediaTek network drivers;
- NVME drivers;
- Parport drivers;
- PCI subsystem;
- Pin controllers subsystem;
- Chrome hardware platform drivers;
- ACPI WMI driver;
- Generic PM domains;
- MediaTek PM domains;
- Power supply drivers;
- MPAM driver;
- Amlogic Meson reset controller drivers;
- S/390 drivers;
- SCSI subsystem;
- NVIDIA Tegra Control Backbone (CBB) driver;
- SPI subsystem;
- Greybus lights staging drivers;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- TCM subsystem;
- Thunderbolt and USB4 drivers;
- TTY drivers;
- Userspace I/O drivers;
- USB Device Class drivers;
- ULPI bus;
- DesignWare USB2 driver;
- USB Gadget drivers;
- USB Dual Role (OTG-ready) Controller drivers;
- USB Serial drivers;
- USB Type-C support driver;
- USB Type-C Port Controller Manager driver;
- TI TPS6598x USB Power Delivery controller driver;
- USB Type-C Connector System Software Interface driver;
- USB over IP driver;
- vDPA drivers;
- VFIO drivers;
- Framebuffer layer;
- TSM AMD SEV Guest driver;
- Xen hypervisor drivers;
- 9P distributed file system;
- File systems infrastructure;
- AFS file system;
- BTRFS file system;
- Ceph distributed file system;
- EROFS file system;
- F2FS file system;
- FUSE (File system in Userspace);
- GFS2 file system;
- HFS+ file system;
- HugeTLB file system;
- Network file systems library;
- Network file system (NFS) server daemon;
- NILFS2 file system;
- File system notification infrastructure;
- NTFS3 file system;
- OCFS2 file system;
- Overlay file system;
- Diskquota system;
- SMB network file system;
- Tracing file system;
- UDF file system;
- DRM TTM subsystem;
- Control group (cgroup);
- Kernel CPU control infrastructure;
- Tracing infrastructure;
- QorIQ DPAA2 FSL-MC bus driver;
- Freescale ENETC Ethernet drivers;
- Memory management;
- Memory Management;
- Linked list library;
- Netfilter;
- padata…
- Record
USN-8593-1- Updated
- 2026-11-07
OSVUSN-8603-1 No score
linux-azure, linux-azure-fde vulnerabilities
It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- x86 platform drivers;
- PSP security protocol;
- ARM32 architecture;
- ARM64 architecture;
- MIPS architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Intel NPU Driver;
- Compute Acceleration Framework;
- ACPI drivers;
- Auxiliary display drivers;
- Drivers core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Ublk userspace block driver;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Bus devices;
- Character device driver;
- TPM device driver;
- Clock framework and drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- Buffer Sharing and Synchronization framework;
- DPLL subsystem;
- EDAC drivers;
- Arm Firmware Framework for ARMv8-A(FFA);
- EFI core;
- FWCTL subsystem;
- GPIO subsystem;
- GPU drivers;
- Greybus drivers;
- HID subsystem;
- Microsoft Hyper-V drivers;
- Hardware monitoring drivers;
- I2C subsystem;
- I3C subsystem;
- IIO ADC drivers;
- IIO subsystem;
- InfiniBand drivers;
- Input Device core drivers;
- IOMMU subsystem;
- LED subsystem;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- NVIDIA Tegra memory controller driver;
- IBM Advanced System Management driver;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- STMicroelectronics network drivers;
- Texas Instruments network drivers;
- MediaTek network drivers;
- NTB driver;
- NVME drivers;
- Device tree and open firmware driver;
- Parport drivers;
- PCI subsystem;
- Pin controllers subsystem;
- Chrome hardware platform drivers;
- ACPI WMI driver;
- Generic PM domains;
- MediaTek PM domains;
- Power supply drivers;
- Remote Processor subsystem;
- MPAM driver;
- Amlogic Meson reset controller drivers;
- S/390 drivers;
- SCSI subsystem;
- NVIDIA Tegra Control Backbone (CBB) driver;
- SPI subsystem;
- Greybus lights staging drivers;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- SM750 framebuffer staging driver;
- TCM subsystem;
- Thermal drivers;
- Thunderbolt and USB4 drivers;
- TTY drivers;
- Userspace I/O drivers;
- USB Device Class drivers;
- ULPI bus;
- DesignWare USB2 driver;
- USB Gadget drivers;
- USB Dual Role (OTG-ready) Controller drivers;
- USB Serial drivers;
- USB Type-C support driver;
- USB Type-C Port Controller Manager driver;
- TI TPS6598x USB Power Delivery controller driver;
- USB Type-C Connector System Software Interface driver;
- USB over IP driver;
- vDPA drivers;
- VFIO drivers;
- Framebuffer layer;
- TSM AMD SEV Guest driver;
- Xen hypervisor drivers;
- 9P distributed file system;
- File systems infrastructure;
- AFS file system;
- BTRFS file system;
- Ceph distributed file system;
- EROFS file system;
- Ext4 file system;
- F2FS file system;
- FUSE (File system in Userspace);
- GFS2 file system;
- HFS+ file system;
- HugeTLB file system;
- Journaling layer for block devices (JBD2);
- Network file systems…
- Record
USN-8603-1- Updated
- 2026-11-07
OSVUSN-8618-1 No score
linux-aws, linux-raspi vulnerabilities
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- x86 platform drivers;
- Cryptographic API;
- PSP security protocol;
- ARM32 architecture;
- ARM64 architecture;
- MIPS architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Block layer subsystem;
- Intel NPU Driver;
- Compute Acceleration Framework;
- ACPI drivers;
- Auxiliary display drivers;
- Drivers core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Ublk userspace block driver;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Bus devices;
- Character device driver;
- Clock framework and drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- Buffer Sharing and Synchronization framework;
- DPLL subsystem;
- EDAC drivers;
- Arm Firmware Framework for ARMv8-A(FFA);
- EFI core;
- FWCTL subsystem;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- Hardware monitoring drivers;
- I2C subsystem;
- I3C subsystem;
- IIO ADC drivers;
- IIO subsystem;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Mouse) drivers;
- IOMMU subsystem;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- NVIDIA Tegra memory controller driver;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- STMicroelectronics network drivers;
- Texas Instruments network drivers;
- MediaTek network drivers;
- NVME drivers;
- Parport drivers;
- PCI subsystem;
- PHY drivers;
- Pin controllers subsystem;
- Chrome hardware platform drivers;
- ACPI WMI driver;
- Generic PM domains;
- MediaTek PM domains;
- Power supply drivers;
- Voltage and Current Regulator drivers;
- MPAM driver;
- Amlogic Meson reset controller drivers;
- S/390 drivers;
- SCSI subsystem;
- NVIDIA Tegra Control Backbone (CBB) driver;
- SPI subsystem;
- Greybus lights staging drivers;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- TCM subsystem;
- Thunderbolt and USB4 drivers;
- TTY drivers;
- Userspace I/O drivers;
- USB Device Class drivers;
- ULPI bus;
- DesignWare USB2 driver;
- USB Gadget drivers;
- USB Dual Role (OTG-ready) Controller drivers;
- USB Serial drivers;
- USB Type-C support driver;
- USB Type-C Port Controller Manager driver;
- TI TPS6598x USB Power Delivery controller driver;
- USB Type-C Connector System Software Interface driver;
- USB over IP driver;
- vDPA drivers;
- VFIO drivers;
- Framebuffer layer;
- TSM AMD SEV Guest driver;
- Xen hypervisor drivers;
- 9P distributed file system;
- File systems infrastructure;
- AFS file system;
- BTRFS file system;
- Ceph distributed file system;
- EROFS file system;
- F2FS file system;
- FUSE (File system in Userspace);
- GFS2 file system;
- HFS+ file system;
- HugeTLB file system;
- Network file systems library;
- Network file system (NFS) server daemon;
- NILFS2 file system;
- File system notification infrastructure;
- NTFS3 file system;
- OCFS2 file system;
- Overlay file system;
- Diskquota system;
- SMB network file system;
- Tracing file system;
- UDF file system;
- DRM TTM subsystem;
- Control group (cgroup);
- Kernel CPU control infrastructure;
- Tracing infrastructure;
- QorIQ DPAA2 FSL-MC bus driver;
- Freescale ENETC Ethernet drivers; -…
- Record
USN-8618-1- Updated
- 2026-11-07
OSVUSN-8663-1 No score
linux-nvidia, linux-nvidia-7.0 vulnerabilities
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- x86 platform drivers;
- Cryptographic API;
- PSP security protocol;
- ARM32 architecture;
- ARM64 architecture;
- MIPS architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Block layer subsystem;
- Intel NPU Driver;
- Compute Acceleration Framework;
- ACPI drivers;
- Auxiliary display drivers;
- Drivers core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Ublk userspace block driver;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Bus devices;
- Character device driver;
- Clock framework and drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- Buffer Sharing and Synchronization framework;
- DPLL subsystem;
- EDAC drivers;
- Arm Firmware Framework for ARMv8-A(FFA);
- EFI core;
- FWCTL subsystem;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- Hardware monitoring drivers;
- I2C subsystem;
- I3C subsystem;
- IIO ADC drivers;
- IIO subsystem;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Mouse) drivers;
- IOMMU subsystem;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- NVIDIA Tegra memory controller driver;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- STMicroelectronics network drivers;
- Texas Instruments network drivers;
- MediaTek network drivers;
- NVME drivers;
- Parport drivers;
- PCI subsystem;
- PHY drivers;
- Pin controllers subsystem;
- Chrome hardware platform drivers;
- ACPI WMI driver;
- Generic PM domains;
- MediaTek PM domains;
- Power supply drivers;
- Voltage and Current Regulator drivers;
- MPAM driver;
- Amlogic Meson reset controller drivers;
- S/390 drivers;
- SCSI subsystem;
- NVIDIA Tegra Control Backbone (CBB) driver;
- SPI subsystem;
- Greybus lights staging drivers;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- TCM subsystem;
- Thunderbolt and USB4 drivers;
- TTY drivers;
- Userspace I/O drivers;
- USB Device Class drivers;
- ULPI bus;
- DesignWare USB2 driver;
- USB Gadget drivers;
- USB Dual Role (OTG-ready) Controller drivers;
- USB Serial drivers;
- USB Type-C support driver;
- USB Type-C Port Controller Manager driver;
- TI TPS6598x USB Power Delivery controller driver;
- USB Type-C Connector System Software Interface driver;
- USB over IP driver;
- vDPA drivers;
- VFIO drivers;
- Framebuffer layer;
- TSM AMD SEV Guest driver;
- Xen hypervisor drivers;
- 9P distributed file system;
- File systems infrastructure;
- AFS file system;
- BTRFS file system;
- Ceph distributed file system;
- EROFS file system;
- F2FS file system;
- FUSE (File system in Userspace);
- GFS2 file system;
- HFS+ file system;
- HugeTLB file system;
- Network file systems library;
- Network file system (NFS) server daemon;
- NILFS2 file system;
- File system notification infrastructure;
- NTFS3 file system;
- OCFS2 file system;
- Overlay file system;
- Diskquota system;
- SMB network file system;
- Tracing file system;
- UDF file system;
- DRM TTM subsystem;
- Control group (cgroup);
- Kernel CPU control infrastructure;
- Tracing infrastructure;
- QorIQ DPAA2 FSL-MC bus driver;
- Freescale ENETC Ethernet drivers; -…
- Record
USN-8663-1- Updated
- 2026-11-07
OSVUSN-8664-1 No score
linux-nvidia-bos vulnerabilities
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- x86 platform drivers;
- Cryptographic API;
- PSP security protocol;
- ARM32 architecture;
- ARM64 architecture;
- MIPS architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Block layer subsystem;
- Intel NPU Driver;
- Compute Acceleration Framework;
- ACPI drivers;
- Auxiliary display drivers;
- Drivers core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Ublk userspace block driver;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Bus devices;
- Character device driver;
- Clock framework and drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- Buffer Sharing and Synchronization framework;
- DPLL subsystem;
- EDAC drivers;
- Arm Firmware Framework for ARMv8-A(FFA);
- EFI core;
- FWCTL subsystem;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- Hardware monitoring drivers;
- I2C subsystem;
- I3C subsystem;
- IIO ADC drivers;
- IIO subsystem;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Mouse) drivers;
- IOMMU subsystem;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- NVIDIA Tegra memory controller driver;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- STMicroelectronics network drivers;
- Texas Instruments network drivers;
- MediaTek network drivers;
- NVME drivers;
- Parport drivers;
- PCI subsystem;
- PHY drivers;
- Pin controllers subsystem;
- Chrome hardware platform drivers;
- ACPI WMI driver;
- Generic PM domains;
- MediaTek PM domains;
- Power supply drivers;
- Voltage and Current Regulator drivers;
- MPAM driver;
- Amlogic Meson reset controller drivers;
- S/390 drivers;
- SCSI subsystem;
- NVIDIA Tegra Control Backbone (CBB) driver;
- SPI subsystem;
- Greybus lights staging drivers;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- TCM subsystem;
- Thunderbolt and USB4 drivers;
- TTY drivers;
- Userspace I/O drivers;
- USB Device Class drivers;
- ULPI bus;
- DesignWare USB2 driver;
- USB Gadget drivers;
- USB Dual Role (OTG-ready) Controller drivers;
- USB Serial drivers;
- USB Type-C support driver;
- USB Type-C Port Controller Manager driver;
- TI TPS6598x USB Power Delivery controller driver;
- USB Type-C Connector System Software Interface driver;
- USB over IP driver;
- vDPA drivers;
- VFIO drivers;
- Framebuffer layer;
- TSM AMD SEV Guest driver;
- Xen hypervisor drivers;
- 9P distributed file system;
- File systems infrastructure;
- AFS file system;
- BTRFS file system;
- Ceph distributed file system;
- EROFS file system;
- F2FS file system;
- FUSE (File system in Userspace);
- GFS2 file system;
- HFS+ file system;
- HugeTLB file system;
- Network file systems library;
- Network file system (NFS) server daemon;
- NILFS2 file system;
- File system notification infrastructure;
- NTFS3 file system;
- OCFS2 file system;
- Overlay file system;
- Diskquota system;
- SMB network file system;
- Tracing file system;
- UDF file system;
- DRM TTM subsystem;
- Control group (cgroup);
- Kernel CPU control infrastructure;
- Tracing infrastructure;
- QorIQ DPAA2 FSL-MC bus driver;
- Freescale ENETC Ethernet drivers; -…
- Record
USN-8664-1- Updated
- 2026-11-07
OSVUSN-8728-1 No score
linux-gcp-7.0 vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- x86 platform drivers;
- ARM64 architecture;
- Cryptographic API;
- PSP security protocol;
- User-space API (UAPI);
- Kernel build system;
- ARM32 architecture;
- MIPS architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Block layer subsystem;
- Compute Acceleration Framework;
- Intel NPU Driver;
- ACPI drivers;
- Android drivers;
- Auxiliary display drivers;
- Drivers core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Ublk userspace block driver;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Bus devices;
- Character device driver;
- Hardware random number generator core;
- Clock framework and drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- Buffer Sharing and Synchronization framework;
- DPLL subsystem;
- EDAC drivers;
- Arm Firmware Framework for ARMv8-A(FFA);
- EFI core;
- Intel Stratix 10 firmware drivers;
- FPGA Framework;
- FWCTL subsystem;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- Hardware monitoring drivers;
- CoreSight HW tracing drivers;
- I2C subsystem;
- I3C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Mouse) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- NVIDIA Tegra memory controller driver;
- Multifunction device drivers;
- Fastrpc Driver;
- MMC subsystem;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- STMicroelectronics network drivers;
- Texas Instruments network drivers;
- MediaTek network drivers;
- NTB driver;
- NVME drivers;
- NVMEM (Non Volatile Memory) drivers;
- Parport drivers;
- PCI subsystem;
- PHY drivers;
- Pin controllers subsystem;
- Chrome hardware platform drivers;
- ACPI WMI driver;
- Generic PM domains;
- MediaTek PM domains;
- System reset/shutdown drivers;
- Power sequencing drivers;
- Power supply drivers;
- PTP clock framework;
- Voltage and Current Regulator drivers;
- MPAM driver;
- Amlogic Meson reset controller drivers;
- RPMSG subsystem;
- S/390 drivers;
- SCSI subsystem;
- SLIMbus drivers;
- NVIDIA Tegra Control Backbone (CBB) driver;
- SPI subsystem;
- Greybus lights staging drivers;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- VME bus staging drivers;
- TCM subsystem;
- Trusted Execution Environment drivers;
- Thunderbolt and USB4 drivers;
- TTY drivers;
- Userspace I/O drivers;
- Cadence USB3 driver;
- USB Device Class drivers;
- ULPI bus;
- DesignWare USB2 driver;
- DesignWare USB3 driver;
- Faraday FOTG210 USB2 dual-role controller driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB ChaosKey driver;
- Siemens ID Mouse USB driver;
- IOWarrior USB driver;
- LD Didactic USB driver;
- LEGO USB…
- Record
USN-8728-1- Updated
- 2026-11-07
OSVUSN-8728-2 No score
linux-azure-7.0 vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- x86 platform drivers;
- ARM64 architecture;
- Cryptographic API;
- PSP security protocol;
- User-space API (UAPI);
- Kernel build system;
- ARM32 architecture;
- MIPS architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Block layer subsystem;
- Compute Acceleration Framework;
- Intel NPU Driver;
- ACPI drivers;
- Android drivers;
- Auxiliary display drivers;
- Drivers core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Ublk userspace block driver;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Bus devices;
- Character device driver;
- Hardware random number generator core;
- Clock framework and drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- Buffer Sharing and Synchronization framework;
- DPLL subsystem;
- EDAC drivers;
- Arm Firmware Framework for ARMv8-A(FFA);
- EFI core;
- Intel Stratix 10 firmware drivers;
- FPGA Framework;
- FWCTL subsystem;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- Hardware monitoring drivers;
- CoreSight HW tracing drivers;
- I2C subsystem;
- I3C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Mouse) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- NVIDIA Tegra memory controller driver;
- Multifunction device drivers;
- Fastrpc Driver;
- MMC subsystem;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- STMicroelectronics network drivers;
- Texas Instruments network drivers;
- MediaTek network drivers;
- NTB driver;
- NVME drivers;
- NVMEM (Non Volatile Memory) drivers;
- Parport drivers;
- PCI subsystem;
- PHY drivers;
- Pin controllers subsystem;
- Chrome hardware platform drivers;
- ACPI WMI driver;
- Generic PM domains;
- MediaTek PM domains;
- System reset/shutdown drivers;
- Power sequencing drivers;
- Power supply drivers;
- PTP clock framework;
- Voltage and Current Regulator drivers;
- MPAM driver;
- Amlogic Meson reset controller drivers;
- RPMSG subsystem;
- S/390 drivers;
- SCSI subsystem;
- SLIMbus drivers;
- NVIDIA Tegra Control Backbone (CBB) driver;
- SPI subsystem;
- Greybus lights staging drivers;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- VME bus staging drivers;
- TCM subsystem;
- Trusted Execution Environment drivers;
- Thunderbolt and USB4 drivers;
- TTY drivers;
- Userspace I/O drivers;
- Cadence USB3 driver;
- USB Device Class drivers;
- ULPI bus;
- DesignWare USB2 driver;
- DesignWare USB3 driver;
- Faraday FOTG210 USB2 dual-role controller driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB ChaosKey driver;
- Siemens ID Mouse USB driver;
- IOWarrior USB driver;
- LD Didactic USB driver;
- LEGO USB…
- Record
USN-8728-2- Updated
- 2026-11-07
OSVUSN-8728-3 No score
linux-oracle-7.0 vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- x86 platform drivers;
- ARM64 architecture;
- Cryptographic API;
- PSP security protocol;
- User-space API (UAPI);
- Kernel build system;
- ARM32 architecture;
- MIPS architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Block layer subsystem;
- Compute Acceleration Framework;
- Intel NPU Driver;
- ACPI drivers;
- Android drivers;
- Auxiliary display drivers;
- Drivers core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Ublk userspace block driver;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Bus devices;
- Character device driver;
- Hardware random number generator core;
- Clock framework and drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- Buffer Sharing and Synchronization framework;
- DPLL subsystem;
- EDAC drivers;
- Arm Firmware Framework for ARMv8-A(FFA);
- EFI core;
- Intel Stratix 10 firmware drivers;
- FPGA Framework;
- FWCTL subsystem;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- Hardware monitoring drivers;
- CoreSight HW tracing drivers;
- I2C subsystem;
- I3C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Mouse) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- NVIDIA Tegra memory controller driver;
- Multifunction device drivers;
- Fastrpc Driver;
- MMC subsystem;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- STMicroelectronics network drivers;
- Texas Instruments network drivers;
- MediaTek network drivers;
- NTB driver;
- NVME drivers;
- NVMEM (Non Volatile Memory) drivers;
- Parport drivers;
- PCI subsystem;
- PHY drivers;
- Pin controllers subsystem;
- Chrome hardware platform drivers;
- ACPI WMI driver;
- Generic PM domains;
- MediaTek PM domains;
- System reset/shutdown drivers;
- Power sequencing drivers;
- Power supply drivers;
- PTP clock framework;
- Voltage and Current Regulator drivers;
- MPAM driver;
- Amlogic Meson reset controller drivers;
- RPMSG subsystem;
- S/390 drivers;
- SCSI subsystem;
- SLIMbus drivers;
- NVIDIA Tegra Control Backbone (CBB) driver;
- SPI subsystem;
- Greybus lights staging drivers;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- VME bus staging drivers;
- TCM subsystem;
- Trusted Execution Environment drivers;
- Thunderbolt and USB4 drivers;
- TTY drivers;
- Userspace I/O drivers;
- Cadence USB3 driver;
- USB Device Class drivers;
- ULPI bus;
- DesignWare USB2 driver;
- DesignWare USB3 driver;
- Faraday FOTG210 USB2 dual-role controller driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB ChaosKey driver;
- Siemens ID Mouse USB driver;
- IOWarrior USB driver;
- LD Didactic USB driver;
- LEGO USB…
- Record
USN-8728-3- Updated
- 2026-11-07
OSVUSN-8781-1 No score
linux-nvidia-tegra vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- User-space API (UAPI);
- Kernel build system;
- ARM32 architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Cryptographic API;
- Intel NPU Driver;
- Compute Acceleration Framework;
- ACPI drivers;
- Drivers core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Ublk userspace block driver;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Hardware crypto device drivers;
- CXL (Compute Express Link) drivers;
- Arm Firmware Framework for ARMv8-A(FFA);
- EFI core;
- FPGA Framework;
- GPU drivers;
- HID subsystem;
- Hardware monitoring drivers;
- I2C subsystem;
- I3C subsystem;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Mouse) drivers;
- IOMMU subsystem;
- Multiple devices driver;
- Media drivers;
- Fastrpc Driver;
- Network drivers;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- MediaTek network drivers;
- NVME drivers;
- Operating Performance Points (OPP) driver;
- PCI subsystem;
- PTP clock framework;
- RPMSG subsystem;
- SCSI subsystem;
- SoundWire subsystem;
- SPI subsystem;
- Greybus lights staging drivers;
- Media staging drivers;
- NVIDIA Tegra embedded controller (NVEC) staging driver;
- Realtek RTL8723BS SDIO drivers;
- TCM subsystem;
- Trusted Execution Environment drivers;
- Thunderbolt and USB4 drivers;
- TTY drivers;
- USB Gadget drivers;
- USB Dual Role (OTG-ready) Controller drivers;
- USB Serial drivers;
- vDPA drivers;
- VFIO drivers;
- Virtio Host (VHOST) subsystem;
- Virtio drivers;
- Xen hypervisor drivers;
- 9P distributed file system;
- AFS file system;
- File systems infrastructure;
- BTRFS file system;
- Ceph distributed file system;
- exFAT file system;
- F2FS file system;
- GFS2 file system;
- HFS file system;
- HFS+ file system;
- JFS file system;
- Network file systems library;
- Network file system (NFS) client;
- Network file system (NFS) server daemon;
- NTFS3 file system;
- OCFS2 file system;
- OrangeFS file system;
- SMB network file system;
- BPF subsystem;
- File system encryption (fscrypt);
- Software nodes and device properties;
- IPv4 networking;
- KVM subsystem;
- Mellanox drivers;
- Memory management;
- Networking core;
- Netfilter;
- Socket messages infrastructure;
- MediaTek SoC drivers;
- Sun RPC protocol;
- Network traffic control;
- IPv6 networking;
- Amateur Radio drivers;
- Bluetooth subsystem;
- IP tunnels definitions;
- KCM (Kernel Connection Multiplexor) sockets driver;
- MultiProtocol Label Switching driver;
- TCP network protocol;
- XFRM subsystem;
- Tracing infrastructure;
- io_uring subsystem;
- Control group (cgroup);
- Perf events;
- IRQ subsystem;
- Locking primitives;
- KProbes tracing;
- 9P file system network protocol;
- B.A.T.M.A.N. meshing protocol;
- Ethernet bridge;
- CAN network layer;
- Ceph Core library;
- Handshake API;
- HSR network protocol;
- IFE protocol;
- L2TP protocol;
- MAC80211 subsystem;
- IEEE 802.15.4 subsystem;
- Multipath TCP;
- NFC subsystem;
- Open vSwitch;
- Phonet protocol;
- RDS protocol;
- RxRPC session sockets;
- SCTP protocol;
- SMC…
- Record
USN-8781-1- Updated
- 2026-11-06
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernelAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-64kAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-64k-coreAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-64k-debugAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-64k-debug-coreAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-64k-debug-develAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-64k-debug-devel-matchedAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-64k-debug-modulesAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-64k-debug-modules-coreAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-64k-debug-modules-extraAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
Show 290 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-64k-develAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-64k-devel-matchedAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-64k-modulesAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-64k-modules-coreAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-64k-modules-extraAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-abi-stablelistsAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-coreAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-cross-headersAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-debugAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-debug-coreAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-debug-develAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-debug-devel-matchedAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-debug-modulesAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-debug-modules-coreAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-debug-modules-extraAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-debug-uki-virtAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-develAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-devel-matchedAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-docAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-headersAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-modulesAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-modules-coreAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-modules-extraAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-modules-extra-matchedAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-rtAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-rt-64kAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-rt-64k-coreAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-rt-64k-debugAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-rt-64k-debug-coreAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-rt-64k-debug-develAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-rt-64k-debug-modulesAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-rt-64k-debug-modules-coreAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-rt-64k-debug-modules-extraAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-rt-64k-develAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-rt-64k-modulesAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-rt-64k-modules-coreAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-rt-64k-modules-extraAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-rt-coreAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-rt-debugAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-rt-debug-coreAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-rt-debug-develAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-rt-debug-modulesAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-rt-debug-modules-coreAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-rt-debug-modules-extraAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-rt-develAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
kernel-rt-modulesAlmaLinux:10 From an advisory covering 6 CVEs |
before 6.12.0-211.40.1.el10_2 | 6.12.0-211.40.1.el10_2 |
linux-ltsAlpaquita:25 |
6.12.112-r0 up to 6.12.115-r0 | 6.12.115-r0 |
linux-ltsAlpaquita:stream |
6.12.92-r1 up to 6.18.35-r1 | 6.18.35-r1 |
kernelTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-abi-stablelistsTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-coreTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-cross-headersTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-debugTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-debug-coreTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-debug-develTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-debug-devel-matchedTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-debug-modulesTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-debug-modules-coreTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-debug-modules-extraTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-debug-modules-internalTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-debug-modules-partnerTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-debug-uki-virtTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-debug-uki-virt-addonsTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-develTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-devel-matchedTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-docTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-headersTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-ipaclones-internalTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-modulesTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-modules-coreTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-modules-extraTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-modules-internalTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-modules-partnerTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-rtTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-rt-coreTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-rt-debugTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-rt-debug-coreTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-rt-debug-develTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-rt-debug-devel-matchedTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-rt-debug-kvmTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-rt-debug-modulesTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-rt-debug-modules-coreTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-rt-debug-modules-extraTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-rt-debug-modules-internalTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-rt-debug-modules-partnerTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-rt-develTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-rt-devel-matchedTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-rt-kvmTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-rt-modulesTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-rt-modules-coreTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-rt-modules-extraTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-rt-modules-internalTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-rt-modules-partnerTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-selftests-internalTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-toolsTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-tools-libsTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-tools-libs-develTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-uki-virtTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
kernel-uki-virt-addonsTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
libperfTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
libperf-develTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
perfTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
python3-perfTuxCare:AlmaLinux:9.6 From an advisory covering 121 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els14 | 5.14.0-570.62.1.el9_6.tuxcare.5.els14 |
KernelLinux |
before 6.12.114, 6.13.0 up to 6.18.33, 6.14.0 up to 7.0.10 | 6.12.1146.18.337.0.10 |
linuxDebian:13 |
before 6.12.115-2, plus listed versions 6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1 Show 33 moreShow less6.12.113-16.12.115-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-1 |
6.12.115-2 |
linuxDebian:14 |
before 7.0.10-1, plus listed versions 6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1 Show 45 moreShow less6.12.113-16.12.115-16.12.115-26.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp1 |
7.0.10-1 |
kernel-64k-debug-debuginfoRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-64k-debug-develRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-64k-debug-devel-matchedRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-64k-debuginfoRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-64k-develRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-64k-devel-matchedRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-debug-debuginfoRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-debug-develRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-debug-devel-matchedRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-debuginfoRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-debuginfo-common-aarch64Red Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-debuginfo-common-ppc64leRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-debuginfo-common-s390xRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-develRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-devel-matchedRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-docRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-rt-64k-debug-debuginfoRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-rt-64k-debuginfoRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-rt-debug-debuginfoRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-rt-debuginfoRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-tools-debuginfoRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-zfcpdump-debuginfoRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-zfcpdump-develRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-zfcpdump-devel-matchedRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
libperf-debuginfoRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
perfRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
perf-debuginfoRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
python3-perfRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
python3-perf-debuginfoRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
rtlaRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
rvRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernelRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-64kRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-64k-coreRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-64k-debugRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-64k-debug-coreRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-64k-debug-modulesRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-64k-debug-modules-coreRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-64k-debug-modules-extraRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-64k-modulesRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-64k-modules-coreRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-64k-modules-extraRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-abi-stablelistsRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-coreRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-debugRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-debug-coreRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-debug-modulesRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-debug-modules-coreRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-debug-modules-extraRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-debug-uki-virtRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-modulesRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-modules-coreRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-modules-extraRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernel-modules-extra-matchedRed Hat:enterprise_linux:10.2 From an advisory covering 5 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernelRocky Linux:10 From an advisory covering 4 CVEs |
before 0:6.12.0-211.40.1.el10_2 | 0:6.12.0-211.40.1.el10_2 |
kernelRocky Linux:9 From an advisory covering 5 CVEs |
before 0:5.14.0-687.31.1.el9_8 | 0:5.14.0-687.31.1.el9_8 |
linuxRoot:Debian:13 |
before 6.12.115-2.aikido.164 | 6.12.115-2.aikido.164 |
rootio-linuxRoot:Debian:13 |
before 6.12.115-2.aikido.164 | 6.12.115-2.aikido.164 |
linuxRoot:Ubuntu:24.04 |
before 6.8.0-149.149.aikido.91 | 6.8.0-149.149.aikido.91 |
rootio-linuxRoot:Ubuntu:24.04 |
before 6.8.0-149.149.aikido.91 | 6.8.0-149.149.aikido.91 |
kernel-defaultSUSE:Linux Micro 6.0 From an advisory covering 89 CVEs |
before 6.4.0-49.1 | 6.4.0-49.1 |
kernel-kvmsmallSUSE:Linux Micro 6.0 From an advisory covering 89 CVEs |
before 6.4.0-49.1 | 6.4.0-49.1 |
kernel-sourceSUSE:Linux Micro 6.0 From an advisory covering 89 CVEs |
before 6.4.0-49.1 | 6.4.0-49.1 |
kernel-rtSUSE:Linux Micro 6.0 From an advisory covering 89 CVEs |
before 6.4.0-49.1 | 6.4.0-49.1 |
kernel-source-rtSUSE:Linux Micro 6.0 From an advisory covering 89 CVEs |
before 6.4.0-49.1 | 6.4.0-49.1 |
kernel-defaultSUSE:Linux Micro 6.1 From an advisory covering 89 CVEs |
before 6.4.0-49.1 | 6.4.0-49.1 |
kernel-kvmsmallSUSE:Linux Micro 6.1 From an advisory covering 89 CVEs |
before 6.4.0-49.1 | 6.4.0-49.1 |
kernel-sourceSUSE:Linux Micro 6.1 From an advisory covering 89 CVEs |
before 6.4.0-49.1 | 6.4.0-49.1 |
kernel-rtSUSE:Linux Micro 6.1 From an advisory covering 89 CVEs |
before 6.4.0-49.1 | 6.4.0-49.1 |
kernel-source-rtSUSE:Linux Micro 6.1 From an advisory covering 89 CVEs |
before 6.4.0-49.1 | 6.4.0-49.1 |
kernel-obs-buildSUSE:Linux Micro Extras 6.2 From an advisory covering 255 CVEs |
before 6.12.0-160000.36.1 | 6.12.0-160000.36.1 |
kernel-symsSUSE:Linux Micro Extras 6.2 From an advisory covering 255 CVEs |
before 6.12.0-160000.36.1 | 6.12.0-160000.36.1 |
kernel-64kbSUSE:Linux Micro 6.2 From an advisory covering 255 CVEs |
before 6.12.0-160000.36.1 | 6.12.0-160000.36.1 |
kernel-defaultSUSE:Linux Micro 6.2 From an advisory covering 255 CVEs |
before 6.12.0-160000.36.1 | 6.12.0-160000.36.1 |
kernel-default-baseSUSE:Linux Micro 6.2 From an advisory covering 255 CVEs |
before 6.12.0-160000.36.1.160000.2.17 | 6.12.0-160000.36.1.160000.2.17 |
kernel-rtSUSE:Linux Micro 6.2 From an advisory covering 255 CVEs |
before 6.12.0-160000.36.1 | 6.12.0-160000.36.1 |
kernel-sourceSUSE:Linux Micro 6.2 From an advisory covering 255 CVEs |
before 6.12.0-160000.36.1 | 6.12.0-160000.36.1 |
kernel-defaultSUSE:Linux Enterprise High Availability Extension 16.0 From an advisory covering 255 CVEs |
before 6.12.0-160000.36.1 | 6.12.0-160000.36.1 |
kernel-64kbSUSE:Linux Enterprise Server 16.0 From an advisory covering 255 CVEs |
before 6.12.0-160000.36.1 | 6.12.0-160000.36.1 |
kernel-azureSUSE:Linux Enterprise Server 16.0 From an advisory covering 255 CVEs |
before 6.12.0-160000.36.1 | 6.12.0-160000.36.1 |
kernel-defaultSUSE:Linux Enterprise Server 16.0 From an advisory covering 255 CVEs |
before 6.12.0-160000.36.1 | 6.12.0-160000.36.1 |
kernel-default-baseSUSE:Linux Enterprise Server 16.0 From an advisory covering 255 CVEs |
before 6.12.0-160000.36.1.160000.2.17 | 6.12.0-160000.36.1.160000.2.17 |
kernel-docsSUSE:Linux Enterprise Server 16.0 From an advisory covering 255 CVEs |
before 6.12.0-160000.36.1 | 6.12.0-160000.36.1 |
kernel-kvmsmallSUSE:Linux Enterprise Server 16.0 From an advisory covering 255 CVEs |
before 6.12.0-160000.36.1 | 6.12.0-160000.36.1 |
kernel-obs-qaSUSE:Linux Enterprise Server 16.0 From an advisory covering 255 CVEs |
before 6.12.0-160000.36.1 | 6.12.0-160000.36.1 |
kernel-sourceSUSE:Linux Enterprise Server 16.0 From an advisory covering 255 CVEs |
before 6.12.0-160000.36.1 | 6.12.0-160000.36.1 |
kernel-symsSUSE:Linux Enterprise Server 16.0 From an advisory covering 255 CVEs |
before 6.12.0-160000.36.1 | 6.12.0-160000.36.1 |
kernel-zfcpdumpSUSE:Linux Enterprise Server 16.0 From an advisory covering 255 CVEs |
before 6.12.0-160000.36.1 | 6.12.0-160000.36.1 |
kernel-64kbSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 255 CVEs |
before 6.12.0-160000.36.1 | 6.12.0-160000.36.1 |
kernel-azureSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 255 CVEs |
before 6.12.0-160000.36.1 | 6.12.0-160000.36.1 |
kernel-defaultSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 255 CVEs |
before 6.12.0-160000.36.1 | 6.12.0-160000.36.1 |
kernel-default-baseSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 255 CVEs |
before 6.12.0-160000.36.1.160000.2.17 | 6.12.0-160000.36.1.160000.2.17 |
kernel-docsSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 255 CVEs |
before 6.12.0-160000.36.1 | 6.12.0-160000.36.1 |
kernel-kvmsmallSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 255 CVEs |
before 6.12.0-160000.36.1 | 6.12.0-160000.36.1 |
kernel-obs-qaSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 255 CVEs |
before 6.12.0-160000.36.1 | 6.12.0-160000.36.1 |
kernel-sourceSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 255 CVEs |
before 6.12.0-160000.36.1 | 6.12.0-160000.36.1 |
kernel-symsSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 255 CVEs |
before 6.12.0-160000.36.1 | 6.12.0-160000.36.1 |
kernel-zfcpdumpSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 255 CVEs |
before 6.12.0-160000.36.1 | 6.12.0-160000.36.1 |
kernel-livepatch-SLE15-SP7-RT_Update_17SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 168 CVEs |
before 1-150700.1.3.1 | 1-150700.1.3.1 |
kernel-rtSUSE:Real Time Module 15 SP7 From an advisory covering 168 CVEs |
before 6.4.0-150700.7.62.1 | 6.4.0-150700.7.62.1 |
kernel-source-rtSUSE:Real Time Module 15 SP7 From an advisory covering 168 CVEs |
before 6.4.0-150700.7.62.1 | 6.4.0-150700.7.62.1 |
kernel-syms-rtSUSE:Real Time Module 15 SP7 From an advisory covering 168 CVEs |
before 6.4.0-150700.7.62.1 | 6.4.0-150700.7.62.1 |
kernel-64kbSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 105 CVEs |
before 6.4.0-150700.53.66.1 | 6.4.0-150700.53.66.1 |
kernel-defaultSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 105 CVEs |
before 6.4.0-150700.53.66.1 | 6.4.0-150700.53.66.1 |
kernel-default-baseSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 105 CVEs |
before 6.4.0-150700.53.66.1.150700.17.39.1 | 6.4.0-150700.53.66.1.150700.17.39.1 |
kernel-sourceSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 105 CVEs |
before 6.4.0-150700.53.66.1 | 6.4.0-150700.53.66.1 |
kernel-zfcpdumpSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 105 CVEs |
before 6.4.0-150700.53.66.1 | 6.4.0-150700.53.66.1 |
kernel-docsSUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 105 CVEs |
before 6.4.0-150700.53.66.2 | 6.4.0-150700.53.66.2 |
kernel-obs-buildSUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 105 CVEs |
before 6.4.0-150700.53.66.1 | 6.4.0-150700.53.66.1 |
kernel-sourceSUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 105 CVEs |
before 6.4.0-150700.53.66.1 | 6.4.0-150700.53.66.1 |
kernel-symsSUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 105 CVEs |
before 6.4.0-150700.53.66.1 | 6.4.0-150700.53.66.1 |
kernel-defaultSUSE:Linux Enterprise Module for Legacy 15 SP7 From an advisory covering 105 CVEs |
before 6.4.0-150700.53.66.1 | 6.4.0-150700.53.66.1 |
kernel-defaultSUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 105 CVEs |
before 6.4.0-150700.53.66.1 | 6.4.0-150700.53.66.1 |
kernel-livepatch-SLE15-SP7_Update_18SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 105 CVEs |
before 1-150700.15.3.1 | 1-150700.15.3.1 |
kernel-azureSUSE:Linux Enterprise Module for Public Cloud 15 SP7 From an advisory covering 105 CVEs |
before 6.4.0-150700.53.66.1 | 6.4.0-150700.53.66.1 |
linux-hwe-edgeUbuntu:16.04:LTS |
All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1 |
None known |
linux-aws-5.0Ubuntu:18.04:LTS |
All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30 |
None known |
linux-aws-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37 |
None known |
linux-azureUbuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38 |
None known |
linux-azure-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36 |
None known |
linux-azure-edgeUbuntu:18.04:LTS |
All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2 |
None known |
linux-gcpUbuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35 |
None known |
linux-gcp-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1 |
None known |
linux-gke-4.15Ubuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84 |
None known |
linux-gke-5.4Ubuntu:18.04:LTS |
All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1 |
None known |
linux-gkeop-5.4Ubuntu:18.04:LTS |
All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1 |
None known |
linux-hweUbuntu:18.04:LTS |
All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72 |
None known |
linux-hwe-edgeUbuntu:18.04:LTS |
All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2 |
None known |
linux-oemUbuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114 |
None known |
linux-oracle-5.0Ubuntu:18.04:LTS |
All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19 |
None known |
linux-oracle-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1 |
None known |
linux-aws-5.11Ubuntu:20.04:LTS |
All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1 |
None known |
linux-aws-5.13Ubuntu:20.04:LTS |
All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1 |
None known |
linux-aws-5.8Ubuntu:20.04:LTS |
All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1 |
None known |
linux-azure-5.11Ubuntu:20.04:LTS |
All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2 |
None known |
linux-azure-5.13Ubuntu:20.04:LTS |
All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1 |
None known |
linux-azure-5.8Ubuntu:20.04:LTS |
All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1 |
None known |
linux-azure-fdeUbuntu:20.04:LTS |
All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1 |
None known |
linux-gcp-5.11Ubuntu:20.04:LTS |
All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3 |
None known |
linux-gcp-5.13Ubuntu:20.04:LTS |
All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1 |
None known |
linux-gcp-5.8Ubuntu:20.04:LTS |
All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41 |
None known |
linux-gkeUbuntu:20.04:LTS |
All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111 |
None known |
linux-gke-5.15Ubuntu:20.04:LTS |
All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1 |
None known |
linux-gkeopUbuntu:20.04:LTS |
All versions, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77 |
None known |
linux-gkeop-5.15Ubuntu:20.04:LTS |
All versions, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 40 moreShow less5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1 |
None known |
linux-hwe-5.11Ubuntu:20.04:LTS |
All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1 |
None known |
linux-hwe-5.13Ubuntu:20.04:LTS |
All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1 |
None known |
linux-hwe-5.8Ubuntu:20.04:LTS |
All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1 |
None known |
linux-intel-5.13Ubuntu:20.04:LTS |
All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19 |
None known |
linux-oem-5.10Ubuntu:20.04:LTS |
All versions, plus listed versions 5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17 Show 21 moreShow less5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61 |
None known |
linux-oem-5.13Ubuntu:20.04:LTS |
All versions, plus listed versions 5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21 Show 7 moreShow less5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36 |
None known |
linux-oem-5.14Ubuntu:20.04:LTS |
All versions, plus listed versions 5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10 Show 30 moreShow less5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67 |
None known |
linux-oem-5.6Ubuntu:20.04:LTS |
All versions, plus listed versions 5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13 Show 24 moreShow less5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60 |
None known |
linux-oracle-5.11Ubuntu:20.04:LTS |
All versions, plus listed versions 5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1 |
None known |
linux-oracle-5.13Ubuntu:20.04:LTS |
All versions, plus listed versions 5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1 Show 7 moreShow less5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1 |
None known |
linux-oracle-5.8Ubuntu:20.04:LTS |
All versions, plus listed versions 5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1 |
None known |
linux-raspi2Ubuntu:20.04:LTS |
All versions, plus listed versions 5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6 |
None known |
linux-riscvUbuntu:20.04:LTS |
All versions, plus listed versions 5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34 Show 7 moreShow less5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45 |
None known |
linux-riscv-5.11Ubuntu:20.04:LTS |
All versions, plus listed versions 5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1 Show 8 moreShow less5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35 |
None known |
linux-riscv-5.8Ubuntu:20.04:LTS |
All versions, plus listed versions 5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1 Show 5 moreShow less5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1 |
None known |
linux-allwinner-5.19Ubuntu:22.04:LTS |
All versions, plus listed versions 5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1 |
None known |
linux-aws-5.19Ubuntu:22.04:LTS |
All versions, plus listed versions 5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1 Show 5 moreShow less5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1 |
None known |
linux-aws-6.2Ubuntu:22.04:LTS |
All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 9 moreShow less6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1 |
None known |
linux-aws-6.5Ubuntu:22.04:LTS |
All versions, plus listed versions 6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1 Show 9 moreShow less6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1 |
None known |
linux-aws-6.8Ubuntu:22.04:LTS |
All versions, plus listed versions 6.8.0-1009.9~22.04.26.8.0-1010.10~22.04.26.8.0-1011.12~22.04.16.8.0-1013.14~22.04.16.8.0-1014.15~22.04.1 Show 41 moreShow less6.8.0-1015.16~22.04.16.8.0-1016.17~22.04.26.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1023.25~22.04.16.8.0-1024.26~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1035.37~22.04.16.8.0-1036.38~22.04.16.8.0-1039.41~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.44~22.04.16.8.0-1043.45~22.04.16.8.0-1044.46~22.04.16.8.0-1045.47~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.16.8.0-1050.53~22.04.16.8.0-1051.54~22.04.16.8.0-1052.55~22.04.16.8.0-1053.56~22.04.16.8.0-1055.58~22.04.16.8.0-1057.60~22.04.16.8.0-1060.63~22.04.16.8.0-1061.64~22.04.16.8.0-1062.65~22.04.26.8.0-1063.66~22.04.16.8.0-1064.67~22.04.16.8.0-1065.68~22.04.16.8.0-1066.69~22.04.16.8.0-1069.74~22.04.1 |
None known |
linux-azure-5.19Ubuntu:22.04:LTS |
All versions, plus listed versions 5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2 |
None known |
linux-azure-6.2Ubuntu:22.04:LTS |
All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 8 moreShow less6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1 |
None known |
linux-azure-6.5Ubuntu:22.04:LTS |
All versions, plus listed versions 6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1 Show 9 moreShow less6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1 |
None known |
linux-azure-6.8Ubuntu:22.04:LTS |
All versions, plus listed versions 6.8.0-1008.8~22.04.16.8.0-1009.9~22.04.16.8.0-1010.10~22.04.16.8.0-1012.14~22.04.16.8.0-1013.15~22.04.1 Show 28 moreShow less6.8.0-1014.16~22.04.16.8.0-1015.17~22.04.26.8.0-1017.20~22.04.16.8.0-1018.21~22.04.16.8.0-1020.23~22.04.16.8.0-1021.25~22.04.16.8.0-1025.30~22.04.16.8.0-1026.31~22.04.16.8.0-1027.32~22.04.16.8.0-1028.33~22.04.16.8.0-1029.34~22.04.16.8.0-1030.35~22.04.16.8.0-1031.36~22.04.16.8.0-1034.39~22.04.16.8.0-1036.42~22.04.16.8.0-1040.46~22.04.16.8.0-1041.47~22.04.16.8.0-1044.50~22.04.16.8.0-1051.57~22.04.16.8.0-1052.58~22.04.16.8.0-1059.65~22.04.16.8.0-1062.69~22.04.16.8.0-1063.71~22.04.16.8.0-1064.72~22.04.16.8.0-1065.73~22.04.16.8.0-1067.75~22.04.16.8.0-1068.76~22.04.16.8.0-1070.78~22.04.1 |
None known |
linux-azure-fde-5.19Ubuntu:22.04:LTS |
All versions, plus listed versions 5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1 |
None known |
dtb-aarch64openSUSE:Leap 16.0 From an advisory covering 255 CVEs |
before 6.12.0-160000.36.1 | 6.12.0-160000.36.1 |
kernel-64kbopenSUSE:Leap 16.0 From an advisory covering 255 CVEs |
before 6.12.0-160000.36.1 | 6.12.0-160000.36.1 |
kernel-azureopenSUSE:Leap 16.0 From an advisory covering 255 CVEs |
before 6.12.0-160000.36.1 | 6.12.0-160000.36.1 |
kernel-defaultopenSUSE:Leap 16.0 From an advisory covering 255 CVEs |
before 6.12.0-160000.36.1 | 6.12.0-160000.36.1 |
kernel-default-baseopenSUSE:Leap 16.0 From an advisory covering 255 CVEs |
before 6.12.0-160000.36.1.160000.2.17 | 6.12.0-160000.36.1.160000.2.17 |
kernel-docsopenSUSE:Leap 16.0 From an advisory covering 255 CVEs |
before 6.12.0-160000.36.1 | 6.12.0-160000.36.1 |
kernel-kvmsmallopenSUSE:Leap 16.0 From an advisory covering 255 CVEs |
before 6.12.0-160000.36.1 | 6.12.0-160000.36.1 |
kernel-obs-buildopenSUSE:Leap 16.0 From an advisory covering 255 CVEs |
before 6.12.0-160000.36.1 | 6.12.0-160000.36.1 |
kernel-obs-qaopenSUSE:Leap 16.0 From an advisory covering 255 CVEs |
before 6.12.0-160000.36.1 | 6.12.0-160000.36.1 |
kernel-rtopenSUSE:Leap 16.0 From an advisory covering 255 CVEs |
before 6.12.0-160000.36.1 | 6.12.0-160000.36.1 |
kernel-sourceopenSUSE:Leap 16.0 From an advisory covering 255 CVEs |
before 6.12.0-160000.36.1 | 6.12.0-160000.36.1 |
kernel-symsopenSUSE:Leap 16.0 From an advisory covering 255 CVEs |
before 6.12.0-160000.36.1 | 6.12.0-160000.36.1 |
kernel-zfcpdumpopenSUSE:Leap 16.0 From an advisory covering 255 CVEs |
before 6.12.0-160000.36.1 | 6.12.0-160000.36.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | OSV | |
| affected | OSV | |
| affected | OSV | |
| facts | OSV | |
| affected | OSV | |
| affected | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-53281 is a high vulnerability (CVSS 8.8) in Linux, published June 26, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.14%, the 3rd percentile. Fixed in linux-lts 6.12.115-r0.
References
git.kernel.org/stable/c/d1a677f9c5e02c4ae49614044ac21296660d1391
git.kernel.org/stable/c/9022cb9ac0c2a72a57fa8ebf92ac74f953ca0153
git.kernel.org/stable/c/cdfe3c9f2c9e28a8651ee463c88ad191ced2f840
git.kernel.org/stable/c/79ea2feb917b05366b49d85573c9c5331f043b2c
access.redhat.com/security/cve/CVE-2026-53281
bugzilla.redhat.com/show_bug.cgi?id=2493728
Show 194 moreShow less
security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53281.json
access.redhat.com/errata/RHSA-2026:47017
access.redhat.com/errata/RHSA-2026:47040
nvd.nist.gov/vuln/detail/CVE-2026-53281
github.com/advisories/GHSA-p9cf-q2gf-35mq
access.redhat.com/security/cve/CVE-2026-46086
access.redhat.com/security/cve/CVE-2026-52993
access.redhat.com/security/cve/CVE-2026-53006
bugzilla.redhat.com/2481989
bugzilla.redhat.com/2492363
bugzilla.redhat.com/2492437
bugzilla.redhat.com/2493728
errata.almalinux.org/10/ALSA-2026-47017.html
redhat.com/security/data/cve/CVE-2026-31635.html
access.redhat.com/security/cve/CVE-2025-39797
access.redhat.com/security/cve/CVE-2026-23002
access.redhat.com/security/cve/CVE-2026-52973
access.redhat.com/security/cve/CVE-2026-64017
bugzilla.redhat.com/2400057
bugzilla.redhat.com/2432666
bugzilla.redhat.com/2492413
bugzilla.redhat.com/2502449
errata.almalinux.org/9/ALSA-2026-47040.html
docs.bell-sw.com/security/cves/CVE-2026-53281
errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1789986443.html
nvd.nist.gov/vuln/detail/CVE-2022-49182
nvd.nist.gov/vuln/detail/CVE-2022-50255
nvd.nist.gov/vuln/detail/CVE-2024-53175
nvd.nist.gov/vuln/detail/CVE-2024-57857
nvd.nist.gov/vuln/detail/CVE-2025-21751
nvd.nist.gov/vuln/detail/CVE-2025-22015
nvd.nist.gov/vuln/detail/CVE-2025-37743
nvd.nist.gov/vuln/detail/CVE-2025-38364
nvd.nist.gov/vuln/detail/CVE-2025-38588
nvd.nist.gov/vuln/detail/CVE-2025-38593
nvd.nist.gov/vuln/detail/CVE-2025-39946
nvd.nist.gov/vuln/detail/CVE-2025-39977
nvd.nist.gov/vuln/detail/CVE-2025-40016
nvd.nist.gov/vuln/detail/CVE-2025-40105
nvd.nist.gov/vuln/detail/CVE-2025-40173
nvd.nist.gov/vuln/detail/CVE-2025-40231
nvd.nist.gov/vuln/detail/CVE-2025-68192
nvd.nist.gov/vuln/detail/CVE-2025-68363
nvd.nist.gov/vuln/detail/CVE-2025-68785
nvd.nist.gov/vuln/detail/CVE-2025-68816
nvd.nist.gov/vuln/detail/CVE-2026-23142
nvd.nist.gov/vuln/detail/CVE-2026-23166
nvd.nist.gov/vuln/detail/CVE-2026-23262
nvd.nist.gov/vuln/detail/CVE-2026-23327
nvd.nist.gov/vuln/detail/CVE-2026-23343
nvd.nist.gov/vuln/detail/CVE-2026-23386
nvd.nist.gov/vuln/detail/CVE-2026-23466
nvd.nist.gov/vuln/detail/CVE-2026-31407
nvd.nist.gov/vuln/detail/CVE-2026-31440
nvd.nist.gov/vuln/detail/CVE-2026-31446
nvd.nist.gov/vuln/detail/CVE-2026-31448
nvd.nist.gov/vuln/detail/CVE-2026-31449
nvd.nist.gov/vuln/detail/CVE-2026-31450
github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53281.json
git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
security-tracker.debian.org/tracker/CVE-2026-53281
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=2481989
bugzilla.redhat.com/show_bug.cgi?id=2492363
bugzilla.redhat.com/show_bug.cgi?id=2492437
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_47017.json
access.redhat.com/security/cve/CVE-2026-31635
bugzilla.redhat.com/show_bug.cgi?id=2461567
cve.org/CVERecord?id=CVE-2026-31635
lore.kernel.org/linux-cve-announce/2026042455-CVE-2026-31635-73bd@gregkh/T
cve.org/CVERecord?id=CVE-2026-46086
lore.kernel.org/linux-cve-announce/2026052701-CVE-2026-46086-d3c8@gregkh/T
cve.org/CVERecord?id=CVE-2026-52993
lore.kernel.org/linux-cve-announce/2026062445-CVE-2026-52993-34a2@gregkh/T
cve.org/CVERecord?id=CVE-2026-53006
lore.kernel.org/linux-cve-announce/2026062448-CVE-2026-53006-2b02@gregkh/T
cve.org/CVERecord?id=CVE-2026-53281
lore.kernel.org/linux-cve-announce/2026062615-CVE-2026-53281-bce7@gregkh/T
bugzilla.redhat.com/show_bug.cgi?id=2400057
bugzilla.redhat.com/show_bug.cgi?id=2432666
bugzilla.redhat.com/show_bug.cgi?id=2492413
bugzilla.redhat.com/show_bug.cgi?id=2502449
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_47040.json
cve.org/CVERecord?id=CVE-2025-39797
lore.kernel.org/linux-cve-announce/2025091224-CVE-2025-39797-b0f7@gregkh/T
cve.org/CVERecord?id=CVE-2026-23002
lore.kernel.org/linux-cve-announce/2026012534-CVE-2026-23002-ffa4@gregkh/T
cve.org/CVERecord?id=CVE-2026-52973
lore.kernel.org/linux-cve-announce/2026062439-CVE-2026-52973-af9c@gregkh/T
cve.org/CVERecord?id=CVE-2026-64017
lore.kernel.org/linux-cve-announce/2026071900-CVE-2026-64017-c8ee@gregkh/T
errata.rockylinux.org/RLSA-2026:47017
errata.rockylinux.org/RLSA-2026:47040
suse.com/support/update/announcement/2026/suse-su-202622521-1
bugzilla.suse.com/1255029
bugzilla.suse.com/1261604
bugzilla.suse.com/1262618
bugzilla.suse.com/1262655
bugzilla.suse.com/1263072
bugzilla.suse.com/1263560
bugzilla.suse.com/1263573
bugzilla.suse.com/1263998
bugzilla.suse.com/1264001
bugzilla.suse.com/1264015
bugzilla.suse.com/1264228
bugzilla.suse.com/1264230
bugzilla.suse.com/1264236
bugzilla.suse.com/1264241
bugzilla.suse.com/1264254
bugzilla.suse.com/1264258
bugzilla.suse.com/1264261
bugzilla.suse.com/1264286
bugzilla.suse.com/1264294
bugzilla.suse.com/1264320
bugzilla.suse.com/1264337
bugzilla.suse.com/1264562
bugzilla.suse.com/1264612
bugzilla.suse.com/1264734
bugzilla.suse.com/1264748
bugzilla.suse.com/1264814
bugzilla.suse.com/1264974
bugzilla.suse.com/1265113
bugzilla.suse.com/1265421
bugzilla.suse.com/1265629
bugzilla.suse.com/1266008
bugzilla.suse.com/1266396
bugzilla.suse.com/1266700
suse.com/security/cve/CVE-2025-40341
suse.com/security/cve/CVE-2025-71294
suse.com/security/cve/CVE-2026-23451
suse.com/security/cve/CVE-2026-31450
suse.com/security/cve/CVE-2026-31462
suse.com/security/cve/CVE-2026-31466
suse.com/security/cve/CVE-2026-31502
suse.com/security/cve/CVE-2026-31670
suse.com/security/cve/CVE-2026-31677
suse.com/security/cve/CVE-2026-43010
suse.com/security/cve/CVE-2026-43022
suse.com/security/cve/CVE-2026-43034
suse.com/security/cve/CVE-2026-43079
suse.com/security/cve/CVE-2026-43080
suse.com/security/cve/CVE-2026-43081
suse.com/security/cve/CVE-2026-43085
suse.com/security/cve/CVE-2026-43086
suse.com/security/cve/CVE-2026-43089
suse.com/security/cve/CVE-2026-43093
suse.com/security/cve/CVE-2026-43107
suse.com/security/cve/CVE-2026-43128
suse.com/security/cve/CVE-2026-43139
suse.com/security/cve/CVE-2026-43233
suse.com/security/cve/CVE-2026-43238
suse.com/security/cve/CVE-2026-43303
suse.com/security/cve/CVE-2026-43336
suse.com/security/cve/CVE-2026-43420
suse.com/security/cve/CVE-2026-43456
suse.com/security/cve/CVE-2026-43472
suse.com/security/cve/CVE-2026-43492
suse.com/security/cve/CVE-2026-43502
suse.com/security/cve/CVE-2026-45838
suse.com/security/cve/CVE-2026-45848
ubuntu.com/security/CVE-2026-53281
git.kernel.org/linus/79ea2feb917b05366b49d85573c9c5331f043b2c
ubuntu.com/security/notices/USN-8566-1
ubuntu.com/security/notices/USN-8568-1
ubuntu.com/security/notices/USN-8569-1
ubuntu.com/security/notices/USN-8593-1
ubuntu.com/security/notices/USN-8603-1
ubuntu.com/security/notices/USN-8618-1
ubuntu.com/security/notices/USN-8663-1
ubuntu.com/security/notices/USN-8664-1
ubuntu.com/security/notices/USN-8728-1
ubuntu.com/security/notices/USN-8781-1
ubuntu.com/security/notices/USN-8728-2
ubuntu.com/security/notices/USN-8728-3
ubuntu.com/security/CVE-2025-54518
ubuntu.com/security/CVE-2026-43490
ubuntu.com/security/CVE-2026-43492
ubuntu.com/security/CVE-2026-43495
ubuntu.com/security/CVE-2026-43496
ubuntu.com/security/CVE-2026-43497
ubuntu.com/security/CVE-2026-43498
ubuntu.com/security/CVE-2026-43502
ubuntu.com/security/CVE-2026-45834
ubuntu.com/security/CVE-2026-45835
ubuntu.com/security/CVE-2026-45836
ubuntu.com/security/CVE-2026-45837
ubuntu.com/security/CVE-2026-45838
ubuntu.com/security/CVE-2026-45839
ubuntu.com/security/CVE-2026-45840
ubuntu.com/security/CVE-2026-45841
ubuntu.com/security/CVE-2026-45842
ubuntu.com/security/CVE-2026-45843
ubuntu.com/security/CVE-2026-45844
ubuntu.com/security/CVE-2026-45845
Left out here: 427 package rows, 123 versions, 2,569 references and the rest of 24 source descriptions. The JSON record has them.