CVE-2026-53365

vsock/virtio: fix zerocopy completion for multi-skb sends

5.5 MediumPublic exploitFix available

What does this mean?

: 5.5v3.1, from NVD
: 0.20%9th percentile
Fixed in: 6.12.103-r0linux-lts
Published: July 13, 2026
Modified: November 10, 2026
Weakness: CWE-401CWE-404
Also known as: ALSA-2026:77689ALSA-2026:77690BELL-CVE-2026-53365CLSA-2026-1791800936DEBIAN-CVE-2026-53365EUVD-2026-43513GHSA-9p63-4jq7-2c9wRHSA-2026:77689
Show 31 moreShow less
RHSA-2026:77690RLSA-2026:77689RLSA-2026:77690ROOT-OS-UBUNTU-2404-CVE-2026-53365SUSE-SU-2026:23477-1SUSE-SU-2026:23481-1SUSE-SU-2026:23528-1SUSE-SU-2026:23529-1SUSE-SU-2026:23881-1SUSE-SU-2026:23887-1SUSE-SU-2026:23897-1SUSE-SU-2026:23902-1SUSE-SU-2026:4120-1SUSE-SU-2026:4254-1SUSE-SU-2026:4369-1UBUNTU-CVE-2026-53365USN-8566-1USN-8568-1USN-8569-1USN-8593-1USN-8603-1USN-8618-1USN-8663-1USN-8664-1USN-8728-1USN-8728-2USN-8728-3USN-8886-1USN-8917-1USN-8918-1openSUSE-SU-2026:21910-1

In the Linux kernel, the following vulnerability has been resolved:

vsock/virtio: fix zerocopy completion for multi-skb sends

When a large message is fragmented into multiple skbs, the zerocopy uarg is only allocated and attached to the last skb in the loop. Non-final skbs carry pinned user pages with no completion tracking, so the kernel has no way to notify userspace when those pages are safe to reuse. If the loop breaks early the uarg is never allocated at all, leaking pinned pages with no completion notification.

Fix this by following the approach used by TCP: allocate the zerocopy uarg (if not provided by the caller) before the send loop and attach it to every skb via skb_zcopy_set(), which takes a reference per skb. Each skb's completion properly decrements the refcount, and the notification only fires after the last skb is freed. On failure, if no data was sent, the uarg is cleanly aborted via net_zcopy_put_abort().

This issue was initially discovered by sashiko while reviewing commit 1cb36e252211 ("vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting") but was pre-existing.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

0.20%Unchanged since Jul 14, 2026

What each source reports

NVD Score used 5.5

In the Linux kernel, the following vulnerability has been resolved:

vsock/virtio: fix zerocopy completion for multi-skb sends

This issue was initially discovered by sashiko while reviewing commit 1cb36e252211 ("vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting") but was pre-existing.

Record: CVE-2026-53365
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-401, CWE-404
Updated: 2026-11-02

CVE List 7.8

vsock/virtio: fix zerocopy completion for multi-skb sends

In the Linux kernel, the following vulnerability has been resolved:

vsock/virtio: fix zerocopy completion for multi-skb sends

This issue was initially discovered by sashiko while reviewing commit 1cb36e252211 ("vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting") but was pre-existing.

Record: CVE-2026-53365
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-404
Updated: 2026-11-02

EUVDEUVD-2026-43513 7.8

In the Linux kernel, the following vulnerability has been resolved:

vsock/virtio: fix zerocopy completion for multi-skb sends

This issue was initially discovered by sashiko while reviewing commit 1cb36e252211 ("vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting") but was pre-existing.

Record: EUVD-2026-43513
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-9p63-4jq7-2c9w 5.5

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix zerocopy...

In the Linux kernel, the following vulnerability has been resolved:

vsock/virtio: fix zerocopy completion for multi-skb sends

This issue was initially discovered by sashiko while reviewing commit 1cb36e252211 ("vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting") but was pre-existing.

Record: GHSA-9p63-4jq7-2c9w
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-401, CWE-404
Updated: 2026-11-02

OSVBELL-CVE-2026-53365 5.5

Record: BELL-CVE-2026-53365
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSV 7.8

vsock/virtio: fix zerocopy completion for multi-skb sends

In the Linux kernel, the following vulnerability has been resolved:

vsock/virtio: fix zerocopy completion for multi-skb sends

This issue was initially discovered by sashiko while reviewing commit 1cb36e252211 ("vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting") but was pre-existing.

Record: CVE-2026-53365
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 36 moreShow less

OSVDEBIAN-CVE-2026-53365 5.5

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix zerocopy completion for multi-skb sends When a large message is fragmented into multiple skbs, the zerocopy uarg is only allocated and attached to the last skb in the loop. Non-final skbs carry pinned user pages with no completion tracking, so the kernel has no way to notify userspace when those pages are safe to reuse. If the loop breaks early the uarg is never allocated at all, leaking pinned pages with no completion notification. Fix this by following the approach used by TCP: allocate the zerocopy uarg (if not provided by the caller) before the send loop and attach it to every skb via skb_zcopy_set(), which takes a reference per skb. Each skb's completion properly decrements the refcount, and the notification only fires after the last skb is freed. On failure, if no data was sent, the uarg is cleanly aborted via net_zcopy_put_abort(). This issue was initially discovered by sashiko while reviewing commit 1cb36e252211 ("vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting") but was pre-existing.

Record: DEBIAN-CVE-2026-53365
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2026:77689 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record: RHSA-2026:77689
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:77690 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record: RHSA-2026:77690
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:77689 8.8

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: ipvlan: Make the addrs_lock be per port (CVE-2026-23103)
kernel: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (CVE-2026-53360)
kernel: vsock/virtio: fix zerocopy completion for multi-skb sends (CVE-2026-53365)
kernel: NFSD: Fix SECINFO_NO_NAME decode error cleanup (CVE-2026-53398)
kernel: vsock/virtio: bind uarg before filling zerocopy skb (CVE-2026-63970)
kernel: igc: set tx buffer type for SMD frames (CVE-2026-64035)
kernel: idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (CVE-2026-64162)
kernel: vsock/vmci: fix UAF when peer resets connection during handshake (CVE-2026-64115)
kernel: SUNRPC: pin upper rpc_clnt across the TLS connect_worker (CVE-2026-72317)
kernel: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (CVE-2026-74744)
kernel: nfsd: defer vfree of compound ops to fix rpc_status UAF (CVE-2026-89690)
kernel: nfsd: initialize copy-notify stateid before publishing it (CVE-2026-89669)
kernel: svcrdma: Reject inline replies that overflow the pull-up buffer (CVE-2026-89530)
kernel: nfsd: revoke copy-notify stateids before dropping their reference (CVE-2026-89663)

Bug Fix(es) and Enhancement(s):

"iavf: refactor iavf_clean_rx_irq to support legacy and flex descriptors" broke rx-vlan-offload on rhel-9.7 [rhel-9.8.z] (JIRA:Rocky Linux-169480)
[GNR-D] missing interfaces tspll_cfg (JIRA:Rocky Linux-183201)
Rocky Linux9.8z KVM guest panicked in vmmouse driver (JIRA:Rocky Linux-186577)
Add Epson RX8111 support to Rocky Linux9.9 [rhel-9.8.z] (JIRA:Rocky Linux-212014)
RT scheduler livelock: migrate-disabled task at pushable-list head causes repeated RT push/stopper retries, starving a critical RT task (remaining issue after CVE-2026-45919 fix in 94894c9c477e) [rhel-9.8.z] (JIRA:Rocky Linux-256279)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:77689
CVSS 3.1: 8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:77690 8.8

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: ipvlan: Make the addrs_lock be per port (CVE-2026-23103)
kernel: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (CVE-2026-53360)
kernel: vsock/virtio: fix zerocopy completion for multi-skb sends (CVE-2026-53365)
kernel: NFSD: Fix SECINFO_NO_NAME decode error cleanup (CVE-2026-53398)
kernel: vsock/virtio: bind uarg before filling zerocopy skb (CVE-2026-63970)
kernel: igc: set tx buffer type for SMD frames (CVE-2026-64035)
kernel: vsock/vmci: fix UAF when peer resets connection during handshake (CVE-2026-64115)
kernel: SUNRPC: pin upper rpc_clnt across the TLS connect_worker (CVE-2026-72317)
kernel: udp: fix potential use-after-free in tunnel segmentation (CVE-2026-74705)
kernel: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (CVE-2026-74744)
kernel: nfsd: defer vfree of compound ops to fix rpc_status UAF (CVE-2026-89690)
kernel: nfsd: initialize copy-notify stateid before publishing it (CVE-2026-89669)
kernel: svcrdma: Reject inline replies that overflow the pull-up buffer (CVE-2026-89530)
kernel: nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (CVE-2026-89676)
kernel: nfsd: revoke copy-notify stateids before dropping their reference (CVE-2026-89663)
kernel: nfsd: fix UAF in async copy cancel and shutdown (CVE-2026-89675)

Bug Fix(es) and Enhancement(s):

mlxbf_bootctl: driver update to Linux v6.16 [Nvidia 10.2.z FEAT] (JIRA:Rocky Linux-212709)
[GNR-D] missing interfaces tspll_cfg [rhel-10.2] (JIRA:Rocky Linux-273805)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:77690
CVSS 3.1: 8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2026-53365 5.5

Record: UBUNTU-CVE-2026-53365
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-10

OSVALSA-2026:77689 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: ipvlan: Make the addrs_lock be per port (CVE-2026-23103)
kernel: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (CVE-2026-53360)
kernel: vsock/virtio: fix zerocopy completion for multi-skb sends (CVE-2026-53365)
kernel: NFSD: Fix SECINFO_NO_NAME decode error cleanup (CVE-2026-53398)
kernel: vsock/virtio: bind uarg before filling zerocopy skb (CVE-2026-63970)
kernel: igc: set tx buffer type for SMD frames (CVE-2026-64035)
kernel: idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (CVE-2026-64162)
kernel: vsock/vmci: fix UAF when peer resets connection during handshake (CVE-2026-64115)
kernel: SUNRPC: pin upper rpc_clnt across the TLS connect_worker (CVE-2026-72317)
kernel: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (CVE-2026-74744)
kernel: nfsd: defer vfree of compound ops to fix rpc_status UAF (CVE-2026-89690)
kernel: nfsd: initialize copy-notify stateid before publishing it (CVE-2026-89669)
kernel: svcrdma: Reject inline replies that overflow the pull-up buffer (CVE-2026-89530)
kernel: nfsd: revoke copy-notify stateids before dropping their reference (CVE-2026-89663)

Bug Fix(es) and Enhancement(s):

"iavf: refactor iavf_clean_rx_irq to support legacy and flex descriptors" broke rx-vlan-offload on almalinux-9.7 [almalinux-9.8.z] (JIRA:AlmaLinux-169480)
[GNR-D] missing interfaces tspll_cfg (JIRA:AlmaLinux-183201)
AlmaLinux9.8z KVM guest panicked in vmmouse driver (JIRA:AlmaLinux-186577)
Add Epson RX8111 support to AlmaLinux9.9 [almalinux-9.8.z] (JIRA:AlmaLinux-212014)
RT scheduler livelock: migrate-disabled task at pushable-list head causes repeated RT push/stopper retries, starving a critical RT task (remaining issue after CVE-2026-45919 fix in 94894c9c477e) [almalinux-9.8.z] (JIRA:AlmaLinux-256279)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:77689
Updated: 2026-11-02

OSVALSA-2026:77690 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: ipvlan: Make the addrs_lock be per port (CVE-2026-23103)
kernel: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (CVE-2026-53360)
kernel: vsock/virtio: fix zerocopy completion for multi-skb sends (CVE-2026-53365)
kernel: NFSD: Fix SECINFO_NO_NAME decode error cleanup (CVE-2026-53398)
kernel: vsock/virtio: bind uarg before filling zerocopy skb (CVE-2026-63970)
kernel: igc: set tx buffer type for SMD frames (CVE-2026-64035)
kernel: vsock/vmci: fix UAF when peer resets connection during handshake (CVE-2026-64115)
kernel: SUNRPC: pin upper rpc_clnt across the TLS connect_worker (CVE-2026-72317)
kernel: udp: fix potential use-after-free in tunnel segmentation (CVE-2026-74705)
kernel: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (CVE-2026-74744)
kernel: nfsd: defer vfree of compound ops to fix rpc_status UAF (CVE-2026-89690)
kernel: nfsd: initialize copy-notify stateid before publishing it (CVE-2026-89669)
kernel: svcrdma: Reject inline replies that overflow the pull-up buffer (CVE-2026-89530)
kernel: nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (CVE-2026-89676)
kernel: nfsd: revoke copy-notify stateids before dropping their reference (CVE-2026-89663)
kernel: nfsd: fix UAF in async copy cancel and shutdown (CVE-2026-89675)

Bug Fix(es) and Enhancement(s):

mlxbf_bootctl: driver update to Linux v6.16 [Nvidia 10.2.z FEAT] (JIRA:AlmaLinux-212709)
[GNR-D] missing interfaces tspll_cfg [almalinux-10.2] (JIRA:AlmaLinux-273805)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:77690
Updated: 2026-11-02

OSVCLSA-2026-1791800936 No score

kernel: Fix of 191 CVEs

drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check {CVE-2026-89818}
drm/amdgpu/vcn4: Avoid overflow on msg bound check {CVE-2026-46199}
drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg {CVE-2026-46199}
drm/amdgpu/vcn3: Avoid overflow on msg bound check {CVE-2026-46230}
drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg {CVE-2026-46230}
openvswitch: vport: fix self-deadlock on release of tunnel ports {CVE-2026-46165}
openvswitch: defer tunnel netdev_put to RCU release {CVE-2026-31678}
ALSA: usb: Fix UAF at delayed release of MIDI2 EPs {CVE-2026-74642}
ALSA: usb-audio: fix use-after-free in ump_to_endpoint() {CVE-2026-74501}
NFS: Decrement refcounts if allocating nfs_free_stateid_data fails {CVE-2026-74730}
NFS: Pin the 'struct nfs_server' during a FREE_STATEID call {CVE-2026-74730}
exec: do_close_on_exec() before taking exec_update_lock {CVE-2026-64371}
proc: Fix broken error paths for namespace links {CVE-2026-64371}
proc: protect ptrace_may_access() with exec_update_lock (part 1) {CVE-2026-64371}
ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes {CVE-2026-74503}
ALSA: timer: Forcibly close timer instances at closing {CVE-2026-53193}
usb: typec: ucsi: Fix race condition and ordering in port unregistration {CVE-2026-74441}
arp: do not assume dev_hard_header() does not change skb->head {CVE-2026-22988}
netfilter: nft_ct: fix use-after-free in timeout object destroy {CVE-2026-31665}
md/raid10: fix writes_pending and barrier reference leaks on discard failures {CVE-2026-72438}
md/raid10: fix deadlock with check operation and nowait requests {CVE-2026-46050}
mm: introduce and use {pgd,p4d}_populate_kernel() {CVE-2025-39844}
vsock/virtio: fix zerocopy completion for multi-skb sends {CVE-2026-53365}
vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting {CVE-2026-52994}
mm: do file ownership checks with the proper mount idmap {CVE-2026-64294}
udf: validate VAT header length against the VAT inode size {CVE-2026-64323}
SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths {CVE-2026-45870}
Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig {CVE-2026-53208}
slip: bound decode() reads against the compressed packet length {CVE-2026-45843}
net: tls: fix strparser anchor skb leak on offload RX setup failure {CVE-2026-52974}
netfilter: nf_tables: unconditionally bump set->nelems before insertion {CVE-2026-23272}
rbd: Reset positive result codes to zero in object map update path {CVE-2026-68131}
netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() {CVE-2026-23458}
mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr {CVE-2025-21938}
bpf: Fix NULL deref in map_kptr_match_type for scalar regs {CVE-2026-53032}
bpf: Explicitly check accesses to bpf_sock_addr {CVE-2025-40078}
nexthop: Forbid FDB status change while nexthop is in a group {CVE-2025-39980}
bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN {CVE-2026-31525}
x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() {CVE-2025-21913}
ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple() {CVE-2024-57994}
drm/i915/vrr: require valid min/max vfreq for VRR {CVE-2026-68254}
libceph: handle rbtree insertion error in decode_choose_args() {CVE-2026-52954}
gfs2: prevent NULL pointer dereference during unmount {CVE-2026-53048}
smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path {CVE-2026-31708}
ext4: reject mount if bigalloc with s_first_data_block != 0 {CVE-2026-31447}
NFSD: Fix crash in nfsd4_read_release() {CVE-2025-40324}
netfilter: x_tables: guard option walkers against 1-byte tail reads {CVE-2026-43452}
smb: client: Fix refcount leak for cifs_sb_tlink {CVE-2025-40103}
smb: client: harden POSIX SID length parsing {CVE-2026-64380}
crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() {CVE-2026-64438}
bpf: Allow LPM map access from sleepable…

Record: CLSA-2026-1791800936
Updated: 2026-11-02

OSVopenSUSE-SU-2026:21910-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (bsc#1256671).
CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
CVE-2026-23113: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).
CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
CVE-2026-23348: cxl/mem: Clarify @host for devm_cxl_add_nvdimm() (bsc#1260577).
CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
CVE-2026-31530: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (bsc#1262756).
CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444).
CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132).
CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036).
CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897).
CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586).
CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
CVE-2026-46135: nvmet-tcp: remove redundant calls to nvmet_tcp_fatal_error() (bsc#1267373).
CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010).
CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). -…

Record: openSUSE-SU-2026:21910-1
Updated: 2026-11-02

OSVROOT-OS-UBUNTU-2404-CVE-2026-53365 No score

CVE-2026-53365 in linux - Patched by Root

Root has patched CVE-2026-53365 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record: ROOT-OS-UBUNTU-2404-CVE-2026-53365
Updated: 2026-11-06

OSVSUSE-SU-2026:23477-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1235944)
CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
CVE-2026-31392: smb: client: fix krb5 mount with username option (bsc#1261788).
CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).
CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
CVE-2026-43278: dm: clear cloned request bio pointer when last clone bio completes (bsc#1264584).
CVE-2026-43319: spi: spidev: fix lock inversion between spi_lock and buf_lock (bsc#1264788).
CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).
CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).
CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).
CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).
CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).
CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).
CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).
CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).
CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).
CVE-2026-53076: bpf: Fix OOB in pcpu_init_value (bsc#1269695).
CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412).
CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783).
CVE-2026-53091: net: account for encap headers in qdisc pkt len (bsc#1269530).
CVE-2026-53094: bpf: Fix stale offload->prog pointer after constant blinding (bsc#1269965).
CVE-2026-53096: bpf: Use RCU-safe iteration in…

Record: SUSE-SU-2026:23477-1
Updated: 2026-11-02

OSVSUSE-SU-2026:23481-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1269731).
CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
CVE-2026-31392: smb: client: fix krb5 mount with username option (bsc#1261788).
CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).
CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
CVE-2026-43278: dm: clear cloned request bio pointer when last clone bio completes (bsc#1264584).
CVE-2026-43319: spi: spidev: fix lock inversion between spi_lock and buf_lock (bsc#1264788).
CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).
CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).
CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).
CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).
CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).
CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).
CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).
CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).
CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).
CVE-2026-53076: bpf: Fix OOB in pcpu_init_value (bsc#1269695).
CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412).
CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783).
CVE-2026-53091: net: account for encap headers in qdisc pkt len (bsc#1269530).
CVE-2026-53094: bpf: Fix stale offload->prog pointer after constant blinding (bsc#1269965).
CVE-2026-53096: bpf: Use RCU-safe iteration in…

Record: SUSE-SU-2026:23481-1
Updated: 2026-11-02

OSVSUSE-SU-2026:23528-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1235944)
CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
CVE-2026-31392: smb: client: fix krb5 mount with username option (bsc#1261788).
CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).
CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
CVE-2026-43278: dm: clear cloned request bio pointer when last clone bio completes (bsc#1264584).
CVE-2026-43319: spi: spidev: fix lock inversion between spi_lock and buf_lock (bsc#1264788).
CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).
CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).
CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).
CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).
CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).
CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).
CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).
CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).
CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).
CVE-2026-53076: bpf: Fix OOB in pcpu_init_value (bsc#1269695).
CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412).
CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783).
CVE-2026-53091: net: account for encap headers in qdisc pkt len (bsc#1269530).
CVE-2026-53094: bpf: Fix stale offload->prog pointer after constant blinding (bsc#1269965).
CVE-2026-53096: bpf: Use RCU-safe iteration in…

Record: SUSE-SU-2026:23528-1
Updated: 2026-11-02

OSVSUSE-SU-2026:23529-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1269731).
CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
CVE-2026-31392: smb: client: fix krb5 mount with username option (bsc#1261788).
CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).
CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
CVE-2026-43278: dm: clear cloned request bio pointer when last clone bio completes (bsc#1264584).
CVE-2026-43319: spi: spidev: fix lock inversion between spi_lock and buf_lock (bsc#1264788).
CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).
CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).
CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).
CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).
CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).
CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).
CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).
CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).
CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).
CVE-2026-53076: bpf: Fix OOB in pcpu_init_value (bsc#1269695).
CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412).
CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783).
CVE-2026-53091: net: account for encap headers in qdisc pkt len (bsc#1269530).
CVE-2026-53094: bpf: Fix stale offload->prog pointer after constant blinding (bsc#1269965).
CVE-2026-53096: bpf: Use RCU-safe iteration in…

Record: SUSE-SU-2026:23529-1
Updated: 2026-11-02

OSVSUSE-SU-2026:23881-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (bsc#1256671).
CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
CVE-2026-23113: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).
CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
CVE-2026-23348: cxl/mem: Clarify @host for devm_cxl_add_nvdimm() (bsc#1260577).
CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
CVE-2026-31530: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (bsc#1262756).
CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444).
CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132).
CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036).
CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897).
CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586).
CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
CVE-2026-46135: nvmet-tcp: remove redundant calls to nvmet_tcp_fatal_error() (bsc#1267373).
CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010).
CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). -…

Record: SUSE-SU-2026:23881-1
Updated: 2026-11-02

OSVSUSE-SU-2026:23887-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (bsc#1256671).
CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
CVE-2026-23113: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).
CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
CVE-2026-23348: cxl/mem: Clarify @host for devm_cxl_add_nvdimm() (bsc#1260577).
CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
CVE-2026-31530: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (bsc#1262756).
CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444).
CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132).
CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036).
CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897).
CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586).
CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
CVE-2026-46135: nvmet-tcp: remove redundant calls to nvmet_tcp_fatal_error() (bsc#1267373).
CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010).
CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). -…

Record: SUSE-SU-2026:23887-1
Updated: 2026-11-02

OSVSUSE-SU-2026:23897-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (bsc#1256671).
CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
CVE-2026-23113: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).
CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
CVE-2026-23348: cxl/mem: Clarify @host for devm_cxl_add_nvdimm() (bsc#1260577).
CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
CVE-2026-31530: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (bsc#1262756).
CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444).
CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132).
CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036).
CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897).
CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586).
CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
CVE-2026-46135: nvmet-tcp: remove redundant calls to nvmet_tcp_fatal_error() (bsc#1267373).
CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010).
CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). -…

Record: SUSE-SU-2026:23897-1
Updated: 2026-11-02

OSVSUSE-SU-2026:23902-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (bsc#1256671).
CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
CVE-2026-23113: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).
CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
CVE-2026-23348: cxl/mem: Clarify @host for devm_cxl_add_nvdimm() (bsc#1260577).
CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
CVE-2026-31530: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (bsc#1262756).
CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444).
CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132).
CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036).
CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897).
CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586).
CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
CVE-2026-46135: nvmet-tcp: remove redundant calls to nvmet_tcp_fatal_error() (bsc#1267373).
CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010).
CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). -…

Record: SUSE-SU-2026:23902-1
Updated: 2026-11-02

OSVSUSE-SU-2026:4120-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1235944).
CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).
CVE-2026-31658: net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() (bsc#1263052).
CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
CVE-2026-43014: net: macb: properly unregister fixed rate clocks (bsc#1264012).
CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010).
CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
CVE-2026-43213: wifi: rtw89: pci: validate sequence number of TX release report (bsc#1264643).
CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
CVE-2026-43386: staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie (bsc#1264740).
CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).
CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
CVE-2026-46078: erofs: fix the out-of-bounds nameoff handling for trailing dirents (bsc#1267505).
CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).
CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
CVE-2026-46127: RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() (bsc#1267236).
CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).
CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).
CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).
CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).
CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).
CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).
CVE-2026-53034: bpf, sockmap: Fix af_unix null-ptr-deref in proto update (bsc#1269140).
CVE-2026-53059: dm…

Record: SUSE-SU-2026:4120-1
Updated: 2026-11-02

OSVSUSE-SU-2026:4254-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2024-57841,CVE-2026-53260: net: fix memory leak in tcp_conn_request() (bsc#1235944 bsc#1269731).
CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).
CVE-2026-31658: net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() (bsc#1263052).
CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
CVE-2026-43014,CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010 bsc#1264012).
CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
CVE-2026-43213: wifi: rtw89: pci: validate sequence number of TX release report (bsc#1264643).
CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
CVE-2026-43386: staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie (bsc#1264740).
CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).
CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
CVE-2026-46078: erofs: fix the out-of-bounds nameoff handling for trailing dirents (bsc#1267505).
CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).
CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
CVE-2026-46127: RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() (bsc#1267236).
CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).
CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).
CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).
CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).
CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).
CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).
CVE-2026-53034: bpf, sockmap: Fix af_unix null-ptr-deref in proto update (bsc#1269140).
CVE-2026-53059: dm log: fix out-of-bounds write due…

Record: SUSE-SU-2026:4254-1
Updated: 2026-11-02

OSVSUSE-SU-2026:4369-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2024-57841,CVE-2026-53260: net: fix memory leak in tcp_conn_request() (bsc#1235944 bsc#1269731).
CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
CVE-2026-43147: Revert 'PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV' (bsc#1264642).
CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).
CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
CVE-2026-52910: bpf: Free reuseport cBPF prog after RCU grace period (bsc#1268659).
CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).
CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).
CVE-2026-53110: selftests/bpf: Add ASSERT_OK_FD macro (bsc#1269985).
CVE-2026-53163: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (bsc#1269306).
CVE-2026-53264: net/sched: act_api: use RCU with deferred freeing for action lifecycle (bsc#1269238).
CVE-2026-53365: vsock/virtio: fix zerocopy completion for multi-skb sends (bsc#1271365).
CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271830).
CVE-2026-63801: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (bsc#1272230).
CVE-2026-63823: keys: Pin request_key_auth payload in instantiate paths (bsc#1272182).
CVE-2026-63827: apparmor: fix use-after-free in rawdata dedup loop (bsc#1272179).
CVE-2026-63879: drm/amdgpu: fix amdgpu_hmm_range_get_pages (bsc#1272569).
CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).
CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272385).
CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272390).
CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1272877).
CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1272662).
CVE-2026-63970: vsock/virtio: bind uarg before filling zerocopy skb (bsc#1272673).
CVE-2026-63992: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (bsc#1272868).
CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273030).
CVE-2026-64002: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774).
CVE-2026-64007: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105).
CVE-2026-64010: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (bsc#1273882).
CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1273891).
CVE-2026-64015: security/keys: fix missed RCU read section on lookup (bsc#1273762).
CVE-2026-64029: ALSA: seq: Serialize UMP output teardown with event_input (bsc#1273766).
CVE-2026-64048: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (bsc#1273484).
CVE-2026-64098: drm/virtio: use uninterruptible resv lock for plane updates (bsc#1273488).
CVE-2026-64109: af_unix: Peek the queue synchronized (bsc#1273748).
CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273742).
CVE-2026-64115: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745).
CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues…

Record: SUSE-SU-2026:4369-1
Updated: 2026-11-02

OSVUSN-8566-1 No score

linux, linux-gcp, linux-gke, linux-realtime vulnerabilities

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

PSP security protocol;
ARM64 architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Intel NPU Driver;
DRBD Distributed Replicated Block Device drivers;
Ublk userspace block driver;
Bluetooth drivers;
Bus devices;
Character device driver;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
EDAC drivers;
EFI core;
FWCTL subsystem;
GPU drivers;
HID subsystem;
I3C subsystem;
InfiniBand drivers;
IOMMU subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
NVIDIA Tegra memory controller driver;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
MediaTek network drivers;
NVME drivers;
PCI subsystem;
Pin controllers subsystem;
Chrome hardware platform drivers;
ACPI WMI driver;
x86 platform drivers;
Generic PM domains;
MediaTek PM domains;
Power supply drivers;
MPAM driver;
Amlogic Meson reset controller drivers;
S/390 drivers;
SCSI subsystem;
NVIDIA Tegra Control Backbone (CBB) driver;
SPI subsystem;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
TCM subsystem;
TTY drivers;
USB Device Class drivers;
ULPI bus;
USB Type-C support driver;
TI TPS6598x USB Power Delivery controller driver;
vDPA drivers;
VFIO drivers;
Framebuffer layer;
TSM AMD SEV Guest driver;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EROFS file system;
F2FS file system;
FUSE (File system in Userspace);
GFS2 file system;
HFS+ file system;
HugeTLB file system;
Network file system (NFS) server daemon;
NILFS2 file system;
File system notification infrastructure;
NTFS3 file system;
OCFS2 file system;
Overlay file system;
Diskquota system;
SMB network file system;
Tracing file system;
DRM TTM subsystem;
Control group (cgroup);
Kernel CPU control infrastructure;
QorIQ DPAA2 FSL-MC bus driver;
Freescale ENETC Ethernet drivers;
Memory Management;
padata parallel execution mechanism;
PPP protocol drivers and compressors;
Bluetooth subsystem;
Networking core;
Netfilter;
Network traffic control;
io_uring subsystem;
IPC subsystem;
Audit subsystem;
BPF subsystem;
Kernel exit() syscall;
Kernel fork() syscall;
Kernel futex primitives;
Padata parallel execution mechanism;
Scheduler infrastructure;
Tracing infrastructure;
Cryptographic library;
Memory management;
802.1Q VLAN protocol;
B.A.T.M.A.N. meshing protocol;
Ethernet bridge;
Ceph Core library;
Distributed Switch Architecture;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Open vSwitch;
Phonet protocol;
RDS protocol;
SCTP protocol;
SMC sockets;
TIPC protocol;
TLS protocol;
Unix domain sockets;
VMware vSockets driver;
XFRM subsystem;
Integrity Measurement Architecture(IMA) framework;
SELinux security module;
ALSA framework;
HD-audio driver;
QCOM ASoC drivers; -…

Record: USN-8566-1
Updated: 2026-11-07

OSVUSN-8568-1 No score

linux-oem-7.0 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

PSP security protocol;
ARM64 architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Intel NPU Driver;
DRBD Distributed Replicated Block Device drivers;
Ublk userspace block driver;
Bluetooth drivers;
Bus devices;
Character device driver;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
EDAC drivers;
EFI core;
FWCTL subsystem;
GPU drivers;
HID subsystem;
I3C subsystem;
InfiniBand drivers;
IOMMU subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
NVIDIA Tegra memory controller driver;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
MediaTek network drivers;
NVME drivers;
PCI subsystem;
Pin controllers subsystem;
Chrome hardware platform drivers;
ACPI WMI driver;
x86 platform drivers;
Generic PM domains;
MediaTek PM domains;
Power supply drivers;
MPAM driver;
Amlogic Meson reset controller drivers;
S/390 drivers;
SCSI subsystem;
NVIDIA Tegra Control Backbone (CBB) driver;
SPI subsystem;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
TCM subsystem;
TTY drivers;
USB Device Class drivers;
ULPI bus;
USB Type-C support driver;
TI TPS6598x USB Power Delivery controller driver;
vDPA drivers;
VFIO drivers;
Framebuffer layer;
TSM AMD SEV Guest driver;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EROFS file system;
F2FS file system;
FUSE (File system in Userspace);
GFS2 file system;
HFS+ file system;
HugeTLB file system;
Network file system (NFS) server daemon;
NILFS2 file system;
File system notification infrastructure;
NTFS3 file system;
OCFS2 file system;
Diskquota system;
SMB network file system;
Tracing file system;
DRM TTM subsystem;
Control group (cgroup);
Kernel CPU control infrastructure;
QorIQ DPAA2 FSL-MC bus driver;
Freescale ENETC Ethernet drivers;
Memory Management;
padata parallel execution mechanism;
PPP protocol drivers and compressors;
Bluetooth subsystem;
Networking core;
Netfilter;
Network traffic control;
io_uring subsystem;
IPC subsystem;
Audit subsystem;
BPF subsystem;
Kernel exit() syscall;
Kernel fork() syscall;
Kernel futex primitives;
Padata parallel execution mechanism;
Scheduler infrastructure;
Tracing infrastructure;
Cryptographic library;
Memory management;
802.1Q VLAN protocol;
B.A.T.M.A.N. meshing protocol;
Ethernet bridge;
Ceph Core library;
Distributed Switch Architecture;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Open vSwitch;
Phonet protocol;
RDS protocol;
SCTP protocol;
SMC sockets;
TIPC protocol;
TLS protocol;
Unix domain sockets;
VMware vSockets driver;
XFRM subsystem;
Integrity Measurement Architecture(IMA) framework;
SELinux security module;
ALSA framework;
HD-audio driver;
QCOM ASoC drivers;
SOF drivers;
STI ASoC…

Record: USN-8568-1
Updated: 2026-11-07

OSVUSN-8569-1 No score

linux-hwe-7.0 vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43284, CVE-2026-43500, CVE-2026-45998, CVE-2026-46000)

It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43503, CVE-2026-46300)

Qualys discovered that a race condition existed in the ptrace subsystem of the Linux kernel when privileged processes are exiting. An unprivileged local attacker could use this issue to expose sensitive information. (CVE-2026-46333)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contain a memory leak when handling AppArmor notifications. A local attacker could use this to cause resource exhaustion. (CVE-2026-47326)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contain a NULL pointer dereference when handling AppArmor notifications. A local attacker could use this to cause a kernel oops. (CVE-2026-47327)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained an invalid free when handling AppArmor notifications. A local attacker could use this to corrupt kernel memory. (CVE-2026-47328)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained insufficient validation of AppArmor notification responses. A local attacker could use this to allow crafted responses to be processed. (CVE-2026-47329)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 used an uninitialized variable when handling AppArmor notifications. A local attacker could use this to cause incorrect caching of data. (CVE-2026-47330)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained an out-of-bounds (OOB) read when handling AppArmor notifications. A local attacker could use this to cause information disclosure of kernel memory. (CVE-2026-47332)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained a out-of-bounds (OOB) read when handling AppArmor notifications. A local attacker could use this to cause kernel memory corruption and, theoretically, influence processing of AppArmor policies. (CVE-2026-47333)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained incorrect holding of locks when handling AppArmor notifications. A local attacker could use this to cause a kernel panic or deadlock. (CVE-2026-47334)

Tristan Madani and Trevor Lawrence have each independently discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained a NULL pointer dereference when handling AppArmor network socket mediation. A local attacker could use this to cause a kernel oops. (CVE-2026-47337)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

PSP security protocol;
ARM64 architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Intel…

Record: USN-8569-1
Updated: 2026-11-07

OSVUSN-8593-1 No score

linux-ibm, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

x86 platform drivers;
PSP security protocol;
ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Intel NPU Driver;
Compute Acceleration Framework;
ACPI drivers;
Auxiliary display drivers;
Drivers core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
Character device driver;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
DPLL subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
EFI core;
FWCTL subsystem;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
IOMMU subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
NVIDIA Tegra memory controller driver;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Texas Instruments network drivers;
MediaTek network drivers;
NVME drivers;
Parport drivers;
PCI subsystem;
Pin controllers subsystem;
Chrome hardware platform drivers;
ACPI WMI driver;
Generic PM domains;
MediaTek PM domains;
Power supply drivers;
MPAM driver;
Amlogic Meson reset controller drivers;
S/390 drivers;
SCSI subsystem;
NVIDIA Tegra Control Backbone (CBB) driver;
SPI subsystem;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
TCM subsystem;
Thunderbolt and USB4 drivers;
TTY drivers;
Userspace I/O drivers;
USB Device Class drivers;
ULPI bus;
DesignWare USB2 driver;
USB Gadget drivers;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
TI TPS6598x USB Power Delivery controller driver;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
vDPA drivers;
VFIO drivers;
Framebuffer layer;
TSM AMD SEV Guest driver;
Xen hypervisor drivers;
9P distributed file system;
File systems infrastructure;
AFS file system;
BTRFS file system;
Ceph distributed file system;
EROFS file system;
F2FS file system;
FUSE (File system in Userspace);
GFS2 file system;
HFS+ file system;
HugeTLB file system;
Network file systems library;
Network file system (NFS) server daemon;
NILFS2 file system;
File system notification infrastructure;
NTFS3 file system;
OCFS2 file system;
Overlay file system;
Diskquota system;
SMB network file system;
Tracing file system;
UDF file system;
DRM TTM subsystem;
Control group (cgroup);
Kernel CPU control infrastructure;
Tracing infrastructure;
QorIQ DPAA2 FSL-MC bus driver;
Freescale ENETC Ethernet drivers;
Memory management;
Memory Management;
Linked list library;
Netfilter;
padata…

Record: USN-8593-1
Updated: 2026-11-07

OSVUSN-8603-1 No score

linux-azure, linux-azure-fde vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

x86 platform drivers;
PSP security protocol;
ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Intel NPU Driver;
Compute Acceleration Framework;
ACPI drivers;
Auxiliary display drivers;
Drivers core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
DPLL subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
EFI core;
FWCTL subsystem;
GPIO subsystem;
GPU drivers;
Greybus drivers;
HID subsystem;
Microsoft Hyper-V drivers;
Hardware monitoring drivers;
I2C subsystem;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
IOMMU subsystem;
LED subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
NVIDIA Tegra memory controller driver;
IBM Advanced System Management driver;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Texas Instruments network drivers;
MediaTek network drivers;
NTB driver;
NVME drivers;
Device tree and open firmware driver;
Parport drivers;
PCI subsystem;
Pin controllers subsystem;
Chrome hardware platform drivers;
ACPI WMI driver;
Generic PM domains;
MediaTek PM domains;
Power supply drivers;
Remote Processor subsystem;
MPAM driver;
Amlogic Meson reset controller drivers;
S/390 drivers;
SCSI subsystem;
NVIDIA Tegra Control Backbone (CBB) driver;
SPI subsystem;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
SM750 framebuffer staging driver;
TCM subsystem;
Thermal drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
Userspace I/O drivers;
USB Device Class drivers;
ULPI bus;
DesignWare USB2 driver;
USB Gadget drivers;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
TI TPS6598x USB Power Delivery controller driver;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
vDPA drivers;
VFIO drivers;
Framebuffer layer;
TSM AMD SEV Guest driver;
Xen hypervisor drivers;
9P distributed file system;
File systems infrastructure;
AFS file system;
BTRFS file system;
Ceph distributed file system;
EROFS file system;
Ext4 file system;
F2FS file system;
FUSE (File system in Userspace);
GFS2 file system;
HFS+ file system;
HugeTLB file system;
Journaling layer for block devices (JBD2);
Network file systems…

Record: USN-8603-1
Updated: 2026-11-07

OSVUSN-8618-1 No score

linux-aws, linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

x86 platform drivers;
Cryptographic API;
PSP security protocol;
ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Intel NPU Driver;
Compute Acceleration Framework;
ACPI drivers;
Auxiliary display drivers;
Drivers core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
Character device driver;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
DPLL subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
EFI core;
FWCTL subsystem;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Mouse) drivers;
IOMMU subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
NVIDIA Tegra memory controller driver;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Texas Instruments network drivers;
MediaTek network drivers;
NVME drivers;
Parport drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
Chrome hardware platform drivers;
ACPI WMI driver;
Generic PM domains;
MediaTek PM domains;
Power supply drivers;
Voltage and Current Regulator drivers;
MPAM driver;
Amlogic Meson reset controller drivers;
S/390 drivers;
SCSI subsystem;
NVIDIA Tegra Control Backbone (CBB) driver;
SPI subsystem;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
TCM subsystem;
Thunderbolt and USB4 drivers;
TTY drivers;
Userspace I/O drivers;
USB Device Class drivers;
ULPI bus;
DesignWare USB2 driver;
USB Gadget drivers;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
TI TPS6598x USB Power Delivery controller driver;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
vDPA drivers;
VFIO drivers;
Framebuffer layer;
TSM AMD SEV Guest driver;
Xen hypervisor drivers;
9P distributed file system;
File systems infrastructure;
AFS file system;
BTRFS file system;
Ceph distributed file system;
EROFS file system;
F2FS file system;
FUSE (File system in Userspace);
GFS2 file system;
HFS+ file system;
HugeTLB file system;
Network file systems library;
Network file system (NFS) server daemon;
NILFS2 file system;
File system notification infrastructure;
NTFS3 file system;
OCFS2 file system;
Overlay file system;
Diskquota system;
SMB network file system;
Tracing file system;
UDF file system;
DRM TTM subsystem;
Control group (cgroup);
Kernel CPU control infrastructure;
Tracing infrastructure;
QorIQ DPAA2 FSL-MC bus driver;
Freescale ENETC Ethernet drivers; -…

Record: USN-8618-1
Updated: 2026-11-07

OSVUSN-8663-1 No score

linux-nvidia, linux-nvidia-7.0 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

x86 platform drivers;
Cryptographic API;
PSP security protocol;
ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Intel NPU Driver;
Compute Acceleration Framework;
ACPI drivers;
Auxiliary display drivers;
Drivers core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
Character device driver;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
DPLL subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
EFI core;
FWCTL subsystem;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Mouse) drivers;
IOMMU subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
NVIDIA Tegra memory controller driver;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Texas Instruments network drivers;
MediaTek network drivers;
NVME drivers;
Parport drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
Chrome hardware platform drivers;
ACPI WMI driver;
Generic PM domains;
MediaTek PM domains;
Power supply drivers;
Voltage and Current Regulator drivers;
MPAM driver;
Amlogic Meson reset controller drivers;
S/390 drivers;
SCSI subsystem;
NVIDIA Tegra Control Backbone (CBB) driver;
SPI subsystem;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
TCM subsystem;
Thunderbolt and USB4 drivers;
TTY drivers;
Userspace I/O drivers;
USB Device Class drivers;
ULPI bus;
DesignWare USB2 driver;
USB Gadget drivers;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
TI TPS6598x USB Power Delivery controller driver;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
vDPA drivers;
VFIO drivers;
Framebuffer layer;
TSM AMD SEV Guest driver;
Xen hypervisor drivers;
9P distributed file system;
File systems infrastructure;
AFS file system;
BTRFS file system;
Ceph distributed file system;
EROFS file system;
F2FS file system;
FUSE (File system in Userspace);
GFS2 file system;
HFS+ file system;
HugeTLB file system;
Network file systems library;
Network file system (NFS) server daemon;
NILFS2 file system;
File system notification infrastructure;
NTFS3 file system;
OCFS2 file system;
Overlay file system;
Diskquota system;
SMB network file system;
Tracing file system;
UDF file system;
DRM TTM subsystem;
Control group (cgroup);
Kernel CPU control infrastructure;
Tracing infrastructure;
QorIQ DPAA2 FSL-MC bus driver;
Freescale ENETC Ethernet drivers; -…

Record: USN-8663-1
Updated: 2026-11-07

OSVUSN-8664-1 No score

linux-nvidia-bos vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

x86 platform drivers;
Cryptographic API;
PSP security protocol;
ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Intel NPU Driver;
Compute Acceleration Framework;
ACPI drivers;
Auxiliary display drivers;
Drivers core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
Character device driver;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
DPLL subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
EFI core;
FWCTL subsystem;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Mouse) drivers;
IOMMU subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
NVIDIA Tegra memory controller driver;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Texas Instruments network drivers;
MediaTek network drivers;
NVME drivers;
Parport drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
Chrome hardware platform drivers;
ACPI WMI driver;
Generic PM domains;
MediaTek PM domains;
Power supply drivers;
Voltage and Current Regulator drivers;
MPAM driver;
Amlogic Meson reset controller drivers;
S/390 drivers;
SCSI subsystem;
NVIDIA Tegra Control Backbone (CBB) driver;
SPI subsystem;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
TCM subsystem;
Thunderbolt and USB4 drivers;
TTY drivers;
Userspace I/O drivers;
USB Device Class drivers;
ULPI bus;
DesignWare USB2 driver;
USB Gadget drivers;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
TI TPS6598x USB Power Delivery controller driver;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
vDPA drivers;
VFIO drivers;
Framebuffer layer;
TSM AMD SEV Guest driver;
Xen hypervisor drivers;
9P distributed file system;
File systems infrastructure;
AFS file system;
BTRFS file system;
Ceph distributed file system;
EROFS file system;
F2FS file system;
FUSE (File system in Userspace);
GFS2 file system;
HFS+ file system;
HugeTLB file system;
Network file systems library;
Network file system (NFS) server daemon;
NILFS2 file system;
File system notification infrastructure;
NTFS3 file system;
OCFS2 file system;
Overlay file system;
Diskquota system;
SMB network file system;
Tracing file system;
UDF file system;
DRM TTM subsystem;
Control group (cgroup);
Kernel CPU control infrastructure;
Tracing infrastructure;
QorIQ DPAA2 FSL-MC bus driver;
Freescale ENETC Ethernet drivers; -…

Record: USN-8664-1
Updated: 2026-11-07

OSVUSN-8728-1 No score

linux-gcp-7.0 vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

x86 platform drivers;
ARM64 architecture;
Cryptographic API;
PSP security protocol;
User-space API (UAPI);
Kernel build system;
ARM32 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Compute Acceleration Framework;
Intel NPU Driver;
ACPI drivers;
Android drivers;
Auxiliary display drivers;
Drivers core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
Character device driver;
Hardware random number generator core;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
DPLL subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
EFI core;
Intel Stratix 10 firmware drivers;
FPGA Framework;
FWCTL subsystem;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
CoreSight HW tracing drivers;
I2C subsystem;
I3C subsystem;
IIO subsystem;
IIO ADC drivers;
InfiniBand drivers;
Input Device core drivers;
Input Device (Mouse) drivers;
IOMMU subsystem;
IRQ chip drivers;
Mailbox framework;
Multiple devices driver;
Media drivers;
NVIDIA Tegra memory controller driver;
Multifunction device drivers;
Fastrpc Driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Texas Instruments network drivers;
MediaTek network drivers;
NTB driver;
NVME drivers;
NVMEM (Non Volatile Memory) drivers;
Parport drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
Chrome hardware platform drivers;
ACPI WMI driver;
Generic PM domains;
MediaTek PM domains;
System reset/shutdown drivers;
Power sequencing drivers;
Power supply drivers;
PTP clock framework;
Voltage and Current Regulator drivers;
MPAM driver;
Amlogic Meson reset controller drivers;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
SLIMbus drivers;
NVIDIA Tegra Control Backbone (CBB) driver;
SPI subsystem;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
VME bus staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
Userspace I/O drivers;
Cadence USB3 driver;
USB Device Class drivers;
ULPI bus;
DesignWare USB2 driver;
DesignWare USB3 driver;
Faraday FOTG210 USB2 dual-role controller driver;
USB Gadget drivers;
USB Host Controller drivers;
USB ChaosKey driver;
Siemens ID Mouse USB driver;
IOWarrior USB driver;
LD Didactic USB driver;
LEGO USB…

Record: USN-8728-1
Updated: 2026-11-07

OSVUSN-8728-2 No score

linux-azure-7.0 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

x86 platform drivers;
ARM64 architecture;
Cryptographic API;
PSP security protocol;
User-space API (UAPI);
Kernel build system;
ARM32 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Compute Acceleration Framework;
Intel NPU Driver;
ACPI drivers;
Android drivers;
Auxiliary display drivers;
Drivers core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
Character device driver;
Hardware random number generator core;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
DPLL subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
EFI core;
Intel Stratix 10 firmware drivers;
FPGA Framework;
FWCTL subsystem;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
CoreSight HW tracing drivers;
I2C subsystem;
I3C subsystem;
IIO subsystem;
IIO ADC drivers;
InfiniBand drivers;
Input Device core drivers;
Input Device (Mouse) drivers;
IOMMU subsystem;
IRQ chip drivers;
Mailbox framework;
Multiple devices driver;
Media drivers;
NVIDIA Tegra memory controller driver;
Multifunction device drivers;
Fastrpc Driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Texas Instruments network drivers;
MediaTek network drivers;
NTB driver;
NVME drivers;
NVMEM (Non Volatile Memory) drivers;
Parport drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
Chrome hardware platform drivers;
ACPI WMI driver;
Generic PM domains;
MediaTek PM domains;
System reset/shutdown drivers;
Power sequencing drivers;
Power supply drivers;
PTP clock framework;
Voltage and Current Regulator drivers;
MPAM driver;
Amlogic Meson reset controller drivers;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
SLIMbus drivers;
NVIDIA Tegra Control Backbone (CBB) driver;
SPI subsystem;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
VME bus staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
Userspace I/O drivers;
Cadence USB3 driver;
USB Device Class drivers;
ULPI bus;
DesignWare USB2 driver;
DesignWare USB3 driver;
Faraday FOTG210 USB2 dual-role controller driver;
USB Gadget drivers;
USB Host Controller drivers;
USB ChaosKey driver;
Siemens ID Mouse USB driver;
IOWarrior USB driver;
LD Didactic USB driver;
LEGO USB…

Record: USN-8728-2
Updated: 2026-11-07

OSVUSN-8728-3 No score

linux-oracle-7.0 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

x86 platform drivers;
ARM64 architecture;
Cryptographic API;
PSP security protocol;
User-space API (UAPI);
Kernel build system;
ARM32 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Compute Acceleration Framework;
Intel NPU Driver;
ACPI drivers;
Android drivers;
Auxiliary display drivers;
Drivers core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
Character device driver;
Hardware random number generator core;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
DPLL subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
EFI core;
Intel Stratix 10 firmware drivers;
FPGA Framework;
FWCTL subsystem;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
CoreSight HW tracing drivers;
I2C subsystem;
I3C subsystem;
IIO subsystem;
IIO ADC drivers;
InfiniBand drivers;
Input Device core drivers;
Input Device (Mouse) drivers;
IOMMU subsystem;
IRQ chip drivers;
Mailbox framework;
Multiple devices driver;
Media drivers;
NVIDIA Tegra memory controller driver;
Multifunction device drivers;
Fastrpc Driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Texas Instruments network drivers;
MediaTek network drivers;
NTB driver;
NVME drivers;
NVMEM (Non Volatile Memory) drivers;
Parport drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
Chrome hardware platform drivers;
ACPI WMI driver;
Generic PM domains;
MediaTek PM domains;
System reset/shutdown drivers;
Power sequencing drivers;
Power supply drivers;
PTP clock framework;
Voltage and Current Regulator drivers;
MPAM driver;
Amlogic Meson reset controller drivers;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
SLIMbus drivers;
NVIDIA Tegra Control Backbone (CBB) driver;
SPI subsystem;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
VME bus staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
Userspace I/O drivers;
Cadence USB3 driver;
USB Device Class drivers;
ULPI bus;
DesignWare USB2 driver;
DesignWare USB3 driver;
Faraday FOTG210 USB2 dual-role controller driver;
USB Gadget drivers;
USB Host Controller drivers;
USB ChaosKey driver;
Siemens ID Mouse USB driver;
IOWarrior USB driver;
LD Didactic USB driver;
LEGO USB…

Record: USN-8728-3
Updated: 2026-11-07

OSVUSN-8886-1 No score

linux-nvidia-tegra vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

NVDIMM (Non-Volatile Memory Device) drivers;
Handshake API;
ARM32 architecture;
ARM64 architecture;
MIPS architecture;
OpenRISC architecture;
PowerPC architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Intel NPU Driver;
Android drivers;
Rados block device (RBD) driver;
Bluetooth drivers;
Hardware random number generator core;
TPM device driver;
CPU frequency scaling framework;
Hardware crypto device drivers;
DMA engine subsystem;
FireWire subsystem;
Arm Firmware Framework for ARMv8-A(FFA);
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
CoreSight HW tracing drivers;
I2C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Mouse) drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Fastrpc Driver;
Amazon Nitro Secure Module driver;
MMC subsystem;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
Texas Instruments network drivers;
NTB driver;
NVME drivers;
NVMEM (Non Volatile Memory) drivers;
Parport drivers;
Pin controllers subsystem;
x86 platform drivers;
i.MX PM domains;
System reset/shutdown drivers;
PTP clock framework;
Voltage and Current Regulator drivers;
S/390 drivers;
SCSI subsystem;
SPI subsystem;
Realtek RTL8723BS SDIO drivers;
VME bus staging drivers;
Thermal drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
DesignWare USB2 driver;
USB Gadget drivers;
USB Host Controller drivers;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C Port Controller Manager driver;
vDPA drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
Watchdog drivers;
9P distributed file system;
AFS file system;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EROFS file system;
exFAT file system;
F2FS file system;
FUSE (File system in Userspace);
Journaling layer for block devices (JBD2);
Network file system (NFS) client;
Network file system (NFS) server daemon;
NTFS3 file system;
OCFS2 file system;
Proc file system;
SMB network file system;
Tracing file system;
UDF file system;
XFS file system;
Key management;
BPF subsystem;
Control group (cgroup);
Glob pattern matching library;
MAC80211 subsystem;
Mellanox drivers;
Networking core;
Network sockets;
IPv6 networking;
Bluetooth subsystem;
Wireless networking;
IPv4 networking;
Netfilter;
Network traffic control;
SCTP protocol;
TCP network protocol;
XFRM subsystem;
RDMA verbs API;
io_uring subsystem;
IPC subsystem;
Audit subsystem;
Kernel CPU control infrastructure;
Perf events;
Kernel exit() syscall;
Kernel fork() syscall;
Scheduler infrastructure;
Signal handling mechanism;
Timer subsystem;
Tracing infrastructure;
Resizable hashtable library;
Memory management;
6LoWPAN network protocol;
Asynchronous Transfer Mode (ATM) subsystem;
B.A.T.M.A.N. meshing protocol;
Ethernet bridge;
CAN network layer;
Ceph Core library;
Ethtool driver;
HSR network protocol;
IEEE802154.4 network protocol;
IUCV driver;
KCM (Kernel Connection Multiplexor) sockets driver;
IEEE 802.15.4 subsystem;
Multipath TCP;
Open vSwitch;
Packet sockets;
Phonet protocol;
Qualcomm IPC Router (QRTR);
RDS protocol;
RxRPC session sockets;
SMC…

Record: USN-8886-1
Updated: 2026-11-09

OSVUSN-8917-1 No score

linux, linux-aws, linux-aws-fips, linux-fips, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-ibm, linux-lowlatency, linux-oracle, linux-realtime vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

NVDIMM (Non-Volatile Memory Device) drivers;
Handshake API;
ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Intel NPU Driver;
ACPI drivers;
Android drivers;
Serial ATA and Parallel ATA drivers;
Drivers core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
Bluetooth drivers;
Cdrom driver;
Character device driver;
Hardware random number generator core;
TPM device driver;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
DAX dirext access to differentiated memory framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
FireWire subsystem;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
Intel Stratix 10 firmware drivers;
FPGA Framework;
GPIO subsystem;
GPU drivers;
HID subsystem;
Microsoft Hyper-V drivers;
Hardware monitoring drivers;
CoreSight HW tracing drivers;
Intel Trace Hub HW tracing drivers;
I2C subsystem;
IIO subsystem;
IIO ADC drivers;
IIO Magnetometer sensors drivers;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
Input Device (Mouse) drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
MemoryStick subsystem;
Multifunction device drivers;
Intel Management Engine Interface driver;
Amazon Nitro Secure Module driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
MediaTek network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
x86 platform drivers;
i.MX PM domains;
System reset/shutdown drivers;
Power supply drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
Reset controller framework;
RPMSG subsystem;
Real Time Clock drivers;
S/390 drivers;
SCSI subsystem;
Xilinx SoC drivers;
SPI subsystem;
Media staging drivers;
Media Oriented Systems Transport (MOST) driver;
NVIDIA Tegra embedded controller (NVEC) staging driver;
Realtek RTL8723BS SDIO drivers;
VME bus staging drivers;
TCM subsystem;
TTY drivers;
USB DSL drivers;
Cadence USB3 driver;
ULPI bus;
USB core drivers;
DesignWare USB3 driver;
Faraday FOTG210 USB2 dual-role controller driver;
USB Gadget drivers;
USB Host Controller drivers;
USB ChaosKey driver;
Siemens ID Mouse USB driver;
IOWarrior USB driver;
LD Didactic USB driver;
LEGO USB Tower driver;
USS720 USB parallel port adapter driver;
MediaTek USB3 DRD driver;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C Port Controller Manager driver;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
vDPA drivers;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
Watchdog drivers;
Xen hypervisor drivers;
9P distributed file system;
AFS file system;
File systems infrastructure;
BTRFS file…

Record: USN-8917-1
Updated: 2026-11-09

OSVUSN-8918-1 No score

linux-azure, linux-azure-fde, linux-azure-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

NVDIMM (Non-Volatile Memory Device) drivers;
Handshake API;
ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Intel NPU Driver;
ACPI drivers;
Android drivers;
Serial ATA and Parallel ATA drivers;
Drivers core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
Bluetooth drivers;
Cdrom driver;
Character device driver;
Hardware random number generator core;
TPM device driver;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
DAX dirext access to differentiated memory framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
FireWire subsystem;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
Intel Stratix 10 firmware drivers;
FPGA Framework;
GPIO subsystem;
GPU drivers;
HID subsystem;
Microsoft Hyper-V drivers;
Hardware monitoring drivers;
CoreSight HW tracing drivers;
Intel Trace Hub HW tracing drivers;
I2C subsystem;
IIO subsystem;
IIO ADC drivers;
IIO Magnetometer sensors drivers;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
Input Device (Mouse) drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
MemoryStick subsystem;
Multifunction device drivers;
Intel Management Engine Interface driver;
Amazon Nitro Secure Module driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
MediaTek network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
x86 platform drivers;
i.MX PM domains;
System reset/shutdown drivers;
Power supply drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
Reset controller framework;
RPMSG subsystem;
Real Time Clock drivers;
S/390 drivers;
SCSI subsystem;
Xilinx SoC drivers;
SPI subsystem;
Media staging drivers;
Media Oriented Systems Transport (MOST) driver;
NVIDIA Tegra embedded controller (NVEC) staging driver;
Realtek RTL8723BS SDIO drivers;
VME bus staging drivers;
TCM subsystem;
TTY drivers;
USB DSL drivers;
Cadence USB3 driver;
ULPI bus;
USB core drivers;
DesignWare USB3 driver;
Faraday FOTG210 USB2 dual-role controller driver;
USB Gadget drivers;
USB Host Controller drivers;
USB ChaosKey driver;
Siemens ID Mouse USB driver;
IOWarrior USB driver;
LD Didactic USB driver;
LEGO USB Tower driver;
USS720 USB parallel port adapter driver;
MediaTek USB3 DRD driver;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C Port Controller Manager driver;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
vDPA drivers;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
Watchdog drivers;
Xen hypervisor drivers;
9P distributed file system;
AFS file system;
File systems infrastructure;
BTRFS file…

Record: USN-8918-1
Updated: 2026-11-09

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`kernel` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-64k` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-64k-core` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-64k-debug` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-64k-debug-core` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-64k-debug-devel` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-64k-debug-devel-matched` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-64k-debug-modules` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-64k-debug-modules-core` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-64k-debug-modules-extra` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-64k-devel` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-64k-devel-matched` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-64k-modules` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-64k-modules-core` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-64k-modules-extra` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-abi-stablelists` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-core` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-cross-headers` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-debug` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-debug-core` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-debug-devel` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-debug-devel-matched` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-debug-modules` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-debug-modules-core` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-debug-modules-extra` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-debug-uki-virt` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-devel` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-devel-matched` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-doc` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-headers` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-modules` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-modules-core` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-modules-extra` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-rt` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-rt-64k` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-rt-64k-core` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-rt-64k-debug` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-rt-64k-debug-core` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-rt-64k-debug-devel` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-rt-64k-debug-modules` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-rt-64k-debug-modules-core` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-rt-64k-debug-modules-extra` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-rt-64k-devel` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-rt-64k-modules` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-rt-64k-modules-core` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-rt-64k-modules-extra` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-rt-core` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-rt-debug` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-rt-debug-core` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-rt-debug-devel` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-rt-debug-modules` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-rt-debug-modules-core` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-rt-debug-modules-extra` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-rt-devel` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-rt-modules` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`kernel-rt-modules-core` AlmaLinux:9 From an advisory covering 15 CVEs	before 5.14.0-687.56.1.el9_8	5.14.0-687.56.1.el9_8
`linux-lts` Alpaquita:25	6.12.95-r0 up to 6.12.103-r0	6.12.103-r0
`linux-lts` Alpaquita:stream	6.12.92-r1 up to 6.18.35-r1	6.18.35-r1
`kernel` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-64k` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-64k-core` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-64k-debug` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-64k-debug-core` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-64k-debug-devel` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-64k-debug-devel-matched` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-64k-debug-modules` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-64k-debug-modules-core` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-64k-debug-modules-extra` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-64k-debug-modules-internal` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-64k-debug-modules-partner` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-64k-devel` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-64k-devel-matched` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-64k-modules` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-64k-modules-core` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-64k-modules-extra` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-64k-modules-internal` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-64k-modules-partner` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-abi-stablelists` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-core` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-cross-headers` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-debug` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-debug-core` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-debug-devel` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-debug-devel-matched` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-debug-modules` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-debug-modules-core` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-debug-modules-extra` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-debug-modules-internal` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-debug-modules-partner` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-debug-uki-virt` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-debug-uki-virt-addons` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-devel` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-devel-matched` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-doc` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-headers` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-ipaclones-internal` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-modules` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-modules-core` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-modules-extra` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-modules-internal` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-modules-partner` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-rt` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-rt-64k` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-rt-64k-core` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-rt-64k-debug` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-rt-64k-debug-core` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-rt-64k-debug-devel` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-rt-64k-debug-devel-matched` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-rt-64k-debug-kvm` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-rt-64k-debug-modules` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-rt-64k-debug-modules-core` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-rt-64k-debug-modules-extra` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-rt-64k-debug-modules-internal` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`kernel-rt-64k-debug-modules-partner` TuxCare:AlmaLinux:9.6 From an advisory covering 197 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els15	5.14.0-570.62.1.el9_6.tuxcare.5.els15
`Kernel` Linux	6.7.0 up to 6.12.97, 6.13.0 up to 6.18.34, 6.19.0 up to 7.0.11	6.12.976.18.347.0.11
`linux` Debian:13	before 6.12.100-1, plus listed versions 6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-1 Show 26 moreShow less 6.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-1	6.12.100-1
`linux` Debian:14	before 7.0.12-1, plus listed versions 6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1 Show 45 moreShow less 6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp16.14.5-1~exp1	7.0.12-1
`linux-6.12` Debian:12	before 6.12.100-1~deb12u1	6.12.100-1~deb12u1
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-64k-debug-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-64k-debug-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-64k-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-64k-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-debug-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-debug-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-doc` Red Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-rt-64k-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-rt-64k-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-rt-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-tools-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-zfcpdump-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`libperf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`perf` Red Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`perf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`python3-perf` Red Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`python3-perf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`rtla` Red Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`rv` Red Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel` Red Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-64k` Red Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-64k-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-64k-debug` Red Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-64k-debug-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-64k-debug-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-64k-debug-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-64k-debug-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-64k-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-64k-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-64k-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-abi-stablelists` Red Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-debug` Red Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-debug-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-debug-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-debug-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-debug-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-debug-uki-virt` Red Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel` Rocky Linux:9 From an advisory covering 14 CVEs	before 0:5.14.0-687.56.1.el9_8	0:5.14.0-687.56.1.el9_8
`kernel` Rocky Linux:10 From an advisory covering 16 CVEs	before 0:6.12.0-211.64.1.el10_2	0:6.12.0-211.64.1.el10_2
`linux` Root:Ubuntu:24.04	before 6.8.0-149.149.aikido.91	6.8.0-149.149.aikido.91
`rootio-linux` Root:Ubuntu:24.04	before 6.8.0-149.149.aikido.91	6.8.0-149.149.aikido.91
`kernel-rt` SUSE:Linux Micro 6.0 From an advisory covering 588 CVEs	before 6.4.0-52.1	6.4.0-52.1
`kernel-source-rt` SUSE:Linux Micro 6.0 From an advisory covering 588 CVEs	before 6.4.0-52.1	6.4.0-52.1
`kernel-default` SUSE:Linux Micro 6.0 From an advisory covering 588 CVEs	before 6.4.0-52.1	6.4.0-52.1
`kernel-default-base` SUSE:Linux Micro 6.0 From an advisory covering 588 CVEs	before 6.4.0-52.1.21.36	6.4.0-52.1.21.36
`kernel-kvmsmall` SUSE:Linux Micro 6.0 From an advisory covering 588 CVEs	before 6.4.0-52.1	6.4.0-52.1
`kernel-source` SUSE:Linux Micro 6.0 From an advisory covering 588 CVEs	before 6.4.0-52.1	6.4.0-52.1
`kernel-rt` SUSE:Linux Micro 6.1 From an advisory covering 588 CVEs	before 6.4.0-52.1	6.4.0-52.1
`kernel-source-rt` SUSE:Linux Micro 6.1 From an advisory covering 588 CVEs	before 6.4.0-52.1	6.4.0-52.1
`kernel-default` SUSE:Linux Micro 6.1 From an advisory covering 588 CVEs	before 6.4.0-52.1	6.4.0-52.1
`kernel-default-base` SUSE:Linux Micro 6.1 From an advisory covering 588 CVEs	before 6.4.0-52.1.21.34	6.4.0-52.1.21.34
`kernel-kvmsmall` SUSE:Linux Micro 6.1 From an advisory covering 588 CVEs	before 6.4.0-52.1	6.4.0-52.1
`kernel-source` SUSE:Linux Micro 6.1 From an advisory covering 588 CVEs	before 6.4.0-52.1	6.4.0-52.1
`kernel-obs-build` SUSE:Linux Micro Extras 6.2 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-syms` SUSE:Linux Micro Extras 6.2 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-64kb` SUSE:Linux Micro 6.2 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-default` SUSE:Linux Micro 6.2 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-default-base` SUSE:Linux Micro 6.2 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1.160000.2.23	6.12.0-160000.38.1.160000.2.23
`kernel-rt` SUSE:Linux Micro 6.2 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-source` SUSE:Linux Micro 6.2 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-64kb` SUSE:Linux Enterprise Server 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-azure` SUSE:Linux Enterprise Server 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-default` SUSE:Linux Enterprise Server 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-default-base` SUSE:Linux Enterprise Server 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1.160000.2.23	6.12.0-160000.38.1.160000.2.23
`kernel-docs` SUSE:Linux Enterprise Server 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-kvmsmall` SUSE:Linux Enterprise Server 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-obs-qa` SUSE:Linux Enterprise Server 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-source` SUSE:Linux Enterprise Server 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-syms` SUSE:Linux Enterprise Server 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-64kb` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-azure` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-default` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-default-base` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1.160000.2.23	6.12.0-160000.38.1.160000.2.23
`kernel-docs` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-kvmsmall` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-obs-qa` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-source` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-livepatch-SLE15-SP7-RT_Update_20` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 662 CVEs	before 1-150700.1.3.1	1-150700.1.3.1
`kernel-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 662 CVEs	before 6.4.0-150700.7.75.1	6.4.0-150700.7.75.1
`kernel-source-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 662 CVEs	before 6.4.0-150700.7.75.1	6.4.0-150700.7.75.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 662 CVEs	before 6.4.0-150700.7.75.1	6.4.0-150700.7.75.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 661 CVEs	before 6.4.0-150700.53.81.1	6.4.0-150700.53.81.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 661 CVEs	before 6.4.0-150700.53.81.1	6.4.0-150700.53.81.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 661 CVEs	before 6.4.0-150700.53.81.1.150700.17.45.1	6.4.0-150700.53.81.1.150700.17.45.1
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 661 CVEs	before 6.4.0-150700.53.81.1	6.4.0-150700.53.81.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 661 CVEs	before 6.4.0-150700.53.81.1	6.4.0-150700.53.81.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 661 CVEs	before 6.4.0-150700.53.81.1	6.4.0-150700.53.81.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 661 CVEs	before 6.4.0-150700.53.81.1	6.4.0-150700.53.81.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 661 CVEs	before 6.4.0-150700.53.81.1	6.4.0-150700.53.81.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 661 CVEs	before 6.4.0-150700.53.81.1	6.4.0-150700.53.81.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP7 From an advisory covering 661 CVEs	before 6.4.0-150700.53.81.1	6.4.0-150700.53.81.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 661 CVEs	before 6.4.0-150700.53.81.1	6.4.0-150700.53.81.1
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-aws-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-aws-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less 5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1	None known
`linux-aws-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1	None known
`linux-azure-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less 5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2	None known
`linux-azure-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less 5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1	None known
`linux-azure-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1	None known
`linux-azure-fde` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less 5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1	None known
`linux-gcp-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less 5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3	None known
`linux-gcp-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less 5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1	None known
`linux-gcp-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41	None known
`linux-gke` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less 5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111	None known
`linux-gke-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less 5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1	None known
`linux-gkeop` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less 5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77	None known
`linux-gkeop-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 40 moreShow less 5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1	None known
`linux-hwe-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less 5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1	None known
`linux-hwe-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less 5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1	None known
`linux-hwe-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less 5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1	None known
`linux-intel-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19	None known
`linux-oem-5.10` Ubuntu:20.04:LTS	All versions, plus listed versions 5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17 Show 21 moreShow less 5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61	None known
`linux-oem-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21 Show 7 moreShow less 5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36	None known
`linux-oem-5.14` Ubuntu:20.04:LTS	All versions, plus listed versions 5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10 Show 30 moreShow less 5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67	None known
`linux-oem-5.6` Ubuntu:20.04:LTS	All versions, plus listed versions 5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13 Show 24 moreShow less 5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60	None known
`linux-oracle-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-oracle-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1 Show 7 moreShow less 5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1	None known
`linux-oracle-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1	None known
`linux-raspi2` Ubuntu:20.04:LTS	All versions, plus listed versions 5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6	None known
`linux-riscv` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34 Show 7 moreShow less 5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45	None known
`linux-riscv-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1 Show 8 moreShow less 5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35	None known
`linux-riscv-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1 Show 5 moreShow less 5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1	None known
`linux-allwinner-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1	None known
`linux-aws-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1 Show 5 moreShow less 5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1	None known
`linux-aws-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 9 moreShow less 6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1	None known
`linux-aws-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1 Show 9 moreShow less 6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1	None known
`linux-aws-6.8` Ubuntu:22.04:LTS	All versions, plus listed versions 6.8.0-1009.9~22.04.26.8.0-1010.10~22.04.26.8.0-1011.12~22.04.16.8.0-1013.14~22.04.16.8.0-1014.15~22.04.1 Show 41 moreShow less 6.8.0-1015.16~22.04.16.8.0-1016.17~22.04.26.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1023.25~22.04.16.8.0-1024.26~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1035.37~22.04.16.8.0-1036.38~22.04.16.8.0-1039.41~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.44~22.04.16.8.0-1043.45~22.04.16.8.0-1044.46~22.04.16.8.0-1045.47~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.16.8.0-1050.53~22.04.16.8.0-1051.54~22.04.16.8.0-1052.55~22.04.16.8.0-1053.56~22.04.16.8.0-1055.58~22.04.16.8.0-1057.60~22.04.16.8.0-1060.63~22.04.16.8.0-1061.64~22.04.16.8.0-1062.65~22.04.26.8.0-1063.66~22.04.16.8.0-1064.67~22.04.16.8.0-1065.68~22.04.16.8.0-1066.69~22.04.16.8.0-1069.74~22.04.1	None known
`linux-azure-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2	None known
`linux-azure-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 8 moreShow less 6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1	None known
`linux-azure-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1 Show 9 moreShow less 6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1	None known
`linux-azure-6.8` Ubuntu:22.04:LTS	All versions, plus listed versions 6.8.0-1008.8~22.04.16.8.0-1009.9~22.04.16.8.0-1010.10~22.04.16.8.0-1012.14~22.04.16.8.0-1013.15~22.04.1 Show 29 moreShow less 6.8.0-1014.16~22.04.16.8.0-1015.17~22.04.26.8.0-1017.20~22.04.16.8.0-1018.21~22.04.16.8.0-1020.23~22.04.16.8.0-1021.25~22.04.16.8.0-1025.30~22.04.16.8.0-1026.31~22.04.16.8.0-1027.32~22.04.16.8.0-1028.33~22.04.16.8.0-1029.34~22.04.16.8.0-1030.35~22.04.16.8.0-1031.36~22.04.16.8.0-1034.39~22.04.16.8.0-1036.42~22.04.16.8.0-1040.46~22.04.16.8.0-1041.47~22.04.16.8.0-1044.50~22.04.16.8.0-1051.57~22.04.16.8.0-1052.58~22.04.16.8.0-1059.65~22.04.16.8.0-1062.69~22.04.16.8.0-1063.71~22.04.16.8.0-1064.72~22.04.16.8.0-1065.73~22.04.16.8.0-1067.75~22.04.16.8.0-1068.76~22.04.16.8.0-1070.78~22.04.16.8.0-1073.82~22.04.1	None known
`linux-azure-fde-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1	None known
`dtb-aarch64` openSUSE:Leap 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-64kb` openSUSE:Leap 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-azure` openSUSE:Leap 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-default` openSUSE:Leap 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-default-base` openSUSE:Leap 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1.160000.2.22	6.12.0-160000.38.1.160000.2.22
`kernel-docs` openSUSE:Leap 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-kvmsmall` openSUSE:Leap 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-obs-build` openSUSE:Leap 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-obs-qa` openSUSE:Leap 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-rt` openSUSE:Leap 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-source` openSUSE:Leap 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-syms` openSUSE:Leap 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-zfcpdump` openSUSE:Leap 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
PoC in GitHub	HORKimhab/CVE-2026-53365	2026-08-14
PoC in GitHub	HackSpeak/CVE-2026-53365	2026-08-19
PoC in GitHub	hoodoer/VsockDrop-Adapted-CVE-2026-53365	2026-10-16

History

History
Recorded	Changed	Sources
Nov 10, 2026	affected	OSV
Nov 9, 2026	affected, aliases	OSV
Nov 6, 2026	affected	OSV
Nov 6, 2026	affected	OSV
Nov 6, 2026	affected	OSV
Nov 3, 2026	facts	OSV
Nov 3, 2026	affected	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-53365 is a medium vulnerability (CVSS 5.5) in Linux, published July 13, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.20%, the 9th percentile. Fixed in linux-lts 6.12.103-r0.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 491 package rows, 121 versions, 4,784 references and the rest of 27 source descriptions. The JSON record has them.