CVE-2026-53398
NFSD: Fix SECINFO_NO_NAME decode error cleanup
9.8 CriticalFix available
In the Linux kernel, the following vulnerability has been resolved:
NFSD: Fix SECINFO_NO_NAME decode error cleanup
nfsd4_decode_secinfo_no_name() currently initializes sin_exp after decoding sin_style. If the XDR stream is truncated, the decoder returns nfserr_bad_xdr before sin_exp is initialized.
Since commit 3fdc54646234 ("NFSD: Reduce amount of struct nfsd4_compoundargs that needs clearing"), the inline iops array is not cleared between RPC calls. A failed SECINFO_NO_NAME decode can therefore leave sin_exp holding stale union contents from a previous operation.
The error response path still invokes nfsd4_secinfo_no_name_release(), which calls exp_put() on a non-NULL sin_exp.
Initialize sin_exp before the first failable decode step, matching nfsd4_decode_secinfo().
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
0.54%Up 0.4 points since Jul 20, 2026
What each source reports
CVE List Score used
NFSD: Fix SECINFO_NO_NAME decode error cleanup
In the Linux kernel, the following vulnerability has been resolved:
NFSD: Fix SECINFO_NO_NAME decode error cleanup
nfsd4_decode_secinfo_no_name() currently initializes sin_exp after decoding sin_style. If the XDR stream is truncated, the decoder returns nfserr_bad_xdr before sin_exp is initialized.
Since commit 3fdc54646234 ("NFSD: Reduce amount of struct nfsd4_compoundargs that needs clearing"), the inline iops array is not cleared between RPC calls. A failed SECINFO_NO_NAME decode can therefore leave sin_exp holding stale union contents from a previous operation.
The error response path still invokes nfsd4_secinfo_no_name_release(), which calls exp_put() on a non-NULL sin_exp.
Initialize sin_exp before the first failable decode step, matching nfsd4_decode_secinfo().
- Record
CVE-2026-53398- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-665
- Updated
- 2026-11-02
EUVDEUVD-2026-45520
In the Linux kernel, the following vulnerability has been resolved:
NFSD: Fix SECINFO_NO_NAME decode error cleanup
nfsd4_decode_secinfo_no_name() currently initializes sin_exp after decoding sin_style. If the XDR stream is truncated, the decoder returns nfserr_bad_xdr before sin_exp is initialized.
Since commit 3fdc54646234 ("NFSD: Reduce amount of struct nfsd4_compoundargs that needs clearing"), the inline iops array is not cleared between RPC calls. A failed SECINFO_NO_NAME decode can therefore leave sin_exp holding stale union contents from a previous operation.
The error response path still invokes nfsd4_secinfo_no_name_release(), which calls exp_put() on a non-NULL sin_exp.
Initialize sin_exp before the first failable decode step, matching nfsd4_decode_secinfo().
- Record
EUVD-2026-45520- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-hfvv-wwwp-6wgr
In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix SECINFO_NO_NAME...
In the Linux kernel, the following vulnerability has been resolved:
NFSD: Fix SECINFO_NO_NAME decode error cleanup
nfsd4_decode_secinfo_no_name() currently initializes sin_exp after decoding sin_style. If the XDR stream is truncated, the decoder returns nfserr_bad_xdr before sin_exp is initialized.
Since commit 3fdc54646234 ("NFSD: Reduce amount of struct nfsd4_compoundargs that needs clearing"), the inline iops array is not cleared between RPC calls. A failed SECINFO_NO_NAME decode can therefore leave sin_exp holding stale union contents from a previous operation.
The error response path still invokes nfsd4_secinfo_no_name_release(), which calls exp_put() on a non-NULL sin_exp.
Initialize sin_exp before the first failable decode step, matching nfsd4_decode_secinfo().
- Record
GHSA-hfvv-wwwp-6wgr- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-665
- Updated
- 2026-11-02
NVD
In the Linux kernel, the following vulnerability has been resolved:
NFSD: Fix SECINFO_NO_NAME decode error cleanup
nfsd4_decode_secinfo_no_name() currently initializes sin_exp after decoding sin_style. If the XDR stream is truncated, the decoder returns nfserr_bad_xdr before sin_exp is initialized.
Since commit 3fdc54646234 ("NFSD: Reduce amount of struct nfsd4_compoundargs that needs clearing"), the inline iops array is not cleared between RPC calls. A failed SECINFO_NO_NAME decode can therefore leave sin_exp holding stale union contents from a previous operation.
The error response path still invokes nfsd4_secinfo_no_name_release(), which calls exp_put() on a non-NULL sin_exp.
Initialize sin_exp before the first failable decode step, matching nfsd4_decode_secinfo().
- Record
CVE-2026-53398- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-665
- Updated
- 2026-11-02
OSVBELL-CVE-2026-53398
- Record
BELL-CVE-2026-53398- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV
NFSD: Fix SECINFO_NO_NAME decode error cleanup
In the Linux kernel, the following vulnerability has been resolved:
NFSD: Fix SECINFO_NO_NAME decode error cleanup
nfsd4_decode_secinfo_no_name() currently initializes sin_exp after decoding sin_style. If the XDR stream is truncated, the decoder returns nfserr_bad_xdr before sin_exp is initialized.
Since commit 3fdc54646234 ("NFSD: Reduce amount of struct nfsd4_compoundargs that needs clearing"), the inline iops array is not cleared between RPC calls. A failed SECINFO_NO_NAME decode can therefore leave sin_exp holding stale union contents from a previous operation.
The error response path still invokes nfsd4_secinfo_no_name_release(), which calls exp_put() on a non-NULL sin_exp.
Initialize sin_exp before the first failable decode step, matching nfsd4_decode_secinfo().
- Record
CVE-2026-53398- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 48 moreShow less
OSVDEBIAN-CVE-2026-53398
In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix SECINFO_NO_NAME decode error cleanup nfsd4_decode_secinfo_no_name() currently initializes sin_exp after decoding sin_style. If the XDR stream is truncated, the decoder returns nfserr_bad_xdr before sin_exp is initialized. Since commit 3fdc54646234 ("NFSD: Reduce amount of struct nfsd4_compoundargs that needs clearing"), the inline iops array is not cleared between RPC calls. A failed SECINFO_NO_NAME decode can therefore leave sin_exp holding stale union contents from a previous operation. The error response path still invokes nfsd4_secinfo_no_name_release(), which calls exp_put() on a non-NULL sin_exp. Initialize sin_exp before the first failable decode step, matching nfsd4_decode_secinfo().
- Record
DEBIAN-CVE-2026-53398- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:77689
Red Hat Security Advisory: kernel security, bug fix, and enhancement update
- Record
RHSA-2026:77689- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:77690
Red Hat Security Advisory: kernel security, bug fix, and enhancement update
- Record
RHSA-2026:77690- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRLSA-2026:77689
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
-
kernel: ipvlan: Make the addrs_lock be per port (CVE-2026-23103)
-
kernel: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (CVE-2026-53360)
-
kernel: vsock/virtio: fix zerocopy completion for multi-skb sends (CVE-2026-53365)
-
kernel: NFSD: Fix SECINFO_NO_NAME decode error cleanup (CVE-2026-53398)
-
kernel: vsock/virtio: bind uarg before filling zerocopy skb (CVE-2026-63970)
-
kernel: igc: set tx buffer type for SMD frames (CVE-2026-64035)
-
kernel: idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (CVE-2026-64162)
-
kernel: vsock/vmci: fix UAF when peer resets connection during handshake (CVE-2026-64115)
-
kernel: SUNRPC: pin upper rpc_clnt across the TLS connect_worker (CVE-2026-72317)
-
kernel: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (CVE-2026-74744)
-
kernel: nfsd: defer vfree of compound ops to fix rpc_status UAF (CVE-2026-89690)
-
kernel: nfsd: initialize copy-notify stateid before publishing it (CVE-2026-89669)
-
kernel: svcrdma: Reject inline replies that overflow the pull-up buffer (CVE-2026-89530)
-
kernel: nfsd: revoke copy-notify stateids before dropping their reference (CVE-2026-89663)
Bug Fix(es) and Enhancement(s):
-
"iavf: refactor iavf_clean_rx_irq to support legacy and flex descriptors" broke rx-vlan-offload on rhel-9.7 [rhel-9.8.z] (JIRA:Rocky Linux-169480)
-
[GNR-D] missing interfaces tspll_cfg (JIRA:Rocky Linux-183201)
-
Rocky Linux9.8z KVM guest panicked in vmmouse driver (JIRA:Rocky Linux-186577)
-
Add Epson RX8111 support to Rocky Linux9.9 [rhel-9.8.z] (JIRA:Rocky Linux-212014)
-
RT scheduler livelock: migrate-disabled task at pushable-list head causes repeated RT push/stopper retries, starving a critical RT task (remaining issue after CVE-2026-45919 fix in 94894c9c477e) [rhel-9.8.z] (JIRA:Rocky Linux-256279)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:77689- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRLSA-2026:77690
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
-
kernel: ipvlan: Make the addrs_lock be per port (CVE-2026-23103)
-
kernel: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (CVE-2026-53360)
-
kernel: vsock/virtio: fix zerocopy completion for multi-skb sends (CVE-2026-53365)
-
kernel: NFSD: Fix SECINFO_NO_NAME decode error cleanup (CVE-2026-53398)
-
kernel: vsock/virtio: bind uarg before filling zerocopy skb (CVE-2026-63970)
-
kernel: igc: set tx buffer type for SMD frames (CVE-2026-64035)
-
kernel: vsock/vmci: fix UAF when peer resets connection during handshake (CVE-2026-64115)
-
kernel: SUNRPC: pin upper rpc_clnt across the TLS connect_worker (CVE-2026-72317)
-
kernel: udp: fix potential use-after-free in tunnel segmentation (CVE-2026-74705)
-
kernel: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (CVE-2026-74744)
-
kernel: nfsd: defer vfree of compound ops to fix rpc_status UAF (CVE-2026-89690)
-
kernel: nfsd: initialize copy-notify stateid before publishing it (CVE-2026-89669)
-
kernel: svcrdma: Reject inline replies that overflow the pull-up buffer (CVE-2026-89530)
-
kernel: nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (CVE-2026-89676)
-
kernel: nfsd: revoke copy-notify stateids before dropping their reference (CVE-2026-89663)
-
kernel: nfsd: fix UAF in async copy cancel and shutdown (CVE-2026-89675)
Bug Fix(es) and Enhancement(s):
-
mlxbf_bootctl: driver update to Linux v6.16 [Nvidia 10.2.z FEAT] (JIRA:Rocky Linux-212709)
-
[GNR-D] missing interfaces tspll_cfg [rhel-10.2] (JIRA:Rocky Linux-273805)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:77690- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-53398
In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix SECINFO_NO_NAME decode error cleanup nfsd4_decode_secinfo_no_name() currently initializes sin_exp after decoding sin_style. If the XDR stream is truncated, the decoder returns nfserr_bad_xdr before sin_exp is initialized. Since commit 3fdc54646234 ("NFSD: Reduce amount of struct nfsd4_compoundargs that needs clearing"), the inline iops array is not cleared between RPC calls. A failed SECINFO_NO_NAME decode can therefore leave sin_exp holding stale union contents from a previous operation. The error response path still invokes nfsd4_secinfo_no_name_release(), which calls exp_put() on a non-NULL sin_exp. Initialize sin_exp before the first failable decode step, matching nfsd4_decode_secinfo().
- Record
UBUNTU-CVE-2026-53398- CVSS 4.0
- 9.3 Critical
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N - CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-06
OSVALSA-2026:77689 No score
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
- kernel: ipvlan: Make the addrs_lock be per port (CVE-2026-23103)
- kernel: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (CVE-2026-53360)
- kernel: vsock/virtio: fix zerocopy completion for multi-skb sends (CVE-2026-53365)
- kernel: NFSD: Fix SECINFO_NO_NAME decode error cleanup (CVE-2026-53398)
- kernel: vsock/virtio: bind uarg before filling zerocopy skb (CVE-2026-63970)
- kernel: igc: set tx buffer type for SMD frames (CVE-2026-64035)
- kernel: idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (CVE-2026-64162)
- kernel: vsock/vmci: fix UAF when peer resets connection during handshake (CVE-2026-64115)
- kernel: SUNRPC: pin upper rpc_clnt across the TLS connect_worker (CVE-2026-72317)
- kernel: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (CVE-2026-74744)
- kernel: nfsd: defer vfree of compound ops to fix rpc_status UAF (CVE-2026-89690)
- kernel: nfsd: initialize copy-notify stateid before publishing it (CVE-2026-89669)
- kernel: svcrdma: Reject inline replies that overflow the pull-up buffer (CVE-2026-89530)
- kernel: nfsd: revoke copy-notify stateids before dropping their reference (CVE-2026-89663)
Bug Fix(es) and Enhancement(s):
- "iavf: refactor iavf_clean_rx_irq to support legacy and flex descriptors" broke rx-vlan-offload on almalinux-9.7 [almalinux-9.8.z] (JIRA:AlmaLinux-169480)
- [GNR-D] missing interfaces tspll_cfg (JIRA:AlmaLinux-183201)
- AlmaLinux9.8z KVM guest panicked in vmmouse driver (JIRA:AlmaLinux-186577)
- Add Epson RX8111 support to AlmaLinux9.9 [almalinux-9.8.z] (JIRA:AlmaLinux-212014)
- RT scheduler livelock: migrate-disabled task at pushable-list head causes repeated RT push/stopper retries, starving a critical RT task (remaining issue after CVE-2026-45919 fix in 94894c9c477e) [almalinux-9.8.z] (JIRA:AlmaLinux-256279)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:77689- Updated
- 2026-11-02
OSVALSA-2026:77690 No score
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
- kernel: ipvlan: Make the addrs_lock be per port (CVE-2026-23103)
- kernel: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (CVE-2026-53360)
- kernel: vsock/virtio: fix zerocopy completion for multi-skb sends (CVE-2026-53365)
- kernel: NFSD: Fix SECINFO_NO_NAME decode error cleanup (CVE-2026-53398)
- kernel: vsock/virtio: bind uarg before filling zerocopy skb (CVE-2026-63970)
- kernel: igc: set tx buffer type for SMD frames (CVE-2026-64035)
- kernel: vsock/vmci: fix UAF when peer resets connection during handshake (CVE-2026-64115)
- kernel: SUNRPC: pin upper rpc_clnt across the TLS connect_worker (CVE-2026-72317)
- kernel: udp: fix potential use-after-free in tunnel segmentation (CVE-2026-74705)
- kernel: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (CVE-2026-74744)
- kernel: nfsd: defer vfree of compound ops to fix rpc_status UAF (CVE-2026-89690)
- kernel: nfsd: initialize copy-notify stateid before publishing it (CVE-2026-89669)
- kernel: svcrdma: Reject inline replies that overflow the pull-up buffer (CVE-2026-89530)
- kernel: nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (CVE-2026-89676)
- kernel: nfsd: revoke copy-notify stateids before dropping their reference (CVE-2026-89663)
- kernel: nfsd: fix UAF in async copy cancel and shutdown (CVE-2026-89675)
Bug Fix(es) and Enhancement(s):
- mlxbf_bootctl: driver update to Linux v6.16 [Nvidia 10.2.z FEAT] (JIRA:AlmaLinux-212709)
- [GNR-D] missing interfaces tspll_cfg [almalinux-10.2] (JIRA:AlmaLinux-273805)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:77690- Updated
- 2026-11-02
OSVCLSA-2026-1792762308 No score
kernel: Fix of 128 CVEs
- net: skbuff: propagate shared-frag marker in skb_zerocopy()
- net: bridge: stop fast-leave after deleting a port group {CVE-2026-74480}
- net: ipv6: clear suppressed fib6 rule result {CVE-2026-74581}
- net: skbuff: propagate shared-frag marker through frag-transfer helpers {CVE-2026-43503}
- ALSA: virtio: reset device before deleting virtqueues {CVE-2026-98264}
- ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() {CVE-2026-90033}
- ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set {CVE-2026-74498}
- ALSA: caiaq: Fix potential double-free at error path {CVE-2026-98066}
- ASoC: Intel: avs: Disable periods-elapsed work when closing PCM {CVE-2025-40344}
- ALSA: timer: drain a slave's callback before its master detaches it {CVE-2026-68201}
- ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams {CVE-2026-53242}
- ALSA: seq: midi: Serialize output teardown with event_input {CVE-2026-74387}
- security/keys: fix missed RCU read section on lookup {CVE-2026-64015}
- SUNRPC: harden gss_krb5_unwrap_v2 against short tokens {CVE-2026-89542}
- sctp: fix err_chunk memory leaks in INIT handling {CVE-2026-72413}
- netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() {CVE-2026-98077}
- netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() {CVE-2026-74569}
- mm/hugetlb: fix list corruption in allocate_file_region_entries() {CVE-2026-74518}
- rcu: Fix rcu_read_unlock() deadloop due to softirq {CVE-2026-45957}
- bpf: Fix potential UAF in bpf_netns_link_update_prog {CVE-2026-90393}
- bpf: Fix use-after-free in offloaded map/prog info fill {CVE-2026-53089}
- NFSv4.2: fix LAYOUTSTATS send buffer exhaustion {CVE-2026-90103}
- uio: Fix stale info pointer in failed registration path {CVE-2026-93054}
- tty: clear cdev pointer after cdev_add() failure {CVE-2026-90334}
- tty: skip cdev_del() when no cdev is registered {CVE-2026-90335}
- scsi: qla2xxx: Avoid double completion in async IOCB timeout {CVE-2026-89847}
- scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue {CVE-2025-37861}
- scsi: csiostor: Fix dereference of null pointer rn {CVE-2026-45857}
- scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write {CVE-2026-74470}
- wifi: brcmsmac: fix UAF in brcms_free_timer() {CVE-2026-98196}
- wifi: mwifiex: validate scan response extents {CVE-2026-98185}
- wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length {CVE-2026-90382}
- wifi: iwlwifi: mvm: add a check on the tid coming from the firmware {CVE-2026-93791}
- wifi: ath9k: fix OOB access from firmware tx status queue ID {CVE-2026-74408}
- net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow {CVE-2026-98025}
- net: thunderbolt: Fix frags[] overflow by bounding frame_count {CVE-2026-72157}
- net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put {CVE-2026-98015}
- net: stmmac: xgmac2: disable RBUE in default RX interrupt mask {CVE-2026-93830}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list {CVE-2026-53230}
- xen/netfront: drop RX packets with a short Ethernet header {CVE-2026-98375}
- veth: fix NAPI leak in XDP enable error path {CVE-2026-80613}
- RDMA/rxe: Fix double free in rxe_srq_from_init {CVE-2026-45852}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list {CVE-2026-45898}
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control {CVE-2026-72261}
- svcrdma: Fix offset arithmetic in read_chunk_range {CVE-2026-89533}
- SUNRPC: svcauth_gss: enforce krb5 token minimum length {CVE-2026-89550}
- xprtrdma: Fix ep kref imbalance on ADDR_CHANGE {CVE-2026-72469}
- sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START {CVE-2026-98130}
- sctp: drop a chunk if its transport was removed {CVE-2026-89478}
- sctp: prevent peer transport count overflow {CVE-2026-74469}
- sctp: validate embedded address parameter length {CVE-2026-74287}
- sctp: revalidate list cursor after…
- Record
CLSA-2026-1792762308- Updated
- 2026-11-02
OSVMGASA-2026-0312 No score
Updated kernel, kmod, bluez, firmware, wireless-regdb and drakx-installer-images packages fix security vulnerabilities
Upstream kernel version 6.18.39 fixes bugs and vulnerabilities. The kmod, bluez, wireless-regdb, firmware and drakx-installer-images packages have been updated to work with this new kernel.
- Record
MGASA-2026-0312- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:11339-1 No score
kernel-devel-7.1.4-1.1 on GA media
These are all security issues fixed in the kernel-devel-7.1.4-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:11339-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:21555-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
- CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
- CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
- CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
- CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
- CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
- CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
- CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
- CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
- CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
- CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
- CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
- CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
- CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
- CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
- CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
- CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
- CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
- CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
- CVE-2026-46023: dm mirror: fix integer…
- Record
openSUSE-SU-2026:21555-1- Updated
- 2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2026-53398 No score
CVE-2026-53398 in linux - Patched by Root
Root has patched CVE-2026-53398 in the linux package for Root:Debian:11. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-11-CVE-2026-53398- Updated
- 2026-11-02
OSVROOT-OS-UBUNTU-2204-CVE-2026-53398 No score
CVE-2026-53398 in linux - Patched by Root
Root has patched CVE-2026-53398 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.
- Record
ROOT-OS-UBUNTU-2204-CVE-2026-53398- Updated
- 2026-11-06
OSVSUSE-SU-2026:23066-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
- CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
- CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
- CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
- CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
- CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
- CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
- CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
- CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
- CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
- CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
- CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
- CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
- CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
- CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
- CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
- CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
- CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
- CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
- CVE-2026-46023: dm mirror: fix integer…
- Record
SUSE-SU-2026:23066-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23068-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
- CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
- CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
- CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
- CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
- CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
- CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
- CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
- CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
- CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
- CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
- CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
- CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
- CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
- CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
- CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
- CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
- CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
- CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
- CVE-2026-46023: dm mirror: fix integer…
- Record
SUSE-SU-2026:23068-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23193-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
- CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" (bsc#1256675).
- CVE-2026-23097: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).
- CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
- CVE-2026-43130: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).
- CVE-2026-43161: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (bsc#1264333).
- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
- CVE-2026-43170: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452).
- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
- CVE-2026-43328: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832).
- CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
- CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
- CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
- CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
- CVE-2026-45877: HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (bsc#1266468).
- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
- CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
- CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
- CVE-2026-46023: dm mirror: fix integer overflow in create_dirty_log() (bsc#1267449).
- CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).
- CVE-2026-46027: net/smc: avoid early lgr access in smc_clc_wait_msg (bsc#1266744).
- CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).
- CVE-2026-46040: inotify:…
- Record
SUSE-SU-2026:23193-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23194-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
- CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" (bsc#1256675).
- CVE-2026-23097: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).
- CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
- CVE-2026-43130: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).
- CVE-2026-43161: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (bsc#1264333).
- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
- CVE-2026-43170: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452).
- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
- CVE-2026-43328: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832).
- CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
- CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
- CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
- CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
- CVE-2026-45877: HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (bsc#1266468).
- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
- CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
- CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
- CVE-2026-46023: dm mirror: fix integer overflow in create_dirty_log() (bsc#1267449).
- CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).
- CVE-2026-46027: net/smc: avoid early lgr access in smc_clc_wait_msg (bsc#1266744).
- CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).
- CVE-2026-46040: inotify: fix…
- Record
SUSE-SU-2026:23194-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23221-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
- CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
- CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
- CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
- CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
- CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
- CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
- CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
- CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
- CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
- CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
- CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
- CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
- CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
- CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
- CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
- CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
- CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
- CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
- CVE-2026-46023: dm mirror: fix integer…
- Record
SUSE-SU-2026:23221-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23231-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
- CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
- CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
- CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
- CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
- CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
- CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
- CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
- CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
- CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
- CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
- CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
- CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
- CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
- CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
- CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
- CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
- CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
- CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
- CVE-2026-46023: dm mirror: fix integer…
- Record
SUSE-SU-2026:23231-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23237-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
- CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
- CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
- CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
- CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
- CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
- CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
- CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
- CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
- CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
- CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
- CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
- CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
- CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
- CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
- CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
- CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
- CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
- CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
- CVE-2026-46023: dm mirror: fix integer…
- Record
SUSE-SU-2026:23237-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23241-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
- CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" (bsc#1256675).
- CVE-2026-23097: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).
- CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
- CVE-2026-43130: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).
- CVE-2026-43161: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (bsc#1264333).
- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
- CVE-2026-43170: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452).
- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
- CVE-2026-43328: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832).
- CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
- CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
- CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
- CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
- CVE-2026-45877: HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (bsc#1266468).
- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
- CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
- CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
- CVE-2026-46023: dm mirror: fix integer overflow in create_dirty_log() (bsc#1267449).
- CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).
- CVE-2026-46027: net/smc: avoid early lgr access in smc_clc_wait_msg (bsc#1266744).
- CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).
- CVE-2026-46040: inotify:…
- Record
SUSE-SU-2026:23241-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23244-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
- CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" (bsc#1256675).
- CVE-2026-23097: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).
- CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
- CVE-2026-43130: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).
- CVE-2026-43161: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (bsc#1264333).
- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
- CVE-2026-43170: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452).
- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
- CVE-2026-43328: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832).
- CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
- CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
- CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
- CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
- CVE-2026-45877: HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (bsc#1266468).
- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
- CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
- CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
- CVE-2026-46023: dm mirror: fix integer overflow in create_dirty_log() (bsc#1267449).
- CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).
- CVE-2026-46027: net/smc: avoid early lgr access in smc_clc_wait_msg (bsc#1266744).
- CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).
- CVE-2026-46040: inotify: fix…
- Record
SUSE-SU-2026:23244-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:3790-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
- CVE-2025-68818: scsi: Revert 'scsi: qla2xxx: Perform lockless command completion in abort path' (bsc#1256675).
- CVE-2026-23097: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).
- CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
- CVE-2026-43130: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).
- CVE-2026-43161: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (bsc#1264333).
- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
- CVE-2026-43170: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452).
- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
- CVE-2026-43328: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832).
- CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
- CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
- CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).
- CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).
- CVE-2026-46137: mptcp: pm: ADD_ADDR rtx: fix potential data-race (bsc#1267570).
- CVE-2026-46147: KVM: arm64: Factor out pKVM hyp vcpu creation to separate function (bsc#1267689).
- CVE-2026-46158: mptcp: pm: ADD_ADDR rtx: always decrease sk refcount (bsc#1266880).
- CVE-2026-46168: mptcp: sockopt: set timestamp flags on subflow socket, not msk (bsc#1266869).
- CVE-2026-46170: mptcp: pm: reuse ID 0 after delete and re-add (bsc#1267714).
- CVE-2026-46180: wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task (bsc#1266813).
- CVE-2026-46189: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (bsc#1266918).
- CVE-2026-46193: xfrm: ah: account for ESN high bits in async callbacks (bsc#1267656).
- CVE-2026-46234: vsock: fix buffer size clamping order (bsc#1266904).
- CVE-2026-46245: drm/amd/display: Fix dc_link NULL handling in HPD init (bsc#1267678). -…
- Record
SUSE-SU-2026:3790-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:3810-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
- CVE-2025-68818: scsi: Revert 'scsi: qla2xxx: Perform lockless command completion in abort path' (bsc#1256675).
- CVE-2026-23097: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).
- CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
- CVE-2026-43130: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).
- CVE-2026-43161: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (bsc#1264333).
- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
- CVE-2026-43170: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452).
- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
- CVE-2026-43328: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832).
- CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
- CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
- CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).
- CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).
- CVE-2026-46137: mptcp: pm: ADD_ADDR rtx: fix potential data-race (bsc#1267570).
- CVE-2026-46147: KVM: arm64: Factor out pKVM hyp vcpu creation to separate function (bsc#1267689).
- CVE-2026-46158: mptcp: pm: ADD_ADDR rtx: always decrease sk refcount (bsc#1266880).
- CVE-2026-46168: mptcp: sockopt: set timestamp flags on subflow socket, not msk (bsc#1266869).
- CVE-2026-46170: mptcp: pm: reuse ID 0 after delete and re-add (bsc#1267714).
- CVE-2026-46180: wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task (bsc#1266813).
- CVE-2026-46189: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (bsc#1266918).
- CVE-2026-46193: xfrm: ah: account for ESN high bits in async callbacks (bsc#1267656).
- CVE-2026-46234: vsock: fix buffer size clamping order (bsc#1266904).
- CVE-2026-46245: drm/amd/display: Fix dc_link NULL handling in HPD init (bsc#1267678). -…
- Record
SUSE-SU-2026:3810-1- Updated
- 2026-11-02
OSVUSN-8726-1 No score
linux, linux-aws, linux-aws-7.0, linux-gcp, linux-gke, linux-hwe-7.0, linux-realtime vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- User-space API (UAPI);
- Kernel build system;
- ARM32 architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Compute Acceleration Framework;
- Intel NPU Driver;
- ACPI drivers;
- Android drivers;
- Drivers core;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Character device driver;
- Hardware random number generator core;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- Buffer Sharing and Synchronization framework;
- Intel Stratix 10 firmware drivers;
- FPGA Framework;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- CoreSight HW tracing drivers;
- I2C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Mouse) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- Multiple devices driver;
- Media drivers;
- Multifunction device drivers;
- Fastrpc Driver;
- MMC subsystem;
- Ethernet bonding driver;
- Network drivers;
- Mellanox network drivers;
- MediaTek network drivers;
- NTB driver;
- NVME drivers;
- NVMEM (Non Volatile Memory) drivers;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- System reset/shutdown drivers;
- Power sequencing drivers;
- PTP clock framework;
- Voltage and Current Regulator drivers;
- RPMSG subsystem;
- SLIMbus drivers;
- SPI subsystem;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- VME bus staging drivers;
- Trusted Execution Environment drivers;
- Thunderbolt and USB4 drivers;
- TTY drivers;
- Cadence USB3 driver;
- ULPI bus;
- DesignWare USB3 driver;
- Faraday FOTG210 USB2 dual-role controller driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB ChaosKey driver;
- Siemens ID Mouse USB driver;
- IOWarrior USB driver;
- LD Didactic USB driver;
- LEGO USB Tower driver;
- Intel USBIO USB I/O expander driver;
- USS720 USB parallel port adapter driver;
- MediaTek USB3 DRD driver;
- USB Serial drivers;
- USB Type-C Port Controller Manager driver;
- USB Type-C Connector System Software Interface driver;
- USB over IP driver;
- VFIO drivers;
- Framebuffer layer;
- Virtio drivers;
- BTRFS file system;
- EROFS file system;
- exFAT file system;
- F2FS file system;
- File systems infrastructure;
- FUSE (File system in Userspace);
- GFS2 file system;
- HFS file system;
- HFS+ file system;
- Network file system (NFS) client;
- Network file system (NFS) server daemon;
- NILFS2 file system;
- NTFS3 file system;
- OCFS2 file system;
- Proc file system;
- SMB network file system;
- UDF file system;
- XFS file system;
- Key management;
- BPF subsystem;
- Memory management;
- Software nodes and device properties;
- Glob pattern matching library;
- Memory Management;
- KVM subsystem;
- Mellanox drivers;
- Restartable sequences system call mechanism;
- Socket messages infrastructure;
- Network traffic control;
- Bluetooth subsystem;
- Netfilter;
- Networking core;
- Network sockets;
- TCP network protocol;
- io_uring subsystem;
- IPC subsystem;
- Audit subsystem;
- Perf events;
- Kernel fork() syscall;
- Locking primitives;
- Kernel module support;
- Scheduler infrastructure; -…
- Record
USN-8726-1- Updated
- 2026-11-06
OSVUSN-8726-2 No score
linux-raspi vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- User-space API (UAPI);
- Kernel build system;
- ARM32 architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Compute Acceleration Framework;
- Intel NPU Driver;
- ACPI drivers;
- Android drivers;
- Drivers core;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Character device driver;
- Hardware random number generator core;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- Buffer Sharing and Synchronization framework;
- Intel Stratix 10 firmware drivers;
- FPGA Framework;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- CoreSight HW tracing drivers;
- I2C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Mouse) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- Multiple devices driver;
- Media drivers;
- Multifunction device drivers;
- Fastrpc Driver;
- MMC subsystem;
- Ethernet bonding driver;
- Network drivers;
- Mellanox network drivers;
- MediaTek network drivers;
- NTB driver;
- NVME drivers;
- NVMEM (Non Volatile Memory) drivers;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- System reset/shutdown drivers;
- Power sequencing drivers;
- PTP clock framework;
- Voltage and Current Regulator drivers;
- RPMSG subsystem;
- SLIMbus drivers;
- SPI subsystem;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- VME bus staging drivers;
- Trusted Execution Environment drivers;
- Thunderbolt and USB4 drivers;
- TTY drivers;
- Cadence USB3 driver;
- ULPI bus;
- DesignWare USB3 driver;
- Faraday FOTG210 USB2 dual-role controller driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB ChaosKey driver;
- Siemens ID Mouse USB driver;
- IOWarrior USB driver;
- LD Didactic USB driver;
- LEGO USB Tower driver;
- Intel USBIO USB I/O expander driver;
- USS720 USB parallel port adapter driver;
- MediaTek USB3 DRD driver;
- USB Serial drivers;
- USB Type-C Port Controller Manager driver;
- USB Type-C Connector System Software Interface driver;
- USB over IP driver;
- VFIO drivers;
- Framebuffer layer;
- Virtio drivers;
- BTRFS file system;
- EROFS file system;
- exFAT file system;
- F2FS file system;
- File systems infrastructure;
- FUSE (File system in Userspace);
- GFS2 file system;
- HFS file system;
- HFS+ file system;
- Network file system (NFS) client;
- Network file system (NFS) server daemon;
- NILFS2 file system;
- NTFS3 file system;
- OCFS2 file system;
- Proc file system;
- SMB network file system;
- UDF file system;
- XFS file system;
- Key management;
- BPF subsystem;
- Memory management;
- Software nodes and device properties;
- Glob pattern matching library;
- Memory Management;
- KVM subsystem;
- Mellanox drivers;
- Restartable sequences system call mechanism;
- Socket messages infrastructure;
- Network traffic control;
- Bluetooth subsystem;
- Netfilter;
- Networking core;
- Network sockets;
- TCP network protocol;
- io_uring subsystem;
- IPC subsystem;
- Audit subsystem;
- Perf events;
- Kernel fork() syscall;
- Locking primitives;
- Kernel module support;
- Scheduler infrastructure; -…
- Record
USN-8726-2- Updated
- 2026-11-06
OSVUSN-8726-3 No score
linux-ibm vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- User-space API (UAPI);
- Kernel build system;
- ARM32 architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Compute Acceleration Framework;
- Intel NPU Driver;
- ACPI drivers;
- Android drivers;
- Drivers core;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Character device driver;
- Hardware random number generator core;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- Buffer Sharing and Synchronization framework;
- Intel Stratix 10 firmware drivers;
- FPGA Framework;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- CoreSight HW tracing drivers;
- I2C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Mouse) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- Multiple devices driver;
- Media drivers;
- Multifunction device drivers;
- Fastrpc Driver;
- MMC subsystem;
- Ethernet bonding driver;
- Network drivers;
- Mellanox network drivers;
- MediaTek network drivers;
- NTB driver;
- NVME drivers;
- NVMEM (Non Volatile Memory) drivers;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- System reset/shutdown drivers;
- Power sequencing drivers;
- PTP clock framework;
- Voltage and Current Regulator drivers;
- RPMSG subsystem;
- SLIMbus drivers;
- SPI subsystem;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- VME bus staging drivers;
- Trusted Execution Environment drivers;
- Thunderbolt and USB4 drivers;
- TTY drivers;
- Cadence USB3 driver;
- ULPI bus;
- DesignWare USB3 driver;
- Faraday FOTG210 USB2 dual-role controller driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB ChaosKey driver;
- Siemens ID Mouse USB driver;
- IOWarrior USB driver;
- LD Didactic USB driver;
- LEGO USB Tower driver;
- Intel USBIO USB I/O expander driver;
- USS720 USB parallel port adapter driver;
- MediaTek USB3 DRD driver;
- USB Serial drivers;
- USB Type-C Port Controller Manager driver;
- USB Type-C Connector System Software Interface driver;
- USB over IP driver;
- VFIO drivers;
- Framebuffer layer;
- Virtio drivers;
- BTRFS file system;
- EROFS file system;
- exFAT file system;
- F2FS file system;
- File systems infrastructure;
- FUSE (File system in Userspace);
- GFS2 file system;
- HFS file system;
- HFS+ file system;
- Network file system (NFS) client;
- Network file system (NFS) server daemon;
- NILFS2 file system;
- NTFS3 file system;
- OCFS2 file system;
- Proc file system;
- SMB network file system;
- UDF file system;
- XFS file system;
- Key management;
- BPF subsystem;
- Memory management;
- Software nodes and device properties;
- Glob pattern matching library;
- Memory Management;
- KVM subsystem;
- Mellanox drivers;
- Restartable sequences system call mechanism;
- Socket messages infrastructure;
- Network traffic control;
- Bluetooth subsystem;
- Netfilter;
- Networking core;
- Network sockets;
- TCP network protocol;
- io_uring subsystem;
- IPC subsystem;
- Audit subsystem;
- Perf events;
- Kernel fork() syscall;
- Locking primitives;
- Kernel module support;
- Scheduler infrastructure; -…
- Record
USN-8726-3- Updated
- 2026-11-06
OSVUSN-8726-4 No score
linux-azure, linux-oracle vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- User-space API (UAPI);
- Kernel build system;
- ARM32 architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Compute Acceleration Framework;
- Intel NPU Driver;
- ACPI drivers;
- Android drivers;
- Drivers core;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Character device driver;
- Hardware random number generator core;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- Buffer Sharing and Synchronization framework;
- Intel Stratix 10 firmware drivers;
- FPGA Framework;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- CoreSight HW tracing drivers;
- I2C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Mouse) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- Multiple devices driver;
- Media drivers;
- Multifunction device drivers;
- Fastrpc Driver;
- MMC subsystem;
- Ethernet bonding driver;
- Network drivers;
- Mellanox network drivers;
- MediaTek network drivers;
- NTB driver;
- NVME drivers;
- NVMEM (Non Volatile Memory) drivers;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- System reset/shutdown drivers;
- Power sequencing drivers;
- PTP clock framework;
- Voltage and Current Regulator drivers;
- RPMSG subsystem;
- SLIMbus drivers;
- SPI subsystem;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- VME bus staging drivers;
- Trusted Execution Environment drivers;
- Thunderbolt and USB4 drivers;
- TTY drivers;
- Cadence USB3 driver;
- ULPI bus;
- DesignWare USB3 driver;
- Faraday FOTG210 USB2 dual-role controller driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB ChaosKey driver;
- Siemens ID Mouse USB driver;
- IOWarrior USB driver;
- LD Didactic USB driver;
- LEGO USB Tower driver;
- Intel USBIO USB I/O expander driver;
- USS720 USB parallel port adapter driver;
- MediaTek USB3 DRD driver;
- USB Serial drivers;
- USB Type-C Port Controller Manager driver;
- USB Type-C Connector System Software Interface driver;
- USB over IP driver;
- VFIO drivers;
- Framebuffer layer;
- Virtio drivers;
- BTRFS file system;
- EROFS file system;
- exFAT file system;
- F2FS file system;
- File systems infrastructure;
- FUSE (File system in Userspace);
- GFS2 file system;
- HFS file system;
- HFS+ file system;
- Network file system (NFS) client;
- Network file system (NFS) server daemon;
- NILFS2 file system;
- NTFS3 file system;
- OCFS2 file system;
- Proc file system;
- SMB network file system;
- UDF file system;
- XFS file system;
- Key management;
- BPF subsystem;
- Memory management;
- Software nodes and device properties;
- Glob pattern matching library;
- Memory Management;
- KVM subsystem;
- Mellanox drivers;
- Restartable sequences system call mechanism;
- Socket messages infrastructure;
- Network traffic control;
- Bluetooth subsystem;
- Netfilter;
- Networking core;
- Network sockets;
- TCP network protocol;
- io_uring subsystem;
- IPC subsystem;
- Audit subsystem;
- Perf events;
- Kernel fork() syscall;
- Locking primitives;
- Kernel module support;
- Scheduler infrastructure; -…
- Record
USN-8726-4- Updated
- 2026-11-06
OSVUSN-8727-1 No score
linux-oem-7.0 vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- User-space API (UAPI);
- Kernel build system;
- ARM32 architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Compute Acceleration Framework;
- Intel NPU Driver;
- ACPI drivers;
- Android drivers;
- Drivers core;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Character device driver;
- Hardware random number generator core;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- Buffer Sharing and Synchronization framework;
- Intel Stratix 10 firmware drivers;
- FPGA Framework;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- CoreSight HW tracing drivers;
- I2C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Mouse) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- Multiple devices driver;
- Media drivers;
- Multifunction device drivers;
- Fastrpc Driver;
- MMC subsystem;
- Ethernet bonding driver;
- Network drivers;
- Mellanox network drivers;
- MediaTek network drivers;
- NTB driver;
- NVME drivers;
- NVMEM (Non Volatile Memory) drivers;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- System reset/shutdown drivers;
- Power sequencing drivers;
- PTP clock framework;
- Voltage and Current Regulator drivers;
- RPMSG subsystem;
- SLIMbus drivers;
- SPI subsystem;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- VME bus staging drivers;
- Trusted Execution Environment drivers;
- TTY drivers;
- Cadence USB3 driver;
- ULPI bus;
- USB core drivers;
- DesignWare USB3 driver;
- Faraday FOTG210 USB2 dual-role controller driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB ChaosKey driver;
- Siemens ID Mouse USB driver;
- IOWarrior USB driver;
- LD Didactic USB driver;
- LEGO USB Tower driver;
- Intel USBIO USB I/O expander driver;
- USS720 USB parallel port adapter driver;
- MediaTek USB3 DRD driver;
- USB Serial drivers;
- USB Type-C Port Controller Manager driver;
- USB Type-C Connector System Software Interface driver;
- USB over IP driver;
- VFIO drivers;
- Framebuffer layer;
- Virtio drivers;
- BTRFS file system;
- EROFS file system;
- exFAT file system;
- F2FS file system;
- File systems infrastructure;
- FUSE (File system in Userspace);
- GFS2 file system;
- HFS file system;
- HFS+ file system;
- Network file system (NFS) client;
- Network file system (NFS) server daemon;
- NILFS2 file system;
- NTFS3 file system;
- OCFS2 file system;
- Proc file system;
- SMB network file system;
- UDF file system;
- XFS file system;
- Key management;
- BPF subsystem;
- Memory management;
- Software nodes and device properties;
- Glob pattern matching library;
- Memory Management;
- KVM subsystem;
- Mellanox drivers;
- Restartable sequences system call mechanism;
- Socket messages infrastructure;
- Network traffic control;
- Bluetooth subsystem;
- Netfilter;
- Networking core;
- Network sockets;
- TCP network protocol;
- io_uring subsystem;
- IPC subsystem;
- Audit subsystem;
- Perf events;
- Kernel fork() syscall;
- Locking primitives;
- Kernel module support;
- Scheduler infrastructure;
- Signal handling…
- Record
USN-8727-1- Updated
- 2026-11-06
OSVUSN-8728-1 No score
linux-gcp-7.0 vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- x86 platform drivers;
- ARM64 architecture;
- Cryptographic API;
- PSP security protocol;
- User-space API (UAPI);
- Kernel build system;
- ARM32 architecture;
- MIPS architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Block layer subsystem;
- Compute Acceleration Framework;
- Intel NPU Driver;
- ACPI drivers;
- Android drivers;
- Auxiliary display drivers;
- Drivers core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Ublk userspace block driver;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Bus devices;
- Character device driver;
- Hardware random number generator core;
- Clock framework and drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- Buffer Sharing and Synchronization framework;
- DPLL subsystem;
- EDAC drivers;
- Arm Firmware Framework for ARMv8-A(FFA);
- EFI core;
- Intel Stratix 10 firmware drivers;
- FPGA Framework;
- FWCTL subsystem;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- Hardware monitoring drivers;
- CoreSight HW tracing drivers;
- I2C subsystem;
- I3C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Mouse) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- NVIDIA Tegra memory controller driver;
- Multifunction device drivers;
- Fastrpc Driver;
- MMC subsystem;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- STMicroelectronics network drivers;
- Texas Instruments network drivers;
- MediaTek network drivers;
- NTB driver;
- NVME drivers;
- NVMEM (Non Volatile Memory) drivers;
- Parport drivers;
- PCI subsystem;
- PHY drivers;
- Pin controllers subsystem;
- Chrome hardware platform drivers;
- ACPI WMI driver;
- Generic PM domains;
- MediaTek PM domains;
- System reset/shutdown drivers;
- Power sequencing drivers;
- Power supply drivers;
- PTP clock framework;
- Voltage and Current Regulator drivers;
- MPAM driver;
- Amlogic Meson reset controller drivers;
- RPMSG subsystem;
- S/390 drivers;
- SCSI subsystem;
- SLIMbus drivers;
- NVIDIA Tegra Control Backbone (CBB) driver;
- SPI subsystem;
- Greybus lights staging drivers;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- VME bus staging drivers;
- TCM subsystem;
- Trusted Execution Environment drivers;
- Thunderbolt and USB4 drivers;
- TTY drivers;
- Userspace I/O drivers;
- Cadence USB3 driver;
- USB Device Class drivers;
- ULPI bus;
- DesignWare USB2 driver;
- DesignWare USB3 driver;
- Faraday FOTG210 USB2 dual-role controller driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB ChaosKey driver;
- Siemens ID Mouse USB driver;
- IOWarrior USB driver;
- LD Didactic USB driver;
- LEGO USB…
- Record
USN-8728-1- Updated
- 2026-11-07
OSVUSN-8728-2 No score
linux-azure-7.0 vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- x86 platform drivers;
- ARM64 architecture;
- Cryptographic API;
- PSP security protocol;
- User-space API (UAPI);
- Kernel build system;
- ARM32 architecture;
- MIPS architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Block layer subsystem;
- Compute Acceleration Framework;
- Intel NPU Driver;
- ACPI drivers;
- Android drivers;
- Auxiliary display drivers;
- Drivers core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Ublk userspace block driver;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Bus devices;
- Character device driver;
- Hardware random number generator core;
- Clock framework and drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- Buffer Sharing and Synchronization framework;
- DPLL subsystem;
- EDAC drivers;
- Arm Firmware Framework for ARMv8-A(FFA);
- EFI core;
- Intel Stratix 10 firmware drivers;
- FPGA Framework;
- FWCTL subsystem;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- Hardware monitoring drivers;
- CoreSight HW tracing drivers;
- I2C subsystem;
- I3C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Mouse) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- NVIDIA Tegra memory controller driver;
- Multifunction device drivers;
- Fastrpc Driver;
- MMC subsystem;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- STMicroelectronics network drivers;
- Texas Instruments network drivers;
- MediaTek network drivers;
- NTB driver;
- NVME drivers;
- NVMEM (Non Volatile Memory) drivers;
- Parport drivers;
- PCI subsystem;
- PHY drivers;
- Pin controllers subsystem;
- Chrome hardware platform drivers;
- ACPI WMI driver;
- Generic PM domains;
- MediaTek PM domains;
- System reset/shutdown drivers;
- Power sequencing drivers;
- Power supply drivers;
- PTP clock framework;
- Voltage and Current Regulator drivers;
- MPAM driver;
- Amlogic Meson reset controller drivers;
- RPMSG subsystem;
- S/390 drivers;
- SCSI subsystem;
- SLIMbus drivers;
- NVIDIA Tegra Control Backbone (CBB) driver;
- SPI subsystem;
- Greybus lights staging drivers;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- VME bus staging drivers;
- TCM subsystem;
- Trusted Execution Environment drivers;
- Thunderbolt and USB4 drivers;
- TTY drivers;
- Userspace I/O drivers;
- Cadence USB3 driver;
- USB Device Class drivers;
- ULPI bus;
- DesignWare USB2 driver;
- DesignWare USB3 driver;
- Faraday FOTG210 USB2 dual-role controller driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB ChaosKey driver;
- Siemens ID Mouse USB driver;
- IOWarrior USB driver;
- LD Didactic USB driver;
- LEGO USB…
- Record
USN-8728-2- Updated
- 2026-11-07
OSVUSN-8728-3 No score
linux-oracle-7.0 vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- x86 platform drivers;
- ARM64 architecture;
- Cryptographic API;
- PSP security protocol;
- User-space API (UAPI);
- Kernel build system;
- ARM32 architecture;
- MIPS architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Block layer subsystem;
- Compute Acceleration Framework;
- Intel NPU Driver;
- ACPI drivers;
- Android drivers;
- Auxiliary display drivers;
- Drivers core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Ublk userspace block driver;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Bus devices;
- Character device driver;
- Hardware random number generator core;
- Clock framework and drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- Buffer Sharing and Synchronization framework;
- DPLL subsystem;
- EDAC drivers;
- Arm Firmware Framework for ARMv8-A(FFA);
- EFI core;
- Intel Stratix 10 firmware drivers;
- FPGA Framework;
- FWCTL subsystem;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- Hardware monitoring drivers;
- CoreSight HW tracing drivers;
- I2C subsystem;
- I3C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Mouse) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- NVIDIA Tegra memory controller driver;
- Multifunction device drivers;
- Fastrpc Driver;
- MMC subsystem;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- STMicroelectronics network drivers;
- Texas Instruments network drivers;
- MediaTek network drivers;
- NTB driver;
- NVME drivers;
- NVMEM (Non Volatile Memory) drivers;
- Parport drivers;
- PCI subsystem;
- PHY drivers;
- Pin controllers subsystem;
- Chrome hardware platform drivers;
- ACPI WMI driver;
- Generic PM domains;
- MediaTek PM domains;
- System reset/shutdown drivers;
- Power sequencing drivers;
- Power supply drivers;
- PTP clock framework;
- Voltage and Current Regulator drivers;
- MPAM driver;
- Amlogic Meson reset controller drivers;
- RPMSG subsystem;
- S/390 drivers;
- SCSI subsystem;
- SLIMbus drivers;
- NVIDIA Tegra Control Backbone (CBB) driver;
- SPI subsystem;
- Greybus lights staging drivers;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- VME bus staging drivers;
- TCM subsystem;
- Trusted Execution Environment drivers;
- Thunderbolt and USB4 drivers;
- TTY drivers;
- Userspace I/O drivers;
- Cadence USB3 driver;
- USB Device Class drivers;
- ULPI bus;
- DesignWare USB2 driver;
- DesignWare USB3 driver;
- Faraday FOTG210 USB2 dual-role controller driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB ChaosKey driver;
- Siemens ID Mouse USB driver;
- IOWarrior USB driver;
- LD Didactic USB driver;
- LEGO USB…
- Record
USN-8728-3- Updated
- 2026-11-07
OSVUSN-8760-1 No score
linux-nvidia-7.0 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- User-space API (UAPI);
- Kernel build system;
- ARM32 architecture;
- ARM64 architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Compute Acceleration Framework;
- Intel NPU Driver;
- ACPI drivers;
- Android drivers;
- Drivers core;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Character device driver;
- Hardware random number generator core;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- Buffer Sharing and Synchronization framework;
- Intel Stratix 10 firmware drivers;
- FPGA Framework;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- CoreSight HW tracing drivers;
- I2C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Mouse) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- Multiple devices driver;
- Media drivers;
- Multifunction device drivers;
- Fastrpc Driver;
- MMC subsystem;
- Ethernet bonding driver;
- Network drivers;
- Mellanox network drivers;
- MediaTek network drivers;
- NTB driver;
- NVME drivers;
- NVMEM (Non Volatile Memory) drivers;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- System reset/shutdown drivers;
- Power sequencing drivers;
- PTP clock framework;
- Voltage and Current Regulator drivers;
- RPMSG subsystem;
- SLIMbus drivers;
- SPI subsystem;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- VME bus staging drivers;
- Trusted Execution Environment drivers;
- Thunderbolt and USB4 drivers;
- TTY drivers;
- Cadence USB3 driver;
- ULPI bus;
- DesignWare USB3 driver;
- Faraday FOTG210 USB2 dual-role controller driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB ChaosKey driver;
- Siemens ID Mouse USB driver;
- IOWarrior USB driver;
- LD Didactic USB driver;
- LEGO USB Tower driver;
- Intel USBIO USB I/O expander driver;
- USS720 USB parallel port adapter driver;
- MediaTek USB3 DRD driver;
- USB Serial drivers;
- USB Type-C Port Controller Manager driver;
- USB Type-C Connector System Software Interface driver;
- USB over IP driver;
- VFIO drivers;
- Framebuffer layer;
- Virtio drivers;
- BTRFS file system;
- EROFS file system;
- exFAT file system;
- F2FS file system;
- File systems infrastructure;
- FUSE (File system in Userspace);
- GFS2 file system;
- HFS file system;
- HFS+ file system;
- Network file system (NFS) client;
- Network file system (NFS) server daemon;
- NILFS2 file system;
- NTFS3 file system;
- OCFS2 file system;
- Proc file system;
- SMB network file system;
- UDF file system;
- XFS file system;
- Key management;
- BPF subsystem;
- Memory management;
- Software nodes and device properties;
- Glob pattern matching library;
- Memory Management;
- KVM subsystem;
- Mellanox drivers;
- Restartable sequences system call mechanism;
- Socket messages infrastructure;
- Network traffic control;
- Bluetooth subsystem;
- Netfilter;
- Networking core;
- Network sockets;
- TCP network protocol;
- io_uring subsystem;
- IPC subsystem;
- Audit subsystem;
- Perf events;
- Kernel fork() syscall;
- Locking primitives;
- Kernel module support;
- Scheduler infrastructure;
- Signal handling mechanism;
- Timer subsystem;
- Tracing infrastructure;
- Debug objects infrastructure;
- 6LoWPAN network protocol;
- IEEE 802 network protocols;
- 9P file system network protocol;
- B.A.T.M.A.N. meshing protocol;
- Ethernet bridge;
- Devlink API;
- HSR network protocol;
- IEEE802154.4 network protocol;
- IPv4 networking;
- IPv6 networking; …
- Record
USN-8760-1- Updated
- 2026-11-06
OSVUSN-8760-2 No score
linux-nvidia vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- User-space API (UAPI);
- Kernel build system;
- ARM32 architecture;
- ARM64 architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Compute Acceleration Framework;
- Intel NPU Driver;
- ACPI drivers;
- Android drivers;
- Drivers core;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Character device driver;
- Hardware random number generator core;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- Buffer Sharing and Synchronization framework;
- Intel Stratix 10 firmware drivers;
- FPGA Framework;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- CoreSight HW tracing drivers;
- I2C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Mouse) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- Multiple devices driver;
- Media drivers;
- Multifunction device drivers;
- Fastrpc Driver;
- MMC subsystem;
- Ethernet bonding driver;
- Network drivers;
- Mellanox network drivers;
- MediaTek network drivers;
- NTB driver;
- NVME drivers;
- NVMEM (Non Volatile Memory) drivers;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- System reset/shutdown drivers;
- Power sequencing drivers;
- PTP clock framework;
- Voltage and Current Regulator drivers;
- RPMSG subsystem;
- SLIMbus drivers;
- SPI subsystem;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- VME bus staging drivers;
- Trusted Execution Environment drivers;
- Thunderbolt and USB4 drivers;
- TTY drivers;
- Cadence USB3 driver;
- ULPI bus;
- DesignWare USB3 driver;
- Faraday FOTG210 USB2 dual-role controller driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB ChaosKey driver;
- Siemens ID Mouse USB driver;
- IOWarrior USB driver;
- LD Didactic USB driver;
- LEGO USB Tower driver;
- Intel USBIO USB I/O expander driver;
- USS720 USB parallel port adapter driver;
- MediaTek USB3 DRD driver;
- USB Serial drivers;
- USB Type-C Port Controller Manager driver;
- USB Type-C Connector System Software Interface driver;
- USB over IP driver;
- VFIO drivers;
- Framebuffer layer;
- Virtio drivers;
- BTRFS file system;
- EROFS file system;
- exFAT file system;
- F2FS file system;
- File systems infrastructure;
- FUSE (File system in Userspace);
- GFS2 file system;
- HFS file system;
- HFS+ file system;
- Network file system (NFS) client;
- Network file system (NFS) server daemon;
- NILFS2 file system;
- NTFS3 file system;
- OCFS2 file system;
- Proc file system;
- SMB network file system;
- UDF file system;
- XFS file system;
- Key management;
- BPF subsystem;
- Memory management;
- Software nodes and device properties;
- Glob pattern matching library;
- Memory Management;
- KVM subsystem;
- Mellanox drivers;
- Restartable sequences system call mechanism;
- Socket messages infrastructure;
- Network traffic control;
- Bluetooth subsystem;
- Netfilter;
- Networking core;
- Network sockets;
- TCP network protocol;
- io_uring subsystem;
- IPC subsystem;
- Audit subsystem;
- Perf events;
- Kernel fork() syscall;
- Locking primitives;
- Kernel module support;
- Scheduler infrastructure;
- Signal handling mechanism;
- Timer subsystem;
- Tracing infrastructure;
- Debug objects infrastructure;
- 6LoWPAN network protocol;
- IEEE 802 network protocols;
- 9P file system network protocol;
- B.A.T.M.A.N. meshing protocol;
- Ethernet bridge;
- Devlink API;
- HSR network protocol;
- IEEE802154.4 network protocol;
- IPv4 networking;
- IPv6 networking; …
- Record
USN-8760-2- Updated
- 2026-11-06
OSVUSN-8781-1 No score
linux-nvidia-tegra vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- User-space API (UAPI);
- Kernel build system;
- ARM32 architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Cryptographic API;
- Intel NPU Driver;
- Compute Acceleration Framework;
- ACPI drivers;
- Drivers core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Ublk userspace block driver;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Hardware crypto device drivers;
- CXL (Compute Express Link) drivers;
- Arm Firmware Framework for ARMv8-A(FFA);
- EFI core;
- FPGA Framework;
- GPU drivers;
- HID subsystem;
- Hardware monitoring drivers;
- I2C subsystem;
- I3C subsystem;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Mouse) drivers;
- IOMMU subsystem;
- Multiple devices driver;
- Media drivers;
- Fastrpc Driver;
- Network drivers;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- MediaTek network drivers;
- NVME drivers;
- Operating Performance Points (OPP) driver;
- PCI subsystem;
- PTP clock framework;
- RPMSG subsystem;
- SCSI subsystem;
- SoundWire subsystem;
- SPI subsystem;
- Greybus lights staging drivers;
- Media staging drivers;
- NVIDIA Tegra embedded controller (NVEC) staging driver;
- Realtek RTL8723BS SDIO drivers;
- TCM subsystem;
- Trusted Execution Environment drivers;
- Thunderbolt and USB4 drivers;
- TTY drivers;
- USB Gadget drivers;
- USB Dual Role (OTG-ready) Controller drivers;
- USB Serial drivers;
- vDPA drivers;
- VFIO drivers;
- Virtio Host (VHOST) subsystem;
- Virtio drivers;
- Xen hypervisor drivers;
- 9P distributed file system;
- AFS file system;
- File systems infrastructure;
- BTRFS file system;
- Ceph distributed file system;
- exFAT file system;
- F2FS file system;
- GFS2 file system;
- HFS file system;
- HFS+ file system;
- JFS file system;
- Network file systems library;
- Network file system (NFS) client;
- Network file system (NFS) server daemon;
- NTFS3 file system;
- OCFS2 file system;
- OrangeFS file system;
- SMB network file system;
- BPF subsystem;
- File system encryption (fscrypt);
- Software nodes and device properties;
- IPv4 networking;
- KVM subsystem;
- Mellanox drivers;
- Memory management;
- Networking core;
- Netfilter;
- Socket messages infrastructure;
- MediaTek SoC drivers;
- Sun RPC protocol;
- Network traffic control;
- IPv6 networking;
- Amateur Radio drivers;
- Bluetooth subsystem;
- IP tunnels definitions;
- KCM (Kernel Connection Multiplexor) sockets driver;
- MultiProtocol Label Switching driver;
- TCP network protocol;
- XFRM subsystem;
- Tracing infrastructure;
- io_uring subsystem;
- Control group (cgroup);
- Perf events;
- IRQ subsystem;
- Locking primitives;
- KProbes tracing;
- 9P file system network protocol;
- B.A.T.M.A.N. meshing protocol;
- Ethernet bridge;
- CAN network layer;
- Ceph Core library;
- Handshake API;
- HSR network protocol;
- IFE protocol;
- L2TP protocol;
- MAC80211 subsystem;
- IEEE 802.15.4 subsystem;
- Multipath TCP;
- NFC subsystem;
- Open vSwitch;
- Phonet protocol;
- RDS protocol;
- RxRPC session sockets;
- SCTP protocol;
- SMC…
- Record
USN-8781-1- Updated
- 2026-11-06
OSVUSN-8800-1 No score
linux-nvidia-bos vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- User-space API (UAPI);
- Kernel build system;
- ARM32 architecture;
- ARM64 architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Compute Acceleration Framework;
- Intel NPU Driver;
- ACPI drivers;
- Android drivers;
- Drivers core;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Character device driver;
- Hardware random number generator core;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- Buffer Sharing and Synchronization framework;
- Intel Stratix 10 firmware drivers;
- FPGA Framework;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- CoreSight HW tracing drivers;
- I2C subsystem;
- I3C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Mouse) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- Multiple devices driver;
- Media drivers;
- Multifunction device drivers;
- Fastrpc Driver;
- MMC subsystem;
- Ethernet bonding driver;
- Network drivers;
- Mellanox network drivers;
- MediaTek network drivers;
- NTB driver;
- NVME drivers;
- NVMEM (Non Volatile Memory) drivers;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- System reset/shutdown drivers;
- Power sequencing drivers;
- PTP clock framework;
- Voltage and Current Regulator drivers;
- RPMSG subsystem;
- SLIMbus drivers;
- SPI subsystem;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- VME bus staging drivers;
- Trusted Execution Environment drivers;
- Thunderbolt and USB4 drivers;
- TTY drivers;
- Cadence USB3 driver;
- ULPI bus;
- DesignWare USB3 driver;
- Faraday FOTG210 USB2 dual-role controller driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB ChaosKey driver;
- Siemens ID Mouse USB driver;
- IOWarrior USB driver;
- LD Didactic USB driver;
- LEGO USB Tower driver;
- Intel USBIO USB I/O expander driver;
- USS720 USB parallel port adapter driver;
- MediaTek USB3 DRD driver;
- USB Serial drivers;
- USB Type-C Port Controller Manager driver;
- USB Type-C Connector System Software Interface driver;
- USB over IP driver;
- VFIO drivers;
- Framebuffer layer;
- Virtio drivers;
- BTRFS file system;
- EROFS file system;
- exFAT file system;
- F2FS file system;
- File systems infrastructure;
- FUSE (File system in Userspace);
- GFS2 file system;
- HFS file system;
- HFS+ file system;
- Network file system (NFS) client;
- Network file system (NFS) server daemon;
- NILFS2 file system;
- NTFS3 file system;
- OCFS2 file system;
- Proc file system;
- SMB network file system;
- UDF file system;
- XFS file system;
- Key management;
- BPF subsystem;
- Memory management;
- Software nodes and device properties;
- Glob pattern matching library;
- Memory Management;
- KVM subsystem;
- Mellanox drivers;
- Restartable sequences system call mechanism;
- Socket messages infrastructure;
- Network traffic control;
- Bluetooth subsystem;
- Netfilter;
- Networking core;
- Network sockets;
- TCP network protocol;
- io_uring subsystem;
- IPC subsystem;
- Audit subsystem;
- Perf events;
- Kernel fork() syscall;
- Locking primitives;
- Kernel module support;
- Scheduler infrastructure;
- Signal handling mechanism;
- Timer subsystem;
- Tracing infrastructure;
- Debug objects infrastructure;
- 6LoWPAN network protocol;
- IEEE 802 network protocols;
- 9P file system network protocol;
- B.A.T.M.A.N. meshing protocol;
- Ethernet bridge;
- Devlink API;
- HSR network protocol;
- IEEE802154.4 network protocol;
- IPv4 networking; -…
- Record
USN-8800-1- Updated
- 2026-11-06
OSVUSN-8818-1 No score
linux-aws, linux-aws-fips, linux-azure, linux-azure-fde, linux-azure-fips, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-intel-iot-realtime, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-oracle, linux-realtime, linux-xilinx-zynqmp vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- InfiniBand drivers;
- Network drivers;
- TCM subsystem;
- exFAT file system;
- Network file system (NFS) client;
- Network file system (NFS) server daemon;
- B.A.T.M.A.N. meshing protocol;
- IPv4 networking;
- IPv6 networking;
- Netfilter;
- RDS protocol; (CVE-2026-53186, CVE-2026-53216, CVE-2026-53221, CVE-2026-53354, CVE-2026-53355, CVE-2026-53398, CVE-2026-63800, CVE-2026-63808, CVE-2026-63887, CVE-2026-63888, CVE-2026-63912, CVE-2026-63922, CVE-2026-63924, CVE-2026-63984, CVE-2026-63992, CVE-2026-63993, CVE-2026-63994, CVE-2026-64007, CVE-2026-64091)
- Record
USN-8818-1- Updated
- 2026-11-06
OSVUSN-8818-2 No score
linux-ibm-5.15 vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- InfiniBand drivers;
- Network drivers;
- TCM subsystem;
- exFAT file system;
- Network file system (NFS) client;
- Network file system (NFS) server daemon;
- B.A.T.M.A.N. meshing protocol;
- IPv4 networking;
- IPv6 networking;
- Netfilter;
- RDS protocol; (CVE-2026-53186, CVE-2026-53216, CVE-2026-53221, CVE-2026-53354, CVE-2026-53355, CVE-2026-53398, CVE-2026-63800, CVE-2026-63808, CVE-2026-63887, CVE-2026-63888, CVE-2026-63912, CVE-2026-63922, CVE-2026-63924, CVE-2026-63984, CVE-2026-63992, CVE-2026-63993, CVE-2026-63994, CVE-2026-64007, CVE-2026-64091)
- Record
USN-8818-2- Updated
- 2026-11-06
OSVUSN-8818-3 No score
linux-aws-5.15, linux-azure-5.15, linux-azure-fde-5.15, linux-intel-iotg-5.15 vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- InfiniBand drivers;
- Network drivers;
- TCM subsystem;
- exFAT file system;
- Network file system (NFS) client;
- Network file system (NFS) server daemon;
- B.A.T.M.A.N. meshing protocol;
- IPv4 networking;
- IPv6 networking;
- Netfilter;
- RDS protocol; (CVE-2026-53186, CVE-2026-53216, CVE-2026-53221, CVE-2026-53354, CVE-2026-53355, CVE-2026-53398, CVE-2026-63800, CVE-2026-63808, CVE-2026-63887, CVE-2026-63888, CVE-2026-63912, CVE-2026-63922, CVE-2026-63924, CVE-2026-63984, CVE-2026-63992, CVE-2026-63993, CVE-2026-63994, CVE-2026-64007, CVE-2026-64091)
- Record
USN-8818-3- Updated
- 2026-11-06
OSVUSN-8818-4 No score
linux, linux-nvidia vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- InfiniBand drivers;
- Network drivers;
- TCM subsystem;
- exFAT file system;
- Network file system (NFS) client;
- Network file system (NFS) server daemon;
- B.A.T.M.A.N. meshing protocol;
- IPv4 networking;
- IPv6 networking;
- Netfilter;
- RDS protocol; (CVE-2026-53186, CVE-2026-53216, CVE-2026-53221, CVE-2026-53354, CVE-2026-53355, CVE-2026-53398, CVE-2026-63800, CVE-2026-63808, CVE-2026-63887, CVE-2026-63888, CVE-2026-63912, CVE-2026-63922, CVE-2026-63924, CVE-2026-63984, CVE-2026-63992, CVE-2026-63993, CVE-2026-63994, CVE-2026-64007, CVE-2026-64091)
- Record
USN-8818-4- Updated
- 2026-11-06
OSVUSN-8818-5 No score
linux-nvidia-tegra, linux-nvidia-tegra-igx vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- InfiniBand drivers;
- Network drivers;
- TCM subsystem;
- exFAT file system;
- Network file system (NFS) client;
- Network file system (NFS) server daemon;
- B.A.T.M.A.N. meshing protocol;
- IPv4 networking;
- IPv6 networking;
- Netfilter;
- RDS protocol; (CVE-2026-53186, CVE-2026-53216, CVE-2026-53221, CVE-2026-53354, CVE-2026-53355, CVE-2026-53398, CVE-2026-63800, CVE-2026-63808, CVE-2026-63887, CVE-2026-63888, CVE-2026-63912, CVE-2026-63922, CVE-2026-63924, CVE-2026-63984, CVE-2026-63992, CVE-2026-63993, CVE-2026-63994, CVE-2026-64007, CVE-2026-64091)
- Record
USN-8818-5- Updated
- 2026-11-06
OSVUSN-8818-6 No score
linux-fips vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- InfiniBand drivers;
- Network drivers;
- TCM subsystem;
- exFAT file system;
- Network file system (NFS) client;
- Network file system (NFS) server daemon;
- B.A.T.M.A.N. meshing protocol;
- IPv4 networking;
- IPv6 networking;
- Netfilter;
- RDS protocol; (CVE-2026-53186, CVE-2026-53216, CVE-2026-53221, CVE-2026-53354, CVE-2026-53355, CVE-2026-53398, CVE-2026-63800, CVE-2026-63808, CVE-2026-63887, CVE-2026-63888, CVE-2026-63912, CVE-2026-63922, CVE-2026-63924, CVE-2026-63984, CVE-2026-63992, CVE-2026-63993, CVE-2026-63994, CVE-2026-64007, CVE-2026-64091)
- Record
USN-8818-6- Updated
- 2026-11-06
OSVUSN-8849-1 No score
linux-nvidia-tegra-5.15 vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- InfiniBand drivers;
- Network drivers;
- TCM subsystem;
- exFAT file system;
- Network file system (NFS) server daemon;
- B.A.T.M.A.N. meshing protocol;
- IPv4 networking;
- IPv6 networking;
- Netfilter;
- RDS protocol; (CVE-2026-53186, CVE-2026-53221, CVE-2026-53354, CVE-2026-53355, CVE-2026-53398, CVE-2026-63808, CVE-2026-63887, CVE-2026-63888, CVE-2026-63912, CVE-2026-63922, CVE-2026-63924, CVE-2026-63984, CVE-2026-63992, CVE-2026-63993, CVE-2026-63994, CVE-2026-64007, CVE-2026-64091)
- Record
USN-8849-1- Updated
- 2026-11-06
OSVUSN-8871-1 No score
linux-raspi vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- InfiniBand drivers;
- Network drivers;
- TCM subsystem;
- exFAT file system;
- Network file system (NFS) client;
- Network file system (NFS) server daemon;
- B.A.T.M.A.N. meshing protocol;
- IPv4 networking;
- IPv6 networking;
- Netfilter;
- RDS protocol; (CVE-2026-53131, CVE-2026-53186, CVE-2026-53216, CVE-2026-53221, CVE-2026-53354, CVE-2026-53355, CVE-2026-53398, CVE-2026-63800, CVE-2026-63808, CVE-2026-63887, CVE-2026-63888, CVE-2026-63912, CVE-2026-63922, CVE-2026-63924, CVE-2026-63984, CVE-2026-63992, CVE-2026-63993, CVE-2026-63994, CVE-2026-64007, CVE-2026-64091)
- Record
USN-8871-1- Updated
- 2026-11-06
OSVUSN-8878-1 No score
linux-gcp-5.15 vulnerabilities
It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114)
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- User-space API (UAPI);
- ARM32 architecture;
- MIPS architecture;
- PowerPC architecture;
- RISC-V architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- ACPI drivers;
- Android drivers;
- Serial ATA and Parallel ATA drivers;
- Drivers core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Bluetooth drivers;
- Cdrom driver;
- Character device driver;
- Hardware random number generator core;
- TPM device driver;
- Data acquisition framework and drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- DAX dirext access to differentiated memory framework;
- DMA engine subsystem;
- FireWire subsystem;
- Arm Firmware Framework for ARMv8-A(FFA);
- ARM SCMI message protocol;
- Intel Stratix 10 firmware drivers;
- FPGA Framework;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- Hardware monitoring drivers;
- Intel Trace Hub HW tracing drivers;
- I2C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- IIO Magnetometer sensors drivers;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Miscellaneous) drivers;
- Input Device (Mouse) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- LED subsystem;
- Multiple devices driver;
- Media drivers;
- MemoryStick subsystem;
- Multifunction device drivers;
- Fastrpc Driver;
- MMC subsystem;
- MTD block device drivers;
- Ethernet bonding driver;
- Network drivers;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- Texas Instruments network drivers;
- MediaTek network drivers;
- NTB driver;
- NVDIMM (Non-Volatile Memory Device) drivers;
- NVME drivers;
- Parport drivers;
- PCI subsystem;
- Pin controllers subsystem;
- Generic PM domains;
- System reset/shutdown drivers;
- Power supply drivers;
- RapidIO drivers;
- Voltage and Current Regulator drivers;
- Reset controller framework;
- S/390 drivers;
- SCSI subsystem;
- SLIMbus drivers;
- SPI subsystem;
- Media staging drivers;
- Media Oriented Systems Transport (MOST) driver;
- NVIDIA Tegra embedded controller (NVEC) staging driver;
- Realtek RTL8723BS SDIO drivers;
- TCM subsystem;
- Trusted Execution Environment drivers;
- Thermal drivers;
- Thunderbolt and USB4 drivers;
- TTY drivers;
- USB DSL drivers;
- Cadence USB3 driver;
- USB Device Class drivers;
- ULPI bus;
- DesignWare USB2 driver;
- DesignWare USB3 driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB ChaosKey driver;
- Siemens ID Mouse USB driver;
- IOWarrior USB driver;
- LD Didactic USB driver;
- LEGO USB Tower driver;
- USS720 USB parallel port adapter driver;
- MediaTek USB3 DRD driver;
- USB Serial drivers;
- USB Type-C support driver;
- USB Type-C Port Controller Manager driver;
- USB Type-C Connector System Software Interface driver;
- USB over IP driver;
- vDPA drivers;
- VFIO drivers;
- Virtio Host (VHOST) subsystem;
- Framebuffer…
- Record
USN-8878-1- Updated
- 2026-11-07
OSVUSN-8879-1 No score
linux-oracle-5.15 vulnerabilities
It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114)
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- User-space API (UAPI);
- ARM32 architecture;
- MIPS architecture;
- PowerPC architecture;
- RISC-V architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- ACPI drivers;
- Android drivers;
- Serial ATA and Parallel ATA drivers;
- Drivers core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Bluetooth drivers;
- Cdrom driver;
- Character device driver;
- Hardware random number generator core;
- TPM device driver;
- Data acquisition framework and drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- DAX dirext access to differentiated memory framework;
- DMA engine subsystem;
- FireWire subsystem;
- Arm Firmware Framework for ARMv8-A(FFA);
- ARM SCMI message protocol;
- Intel Stratix 10 firmware drivers;
- FPGA Framework;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- Hardware monitoring drivers;
- Intel Trace Hub HW tracing drivers;
- I2C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- IIO Magnetometer sensors drivers;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Miscellaneous) drivers;
- Input Device (Mouse) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- LED subsystem;
- Multiple devices driver;
- Media drivers;
- MemoryStick subsystem;
- Multifunction device drivers;
- Fastrpc Driver;
- MMC subsystem;
- MTD block device drivers;
- Ethernet bonding driver;
- Network drivers;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- Texas Instruments network drivers;
- MediaTek network drivers;
- NTB driver;
- NVDIMM (Non-Volatile Memory Device) drivers;
- NVME drivers;
- Parport drivers;
- PCI subsystem;
- Pin controllers subsystem;
- Generic PM domains;
- System reset/shutdown drivers;
- Power supply drivers;
- RapidIO drivers;
- Voltage and Current Regulator drivers;
- Reset controller framework;
- S/390 drivers;
- SCSI subsystem;
- SLIMbus drivers;
- SPI subsystem;
- Media staging drivers;
- Media Oriented Systems Transport (MOST) driver;
- NVIDIA Tegra embedded controller (NVEC) staging driver;
- Realtek RTL8723BS SDIO drivers;
- TCM subsystem;
- Trusted Execution Environment drivers;
- Thermal drivers;
- Thunderbolt and USB4 drivers;
- TTY drivers;
- USB DSL drivers;
- Cadence USB3 driver;
- USB Device Class drivers;
- ULPI bus;
- DesignWare USB2 driver;
- DesignWare USB3 driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB ChaosKey driver;
- Siemens ID Mouse USB driver;
- IOWarrior USB driver;
- LD Didactic USB driver;
- LEGO USB Tower driver;
- USS720 USB parallel port adapter driver;
- MediaTek USB3 DRD driver;
- USB Serial drivers;
- USB Type-C support driver;
- USB Type-C Port Controller Manager driver;
- USB Type-C Connector System Software Interface driver;
- USB over IP driver;
- vDPA drivers;
- VFIO drivers;
- Virtio Host (VHOST) subsystem;
- Framebuffer…
- Record
USN-8879-1- Updated
- 2026-11-07
OSVUSN-8917-1 No score
linux, linux-aws, linux-aws-fips, linux-fips, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-ibm, linux-lowlatency, linux-oracle, linux-realtime vulnerabilities
It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- NVDIMM (Non-Volatile Memory Device) drivers;
- Handshake API;
- ARM32 architecture;
- ARM64 architecture;
- MIPS architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Intel NPU Driver;
- ACPI drivers;
- Android drivers;
- Serial ATA and Parallel ATA drivers;
- Drivers core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Bluetooth drivers;
- Cdrom driver;
- Character device driver;
- Hardware random number generator core;
- TPM device driver;
- Data acquisition framework and drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- DAX dirext access to differentiated memory framework;
- Buffer Sharing and Synchronization framework;
- DMA engine subsystem;
- FireWire subsystem;
- Arm Firmware Framework for ARMv8-A(FFA);
- ARM SCMI message protocol;
- Intel Stratix 10 firmware drivers;
- FPGA Framework;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- Microsoft Hyper-V drivers;
- Hardware monitoring drivers;
- CoreSight HW tracing drivers;
- Intel Trace Hub HW tracing drivers;
- I2C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- IIO Magnetometer sensors drivers;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Miscellaneous) drivers;
- Input Device (Mouse) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- LED subsystem;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- MemoryStick subsystem;
- Multifunction device drivers;
- Intel Management Engine Interface driver;
- Amazon Nitro Secure Module driver;
- MMC subsystem;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- MediaTek network drivers;
- NTB driver;
- NVME drivers;
- PCI subsystem;
- x86 platform drivers;
- i.MX PM domains;
- System reset/shutdown drivers;
- Power supply drivers;
- RapidIO drivers;
- Voltage and Current Regulator drivers;
- Remote Processor subsystem;
- Reset controller framework;
- RPMSG subsystem;
- Real Time Clock drivers;
- S/390 drivers;
- SCSI subsystem;
- Xilinx SoC drivers;
- SPI subsystem;
- Media staging drivers;
- Media Oriented Systems Transport (MOST) driver;
- NVIDIA Tegra embedded controller (NVEC) staging driver;
- Realtek RTL8723BS SDIO drivers;
- VME bus staging drivers;
- TCM subsystem;
- TTY drivers;
- USB DSL drivers;
- Cadence USB3 driver;
- ULPI bus;
- USB core drivers;
- DesignWare USB3 driver;
- Faraday FOTG210 USB2 dual-role controller driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB ChaosKey driver;
- Siemens ID Mouse USB driver;
- IOWarrior USB driver;
- LD Didactic USB driver;
- LEGO USB Tower driver;
- USS720 USB parallel port adapter driver;
- MediaTek USB3 DRD driver;
- USB Dual Role (OTG-ready) Controller drivers;
- USB Serial drivers;
- USB Type-C Port Controller Manager driver;
- USB Type-C Connector System Software Interface driver;
- USB over IP driver;
- vDPA drivers;
- VFIO drivers;
- Virtio Host (VHOST) subsystem;
- Framebuffer layer;
- Watchdog drivers;
- Xen hypervisor drivers;
- 9P distributed file system;
- AFS file system;
- File systems infrastructure;
- BTRFS file…
- Record
USN-8917-1- Updated
- 2026-11-06
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernelAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-64kAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-64k-coreAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-64k-debugAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-64k-debug-coreAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-64k-debug-develAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-64k-debug-devel-matchedAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-64k-debug-modulesAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-64k-debug-modules-coreAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-64k-debug-modules-extraAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
Show 290 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-64k-develAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-64k-devel-matchedAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-64k-modulesAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-64k-modules-coreAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-64k-modules-extraAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-abi-stablelistsAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-coreAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-cross-headersAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-debugAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-debug-coreAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-debug-develAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-debug-devel-matchedAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-debug-modulesAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-debug-modules-coreAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-debug-modules-extraAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-debug-uki-virtAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-develAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-devel-matchedAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-docAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-headersAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-modulesAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-modules-coreAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-modules-extraAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-rtAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-rt-64kAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-rt-64k-coreAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-rt-64k-debugAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-rt-64k-debug-coreAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-rt-64k-debug-develAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-rt-64k-debug-modulesAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-rt-64k-debug-modules-coreAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-rt-64k-debug-modules-extraAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-rt-64k-develAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-rt-64k-modulesAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-rt-64k-modules-coreAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-rt-64k-modules-extraAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-rt-coreAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-rt-debugAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-rt-debug-coreAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-rt-debug-develAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-rt-debug-modulesAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-rt-debug-modules-coreAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
kernel-rt-debug-modules-extraAlmaLinux:9 From an advisory covering 15 CVEs |
before 5.14.0-687.56.1.el9_8 | 5.14.0-687.56.1.el9_8 |
linux-ltsAlpaquita:23 |
6.1.175-r0 up to 6.1.177-r0 | 6.1.177-r0 |
linux-ltsAlpaquita:25 |
6.12.92-r0 up to 6.12.95-r0 | 6.12.95-r0 |
linux-ltsAlpaquita:stream |
6.18.35-r1 up to 6.18.38-r0 | 6.18.38-r0 |
kernelTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-64kTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-64k-coreTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-64k-debugTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-64k-debug-coreTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-64k-debug-develTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-64k-debug-devel-matchedTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-64k-debug-modulesTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-64k-debug-modules-coreTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-64k-debug-modules-extraTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-64k-debug-modules-internalTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-64k-debug-modules-partnerTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-64k-develTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-64k-devel-matchedTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-64k-modulesTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-64k-modules-coreTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-64k-modules-extraTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-64k-modules-internalTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-64k-modules-partnerTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-abi-stablelistsTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-coreTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-cross-headersTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-debugTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-debug-coreTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-debug-develTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-debug-devel-matchedTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-debug-modulesTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-debug-modules-coreTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-debug-modules-extraTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-debug-modules-internalTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-debug-modules-partnerTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-debug-uki-virtTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-debug-uki-virt-addonsTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-develTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-devel-matchedTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-docTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-headersTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-ipaclones-internalTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-modulesTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-modules-coreTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-modules-extraTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-modules-internalTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-modules-partnerTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-rtTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-rt-64kTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-rt-64k-coreTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-rt-64k-debugTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-rt-64k-debug-coreTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-rt-64k-debug-develTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-rt-64k-debug-devel-matchedTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-rt-64k-debug-kvmTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-rt-64k-debug-modulesTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
kernel-rt-64k-debug-modules-coreTuxCare:AlmaLinux:9.6 From an advisory covering 130 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17 | 5.14.0-570.62.1.el9_6.tuxcare.5.els17 |
KernelLinux |
before 5.10.260, 5.11.0 up to 5.15.211, 5.16.0 up to 6.1.177, 6.1.0 up to 6.6.144, 6.2.0 up to 6.12.95, 6.7.0 up to 6.18.38, 6.13.0 up to 7.1.3 | 5.10.2605.15.2116.1.1776.6.1446.12.956.18.387.1.3 |
linuxDebian:12 |
before 6.1.177-1, plus listed versions 6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1 Show 45 moreShow less6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.170-16.1.170-26.1.170-36.1.172-16.1.174-16.1.176-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+1 |
6.1.177-1 |
linuxDebian:13 |
before 6.12.95-1, plus listed versions 6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-1 Show 24 moreShow less6.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-1~bpo12+1 |
6.12.95-1 |
linuxDebian:14 |
before 7.1.3-1, plus listed versions 6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1 Show 45 moreShow less6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1 |
7.1.3-1 |
kernelMageia:10 From an advisory covering 246 CVEs |
before 6.18.39-1.mga10 | 6.18.39-1.mga10 |
kmod-virtualboxMageia:10 From an advisory covering 246 CVEs |
before 7.2.8-28.mga10 | 7.2.8-28.mga10 |
kmod-xtables-addonsMageia:10 From an advisory covering 246 CVEs |
before 3.30-3.mga10 | 3.30-3.mga10 |
bluezMageia:10 From an advisory covering 246 CVEs |
before 5.87-1.mga10 | 5.87-1.mga10 |
wireless-regdbMageia:10 From an advisory covering 246 CVEs |
before 20260530-1.mga10 | 20260530-1.mga10 |
kernel-firmwareMageia:10 From an advisory covering 246 CVEs |
before 20260622-1.mga10 | 20260622-1.mga10 |
drakx-installer-imagesMageia:10 From an advisory covering 246 CVEs |
before 2.94-54.mga10 | 2.94-54.mga10 |
kernel-firmware-nonfreeMageia:10 From an advisory covering 246 CVEs |
before 20260622-1.mga10.nonfree | 20260622-1.mga10.nonfree |
radeon-firmwareMageia:10 From an advisory covering 246 CVEs |
before 20260622-1.mga10.nonfree | 20260622-1.mga10.nonfree |
drakx-installer-imagesMageia:10 From an advisory covering 246 CVEs |
before 2.94-54.mga10.nonfree | 2.94-54.mga10.nonfree |
kmod-nvidia-current-wopengpuMageia:10 From an advisory covering 246 CVEs |
before 580.159.04-37.mga10.nonfree | 580.159.04-37.mga10.nonfree |
kernel-64k-debug-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-64k-debug-develRed Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-64k-debug-devel-matchedRed Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-64k-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-64k-develRed Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-64k-devel-matchedRed Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-debug-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-debug-develRed Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-debug-devel-matchedRed Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-debuginfo-common-aarch64Red Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-debuginfo-common-ppc64leRed Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-debuginfo-common-s390xRed Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-develRed Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-devel-matchedRed Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-docRed Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-rt-64k-debug-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-rt-64k-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-rt-debug-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-rt-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-tools-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-zfcpdump-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-zfcpdump-develRed Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-zfcpdump-devel-matchedRed Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
libperf-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
perfRed Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
perf-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
python3-perfRed Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
python3-perf-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
rtlaRed Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
rvRed Hat:enterprise_linux:9::appstream From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernelRed Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-64kRed Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-64k-coreRed Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-64k-debugRed Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-64k-debug-coreRed Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-64k-debug-debuginfoRed Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-64k-debug-modulesRed Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-64k-debug-modules-coreRed Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-64k-debug-modules-extraRed Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-64k-debuginfoRed Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-64k-modulesRed Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-64k-modules-coreRed Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-64k-modules-extraRed Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-abi-stablelistsRed Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-coreRed Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-debugRed Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-debug-coreRed Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-debug-debuginfoRed Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-debug-modulesRed Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernel-debug-modules-coreRed Hat:enterprise_linux:9::baseos From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernelRocky Linux:9 From an advisory covering 14 CVEs |
before 0:5.14.0-687.56.1.el9_8 | 0:5.14.0-687.56.1.el9_8 |
kernelRocky Linux:10 From an advisory covering 16 CVEs |
before 0:6.12.0-211.64.1.el10_2 | 0:6.12.0-211.64.1.el10_2 |
linuxRoot:Debian:11 |
before 5.10.262-1.aikido.113 | 5.10.262-1.aikido.1135.10.262-1.aikido.114 |
rootio-linuxRoot:Debian:11 |
before 5.10.262-1.aikido.113 | 5.10.262-1.aikido.1135.10.262-1.aikido.114 |
linuxRoot:Ubuntu:22.04 |
before 5.15.0-203.213.aikido.119 | 5.15.0-203.213.aikido.119 |
rootio-linuxRoot:Ubuntu:22.04 |
before 5.15.0-203.213.aikido.119 | 5.15.0-203.213.aikido.119 |
kernel-obs-buildSUSE:Linux Micro Extras 6.2 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-symsSUSE:Linux Micro Extras 6.2 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-64kbSUSE:Linux Micro 6.2 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-defaultSUSE:Linux Micro 6.2 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-default-baseSUSE:Linux Micro 6.2 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1.160000.2.19 | 6.12.0-160000.37.1.160000.2.19 |
kernel-rtSUSE:Linux Micro 6.2 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-sourceSUSE:Linux Micro 6.2 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-rtSUSE:Linux Micro 6.1 From an advisory covering 648 CVEs |
before 6.4.0-51.1 | 6.4.0-51.1 |
kernel-source-rtSUSE:Linux Micro 6.1 From an advisory covering 648 CVEs |
before 6.4.0-51.1 | 6.4.0-51.1 |
kernel-defaultSUSE:Linux Micro 6.1 From an advisory covering 647 CVEs |
before 6.4.0-51.1 | 6.4.0-51.1 |
kernel-kvmsmallSUSE:Linux Micro 6.1 From an advisory covering 647 CVEs |
before 6.4.0-51.1 | 6.4.0-51.1 |
kernel-sourceSUSE:Linux Micro 6.1 From an advisory covering 647 CVEs |
before 6.4.0-51.1 | 6.4.0-51.1 |
kernel-64kbSUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-azureSUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-defaultSUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-default-baseSUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1.160000.2.19 | 6.12.0-160000.37.1.160000.2.19 |
kernel-docsSUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-kvmsmallSUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-obs-qaSUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-sourceSUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-symsSUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-zfcpdumpSUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-64kbSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-azureSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-defaultSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-default-baseSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1.160000.2.19 | 6.12.0-160000.37.1.160000.2.19 |
kernel-docsSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-kvmsmallSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-obs-qaSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-sourceSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-symsSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-zfcpdumpSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-defaultSUSE:Linux Enterprise High Availability Extension 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-rtSUSE:Linux Micro 6.0 From an advisory covering 648 CVEs |
before 6.4.0-51.1 | 6.4.0-51.1 |
kernel-source-rtSUSE:Linux Micro 6.0 From an advisory covering 648 CVEs |
before 6.4.0-51.1 | 6.4.0-51.1 |
kernel-defaultSUSE:Linux Micro 6.0 From an advisory covering 647 CVEs |
before 6.4.0-51.1 | 6.4.0-51.1 |
kernel-kvmsmallSUSE:Linux Micro 6.0 From an advisory covering 647 CVEs |
before 6.4.0-51.1 | 6.4.0-51.1 |
kernel-sourceSUSE:Linux Micro 6.0 From an advisory covering 647 CVEs |
before 6.4.0-51.1 | 6.4.0-51.1 |
kernel-64kbSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 268 CVEs |
before 6.4.0-150700.53.78.1 | 6.4.0-150700.53.78.1 |
kernel-defaultSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 268 CVEs |
before 6.4.0-150700.53.78.1 | 6.4.0-150700.53.78.1 |
kernel-default-baseSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 268 CVEs |
before 6.4.0-150700.53.78.1.150700.17.43.2 | 6.4.0-150700.53.78.1.150700.17.43.2 |
kernel-sourceSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 268 CVEs |
before 6.4.0-150700.53.78.1 | 6.4.0-150700.53.78.1 |
kernel-zfcpdumpSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 268 CVEs |
before 6.4.0-150700.53.78.1 | 6.4.0-150700.53.78.1 |
kernel-docsSUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 268 CVEs |
before 6.4.0-150700.53.78.1 | 6.4.0-150700.53.78.1 |
kernel-obs-buildSUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 268 CVEs |
before 6.4.0-150700.53.78.1 | 6.4.0-150700.53.78.1 |
kernel-sourceSUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 268 CVEs |
before 6.4.0-150700.53.78.1 | 6.4.0-150700.53.78.1 |
kernel-symsSUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 268 CVEs |
before 6.4.0-150700.53.78.1 | 6.4.0-150700.53.78.1 |
kernel-defaultSUSE:Linux Enterprise Module for Legacy 15 SP7 From an advisory covering 268 CVEs |
before 6.4.0-150700.53.78.1 | 6.4.0-150700.53.78.1 |
kernel-defaultSUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 268 CVEs |
before 6.4.0-150700.53.78.1 | 6.4.0-150700.53.78.1 |
kernel-livepatch-SLE15-SP7_Update_20SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 268 CVEs |
before 1-150700.15.3.2 | 1-150700.15.3.2 |
kernel-azureSUSE:Linux Enterprise Module for Public Cloud 15 SP7 From an advisory covering 268 CVEs |
before 6.4.0-150700.53.78.1 | 6.4.0-150700.53.78.1 |
kernel-defaultSUSE:Linux Enterprise High Availability Extension 15 SP7 From an advisory covering 268 CVEs |
before 6.4.0-150700.53.78.1 | 6.4.0-150700.53.78.1 |
linux-hwe-edgeUbuntu:16.04:LTS |
All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1 |
None known |
linux-aws-5.0Ubuntu:18.04:LTS |
All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30 |
None known |
linux-aws-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37 |
None known |
linux-azureUbuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38 |
None known |
linux-azure-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36 |
None known |
linux-azure-edgeUbuntu:18.04:LTS |
All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2 |
None known |
linux-gcpUbuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35 |
None known |
linux-gcp-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1 |
None known |
linux-gke-4.15Ubuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84 |
None known |
linux-gke-5.4Ubuntu:18.04:LTS |
All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1 |
None known |
linux-gkeop-5.4Ubuntu:18.04:LTS |
All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1 |
None known |
linux-hweUbuntu:18.04:LTS |
All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72 |
None known |
linux-hwe-edgeUbuntu:18.04:LTS |
All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2 |
None known |
linux-oemUbuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114 |
None known |
linux-oracle-5.0Ubuntu:18.04:LTS |
All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19 |
None known |
linux-oracle-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1 |
None known |
linux-aws-5.11Ubuntu:20.04:LTS |
All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1 |
None known |
linux-aws-5.13Ubuntu:20.04:LTS |
All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1 |
None known |
linux-aws-5.15Ubuntu:Pro:20.04:LTS |
before 5.15.0-1116.123~20.04.1, plus listed versions 5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1 Show 45 moreShow less5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1 |
5.15.0-1116.123~20.04.1 |
linux-aws-5.8Ubuntu:20.04:LTS |
All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1 |
None known |
linux-azure-5.11Ubuntu:20.04:LTS |
All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2 |
None known |
linux-azure-5.13Ubuntu:20.04:LTS |
All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1 |
None known |
linux-azure-5.15Ubuntu:Pro:20.04:LTS |
before 5.15.0-1122.131~20.04.1, plus listed versions 5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1 Show 45 moreShow less5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1 |
5.15.0-1122.131~20.04.1 |
linux-azure-5.8Ubuntu:20.04:LTS |
All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1 |
None known |
linux-azure-fdeUbuntu:20.04:LTS |
All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1 |
None known |
linux-azure-fde-5.15Ubuntu:Pro:20.04:LTS |
before 5.15.0-1121.130~20.04.1, plus listed versions 5.15.0-1019.24~20.04.1.15.15.0-1020.25~20.04.1.15.15.0-1021.26~20.04.1.15.15.0-1029.36~20.04.1.15.15.0-1030.37~20.04.1.1 Show 45 moreShow less5.15.0-1031.38~20.04.1.15.15.0-1033.40~20.04.1.15.15.0-1034.41~20.04.1.25.15.0-1035.42~20.04.1.15.15.0-1036.43~20.04.1.15.15.0-1037.44~20.04.1.15.15.0-1038.45~20.04.1.15.15.0-1039.46~20.04.1.15.15.0-1040.47~20.04.1.15.15.0-1041.48~20.04.1.15.15.0-1042.49~20.04.1.15.15.0-1043.50~20.04.1.15.15.0-1046.53~20.04.1.15.15.0-1047.54~20.04.1.15.15.0-1049.56~20.04.1.15.15.0-1050.57~20.04.1.15.15.0-1051.59~20.04.1.15.15.0-1052.60~20.04.1.15.15.0-1053.61~20.04.1.15.15.0-1054.62~20.04.1.15.15.0-1056.64~20.04.1.15.15.0-1057.65~20.04.1.15.15.0-1058.66~20.04.2.15.15.0-1059.67~20.04.1.15.15.0-1060.69~20.04.1.15.15.0-1061.70~20.04.1.15.15.0-1063.72~20.04.1.15.15.0-1064.73~20.04.1.15.15.0-1065.74~20.04.1.15.15.0-1067.76~20.04.1.15.15.0-1068.77~20.04.1.15.15.0-1070.79~20.04.1.15.15.0-1071.80~20.04.1.15.15.0-1072.81~20.04.1.15.15.0-1073.82~20.04.1.15.15.0-1074.83~20.04.1.15.15.0-1076.85~20.04.1.15.15.0-1078.87~20.04.1.15.15.0-1081.90~20.04.1.15.15.0-1082.91~20.04.1.15.15.0-1086.95~20.04.1.15.15.0-1087.96~20.04.1.15.15.0-1088.97~20.04.1.15.15.0-1089.98~20.04.1.15.15.0-1091.100~20.04.1.1 |
5.15.0-1121.130~20.04.1 |
linux-gcp-5.11Ubuntu:20.04:LTS |
All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3 |
None known |
linux-gcp-5.13Ubuntu:20.04:LTS |
All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1 |
None known |
linux-gcp-5.15Ubuntu:Pro:20.04:LTS |
before 5.15.0-1118.128~20.04.1, plus listed versions 5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2 Show 45 moreShow less5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.15.15.0-1065.73~20.04.15.15.0-1066.74~20.04.15.15.0-1067.75~20.04.15.15.0-1068.76~20.04.15.15.0-1069.77~20.04.15.15.0-1070.78~20.04.15.15.0-1071.79~20.04.15.15.0-1072.80~20.04.15.15.0-1073.81~20.04.15.15.0-1074.83~20.04.1 |
5.15.0-1118.128~20.04.1 |
linux-gcp-5.8Ubuntu:20.04:LTS |
All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41 |
None known |
linux-gkeUbuntu:20.04:LTS |
All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111 |
None known |
linux-gke-5.15Ubuntu:20.04:LTS |
All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1 |
None known |
linux-gkeopUbuntu:20.04:LTS |
All versions, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77 |
None known |
linux-gkeop-5.15Ubuntu:20.04:LTS |
All versions, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 40 moreShow less5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1 |
None known |
linux-hwe-5.11Ubuntu:20.04:LTS |
All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1 |
None known |
linux-hwe-5.13Ubuntu:20.04:LTS |
All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1 |
None known |
linux-hwe-5.15Ubuntu:Pro:20.04:LTS |
before 5.15.0-194.204~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 45 moreShow less5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1 |
5.15.0-194.204~20.04.1 |
linux-hwe-5.8Ubuntu:20.04:LTS |
All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1 |
None known |
linux-ibm-5.15Ubuntu:Pro:20.04:LTS |
before 5.15.0-1110.114~20.04.1, plus listed versions 5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1 Show 45 moreShow less5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.15.15.0-1057.60~20.04.15.15.0-1058.61~20.04.15.15.0-1059.62~20.04.15.15.0-1060.63~20.04.15.15.0-1061.64~20.04.15.15.0-1062.65~20.04.15.15.0-1063.66~20.04.15.15.0-1064.67~20.04.15.15.0-1065.68~20.04.15.15.0-1066.69~20.04.15.15.0-1067.70~20.04.15.15.0-1068.71~20.04.15.15.0-1069.72~20.04.15.15.0-1074.77~20.04.15.15.0-1075.78~20.04.15.15.0-1076.79~20.04.15.15.0-1078.81~20.04.15.15.0-1079.82~20.04.15.15.0-1080.83~20.04.15.15.0-1081.84~20.04.15.15.0-1083.86~20.04.15.15.0-1085.88~20.04.15.15.0-1086.89~20.04.15.15.0-1087.90~20.04.15.15.0-1089.92~20.04.15.15.0-1090.93~20.04.15.15.0-1091.94~20.04.15.15.0-1092.95~20.04.15.15.0-1093.96~20.04.15.15.0-1094.97~20.04.1 |
5.15.0-1110.114~20.04.1 |
linux-intel-5.13Ubuntu:20.04:LTS |
All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19 |
None known |
linux-intel-iotg-5.15Ubuntu:Pro:20.04:LTS |
before 5.15.0-1111.117~20.04.1, plus listed versions 5.15.0-1003.5~20.04.15.15.0-1008.11~20.04.15.15.0-1010.14~20.04.15.15.0-1015.20~20.04.25.15.0-1016.21~20.04.1 Show 45 moreShow less5.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1021.26~20.04.15.15.0-1023.28~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1030.35~20.04.15.15.0-1031.36~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1040.46~20.04.15.15.0-1043.49~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1060.66~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.25.15.0-1074.80~20.04.15.15.0-1077.83~20.04.15.15.0-1078.84~20.04.15.15.0-1079.85~20.04.15.15.0-1083.89~20.04.15.15.0-1084.90~20.04.15.15.0-1085.91~20.04.15.15.0-1086.92~20.04.1 |
5.15.0-1111.117~20.04.1 |
linux-lowlatency-hwe-5.15Ubuntu:Pro:20.04:LTS |
before 5.15.0-194.204~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 45 moreShow less5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.88~20.04.15.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.95~20.04.15.15.0-87.96~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-110.120~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1 |
5.15.0-194.204~20.04.1 |
linux-nvidia-tegra-5.15Ubuntu:Pro:20.04:LTS |
before 5.15.0-1068.70~20.04.1, plus listed versions 5.15.0-1009.9~20.04.15.15.0-1010.10~20.04.15.15.0-1012.12~20.04.15.15.0-1014.14~20.04.15.15.0-1015.15~20.04.1 Show 35 moreShow less5.15.0-1016.16~20.04.15.15.0-1017.17~20.04.15.15.0-1018.18~20.04.15.15.0-1019.19~20.04.15.15.0-1020.20~20.04.15.15.0-1022.22~20.04.15.15.0-1025.25~20.04.15.15.0-1027.27~20.04.15.15.0-1030.30~20.04.15.15.0-1032.32~20.04.15.15.0-1039.39~20.04.15.15.0-1040.40~20.04.15.15.0-1041.41~20.04.15.15.0-1042.42~20.04.15.15.0-1043.43~20.04.15.15.0-1044.44~20.04.15.15.0-1045.45~20.04.15.15.0-1046.46~20.04.15.15.0-1047.47~20.04.15.15.0-1048.48~20.04.15.15.0-1049.49~20.04.15.15.0-1050.50~20.04.15.15.0-1051.51~20.04.15.15.0-1052.52~20.04.25.15.0-1053.53~20.04.15.15.0-1055.55~20.04.15.15.0-1057.57~20.04.15.15.0-1058.58~20.04.15.15.0-1060.60~20.04.15.15.0-1061.61~20.04.15.15.0-1063.63~20.04.15.15.0-1064.66~20.04.15.15.0-1065.67~20.04.15.15.0-1066.68~20.04.15.15.0-1067.69~20.04.1 |
5.15.0-1068.70~20.04.1 |
linux-oem-5.10Ubuntu:20.04:LTS |
All versions, plus listed versions 5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17 Show 21 moreShow less5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61 |
None known |
linux-oem-5.13Ubuntu:20.04:LTS |
All versions, plus listed versions 5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21 Show 7 moreShow less5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36 |
None known |
linux-oem-5.14Ubuntu:20.04:LTS |
All versions, plus listed versions 5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10 Show 30 moreShow less5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67 |
None known |
linux-oem-5.6Ubuntu:20.04:LTS |
All versions, plus listed versions 5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13 Show 24 moreShow less5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60 |
None known |
linux-oracle-5.11Ubuntu:20.04:LTS |
All versions, plus listed versions 5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1 |
None known |
linux-oracle-5.13Ubuntu:20.04:LTS |
All versions, plus listed versions 5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1 Show 7 moreShow less5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1 |
None known |
linux-oracle-5.15Ubuntu:Pro:20.04:LTS |
before 5.15.0-1114.120~20.04.1, plus listed versions 5.15.0-1007.9~20.04.15.15.0-1013.17~20.04.15.15.0-1016.20~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.1 Show 45 moreShow less5.15.0-1019.24~20.04.15.15.0-1021.27~20.04.15.15.0-1022.28~20.04.15.15.0-1025.31~20.04.25.15.0-1027.33~20.04.15.15.0-1029.35~20.04.15.15.0-1030.36~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1041.47~20.04.15.15.0-1042.48~20.04.15.15.0-1044.50~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1047.53~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1053.59~20.04.15.15.0-1054.60~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1074.80~20.04.1 |
5.15.0-1114.120~20.04.1 |
linux-oracle-5.8Ubuntu:20.04:LTS |
All versions, plus listed versions 5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1 |
None known |
linux-raspi2Ubuntu:20.04:LTS |
All versions, plus listed versions 5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6 |
None known |
kernel-sourceopenSUSE:Tumbleweed From an advisory covering 68 CVEs |
before 7.1.4-1.1 | 7.1.4-1.1 |
dtb-aarch64openSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-64kbopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-azureopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-defaultopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-default-baseopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1.160000.2.19 | 6.12.0-160000.37.1.160000.2.19 |
kernel-docsopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-kvmsmallopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-obs-buildopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-obs-qaopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-rtopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-sourceopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-symsopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-zfcpdumpopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | OSV | |
| affected | OSV | |
| facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-53398 is a critical vulnerability (CVSS 9.8) in Linux, published July 19, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.54%, the 45th percentile. Fixed in linux-lts 6.1.177-r0.
References
git.kernel.org/stable/c/8836405abdc53ca3dd5fc68b2cf6f8f012fad011
Show 194 moreShow less
nvd.nist.gov/vuln/detail/CVE-2026-53398
github.com/advisories/GHSA-hfvv-wwwp-6wgr
access.redhat.com/errata/RHSA-2026:77689
bugzilla.redhat.com/2436771
errata.almalinux.org/9/ALSA-2026-77689.html
docs.bell-sw.com/security/cves/CVE-2026-53398
errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1792762308.html
security-tracker.debian.org/tracker/CVE-2026-53398
advisories.mageia.org/MGASA-2026-0312.html
bugs.mageia.org/show_bug.cgi?id=35976
cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.18.36
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_77689.json
cve.org/CVERecord?id=CVE-2026-23103
lore.kernel.org/linux-cve-announce/2026020429-CVE-2026-23103-63b3@gregkh/T
errata.rockylinux.org/RLSA-2026:77689
suse.com/support/update/announcement/2026/suse-su-202623066-1
bugzilla.suse.com/1185845
ubuntu.com/security/CVE-2026-53398
This page doesn't list everything
Left out here: 556 package rows, 365 versions, 4,536 references and the rest of 28 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 1 source record.