Every CVE Search/ Get API key

CVE-2026-63920

ipv6: validate extension header length before copying to cmsg

7.1 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

ipv6: validate extension header length before copying to cmsg

ip6_datagram_recv_specific_ctl() builds IPV6_{HOPOPTS,DSTOPTS,RTHDR} cmsgs (and their IPV6_2292* legacy counterparts) by trusting the on-wire hdrlen byte (ptr[1]) when computing the put_cmsg() length. The length was validated only at parse time (ipv6_parse_hopopts(), etc.). An nftables payload-write expression can rewrite hdrlen after parsing and before the skb reaches recvmsg; the write itself is in-bounds but put_cmsg() then reads up to ((hdrlen+1) << 3) = 2040 bytes from an 8-byte header. nftables is reachable from an unprivileged user namespace, so this is an unprivileged slab-out-of-bounds read:

BUG: KASAN: slab-out-of-bounds in put_cmsg+0x3ac/0x540 put_cmsg+0x3ac/0x540 udpv6_recvmsg+0xca0/0x1250 sock_recvmsg+0xdf/0x190 ____sys_recvmsg+0x1b1/0x620

Add ipv6_get_exthdr_len() which validates that at least two bytes are accessible before reading the hdrlen field, then checks the computed length against skb_tail_pointer(skb), returning 0 on failure. Extension headers are kept in the linear skb area by pskb_may_pull() during input, so skb_tail_pointer() is the correct bound.

Use ipv6_get_exthdr_len() at all non-AH call sites: the five standalone cmsg blocks (HbH, 2292HbH, 2292DSTOPTS x2, 2292RTHDR) and the three standard cases in the extension-header walk loop (DSTOPTS, ROUTING, default). AH retains an inline bounds check because its length formula differs ((ptr[1]+2)<<2).

The walk loop also gets a pre-read bounds check at the top to validate ptr before any case accesses ptr[0] or ptr[1].

When the walk loop detects a corrupted header, return from the function instead of continuing to process later socket options.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
High

Exploit likelihood

0.17%Unchanged since Jul 20, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.1

ipv6: validate extension header length before copying to cmsg

In the Linux kernel, the following vulnerability has been resolved:

ipv6: validate extension header length before copying to cmsg

ip6_datagram_recv_specific_ctl() builds IPV6_{HOPOPTS,DSTOPTS,RTHDR} cmsgs (and their IPV6_2292* legacy counterparts) by trusting the on-wire hdrlen byte (ptr[1]) when computing the put_cmsg() length. The length was validated only at parse time (ipv6_parse_hopopts(), etc.). An nftables payload-write expression can rewrite hdrlen after parsing and before the skb reaches recvmsg; the write itself is in-bounds but put_cmsg() then reads up to ((hdrlen+1) << 3) = 2040 bytes from an 8-byte header. nftables is reachable from an unprivileged user namespace, so this is an unprivileged slab-out-of-bounds read:

BUG: KASAN: slab-out-of-bounds in put_cmsg+0x3ac/0x540 put_cmsg+0x3ac/0x540 udpv6_recvmsg+0xca0/0x1250 sock_recvmsg+0xdf/0x190 ____sys_recvmsg+0x1b1/0x620

Add ipv6_get_exthdr_len() which validates that at least two bytes are accessible before reading the hdrlen field, then checks the computed length against skb_tail_pointer(skb), returning 0 on failure. Extension headers are kept in the linear skb area by pskb_may_pull() during input, so skb_tail_pointer() is the correct bound.

Use ipv6_get_exthdr_len() at all non-AH call sites: the five standalone cmsg blocks (HbH, 2292HbH, 2292DSTOPTS x2, 2292RTHDR) and the three standard cases in the extension-header walk loop (DSTOPTS, ROUTING, default). AH retains an inline bounds check because its length formula differs ((ptr[1]+2)<<2).

The walk loop also gets a pre-read bounds check at the top to validate ptr before any case accesses ptr[0] or ptr[1].

When the walk loop detects a corrupted header, return from the function instead of continuing to process later socket options.

Record
CVE-2026-63920
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
EUVDEUVD-2026-45693 7.1

In the Linux kernel, the following vulnerability has been resolved:

ipv6: validate extension header length before copying to cmsg

ip6_datagram_recv_specific_ctl() builds IPV6_{HOPOPTS,DSTOPTS,RTHDR} cmsgs (and their IPV6_2292* legacy counterparts) by trusting the on-wire hdrlen byte (ptr[1]) when computing the put_cmsg() length. The length was validated only at parse time (ipv6_parse_hopopts(), etc.). An nftables payload-write expression can rewrite hdrlen after parsing and before the skb reaches recvmsg; the write itself is in-bounds but put_cmsg() then reads up to ((hdrlen+1) << 3) = 2040 bytes from an 8-byte header. nftables is reachable from an unprivileged user namespace, so this is an unprivileged slab-out-of-bounds read:

BUG: KASAN: slab-out-of-bounds in put_cmsg+0x3ac/0x540 put_cmsg+0x3ac/0x540 udpv6_recvmsg+0xca0/0x1250 sock_recvmsg+0xdf/0x190 ____sys_recvmsg+0x1b1/0x620

Add ipv6_get_exthdr_len() which validates that at least two bytes are accessible before reading the hdrlen field, then checks the computed length against skb_tail_pointer(skb), returning 0 on failure. Extension headers are kept in the linear skb area by pskb_may_pull() during input, so skb_tail_pointer() is the correct bound.

Use ipv6_get_exthdr_len() at all non-AH call sites: the five standalone cmsg blocks (HbH, 2292HbH, 2292DSTOPTS x2, 2292RTHDR) and the three standard cases in the extension-header walk loop (DSTOPTS, ROUTING, default). AH retains an inline bounds check because its length formula differs ((ptr[1]+2)<<2).

The walk loop also gets a pre-read bounds check at the top to validate ptr before any case accesses ptr[0] or ptr[1].

When the walk loop detects a corrupted header, return from the function instead of continuing to process later socket options.

Record
EUVD-2026-45693
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-8539-cx26-hf58 7.1

In the Linux kernel, the following vulnerability has been resolved: ipv6: validate extension...

In the Linux kernel, the following vulnerability has been resolved:

ipv6: validate extension header length before copying to cmsg

ip6_datagram_recv_specific_ctl() builds IPV6_{HOPOPTS,DSTOPTS,RTHDR} cmsgs (and their IPV6_2292* legacy counterparts) by trusting the on-wire hdrlen byte (ptr[1]) when computing the put_cmsg() length. The length was validated only at parse time (ipv6_parse_hopopts(), etc.). An nftables payload-write expression can rewrite hdrlen after parsing and before the skb reaches recvmsg; the write itself is in-bounds but put_cmsg() then reads up to ((hdrlen+1) << 3) = 2040 bytes from an 8-byte header. nftables is reachable from an unprivileged user namespace, so this is an unprivileged slab-out-of-bounds read:

BUG: KASAN: slab-out-of-bounds in put_cmsg+0x3ac/0x540 put_cmsg+0x3ac/0x540 udpv6_recvmsg+0xca0/0x1250 sock_recvmsg+0xdf/0x190 ____sys_recvmsg+0x1b1/0x620

Add ipv6_get_exthdr_len() which validates that at least two bytes are accessible before reading the hdrlen field, then checks the computed length against skb_tail_pointer(skb), returning 0 on failure. Extension headers are kept in the linear skb area by pskb_may_pull() during input, so skb_tail_pointer() is the correct bound.

Use ipv6_get_exthdr_len() at all non-AH call sites: the five standalone cmsg blocks (HbH, 2292HbH, 2292DSTOPTS x2, 2292RTHDR) and the three standard cases in the extension-header walk loop (DSTOPTS, ROUTING, default). AH retains an inline bounds check because its length formula differs ((ptr[1]+2)<<2).

The walk loop also gets a pre-read bounds check at the top to validate ptr before any case accesses ptr[0] or ptr[1].

When the walk loop detects a corrupted header, return from the function instead of continuing to process later socket options.

Record
GHSA-8539-cx26-hf58
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
NVD 7.1

In the Linux kernel, the following vulnerability has been resolved:

ipv6: validate extension header length before copying to cmsg

ip6_datagram_recv_specific_ctl() builds IPV6_{HOPOPTS,DSTOPTS,RTHDR} cmsgs (and their IPV6_2292* legacy counterparts) by trusting the on-wire hdrlen byte (ptr[1]) when computing the put_cmsg() length. The length was validated only at parse time (ipv6_parse_hopopts(), etc.). An nftables payload-write expression can rewrite hdrlen after parsing and before the skb reaches recvmsg; the write itself is in-bounds but put_cmsg() then reads up to ((hdrlen+1) << 3) = 2040 bytes from an 8-byte header. nftables is reachable from an unprivileged user namespace, so this is an unprivileged slab-out-of-bounds read:

BUG: KASAN: slab-out-of-bounds in put_cmsg+0x3ac/0x540 put_cmsg+0x3ac/0x540 udpv6_recvmsg+0xca0/0x1250 sock_recvmsg+0xdf/0x190 ____sys_recvmsg+0x1b1/0x620

Add ipv6_get_exthdr_len() which validates that at least two bytes are accessible before reading the hdrlen field, then checks the computed length against skb_tail_pointer(skb), returning 0 on failure. Extension headers are kept in the linear skb area by pskb_may_pull() during input, so skb_tail_pointer() is the correct bound.

Use ipv6_get_exthdr_len() at all non-AH call sites: the five standalone cmsg blocks (HbH, 2292HbH, 2292DSTOPTS x2, 2292RTHDR) and the three standard cases in the extension-header walk loop (DSTOPTS, ROUTING, default). AH retains an inline bounds check because its length formula differs ((ptr[1]+2)<<2).

The walk loop also gets a pre-read bounds check at the top to validate ptr before any case accesses ptr[0] or ptr[1].

When the walk loop detects a corrupted header, return from the function instead of continuing to process later socket options.

Record
CVE-2026-63920
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
OSVBELL-CVE-2026-63920 7.1
Record
BELL-CVE-2026-63920
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSV 7.1

ipv6: validate extension header length before copying to cmsg

In the Linux kernel, the following vulnerability has been resolved:

ipv6: validate extension header length before copying to cmsg

ip6_datagram_recv_specific_ctl() builds IPV6_{HOPOPTS,DSTOPTS,RTHDR} cmsgs (and their IPV6_2292* legacy counterparts) by trusting the on-wire hdrlen byte (ptr[1]) when computing the put_cmsg() length. The length was validated only at parse time (ipv6_parse_hopopts(), etc.). An nftables payload-write expression can rewrite hdrlen after parsing and before the skb reaches recvmsg; the write itself is in-bounds but put_cmsg() then reads up to ((hdrlen+1) << 3) = 2040 bytes from an 8-byte header. nftables is reachable from an unprivileged user namespace, so this is an unprivileged slab-out-of-bounds read:

BUG: KASAN: slab-out-of-bounds in put_cmsg+0x3ac/0x540 put_cmsg+0x3ac/0x540 udpv6_recvmsg+0xca0/0x1250 sock_recvmsg+0xdf/0x190 ____sys_recvmsg+0x1b1/0x620

Add ipv6_get_exthdr_len() which validates that at least two bytes are accessible before reading the hdrlen field, then checks the computed length against skb_tail_pointer(skb), returning 0 on failure. Extension headers are kept in the linear skb area by pskb_may_pull() during input, so skb_tail_pointer() is the correct bound.

Use ipv6_get_exthdr_len() at all non-AH call sites: the five standalone cmsg blocks (HbH, 2292HbH, 2292DSTOPTS x2, 2292RTHDR) and the three standard cases in the extension-header walk loop (DSTOPTS, ROUTING, default). AH retains an inline bounds check because its length formula differs ((ptr[1]+2)<<2).

The walk loop also gets a pre-read bounds check at the top to validate ptr before any case accesses ptr[0] or ptr[1].

When the walk loop detects a corrupted header, return from the function instead of continuing to process later socket options.

Record
CVE-2026-63920
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
Show 48 moreShow less
OSVDEBIAN-CVE-2026-63920 7.1

In the Linux kernel, the following vulnerability has been resolved: ipv6: validate extension header length before copying to cmsg ip6_datagram_recv_specific_ctl() builds IPV6_{HOPOPTS,DSTOPTS,RTHDR} cmsgs (and their IPV6_2292* legacy counterparts) by trusting the on-wire hdrlen byte (ptr[1]) when computing the put_cmsg() length. The length was validated only at parse time (ipv6_parse_hopopts(), etc.). An nftables payload-write expression can rewrite hdrlen after parsing and before the skb reaches recvmsg; the write itself is in-bounds but put_cmsg() then reads up to ((hdrlen+1) << 3) = 2040 bytes from an 8-byte header. nftables is reachable from an unprivileged user namespace, so this is an unprivileged slab-out-of-bounds read: BUG: KASAN: slab-out-of-bounds in put_cmsg+0x3ac/0x540 put_cmsg+0x3ac/0x540 udpv6_recvmsg+0xca0/0x1250 sock_recvmsg+0xdf/0x190 ____sys_recvmsg+0x1b1/0x620 Add ipv6_get_exthdr_len() which validates that at least two bytes are accessible before reading the hdrlen field, then checks the computed length against skb_tail_pointer(skb), returning 0 on failure. Extension headers are kept in the linear skb area by pskb_may_pull() during input, so skb_tail_pointer() is the correct bound. Use ipv6_get_exthdr_len() at all non-AH call sites: the five standalone cmsg blocks (HbH, 2292HbH, 2292DSTOPTS x2, 2292RTHDR) and the three standard cases in the extension-header walk loop (DSTOPTS, ROUTING, default). AH retains an inline bounds check because its length formula differs ((ptr[1]+2)<<2). The walk loop also gets a pre-read bounds check at the top to validate ptr before any case accesses ptr[0] or ptr[1]. When the walk loop detects a corrupted header, return from the function instead of continuing to process later socket options.

Record
DEBIAN-CVE-2026-63920
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-3532 9.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

uaccess: fix integer overflow on access_ok()

Three architectures check the end of a user access against the address limit without taking a possible overflow into account. Passing a negative length or another overflow in here returns success when it should not.

Use the most common correct implementation here, which optimizes for a constant 'size' argument, and turns the common case into a single comparison.(CVE-2022-49289)

In the Linux kernel, the following vulnerability has been resolved:

parisc: Fix double SIGFPE crash

Camm noticed that on parisc a SIGFPE exception will crash an application with a second SIGFPE in the signal handler. Dave analyzed it, and it happens because glibc uses a double-word floating-point store to atomically update function descriptors. As a result of lazy binding, we hit a floating-point store in fpe_func almost immediately.

When the T bit is set, an assist exception trap occurs when when the co-processor encounters any floating-point instruction except for a double store of register %fr0. The latter cancels all pending traps. Let's fix this by clearing the Trap (T) bit in the FP status register before returning to the signal handler in userspace.

The issue can be reproduced with this test program:

root@parisc:~# cat fpe.c

static void fpe_func(int sig, siginfo_t *i, void *v) { sigset_t set; sigemptyset(&set); sigaddset(&set, SIGFPE); sigprocmask(SIG_UNBLOCK, &set, NULL); printf("GOT signal %d with si_code %ld\n", sig, i->si_code); }

int main() { struct sigaction action = { .sa_sigaction = fpe_func, .sa_flags = SA_RESTART|SA_SIGINFO }; sigaction(SIGFPE, &action, 0); feenableexcept(FE_OVERFLOW); return printf("%lf\n",1.7976931348623158E308*1.7976931348623158E308); }

root@parisc:# gcc fpe.c -lm root@parisc:# ./a.out Floating point exception

root@parisc:~# strace -f ./a.out execve("./a.out", ["./a.out"], 0xf9ac7034 /* 20 vars /) = 0 getrlimit(RLIMIT_STACK, {rlim_cur=81921024, rlim_max=RLIM_INFINITY}) = 0 ... rt_sigaction(SIGFPE, {sa_handler=0x1110a, sa_mask=[], sa_flags=SA_RESTART|SA_SIGINFO}, NULL, 8) = 0 --- SIGFPE {si_signo=SIGFPE, si_code=FPE_FLTOVF, si_addr=0x1078f} --- --- SIGFPE {si_signo=SIGFPE, si_code=FPE_FLTOVF, si_addr=0xf8f21237} --- +++ killed by SIGFPE +++ Floating point exception(CVE-2025-37991)

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked()

kcalloc() may fail. When WS is non-zero and allocation fails, ectx.ws remains NULL while ectx.ws_size is set, leading to a potential NULL pointer dereference in atom_get_src_int() when accessing WS entries.

Return -ENOMEM on allocation failure to avoid the NULL dereference.(CVE-2025-68190)

In the Linux kernel, the following vulnerability has been resolved:

arm64/fpsimd: signal: Fix restoration of SVE context

When SME is supported, Restoring SVE signal context can go wrong in a few ways, including placing the task into an invalid state where the kernel may read from out-of-bounds memory (and may potentially take a fatal fault) and/or may kill the task with a SIGKILL.

(1) Restoring a context with SVE_SIG_FLAG_SM set can place the task into an invalid state where SVCR.SM is set (and sve_state is non-NULL) but TIF_SME is clear, consequently resuting in out-of-bounds memory reads and/or killing the task with SIGKILL.

This can only occur in unusual (but legitimate) cases where the SVE
signal context has either been modified by userspace or was saved in
the context of another task (e.g. as with CRIU), as otherwise the
presence of an SVE signal context with SVE_SIG_FLAG_SM…
Record
OESA-2026-3532
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-3704 9.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

net: hns3: add VLAN id validation before using

Currently, the VLAN id may be used without validation when receive a VLAN configuration mailbox from VF. The length of vlan_del_fail_bmap is BITS_TO_LONGS(VLAN_N_VID). It may cause out-of-bounds memory access once the VLAN id is bigger than or equal to VLAN_N_VID.

Therefore, VLAN id needs to be checked to ensure it is within the range of VLAN_N_VID.(CVE-2025-71112)

In the Linux kernel, the following vulnerability has been resolved:

ext4: fix string copying in parse_apply_sb_mount_options()

strscpy_pad() can't be used to copy a non-NUL-term string into a NUL-term string of possibly bigger size. Commit 0efc5990bca5 ("string.h: Introduce memtostr() and memtostr_pad()") provides additional information in that regard. So if this happens, the following warning is observed:

strnlen: detected buffer overflow: 65 byte read of buffer size 64 WARNING: CPU: 0 PID: 28655 at lib/string_helpers.c:1032 __fortify_report+0x96/0xc0 lib/string_helpers.c:1032 Modules linked in: CPU: 0 UID: 0 PID: 28655 Comm: syz-executor.3 Not tainted 6.12.54-syzkaller-00144-g5f0270f1ba00 #0 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:__fortify_report+0x96/0xc0 lib/string_helpers.c:1032 Call Trace: <TASK> __fortify_panic+0x1f/0x30 lib/string_helpers.c:1039 strnlen include/linux/fortify-string.h:235 [inline] sized_strscpy include/linux/fortify-string.h:309 [inline] parse_apply_sb_mount_options fs/ext4/super.c:2504 [inline] __ext4_fill_super fs/ext4/super.c:5261 [inline] ext4_fill_super+0x3c35/0xad00 fs/ext4/super.c:5706 get_tree_bdev_flags+0x387/0x620 fs/super.c:1636 vfs_get_tree+0x93/0x380 fs/super.c:1814 do_new_mount fs/namespace.c:3553 [inline] path_mount+0x6ae/0x1f70 fs/namespace.c:3880 do_mount fs/namespace.c:3893 [inline] __do_sys_mount fs/namespace.c:4103 [inline] __se_sys_mount fs/namespace.c:4080 [inline] __x64_sys_mount+0x280/0x300 fs/namespace.c:4080 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x64/0x140 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x76/0x7e

Since userspace is expected to provide s_mount_opts field to be at most 63 characters long with the ending byte being NUL-term, use a 64-byte buffer which matches the size of s_mount_opts, so that strscpy_pad() does its job properly. Return with error if the user still managed to provide a non-NUL-term string here.

Found by Linux Verification Center (linuxtesting.org) with Syzkaller.(CVE-2025-71123)

In the Linux kernel, the following vulnerability has been resolved:

RDMA/umad: Reject negative data_len in ib_umad_write

ib_umad_write computes data_len from user-controlled count and the MAD header sizes. With a mismatched user MAD header size and RMPP header length, data_len can become negative and reach ib_create_send_mad(). This can make the padding calculation exceed the segment size and trigger an out-of-bounds memset in alloc_send_rmpp_list().

Add an explicit check to reject negative data_len before creating the send buffer.

KASAN splat: [ 211.363464] BUG: KASAN: slab-out-of-bounds in ib_create_send_mad+0xa01/0x11b0 [ 211.364077] Write of size 220 at addr ffff88800c3fa1f8 by task spray_thread/102 [ 211.365867] ib_create_send_mad+0xa01/0x11b0 [ 211.365887] ib_umad_write+0x853/0x1c80(CVE-2026-23243)

In the Linux kernel, the following vulnerability has been resolved:

nvme: fix memory allocation in nvme_pr_read_keys()

nvme_pr_read_keys() takes num_keys from userspace and uses it to calculate the allocation size for rse via struct_size(). The upper limit is PR_KEYS_MAX (64K).

A malicious or buggy userspace can pass a large num_keys value that results in a 4MB allocation attempt at most, causing a warning in the page allocator when the order exceeds…

Record
OESA-2026-3704
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:76739 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:76739
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:77218 8.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:77218
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:77219 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:77219
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:82806 7.8

Red Hat Security Advisory: kernel-rt security update

Record
RHSA-2026:82806
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:82807 8.1

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:82807
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:83707 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:83707
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:84677 7.1

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:84677
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:84793 7.1

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:84793
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:85000 7.1

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:85000
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:82806 7.8

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: openvswitch: defer tunnel netdev_put to RCU release (CVE-2026-31678)

  • kernel: ipv6: validate extension header length before copying to cmsg (CVE-2026-63920)

  • kernel: drm/amd/display: set new_stream to NULL after release (CVE-2026-68236)

  • kernel: drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CVE-2026-68278)

  • kernel: wifi: mac80211: defer link RX stats percpu free to RCU (CVE-2026-68409)

  • kernel: drm/amdgpu/vce: fix integer overflow in image size (CVE-2026-68108)

  • kernel: drm/vmwgfx: use check_add_overflow for shader size+offset bound (CVE-2026-80887)

  • kernel: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (CVE-2026-89811)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:82806
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:82807 8.1

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: openvswitch: defer tunnel netdev_put to RCU release (CVE-2026-31678)

  • kernel: ipv6: validate extension header length before copying to cmsg (CVE-2026-63920)

  • kernel: drm/amd/display: set new_stream to NULL after release (CVE-2026-68236)

  • kernel: drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CVE-2026-68278)

  • kernel: wifi: mac80211: defer link RX stats percpu free to RCU (CVE-2026-68409)

  • kernel: drm/amdgpu/vce: fix integer overflow in image size (CVE-2026-68108)

  • kernel: cifs: validate DFS referral string offsets (CVE-2026-72318)

  • kernel: drm/vmwgfx: use check_add_overflow for shader size+offset bound (CVE-2026-80887)

  • kernel: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (CVE-2026-89811)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:82807
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-63920 6.9

In the Linux kernel, the following vulnerability has been resolved: ipv6: validate extension header length before copying to cmsg ip6_datagram_recv_specific_ctl() builds IPV6_{HOPOPTS,DSTOPTS,RTHDR} cmsgs (and their IPV6_2292* legacy counterparts) by trusting the on-wire hdrlen byte (ptr[1]) when computing the put_cmsg() length. The length was validated only at parse time (ipv6_parse_hopopts(), etc.). An nftables payload-write expression can rewrite hdrlen after parsing and before the skb reaches recvmsg; the write itself is in-bounds but put_cmsg() then reads up to ((hdrlen+1) << 3) = 2040 bytes from an 8-byte header. nftables is reachable from an unprivileged user namespace, so this is an unprivileged slab-out-of-bounds read: BUG: KASAN: slab-out-of-bounds in put_cmsg+0x3ac/0x540 put_cmsg+0x3ac/0x540 udpv6_recvmsg+0xca0/0x1250 sock_recvmsg+0xdf/0x190 ____sys_recvmsg+0x1b1/0x620 Add ipv6_get_exthdr_len() which validates that at least two bytes are accessible before reading the hdrlen field, then checks the computed length against skb_tail_pointer(skb), returning 0 on failure. Extension headers are kept in the linear skb area by pskb_may_pull() during input, so skb_tail_pointer() is the correct bound. Use ipv6_get_exthdr_len() at all non-AH call sites: the five standalone cmsg blocks (HbH, 2292HbH, 2292DSTOPTS x2, 2292RTHDR) and the three standard cases in the extension-header walk loop (DSTOPTS, ROUTING, default). AH retains an inline bounds check because its length formula differs ((ptr[1]+2)<<2). The walk loop also gets a pre-read bounds check at the top to validate ptr before any case accesses ptr[0] or ptr[1]. When the walk loop detects a corrupted header, return from the function instead of continuing to process later socket options.

Record
UBUNTU-CVE-2026-63920
CVSS 4.0
6.9 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-06
OSVALSA-2026:76738 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: netfilter: nf_conncount: increase the connection clean up limit to 64 (CVE-2026-45860)
  • kernel: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CVE-2026-45856)
  • kernel: Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CVE-2026-46275)
  • kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000 (CVE-2026-52972)
  • kernel: ipvs: clear the svc scheduler ptr early on edit (CVE-2026-53270)
  • kernel: Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CVE-2026-53357)
  • kernel: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-63829)
  • kernel: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CVE-2026-63794)
  • kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (CVE-2026-63924)
  • kernel: ipv6: exthdrs: refresh nh after handling HAO option (CVE-2026-63922)
  • kernel: ipv6: validate extension header length before copying to cmsg (CVE-2026-63920)
  • kernel: tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (CVE-2026-64024)
  • kernel: l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (CVE-2026-63918)
  • kernel: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (CVE-2026-63984)
  • kernel: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (CVE-2026-63992)
  • kernel: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (CVE-2026-63994)
  • kernel: netfilter: x_tables: add and use xtables_unregister_table_exit (CVE-2026-64078)
  • kernel: ipv6: ioam: refresh hdr pointer before ioam6_event() (CVE-2026-64132)
  • kernel: Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CVE-2026-64557)
  • kernel: vxlan: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-68432)
  • kernel: ipvs: reload ip header after head reallocation (CVE-2026-68476)
  • kernel: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-72052)
  • kernel: netfilter: nft_lookup: fix catchall element handling with inverted lookups (CVE-2026-72320)
  • kernel: netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CVE-2026-72255)
  • kernel: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CVE-2026-74516)
  • kernel: packet: use consistent hard_header_len in non-ring send paths ()
  • kernel: packet: use consistent hard_header_len in non-ring send paths (CVE-2026-74582)
  • kernel: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CVE-2026-74669)
  • kernel: netfilter: flowtable: publish GC-visible tuple last (CVE-2026-74746)
  • kernel: ipv6: fix use-after-free in ip6_finish_output2() (CVE-2026-80792)
  • kernel: futex: Fix race on the initial mm->futex.phash.ref allocation (CVE-2026-80775)
  • kernel: KVM: s390: vsie: zero stale crypto bits (CVE-2026-80921)
  • kernel: nvme: add missing SRCU grace period in error path (CVE-2026-89972)
  • kernel: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CVE-2026-90227)
  • kernel: netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CVE-2026-97417)
  • kernel: netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CVE-2026-93288)

Bug Fix(es) and Enhancement(s):

  • wifi card breaks using FIPS (JIRA:AlmaLinux-257457)
  • AlmaLinux10.0 - kernel: CPU hotplug unsupported by CPUMF [almalinux-10.2.z] (JIRA:AlmaLinux-270888)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:76738
Updated
2026-11-02
OSVALSA-2026:82806 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: openvswitch: defer tunnel netdev_put to RCU release (CVE-2026-31678)
  • kernel: ipv6: validate extension header length before copying to cmsg (CVE-2026-63920)
  • kernel: drm/amd/display: set new_stream to NULL after release (CVE-2026-68236)
  • kernel: drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CVE-2026-68278)
  • kernel: wifi: mac80211: defer link RX stats percpu free to RCU (CVE-2026-68409)
  • kernel: drm/amdgpu/vce: fix integer overflow in image size (CVE-2026-68108)
  • kernel: drm/vmwgfx: use check_add_overflow for shader size+offset bound (CVE-2026-80887)
  • kernel: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (CVE-2026-89811)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:82806
Updated
2026-11-02
OSVALSA-2026:82807 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: openvswitch: defer tunnel netdev_put to RCU release (CVE-2026-31678)
  • kernel: ipv6: validate extension header length before copying to cmsg (CVE-2026-63920)
  • kernel: drm/amd/display: set new_stream to NULL after release (CVE-2026-68236)
  • kernel: drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CVE-2026-68278)
  • kernel: wifi: mac80211: defer link RX stats percpu free to RCU (CVE-2026-68409)
  • kernel: drm/amdgpu/vce: fix integer overflow in image size (CVE-2026-68108)
  • kernel: cifs: validate DFS referral string offsets (CVE-2026-72318)
  • kernel: drm/vmwgfx: use check_add_overflow for shader size+offset bound (CVE-2026-80887)
  • kernel: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (CVE-2026-89811)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:82807
Updated
2026-11-02
OSVopenSUSE-SU-2026:21910-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (bsc#1256671).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-23113: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).
  • CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
  • CVE-2026-23348: cxl/mem: Clarify @host for devm_cxl_add_nvdimm() (bsc#1260577).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31530: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (bsc#1262756).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132).
  • CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
  • CVE-2026-46135: nvmet-tcp: remove redundant calls to nvmet_tcp_fatal_error() (bsc#1267373).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). -…
Record
openSUSE-SU-2026:21910-1
Updated
2026-11-02
OSVROOT-OS-UBUNTU-2204-CVE-2026-63920 No score

CVE-2026-63920 in linux - Patched by Root

Root has patched CVE-2026-63920 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2204-CVE-2026-63920
Updated
2026-11-06
OSVSUSE-SU-2026:23477-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1235944)
  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-31392: smb: client: fix krb5 mount with username option (bsc#1261788).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).
  • CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
  • CVE-2026-43278: dm: clear cloned request bio pointer when last clone bio completes (bsc#1264584).
  • CVE-2026-43319: spi: spidev: fix lock inversion between spi_lock and buf_lock (bsc#1264788).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).
  • CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).
  • CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).
  • CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).
  • CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).
  • CVE-2026-53076: bpf: Fix OOB in pcpu_init_value (bsc#1269695).
  • CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412).
  • CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783).
  • CVE-2026-53091: net: account for encap headers in qdisc pkt len (bsc#1269530).
  • CVE-2026-53094: bpf: Fix stale offload->prog pointer after constant blinding (bsc#1269965).
  • CVE-2026-53096: bpf: Use RCU-safe iteration in…
Record
SUSE-SU-2026:23477-1
Updated
2026-11-02
OSVSUSE-SU-2026:23481-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1269731).
  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-31392: smb: client: fix krb5 mount with username option (bsc#1261788).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).
  • CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
  • CVE-2026-43278: dm: clear cloned request bio pointer when last clone bio completes (bsc#1264584).
  • CVE-2026-43319: spi: spidev: fix lock inversion between spi_lock and buf_lock (bsc#1264788).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).
  • CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).
  • CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).
  • CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).
  • CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).
  • CVE-2026-53076: bpf: Fix OOB in pcpu_init_value (bsc#1269695).
  • CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412).
  • CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783).
  • CVE-2026-53091: net: account for encap headers in qdisc pkt len (bsc#1269530).
  • CVE-2026-53094: bpf: Fix stale offload->prog pointer after constant blinding (bsc#1269965).
  • CVE-2026-53096: bpf: Use RCU-safe iteration in…
Record
SUSE-SU-2026:23481-1
Updated
2026-11-02
OSVSUSE-SU-2026:23528-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1235944)
  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-31392: smb: client: fix krb5 mount with username option (bsc#1261788).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).
  • CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
  • CVE-2026-43278: dm: clear cloned request bio pointer when last clone bio completes (bsc#1264584).
  • CVE-2026-43319: spi: spidev: fix lock inversion between spi_lock and buf_lock (bsc#1264788).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).
  • CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).
  • CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).
  • CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).
  • CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).
  • CVE-2026-53076: bpf: Fix OOB in pcpu_init_value (bsc#1269695).
  • CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412).
  • CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783).
  • CVE-2026-53091: net: account for encap headers in qdisc pkt len (bsc#1269530).
  • CVE-2026-53094: bpf: Fix stale offload->prog pointer after constant blinding (bsc#1269965).
  • CVE-2026-53096: bpf: Use RCU-safe iteration in…
Record
SUSE-SU-2026:23528-1
Updated
2026-11-02
OSVSUSE-SU-2026:23529-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1269731).
  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-31392: smb: client: fix krb5 mount with username option (bsc#1261788).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).
  • CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
  • CVE-2026-43278: dm: clear cloned request bio pointer when last clone bio completes (bsc#1264584).
  • CVE-2026-43319: spi: spidev: fix lock inversion between spi_lock and buf_lock (bsc#1264788).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).
  • CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).
  • CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).
  • CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).
  • CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).
  • CVE-2026-53076: bpf: Fix OOB in pcpu_init_value (bsc#1269695).
  • CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412).
  • CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783).
  • CVE-2026-53091: net: account for encap headers in qdisc pkt len (bsc#1269530).
  • CVE-2026-53094: bpf: Fix stale offload->prog pointer after constant blinding (bsc#1269965).
  • CVE-2026-53096: bpf: Use RCU-safe iteration in…
Record
SUSE-SU-2026:23529-1
Updated
2026-11-02
OSVSUSE-SU-2026:23881-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (bsc#1256671).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-23113: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).
  • CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
  • CVE-2026-23348: cxl/mem: Clarify @host for devm_cxl_add_nvdimm() (bsc#1260577).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31530: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (bsc#1262756).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132).
  • CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
  • CVE-2026-46135: nvmet-tcp: remove redundant calls to nvmet_tcp_fatal_error() (bsc#1267373).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). -…
Record
SUSE-SU-2026:23881-1
Updated
2026-11-02
OSVSUSE-SU-2026:23887-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (bsc#1256671).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-23113: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).
  • CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
  • CVE-2026-23348: cxl/mem: Clarify @host for devm_cxl_add_nvdimm() (bsc#1260577).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31530: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (bsc#1262756).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132).
  • CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
  • CVE-2026-46135: nvmet-tcp: remove redundant calls to nvmet_tcp_fatal_error() (bsc#1267373).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). -…
Record
SUSE-SU-2026:23887-1
Updated
2026-11-02
OSVSUSE-SU-2026:23897-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (bsc#1256671).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-23113: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).
  • CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
  • CVE-2026-23348: cxl/mem: Clarify @host for devm_cxl_add_nvdimm() (bsc#1260577).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31530: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (bsc#1262756).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132).
  • CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
  • CVE-2026-46135: nvmet-tcp: remove redundant calls to nvmet_tcp_fatal_error() (bsc#1267373).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). -…
Record
SUSE-SU-2026:23897-1
Updated
2026-11-02
OSVSUSE-SU-2026:23902-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (bsc#1256671).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-23113: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).
  • CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
  • CVE-2026-23348: cxl/mem: Clarify @host for devm_cxl_add_nvdimm() (bsc#1260577).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31530: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (bsc#1262756).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132).
  • CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
  • CVE-2026-46135: nvmet-tcp: remove redundant calls to nvmet_tcp_fatal_error() (bsc#1267373).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). -…
Record
SUSE-SU-2026:23902-1
Updated
2026-11-02
OSVSUSE-SU-2026:23993-1 No score

Security update for the Linux Kernel RT (Live Patch 16 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.37.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:23993-1
Updated
2026-11-02
OSVSUSE-SU-2026:23994-1 No score

Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:23994-1
Updated
2026-11-02
OSVSUSE-SU-2026:23995-1 No score

Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:23995-1
Updated
2026-11-02
OSVSUSE-SU-2026:23996-1 No score

Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:23996-1
Updated
2026-11-02
OSVSUSE-SU-2026:23997-1 No score

Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:23997-1
Updated
2026-11-02
OSVSUSE-SU-2026:23998-1 No score

Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:23998-1
Updated
2026-11-02
OSVSUSE-SU-2026:23999-1 No score

Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:23999-1
Updated
2026-11-02
OSVSUSE-SU-2026:24000-1 No score

Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24000-1
Updated
2026-11-02
OSVSUSE-SU-2026:24001-1 No score

Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24001-1
Updated
2026-11-02
OSVSUSE-SU-2026:24002-1 No score

Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24002-1
Updated
2026-11-02
OSVSUSE-SU-2026:24003-1 No score

Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24003-1
Updated
2026-11-02
OSVSUSE-SU-2026:24004-1 No score

Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24004-1
Updated
2026-11-02
OSVSUSE-SU-2026:24005-1 No score

Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24005-1
Updated
2026-11-02
OSVSUSE-SU-2026:24006-1 No score

Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24006-1
Updated
2026-11-02
OSVSUSE-SU-2026:24007-1 No score

Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24007-1
Updated
2026-11-02
OSVSUSE-SU-2026:24008-1 No score

Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24008-1
Updated
2026-11-02
OSVSUSE-SU-2026:24009-1 No score

Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24009-1
Updated
2026-11-02
OSVSUSE-SU-2026:24010-1 No score

Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24010-1
Updated
2026-11-02
OSVSUSE-SU-2026:24016-1 No score

Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24016-1
Updated
2026-11-02
OSVSUSE-SU-2026:24022-1 No score

Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-51.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24022-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-64k
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-64k-core
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-64k-debug
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-64k-debug-core
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-64k-debug-devel
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-64k-debug-devel-matched
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-64k-debug-modules
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-64k-debug-modules-core
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-64k-debug-modules-extra
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-64k-devel
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-64k-devel-matched
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-64k-modules
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-64k-modules-core
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-64k-modules-extra
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-abi-stablelists
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-core
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-cross-headers
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-debug
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-debug-core
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-debug-devel
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-debug-devel-matched
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-debug-modules
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-debug-modules-core
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-debug-modules-extra
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-debug-uki-virt
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-devel
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-devel-matched
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-doc
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-headers
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-modules
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-modules-core
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-modules-extra
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-modules-extra-matched
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-64k
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-64k-core
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-64k-debug
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-64k-debug-core
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-64k-debug-devel
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-64k-debug-modules
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-64k-debug-modules-core
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-64k-debug-modules-extra
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-64k-devel
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-64k-modules
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-64k-modules-core
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-64k-modules-extra
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-core
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-debug
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-debug-core
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-debug-devel
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-debug-modules
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-debug-modules-core
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-debug-modules-extra
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-devel
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-modules
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-modules-core
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-modules-extra
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-tools
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-tools-libs
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-tools-libs-devel
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-uki-virt
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-uki-virt-addons
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-zfcpdump
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-zfcpdump-core
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-zfcpdump-devel
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-zfcpdump-devel-matched
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-zfcpdump-modules
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-zfcpdump-modules-core
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
linux-lts
Alpaquita:23
 6.1.175-r0 up to 6.1.177-r0
6.1.177-r0
linux-lts
Alpaquita:25
 6.12.92-r0 up to 6.12.95-r0
6.12.95-r0
linux-lts
Alpaquita:stream
 6.12.92-r1 up to 6.18.35-r1
6.18.35-r1
Kernel
Linux
 2.6.12 up to 5.10.259, 5.11.0 up to 5.15.210, 5.16.0 up to 6.1.176, 6.2.0 up to 6.6.143, 6.7.0 up to 6.12.93, 6.13.0 up to 6.18.35, 6.19.0 up to 7.0.12
5.10.2595.15.2106.1.1766.6.1436.12.936.18.357.0.12
linux
Debian:12
 before 6.1.176-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 45 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.170-16.1.170-26.1.170-36.1.172-16.1.174-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-1
6.1.176-1
linux
Debian:13
 before 6.12.94-1, plus listed versions
6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-1
Show 22 moreShow less
6.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-1~bpo12+1
6.12.94-1
linux
Debian:14
 before 7.0.12-1, plus listed versions
6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1
Show 45 moreShow less
6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1
7.0.12-1
kernel
openEuler:22.03-LTS-SP4
From an advisory covering 27 CVEs
 before 5.10.0-330.0.0.231.oe2203sp4
5.10.0-330.0.0.231.oe2203sp4
kernel
openEuler:24.03-LTS-SP3
From an advisory covering 165 CVEs
 before 6.6.0-145.3.29.160.oe2403sp3
6.6.0-145.3.29.160.oe2403sp3
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-64k-debug-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-64k-debug-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-64k-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-64k-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-64k-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-debug-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-debug-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-doc
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-rt-64k-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-rt-64k-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-rt-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-tools-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-zfcpdump-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-zfcpdump-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
libperf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
perf
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
perf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
python3-perf
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
python3-perf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
rtla
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
rv
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-64k
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-64k-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-64k-debug
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-64k-debug-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-64k-debug-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-64k-debug-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-64k-debug-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-64k-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-64k-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-64k-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-64k-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-abi-stablelists
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-debug
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-debug-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-debug-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-debug-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-debug-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-debug-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-debug-uki-virt
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-rt-64k-debug-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-rt-64k-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-rt-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-tools
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-tools-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-tools-libs
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-rt
Rocky Linux:8
From an advisory covering 8 CVEs
 before 0:4.18.0-553.173.1.rt7.514.el8_10
0:4.18.0-553.173.1.rt7.514.el8_10
kernel
Rocky Linux:8
From an advisory covering 9 CVEs
 before 0:4.18.0-553.173.1.el8_10
0:4.18.0-553.173.1.el8_10
linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
rootio-linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
kernel-rt
SUSE:Linux Micro 6.0
From an advisory covering 588 CVEs
 before 6.4.0-52.1
6.4.0-52.1
kernel-source-rt
SUSE:Linux Micro 6.0
From an advisory covering 588 CVEs
 before 6.4.0-52.1
6.4.0-52.1
kernel-default
SUSE:Linux Micro 6.0
From an advisory covering 588 CVEs
 before 6.4.0-52.1
6.4.0-52.1
kernel-default-base
SUSE:Linux Micro 6.0
From an advisory covering 588 CVEs
 before 6.4.0-52.1.21.36
6.4.0-52.1.21.36
kernel-kvmsmall
SUSE:Linux Micro 6.0
From an advisory covering 588 CVEs
 before 6.4.0-52.1
6.4.0-52.1
kernel-source
SUSE:Linux Micro 6.0
From an advisory covering 588 CVEs
 before 6.4.0-52.1
6.4.0-52.1
kernel-rt
SUSE:Linux Micro 6.1
From an advisory covering 588 CVEs
 before 6.4.0-52.1
6.4.0-52.1
kernel-source-rt
SUSE:Linux Micro 6.1
From an advisory covering 588 CVEs
 before 6.4.0-52.1
6.4.0-52.1
kernel-default
SUSE:Linux Micro 6.1
From an advisory covering 588 CVEs
 before 6.4.0-52.1
6.4.0-52.1
kernel-default-base
SUSE:Linux Micro 6.1
From an advisory covering 588 CVEs
 before 6.4.0-52.1.21.34
6.4.0-52.1.21.34
kernel-kvmsmall
SUSE:Linux Micro 6.1
From an advisory covering 588 CVEs
 before 6.4.0-52.1
6.4.0-52.1
kernel-source
SUSE:Linux Micro 6.1
From an advisory covering 588 CVEs
 before 6.4.0-52.1
6.4.0-52.1
kernel-obs-build
SUSE:Linux Micro Extras 6.2
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-syms
SUSE:Linux Micro Extras 6.2
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-64kb
SUSE:Linux Micro 6.2
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default
SUSE:Linux Micro 6.2
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default-base
SUSE:Linux Micro 6.2
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1.160000.2.23
6.12.0-160000.38.1.160000.2.23
kernel-rt
SUSE:Linux Micro 6.2
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-source
SUSE:Linux Micro 6.2
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-64kb
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-azure
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default-base
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1.160000.2.23
6.12.0-160000.38.1.160000.2.23
kernel-docs
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-kvmsmall
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-obs-qa
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-source
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-syms
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-64kb
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-azure
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1.160000.2.23
6.12.0-160000.38.1.160000.2.23
kernel-docs
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-kvmsmall
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-obs-qa
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-source
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-syms
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-zfcpdump
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-livepatch-SLE16-RT_Update_16
SUSE:Linux Micro 6.2
From an advisory covering 11 CVEs
 before 3-160000.1.1
3-160000.1.1
kernel-livepatch-SLE16-RT_Update_15
SUSE:Linux Micro 6.2
From an advisory covering 17 CVEs
 before 4-160000.1.1
4-160000.1.1
kernel-livepatch-SLE16-RT_Update_14
SUSE:Linux Micro 6.2
From an advisory covering 19 CVEs
 before 6-160000.1.1
6-160000.1.1
kernel-livepatch-SLE16-RT_Update_13
SUSE:Linux Micro 6.2
From an advisory covering 19 CVEs
 before 6-160000.1.1
6-160000.1.1
kernel-livepatch-SLE16-RT_Update_12
SUSE:Linux Micro 6.2
From an advisory covering 20 CVEs
 before 6-160000.1.1
6-160000.1.1
kernel-livepatch-SLE16-RT_Update_11
SUSE:Linux Micro 6.2
From an advisory covering 20 CVEs
 before 8-160000.1.1
8-160000.1.1
kernel-livepatch-SLE16-RT_Update_10
SUSE:Linux Micro 6.2
From an advisory covering 20 CVEs
 before 8-160000.1.1
8-160000.1.1
kernel-livepatch-SLE16-RT_Update_9
SUSE:Linux Micro 6.2
From an advisory covering 20 CVEs
 before 8-160000.1.1
8-160000.1.1
kernel-livepatch-SLE16-RT_Update_8
SUSE:Linux Micro 6.2
From an advisory covering 20 CVEs
 before 9-160000.1.1
9-160000.1.1
kernel-livepatch-SLE16-RT_Update_7
SUSE:Linux Micro 6.2
From an advisory covering 20 CVEs
 before 10-160000.1.1
10-160000.1.1
kernel-livepatch-SLE16-RT_Update_6
SUSE:Linux Micro 6.2
From an advisory covering 20 CVEs
 before 11-160000.1.1
11-160000.1.1
kernel-livepatch-SLE16-RT_Update_5
SUSE:Linux Micro 6.2
From an advisory covering 20 CVEs
 before 12-160000.1.1
12-160000.1.1
kernel-livepatch-SLE16-RT_Update_4
SUSE:Linux Micro 6.2
From an advisory covering 20 CVEs
 before 13-160000.1.1
13-160000.1.1
kernel-livepatch-SLE16-RT_Update_3
SUSE:Linux Micro 6.2
From an advisory covering 20 CVEs
 before 13-160000.1.1
13-160000.1.1
kernel-livepatch-SLE16-RT_Update_2
SUSE:Linux Micro 6.2
From an advisory covering 20 CVEs
 before 14-160000.1.1
14-160000.1.1
kernel-livepatch-SLE16-RT_Update_1
SUSE:Linux Micro 6.2
From an advisory covering 20 CVEs
 before 16-160000.1.1
16-160000.1.1
kernel-livepatch-SLE16-RT_Update_0
SUSE:Linux Micro 6.2
From an advisory covering 20 CVEs
 before 17-160000.3.4
17-160000.3.4
kernel-livepatch-SLE16_Update_15
SUSE:Linux Micro 6.2
From an advisory covering 17 CVEs
 before 4-160000.1.1
4-160000.1.1
kernel-livepatch-SLE16_Update_15
SUSE:Linux Enterprise Server 16.0
From an advisory covering 17 CVEs
 before 4-160000.1.1
4-160000.1.1
kernel-livepatch-SLE16_Update_15
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 17 CVEs
 before 4-160000.1.1
4-160000.1.1
kernel-livepatch-MICRO-6-0_Update_28
SUSE:Linux Micro 6.1
From an advisory covering 9 CVEs
 before 3-1.1
3-1.1
kernel-livepatch-MICRO-6-0_Update_27
SUSE:Linux Micro 6.1
From an advisory covering 17 CVEs
 before 4-1.1
4-1.1
kernel-livepatch-MICRO-6-0_Update_26
SUSE:Linux Micro 6.1
From an advisory covering 17 CVEs
 before 4-1.1
4-1.1
kernel-livepatch-MICRO-6-0_Update_25
SUSE:Linux Micro 6.1
From an advisory covering 19 CVEs
 before 5-1.1
5-1.1
kernel-livepatch-MICRO-6-0_Update_24
SUSE:Linux Micro 6.1
From an advisory covering 19 CVEs
 before 6-1.1
6-1.1
kernel-livepatch-MICRO-6-0_Update_23
SUSE:Linux Micro 6.1
From an advisory covering 19 CVEs
 before 7-1.1
7-1.1
kernel-livepatch-MICRO-6-0_Update_22
SUSE:Linux Micro 6.1
From an advisory covering 19 CVEs
 before 7-1.1
7-1.1
kernel-livepatch-MICRO-6-0_Update_21
SUSE:Linux Micro 6.1
From an advisory covering 19 CVEs
 before 7-1.1
7-1.1
linux
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
3.11.0-12.193.12.0-1.33.12.0-2.53.12.0-2.73.12.0-3.8
Show 45 moreShow less
3.12.0-3.93.12.0-4.103.12.0-4.123.12.0-5.133.12.0-7.153.13.0-1.163.13.0-2.173.13.0-3.183.13.0-4.193.13.0-5.203.13.0-6.233.13.0-7.253.13.0-7.263.13.0-8.273.13.0-8.283.13.0-10.303.13.0-11.313.13.0-12.323.13.0-13.333.13.0-14.343.13.0-15.353.13.0-16.363.13.0-17.373.13.0-18.383.13.0-19.393.13.0-19.403.13.0-20.423.13.0-21.433.13.0-22.443.13.0-23.453.13.0-24.463.13.0-24.473.13.0-27.503.13.0-29.533.13.0-30.543.13.0-30.553.13.0-32.573.13.0-33.583.13.0-34.603.13.0-35.623.13.0-36.633.13.0-37.643.13.0-39.663.13.0-40.693.13.0-41.70
 None known
linux-aws
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9
Show 45 moreShow less
4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80
 None known
linux-azure
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2
Show 45 moreShow less
4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1
 None known
linux-lts-xenial
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1
Show 45 moreShow less
4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1
 None known
linux
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11
Show 45 moreShow less
4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96
 None known
linux-aws
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18
Show 45 moreShow less
4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93
 None known
linux-aws-hwe
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1
Show 45 moreShow less
4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1
 None known
linux-azure
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 45 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71
 None known
linux-gcp
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
Show 45 moreShow less
4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1
 None known
linux-hwe
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 45 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1
 None known
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-kvm
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15
Show 45 moreShow less
4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.674.4.0-1062.694.4.0-1063.704.4.0-1064.714.4.0-1065.724.4.0-1066.734.4.0-1068.754.4.0-1069.764.4.0-1070.774.4.0-1071.784.4.0-1075.824.4.0-1076.834.4.0-1077.84
 None known
linux-oracle
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1
Show 45 moreShow less
4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1
 None known
linux-fips
Ubuntu:Pro:FIPS-updates:16.04:LTS
 All versions, plus listed versions
4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13
Show 45 moreShow less
4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78
 None known
linux-fips
Ubuntu:Pro:FIPS:16.04:LTS
 All versions, plus listed versions
4.4.0-1001.14.4.0-1002.2
 None known
linux
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 45 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107
 None known
linux-aws
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 45 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-aws-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-4.15
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102
Show 45 moreShow less
4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1
Show 45 moreShow less
5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-4.15
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92
Show 45 moreShow less
4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gcp-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 45 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-ibm-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1
Show 45 moreShow less
5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1
 None known
linux-kvm
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8
Show 45 moreShow less
4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13
Show 45 moreShow less
4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-oracle-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1
 None known
linux-raspi-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1
Show 45 moreShow less
5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1
 None known
linux-aws-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24
Show 45 moreShow less
4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93
 None known
linux-azure-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10
Show 45 moreShow less
4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80
 None known
linux-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42
Show 45 moreShow less
4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21
Show 45 moreShow less
4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.794.15.0-2075.804.15.0-2076.814.15.0-2077.83
 None known
linux-aws-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.4
 None known
linux-azure-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.2
 None known
linux-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1011.12
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.1
 None known
linux
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 45 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110
 None known
linux-aws
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5
Show 45 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1117.124~20.04.1, plus listed versions
5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1
Show 45 moreShow less
5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1
5.15.0-1117.124~20.04.1
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8
Show 45 moreShow less
5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
linux-azure-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
 None known
linux-azure-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1123.132~20.04.1, plus listed versions
5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1
Show 45 moreShow less
5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1
5.15.0-1123.132~20.04.1
linux-azure-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
 None known
linux-azure-fde
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
 None known
linux-azure-fde-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1122.131~20.04.1, plus listed versions
5.15.0-1019.24~20.04.1.15.15.0-1020.25~20.04.1.15.15.0-1021.26~20.04.1.15.15.0-1029.36~20.04.1.15.15.0-1030.37~20.04.1.1
Show 45 moreShow less
5.15.0-1031.38~20.04.1.15.15.0-1033.40~20.04.1.15.15.0-1034.41~20.04.1.25.15.0-1035.42~20.04.1.15.15.0-1036.43~20.04.1.15.15.0-1037.44~20.04.1.15.15.0-1038.45~20.04.1.15.15.0-1039.46~20.04.1.15.15.0-1040.47~20.04.1.15.15.0-1041.48~20.04.1.15.15.0-1042.49~20.04.1.15.15.0-1043.50~20.04.1.15.15.0-1046.53~20.04.1.15.15.0-1047.54~20.04.1.15.15.0-1049.56~20.04.1.15.15.0-1050.57~20.04.1.15.15.0-1051.59~20.04.1.15.15.0-1052.60~20.04.1.15.15.0-1053.61~20.04.1.15.15.0-1054.62~20.04.1.15.15.0-1056.64~20.04.1.15.15.0-1057.65~20.04.1.15.15.0-1058.66~20.04.2.15.15.0-1059.67~20.04.1.15.15.0-1060.69~20.04.1.15.15.0-1061.70~20.04.1.15.15.0-1063.72~20.04.1.15.15.0-1064.73~20.04.1.15.15.0-1065.74~20.04.1.15.15.0-1067.76~20.04.1.15.15.0-1068.77~20.04.1.15.15.0-1070.79~20.04.1.15.15.0-1071.80~20.04.1.15.15.0-1072.81~20.04.1.15.15.0-1073.82~20.04.1.15.15.0-1074.83~20.04.1.15.15.0-1076.85~20.04.1.15.15.0-1078.87~20.04.1.15.15.0-1081.90~20.04.1.15.15.0-1082.91~20.04.1.15.15.0-1086.95~20.04.1.15.15.0-1087.96~20.04.1.15.15.0-1088.97~20.04.1.15.15.0-1089.98~20.04.1.15.15.0-1091.100~20.04.1.1
5.15.0-1122.131~20.04.1
linux-bluefield
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.4.0-1007.105.4.0-1011.145.4.0-1012.155.4.0-1013.165.4.0-1016.19
Show 45 moreShow less
5.4.0-1019.225.4.0-1020.235.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1030.335.4.0-1032.355.4.0-1035.385.4.0-1036.395.4.0-1040.445.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1049.555.4.0-1050.565.4.0-1054.605.4.0-1058.645.4.0-1059.655.4.0-1060.665.4.0-1062.685.4.0-1064.705.4.0-1065.715.4.0-1066.725.4.0-1068.745.4.0-1070.765.4.0-1071.775.4.0-1072.785.4.0-1073.795.4.0-1074.805.4.0-1075.815.4.0-1076.825.4.0-1077.835.4.0-1078.845.4.0-1079.855.4.0-1080.875.4.0-1081.885.4.0-1082.895.4.0-1083.905.4.0-1084.915.4.0-1085.92
 None known
linux-gcp
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7
Show 45 moreShow less
5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1033.355.4.0-1034.375.4.0-1036.395.4.0-1037.405.4.0-1038.415.4.0-1040.435.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1044.475.4.0-1046.495.4.0-1049.535.4.0-1051.555.4.0-1052.565.4.0-1053.575.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1060.645.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1065.695.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1072.775.4.0-1073.785.4.0-1075.80
 None known
linux-gcp-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1
Show 7 moreShow less
5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3
 None known
linux-gcp-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1
Show 8 moreShow less
5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1
 None known
dtb-aarch64
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-64kb
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-azure
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default-base
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1.160000.2.22
6.12.0-160000.38.1.160000.2.22
kernel-docs
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-kvmsmall
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-obs-build
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-obs-qa
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-rt
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-source
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-syms
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-zfcpdump
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1

History

History
RecordedChangedSources
affectedOSV
affectedOSV
affected, aliases, aliases_more, referencesOSV
affected, facts, referencesOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-63920 is a high vulnerability (CVSS 7.1) in Linux, published July 19, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.17%, the 6th percentile. Fixed in linux-lts 6.1.177-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 1,230 package rows, 2,759 versions, 6,230 references and the rest of 11 source descriptions. The JSON record has them. Also not on the record: 100 aliases. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 149 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open