CVE-2026-63829
net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink
8.8 HighFix available
In the Linux kernel, the following vulnerability has been resolved:
net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink
A tunnel changelink() operates on at most two netns, dev_net(dev) and the tunnel link netns t->net. They differ once the device is created in or moved to a netns other than the one the request runs in. The rtnl changelink path checks CAP_NET_ADMIN only against dev_net(dev), so a caller privileged there but not in t->net can rewrite a tunnel that lives in t->net.
Add rtnl_dev_link_net_capable() next to rtnl_get_net_ns_capable() in net/core/rtnetlink.c. It requires CAP_NET_ADMIN in the link netns and is skipped when the link netns is dev_net(dev), where the rtnl path already checked it. The other patches in this series use the same helper.
Gate ipgre_changelink() and erspan_changelink() with it, at the top of the op before any attribute is parsed, because the parsers update live tunnel fields first. ipgre_netlink_parms() sets t->collect_md before ip_tunnel_changelink() runs.
Commit 8b484efd5cb4 ("ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate().") added the same check on the ioctl path. This adds it on RTM_NEWLINK.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
0.15%Unchanged since Jul 20, 2026
What each source reports
CVE List Score used
net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink
In the Linux kernel, the following vulnerability has been resolved:
net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink
A tunnel changelink() operates on at most two netns, dev_net(dev) and the tunnel link netns t->net. They differ once the device is created in or moved to a netns other than the one the request runs in. The rtnl changelink path checks CAP_NET_ADMIN only against dev_net(dev), so a caller privileged there but not in t->net can rewrite a tunnel that lives in t->net.
Add rtnl_dev_link_net_capable() next to rtnl_get_net_ns_capable() in net/core/rtnetlink.c. It requires CAP_NET_ADMIN in the link netns and is skipped when the link netns is dev_net(dev), where the rtnl path already checked it. The other patches in this series use the same helper.
Gate ipgre_changelink() and erspan_changelink() with it, at the top of the op before any attribute is parsed, because the parsers update live tunnel fields first. ipgre_netlink_parms() sets t->collect_md before ip_tunnel_changelink() runs.
Commit 8b484efd5cb4 ("ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate().") added the same check on the ioctl path. This adds it on RTM_NEWLINK.
- Record
CVE-2026-63829- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-862
- Updated
- 2026-11-02
EUVDEUVD-2026-45495
In the Linux kernel, the following vulnerability has been resolved:
net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink
A tunnel changelink() operates on at most two netns, dev_net(dev) and the tunnel link netns t->net. They differ once the device is created in or moved to a netns other than the one the request runs in. The rtnl changelink path checks CAP_NET_ADMIN only against dev_net(dev), so a caller privileged there but not in t->net can rewrite a tunnel that lives in t->net.
Add rtnl_dev_link_net_capable() next to rtnl_get_net_ns_capable() in net/core/rtnetlink.c. It requires CAP_NET_ADMIN in the link netns and is skipped when the link netns is dev_net(dev), where the rtnl path already checked it. The other patches in this series use the same helper.
Gate ipgre_changelink() and erspan_changelink() with it, at the top of the op before any attribute is parsed, because the parsers update live tunnel fields first. ipgre_netlink_parms() sets t->collect_md before ip_tunnel_changelink() runs.
Commit 8b484efd5cb4 ("ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate().") added the same check on the ioctl path. This adds it on RTM_NEWLINK.
- Record
EUVD-2026-45495- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-6wc5-2mjj-pmr6
In the Linux kernel, the following vulnerability has been resolved: net: ip_gre: require...
In the Linux kernel, the following vulnerability has been resolved:
net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink
A tunnel changelink() operates on at most two netns, dev_net(dev) and the tunnel link netns t->net. They differ once the device is created in or moved to a netns other than the one the request runs in. The rtnl changelink path checks CAP_NET_ADMIN only against dev_net(dev), so a caller privileged there but not in t->net can rewrite a tunnel that lives in t->net.
Add rtnl_dev_link_net_capable() next to rtnl_get_net_ns_capable() in net/core/rtnetlink.c. It requires CAP_NET_ADMIN in the link netns and is skipped when the link netns is dev_net(dev), where the rtnl path already checked it. The other patches in this series use the same helper.
Gate ipgre_changelink() and erspan_changelink() with it, at the top of the op before any attribute is parsed, because the parsers update live tunnel fields first. ipgre_netlink_parms() sets t->collect_md before ip_tunnel_changelink() runs.
Commit 8b484efd5cb4 ("ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate().") added the same check on the ioctl path. This adds it on RTM_NEWLINK.
- Record
GHSA-6wc5-2mjj-pmr6- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-862
- Updated
- 2026-11-02
NVD
In the Linux kernel, the following vulnerability has been resolved:
net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink
A tunnel changelink() operates on at most two netns, dev_net(dev) and the tunnel link netns t->net. They differ once the device is created in or moved to a netns other than the one the request runs in. The rtnl changelink path checks CAP_NET_ADMIN only against dev_net(dev), so a caller privileged there but not in t->net can rewrite a tunnel that lives in t->net.
Add rtnl_dev_link_net_capable() next to rtnl_get_net_ns_capable() in net/core/rtnetlink.c. It requires CAP_NET_ADMIN in the link netns and is skipped when the link netns is dev_net(dev), where the rtnl path already checked it. The other patches in this series use the same helper.
Gate ipgre_changelink() and erspan_changelink() with it, at the top of the op before any attribute is parsed, because the parsers update live tunnel fields first. ipgre_netlink_parms() sets t->collect_md before ip_tunnel_changelink() runs.
Commit 8b484efd5cb4 ("ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate().") added the same check on the ioctl path. This adds it on RTM_NEWLINK.
- Record
CVE-2026-63829- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-862
- Updated
- 2026-11-02
OSVBELL-CVE-2026-63829
- Record
BELL-CVE-2026-63829- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSV
net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink
In the Linux kernel, the following vulnerability has been resolved:
net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink
A tunnel changelink() operates on at most two netns, dev_net(dev) and the tunnel link netns t->net. They differ once the device is created in or moved to a netns other than the one the request runs in. The rtnl changelink path checks CAP_NET_ADMIN only against dev_net(dev), so a caller privileged there but not in t->net can rewrite a tunnel that lives in t->net.
Add rtnl_dev_link_net_capable() next to rtnl_get_net_ns_capable() in net/core/rtnetlink.c. It requires CAP_NET_ADMIN in the link netns and is skipped when the link netns is dev_net(dev), where the rtnl path already checked it. The other patches in this series use the same helper.
Gate ipgre_changelink() and erspan_changelink() with it, at the top of the op before any attribute is parsed, because the parsers update live tunnel fields first. ipgre_netlink_parms() sets t->collect_md before ip_tunnel_changelink() runs.
Commit 8b484efd5cb4 ("ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate().") added the same check on the ioctl path. This adds it on RTM_NEWLINK.
- Record
CVE-2026-63829- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
Show 48 moreShow less
OSVDEBIAN-CVE-2026-63829
In the Linux kernel, the following vulnerability has been resolved: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink A tunnel changelink() operates on at most two netns, dev_net(dev) and the tunnel link netns t->net. They differ once the device is created in or moved to a netns other than the one the request runs in. The rtnl changelink path checks CAP_NET_ADMIN only against dev_net(dev), so a caller privileged there but not in t->net can rewrite a tunnel that lives in t->net. Add rtnl_dev_link_net_capable() next to rtnl_get_net_ns_capable() in net/core/rtnetlink.c. It requires CAP_NET_ADMIN in the link netns and is skipped when the link netns is dev_net(dev), where the rtnl path already checked it. The other patches in this series use the same helper. Gate ipgre_changelink() and erspan_changelink() with it, at the top of the op before any attribute is parsed, because the parsers update live tunnel fields first. ipgre_netlink_parms() sets t->collect_md before ip_tunnel_changelink() runs. Commit 8b484efd5cb4 ("ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate().") added the same check on the ioctl path. This adds it on RTM_NEWLINK.
- Record
DEBIAN-CVE-2026-63829- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2026-3532
kernel security update
The Linux Kernel, the operating system core itself.
Security Fix(es):
In the Linux kernel, the following vulnerability has been resolved:
uaccess: fix integer overflow on access_ok()
Three architectures check the end of a user access against the address limit without taking a possible overflow into account. Passing a negative length or another overflow in here returns success when it should not.
Use the most common correct implementation here, which optimizes for a constant 'size' argument, and turns the common case into a single comparison.(CVE-2022-49289)
In the Linux kernel, the following vulnerability has been resolved:
parisc: Fix double SIGFPE crash
Camm noticed that on parisc a SIGFPE exception will crash an application with a second SIGFPE in the signal handler. Dave analyzed it, and it happens because glibc uses a double-word floating-point store to atomically update function descriptors. As a result of lazy binding, we hit a floating-point store in fpe_func almost immediately.
When the T bit is set, an assist exception trap occurs when when the co-processor encounters any floating-point instruction except for a double store of register %fr0. The latter cancels all pending traps. Let's fix this by clearing the Trap (T) bit in the FP status register before returning to the signal handler in userspace.
The issue can be reproduced with this test program:
root@parisc:~# cat fpe.c
static void fpe_func(int sig, siginfo_t *i, void *v) { sigset_t set; sigemptyset(&set); sigaddset(&set, SIGFPE); sigprocmask(SIG_UNBLOCK, &set, NULL); printf("GOT signal %d with si_code %ld\n", sig, i->si_code); }
int main() { struct sigaction action = { .sa_sigaction = fpe_func, .sa_flags = SA_RESTART|SA_SIGINFO }; sigaction(SIGFPE, &action, 0); feenableexcept(FE_OVERFLOW); return printf("%lf\n",1.7976931348623158E308*1.7976931348623158E308); }
root@parisc:# gcc fpe.c -lm
root@parisc:# ./a.out
Floating point exception
root@parisc:~# strace -f ./a.out execve("./a.out", ["./a.out"], 0xf9ac7034 /* 20 vars /) = 0 getrlimit(RLIMIT_STACK, {rlim_cur=81921024, rlim_max=RLIM_INFINITY}) = 0 ... rt_sigaction(SIGFPE, {sa_handler=0x1110a, sa_mask=[], sa_flags=SA_RESTART|SA_SIGINFO}, NULL, 8) = 0 --- SIGFPE {si_signo=SIGFPE, si_code=FPE_FLTOVF, si_addr=0x1078f} --- --- SIGFPE {si_signo=SIGFPE, si_code=FPE_FLTOVF, si_addr=0xf8f21237} --- +++ killed by SIGFPE +++ Floating point exception(CVE-2025-37991)
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked()
kcalloc() may fail. When WS is non-zero and allocation fails, ectx.ws remains NULL while ectx.ws_size is set, leading to a potential NULL pointer dereference in atom_get_src_int() when accessing WS entries.
Return -ENOMEM on allocation failure to avoid the NULL dereference.(CVE-2025-68190)
In the Linux kernel, the following vulnerability has been resolved:
arm64/fpsimd: signal: Fix restoration of SVE context
When SME is supported, Restoring SVE signal context can go wrong in a few ways, including placing the task into an invalid state where the kernel may read from out-of-bounds memory (and may potentially take a fatal fault) and/or may kill the task with a SIGKILL.
(1) Restoring a context with SVE_SIG_FLAG_SM set can place the task into an invalid state where SVCR.SM is set (and sve_state is non-NULL) but TIF_SME is clear, consequently resuting in out-of-bounds memory reads and/or killing the task with SIGKILL.
This can only occur in unusual (but legitimate) cases where the SVE
signal context has either been modified by userspace or was saved in
the context of another task (e.g. as with CRIU), as otherwise the
presence of an SVE signal context with SVE_SIG_FLAG_SM…
- Record
OESA-2026-3532- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:75746
Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update
- Record
RHSA-2026:75746- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:75747
Red Hat Security Advisory: kernel security, bug fix, and enhancement update
- Record
RHSA-2026:75747- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:76739
Red Hat Security Advisory: kernel security, bug fix, and enhancement update
- Record
RHSA-2026:76739- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRLSA-2026:75746
Important: kernel-rt security, bug fix, and enhancement update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
-
kernel: Linux kernel: Use-after-free in xc5000 tuner driver due to race condition (CVE-2025-39994)
-
kernel: gfs2: Fix unlikely race in gdlm_put_lock (CVE-2025-40242)
-
kernel: Linux kernel: Denial of Service in RDMA/bnxt_re driver due to race condition during QP destruction (CVE-2023-54048)
-
kernel: nvme-pci: fix mempool alloc size (CVE-2022-50756)
-
kernel: Linux kernel: Denial of Service in QFQ scheduler via child qlen manipulation (CVE-2026-23105)
-
kernel: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CVE-2026-45856)
-
kernel: gfs2: Fix slab-use-after-free in qd_put (CVE-2026-45861)
-
kernel: net/sched: act_ct: Only release RCU read lock after ct_ft (CVE-2026-46319)
-
kernel: gfs2: add some missing log locking (CVE-2026-53049)
-
kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000 (CVE-2026-52972)
-
kernel: net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CVE-2026-53230)
-
kernel: ipvs: clear the svc scheduler ptr early on edit (CVE-2026-53270)
-
kernel: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-63829)
-
kernel: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CVE-2026-63794)
-
kernel: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (CVE-2026-63992)
-
kernel: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (CVE-2026-63994)
-
kernel: vxlan: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-68432)
-
kernel: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-72052)
-
kernel: netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CVE-2026-72255)
-
kernel: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CVE-2026-74516)
-
kernel: netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CVE-2026-74569)
-
kernel: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CVE-2026-74669)
-
kernel: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (CVE-2026-74744)
-
kernel: netfilter: flowtable: publish GC-visible tuple last (CVE-2026-74746)
-
kernel: KVM: s390: vsie: zero stale crypto bits (CVE-2026-80921)
-
kernel: nvme-tcp: fix host memory disclosure on R2T for a read command (CVE-2026-89481)
-
kernel: nvme: add missing SRCU grace period in error path (CVE-2026-89972)
-
kernel: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CVE-2026-90227)
-
kernel: netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CVE-2026-97417)
Bug Fix(es) and Enhancement(s):
-
Rocky Linux8.10 - s390/vfio_ccw: Error path cleanups (JIRA:Rocky Linux-252194)
-
Rocky Linux8.10 - s390/topology: Use zero-based numbering (JIRA:Rocky Linux-252199)
-
[nfs rhel8.10] Disable async copy on nfsd side (JIRA:Rocky Linux-266661)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:75746- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRLSA-2026:75747
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
-
kernel: Linux kernel: Use-after-free in xc5000 tuner driver due to race condition (CVE-2025-39994)
-
kernel: gfs2: Fix unlikely race in gdlm_put_lock (CVE-2025-40242)
-
kernel: Linux kernel: Denial of Service in RDMA/bnxt_re driver due to race condition during QP destruction (CVE-2023-54048)
-
kernel: nvme-pci: fix mempool alloc size (CVE-2022-50756)
-
kernel: Linux kernel: Denial of Service in QFQ scheduler via child qlen manipulation (CVE-2026-23105)
-
kernel: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CVE-2026-45856)
-
kernel: gfs2: Fix slab-use-after-free in qd_put (CVE-2026-45861)
-
kernel: net/sched: act_ct: Only release RCU read lock after ct_ft (CVE-2026-46319)
-
kernel: gfs2: add some missing log locking (CVE-2026-53049)
-
kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000 (CVE-2026-52972)
-
kernel: net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CVE-2026-53230)
-
kernel: ipvs: clear the svc scheduler ptr early on edit (CVE-2026-53270)
-
kernel: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-63829)
-
kernel: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CVE-2026-63794)
-
kernel: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (CVE-2026-63992)
-
kernel: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (CVE-2026-63994)
-
kernel: vxlan: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-68432)
-
kernel: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-72052)
-
kernel: netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CVE-2026-72255)
-
kernel: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CVE-2026-74516)
-
kernel: netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CVE-2026-74569)
-
kernel: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CVE-2026-74669)
-
kernel: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (CVE-2026-74744)
-
kernel: netfilter: flowtable: publish GC-visible tuple last (CVE-2026-74746)
-
kernel: KVM: s390: vsie: zero stale crypto bits (CVE-2026-80921)
-
kernel: nvme-tcp: fix host memory disclosure on R2T for a read command (CVE-2026-89481)
-
kernel: nvme: add missing SRCU grace period in error path (CVE-2026-89972)
-
kernel: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CVE-2026-90227)
-
kernel: netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CVE-2026-97417)
Bug Fix(es) and Enhancement(s):
-
Rocky Linux8.10 - s390/vfio_ccw: Error path cleanups (JIRA:Rocky Linux-252194)
-
Rocky Linux8.10 - s390/topology: Use zero-based numbering (JIRA:Rocky Linux-252199)
-
[nfs rhel8.10] Disable async copy on nfsd side (JIRA:Rocky Linux-266661)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:75747- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-63829
In the Linux kernel, the following vulnerability has been resolved: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink A tunnel changelink() operates on at most two netns, dev_net(dev) and the tunnel link netns t->net. They differ once the device is created in or moved to a netns other than the one the request runs in. The rtnl changelink path checks CAP_NET_ADMIN only against dev_net(dev), so a caller privileged there but not in t->net can rewrite a tunnel that lives in t->net. Add rtnl_dev_link_net_capable() next to rtnl_get_net_ns_capable() in net/core/rtnetlink.c. It requires CAP_NET_ADMIN in the link netns and is skipped when the link netns is dev_net(dev), where the rtnl path already checked it. The other patches in this series use the same helper. Gate ipgre_changelink() and erspan_changelink() with it, at the top of the op before any attribute is parsed, because the parsers update live tunnel fields first. ipgre_netlink_parms() sets t->collect_md before ip_tunnel_changelink() runs. Commit 8b484efd5cb4 ("ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate().") added the same check on the ioctl path. This adds it on RTM_NEWLINK.
- Record
UBUNTU-CVE-2026-63829- CVSS 4.0
- 2.0 Low
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N - CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-06
OSVALSA-2026:75746 No score
Important: kernel-rt security, bug fix, and enhancement update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
- kernel: Linux kernel: Use-after-free in xc5000 tuner driver due to race condition (CVE-2025-39994)
- kernel: gfs2: Fix unlikely race in gdlm_put_lock (CVE-2025-40242)
- kernel: Linux kernel: Denial of Service in RDMA/bnxt_re driver due to race condition during QP destruction (CVE-2023-54048)
- kernel: nvme-pci: fix mempool alloc size (CVE-2022-50756)
- kernel: Linux kernel: Denial of Service in QFQ scheduler via child qlen manipulation (CVE-2026-23105)
- kernel: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CVE-2026-45856)
- kernel: gfs2: Fix slab-use-after-free in qd_put (CVE-2026-45861)
- kernel: net/sched: act_ct: Only release RCU read lock after ct_ft (CVE-2026-46319)
- kernel: gfs2: add some missing log locking (CVE-2026-53049)
- kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000 (CVE-2026-52972)
- kernel: net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CVE-2026-53230)
- kernel: ipvs: clear the svc scheduler ptr early on edit (CVE-2026-53270)
- kernel: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-63829)
- kernel: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CVE-2026-63794)
- kernel: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (CVE-2026-63992)
- kernel: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (CVE-2026-63994)
- kernel: vxlan: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-68432)
- kernel: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-72052)
- kernel: netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CVE-2026-72255)
- kernel: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CVE-2026-74516)
- kernel: netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CVE-2026-74569)
- kernel: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CVE-2026-74669)
- kernel: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (CVE-2026-74744)
- kernel: netfilter: flowtable: publish GC-visible tuple last (CVE-2026-74746)
- kernel: KVM: s390: vsie: zero stale crypto bits (CVE-2026-80921)
- kernel: nvme-tcp: fix host memory disclosure on R2T for a read command (CVE-2026-89481)
- kernel: nvme: add missing SRCU grace period in error path (CVE-2026-89972)
- kernel: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CVE-2026-90227)
- kernel: netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CVE-2026-97417)
Bug Fix(es) and Enhancement(s):
- AlmaLinux8.10 - s390/vfio_ccw: Error path cleanups (JIRA:AlmaLinux-252194)
- AlmaLinux8.10 - s390/topology: Use zero-based numbering (JIRA:AlmaLinux-252199)
- [nfs rhel8.10] Disable async copy on nfsd side (JIRA:AlmaLinux-266661)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:75746- Updated
- 2026-11-02
OSVALSA-2026:75747 No score
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
- kernel: Linux kernel: Use-after-free in xc5000 tuner driver due to race condition (CVE-2025-39994)
- kernel: gfs2: Fix unlikely race in gdlm_put_lock (CVE-2025-40242)
- kernel: Linux kernel: Denial of Service in RDMA/bnxt_re driver due to race condition during QP destruction (CVE-2023-54048)
- kernel: nvme-pci: fix mempool alloc size (CVE-2022-50756)
- kernel: Linux kernel: Denial of Service in QFQ scheduler via child qlen manipulation (CVE-2026-23105)
- kernel: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CVE-2026-45856)
- kernel: gfs2: Fix slab-use-after-free in qd_put (CVE-2026-45861)
- kernel: net/sched: act_ct: Only release RCU read lock after ct_ft (CVE-2026-46319)
- kernel: gfs2: add some missing log locking (CVE-2026-53049)
- kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000 (CVE-2026-52972)
- kernel: net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CVE-2026-53230)
- kernel: ipvs: clear the svc scheduler ptr early on edit (CVE-2026-53270)
- kernel: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-63829)
- kernel: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CVE-2026-63794)
- kernel: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (CVE-2026-63992)
- kernel: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (CVE-2026-63994)
- kernel: vxlan: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-68432)
- kernel: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-72052)
- kernel: netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CVE-2026-72255)
- kernel: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CVE-2026-74516)
- kernel: netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CVE-2026-74569)
- kernel: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CVE-2026-74669)
- kernel: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (CVE-2026-74744)
- kernel: netfilter: flowtable: publish GC-visible tuple last (CVE-2026-74746)
- kernel: KVM: s390: vsie: zero stale crypto bits (CVE-2026-80921)
- kernel: nvme-tcp: fix host memory disclosure on R2T for a read command (CVE-2026-89481)
- kernel: nvme: add missing SRCU grace period in error path (CVE-2026-89972)
- kernel: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CVE-2026-90227)
- kernel: netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CVE-2026-97417)
Bug Fix(es) and Enhancement(s):
- AlmaLinux8.10 - s390/vfio_ccw: Error path cleanups (JIRA:AlmaLinux-252194)
- AlmaLinux8.10 - s390/topology: Use zero-based numbering (JIRA:AlmaLinux-252199)
- [nfs rhel8.10] Disable async copy on nfsd side (JIRA:AlmaLinux-266661)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:75747- Updated
- 2026-11-02
OSVALSA-2026:76738 No score
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
- kernel: netfilter: nf_conncount: increase the connection clean up limit to 64 (CVE-2026-45860)
- kernel: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CVE-2026-45856)
- kernel: Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CVE-2026-46275)
- kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000 (CVE-2026-52972)
- kernel: ipvs: clear the svc scheduler ptr early on edit (CVE-2026-53270)
- kernel: Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CVE-2026-53357)
- kernel: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-63829)
- kernel: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CVE-2026-63794)
- kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (CVE-2026-63924)
- kernel: ipv6: exthdrs: refresh nh after handling HAO option (CVE-2026-63922)
- kernel: ipv6: validate extension header length before copying to cmsg (CVE-2026-63920)
- kernel: tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (CVE-2026-64024)
- kernel: l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (CVE-2026-63918)
- kernel: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (CVE-2026-63984)
- kernel: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (CVE-2026-63992)
- kernel: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (CVE-2026-63994)
- kernel: netfilter: x_tables: add and use xtables_unregister_table_exit (CVE-2026-64078)
- kernel: ipv6: ioam: refresh hdr pointer before ioam6_event() (CVE-2026-64132)
- kernel: Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CVE-2026-64557)
- kernel: vxlan: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-68432)
- kernel: ipvs: reload ip header after head reallocation (CVE-2026-68476)
- kernel: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-72052)
- kernel: netfilter: nft_lookup: fix catchall element handling with inverted lookups (CVE-2026-72320)
- kernel: netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CVE-2026-72255)
- kernel: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CVE-2026-74516)
- kernel: packet: use consistent hard_header_len in non-ring send paths ()
- kernel: packet: use consistent hard_header_len in non-ring send paths (CVE-2026-74582)
- kernel: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CVE-2026-74669)
- kernel: netfilter: flowtable: publish GC-visible tuple last (CVE-2026-74746)
- kernel: ipv6: fix use-after-free in ip6_finish_output2() (CVE-2026-80792)
- kernel: futex: Fix race on the initial mm->futex.phash.ref allocation (CVE-2026-80775)
- kernel: KVM: s390: vsie: zero stale crypto bits (CVE-2026-80921)
- kernel: nvme: add missing SRCU grace period in error path (CVE-2026-89972)
- kernel: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CVE-2026-90227)
- kernel: netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CVE-2026-97417)
- kernel: netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CVE-2026-93288)
Bug Fix(es) and Enhancement(s):
- wifi card breaks using FIPS (JIRA:AlmaLinux-257457)
- AlmaLinux10.0 - kernel: CPU hotplug unsupported by CPUMF [almalinux-10.2.z] (JIRA:AlmaLinux-270888)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:76738- Updated
- 2026-11-02
OSVAZL-92588 No score
CVE-2026-63829 affecting package kernel for versions less than 6.6.145.2-1
In the Linux kernel, the following vulnerability has been resolved:
net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink
A tunnel changelink() operates on at most two netns, dev_net(dev) and the tunnel link netns t->net. They differ once the device is created in or moved to a netns other than the one the request runs in. The rtnl changelink path checks CAP_NET_ADMIN only against dev_net(dev), so a caller privileged there but not in t->net can rewrite a tunnel that lives in t->net.
Add rtnl_dev_link_net_capable() next to rtnl_get_net_ns_capable() in net/core/rtnetlink.c. It requires CAP_NET_ADMIN in the link netns and is skipped when the link netns is dev_net(dev), where the rtnl path already checked it. The other patches in this series use the same helper.
Gate ipgre_changelink() and erspan_changelink() with it, at the top of the op before any attribute is parsed, because the parsers update live tunnel fields first. ipgre_netlink_parms() sets t->collect_md before ip_tunnel_changelink() runs.
Commit 8b484efd5cb4 ("ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate().") added the same check on the ioctl path. This adds it on RTM_NEWLINK.
- Record
AZL-92588- Updated
- 2026-11-02
OSVCLSA-2026-1789037015 No score
kernel: Fix of 51 CVEs
- net: openvswitch: fix skb leak on flow key update failure during ct {CVE-2026-74464}
- can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error {CVE-2026-74456}
- wifi: mwifiex: fix permanently busy scans after multiple roam iterations {CVE-2026-68469}
- drm/amdgpu/gfx8: drop unecessary BUG_ON() {CVE-2026-68430}
- sctp: auth: verify auth requirement when auth_chunk is NULL {CVE-2026-68300}
- cdrom: fix stack out-of-bounds read in CDROMVOLCTRL {CVE-2026-68184}
- wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read {CVE-2026-68351}
- wifi: carl9170: fix buffer overflow in rx_stream failover path {CVE-2026-68349}
- wifi: carl9170: fix OOB read from off-by-two in TX status handler {CVE-2026-68350}
- net: sit: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72061}
- net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72055}
- net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72054}
- net: ipip: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72053}
- net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72051}
- net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-63829}
- usb: free iso schedules on failed submit {CVE-2026-64348}
- smb: client: restrict implied bcc[0] exemption to responses without data area {CVE-2026-64448}
- net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422}
- netfilter: ebtables: terminate table name before find_table_lock() {CVE-2026-64411}
- netfilter: ebtables: zero chainstack array {CVE-2026-64413}
- USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}
- USB: iowarrior: fix use-after-free on disconnect race {CVE-2026-64341}
- udf: validate VAT header length against the VAT inode size {CVE-2026-64323}
- udf: validate sparing table length as an entry count, not a byte count {CVE-2026-64322}
- can: bcm: track a single source interface for ANYDEV timeout/throttle ops {CVE-2026-72115}
- can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler() {CVE-2026-72117}
- can: bcm: fix stale rx/tx ops after device removal {CVE-2026-72116}
- can: bcm: add missing device refcount for CAN filter removal {CVE-2026-72113}
- scsi: libiscsi: Move ehwait initialization to iscsi_session_setup() {CVE-2021-47328}
- sctp: validate cookie AUTH state before use {CVE-2026-74752}
- drm/amdgpu: reject oversized IBs with per-ring packet limits {CVE-2026-80576}
- libceph: Avoid using invalid osd indices from primary_temp {CVE-2026-80558}
- can: bcm: restore op->flags assignment lost in the bcm_tx_lock backport {CVE-2025-38004}
- can: bcm: fix CAN frame rx/tx statistics {CVE-2026-72118}
- can: bcm: add locking when updating filter and timer values {CVE-2026-72121}
- can: bcm: fix out-of-bounds frame read introduced by the bcm_tx_lock backport {CVE-2025-38004}
- mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() {CVE-2026-72308}
- can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure {CVE-2026-72122}
- can: bcm: fix warning in bcm_connect/proc_register {CVE-2026-72113}
- ipv4: fix use-after-free in fib_nhc_update_mtu() {CVE-2026-74656}
- perf/core: Fix group leader use-after-free after sibling detach {CVE-2026-74637}
- sctp: fix use-after-free of cached ASCONF chunk {CVE-2026-74587}
- sctp: clear control chunk transport if it is being removed {CVE-2026-74688}
- ALSA: usb-audio: fix OOB write on Type II inbound URBs {CVE-2026-74682}
- ALSA: usx2y: bound the hwdep mmap fault offset {CVE-2026-74641}
- enic: fix tx_hang_reset use-after-free on device removal {CVE-2026-74725}
- udp: fix potential use-after-free in tunnel segmentation {CVE-2026-74705}
- ip6_tunnel: clear skb2->cb[] in ip6ip6_err() {CVE-2026-74597}
- ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}
- vhost: reset the vring metadata cache on vring reconfiguration {CVE-2026-74580} -…
- Record
CLSA-2026-1789037015- Updated
- 2026-11-02
OSVCLSA-2026-1789039259 No score
kernel: Fix of 51 CVEs
- net: openvswitch: fix skb leak on flow key update failure during ct {CVE-2026-74464}
- can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error {CVE-2026-74456}
- wifi: mwifiex: fix permanently busy scans after multiple roam iterations {CVE-2026-68469}
- drm/amdgpu/gfx8: drop unecessary BUG_ON() {CVE-2026-68430}
- sctp: auth: verify auth requirement when auth_chunk is NULL {CVE-2026-68300}
- cdrom: fix stack out-of-bounds read in CDROMVOLCTRL {CVE-2026-68184}
- wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read {CVE-2026-68351}
- wifi: carl9170: fix buffer overflow in rx_stream failover path {CVE-2026-68349}
- wifi: carl9170: fix OOB read from off-by-two in TX status handler {CVE-2026-68350}
- net: sit: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72061}
- net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72055}
- net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72054}
- net: ipip: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72053}
- net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72051}
- net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-63829}
- usb: free iso schedules on failed submit {CVE-2026-64348}
- smb: client: restrict implied bcc[0] exemption to responses without data area {CVE-2026-64448}
- net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422}
- netfilter: ebtables: terminate table name before find_table_lock() {CVE-2026-64411}
- netfilter: ebtables: zero chainstack array {CVE-2026-64413}
- USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}
- USB: iowarrior: fix use-after-free on disconnect race {CVE-2026-64341}
- udf: validate VAT header length against the VAT inode size {CVE-2026-64323}
- udf: validate sparing table length as an entry count, not a byte count {CVE-2026-64322}
- can: bcm: track a single source interface for ANYDEV timeout/throttle ops {CVE-2026-72115}
- can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler() {CVE-2026-72117}
- can: bcm: fix stale rx/tx ops after device removal {CVE-2026-72116}
- can: bcm: add missing device refcount for CAN filter removal {CVE-2026-72113}
- scsi: libiscsi: Move ehwait initialization to iscsi_session_setup() {CVE-2021-47328}
- sctp: validate cookie AUTH state before use {CVE-2026-74752}
- drm/amdgpu: reject oversized IBs with per-ring packet limits {CVE-2026-80576}
- libceph: Avoid using invalid osd indices from primary_temp {CVE-2026-80558}
- can: bcm: restore op->flags assignment lost in the bcm_tx_lock backport {CVE-2025-38004}
- can: bcm: fix CAN frame rx/tx statistics {CVE-2026-72118}
- can: bcm: add locking when updating filter and timer values {CVE-2026-72121}
- can: bcm: fix out-of-bounds frame read introduced by the bcm_tx_lock backport {CVE-2025-38004}
- mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() {CVE-2026-72308}
- can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure {CVE-2026-72122}
- can: bcm: fix warning in bcm_connect/proc_register {CVE-2026-72113}
- ipv4: fix use-after-free in fib_nhc_update_mtu() {CVE-2026-74656}
- perf/core: Fix group leader use-after-free after sibling detach {CVE-2026-74637}
- sctp: fix use-after-free of cached ASCONF chunk {CVE-2026-74587}
- sctp: clear control chunk transport if it is being removed {CVE-2026-74688}
- ALSA: usb-audio: fix OOB write on Type II inbound URBs {CVE-2026-74682}
- ALSA: usx2y: bound the hwdep mmap fault offset {CVE-2026-74641}
- enic: fix tx_hang_reset use-after-free on device removal {CVE-2026-74725}
- udp: fix potential use-after-free in tunnel segmentation {CVE-2026-74705}
- ip6_tunnel: clear skb2->cb[] in ip6ip6_err() {CVE-2026-74597}
- ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}
- vhost: reset the vring metadata cache on vring reconfiguration {CVE-2026-74580} -…
- Record
CLSA-2026-1789039259- Updated
- 2026-11-02
OSVCLSA-2026-1789039867 No score
kernel: Fix of 51 CVEs
- net: openvswitch: fix skb leak on flow key update failure during ct {CVE-2026-74464}
- can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error {CVE-2026-74456}
- wifi: mwifiex: fix permanently busy scans after multiple roam iterations {CVE-2026-68469}
- drm/amdgpu/gfx8: drop unecessary BUG_ON() {CVE-2026-68430}
- sctp: auth: verify auth requirement when auth_chunk is NULL {CVE-2026-68300}
- cdrom: fix stack out-of-bounds read in CDROMVOLCTRL {CVE-2026-68184}
- wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read {CVE-2026-68351}
- wifi: carl9170: fix buffer overflow in rx_stream failover path {CVE-2026-68349}
- wifi: carl9170: fix OOB read from off-by-two in TX status handler {CVE-2026-68350}
- net: sit: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72061}
- net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72055}
- net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72054}
- net: ipip: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72053}
- net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72051}
- net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-63829}
- usb: free iso schedules on failed submit {CVE-2026-64348}
- smb: client: restrict implied bcc[0] exemption to responses without data area {CVE-2026-64448}
- net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422}
- netfilter: ebtables: terminate table name before find_table_lock() {CVE-2026-64411}
- netfilter: ebtables: zero chainstack array {CVE-2026-64413}
- USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}
- USB: iowarrior: fix use-after-free on disconnect race {CVE-2026-64341}
- udf: validate VAT header length against the VAT inode size {CVE-2026-64323}
- udf: validate sparing table length as an entry count, not a byte count {CVE-2026-64322}
- can: bcm: track a single source interface for ANYDEV timeout/throttle ops {CVE-2026-72115}
- can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler() {CVE-2026-72117}
- can: bcm: fix stale rx/tx ops after device removal {CVE-2026-72116}
- can: bcm: add missing device refcount for CAN filter removal {CVE-2026-72113}
- scsi: libiscsi: Move ehwait initialization to iscsi_session_setup() {CVE-2021-47328}
- sctp: validate cookie AUTH state before use {CVE-2026-74752}
- drm/amdgpu: reject oversized IBs with per-ring packet limits {CVE-2026-80576}
- libceph: Avoid using invalid osd indices from primary_temp {CVE-2026-80558}
- can: bcm: restore op->flags assignment lost in the bcm_tx_lock backport {CVE-2025-38004}
- can: bcm: fix CAN frame rx/tx statistics {CVE-2026-72118}
- can: bcm: add locking when updating filter and timer values {CVE-2026-72121}
- can: bcm: fix out-of-bounds frame read introduced by the bcm_tx_lock backport {CVE-2025-38004}
- mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() {CVE-2026-72308}
- can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure {CVE-2026-72122}
- can: bcm: fix warning in bcm_connect/proc_register {CVE-2026-72113}
- ipv4: fix use-after-free in fib_nhc_update_mtu() {CVE-2026-74656}
- perf/core: Fix group leader use-after-free after sibling detach {CVE-2026-74637}
- sctp: fix use-after-free of cached ASCONF chunk {CVE-2026-74587}
- sctp: clear control chunk transport if it is being removed {CVE-2026-74688}
- ALSA: usb-audio: fix OOB write on Type II inbound URBs {CVE-2026-74682}
- ALSA: usx2y: bound the hwdep mmap fault offset {CVE-2026-74641}
- enic: fix tx_hang_reset use-after-free on device removal {CVE-2026-74725}
- udp: fix potential use-after-free in tunnel segmentation {CVE-2026-74705}
- ip6_tunnel: clear skb2->cb[] in ip6ip6_err() {CVE-2026-74597}
- ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}
- vhost: reset the vring metadata cache on vring reconfiguration {CVE-2026-74580} -…
- Record
CLSA-2026-1789039867- Updated
- 2026-11-02
OSVCLSA-2026-1789141176 No score
kernel: Fix of 131 CVEs
- net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-63829}
- USB: legousbtower: fix use-after-free on disconnect race {CVE-2026-64340}
- udf: validate sparing table length as an entry count, not a byte count {CVE-2026-64322}
- ipv4: igmp: remove multicast group from hash table on device destruction {CVE-2026-64423}
- USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343}
- USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}
- net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers {CVE-2026-74700}
- ipvs: clear IPv4 options after rebasing tunnel ICMP errors {CVE-2026-74669}
- netfilter: ebt_nflog: pin the NFLOG backend {CVE-2026-74660}
- ipv4: fix use-after-free in fib_nhc_update_mtu() {CVE-2026-74656}
- ALSA: usx2y: bound the hwdep mmap fault offset {CVE-2026-74641}
- ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}
- tipc: read le->link under the node lock in tipc_node_link_down() {CVE-2026-74609}
- ip6_tunnel: clear skb2->cb[] in ip6ip6_err() {CVE-2026-74597}
- bpf, sockmap: Fix sk_redir use-after-free in send verdict {CVE-2026-74589}
- sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
- netfilter: nf_tables: make nft_object rhltable per table {CVE-2026-74565}
- scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write {CVE-2026-74470}
- nfs: use nfsi->rwsem to protect traversal of the file lock list {CVE-2026-72472}
- geneve: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-68142}
- sctp: fix use-after-free of cached ASCONF chunk {CVE-2026-74587}
- net/packet: reset the MAC header on the packet-socket transmit path {CVE-2026-74667}
- ALSA: usb-audio: fix OOB write on Type II inbound URBs {CVE-2026-74682}
- sctp: clear control chunk transport if it is being removed {CVE-2026-74688}
- udp: fix potential use-after-free in tunnel segmentation {CVE-2026-74705}
- bpf: Preserve pointer state for commuted arithmetic {CVE-2026-74720}
- RDMA/siw: bound Read Response placement to the RREAD length {CVE-2026-64268}
- libceph: Avoid using invalid osd indices from primary_temp {CVE-2026-80558}
- drm/i915: Fix potential UAF in TTM object purge {CVE-2026-63884}
- wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request {CVE-2026-68363}
- ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() {CVE-2026-68160}
- libceph: Reject monmaps advertising zero monitors {CVE-2026-68155}
- sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}
- Bluetooth: hci_sync: Protect UUID list traversal {CVE-2026-68189}
- net: slip: serialize receive against buffer reallocation {CVE-2026-68143}
- libceph: remove debugfs files before client teardown {CVE-2026-68153}
- media: rtl2832: fix use-after-free in rtl2832_remove() {CVE-2026-68214}
- sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async {CVE-2026-64219}
- pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}
- libceph: Fix multiplication overflow in decode_new_up_state_weight() {CVE-2026-68158}
- ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() {CVE-2026-74499}
- fbdev: Fix invalid page access after closing deferred I/O devices {CVE-2023-52731}
- Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync {CVE-2023-53252}
- net_sched: red: fix a race in __red_change() {CVE-2025-38108}
- iio: event: Fix event FIFO reset race {CVE-2026-64496}
- netfilter: ctnetlink: ensure safe access to master conntrack {CVE-2026-43116}
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC {CVE-2026-64298}
- openvswitch: fix GSO userspace truncation underflow {CVE-2026-68123}
- media: cx23885: add ioremap return check and cleanup {CVE-2026-68226}
- tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev {CVE-2026-68176} -…
- Record
CLSA-2026-1789141176- Updated
- 2026-11-02
OSVCLSA-2026-1792243729 No score
kernel: Fix of 53 CVEs
- ipv4: validate checksum_start before completing checksum {CVE-2026-99999}
- vsock/vmci: fix UAF when peer resets connection during handshake {CVE-2026-64115}
- af_unix: Fix UAF read of tail->len in unix_stream_data_wait() {CVE-2026-64109}
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done {CVE-2026-63801}
- tipc: fix double-free in tipc_buf_append() {CVE-2026-52993}
- Drivers: hv: vmbus: Use after free in __vmbus_open() {CVE-2021-47049}
- dm: fix a buffer overflow in ioctl processing {CVE-2026-46294}
- scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown {CVE-2026-97536}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() {CVE-2026-46209}
- drm: Remove plane hsub/vsub alignment requirement for core helpers {CVE-2026-46209}
- nfsd: make sure exp active before svc_export_show {CVE-2024-56558}
- USB: serial: io_edgeport: cap received transmit credits {CVE-2026-68365}
- ALSA: seq: close a re-opened queue timer in the destructor {CVE-2026-68202}
- geneve: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-68142}
- net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-63829}
- drm/amd/display: Bound VBIOS record-chain walk loops {CVE-2026-53138}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size {CVE-2026-53136}
- RDMA/srp: Do not call scsi_done() from srp_abort() {CVE-2023-52515}
- netfilter: nf_log: unregister loggers before per-net teardown {CVE-2026-97608}
- net: usb: pegasus: don't rely on id table pointer arithmetic {CVE-2026-97540}
- RDMA/mad: Fix receive buffer leak when PKey enforcement fails {CVE-2026-98354}
- wifi: cfg80211: cancel sched scan results work on unregister {CVE-2026-68414}
- ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF {CVE-2026-68398}
- mm/khugepaged: fix ->anon_vma race {CVE-2023-52935}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check {CVE-2026-52998}
- drm/nouveau: fix u32 overflow in pushbuf reloc bounds check {CVE-2026-46006}
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress {CVE-2023-52974}
- drm/edid: fix OOB read in drm_parse_tiled_block() {CVE-2026-64546}
- bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() {CVE-2026-64548}
- NFSv4.2: fix LAYOUTSTATS send buffer exhaustion {CVE-2026-90103}
- xen/netfront: drop RX packets with a short Ethernet header {CVE-2026-98375}
- Squashfs: check block offset is not negative {CVE-2026-90203}
- tty: clear cdev pointer after cdev_add() failure {CVE-2026-90334}
- wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length {CVE-2026-90382}
- uio: Fix stale info pointer in failed registration path {CVE-2026-93054}
- md/raid5-ppl: fix use-after-free in ppl_do_flush() {CVE-2026-93262}
- net/atm: fix slab-out-of-bounds read in vcc_setsockopt() {CVE-2026-74689}
- ipvs: clear IPv4 options after rebasing tunnel ICMP errors {CVE-2026-74669}
- net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers {CVE-2026-74700}
- ALSA: usx2y: bound the hwdep mmap fault offset {CVE-2026-74641}
- ALSA: usx2y: Fix potential leaks of uninitialized memory {CVE-2026-74641}
- bpf, sockmap: Fix sk_redir use-after-free in send verdict {CVE-2026-74589}
- net/packet: reset the MAC header on the packet-socket transmit path {CVE-2026-74667}
- drm/amdgpu: reject oversized IBs with per-ring packet limits {CVE-2026-80576}
- sctp: validate cookie AUTH state before use {CVE-2026-74752}
- ipvlan: inherit needed_headroom and needed_tailroom from phy_dev {CVE-2026-74744}
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page {CVE-2026-64320}
- tipc: read le->link under the node lock in tipc_node_link_down() {CVE-2026-74609}
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests {CVE-2026-43493}
- libceph: define and enforce CEPH_MAX_KEY_LEN {CVE-2026-43304}
- nvme-tcp: fix UAF when detecting digest errors {CVE-2022-48686}
- isdn: cpai: check ctr->cnr…
- Record
CLSA-2026-1792243729- Updated
- 2026-11-02
OSVCLSA-2026-1792247642 No score
kernel: Fix of 50 CVEs
- ALSA: usx2y: bound the hwdep mmap fault offset {CVE-2026-74641}
- ALSA: usx2y: Fix potential leaks of uninitialized memory {CVE-2026-74641}
- net/packet: reset the MAC header on the packet-socket transmit path {CVE-2026-74667}
- drm/amd/display: Bound VBIOS record-chain walk loops {CVE-2026-53138}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size {CVE-2026-53136}
- tty: clear cdev pointer after cdev_add() failure {CVE-2026-90334}
- netfilter: flowtable: publish GC-visible tuple last {CVE-2026-74746}
- mptcp: fix slab-use-after-free in __inet_lookup_established {CVE-2026-31669}
- ethtool: do not perform operations on net devices being unregistered {CVE-2021-47517}
- Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock {CVE-2026-31500}
- net/mlx5: Add a timeout to acquire the command queue semaphore {CVE-2024-38556}
- vsock/vmci: fix UAF when peer resets connection during handshake {CVE-2026-64115}
- af_unix: Fix UAF read of tail->len in unix_stream_data_wait() {CVE-2026-64109}
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done {CVE-2026-63801}
- tipc: fix double-free in tipc_buf_append() {CVE-2026-52993}
- dm: fix a buffer overflow in ioctl processing {CVE-2026-46294}
- scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown {CVE-2026-97536}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() {CVE-2026-46209}
- ipv4: validate checksum_start before completing checksum {CVE-2026-99999}
- drm: Remove plane hsub/vsub alignment requirement for core helpers {CVE-2026-46209}
- nfsd: make sure exp active before svc_export_show {CVE-2024-56558}
- USB: serial: io_edgeport: cap received transmit credits {CVE-2026-68365}
- ALSA: seq: close a re-opened queue timer in the destructor {CVE-2026-68202}
- geneve: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-68142}
- net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-63829}
- RDMA/mad: Fix receive buffer leak when PKey enforcement fails {CVE-2026-98354}
- RDMA/srp: Do not call scsi_done() from srp_abort() {CVE-2023-52515}
- wifi: cfg80211: cancel sched scan results work on unregister {CVE-2026-68414}
- ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF {CVE-2026-68398}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check {CVE-2026-52998}
- drm/nouveau: fix u32 overflow in pushbuf reloc bounds check {CVE-2026-46006}
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress {CVE-2023-52974}
- drm/edid: fix OOB read in drm_parse_tiled_block() {CVE-2026-64546}
- ipvs: clear IPv4 options after rebasing tunnel ICMP errors {CVE-2026-74669}
- net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers {CVE-2026-74700}
- bpf, sockmap: Fix sk_redir use-after-free in send verdict {CVE-2026-74589}
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO {CVE-2022-49961}
- dm cache: fix null-deref with concurrent writes in passthrough mode {CVE-2026-53064}
- net: bonding: fix use-after-free after 802.3ad slave unbind {CVE-2022-49667}
- bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() {CVE-2026-64548}
- xen/netfront: drop RX packets with a short Ethernet header {CVE-2026-98375}
- NFSv4.2: fix LAYOUTSTATS send buffer exhaustion {CVE-2026-90103}
- Squashfs: check block offset is not negative {CVE-2026-90203}
- wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length {CVE-2026-90382}
- uio: Fix stale info pointer in failed registration path {CVE-2026-93054}
- md/raid5-ppl: fix use-after-free in ppl_do_flush() {CVE-2026-93262}
- tipc: read le->link under the node lock in tipc_node_link_down() {CVE-2026-74609}
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests {CVE-2026-43493}
- libceph: define and enforce CEPH_MAX_KEY_LEN {CVE-2026-43304}
- nvme-tcp: fix UAF when detecting digest errors {CVE-2022-48686}
- ALSA: 6fire: fix use-after-free on disconnect…
- Record
CLSA-2026-1792247642- Updated
- 2026-11-02
OSVMGASA-2026-0312 No score
Updated kernel, kmod, bluez, firmware, wireless-regdb and drakx-installer-images packages fix security vulnerabilities
Upstream kernel version 6.18.39 fixes bugs and vulnerabilities. The kmod, bluez, wireless-regdb, firmware and drakx-installer-images packages have been updated to work with this new kernel.
- Record
MGASA-2026-0312- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:11339-1 No score
kernel-devel-7.1.4-1.1 on GA media
These are all security issues fixed in the kernel-devel-7.1.4-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:11339-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:21555-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
- CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
- CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
- CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
- CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
- CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
- CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
- CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
- CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
- CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
- CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
- CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
- CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
- CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
- CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
- CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
- CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
- CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
- CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
- CVE-2026-46023: dm mirror: fix integer…
- Record
openSUSE-SU-2026:21555-1- Updated
- 2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2026-63829 No score
CVE-2026-63829 in linux - Patched by Root
Root has patched CVE-2026-63829 in the linux package for Root:Debian:11. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-11-CVE-2026-63829- Updated
- 2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2026-63829 No score
CVE-2026-63829 in linux - Patched by Root
Root has patched CVE-2026-63829 in the linux package for Root:Debian:12. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-12-CVE-2026-63829- Updated
- 2026-11-02
OSVROOT-OS-UBUNTU-2204-CVE-2026-63829 No score
CVE-2026-63829 in linux - Patched by Root
Root has patched CVE-2026-63829 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.
- Record
ROOT-OS-UBUNTU-2204-CVE-2026-63829- Updated
- 2026-11-06
OSVSUSE-SU-2026:23066-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
- CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
- CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
- CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
- CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
- CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
- CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
- CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
- CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
- CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
- CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
- CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
- CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
- CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
- CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
- CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
- CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
- CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
- CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
- CVE-2026-46023: dm mirror: fix integer…
- Record
SUSE-SU-2026:23066-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23068-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
- CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
- CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
- CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
- CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
- CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
- CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
- CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
- CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
- CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
- CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
- CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
- CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
- CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
- CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
- CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
- CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
- CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
- CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
- CVE-2026-46023: dm mirror: fix integer…
- Record
SUSE-SU-2026:23068-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23193-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
- CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" (bsc#1256675).
- CVE-2026-23097: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).
- CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
- CVE-2026-43130: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).
- CVE-2026-43161: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (bsc#1264333).
- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
- CVE-2026-43170: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452).
- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
- CVE-2026-43328: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832).
- CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
- CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
- CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
- CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
- CVE-2026-45877: HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (bsc#1266468).
- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
- CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
- CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
- CVE-2026-46023: dm mirror: fix integer overflow in create_dirty_log() (bsc#1267449).
- CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).
- CVE-2026-46027: net/smc: avoid early lgr access in smc_clc_wait_msg (bsc#1266744).
- CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).
- CVE-2026-46040: inotify:…
- Record
SUSE-SU-2026:23193-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23194-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
- CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" (bsc#1256675).
- CVE-2026-23097: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).
- CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
- CVE-2026-43130: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).
- CVE-2026-43161: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (bsc#1264333).
- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
- CVE-2026-43170: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452).
- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
- CVE-2026-43328: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832).
- CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
- CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
- CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
- CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
- CVE-2026-45877: HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (bsc#1266468).
- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
- CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
- CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
- CVE-2026-46023: dm mirror: fix integer overflow in create_dirty_log() (bsc#1267449).
- CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).
- CVE-2026-46027: net/smc: avoid early lgr access in smc_clc_wait_msg (bsc#1266744).
- CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).
- CVE-2026-46040: inotify: fix…
- Record
SUSE-SU-2026:23194-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23221-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
- CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
- CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
- CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
- CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
- CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
- CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
- CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
- CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
- CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
- CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
- CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
- CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
- CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
- CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
- CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
- CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
- CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
- CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
- CVE-2026-46023: dm mirror: fix integer…
- Record
SUSE-SU-2026:23221-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23231-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
- CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
- CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
- CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
- CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
- CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
- CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
- CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
- CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
- CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
- CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
- CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
- CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
- CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
- CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
- CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
- CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
- CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
- CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
- CVE-2026-46023: dm mirror: fix integer…
- Record
SUSE-SU-2026:23231-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23237-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
- CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
- CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
- CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
- CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
- CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
- CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
- CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
- CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
- CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
- CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
- CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
- CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
- CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
- CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
- CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
- CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
- CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
- CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
- CVE-2026-46023: dm mirror: fix integer…
- Record
SUSE-SU-2026:23237-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23241-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
- CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" (bsc#1256675).
- CVE-2026-23097: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).
- CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
- CVE-2026-43130: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).
- CVE-2026-43161: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (bsc#1264333).
- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
- CVE-2026-43170: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452).
- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
- CVE-2026-43328: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832).
- CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
- CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
- CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
- CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
- CVE-2026-45877: HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (bsc#1266468).
- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
- CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
- CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
- CVE-2026-46023: dm mirror: fix integer overflow in create_dirty_log() (bsc#1267449).
- CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).
- CVE-2026-46027: net/smc: avoid early lgr access in smc_clc_wait_msg (bsc#1266744).
- CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).
- CVE-2026-46040: inotify:…
- Record
SUSE-SU-2026:23241-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23244-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
- CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" (bsc#1256675).
- CVE-2026-23097: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).
- CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
- CVE-2026-43130: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).
- CVE-2026-43161: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (bsc#1264333).
- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
- CVE-2026-43170: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452).
- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
- CVE-2026-43328: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832).
- CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
- CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
- CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
- CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
- CVE-2026-45877: HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (bsc#1266468).
- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
- CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
- CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
- CVE-2026-46023: dm mirror: fix integer overflow in create_dirty_log() (bsc#1267449).
- CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).
- CVE-2026-46027: net/smc: avoid early lgr access in smc_clc_wait_msg (bsc#1266744).
- CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).
- CVE-2026-46040: inotify: fix…
- Record
SUSE-SU-2026:23244-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:3593-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2022-4994: KVM: x86: wean fast IN from emulator_pio_in (bsc#1273097).
- CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1255616).
- CVE-2026-46052: ceph: only d_add() negative dentries when they are unhashed (bsc#1267494).
- CVE-2026-46056: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (bsc#1267435).
- CVE-2026-46145: RDMA/mana: Validate rx_hash_key_len (bsc#1267715).
- CVE-2026-46193: xfrm: ah: account for ESN high bits in async callbacks (bsc#1267656).
- CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1269172).
- CVE-2026-52958: libceph: Fix potential out-of-bounds access in osdmap_decode() (bsc#1269174).
- CVE-2026-52967: smb/client: fix possible infinite loop and oob read in symlink_data() (bsc#1269181).
- CVE-2026-52986: netfilter: nf_conntrack_sip: don't use simple_strtoul (bsc#1269289).
- CVE-2026-53050: quota: Fix race of dquot_scan_active() with quota deactivation (bsc#1269188).
- CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269773).
- CVE-2026-53196: USB: serial: io_ti: fix heap overflow in get_manuf_info() (bsc#1269986).
- CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1269997).
- CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1269988).
- CVE-2026-53256: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (bsc#1269993).
- CVE-2026-53260: preempt: Provide preempt_[dis|en]able_nested() (bsc#1269731).
- CVE-2026-53267: netfilter: nft_ct: bail out on template ct in get eval (bsc#1269577).
- CVE-2026-53354: arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1270230).
- CVE-2026-53357: Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (bsc#1270257).
- CVE-2026-53375: drm/amdgpu/vce: Prevent partial address patches (bsc#1271899).
- CVE-2026-53388: fuse: re-lock request before replacing page cache folio (bsc#1271825).
- CVE-2026-53391: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (bsc#1271904).
- CVE-2026-53402: fbdev: fbcon: fix out-of-bounds read in err_out of (bsc#1271908).
- CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271964).
- CVE-2026-63806: KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() (bsc#1272268).
- CVE-2026-63807: KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (bsc#1272263).
- CVE-2026-63824: KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1272180).
- CVE-2026-63829: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1272176).
- CVE-2026-63893: thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() (bsc#1272607).
- CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1272904).
- CVE-2026-63919: xfrm: input: hold netns during deferred transport reinjection (bsc#1272907).
- CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1272918).
- CVE-2026-63922,CVE-2026-63924: ipv6: exthdrs: recompute network header pointer once (bsc#1272855).
- CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272678).
- CVE-2026-63975: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (bsc#1272694).
- CVE-2026-63984: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (bsc#1272865).
- CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp() (bsc#1273035).
- CVE-2026-64106: KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits (bsc#1272242).
- CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272207).
- CVE-2026-64561: KVM: x86: Check for invalid/obsolete root after making MMU pages available (bsc#1273231). -…
- Record
SUSE-SU-2026:3593-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:3594-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
- CVE-2026-31510: Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb (bsc#1262603).
- CVE-2026-31624: HID: core: clamp report_size in s32ton() to avoid undefined shift (bsc#1263657).
- CVE-2026-43068: ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() (bsc#1264255).
- CVE-2026-43069: Bluetooth: hci_ll: Fix firmware leak on error path (bsc#1264190).
- CVE-2026-43123: fbcon: check return value of con2fb_acquire_newinfo() (bsc#1264598).
- CVE-2026-43124: pstore: ram_core: fix incorrect success return when vmap() fails (bsc#1264545).
- CVE-2026-43156: net: usb: pegasus: enable basic endpoint checking (bsc#1265092).
- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
- CVE-2026-43180: net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode (bsc#1265093).
- CVE-2026-43211: PCI: Fix pci_slot_trylock() error handling (bsc#1264387).
- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
- CVE-2026-43226: net/rds: No shortcut out of RDS_CONN_ERROR (bsc#1264544).
- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
- CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
- CVE-2026-43253: iommu/amd: move wait_on_sem() out of spinlock (bsc#1264419).
- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
- CVE-2026-43268: hfsplus: pretend special inodes as regular files (bsc#1265083).
- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
- CVE-2026-43287: drm: Account property blob allocations to memcg (bsc#1265037).
- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
- CVE-2026-43313: ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() (bsc#1264821).
- CVE-2026-43370: drm/amdgpu: Fix use-after-free race in VM acquire (bsc#1264782).
- CVE-2026-43373: net: ncsi: fix skb leak in error paths (bsc#1265079).
- CVE-2026-43383: net/tcp-md5: Fix MAC comparison to be constant-time (bsc#1264744).
- CVE-2026-43425: usb: image: mdc800: kill download URB on timeout (bsc#1265133).
- CVE-2026-43427: usb: class: cdc-wdm: fix reordering issue in read code path (bsc#1264746).
- CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
- CVE-2026-43449: nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set (bsc#1265023).
- CVE-2026-43450: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (bsc#1264794).
- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
- CVE-2026-43452: netfilter: x_tables: guard option walkers against 1-byte tail reads (bsc#1265142).
- CVE-2026-43466: net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (bsc#1264790).
- CVE-2026-43493: crypto: pcrypt - Fix handling of MAY_BACKLOG requests (bsc#1265627).
- CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
- CVE-2026-45857: scsi: csiostor: Fix dereference of null pointer rn (bsc#1266458).
- CVE-2026-45858: ext4: subdivide EXT4_EXT_DATA_VALID1 (bsc#1266773).
- CVE-2026-45871: tpm: st33zp24: Fix missing cleanup on get_burstcount() error (bsc#1266755).
- CVE-2026-45877: HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (bsc#1266468).
- CVE-2026-45899: ext4: drop extent cache when splitting extent fails (bsc#1266883).
- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
- CVE-2026-45915:…
- Record
SUSE-SU-2026:3594-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:3595-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2022-4994: KVM: x86: wean fast IN from emulator_pio_in (bsc#1273097).
- CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1255616).
- CVE-2024-38542: RDMA/mana_ib: boundary check before installing cq callbacks (bsc#1226591).
- CVE-2025-21953: net: mana: cleanup mana struct after debugfs_remove() (bsc#1240727).
- CVE-2026-46052: ceph: only d_add() negative dentries when they are unhashed (bsc#1267494).
- CVE-2026-46056: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (bsc#1267435).
- CVE-2026-46145: RDMA/mana: Validate rx_hash_key_len (bsc#1267715).
- CVE-2026-46193: xfrm: ah: account for ESN high bits in async callbacks (bsc#1267656).
- CVE-2026-52933: io_uring/poll: fix signed comparison in io_poll_get_ownership() (bsc#1268989).
- CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1269172).
- CVE-2026-52958: libceph: Fix potential out-of-bounds access in osdmap_decode() (bsc#1269174).
- CVE-2026-52967: smb/client: fix possible infinite loop and oob read in symlink_data() (bsc#1269181).
- CVE-2026-52986: netfilter: nf_conntrack_sip: don't use simple_strtoul (bsc#1269289).
- CVE-2026-53050: quota: Fix race of dquot_scan_active() with quota deactivation (bsc#1269188).
- CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269773).
- CVE-2026-53196: USB: serial: io_ti: fix heap overflow in get_manuf_info() (bsc#1269986).
- CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1269997).
- CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1269988).
- CVE-2026-53256: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (bsc#1269993).
- CVE-2026-53260: preempt: Provide preempt_[dis|en]able_nested() (bsc#1269731).
- CVE-2026-53267: netfilter: nft_ct: bail out on template ct in get eval (bsc#1269577).
- CVE-2026-53357: Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (bsc#1270257).
- CVE-2026-53375: drm/amdgpu/vce: Prevent partial address patches (bsc#1271899).
- CVE-2026-53388: fuse: re-lock request before replacing page cache folio (bsc#1271825).
- CVE-2026-53391: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (bsc#1271904).
- CVE-2026-53402: fbdev: fbcon: fix out-of-bounds read in err_out of (bsc#1271908).
- CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271964).
- CVE-2026-63806: KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() (bsc#1272268).
- CVE-2026-63807: KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (bsc#1272263).
- CVE-2026-63824: KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1272180).
- CVE-2026-63829: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1272176).
- CVE-2026-63884: drm/i915: Fix potential UAF in TTM object purge (bsc#1272573).
- CVE-2026-63893: thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() (bsc#1272607).
- CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1272904).
- CVE-2026-63919: xfrm: input: hold netns during deferred transport reinjection (bsc#1272907).
- CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1272918).
- CVE-2026-63922,CVE-2026-63924: ipv6: exthdrs: recompute network header pointer once (bsc#1272855).
- CVE-2026-63946: Bluetooth: ISO: fix UAF in iso_recv_frame (bsc#1272665).
- CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272678).
- CVE-2026-63975: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (bsc#1272694).
- CVE-2026-63984: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (bsc#1272865).
- CVE-2026-63994: tunnels: load network headers after skb_cow() in…
- Record
SUSE-SU-2026:3595-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:3602-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2026-46056: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (bsc#1267435).
- CVE-2026-46193: xfrm: ah: account for ESN high bits in async callbacks (bsc#1267656).
- CVE-2026-46324: netfilter: nf_tables: Introduce functions freeing nft_hook objects (bsc#1267995).
- CVE-2026-52967: smb/client: fix possible infinite loop and oob read in symlink_data() (bsc#1269181).
- CVE-2026-52986: netfilter: nf_conntrack_sip: don't use simple_strtoul (bsc#1269289).
- CVE-2026-53050: quota: Fix race of dquot_scan_active() with quota deactivation (bsc#1269188).
- CVE-2026-53129: fs/mbcache: cancel shrink work before destroying the cache (bsc#1269633).
- CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269773).
- CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1269997).
- CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1269988).
- CVE-2026-53250: xsk: cache csum_start/csum_offset to fix TOCTOU in xsk_skb_metadata() (bsc#1269808).
- CVE-2026-53262: l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl() (bsc#1270000).
- CVE-2026-53267: netfilter: nft_ct: bail out on template ct in get eval (bsc#1269577).
- CVE-2026-53354: arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1270230).
- CVE-2026-53375: drm/amdgpu/vce: Prevent partial address patches (bsc#1271899).
- CVE-2026-53388: fuse: re-lock request before replacing page cache folio (bsc#1271825).
- CVE-2026-53391: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (bsc#1271904).
- CVE-2026-53402: fbdev: fbcon: fix out-of-bounds read in err_out of (bsc#1271908).
- CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271964).
- CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272282).
- CVE-2026-63806: KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() (bsc#1272268).
- CVE-2026-63807: KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (bsc#1272263).
- CVE-2026-63824: KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1272180).
- CVE-2026-63826: fbdev: fix use-after-free in store_modes() (bsc#1272183).
- CVE-2026-63829: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1272176).
- CVE-2026-63884: drm/i915: Fix potential UAF in TTM object purge (bsc#1272573).
- CVE-2026-63893: thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() (bsc#1272607).
- CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272836).
- CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1272904).
- CVE-2026-63919: xfrm: input: hold netns during deferred transport reinjection (bsc#1272907).
- CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1272918).
- CVE-2026-63922,CVE-2026-63924: ipv6: exthdrs: refresh nh after handling HAO option (bsc#1272855).
- CVE-2026-63946: Bluetooth: ISO: fix UAF in iso_recv_frame (bsc#1272665).
- CVE-2026-63952: memfd: deny writeable mappings when implying SEAL_WRITE (bsc#1272468).
- CVE-2026-63968: ipv6: fix possible infinite loop in fib6_select_path() (bsc#1272466).
- CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272678).
- CVE-2026-63975: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (bsc#1272694).
- CVE-2026-63984: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (bsc#1272865).
- CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp() (bsc#1273035).
- CVE-2026-64106: KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits (bsc#1272242).
- CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272207).
- CVE-2026-64560: posix-cpu-timers:…
- Record
SUSE-SU-2026:3602-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:3616-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2022-4994: KVM: x86: wean fast IN from emulator_pio_in (bsc#1273097).
- CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1255616).
- CVE-2026-46052: ceph: only d_add() negative dentries when they are unhashed (bsc#1267494).
- CVE-2026-46056: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (bsc#1267435).
- CVE-2026-46145: RDMA/mana: Validate rx_hash_key_len (bsc#1267715).
- CVE-2026-46193: xfrm: ah: account for ESN high bits in async callbacks (bsc#1267656).
- CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1269172).
- CVE-2026-52958: libceph: Fix potential out-of-bounds access in osdmap_decode() (bsc#1269174).
- CVE-2026-52967: smb/client: fix possible infinite loop and oob read in symlink_data() (bsc#1269181).
- CVE-2026-52986: netfilter: nf_conntrack_sip: don't use simple_strtoul (bsc#1269289).
- CVE-2026-53050: quota: Fix race of dquot_scan_active() with quota deactivation (bsc#1269188).
- CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269773).
- CVE-2026-53196: USB: serial: io_ti: fix heap overflow in get_manuf_info() (bsc#1269986).
- CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1269997).
- CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1269988).
- CVE-2026-53256: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (bsc#1269993).
- CVE-2026-53260: preempt: Provide preempt_[dis|en]able_nested() (bsc#1269731).
- CVE-2026-53267: netfilter: nft_ct: bail out on template ct in get eval (bsc#1269577).
- CVE-2026-53357: Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (bsc#1270257).
- CVE-2026-53375: drm/amdgpu/vce: Prevent partial address patches (bsc#1271899).
- CVE-2026-53388: fuse: re-lock request before replacing page cache folio (bsc#1271825).
- CVE-2026-53391: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (bsc#1271904).
- CVE-2026-53402: fbdev: fbcon: fix out-of-bounds read in err_out of (bsc#1271908).
- CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271964).
- CVE-2026-63806: KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() (bsc#1272268).
- CVE-2026-63807: KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (bsc#1272263).
- CVE-2026-63824: KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1272180).
- CVE-2026-63829: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1272176).
- CVE-2026-63893: thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() (bsc#1272607).
- CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1272904).
- CVE-2026-63919: xfrm: input: hold netns during deferred transport reinjection (bsc#1272907).
- CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1272918).
- CVE-2026-63922,CVE-2026-63924: ipv6: exthdrs: refresh nh after handling HAO option (bsc#1272855).
- CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272678).
- CVE-2026-63975: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (bsc#1272694).
- CVE-2026-63984: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (bsc#1272865).
- CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp() (bsc#1273035).
- CVE-2026-64106: KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits (bsc#1272242).
- CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272207).
- CVE-2026-64560: posix-cpu-timers: Prevent UAF caused by non-leader exec() race (bsc#1273004).
- CVE-2026-64561: KVM: x86: Check for invalid/obsolete root after making MMU pages available (bsc#1273231). -…
- Record
SUSE-SU-2026:3616-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:3617-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2022-4994: KVM: x86: wean fast IN from emulator_pio_in (bsc#1273097).
- CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1255616).
- CVE-2024-38542: RDMA/mana_ib: boundary check before installing cq callbacks (bsc#1226591).
- CVE-2025-21953: net: mana: cleanup mana struct after debugfs_remove() (bsc#1240727).
- CVE-2026-46052: ceph: only d_add() negative dentries when they are unhashed (bsc#1267494).
- CVE-2026-46056: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (bsc#1267435).
- CVE-2026-46145: RDMA/mana: Validate rx_hash_key_len (bsc#1267715).
- CVE-2026-46193: xfrm: ah: account for ESN high bits in async callbacks (bsc#1267656).
- CVE-2026-52933: io_uring/poll: fix signed comparison in io_poll_get_ownership() (bsc#1268989).
- CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1269172).
- CVE-2026-52958: libceph: Fix potential out-of-bounds access in osdmap_decode() (bsc#1269174).
- CVE-2026-52967: smb/client: fix possible infinite loop and oob read in symlink_data() (bsc#1269181).
- CVE-2026-52986: netfilter: nf_conntrack_sip: don't use simple_strtoul (bsc#1269289).
- CVE-2026-53050: quota: Fix race of dquot_scan_active() with quota deactivation (bsc#1269188).
- CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269773).
- CVE-2026-53196: USB: serial: io_ti: fix heap overflow in get_manuf_info() (bsc#1269986).
- CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1269997).
- CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1269988).
- CVE-2026-53256: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (bsc#1269993).
- CVE-2026-53260: preempt: Provide preempt_[dis|en]able_nested() (bsc#1269731).
- CVE-2026-53267: netfilter: nft_ct: bail out on template ct in get eval (bsc#1269577).
- CVE-2026-53357: Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (bsc#1270257).
- CVE-2026-53375: drm/amdgpu/vce: Prevent partial address patches (bsc#1271899).
- CVE-2026-53388: fuse: re-lock request before replacing page cache folio (bsc#1271825).
- CVE-2026-53391: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (bsc#1271904).
- CVE-2026-53402: fbdev: fbcon: fix out-of-bounds read in err_out of (bsc#1271908).
- CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271964).
- CVE-2026-63806: KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() (bsc#1272268).
- CVE-2026-63807: KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (bsc#1272263).
- CVE-2026-63824: KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1272180).
- CVE-2026-63829: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1272176).
- CVE-2026-63884: drm/i915: Fix potential UAF in TTM object purge (bsc#1272573).
- CVE-2026-63893: thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() (bsc#1272607).
- CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1272904).
- CVE-2026-63919: xfrm: input: hold netns during deferred transport reinjection (bsc#1272907).
- CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1272918).
- CVE-2026-63922,CVE-2026-63924: ipv6: exthdrs: refresh nh after handling HAO option (bsc#1272855).
- CVE-2026-63946: Bluetooth: ISO: fix UAF in iso_recv_frame (bsc#1272665).
- CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272678).
- CVE-2026-63975: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (bsc#1272694).
- CVE-2026-63984: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (bsc#1272865).
- CVE-2026-63994: tunnels: load network headers after skb_cow() in…
- Record
SUSE-SU-2026:3617-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:3790-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
- CVE-2025-68818: scsi: Revert 'scsi: qla2xxx: Perform lockless command completion in abort path' (bsc#1256675).
- CVE-2026-23097: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).
- CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
- CVE-2026-43130: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).
- CVE-2026-43161: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (bsc#1264333).
- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
- CVE-2026-43170: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452).
- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
- CVE-2026-43328: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832).
- CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
- CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
- CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).
- CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).
- CVE-2026-46137: mptcp: pm: ADD_ADDR rtx: fix potential data-race (bsc#1267570).
- CVE-2026-46147: KVM: arm64: Factor out pKVM hyp vcpu creation to separate function (bsc#1267689).
- CVE-2026-46158: mptcp: pm: ADD_ADDR rtx: always decrease sk refcount (bsc#1266880).
- CVE-2026-46168: mptcp: sockopt: set timestamp flags on subflow socket, not msk (bsc#1266869).
- CVE-2026-46170: mptcp: pm: reuse ID 0 after delete and re-add (bsc#1267714).
- CVE-2026-46180: wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task (bsc#1266813).
- CVE-2026-46189: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (bsc#1266918).
- CVE-2026-46193: xfrm: ah: account for ESN high bits in async callbacks (bsc#1267656).
- CVE-2026-46234: vsock: fix buffer size clamping order (bsc#1266904).
- CVE-2026-46245: drm/amd/display: Fix dc_link NULL handling in HPD init (bsc#1267678). -…
- Record
SUSE-SU-2026:3790-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:3810-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
- CVE-2025-68818: scsi: Revert 'scsi: qla2xxx: Perform lockless command completion in abort path' (bsc#1256675).
- CVE-2026-23097: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).
- CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
- CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
- CVE-2026-43130: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).
- CVE-2026-43161: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (bsc#1264333).
- CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
- CVE-2026-43170: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452).
- CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
- CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
- CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
- CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
- CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
- CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
- CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
- CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
- CVE-2026-43328: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832).
- CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
- CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
- CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
- CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
- CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
- CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
- CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
- CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
- CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
- CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
- CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
- CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
- CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).
- CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).
- CVE-2026-46137: mptcp: pm: ADD_ADDR rtx: fix potential data-race (bsc#1267570).
- CVE-2026-46147: KVM: arm64: Factor out pKVM hyp vcpu creation to separate function (bsc#1267689).
- CVE-2026-46158: mptcp: pm: ADD_ADDR rtx: always decrease sk refcount (bsc#1266880).
- CVE-2026-46168: mptcp: sockopt: set timestamp flags on subflow socket, not msk (bsc#1266869).
- CVE-2026-46170: mptcp: pm: reuse ID 0 after delete and re-add (bsc#1267714).
- CVE-2026-46180: wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task (bsc#1266813).
- CVE-2026-46189: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (bsc#1266918).
- CVE-2026-46193: xfrm: ah: account for ESN high bits in async callbacks (bsc#1267656).
- CVE-2026-46234: vsock: fix buffer size clamping order (bsc#1266904).
- CVE-2026-46245: drm/amd/display: Fix dc_link NULL handling in HPD init (bsc#1267678). -…
- Record
SUSE-SU-2026:3810-1- Updated
- 2026-11-02
OSVUSN-8726-1 No score
linux, linux-aws, linux-aws-7.0, linux-gcp, linux-gke, linux-hwe-7.0, linux-realtime vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- User-space API (UAPI);
- Kernel build system;
- ARM32 architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Compute Acceleration Framework;
- Intel NPU Driver;
- ACPI drivers;
- Android drivers;
- Drivers core;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Character device driver;
- Hardware random number generator core;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- Buffer Sharing and Synchronization framework;
- Intel Stratix 10 firmware drivers;
- FPGA Framework;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- CoreSight HW tracing drivers;
- I2C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Mouse) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- Multiple devices driver;
- Media drivers;
- Multifunction device drivers;
- Fastrpc Driver;
- MMC subsystem;
- Ethernet bonding driver;
- Network drivers;
- Mellanox network drivers;
- MediaTek network drivers;
- NTB driver;
- NVME drivers;
- NVMEM (Non Volatile Memory) drivers;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- System reset/shutdown drivers;
- Power sequencing drivers;
- PTP clock framework;
- Voltage and Current Regulator drivers;
- RPMSG subsystem;
- SLIMbus drivers;
- SPI subsystem;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- VME bus staging drivers;
- Trusted Execution Environment drivers;
- Thunderbolt and USB4 drivers;
- TTY drivers;
- Cadence USB3 driver;
- ULPI bus;
- DesignWare USB3 driver;
- Faraday FOTG210 USB2 dual-role controller driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB ChaosKey driver;
- Siemens ID Mouse USB driver;
- IOWarrior USB driver;
- LD Didactic USB driver;
- LEGO USB Tower driver;
- Intel USBIO USB I/O expander driver;
- USS720 USB parallel port adapter driver;
- MediaTek USB3 DRD driver;
- USB Serial drivers;
- USB Type-C Port Controller Manager driver;
- USB Type-C Connector System Software Interface driver;
- USB over IP driver;
- VFIO drivers;
- Framebuffer layer;
- Virtio drivers;
- BTRFS file system;
- EROFS file system;
- exFAT file system;
- F2FS file system;
- File systems infrastructure;
- FUSE (File system in Userspace);
- GFS2 file system;
- HFS file system;
- HFS+ file system;
- Network file system (NFS) client;
- Network file system (NFS) server daemon;
- NILFS2 file system;
- NTFS3 file system;
- OCFS2 file system;
- Proc file system;
- SMB network file system;
- UDF file system;
- XFS file system;
- Key management;
- BPF subsystem;
- Memory management;
- Software nodes and device properties;
- Glob pattern matching library;
- Memory Management;
- KVM subsystem;
- Mellanox drivers;
- Restartable sequences system call mechanism;
- Socket messages infrastructure;
- Network traffic control;
- Bluetooth subsystem;
- Netfilter;
- Networking core;
- Network sockets;
- TCP network protocol;
- io_uring subsystem;
- IPC subsystem;
- Audit subsystem;
- Perf events;
- Kernel fork() syscall;
- Locking primitives;
- Kernel module support;
- Scheduler infrastructure; -…
- Record
USN-8726-1- Updated
- 2026-11-06
OSVUSN-8726-2 No score
linux-raspi vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- User-space API (UAPI);
- Kernel build system;
- ARM32 architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Compute Acceleration Framework;
- Intel NPU Driver;
- ACPI drivers;
- Android drivers;
- Drivers core;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Character device driver;
- Hardware random number generator core;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- Buffer Sharing and Synchronization framework;
- Intel Stratix 10 firmware drivers;
- FPGA Framework;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- CoreSight HW tracing drivers;
- I2C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Mouse) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- Multiple devices driver;
- Media drivers;
- Multifunction device drivers;
- Fastrpc Driver;
- MMC subsystem;
- Ethernet bonding driver;
- Network drivers;
- Mellanox network drivers;
- MediaTek network drivers;
- NTB driver;
- NVME drivers;
- NVMEM (Non Volatile Memory) drivers;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- System reset/shutdown drivers;
- Power sequencing drivers;
- PTP clock framework;
- Voltage and Current Regulator drivers;
- RPMSG subsystem;
- SLIMbus drivers;
- SPI subsystem;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- VME bus staging drivers;
- Trusted Execution Environment drivers;
- Thunderbolt and USB4 drivers;
- TTY drivers;
- Cadence USB3 driver;
- ULPI bus;
- DesignWare USB3 driver;
- Faraday FOTG210 USB2 dual-role controller driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB ChaosKey driver;
- Siemens ID Mouse USB driver;
- IOWarrior USB driver;
- LD Didactic USB driver;
- LEGO USB Tower driver;
- Intel USBIO USB I/O expander driver;
- USS720 USB parallel port adapter driver;
- MediaTek USB3 DRD driver;
- USB Serial drivers;
- USB Type-C Port Controller Manager driver;
- USB Type-C Connector System Software Interface driver;
- USB over IP driver;
- VFIO drivers;
- Framebuffer layer;
- Virtio drivers;
- BTRFS file system;
- EROFS file system;
- exFAT file system;
- F2FS file system;
- File systems infrastructure;
- FUSE (File system in Userspace);
- GFS2 file system;
- HFS file system;
- HFS+ file system;
- Network file system (NFS) client;
- Network file system (NFS) server daemon;
- NILFS2 file system;
- NTFS3 file system;
- OCFS2 file system;
- Proc file system;
- SMB network file system;
- UDF file system;
- XFS file system;
- Key management;
- BPF subsystem;
- Memory management;
- Software nodes and device properties;
- Glob pattern matching library;
- Memory Management;
- KVM subsystem;
- Mellanox drivers;
- Restartable sequences system call mechanism;
- Socket messages infrastructure;
- Network traffic control;
- Bluetooth subsystem;
- Netfilter;
- Networking core;
- Network sockets;
- TCP network protocol;
- io_uring subsystem;
- IPC subsystem;
- Audit subsystem;
- Perf events;
- Kernel fork() syscall;
- Locking primitives;
- Kernel module support;
- Scheduler infrastructure; -…
- Record
USN-8726-2- Updated
- 2026-11-06
OSVUSN-8726-3 No score
linux-ibm vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- User-space API (UAPI);
- Kernel build system;
- ARM32 architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Compute Acceleration Framework;
- Intel NPU Driver;
- ACPI drivers;
- Android drivers;
- Drivers core;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Character device driver;
- Hardware random number generator core;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- Buffer Sharing and Synchronization framework;
- Intel Stratix 10 firmware drivers;
- FPGA Framework;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- CoreSight HW tracing drivers;
- I2C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Mouse) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- Multiple devices driver;
- Media drivers;
- Multifunction device drivers;
- Fastrpc Driver;
- MMC subsystem;
- Ethernet bonding driver;
- Network drivers;
- Mellanox network drivers;
- MediaTek network drivers;
- NTB driver;
- NVME drivers;
- NVMEM (Non Volatile Memory) drivers;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- System reset/shutdown drivers;
- Power sequencing drivers;
- PTP clock framework;
- Voltage and Current Regulator drivers;
- RPMSG subsystem;
- SLIMbus drivers;
- SPI subsystem;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- VME bus staging drivers;
- Trusted Execution Environment drivers;
- Thunderbolt and USB4 drivers;
- TTY drivers;
- Cadence USB3 driver;
- ULPI bus;
- DesignWare USB3 driver;
- Faraday FOTG210 USB2 dual-role controller driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB ChaosKey driver;
- Siemens ID Mouse USB driver;
- IOWarrior USB driver;
- LD Didactic USB driver;
- LEGO USB Tower driver;
- Intel USBIO USB I/O expander driver;
- USS720 USB parallel port adapter driver;
- MediaTek USB3 DRD driver;
- USB Serial drivers;
- USB Type-C Port Controller Manager driver;
- USB Type-C Connector System Software Interface driver;
- USB over IP driver;
- VFIO drivers;
- Framebuffer layer;
- Virtio drivers;
- BTRFS file system;
- EROFS file system;
- exFAT file system;
- F2FS file system;
- File systems infrastructure;
- FUSE (File system in Userspace);
- GFS2 file system;
- HFS file system;
- HFS+ file system;
- Network file system (NFS) client;
- Network file system (NFS) server daemon;
- NILFS2 file system;
- NTFS3 file system;
- OCFS2 file system;
- Proc file system;
- SMB network file system;
- UDF file system;
- XFS file system;
- Key management;
- BPF subsystem;
- Memory management;
- Software nodes and device properties;
- Glob pattern matching library;
- Memory Management;
- KVM subsystem;
- Mellanox drivers;
- Restartable sequences system call mechanism;
- Socket messages infrastructure;
- Network traffic control;
- Bluetooth subsystem;
- Netfilter;
- Networking core;
- Network sockets;
- TCP network protocol;
- io_uring subsystem;
- IPC subsystem;
- Audit subsystem;
- Perf events;
- Kernel fork() syscall;
- Locking primitives;
- Kernel module support;
- Scheduler infrastructure; -…
- Record
USN-8726-3- Updated
- 2026-11-06
OSVUSN-8726-4 No score
linux-azure, linux-oracle vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- User-space API (UAPI);
- Kernel build system;
- ARM32 architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Compute Acceleration Framework;
- Intel NPU Driver;
- ACPI drivers;
- Android drivers;
- Drivers core;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Character device driver;
- Hardware random number generator core;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- Buffer Sharing and Synchronization framework;
- Intel Stratix 10 firmware drivers;
- FPGA Framework;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- CoreSight HW tracing drivers;
- I2C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Mouse) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- Multiple devices driver;
- Media drivers;
- Multifunction device drivers;
- Fastrpc Driver;
- MMC subsystem;
- Ethernet bonding driver;
- Network drivers;
- Mellanox network drivers;
- MediaTek network drivers;
- NTB driver;
- NVME drivers;
- NVMEM (Non Volatile Memory) drivers;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- System reset/shutdown drivers;
- Power sequencing drivers;
- PTP clock framework;
- Voltage and Current Regulator drivers;
- RPMSG subsystem;
- SLIMbus drivers;
- SPI subsystem;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- VME bus staging drivers;
- Trusted Execution Environment drivers;
- Thunderbolt and USB4 drivers;
- TTY drivers;
- Cadence USB3 driver;
- ULPI bus;
- DesignWare USB3 driver;
- Faraday FOTG210 USB2 dual-role controller driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB ChaosKey driver;
- Siemens ID Mouse USB driver;
- IOWarrior USB driver;
- LD Didactic USB driver;
- LEGO USB Tower driver;
- Intel USBIO USB I/O expander driver;
- USS720 USB parallel port adapter driver;
- MediaTek USB3 DRD driver;
- USB Serial drivers;
- USB Type-C Port Controller Manager driver;
- USB Type-C Connector System Software Interface driver;
- USB over IP driver;
- VFIO drivers;
- Framebuffer layer;
- Virtio drivers;
- BTRFS file system;
- EROFS file system;
- exFAT file system;
- F2FS file system;
- File systems infrastructure;
- FUSE (File system in Userspace);
- GFS2 file system;
- HFS file system;
- HFS+ file system;
- Network file system (NFS) client;
- Network file system (NFS) server daemon;
- NILFS2 file system;
- NTFS3 file system;
- OCFS2 file system;
- Proc file system;
- SMB network file system;
- UDF file system;
- XFS file system;
- Key management;
- BPF subsystem;
- Memory management;
- Software nodes and device properties;
- Glob pattern matching library;
- Memory Management;
- KVM subsystem;
- Mellanox drivers;
- Restartable sequences system call mechanism;
- Socket messages infrastructure;
- Network traffic control;
- Bluetooth subsystem;
- Netfilter;
- Networking core;
- Network sockets;
- TCP network protocol;
- io_uring subsystem;
- IPC subsystem;
- Audit subsystem;
- Perf events;
- Kernel fork() syscall;
- Locking primitives;
- Kernel module support;
- Scheduler infrastructure; -…
- Record
USN-8726-4- Updated
- 2026-11-06
OSVUSN-8727-1 No score
linux-oem-7.0 vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- User-space API (UAPI);
- Kernel build system;
- ARM32 architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Compute Acceleration Framework;
- Intel NPU Driver;
- ACPI drivers;
- Android drivers;
- Drivers core;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Character device driver;
- Hardware random number generator core;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- Buffer Sharing and Synchronization framework;
- Intel Stratix 10 firmware drivers;
- FPGA Framework;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- CoreSight HW tracing drivers;
- I2C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Mouse) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- Multiple devices driver;
- Media drivers;
- Multifunction device drivers;
- Fastrpc Driver;
- MMC subsystem;
- Ethernet bonding driver;
- Network drivers;
- Mellanox network drivers;
- MediaTek network drivers;
- NTB driver;
- NVME drivers;
- NVMEM (Non Volatile Memory) drivers;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- System reset/shutdown drivers;
- Power sequencing drivers;
- PTP clock framework;
- Voltage and Current Regulator drivers;
- RPMSG subsystem;
- SLIMbus drivers;
- SPI subsystem;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- VME bus staging drivers;
- Trusted Execution Environment drivers;
- TTY drivers;
- Cadence USB3 driver;
- ULPI bus;
- USB core drivers;
- DesignWare USB3 driver;
- Faraday FOTG210 USB2 dual-role controller driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB ChaosKey driver;
- Siemens ID Mouse USB driver;
- IOWarrior USB driver;
- LD Didactic USB driver;
- LEGO USB Tower driver;
- Intel USBIO USB I/O expander driver;
- USS720 USB parallel port adapter driver;
- MediaTek USB3 DRD driver;
- USB Serial drivers;
- USB Type-C Port Controller Manager driver;
- USB Type-C Connector System Software Interface driver;
- USB over IP driver;
- VFIO drivers;
- Framebuffer layer;
- Virtio drivers;
- BTRFS file system;
- EROFS file system;
- exFAT file system;
- F2FS file system;
- File systems infrastructure;
- FUSE (File system in Userspace);
- GFS2 file system;
- HFS file system;
- HFS+ file system;
- Network file system (NFS) client;
- Network file system (NFS) server daemon;
- NILFS2 file system;
- NTFS3 file system;
- OCFS2 file system;
- Proc file system;
- SMB network file system;
- UDF file system;
- XFS file system;
- Key management;
- BPF subsystem;
- Memory management;
- Software nodes and device properties;
- Glob pattern matching library;
- Memory Management;
- KVM subsystem;
- Mellanox drivers;
- Restartable sequences system call mechanism;
- Socket messages infrastructure;
- Network traffic control;
- Bluetooth subsystem;
- Netfilter;
- Networking core;
- Network sockets;
- TCP network protocol;
- io_uring subsystem;
- IPC subsystem;
- Audit subsystem;
- Perf events;
- Kernel fork() syscall;
- Locking primitives;
- Kernel module support;
- Scheduler infrastructure;
- Signal handling…
- Record
USN-8727-1- Updated
- 2026-11-06
OSVUSN-8728-1 No score
linux-gcp-7.0 vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- x86 platform drivers;
- ARM64 architecture;
- Cryptographic API;
- PSP security protocol;
- User-space API (UAPI);
- Kernel build system;
- ARM32 architecture;
- MIPS architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Block layer subsystem;
- Compute Acceleration Framework;
- Intel NPU Driver;
- ACPI drivers;
- Android drivers;
- Auxiliary display drivers;
- Drivers core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Ublk userspace block driver;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Bus devices;
- Character device driver;
- Hardware random number generator core;
- Clock framework and drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- Buffer Sharing and Synchronization framework;
- DPLL subsystem;
- EDAC drivers;
- Arm Firmware Framework for ARMv8-A(FFA);
- EFI core;
- Intel Stratix 10 firmware drivers;
- FPGA Framework;
- FWCTL subsystem;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- Hardware monitoring drivers;
- CoreSight HW tracing drivers;
- I2C subsystem;
- I3C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Mouse) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- NVIDIA Tegra memory controller driver;
- Multifunction device drivers;
- Fastrpc Driver;
- MMC subsystem;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- STMicroelectronics network drivers;
- Texas Instruments network drivers;
- MediaTek network drivers;
- NTB driver;
- NVME drivers;
- NVMEM (Non Volatile Memory) drivers;
- Parport drivers;
- PCI subsystem;
- PHY drivers;
- Pin controllers subsystem;
- Chrome hardware platform drivers;
- ACPI WMI driver;
- Generic PM domains;
- MediaTek PM domains;
- System reset/shutdown drivers;
- Power sequencing drivers;
- Power supply drivers;
- PTP clock framework;
- Voltage and Current Regulator drivers;
- MPAM driver;
- Amlogic Meson reset controller drivers;
- RPMSG subsystem;
- S/390 drivers;
- SCSI subsystem;
- SLIMbus drivers;
- NVIDIA Tegra Control Backbone (CBB) driver;
- SPI subsystem;
- Greybus lights staging drivers;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- VME bus staging drivers;
- TCM subsystem;
- Trusted Execution Environment drivers;
- Thunderbolt and USB4 drivers;
- TTY drivers;
- Userspace I/O drivers;
- Cadence USB3 driver;
- USB Device Class drivers;
- ULPI bus;
- DesignWare USB2 driver;
- DesignWare USB3 driver;
- Faraday FOTG210 USB2 dual-role controller driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB ChaosKey driver;
- Siemens ID Mouse USB driver;
- IOWarrior USB driver;
- LD Didactic USB driver;
- LEGO USB…
- Record
USN-8728-1- Updated
- 2026-11-07
OSVUSN-8728-2 No score
linux-azure-7.0 vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- x86 platform drivers;
- ARM64 architecture;
- Cryptographic API;
- PSP security protocol;
- User-space API (UAPI);
- Kernel build system;
- ARM32 architecture;
- MIPS architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Block layer subsystem;
- Compute Acceleration Framework;
- Intel NPU Driver;
- ACPI drivers;
- Android drivers;
- Auxiliary display drivers;
- Drivers core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Ublk userspace block driver;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Bus devices;
- Character device driver;
- Hardware random number generator core;
- Clock framework and drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- Buffer Sharing and Synchronization framework;
- DPLL subsystem;
- EDAC drivers;
- Arm Firmware Framework for ARMv8-A(FFA);
- EFI core;
- Intel Stratix 10 firmware drivers;
- FPGA Framework;
- FWCTL subsystem;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- Hardware monitoring drivers;
- CoreSight HW tracing drivers;
- I2C subsystem;
- I3C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Mouse) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- NVIDIA Tegra memory controller driver;
- Multifunction device drivers;
- Fastrpc Driver;
- MMC subsystem;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- STMicroelectronics network drivers;
- Texas Instruments network drivers;
- MediaTek network drivers;
- NTB driver;
- NVME drivers;
- NVMEM (Non Volatile Memory) drivers;
- Parport drivers;
- PCI subsystem;
- PHY drivers;
- Pin controllers subsystem;
- Chrome hardware platform drivers;
- ACPI WMI driver;
- Generic PM domains;
- MediaTek PM domains;
- System reset/shutdown drivers;
- Power sequencing drivers;
- Power supply drivers;
- PTP clock framework;
- Voltage and Current Regulator drivers;
- MPAM driver;
- Amlogic Meson reset controller drivers;
- RPMSG subsystem;
- S/390 drivers;
- SCSI subsystem;
- SLIMbus drivers;
- NVIDIA Tegra Control Backbone (CBB) driver;
- SPI subsystem;
- Greybus lights staging drivers;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- VME bus staging drivers;
- TCM subsystem;
- Trusted Execution Environment drivers;
- Thunderbolt and USB4 drivers;
- TTY drivers;
- Userspace I/O drivers;
- Cadence USB3 driver;
- USB Device Class drivers;
- ULPI bus;
- DesignWare USB2 driver;
- DesignWare USB3 driver;
- Faraday FOTG210 USB2 dual-role controller driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB ChaosKey driver;
- Siemens ID Mouse USB driver;
- IOWarrior USB driver;
- LD Didactic USB driver;
- LEGO USB…
- Record
USN-8728-2- Updated
- 2026-11-07
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernel-rtAlmaLinux:8 From an advisory covering 29 CVEs |
before 4.18.0-553.171.1.rt7.512.el8_10 | 4.18.0-553.171.1.rt7.512.el8_10 |
kernel-rt-coreAlmaLinux:8 From an advisory covering 29 CVEs |
before 4.18.0-553.171.1.rt7.512.el8_10 | 4.18.0-553.171.1.rt7.512.el8_10 |
kernel-rt-debugAlmaLinux:8 From an advisory covering 29 CVEs |
before 4.18.0-553.171.1.rt7.512.el8_10 | 4.18.0-553.171.1.rt7.512.el8_10 |
kernel-rt-debug-coreAlmaLinux:8 From an advisory covering 29 CVEs |
before 4.18.0-553.171.1.rt7.512.el8_10 | 4.18.0-553.171.1.rt7.512.el8_10 |
kernel-rt-debug-develAlmaLinux:8 From an advisory covering 29 CVEs |
before 4.18.0-553.171.1.rt7.512.el8_10 | 4.18.0-553.171.1.rt7.512.el8_10 |
kernel-rt-debug-modulesAlmaLinux:8 From an advisory covering 29 CVEs |
before 4.18.0-553.171.1.rt7.512.el8_10 | 4.18.0-553.171.1.rt7.512.el8_10 |
kernel-rt-debug-modules-extraAlmaLinux:8 From an advisory covering 29 CVEs |
before 4.18.0-553.171.1.rt7.512.el8_10 | 4.18.0-553.171.1.rt7.512.el8_10 |
kernel-rt-develAlmaLinux:8 From an advisory covering 29 CVEs |
before 4.18.0-553.171.1.rt7.512.el8_10 | 4.18.0-553.171.1.rt7.512.el8_10 |
kernel-rt-modulesAlmaLinux:8 From an advisory covering 29 CVEs |
before 4.18.0-553.171.1.rt7.512.el8_10 | 4.18.0-553.171.1.rt7.512.el8_10 |
kernel-rt-modules-extraAlmaLinux:8 From an advisory covering 29 CVEs |
before 4.18.0-553.171.1.rt7.512.el8_10 | 4.18.0-553.171.1.rt7.512.el8_10 |
Show 290 moreShow less
| Package | Affected | Fixed |
|---|---|---|
bpftoolAlmaLinux:8 From an advisory covering 29 CVEs |
before 4.18.0-553.171.1.el8_10 | 4.18.0-553.171.1.el8_10 |
kernelAlmaLinux:8 From an advisory covering 29 CVEs |
before 4.18.0-553.171.1.el8_10 | 4.18.0-553.171.1.el8_10 |
kernel-abi-stablelistsAlmaLinux:8 From an advisory covering 29 CVEs |
before 4.18.0-553.171.1.el8_10 | 4.18.0-553.171.1.el8_10 |
kernel-coreAlmaLinux:8 From an advisory covering 29 CVEs |
before 4.18.0-553.171.1.el8_10 | 4.18.0-553.171.1.el8_10 |
kernel-cross-headersAlmaLinux:8 From an advisory covering 29 CVEs |
before 4.18.0-553.171.1.el8_10 | 4.18.0-553.171.1.el8_10 |
kernel-debugAlmaLinux:8 From an advisory covering 29 CVEs |
before 4.18.0-553.171.1.el8_10 | 4.18.0-553.171.1.el8_10 |
kernel-debug-coreAlmaLinux:8 From an advisory covering 29 CVEs |
before 4.18.0-553.171.1.el8_10 | 4.18.0-553.171.1.el8_10 |
kernel-debug-develAlmaLinux:8 From an advisory covering 29 CVEs |
before 4.18.0-553.171.1.el8_10 | 4.18.0-553.171.1.el8_10 |
kernel-debug-modulesAlmaLinux:8 From an advisory covering 29 CVEs |
before 4.18.0-553.171.1.el8_10 | 4.18.0-553.171.1.el8_10 |
kernel-debug-modules-extraAlmaLinux:8 From an advisory covering 29 CVEs |
before 4.18.0-553.171.1.el8_10 | 4.18.0-553.171.1.el8_10 |
kernel-develAlmaLinux:8 From an advisory covering 29 CVEs |
before 4.18.0-553.171.1.el8_10 | 4.18.0-553.171.1.el8_10 |
kernel-docAlmaLinux:8 From an advisory covering 29 CVEs |
before 4.18.0-553.171.1.el8_10 | 4.18.0-553.171.1.el8_10 |
kernel-headersAlmaLinux:8 From an advisory covering 29 CVEs |
before 4.18.0-553.171.1.el8_10 | 4.18.0-553.171.1.el8_10 |
kernel-modulesAlmaLinux:8 From an advisory covering 29 CVEs |
before 4.18.0-553.171.1.el8_10 | 4.18.0-553.171.1.el8_10 |
kernel-modules-extraAlmaLinux:8 From an advisory covering 29 CVEs |
before 4.18.0-553.171.1.el8_10 | 4.18.0-553.171.1.el8_10 |
kernel-toolsAlmaLinux:8 From an advisory covering 29 CVEs |
before 4.18.0-553.171.1.el8_10 | 4.18.0-553.171.1.el8_10 |
kernel-tools-libsAlmaLinux:8 From an advisory covering 29 CVEs |
before 4.18.0-553.171.1.el8_10 | 4.18.0-553.171.1.el8_10 |
kernel-tools-libs-develAlmaLinux:8 From an advisory covering 29 CVEs |
before 4.18.0-553.171.1.el8_10 | 4.18.0-553.171.1.el8_10 |
kernel-zfcpdumpAlmaLinux:8 From an advisory covering 29 CVEs |
before 4.18.0-553.171.1.el8_10 | 4.18.0-553.171.1.el8_10 |
kernel-zfcpdump-coreAlmaLinux:8 From an advisory covering 29 CVEs |
before 4.18.0-553.171.1.el8_10 | 4.18.0-553.171.1.el8_10 |
kernel-zfcpdump-develAlmaLinux:8 From an advisory covering 29 CVEs |
before 4.18.0-553.171.1.el8_10 | 4.18.0-553.171.1.el8_10 |
kernel-zfcpdump-modulesAlmaLinux:8 From an advisory covering 29 CVEs |
before 4.18.0-553.171.1.el8_10 | 4.18.0-553.171.1.el8_10 |
kernel-zfcpdump-modules-extraAlmaLinux:8 From an advisory covering 29 CVEs |
before 4.18.0-553.171.1.el8_10 | 4.18.0-553.171.1.el8_10 |
perfAlmaLinux:8 From an advisory covering 29 CVEs |
before 4.18.0-553.171.1.el8_10 | 4.18.0-553.171.1.el8_10 |
python3-perfAlmaLinux:8 From an advisory covering 29 CVEs |
before 4.18.0-553.171.1.el8_10 | 4.18.0-553.171.1.el8_10 |
kernelAlmaLinux:10 From an advisory covering 35 CVEs |
before 6.12.0-211.63.1.el10_2 | 6.12.0-211.63.1.el10_2 |
kernel-64kAlmaLinux:10 From an advisory covering 35 CVEs |
before 6.12.0-211.63.1.el10_2 | 6.12.0-211.63.1.el10_2 |
kernel-64k-coreAlmaLinux:10 From an advisory covering 35 CVEs |
before 6.12.0-211.63.1.el10_2 | 6.12.0-211.63.1.el10_2 |
kernel-64k-debugAlmaLinux:10 From an advisory covering 35 CVEs |
before 6.12.0-211.63.1.el10_2 | 6.12.0-211.63.1.el10_2 |
kernel-64k-debug-coreAlmaLinux:10 From an advisory covering 35 CVEs |
before 6.12.0-211.63.1.el10_2 | 6.12.0-211.63.1.el10_2 |
kernel-64k-debug-develAlmaLinux:10 From an advisory covering 35 CVEs |
before 6.12.0-211.63.1.el10_2 | 6.12.0-211.63.1.el10_2 |
kernel-64k-debug-devel-matchedAlmaLinux:10 From an advisory covering 35 CVEs |
before 6.12.0-211.63.1.el10_2 | 6.12.0-211.63.1.el10_2 |
kernel-64k-debug-modulesAlmaLinux:10 From an advisory covering 35 CVEs |
before 6.12.0-211.63.1.el10_2 | 6.12.0-211.63.1.el10_2 |
kernel-64k-debug-modules-coreAlmaLinux:10 From an advisory covering 35 CVEs |
before 6.12.0-211.63.1.el10_2 | 6.12.0-211.63.1.el10_2 |
kernel-64k-debug-modules-extraAlmaLinux:10 From an advisory covering 35 CVEs |
before 6.12.0-211.63.1.el10_2 | 6.12.0-211.63.1.el10_2 |
kernel-64k-develAlmaLinux:10 From an advisory covering 35 CVEs |
before 6.12.0-211.63.1.el10_2 | 6.12.0-211.63.1.el10_2 |
kernel-64k-devel-matchedAlmaLinux:10 From an advisory covering 35 CVEs |
before 6.12.0-211.63.1.el10_2 | 6.12.0-211.63.1.el10_2 |
kernel-64k-modulesAlmaLinux:10 From an advisory covering 35 CVEs |
before 6.12.0-211.63.1.el10_2 | 6.12.0-211.63.1.el10_2 |
kernel-64k-modules-coreAlmaLinux:10 From an advisory covering 35 CVEs |
before 6.12.0-211.63.1.el10_2 | 6.12.0-211.63.1.el10_2 |
kernel-64k-modules-extraAlmaLinux:10 From an advisory covering 35 CVEs |
before 6.12.0-211.63.1.el10_2 | 6.12.0-211.63.1.el10_2 |
kernel-abi-stablelistsAlmaLinux:10 From an advisory covering 35 CVEs |
before 6.12.0-211.63.1.el10_2 | 6.12.0-211.63.1.el10_2 |
kernel-coreAlmaLinux:10 From an advisory covering 35 CVEs |
before 6.12.0-211.63.1.el10_2 | 6.12.0-211.63.1.el10_2 |
kernelAzure Linux:3 |
before 6.6.145.2-1 | 6.6.145.2-1 |
linux-ltsAlpaquita:23 |
6.1.177-r0 up to 6.1.182-r0 | 6.1.182-r0 |
linux-ltsAlpaquita:25 |
6.12.92-r0 up to 6.12.95-r0 | 6.12.95-r0 |
linux-ltsAlpaquita:stream |
6.18.35-r1 up to 6.18.38-r0 | 6.18.38-r0 |
bpftoolTuxCare:CentOS:7 From an advisory covering 53 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els4 | 3.10.0-1160.156.1.el7.tuxcare.els4 |
kernelTuxCare:CentOS:7 From an advisory covering 53 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els4 | 3.10.0-1160.156.1.el7.tuxcare.els4 |
kernel-debugTuxCare:CentOS:7 From an advisory covering 53 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els4 | 3.10.0-1160.156.1.el7.tuxcare.els4 |
kernel-debug-develTuxCare:CentOS:7 From an advisory covering 53 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els4 | 3.10.0-1160.156.1.el7.tuxcare.els4 |
kernel-develTuxCare:CentOS:7 From an advisory covering 53 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els4 | 3.10.0-1160.156.1.el7.tuxcare.els4 |
kernel-docTuxCare:CentOS:7 From an advisory covering 53 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els4 | 3.10.0-1160.156.1.el7.tuxcare.els4 |
kernel-headersTuxCare:CentOS:7 From an advisory covering 53 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els4 | 3.10.0-1160.156.1.el7.tuxcare.els4 |
kernel-toolsTuxCare:CentOS:7 From an advisory covering 53 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els4 | 3.10.0-1160.156.1.el7.tuxcare.els4 |
kernel-tools-libsTuxCare:CentOS:7 From an advisory covering 53 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els4 | 3.10.0-1160.156.1.el7.tuxcare.els4 |
kernel-tools-libs-develTuxCare:CentOS:7 From an advisory covering 53 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els4 | 3.10.0-1160.156.1.el7.tuxcare.els4 |
perfTuxCare:CentOS:7 From an advisory covering 53 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els4 | 3.10.0-1160.156.1.el7.tuxcare.els4 |
python-perfTuxCare:CentOS:7 From an advisory covering 53 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els4 | 3.10.0-1160.156.1.el7.tuxcare.els4 |
bpftoolTuxCare:OracleLinux:7 From an advisory covering 53 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els4 | 3.10.0-1160.156.1.el7.tuxcare.els4 |
kernelTuxCare:OracleLinux:7 From an advisory covering 53 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els4 | 3.10.0-1160.156.1.el7.tuxcare.els4 |
kernel-debugTuxCare:OracleLinux:7 From an advisory covering 53 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els4 | 3.10.0-1160.156.1.el7.tuxcare.els4 |
kernel-debug-develTuxCare:OracleLinux:7 From an advisory covering 53 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els4 | 3.10.0-1160.156.1.el7.tuxcare.els4 |
kernel-develTuxCare:OracleLinux:7 From an advisory covering 53 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els4 | 3.10.0-1160.156.1.el7.tuxcare.els4 |
kernel-docTuxCare:OracleLinux:7 From an advisory covering 53 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els4 | 3.10.0-1160.156.1.el7.tuxcare.els4 |
kernel-headersTuxCare:OracleLinux:7 From an advisory covering 53 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els4 | 3.10.0-1160.156.1.el7.tuxcare.els4 |
kernel-toolsTuxCare:OracleLinux:7 From an advisory covering 53 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els4 | 3.10.0-1160.156.1.el7.tuxcare.els4 |
kernel-tools-libsTuxCare:OracleLinux:7 From an advisory covering 53 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els4 | 3.10.0-1160.156.1.el7.tuxcare.els4 |
kernel-tools-libs-develTuxCare:OracleLinux:7 From an advisory covering 53 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els4 | 3.10.0-1160.156.1.el7.tuxcare.els4 |
perfTuxCare:OracleLinux:7 From an advisory covering 53 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els4 | 3.10.0-1160.156.1.el7.tuxcare.els4 |
python-perfTuxCare:OracleLinux:7 From an advisory covering 53 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els4 | 3.10.0-1160.156.1.el7.tuxcare.els4 |
bpftoolTuxCare:RHEL:7 From an advisory covering 53 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els4 | 3.10.0-1160.156.1.el7.tuxcare.els4 |
kernelTuxCare:RHEL:7 From an advisory covering 53 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els4 | 3.10.0-1160.156.1.el7.tuxcare.els4 |
kernel-debugTuxCare:RHEL:7 From an advisory covering 53 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els4 | 3.10.0-1160.156.1.el7.tuxcare.els4 |
kernel-debug-develTuxCare:RHEL:7 From an advisory covering 53 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els4 | 3.10.0-1160.156.1.el7.tuxcare.els4 |
kernel-develTuxCare:RHEL:7 From an advisory covering 53 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els4 | 3.10.0-1160.156.1.el7.tuxcare.els4 |
kernel-docTuxCare:RHEL:7 From an advisory covering 53 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els4 | 3.10.0-1160.156.1.el7.tuxcare.els4 |
kernel-headersTuxCare:RHEL:7 From an advisory covering 53 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els4 | 3.10.0-1160.156.1.el7.tuxcare.els4 |
kernel-toolsTuxCare:RHEL:7 From an advisory covering 53 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els4 | 3.10.0-1160.156.1.el7.tuxcare.els4 |
kernel-tools-libsTuxCare:RHEL:7 From an advisory covering 53 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els4 | 3.10.0-1160.156.1.el7.tuxcare.els4 |
kernel-tools-libs-develTuxCare:RHEL:7 From an advisory covering 53 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els4 | 3.10.0-1160.156.1.el7.tuxcare.els4 |
perfTuxCare:RHEL:7 From an advisory covering 53 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els4 | 3.10.0-1160.156.1.el7.tuxcare.els4 |
python-perfTuxCare:RHEL:7 From an advisory covering 53 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els4 | 3.10.0-1160.156.1.el7.tuxcare.els4 |
bpftoolTuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs |
before 4.18.0-553.6.1.el8_10.tuxcare.els30 | 4.18.0-553.6.1.el8_10.tuxcare.els30 |
kernelTuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs |
before 4.18.0-553.6.1.el8_10.tuxcare.els30 | 4.18.0-553.6.1.el8_10.tuxcare.els30 |
kernel-coreTuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs |
before 4.18.0-553.6.1.el8_10.tuxcare.els30 | 4.18.0-553.6.1.el8_10.tuxcare.els30 |
kernel-cross-headersTuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs |
before 4.18.0-553.6.1.el8_10.tuxcare.els30 | 4.18.0-553.6.1.el8_10.tuxcare.els30 |
kernel-debugTuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs |
before 4.18.0-553.6.1.el8_10.tuxcare.els30 | 4.18.0-553.6.1.el8_10.tuxcare.els30 |
kernel-debug-coreTuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs |
before 4.18.0-553.6.1.el8_10.tuxcare.els30 | 4.18.0-553.6.1.el8_10.tuxcare.els30 |
kernel-debug-develTuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs |
before 4.18.0-553.6.1.el8_10.tuxcare.els30 | 4.18.0-553.6.1.el8_10.tuxcare.els30 |
kernel-debug-modulesTuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs |
before 4.18.0-553.6.1.el8_10.tuxcare.els30 | 4.18.0-553.6.1.el8_10.tuxcare.els30 |
kernel-debug-modules-extraTuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs |
before 4.18.0-553.6.1.el8_10.tuxcare.els30 | 4.18.0-553.6.1.el8_10.tuxcare.els30 |
kernel-debug-modules-internalTuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs |
before 4.18.0-553.6.1.el8_10.tuxcare.els30 | 4.18.0-553.6.1.el8_10.tuxcare.els30 |
kernel-develTuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs |
before 4.18.0-553.6.1.el8_10.tuxcare.els30 | 4.18.0-553.6.1.el8_10.tuxcare.els30 |
kernel-headersTuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs |
before 4.18.0-553.6.1.el8_10.tuxcare.els30 | 4.18.0-553.6.1.el8_10.tuxcare.els30 |
kernel-ipaclones-internalTuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs |
before 4.18.0-553.6.1.el8_10.tuxcare.els30 | 4.18.0-553.6.1.el8_10.tuxcare.els30 |
kernel-modulesTuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs |
before 4.18.0-553.6.1.el8_10.tuxcare.els30 | 4.18.0-553.6.1.el8_10.tuxcare.els30 |
kernel-modules-extraTuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs |
before 4.18.0-553.6.1.el8_10.tuxcare.els30 | 4.18.0-553.6.1.el8_10.tuxcare.els30 |
kernel-modules-internalTuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs |
before 4.18.0-553.6.1.el8_10.tuxcare.els30 | 4.18.0-553.6.1.el8_10.tuxcare.els30 |
KernelLinux |
3.16.0 up to 5.10.261, 5.11.0 up to 5.15.212, 5.16.0 up to 6.1.178, 6.2.0 up to 6.6.145, 6.7.0 up to 6.12.95, 6.13.0 up to 6.18.38, 6.19.0 up to 7.1.3 | 5.10.2615.15.2126.1.1786.6.1456.12.956.18.387.1.3 |
linuxDebian:12 |
before 6.1.180-1, plus listed versions 6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1 Show 45 moreShow less6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.170-16.1.170-26.1.170-36.1.172-16.1.174-16.1.176-16.1.177-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-1 |
6.1.180-1 |
linuxDebian:13 |
before 6.12.95-1, plus listed versions 6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-1 Show 24 moreShow less6.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-1~bpo12+1 |
6.12.95-1 |
linuxDebian:14 |
before 7.1.3-1, plus listed versions 6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1 Show 45 moreShow less6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1 |
7.1.3-1 |
kernelMageia:10 From an advisory covering 246 CVEs |
before 6.18.39-1.mga10 | 6.18.39-1.mga10 |
kmod-virtualboxMageia:10 From an advisory covering 246 CVEs |
before 7.2.8-28.mga10 | 7.2.8-28.mga10 |
kmod-xtables-addonsMageia:10 From an advisory covering 246 CVEs |
before 3.30-3.mga10 | 3.30-3.mga10 |
bluezMageia:10 From an advisory covering 246 CVEs |
before 5.87-1.mga10 | 5.87-1.mga10 |
wireless-regdbMageia:10 From an advisory covering 246 CVEs |
before 20260530-1.mga10 | 20260530-1.mga10 |
kernel-firmwareMageia:10 From an advisory covering 246 CVEs |
before 20260622-1.mga10 | 20260622-1.mga10 |
drakx-installer-imagesMageia:10 From an advisory covering 246 CVEs |
before 2.94-54.mga10 | 2.94-54.mga10 |
kernel-firmware-nonfreeMageia:10 From an advisory covering 246 CVEs |
before 20260622-1.mga10.nonfree | 20260622-1.mga10.nonfree |
radeon-firmwareMageia:10 From an advisory covering 246 CVEs |
before 20260622-1.mga10.nonfree | 20260622-1.mga10.nonfree |
drakx-installer-imagesMageia:10 From an advisory covering 246 CVEs |
before 2.94-54.mga10.nonfree | 2.94-54.mga10.nonfree |
kmod-nvidia-current-wopengpuMageia:10 From an advisory covering 246 CVEs |
before 580.159.04-37.mga10.nonfree | 580.159.04-37.mga10.nonfree |
kernelopenEuler:22.03-LTS-SP4 From an advisory covering 27 CVEs |
before 5.10.0-330.0.0.231.oe2203sp4 | 5.10.0-330.0.0.231.oe2203sp4 |
kernel-rtRed Hat:enterprise_linux:8::nfv From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.rt7.512.el8_10 | 0:4.18.0-553.171.1.rt7.512.el8_10 |
kernel-rt-coreRed Hat:enterprise_linux:8::nfv From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.rt7.512.el8_10 | 0:4.18.0-553.171.1.rt7.512.el8_10 |
kernel-rt-debugRed Hat:enterprise_linux:8::nfv From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.rt7.512.el8_10 | 0:4.18.0-553.171.1.rt7.512.el8_10 |
kernel-rt-debug-coreRed Hat:enterprise_linux:8::nfv From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.rt7.512.el8_10 | 0:4.18.0-553.171.1.rt7.512.el8_10 |
kernel-rt-debug-debuginfoRed Hat:enterprise_linux:8::nfv From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.rt7.512.el8_10 | 0:4.18.0-553.171.1.rt7.512.el8_10 |
kernel-rt-debug-develRed Hat:enterprise_linux:8::nfv From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.rt7.512.el8_10 | 0:4.18.0-553.171.1.rt7.512.el8_10 |
kernel-rt-debug-kvmRed Hat:enterprise_linux:8::nfv From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.rt7.512.el8_10 | 0:4.18.0-553.171.1.rt7.512.el8_10 |
kernel-rt-debug-modulesRed Hat:enterprise_linux:8::nfv From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.rt7.512.el8_10 | 0:4.18.0-553.171.1.rt7.512.el8_10 |
kernel-rt-debug-modules-extraRed Hat:enterprise_linux:8::nfv From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.rt7.512.el8_10 | 0:4.18.0-553.171.1.rt7.512.el8_10 |
kernel-rt-debuginfoRed Hat:enterprise_linux:8::nfv From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.rt7.512.el8_10 | 0:4.18.0-553.171.1.rt7.512.el8_10 |
kernel-rt-debuginfo-common-x86_64Red Hat:enterprise_linux:8::nfv From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.rt7.512.el8_10 | 0:4.18.0-553.171.1.rt7.512.el8_10 |
kernel-rt-develRed Hat:enterprise_linux:8::nfv From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.rt7.512.el8_10 | 0:4.18.0-553.171.1.rt7.512.el8_10 |
kernel-rt-kvmRed Hat:enterprise_linux:8::nfv From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.rt7.512.el8_10 | 0:4.18.0-553.171.1.rt7.512.el8_10 |
kernel-rt-modulesRed Hat:enterprise_linux:8::nfv From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.rt7.512.el8_10 | 0:4.18.0-553.171.1.rt7.512.el8_10 |
kernel-rt-modules-extraRed Hat:enterprise_linux:8::nfv From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.rt7.512.el8_10 | 0:4.18.0-553.171.1.rt7.512.el8_10 |
kernel-rtRed Hat:enterprise_linux:8::realtime From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.rt7.512.el8_10 | 0:4.18.0-553.171.1.rt7.512.el8_10 |
kernel-rt-coreRed Hat:enterprise_linux:8::realtime From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.rt7.512.el8_10 | 0:4.18.0-553.171.1.rt7.512.el8_10 |
kernel-rt-debugRed Hat:enterprise_linux:8::realtime From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.rt7.512.el8_10 | 0:4.18.0-553.171.1.rt7.512.el8_10 |
kernel-rt-debug-coreRed Hat:enterprise_linux:8::realtime From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.rt7.512.el8_10 | 0:4.18.0-553.171.1.rt7.512.el8_10 |
kernel-rt-debug-debuginfoRed Hat:enterprise_linux:8::realtime From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.rt7.512.el8_10 | 0:4.18.0-553.171.1.rt7.512.el8_10 |
kernel-rt-debug-develRed Hat:enterprise_linux:8::realtime From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.rt7.512.el8_10 | 0:4.18.0-553.171.1.rt7.512.el8_10 |
kernel-rt-debug-modulesRed Hat:enterprise_linux:8::realtime From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.rt7.512.el8_10 | 0:4.18.0-553.171.1.rt7.512.el8_10 |
kernel-rt-debug-modules-extraRed Hat:enterprise_linux:8::realtime From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.rt7.512.el8_10 | 0:4.18.0-553.171.1.rt7.512.el8_10 |
kernel-rt-debuginfoRed Hat:enterprise_linux:8::realtime From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.rt7.512.el8_10 | 0:4.18.0-553.171.1.rt7.512.el8_10 |
kernel-rt-debuginfo-common-x86_64Red Hat:enterprise_linux:8::realtime From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.rt7.512.el8_10 | 0:4.18.0-553.171.1.rt7.512.el8_10 |
kernel-rt-develRed Hat:enterprise_linux:8::realtime From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.rt7.512.el8_10 | 0:4.18.0-553.171.1.rt7.512.el8_10 |
kernel-rt-modulesRed Hat:enterprise_linux:8::realtime From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.rt7.512.el8_10 | 0:4.18.0-553.171.1.rt7.512.el8_10 |
kernel-rt-modules-extraRed Hat:enterprise_linux:8::realtime From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.rt7.512.el8_10 | 0:4.18.0-553.171.1.rt7.512.el8_10 |
bpftoolRed Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.el8_10 | 0:4.18.0-553.171.1.el8_10 |
bpftool-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.el8_10 | 0:4.18.0-553.171.1.el8_10 |
kernelRed Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.el8_10 | 0:4.18.0-553.171.1.el8_10 |
kernel-abi-stablelistsRed Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.el8_10 | 0:4.18.0-553.171.1.el8_10 |
kernel-coreRed Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.el8_10 | 0:4.18.0-553.171.1.el8_10 |
kernel-debugRed Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.el8_10 | 0:4.18.0-553.171.1.el8_10 |
kernel-debug-coreRed Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.el8_10 | 0:4.18.0-553.171.1.el8_10 |
kernel-debug-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.el8_10 | 0:4.18.0-553.171.1.el8_10 |
kernel-debug-develRed Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.el8_10 | 0:4.18.0-553.171.1.el8_10 |
kernel-debug-modulesRed Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.el8_10 | 0:4.18.0-553.171.1.el8_10 |
kernel-debug-modules-extraRed Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.el8_10 | 0:4.18.0-553.171.1.el8_10 |
kernel-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.el8_10 | 0:4.18.0-553.171.1.el8_10 |
kernel-debuginfo-common-aarch64Red Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.el8_10 | 0:4.18.0-553.171.1.el8_10 |
kernel-debuginfo-common-ppc64leRed Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.el8_10 | 0:4.18.0-553.171.1.el8_10 |
kernel-debuginfo-common-s390xRed Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.el8_10 | 0:4.18.0-553.171.1.el8_10 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.el8_10 | 0:4.18.0-553.171.1.el8_10 |
kernel-develRed Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.el8_10 | 0:4.18.0-553.171.1.el8_10 |
kernel-docRed Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.el8_10 | 0:4.18.0-553.171.1.el8_10 |
kernel-modulesRed Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.el8_10 | 0:4.18.0-553.171.1.el8_10 |
kernel-modules-extraRed Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.el8_10 | 0:4.18.0-553.171.1.el8_10 |
kernel-toolsRed Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.el8_10 | 0:4.18.0-553.171.1.el8_10 |
kernel-tools-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.el8_10 | 0:4.18.0-553.171.1.el8_10 |
kernel-tools-libsRed Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.el8_10 | 0:4.18.0-553.171.1.el8_10 |
kernel-zfcpdumpRed Hat:enterprise_linux:8::baseos From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.el8_10 | 0:4.18.0-553.171.1.el8_10 |
kernel-rtRocky Linux:8 From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.rt7.512.el8_10 | 0:4.18.0-553.171.1.rt7.512.el8_10 |
kernelRocky Linux:8 From an advisory covering 29 CVEs |
before 0:4.18.0-553.171.1.el8_10 | 0:4.18.0-553.171.1.el8_10 |
linuxRoot:Debian:11 |
before 5.10.262-1.aikido.113 | 5.10.262-1.aikido.1135.10.262-1.aikido.114 |
rootio-linuxRoot:Debian:11 |
before 5.10.262-1.aikido.113 | 5.10.262-1.aikido.1135.10.262-1.aikido.114 |
linuxRoot:Debian:12 |
before 6.1.190-1.aikido.167 | 6.1.190-1.aikido.167 |
rootio-linuxRoot:Debian:12 |
before 6.1.190-1.aikido.167 | 6.1.190-1.aikido.167 |
linuxRoot:Ubuntu:22.04 |
before 5.15.0-203.213.aikido.119 | 5.15.0-203.213.aikido.119 |
rootio-linuxRoot:Ubuntu:22.04 |
before 5.15.0-203.213.aikido.119 | 5.15.0-203.213.aikido.119 |
kernel-obs-buildSUSE:Linux Micro Extras 6.2 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-symsSUSE:Linux Micro Extras 6.2 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-64kbSUSE:Linux Micro 6.2 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-defaultSUSE:Linux Micro 6.2 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-default-baseSUSE:Linux Micro 6.2 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1.160000.2.19 | 6.12.0-160000.37.1.160000.2.19 |
kernel-rtSUSE:Linux Micro 6.2 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-sourceSUSE:Linux Micro 6.2 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-rtSUSE:Linux Micro 6.1 From an advisory covering 648 CVEs |
before 6.4.0-51.1 | 6.4.0-51.1 |
kernel-source-rtSUSE:Linux Micro 6.1 From an advisory covering 648 CVEs |
before 6.4.0-51.1 | 6.4.0-51.1 |
kernel-defaultSUSE:Linux Micro 6.1 From an advisory covering 647 CVEs |
before 6.4.0-51.1 | 6.4.0-51.1 |
kernel-kvmsmallSUSE:Linux Micro 6.1 From an advisory covering 647 CVEs |
before 6.4.0-51.1 | 6.4.0-51.1 |
kernel-sourceSUSE:Linux Micro 6.1 From an advisory covering 647 CVEs |
before 6.4.0-51.1 | 6.4.0-51.1 |
kernel-64kbSUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-azureSUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-defaultSUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-default-baseSUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1.160000.2.19 | 6.12.0-160000.37.1.160000.2.19 |
kernel-docsSUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-kvmsmallSUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-obs-qaSUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-sourceSUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-symsSUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-zfcpdumpSUSE:Linux Enterprise Server 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-64kbSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-azureSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-defaultSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-default-baseSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1.160000.2.19 | 6.12.0-160000.37.1.160000.2.19 |
kernel-docsSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-kvmsmallSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-obs-qaSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-sourceSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-symsSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-zfcpdumpSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-defaultSUSE:Linux Enterprise High Availability Extension 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-rtSUSE:Linux Micro 6.0 From an advisory covering 648 CVEs |
before 6.4.0-51.1 | 6.4.0-51.1 |
kernel-source-rtSUSE:Linux Micro 6.0 From an advisory covering 648 CVEs |
before 6.4.0-51.1 | 6.4.0-51.1 |
kernel-defaultSUSE:Linux Micro 6.0 From an advisory covering 647 CVEs |
before 6.4.0-51.1 | 6.4.0-51.1 |
kernel-kvmsmallSUSE:Linux Micro 6.0 From an advisory covering 647 CVEs |
before 6.4.0-51.1 | 6.4.0-51.1 |
kernel-sourceSUSE:Linux Micro 6.0 From an advisory covering 647 CVEs |
before 6.4.0-51.1 | 6.4.0-51.1 |
kernel-defaultSUSE:Linux Enterprise Micro 5.3 From an advisory covering 59 CVEs |
before 5.14.21-150400.24.235.1 | 5.14.21-150400.24.235.1 |
kernel-default-baseSUSE:Linux Enterprise Micro 5.3 From an advisory covering 59 CVEs |
before 5.14.21-150400.24.235.1.150400.24.118.3 | 5.14.21-150400.24.235.1.150400.24.118.3 |
kernel-sourceSUSE:Linux Enterprise Micro 5.3 From an advisory covering 59 CVEs |
before 5.14.21-150400.24.235.1 | 5.14.21-150400.24.235.1 |
kernel-defaultSUSE:Linux Enterprise Micro 5.4 From an advisory covering 59 CVEs |
before 5.14.21-150400.24.235.1 | 5.14.21-150400.24.235.1 |
kernel-default-baseSUSE:Linux Enterprise Micro 5.4 From an advisory covering 59 CVEs |
before 5.14.21-150400.24.235.1.150400.24.118.3 | 5.14.21-150400.24.235.1.150400.24.118.3 |
kernel-sourceSUSE:Linux Enterprise Micro 5.4 From an advisory covering 59 CVEs |
before 5.14.21-150400.24.235.1 | 5.14.21-150400.24.235.1 |
kernel-defaultSUSE:Linux Enterprise Live Patching 15 SP4 From an advisory covering 59 CVEs |
before 5.14.21-150400.24.235.1 | 5.14.21-150400.24.235.1 |
kernel-livepatch-SLE15-SP4_Update_58SUSE:Linux Enterprise Live Patching 15 SP4 From an advisory covering 59 CVEs |
before 1-150400.9.7.1 | 1-150400.9.7.1 |
kernel-defaultSUSE:Linux Enterprise High Availability Extension 15 SP4 From an advisory covering 59 CVEs |
before 5.14.21-150400.24.235.1 | 5.14.21-150400.24.235.1 |
kernel-64kbSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 59 CVEs |
before 5.14.21-150400.24.235.1 | 5.14.21-150400.24.235.1 |
kernel-defaultSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 59 CVEs |
before 5.14.21-150400.24.235.1 | 5.14.21-150400.24.235.1 |
kernel-default-baseSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 59 CVEs |
before 5.14.21-150400.24.235.1.150400.24.118.3 | 5.14.21-150400.24.235.1.150400.24.118.3 |
kernel-docsSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 59 CVEs |
before 5.14.21-150400.24.235.1 | 5.14.21-150400.24.235.1 |
linux-awsUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9 Show 45 moreShow less4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80 |
None known |
linux-azureUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2 Show 45 moreShow less4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1 |
None known |
linux-lts-xenialUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1 Show 45 moreShow less4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1 |
None known |
linuxUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11 Show 45 moreShow less4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96 |
None known |
linux-awsUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18 Show 45 moreShow less4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93 |
None known |
linux-aws-hweUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1 Show 45 moreShow less4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1 |
None known |
linux-azureUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15 Show 45 moreShow less4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71 |
None known |
linux-gcpUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9 Show 45 moreShow less4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1 |
None known |
linux-hweUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1 Show 45 moreShow less4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1 |
None known |
linux-hwe-edgeUbuntu:16.04:LTS |
All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1 |
None known |
linux-kvmUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15 Show 45 moreShow less4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.674.4.0-1062.694.4.0-1063.704.4.0-1064.714.4.0-1065.724.4.0-1066.734.4.0-1068.754.4.0-1069.764.4.0-1070.774.4.0-1071.784.4.0-1075.824.4.0-1076.834.4.0-1077.84 |
None known |
linux-oracleUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1 Show 45 moreShow less4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1 |
None known |
linux-fipsUbuntu:Pro:FIPS-updates:16.04:LTS |
All versions, plus listed versions 4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13 Show 45 moreShow less4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78 |
None known |
linux-fipsUbuntu:Pro:FIPS:16.04:LTS |
All versions, plus listed versions 4.4.0-1001.14.4.0-1002.2 |
None known |
linuxUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11 Show 45 moreShow less4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107 |
None known |
linux-awsUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7 Show 45 moreShow less4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87 |
None known |
linux-aws-5.0Ubuntu:18.04:LTS |
All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30 |
None known |
linux-aws-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37 |
None known |
linux-aws-5.4Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2 |
None known |
linux-azureUbuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38 |
None known |
linux-azure-4.15Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102 Show 45 moreShow less4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176 |
None known |
linux-azure-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36 |
None known |
linux-azure-5.4Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1 Show 45 moreShow less5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1 |
None known |
linux-azure-edgeUbuntu:18.04:LTS |
All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2 |
None known |
linux-gcpUbuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35 |
None known |
linux-gcp-4.15Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92 Show 45 moreShow less4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161 |
None known |
linux-gcp-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1 |
None known |
linux-gcp-5.4Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2 |
None known |
linux-gke-4.15Ubuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84 |
None known |
linux-gke-5.4Ubuntu:18.04:LTS |
All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1 |
None known |
linux-gkeop-5.4Ubuntu:18.04:LTS |
All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1 |
None known |
linux-hweUbuntu:18.04:LTS |
All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72 |
None known |
linux-hwe-5.4Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2 Show 45 moreShow less5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1 |
None known |
linux-hwe-edgeUbuntu:18.04:LTS |
All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2 |
None known |
linux-ibm-5.4Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1 Show 45 moreShow less5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1 |
None known |
linux-kvmUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8 Show 45 moreShow less4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83 |
None known |
linux-oemUbuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114 |
None known |
linux-oracleUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13 Show 45 moreShow less4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88 |
None known |
linux-oracle-5.0Ubuntu:18.04:LTS |
All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19 |
None known |
linux-oracle-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1 |
None known |
linux-oracle-5.4Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1 |
None known |
linux-raspi-5.4Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1 Show 45 moreShow less5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1 |
None known |
linux-aws-fipsUbuntu:Pro:FIPS-updates:18.04:LTS |
All versions, plus listed versions 4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24 Show 45 moreShow less4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93 |
None known |
linux-azure-fipsUbuntu:Pro:FIPS-updates:18.04:LTS |
All versions, plus listed versions 4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10 Show 45 moreShow less4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80 |
None known |
linux-fipsUbuntu:Pro:FIPS-updates:18.04:LTS |
All versions, plus listed versions 4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42 Show 45 moreShow less4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110 |
None known |
linux-gcp-fipsUbuntu:Pro:FIPS-updates:18.04:LTS |
All versions, plus listed versions 4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21 Show 45 moreShow less4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.794.15.0-2075.804.15.0-2076.814.15.0-2077.83 |
None known |
linux-aws-fipsUbuntu:Pro:FIPS:18.04:LTS |
All versions, plus listed versions 4.15.0-2000.4 |
None known |
linux-azure-fipsUbuntu:Pro:FIPS:18.04:LTS |
All versions, plus listed versions 4.15.0-1002.2 |
None known |
linux-fipsUbuntu:Pro:FIPS:18.04:LTS |
All versions, plus listed versions 4.15.0-1011.12 |
None known |
linux-gcp-fipsUbuntu:Pro:FIPS:18.04:LTS |
All versions, plus listed versions 4.15.0-1001.1 |
None known |
linuxUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25 Show 45 moreShow less5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110 |
None known |
kernel-sourceopenSUSE:Tumbleweed From an advisory covering 68 CVEs |
before 7.1.4-1.1 | 7.1.4-1.1 |
dtb-aarch64openSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-64kbopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-azureopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-defaultopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-default-baseopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1.160000.2.19 | 6.12.0-160000.37.1.160000.2.19 |
kernel-docsopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-kvmsmallopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-obs-buildopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-obs-qaopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-rtopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-sourceopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-symsopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
kernel-zfcpdumpopenSUSE:Leap 16.0 From an advisory covering 894 CVEs |
before 6.12.0-160000.37.1 | 6.12.0-160000.37.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | OSV | |
| affected | OSV | |
| affected, aliases, references | OSV | |
| affected, facts, references | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-63829 is a high vulnerability (CVSS 8.8) in Linux, published July 19, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.15%, the 3rd percentile. Fixed in kernel 6.6.145.2-1.
References
git.kernel.org/stable/c/19275943d8fe903eb7b9aa53e380e41efd042ada
Show 194 moreShow less
nvd.nist.gov/vuln/detail/CVE-2026-63829
github.com/advisories/GHSA-6wc5-2mjj-pmr6
access.redhat.com/errata/RHSA-2026:75746
bugzilla.redhat.com/2404123
errata.almalinux.org/8/ALSA-2026-75746.html
docs.bell-sw.com/security/cves/CVE-2026-63829
errata.tuxcare.com/els_os/centos7els/CLSA-2026-1789037015.html
security-tracker.debian.org/tracker/CVE-2026-63829
advisories.mageia.org/MGASA-2026-0312.html
bugs.mageia.org/show_bug.cgi?id=35976
cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.18.36
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2026-3532
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_75746.json
cve.org/CVERecord?id=CVE-2022-50756
lore.kernel.org/linux-cve-announce/2025122453-CVE-2022-50756-ce43@gregkh/T
errata.rockylinux.org/RLSA-2026:75746
suse.com/support/update/announcement/2026/suse-su-202623066-1
bugzilla.suse.com/1185845
ubuntu.com/security/CVE-2026-63829
This page doesn't list everything
Left out here: 664 package rows, 2,299 versions, 5,948 references and the rest of 32 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 14 source records.