Every CVE Search/ Get API key

CVE-2026-64121

net: ifb: report ethtool stats over num_tx_queues

7.1 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

net: ifb: report ethtool stats over num_tx_queues

ifb_dev_init() allocates dp->tx_private to dev->num_tx_queues entries via kzalloc_objs(*txp, dev->num_tx_queues). Both IFB per-queue RX and TX stats live in those entries: ifb_xmit() updates txp->rx_stats using the skb queue mapping, ifb_ri_tasklet() updates txp->tx_stats, and ifb_stats64() aggregates both over dev->num_tx_queues.

The ethtool stats callbacks instead size and walk the per-queue stats with dev->real_num_rx_queues and dev->real_num_tx_queues. With an asymmetric device where the RX queue count exceeds the TX queue count, for example:

ip link add name ifb10 numtxqueues 1 numrxqueues 8 type ifb
ethtool -S ifb10

ifb_get_ethtool_stats() indexes past the tx_private allocation and copies adjacent slab data through ETHTOOL_GSTATS.

Use dev->num_tx_queues consistently for the stats strings, the stats count, and the stats data walks. This reports one RX stats group and one TX stats group for each backing ifb_q_private entry, which is the queue set IFB can actually populate.

Reproduced under UML+KASAN at v7.1-rc2:

BUG: KASAN: slab-out-of-bounds in ifb_fill_stats_data+0x3c/0xae Read of size 8 at addr 0000000062dbd228 by task ethtool/36 ifb_fill_stats_data+0x3c/0xae ifb_get_ethtool_stats+0xc0/0x129 __dev_ethtool+0x1ca5/0x363c dev_ethtool+0x123/0x1b3 dev_ioctl+0x56c/0x744 sock_do_ioctl+0x15f/0x1b2 sock_ioctl+0x4d5/0x50a sys_ioctl+0xd8b/0xde9

With the patch applied, the same UML+KASAN repro is silent and ethtool -S ifb10 reports only the stats backed by the single allocated tx_private entry.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
High

Exploit likelihood

0.13%Unchanged since Jul 20, 2026
90%50%10%1%

What each source reports

NVD Score used 7.1

In the Linux kernel, the following vulnerability has been resolved:

net: ifb: report ethtool stats over num_tx_queues

ifb_dev_init() allocates dp->tx_private to dev->num_tx_queues entries via kzalloc_objs(*txp, dev->num_tx_queues). Both IFB per-queue RX and TX stats live in those entries: ifb_xmit() updates txp->rx_stats using the skb queue mapping, ifb_ri_tasklet() updates txp->tx_stats, and ifb_stats64() aggregates both over dev->num_tx_queues.

The ethtool stats callbacks instead size and walk the per-queue stats with dev->real_num_rx_queues and dev->real_num_tx_queues. With an asymmetric device where the RX queue count exceeds the TX queue count, for example:

ip link add name ifb10 numtxqueues 1 numrxqueues 8 type ifb
ethtool -S ifb10

ifb_get_ethtool_stats() indexes past the tx_private allocation and copies adjacent slab data through ETHTOOL_GSTATS.

Use dev->num_tx_queues consistently for the stats strings, the stats count, and the stats data walks. This reports one RX stats group and one TX stats group for each backing ifb_q_private entry, which is the queue set IFB can actually populate.

Reproduced under UML+KASAN at v7.1-rc2:

BUG: KASAN: slab-out-of-bounds in ifb_fill_stats_data+0x3c/0xae Read of size 8 at addr 0000000062dbd228 by task ethtool/36 ifb_fill_stats_data+0x3c/0xae ifb_get_ethtool_stats+0xc0/0x129 __dev_ethtool+0x1ca5/0x363c dev_ethtool+0x123/0x1b3 dev_ioctl+0x56c/0x744 sock_do_ioctl+0x15f/0x1b2 sock_ioctl+0x4d5/0x50a sys_ioctl+0xd8b/0xde9

With the patch applied, the same UML+KASAN repro is silent and ethtool -S ifb10 reports only the stats backed by the single allocated tx_private entry.

Record
CVE-2026-64121
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness
CWE-125
Updated
2026-11-06
CVE List No score

net: ifb: report ethtool stats over num_tx_queues

In the Linux kernel, the following vulnerability has been resolved:

net: ifb: report ethtool stats over num_tx_queues

ifb_dev_init() allocates dp->tx_private to dev->num_tx_queues entries via kzalloc_objs(*txp, dev->num_tx_queues). Both IFB per-queue RX and TX stats live in those entries: ifb_xmit() updates txp->rx_stats using the skb queue mapping, ifb_ri_tasklet() updates txp->tx_stats, and ifb_stats64() aggregates both over dev->num_tx_queues.

The ethtool stats callbacks instead size and walk the per-queue stats with dev->real_num_rx_queues and dev->real_num_tx_queues. With an asymmetric device where the RX queue count exceeds the TX queue count, for example:

ip link add name ifb10 numtxqueues 1 numrxqueues 8 type ifb
ethtool -S ifb10

ifb_get_ethtool_stats() indexes past the tx_private allocation and copies adjacent slab data through ETHTOOL_GSTATS.

Use dev->num_tx_queues consistently for the stats strings, the stats count, and the stats data walks. This reports one RX stats group and one TX stats group for each backing ifb_q_private entry, which is the queue set IFB can actually populate.

Reproduced under UML+KASAN at v7.1-rc2:

BUG: KASAN: slab-out-of-bounds in ifb_fill_stats_data+0x3c/0xae Read of size 8 at addr 0000000062dbd228 by task ethtool/36 ifb_fill_stats_data+0x3c/0xae ifb_get_ethtool_stats+0xc0/0x129 __dev_ethtool+0x1ca5/0x363c dev_ethtool+0x123/0x1b3 dev_ioctl+0x56c/0x744 sock_do_ioctl+0x15f/0x1b2 sock_ioctl+0x4d5/0x50a sys_ioctl+0xd8b/0xde9

With the patch applied, the same UML+KASAN repro is silent and ethtool -S ifb10 reports only the stats backed by the single allocated tx_private entry.

Record
CVE-2026-64121
Updated
2026-11-06
EUVDEUVD-2026-45806 No score

In the Linux kernel, the following vulnerability has been resolved:

net: ifb: report ethtool stats over num_tx_queues

ifb_dev_init() allocates dp->tx_private to dev->num_tx_queues entries via kzalloc_objs(*txp, dev->num_tx_queues). Both IFB per-queue RX and TX stats live in those entries: ifb_xmit() updates txp->rx_stats using the skb queue mapping, ifb_ri_tasklet() updates txp->tx_stats, and ifb_stats64() aggregates both over dev->num_tx_queues.

The ethtool stats callbacks instead size and walk the per-queue stats with dev->real_num_rx_queues and dev->real_num_tx_queues. With an asymmetric device where the RX queue count exceeds the TX queue count, for example:

ip link add name ifb10 numtxqueues 1 numrxqueues 8 type ifb
ethtool -S ifb10

ifb_get_ethtool_stats() indexes past the tx_private allocation and copies adjacent slab data through ETHTOOL_GSTATS.

Use dev->num_tx_queues consistently for the stats strings, the stats count, and the stats data walks. This reports one RX stats group and one TX stats group for each backing ifb_q_private entry, which is the queue set IFB can actually populate.

Reproduced under UML+KASAN at v7.1-rc2:

BUG: KASAN: slab-out-of-bounds in ifb_fill_stats_data+0x3c/0xae Read of size 8 at addr 0000000062dbd228 by task ethtool/36 ifb_fill_stats_data+0x3c/0xae ifb_get_ethtool_stats+0xc0/0x129 __dev_ethtool+0x1ca5/0x363c dev_ethtool+0x123/0x1b3 dev_ioctl+0x56c/0x744 sock_do_ioctl+0x15f/0x1b2 sock_ioctl+0x4d5/0x50a sys_ioctl+0xd8b/0xde9

With the patch applied, the same UML+KASAN repro is silent and ethtool -S ifb10 reports only the stats backed by the single allocated tx_private entry.

Record
EUVD-2026-45806
Updated
2026-11-06
GitHub AdvisoriesGHSA-478c-pq6v-xx69 7.1

In the Linux kernel, the following vulnerability has been resolved: net: ifb: report ethtool...

In the Linux kernel, the following vulnerability has been resolved:

net: ifb: report ethtool stats over num_tx_queues

ifb_dev_init() allocates dp->tx_private to dev->num_tx_queues entries via kzalloc_objs(*txp, dev->num_tx_queues). Both IFB per-queue RX and TX stats live in those entries: ifb_xmit() updates txp->rx_stats using the skb queue mapping, ifb_ri_tasklet() updates txp->tx_stats, and ifb_stats64() aggregates both over dev->num_tx_queues.

The ethtool stats callbacks instead size and walk the per-queue stats with dev->real_num_rx_queues and dev->real_num_tx_queues. With an asymmetric device where the RX queue count exceeds the TX queue count, for example:

ip link add name ifb10 numtxqueues 1 numrxqueues 8 type ifb
ethtool -S ifb10

ifb_get_ethtool_stats() indexes past the tx_private allocation and copies adjacent slab data through ETHTOOL_GSTATS.

Use dev->num_tx_queues consistently for the stats strings, the stats count, and the stats data walks. This reports one RX stats group and one TX stats group for each backing ifb_q_private entry, which is the queue set IFB can actually populate.

Reproduced under UML+KASAN at v7.1-rc2:

BUG: KASAN: slab-out-of-bounds in ifb_fill_stats_data+0x3c/0xae Read of size 8 at addr 0000000062dbd228 by task ethtool/36 ifb_fill_stats_data+0x3c/0xae ifb_get_ethtool_stats+0xc0/0x129 __dev_ethtool+0x1ca5/0x363c dev_ethtool+0x123/0x1b3 dev_ioctl+0x56c/0x744 sock_do_ioctl+0x15f/0x1b2 sock_ioctl+0x4d5/0x50a sys_ioctl+0xd8b/0xde9

With the patch applied, the same UML+KASAN repro is silent and ethtool -S ifb10 reports only the stats backed by the single allocated tx_private entry.

Record
GHSA-478c-pq6v-xx69
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
OSVBELL-CVE-2026-64121 7.1
Record
BELL-CVE-2026-64121
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2026-64121 7.1

In the Linux kernel, the following vulnerability has been resolved: net: ifb: report ethtool stats over num_tx_queues ifb_dev_init() allocates dp->tx_private to dev->num_tx_queues entries via kzalloc_objs(*txp, dev->num_tx_queues). Both IFB per-queue RX and TX stats live in those entries: ifb_xmit() updates txp->rx_stats using the skb queue mapping, ifb_ri_tasklet() updates txp->tx_stats, and ifb_stats64() aggregates both over dev->num_tx_queues. The ethtool stats callbacks instead size and walk the per-queue stats with dev->real_num_rx_queues and dev->real_num_tx_queues. With an asymmetric device where the RX queue count exceeds the TX queue count, for example: ip link add name ifb10 numtxqueues 1 numrxqueues 8 type ifb ethtool -S ifb10 ifb_get_ethtool_stats() indexes past the tx_private allocation and copies adjacent slab data through ETHTOOL_GSTATS. Use dev->num_tx_queues consistently for the stats strings, the stats count, and the stats data walks. This reports one RX stats group and one TX stats group for each backing ifb_q_private entry, which is the queue set IFB can actually populate. Reproduced under UML+KASAN at v7.1-rc2: BUG: KASAN: slab-out-of-bounds in ifb_fill_stats_data+0x3c/0xae Read of size 8 at addr 0000000062dbd228 by task ethtool/36 ifb_fill_stats_data+0x3c/0xae ifb_get_ethtool_stats+0xc0/0x129 __dev_ethtool+0x1ca5/0x363c dev_ethtool+0x123/0x1b3 dev_ioctl+0x56c/0x744 sock_do_ioctl+0x15f/0x1b2 sock_ioctl+0x4d5/0x50a sys_ioctl+0xd8b/0xde9 With the patch applied, the same UML+KASAN repro is silent and ethtool -S ifb10 reports only the stats backed by the single allocated tx_private entry.

Record
DEBIAN-CVE-2026-64121
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-07
Show 48 moreShow less
OSVUBUNTU-CVE-2026-64121 7.1

In the Linux kernel, the following vulnerability has been resolved: net: ifb: report ethtool stats over num_tx_queues ifb_dev_init() allocates dp->tx_private to dev->num_tx_queues entries via kzalloc_objs(*txp, dev->num_tx_queues). Both IFB per-queue RX and TX stats live in those entries: ifb_xmit() updates txp->rx_stats using the skb queue mapping, ifb_ri_tasklet() updates txp->tx_stats, and ifb_stats64() aggregates both over dev->num_tx_queues. The ethtool stats callbacks instead size and walk the per-queue stats with dev->real_num_rx_queues and dev->real_num_tx_queues. With an asymmetric device where the RX queue count exceeds the TX queue count, for example: ip link add name ifb10 numtxqueues 1 numrxqueues 8 type ifb ethtool -S ifb10 ifb_get_ethtool_stats() indexes past the tx_private allocation and copies adjacent slab data through ETHTOOL_GSTATS. Use dev->num_tx_queues consistently for the stats strings, the stats count, and the stats data walks. This reports one RX stats group and one TX stats group for each backing ifb_q_private entry, which is the queue set IFB can actually populate. Reproduced under UML+KASAN at v7.1-rc2: BUG: KASAN: slab-out-of-bounds in ifb_fill_stats_data+0x3c/0xae Read of size 8 at addr 0000000062dbd228 by task ethtool/36 ifb_fill_stats_data+0x3c/0xae ifb_get_ethtool_stats+0xc0/0x129 __dev_ethtool+0x1ca5/0x363c dev_ethtool+0x123/0x1b3 dev_ioctl+0x56c/0x744 sock_do_ioctl+0x15f/0x1b2 sock_ioctl+0x4d5/0x50a sys_ioctl+0xd8b/0xde9 With the patch applied, the same UML+KASAN repro is silent and ethtool -S ifb10 reports only the stats backed by the single allocated tx_private entry.

Record
UBUNTU-CVE-2026-64121
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-06
OSVCLSA-2026-1792762308 No score

kernel: Fix of 128 CVEs

  • net: skbuff: propagate shared-frag marker in skb_zerocopy()
  • net: bridge: stop fast-leave after deleting a port group {CVE-2026-74480}
  • net: ipv6: clear suppressed fib6 rule result {CVE-2026-74581}
  • net: skbuff: propagate shared-frag marker through frag-transfer helpers {CVE-2026-43503}
  • ALSA: virtio: reset device before deleting virtqueues {CVE-2026-98264}
  • ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() {CVE-2026-90033}
  • ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set {CVE-2026-74498}
  • ALSA: caiaq: Fix potential double-free at error path {CVE-2026-98066}
  • ASoC: Intel: avs: Disable periods-elapsed work when closing PCM {CVE-2025-40344}
  • ALSA: timer: drain a slave's callback before its master detaches it {CVE-2026-68201}
  • ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams {CVE-2026-53242}
  • ALSA: seq: midi: Serialize output teardown with event_input {CVE-2026-74387}
  • security/keys: fix missed RCU read section on lookup {CVE-2026-64015}
  • SUNRPC: harden gss_krb5_unwrap_v2 against short tokens {CVE-2026-89542}
  • sctp: fix err_chunk memory leaks in INIT handling {CVE-2026-72413}
  • netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() {CVE-2026-98077}
  • netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() {CVE-2026-74569}
  • mm/hugetlb: fix list corruption in allocate_file_region_entries() {CVE-2026-74518}
  • rcu: Fix rcu_read_unlock() deadloop due to softirq {CVE-2026-45957}
  • bpf: Fix potential UAF in bpf_netns_link_update_prog {CVE-2026-90393}
  • bpf: Fix use-after-free in offloaded map/prog info fill {CVE-2026-53089}
  • NFSv4.2: fix LAYOUTSTATS send buffer exhaustion {CVE-2026-90103}
  • uio: Fix stale info pointer in failed registration path {CVE-2026-93054}
  • tty: clear cdev pointer after cdev_add() failure {CVE-2026-90334}
  • tty: skip cdev_del() when no cdev is registered {CVE-2026-90335}
  • scsi: qla2xxx: Avoid double completion in async IOCB timeout {CVE-2026-89847}
  • scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue {CVE-2025-37861}
  • scsi: csiostor: Fix dereference of null pointer rn {CVE-2026-45857}
  • scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write {CVE-2026-74470}
  • wifi: brcmsmac: fix UAF in brcms_free_timer() {CVE-2026-98196}
  • wifi: mwifiex: validate scan response extents {CVE-2026-98185}
  • wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length {CVE-2026-90382}
  • wifi: iwlwifi: mvm: add a check on the tid coming from the firmware {CVE-2026-93791}
  • wifi: ath9k: fix OOB access from firmware tx status queue ID {CVE-2026-74408}
  • net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow {CVE-2026-98025}
  • net: thunderbolt: Fix frags[] overflow by bounding frame_count {CVE-2026-72157}
  • net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put {CVE-2026-98015}
  • net: stmmac: xgmac2: disable RBUE in default RX interrupt mask {CVE-2026-93830}
  • net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list {CVE-2026-53230}
  • xen/netfront: drop RX packets with a short Ethernet header {CVE-2026-98375}
  • veth: fix NAPI leak in XDP enable error path {CVE-2026-80613}
  • RDMA/rxe: Fix double free in rxe_srq_from_init {CVE-2026-45852}
  • RDMA/iwcm: Fix workqueue list corruption by removing work_list {CVE-2026-45898}
  • ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control {CVE-2026-72261}
  • svcrdma: Fix offset arithmetic in read_chunk_range {CVE-2026-89533}
  • SUNRPC: svcauth_gss: enforce krb5 token minimum length {CVE-2026-89550}
  • xprtrdma: Fix ep kref imbalance on ADDR_CHANGE {CVE-2026-72469}
  • sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START {CVE-2026-98130}
  • sctp: drop a chunk if its transport was removed {CVE-2026-89478}
  • sctp: prevent peer transport count overflow {CVE-2026-74469}
  • sctp: validate embedded address parameter length {CVE-2026-74287}
  • sctp: revalidate list cursor after…
Record
CLSA-2026-1792762308
Updated
2026-11-02
OSV No score

net: ifb: report ethtool stats over num_tx_queues

In the Linux kernel, the following vulnerability has been resolved:

net: ifb: report ethtool stats over num_tx_queues

ifb_dev_init() allocates dp->tx_private to dev->num_tx_queues entries via kzalloc_objs(*txp, dev->num_tx_queues). Both IFB per-queue RX and TX stats live in those entries: ifb_xmit() updates txp->rx_stats using the skb queue mapping, ifb_ri_tasklet() updates txp->tx_stats, and ifb_stats64() aggregates both over dev->num_tx_queues.

The ethtool stats callbacks instead size and walk the per-queue stats with dev->real_num_rx_queues and dev->real_num_tx_queues. With an asymmetric device where the RX queue count exceeds the TX queue count, for example:

ip link add name ifb10 numtxqueues 1 numrxqueues 8 type ifb
ethtool -S ifb10

ifb_get_ethtool_stats() indexes past the tx_private allocation and copies adjacent slab data through ETHTOOL_GSTATS.

Use dev->num_tx_queues consistently for the stats strings, the stats count, and the stats data walks. This reports one RX stats group and one TX stats group for each backing ifb_q_private entry, which is the queue set IFB can actually populate.

Reproduced under UML+KASAN at v7.1-rc2:

BUG: KASAN: slab-out-of-bounds in ifb_fill_stats_data+0x3c/0xae Read of size 8 at addr 0000000062dbd228 by task ethtool/36 ifb_fill_stats_data+0x3c/0xae ifb_get_ethtool_stats+0xc0/0x129 __dev_ethtool+0x1ca5/0x363c dev_ethtool+0x123/0x1b3 dev_ioctl+0x56c/0x744 sock_do_ioctl+0x15f/0x1b2 sock_ioctl+0x4d5/0x50a sys_ioctl+0xd8b/0xde9

With the patch applied, the same UML+KASAN repro is silent and ethtool -S ifb10 reports only the stats backed by the single allocated tx_private entry.

Record
CVE-2026-64121
Updated
2026-11-07
OSVopenSUSE-SU-2026:21910-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (bsc#1256671).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-23113: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).
  • CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
  • CVE-2026-23348: cxl/mem: Clarify @host for devm_cxl_add_nvdimm() (bsc#1260577).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31530: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (bsc#1262756).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132).
  • CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
  • CVE-2026-46135: nvmet-tcp: remove redundant calls to nvmet_tcp_fatal_error() (bsc#1267373).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). -…
Record
openSUSE-SU-2026:21910-1
Updated
2026-11-02
OSVSUSE-SU-2026:23477-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1235944)
  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-31392: smb: client: fix krb5 mount with username option (bsc#1261788).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).
  • CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
  • CVE-2026-43278: dm: clear cloned request bio pointer when last clone bio completes (bsc#1264584).
  • CVE-2026-43319: spi: spidev: fix lock inversion between spi_lock and buf_lock (bsc#1264788).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).
  • CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).
  • CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).
  • CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).
  • CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).
  • CVE-2026-53076: bpf: Fix OOB in pcpu_init_value (bsc#1269695).
  • CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412).
  • CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783).
  • CVE-2026-53091: net: account for encap headers in qdisc pkt len (bsc#1269530).
  • CVE-2026-53094: bpf: Fix stale offload->prog pointer after constant blinding (bsc#1269965).
  • CVE-2026-53096: bpf: Use RCU-safe iteration in…
Record
SUSE-SU-2026:23477-1
Updated
2026-11-02
OSVSUSE-SU-2026:23481-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1269731).
  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-31392: smb: client: fix krb5 mount with username option (bsc#1261788).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).
  • CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
  • CVE-2026-43278: dm: clear cloned request bio pointer when last clone bio completes (bsc#1264584).
  • CVE-2026-43319: spi: spidev: fix lock inversion between spi_lock and buf_lock (bsc#1264788).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).
  • CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).
  • CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).
  • CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).
  • CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).
  • CVE-2026-53076: bpf: Fix OOB in pcpu_init_value (bsc#1269695).
  • CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412).
  • CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783).
  • CVE-2026-53091: net: account for encap headers in qdisc pkt len (bsc#1269530).
  • CVE-2026-53094: bpf: Fix stale offload->prog pointer after constant blinding (bsc#1269965).
  • CVE-2026-53096: bpf: Use RCU-safe iteration in…
Record
SUSE-SU-2026:23481-1
Updated
2026-11-02
OSVSUSE-SU-2026:23528-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1235944)
  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-31392: smb: client: fix krb5 mount with username option (bsc#1261788).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).
  • CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
  • CVE-2026-43278: dm: clear cloned request bio pointer when last clone bio completes (bsc#1264584).
  • CVE-2026-43319: spi: spidev: fix lock inversion between spi_lock and buf_lock (bsc#1264788).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).
  • CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).
  • CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).
  • CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).
  • CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).
  • CVE-2026-53076: bpf: Fix OOB in pcpu_init_value (bsc#1269695).
  • CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412).
  • CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783).
  • CVE-2026-53091: net: account for encap headers in qdisc pkt len (bsc#1269530).
  • CVE-2026-53094: bpf: Fix stale offload->prog pointer after constant blinding (bsc#1269965).
  • CVE-2026-53096: bpf: Use RCU-safe iteration in…
Record
SUSE-SU-2026:23528-1
Updated
2026-11-02
OSVSUSE-SU-2026:23529-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1269731).
  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-31392: smb: client: fix krb5 mount with username option (bsc#1261788).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).
  • CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
  • CVE-2026-43278: dm: clear cloned request bio pointer when last clone bio completes (bsc#1264584).
  • CVE-2026-43319: spi: spidev: fix lock inversion between spi_lock and buf_lock (bsc#1264788).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).
  • CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).
  • CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).
  • CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).
  • CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).
  • CVE-2026-53076: bpf: Fix OOB in pcpu_init_value (bsc#1269695).
  • CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412).
  • CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783).
  • CVE-2026-53091: net: account for encap headers in qdisc pkt len (bsc#1269530).
  • CVE-2026-53094: bpf: Fix stale offload->prog pointer after constant blinding (bsc#1269965).
  • CVE-2026-53096: bpf: Use RCU-safe iteration in…
Record
SUSE-SU-2026:23529-1
Updated
2026-11-02
OSVSUSE-SU-2026:23881-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (bsc#1256671).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-23113: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).
  • CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
  • CVE-2026-23348: cxl/mem: Clarify @host for devm_cxl_add_nvdimm() (bsc#1260577).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31530: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (bsc#1262756).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132).
  • CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
  • CVE-2026-46135: nvmet-tcp: remove redundant calls to nvmet_tcp_fatal_error() (bsc#1267373).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). -…
Record
SUSE-SU-2026:23881-1
Updated
2026-11-02
OSVSUSE-SU-2026:23887-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (bsc#1256671).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-23113: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).
  • CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
  • CVE-2026-23348: cxl/mem: Clarify @host for devm_cxl_add_nvdimm() (bsc#1260577).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31530: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (bsc#1262756).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132).
  • CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
  • CVE-2026-46135: nvmet-tcp: remove redundant calls to nvmet_tcp_fatal_error() (bsc#1267373).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). -…
Record
SUSE-SU-2026:23887-1
Updated
2026-11-02
OSVSUSE-SU-2026:23897-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (bsc#1256671).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-23113: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).
  • CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
  • CVE-2026-23348: cxl/mem: Clarify @host for devm_cxl_add_nvdimm() (bsc#1260577).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31530: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (bsc#1262756).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132).
  • CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
  • CVE-2026-46135: nvmet-tcp: remove redundant calls to nvmet_tcp_fatal_error() (bsc#1267373).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). -…
Record
SUSE-SU-2026:23897-1
Updated
2026-11-02
OSVSUSE-SU-2026:23902-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (bsc#1256671).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-23113: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).
  • CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
  • CVE-2026-23348: cxl/mem: Clarify @host for devm_cxl_add_nvdimm() (bsc#1260577).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31530: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (bsc#1262756).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132).
  • CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
  • CVE-2026-46135: nvmet-tcp: remove redundant calls to nvmet_tcp_fatal_error() (bsc#1267373).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). -…
Record
SUSE-SU-2026:23902-1
Updated
2026-11-02
OSVSUSE-SU-2026:23993-1 No score

Security update for the Linux Kernel RT (Live Patch 16 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.37.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:23993-1
Updated
2026-11-02
OSVSUSE-SU-2026:23994-1 No score

Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:23994-1
Updated
2026-11-02
OSVSUSE-SU-2026:23995-1 No score

Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:23995-1
Updated
2026-11-02
OSVSUSE-SU-2026:23996-1 No score

Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:23996-1
Updated
2026-11-02
OSVSUSE-SU-2026:23997-1 No score

Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:23997-1
Updated
2026-11-02
OSVSUSE-SU-2026:23998-1 No score

Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:23998-1
Updated
2026-11-02
OSVSUSE-SU-2026:23999-1 No score

Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:23999-1
Updated
2026-11-02
OSVSUSE-SU-2026:24000-1 No score

Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24000-1
Updated
2026-11-02
OSVSUSE-SU-2026:24001-1 No score

Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24001-1
Updated
2026-11-02
OSVSUSE-SU-2026:24002-1 No score

Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24002-1
Updated
2026-11-02
OSVSUSE-SU-2026:24003-1 No score

Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24003-1
Updated
2026-11-02
OSVSUSE-SU-2026:24004-1 No score

Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24004-1
Updated
2026-11-02
OSVSUSE-SU-2026:24005-1 No score

Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24005-1
Updated
2026-11-02
OSVSUSE-SU-2026:24006-1 No score

Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24006-1
Updated
2026-11-02
OSVSUSE-SU-2026:24007-1 No score

Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24007-1
Updated
2026-11-02
OSVSUSE-SU-2026:24008-1 No score

Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24008-1
Updated
2026-11-02
OSVSUSE-SU-2026:24009-1 No score

Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24009-1
Updated
2026-11-02
OSVSUSE-SU-2026:24010-1 No score

Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24010-1
Updated
2026-11-02
OSVSUSE-SU-2026:24016-1 No score

Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24016-1
Updated
2026-11-02
OSVSUSE-SU-2026:24022-1 No score

Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-51.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24022-1
Updated
2026-11-02
OSVSUSE-SU-2026:24023-1 No score

Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-50.2 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24023-1
Updated
2026-11-02
OSVSUSE-SU-2026:24024-1 No score

Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-49.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24024-1
Updated
2026-11-02
OSVSUSE-SU-2026:24025-1 No score

Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24025-1
Updated
2026-11-02
OSVSUSE-SU-2026:24026-1 No score

Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24026-1
Updated
2026-11-02
OSVSUSE-SU-2026:24027-1 No score

Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24027-1
Updated
2026-11-02
OSVSUSE-SU-2026:24028-1 No score

Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24028-1
Updated
2026-11-02
OSVSUSE-SU-2026:24029-1 No score

Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-44.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24029-1
Updated
2026-11-02
OSVSUSE-SU-2026:24030-1 No score

Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24030-1
Updated
2026-11-02
OSVSUSE-SU-2026:24031-1 No score

Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24031-1
Updated
2026-11-02
OSVSUSE-SU-2026:24032-1 No score

Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24032-1
Updated
2026-11-02
OSVSUSE-SU-2026:24033-1 No score

Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24033-1
Updated
2026-11-02
OSVSUSE-SU-2026:24034-1 No score

Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24034-1
Updated
2026-11-02
OSVSUSE-SU-2026:24035-1 No score

Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24035-1
Updated
2026-11-02
OSVSUSE-SU-2026:24036-1 No score

Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-35.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24036-1
Updated
2026-11-02
OSVSUSE-SU-2026:24037-1 No score

Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-34.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24037-1
Updated
2026-11-02
OSVSUSE-SU-2026:24038-1 No score

Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues:

The following security issues were fixed:

  • CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
  • CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
  • CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
  • CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
  • CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).
Record
SUSE-SU-2026:24038-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
linux-lts
Alpaquita:23
6.1.174-r0 up to 6.1.175-r0
6.1.175-r0
linux-lts
Alpaquita:25
6.12.87-r0 up to 6.12.92-r0
6.12.92-r0
linux-lts
Alpaquita:stream
6.12.92-r1 up to 6.18.35-r1
6.18.35-r1
kernel
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-64k
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-64k-core
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-64k-debug
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-64k-debug-core
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-64k-debug-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-64k-debug-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-64k-debug-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-64k-debug-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-64k-debug-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-64k-debug-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-64k-debug-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-64k-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-64k-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-64k-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-64k-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-64k-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-64k-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-64k-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-abi-stablelists
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-core
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-cross-headers
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-debug
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-debug-core
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-debug-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-debug-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-debug-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-debug-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-debug-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-debug-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-debug-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-debug-uki-virt
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-debug-uki-virt-addons
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-doc
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-headers
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-ipaclones-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-rt
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-rt-64k
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-rt-64k-core
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-rt-64k-debug
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-rt-64k-debug-core
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-rt-64k-debug-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-rt-64k-debug-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-rt-64k-debug-kvm
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-rt-64k-debug-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-rt-64k-debug-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-rt-64k-debug-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-rt-64k-debug-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-rt-64k-debug-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-rt-64k-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-rt-64k-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-rt-64k-kvm
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-rt-64k-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-rt-64k-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-rt-64k-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-rt-64k-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-rt-64k-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-rt-core
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-rt-debug
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-rt-debug-core
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-rt-debug-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-rt-debug-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-rt-debug-kvm
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-rt-debug-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-rt-debug-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-rt-debug-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-rt-debug-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-rt-debug-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-rt-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-rt-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-rt-kvm
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-rt-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-rt-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-rt-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-rt-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-rt-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-selftests-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-tools
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-tools-libs
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-tools-libs-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-uki-virt
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
kernel-uki-virt-addons
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
libperf
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
libperf-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
perf
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
python3-perf
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
rtla
TuxCare:AlmaLinux:9.6
From an advisory covering 130 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els17
5.14.0-570.62.1.el9_6.tuxcare.5.els17
Kernel
Linux
5.17.0 up to 6.1.175, 6.2.0 up to 6.6.142, 6.7.0 up to 6.12.92, 6.13.0 up to 6.18.34, 6.19.0 up to 7.0.11
6.1.1756.6.1426.12.926.18.347.0.11
linux
Debian:12
before 6.1.176-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 45 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.170-16.1.170-26.1.170-36.1.172-16.1.174-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-1
6.1.176-1
linux
Debian:13
before 6.12.94-1, plus listed versions
6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-1
Show 22 moreShow less
6.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-1~bpo12+1
6.12.94-1
linux
Debian:14
before 7.0.12-1, plus listed versions
6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1
Show 45 moreShow less
6.12.113-16.12.115-16.12.115-26.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp1
7.0.12-1
kernel-rt
SUSE:Linux Micro 6.0
From an advisory covering 588 CVEs
before 6.4.0-52.1
6.4.0-52.1
kernel-source-rt
SUSE:Linux Micro 6.0
From an advisory covering 588 CVEs
before 6.4.0-52.1
6.4.0-52.1
kernel-default
SUSE:Linux Micro 6.0
From an advisory covering 588 CVEs
before 6.4.0-52.1
6.4.0-52.1
kernel-default-base
SUSE:Linux Micro 6.0
From an advisory covering 588 CVEs
before 6.4.0-52.1.21.36
6.4.0-52.1.21.36
kernel-kvmsmall
SUSE:Linux Micro 6.0
From an advisory covering 588 CVEs
before 6.4.0-52.1
6.4.0-52.1
kernel-source
SUSE:Linux Micro 6.0
From an advisory covering 588 CVEs
before 6.4.0-52.1
6.4.0-52.1
kernel-rt
SUSE:Linux Micro 6.1
From an advisory covering 588 CVEs
before 6.4.0-52.1
6.4.0-52.1
kernel-source-rt
SUSE:Linux Micro 6.1
From an advisory covering 588 CVEs
before 6.4.0-52.1
6.4.0-52.1
kernel-default
SUSE:Linux Micro 6.1
From an advisory covering 588 CVEs
before 6.4.0-52.1
6.4.0-52.1
kernel-default-base
SUSE:Linux Micro 6.1
From an advisory covering 588 CVEs
before 6.4.0-52.1.21.34
6.4.0-52.1.21.34
kernel-kvmsmall
SUSE:Linux Micro 6.1
From an advisory covering 588 CVEs
before 6.4.0-52.1
6.4.0-52.1
kernel-source
SUSE:Linux Micro 6.1
From an advisory covering 588 CVEs
before 6.4.0-52.1
6.4.0-52.1
kernel-obs-build
SUSE:Linux Micro Extras 6.2
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-syms
SUSE:Linux Micro Extras 6.2
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-64kb
SUSE:Linux Micro 6.2
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default
SUSE:Linux Micro 6.2
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default-base
SUSE:Linux Micro 6.2
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1.160000.2.23
6.12.0-160000.38.1.160000.2.23
kernel-rt
SUSE:Linux Micro 6.2
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-source
SUSE:Linux Micro 6.2
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-64kb
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-azure
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default-base
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1.160000.2.23
6.12.0-160000.38.1.160000.2.23
kernel-docs
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-kvmsmall
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-obs-qa
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-source
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-syms
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-64kb
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-azure
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1.160000.2.23
6.12.0-160000.38.1.160000.2.23
kernel-docs
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-kvmsmall
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-obs-qa
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-source
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-syms
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-zfcpdump
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-livepatch-SLE16-RT_Update_16
SUSE:Linux Micro 6.2
From an advisory covering 11 CVEs
before 3-160000.1.1
3-160000.1.1
kernel-livepatch-SLE16-RT_Update_15
SUSE:Linux Micro 6.2
From an advisory covering 17 CVEs
before 4-160000.1.1
4-160000.1.1
kernel-livepatch-SLE16-RT_Update_14
SUSE:Linux Micro 6.2
From an advisory covering 19 CVEs
before 6-160000.1.1
6-160000.1.1
kernel-livepatch-SLE16-RT_Update_13
SUSE:Linux Micro 6.2
From an advisory covering 19 CVEs
before 6-160000.1.1
6-160000.1.1
kernel-livepatch-SLE16-RT_Update_12
SUSE:Linux Micro 6.2
From an advisory covering 20 CVEs
before 6-160000.1.1
6-160000.1.1
kernel-livepatch-SLE16-RT_Update_11
SUSE:Linux Micro 6.2
From an advisory covering 20 CVEs
before 8-160000.1.1
8-160000.1.1
kernel-livepatch-SLE16-RT_Update_10
SUSE:Linux Micro 6.2
From an advisory covering 20 CVEs
before 8-160000.1.1
8-160000.1.1
kernel-livepatch-SLE16-RT_Update_9
SUSE:Linux Micro 6.2
From an advisory covering 20 CVEs
before 8-160000.1.1
8-160000.1.1
kernel-livepatch-SLE16-RT_Update_8
SUSE:Linux Micro 6.2
From an advisory covering 20 CVEs
before 9-160000.1.1
9-160000.1.1
kernel-livepatch-SLE16-RT_Update_7
SUSE:Linux Micro 6.2
From an advisory covering 20 CVEs
before 10-160000.1.1
10-160000.1.1
kernel-livepatch-SLE16-RT_Update_6
SUSE:Linux Micro 6.2
From an advisory covering 20 CVEs
before 11-160000.1.1
11-160000.1.1
kernel-livepatch-SLE16-RT_Update_5
SUSE:Linux Micro 6.2
From an advisory covering 20 CVEs
before 12-160000.1.1
12-160000.1.1
kernel-livepatch-SLE16-RT_Update_4
SUSE:Linux Micro 6.2
From an advisory covering 20 CVEs
before 13-160000.1.1
13-160000.1.1
kernel-livepatch-SLE16-RT_Update_3
SUSE:Linux Micro 6.2
From an advisory covering 20 CVEs
before 13-160000.1.1
13-160000.1.1
kernel-livepatch-SLE16-RT_Update_2
SUSE:Linux Micro 6.2
From an advisory covering 20 CVEs
before 14-160000.1.1
14-160000.1.1
kernel-livepatch-SLE16-RT_Update_1
SUSE:Linux Micro 6.2
From an advisory covering 20 CVEs
before 16-160000.1.1
16-160000.1.1
kernel-livepatch-SLE16-RT_Update_0
SUSE:Linux Micro 6.2
From an advisory covering 20 CVEs
before 17-160000.3.4
17-160000.3.4
kernel-livepatch-SLE16_Update_15
SUSE:Linux Micro 6.2
From an advisory covering 17 CVEs
before 4-160000.1.1
4-160000.1.1
kernel-livepatch-SLE16_Update_15
SUSE:Linux Enterprise Server 16.0
From an advisory covering 17 CVEs
before 4-160000.1.1
4-160000.1.1
kernel-livepatch-SLE16_Update_15
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 17 CVEs
before 4-160000.1.1
4-160000.1.1
kernel-livepatch-MICRO-6-0_Update_28
SUSE:Linux Micro 6.1
From an advisory covering 9 CVEs
before 3-1.1
3-1.1
kernel-livepatch-MICRO-6-0_Update_27
SUSE:Linux Micro 6.1
From an advisory covering 17 CVEs
before 4-1.1
4-1.1
kernel-livepatch-MICRO-6-0_Update_26
SUSE:Linux Micro 6.1
From an advisory covering 17 CVEs
before 4-1.1
4-1.1
kernel-livepatch-MICRO-6-0_Update_25
SUSE:Linux Micro 6.1
From an advisory covering 19 CVEs
before 5-1.1
5-1.1
kernel-livepatch-MICRO-6-0_Update_24
SUSE:Linux Micro 6.1
From an advisory covering 19 CVEs
before 6-1.1
6-1.1
kernel-livepatch-MICRO-6-0_Update_23
SUSE:Linux Micro 6.1
From an advisory covering 19 CVEs
before 7-1.1
7-1.1
kernel-livepatch-MICRO-6-0_Update_22
SUSE:Linux Micro 6.1
From an advisory covering 19 CVEs
before 7-1.1
7-1.1
kernel-livepatch-MICRO-6-0_Update_21
SUSE:Linux Micro 6.1
From an advisory covering 19 CVEs
before 7-1.1
7-1.1
kernel-livepatch-MICRO-6-0_Update_20
SUSE:Linux Micro 6.1
From an advisory covering 19 CVEs
before 7-1.1
7-1.1
kernel-livepatch-MICRO-6-0_Update_19
SUSE:Linux Micro 6.1
From an advisory covering 19 CVEs
before 8-1.1
8-1.1
kernel-livepatch-MICRO-6-0_Update_18
SUSE:Linux Micro 6.1
From an advisory covering 19 CVEs
before 10-1.1
10-1.1
kernel-livepatch-MICRO-6-0_Update_16
SUSE:Linux Micro 6.1
From an advisory covering 19 CVEs
before 12-1.1
12-1.1
kernel-livepatch-MICRO-6-0_Update_14
SUSE:Linux Micro 6.1
From an advisory covering 19 CVEs
before 13-1.2
13-1.2
kernel-livepatch-MICRO-6-0_Update_13
SUSE:Linux Micro 6.1
From an advisory covering 19 CVEs
before 15-1.1
15-1.1
kernel-livepatch-MICRO-6-0_Update_12
SUSE:Linux Micro 6.1
From an advisory covering 19 CVEs
before 17-1.1
17-1.1
kernel-livepatch-MICRO-6-0_Update_11
SUSE:Linux Micro 6.1
From an advisory covering 19 CVEs
before 17-1.1
17-1.1
kernel-livepatch-MICRO-6-0_Update_17
SUSE:Linux Micro 6.1
From an advisory covering 19 CVEs
before 11-1.1
11-1.1
kernel-livepatch-MICRO-6-0-RT_Update_28
SUSE:Linux Micro 6.1
From an advisory covering 9 CVEs
before 3-1.1
3-1.1
kernel-livepatch-MICRO-6-0-RT_Update_27
SUSE:Linux Micro 6.1
From an advisory covering 17 CVEs
before 4-1.1
4-1.1
kernel-livepatch-MICRO-6-0-RT_Update_26
SUSE:Linux Micro 6.1
From an advisory covering 17 CVEs
before 4-1.1
4-1.1
kernel-livepatch-MICRO-6-0-RT_Update_25
SUSE:Linux Micro 6.1
From an advisory covering 19 CVEs
before 5-1.1
5-1.1
kernel-livepatch-MICRO-6-0-RT_Update_24
SUSE:Linux Micro 6.1
From an advisory covering 19 CVEs
before 6-1.1
6-1.1
kernel-livepatch-MICRO-6-0-RT_Update_23
SUSE:Linux Micro 6.1
From an advisory covering 19 CVEs
before 7-1.1
7-1.1
kernel-livepatch-MICRO-6-0-RT_Update_22
SUSE:Linux Micro 6.1
From an advisory covering 19 CVEs
before 7-1.2
7-1.2
kernel-livepatch-MICRO-6-0-RT_Update_21
SUSE:Linux Micro 6.1
From an advisory covering 19 CVEs
before 7-1.1
7-1.1
kernel-livepatch-MICRO-6-0-RT_Update_20
SUSE:Linux Micro 6.1
From an advisory covering 19 CVEs
before 8-1.1
8-1.1
kernel-livepatch-MICRO-6-0-RT_Update_19
SUSE:Linux Micro 6.1
From an advisory covering 19 CVEs
before 10-1.1
10-1.1
kernel-livepatch-MICRO-6-0-RT_Update_18
SUSE:Linux Micro 6.1
From an advisory covering 19 CVEs
before 11-1.1
11-1.1
kernel-livepatch-MICRO-6-0-RT_Update_15
SUSE:Linux Micro 6.1
From an advisory covering 19 CVEs
before 12-1.1
12-1.1
kernel-livepatch-MICRO-6-0-RT_Update_14
SUSE:Linux Micro 6.1
From an advisory covering 19 CVEs
before 13-1.1
13-1.1
kernel-livepatch-MICRO-6-0-RT_Update_13
SUSE:Linux Micro 6.1
From an advisory covering 19 CVEs
before 13-1.1
13-1.1
kernel-livepatch-MICRO-6-0-RT_Update_12
SUSE:Linux Micro 6.1
From an advisory covering 19 CVEs
before 17-1.1
17-1.1
kernel-livepatch-MICRO-6-0-RT_Update_28
SUSE:Linux Micro 6.0
From an advisory covering 9 CVEs
before 3-1.1
3-1.1
linux-hwe-edge
Ubuntu:16.04:LTS
All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
None known
linux-aws-5.0
Ubuntu:18.04:LTS
All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
None known
linux-aws-5.3
Ubuntu:18.04:LTS
All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
None known
linux-azure
Ubuntu:18.04:LTS
All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
None known
linux-azure-5.3
Ubuntu:18.04:LTS
All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
None known
linux-azure-edge
Ubuntu:18.04:LTS
All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
None known
linux-gcp
Ubuntu:18.04:LTS
All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
None known
linux-gcp-5.3
Ubuntu:18.04:LTS
All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
None known
linux-gke-4.15
Ubuntu:18.04:LTS
All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
None known
linux-gke-5.4
Ubuntu:18.04:LTS
All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
None known
linux-hwe
Ubuntu:18.04:LTS
All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
None known
linux-hwe-edge
Ubuntu:18.04:LTS
All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
None known
linux-oem
Ubuntu:18.04:LTS
All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
None known
linux-oracle-5.0
Ubuntu:18.04:LTS
All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
None known
linux-oracle-5.3
Ubuntu:18.04:LTS
All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
None known
linux-aws-5.11
Ubuntu:20.04:LTS
All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
None known
linux-aws-5.13
Ubuntu:20.04:LTS
All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
None known
linux-aws-5.8
Ubuntu:20.04:LTS
All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
None known
linux-azure-5.11
Ubuntu:20.04:LTS
All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
None known
linux-azure-5.13
Ubuntu:20.04:LTS
All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
None known
linux-azure-5.8
Ubuntu:20.04:LTS
All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
None known
linux-azure-fde
Ubuntu:20.04:LTS
All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
None known
linux-gcp-5.11
Ubuntu:20.04:LTS
All versions, plus listed versions
5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1
Show 7 moreShow less
5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3
None known
linux-gcp-5.13
Ubuntu:20.04:LTS
All versions, plus listed versions
5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1
Show 8 moreShow less
5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1
None known
linux-gcp-5.8
Ubuntu:20.04:LTS
All versions, plus listed versions
5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41
None known
linux-gke
Ubuntu:20.04:LTS
All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
None known
linux-gke-5.15
Ubuntu:20.04:LTS
All versions, plus listed versions
5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1
Show 13 moreShow less
5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1
None known
linux-gkeop
Ubuntu:20.04:LTS
All versions, plus listed versions
5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13
Show 45 moreShow less
5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77
None known
linux-gkeop-5.15
Ubuntu:20.04:LTS
All versions, plus listed versions
5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2
Show 40 moreShow less
5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1
None known
linux-hwe-5.11
Ubuntu:20.04:LTS
All versions, plus listed versions
5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1
Show 7 moreShow less
5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1
None known
linux-hwe-5.13
Ubuntu:20.04:LTS
All versions, plus listed versions
5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1
Show 11 moreShow less
5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1
None known
linux-hwe-5.8
Ubuntu:20.04:LTS
All versions, plus listed versions
5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1
Show 16 moreShow less
5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1
None known
linux-intel-5.13
Ubuntu:20.04:LTS
All versions, plus listed versions
5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19
None known
linux-oem-5.10
Ubuntu:20.04:LTS
All versions, plus listed versions
5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17
Show 21 moreShow less
5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61
None known
linux-oem-5.13
Ubuntu:20.04:LTS
All versions, plus listed versions
5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21
Show 7 moreShow less
5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36
None known
linux-oem-5.14
Ubuntu:20.04:LTS
All versions, plus listed versions
5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10
Show 30 moreShow less
5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67
None known
linux-oem-5.6
Ubuntu:20.04:LTS
All versions, plus listed versions
5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13
Show 24 moreShow less
5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60
None known
linux-oracle-5.11
Ubuntu:20.04:LTS
All versions, plus listed versions
5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
None known
linux-oracle-5.13
Ubuntu:20.04:LTS
All versions, plus listed versions
5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1
Show 7 moreShow less
5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1
None known
linux-oracle-5.8
Ubuntu:20.04:LTS
All versions, plus listed versions
5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1
None known
linux-raspi2
Ubuntu:20.04:LTS
All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
None known
linux-riscv
Ubuntu:20.04:LTS
All versions, plus listed versions
5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34
Show 7 moreShow less
5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45
None known
linux-riscv-5.11
Ubuntu:20.04:LTS
All versions, plus listed versions
5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1
Show 8 moreShow less
5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35
None known
linux-riscv-5.8
Ubuntu:20.04:LTS
All versions, plus listed versions
5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1
Show 5 moreShow less
5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1
None known
linux-allwinner-5.19
Ubuntu:22.04:LTS
All versions, plus listed versions
5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1
None known
linux-aws-5.19
Ubuntu:22.04:LTS
All versions, plus listed versions
5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1
Show 5 moreShow less
5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1
None known
linux-aws-6.2
Ubuntu:22.04:LTS
All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 9 moreShow less
6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1
None known
linux-aws-6.5
Ubuntu:22.04:LTS
All versions, plus listed versions
6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1
Show 9 moreShow less
6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1
None known
linux-aws-6.8
Ubuntu:22.04:LTS
before 6.8.0-1064.67~22.04.1, plus listed versions
6.8.0-1009.9~22.04.26.8.0-1010.10~22.04.26.8.0-1011.12~22.04.16.8.0-1013.14~22.04.16.8.0-1014.15~22.04.1
Show 37 moreShow less
6.8.0-1015.16~22.04.16.8.0-1016.17~22.04.26.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1023.25~22.04.16.8.0-1024.26~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1035.37~22.04.16.8.0-1036.38~22.04.16.8.0-1039.41~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.44~22.04.16.8.0-1043.45~22.04.16.8.0-1044.46~22.04.16.8.0-1045.47~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.16.8.0-1050.53~22.04.16.8.0-1051.54~22.04.16.8.0-1052.55~22.04.16.8.0-1053.56~22.04.16.8.0-1055.58~22.04.16.8.0-1057.60~22.04.16.8.0-1060.63~22.04.16.8.0-1061.64~22.04.16.8.0-1062.65~22.04.26.8.0-1063.66~22.04.1
6.8.0-1064.67~22.04.1
linux-azure-5.19
Ubuntu:22.04:LTS
All versions, plus listed versions
5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2
None known
linux-azure-6.2
Ubuntu:22.04:LTS
All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 8 moreShow less
6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1
None known
linux-azure-6.5
Ubuntu:22.04:LTS
All versions, plus listed versions
6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1
Show 9 moreShow less
6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1
None known
linux-azure-6.8
Ubuntu:22.04:LTS
before 6.8.0-1067.75~22.04.1, plus listed versions
6.8.0-1008.8~22.04.16.8.0-1009.9~22.04.16.8.0-1010.10~22.04.16.8.0-1012.14~22.04.16.8.0-1013.15~22.04.1
Show 25 moreShow less
6.8.0-1014.16~22.04.16.8.0-1015.17~22.04.26.8.0-1017.20~22.04.16.8.0-1018.21~22.04.16.8.0-1020.23~22.04.16.8.0-1021.25~22.04.16.8.0-1025.30~22.04.16.8.0-1026.31~22.04.16.8.0-1027.32~22.04.16.8.0-1028.33~22.04.16.8.0-1029.34~22.04.16.8.0-1030.35~22.04.16.8.0-1031.36~22.04.16.8.0-1034.39~22.04.16.8.0-1036.42~22.04.16.8.0-1040.46~22.04.16.8.0-1041.47~22.04.16.8.0-1044.50~22.04.16.8.0-1051.57~22.04.16.8.0-1052.58~22.04.16.8.0-1059.65~22.04.16.8.0-1062.69~22.04.16.8.0-1063.71~22.04.16.8.0-1064.72~22.04.16.8.0-1065.73~22.04.1
6.8.0-1067.75~22.04.1
linux-azure-fde-5.19
Ubuntu:22.04:LTS
All versions, plus listed versions
5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1
None known
linux-azure-fde-6.2
Ubuntu:22.04:LTS
All versions, plus listed versions
6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1
Show 5 moreShow less
6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1
None known
linux-azure-fde-6.8
Ubuntu:22.04:LTS
before 6.8.0-1065.72~22.04.1, plus listed versions
6.8.0-1041.48~22.04.16.8.0-1042.49~22.04.16.8.0-1044.51~22.04.16.8.0-1046.53~22.04.16.8.0-1053.60~22.04.1
Show 5 moreShow less
6.8.0-1058.65~22.04.16.8.0-1061.68~22.04.16.8.0-1062.69~22.04.16.8.0-1063.70~22.04.16.8.0-1064.71~22.04.1
6.8.0-1065.72~22.04.1
linux-gcp-5.19
Ubuntu:22.04:LTS
All versions, plus listed versions
5.19.0-1020.22~22.04.25.19.0-1021.23~22.04.15.19.0-1022.24~22.04.15.19.0-1024.26~22.04.15.19.0-1025.27~22.04.15.19.0-1026.28~22.04.15.19.0-1027.29~22.04.15.19.0-1030.32~22.04.1
None known
linux-gcp-6.2
Ubuntu:22.04:LTS
All versions, plus listed versions
6.2.0-1009.9~22.04.36.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1011.11~22.04.36.2.0-1012.12~22.04.1
Show 7 moreShow less
6.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1016.18~22.04.16.2.0-1017.19~22.04.16.2.0-1018.20~22.04.16.2.0-1019.21~22.04.16.2.0-1021.23~22.04.1
None known
linux-gcp-6.5
Ubuntu:22.04:LTS
All versions, plus listed versions
6.5.0-1010.10~22.04.36.5.0-1011.11~22.04.16.5.0-1013.13~22.04.16.5.0-1014.14~22.04.16.5.0-1015.15~22.04.1
Show 8 moreShow less
6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1022.24~22.04.16.5.0-1023.25~22.04.16.5.0-1024.26~22.04.16.5.0-1025.27~22.04.1
None known
linux-gcp-6.8
Ubuntu:22.04:LTS
before 6.8.0-1067.75~22.04.1, plus listed versions
6.8.0-1010.11~22.04.16.8.0-1011.12~22.04.16.8.0-1012.13~22.04.16.8.0-1013.14~22.04.16.8.0-1014.16~22.04.1
Show 38 moreShow less
6.8.0-1015.17~22.04.16.8.0-1016.18~22.04.16.8.0-1017.19~22.04.16.8.0-1018.20~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1024.26~22.04.16.8.0-1025.27~22.04.16.8.0-1026.28~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1034.36~22.04.26.8.0-1036.38~22.04.16.8.0-1037.39~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.45~22.04.16.8.0-1043.46~22.04.16.8.0-1044.47~22.04.16.8.0-1045.48~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.26.8.0-1048.51~22.04.16.8.0-1052.55~22.04.16.8.0-1053.56~22.04.16.8.0-1054.57~22.04.16.8.0-1058.61~22.04.16.8.0-1060.63~22.04.16.8.0-1063.69~22.04.16.8.0-1064.72~22.04.16.8.0-1065.73~22.04.16.8.0-1066.74~22.04.1
6.8.0-1067.75~22.04.1
linux-hwe-5.19
Ubuntu:22.04:LTS
All versions, plus listed versions
5.19.0-28.29~22.04.15.19.0-32.33~22.04.15.19.0-35.36~22.04.15.19.0-38.39~22.04.15.19.0-40.41~22.04.1
Show 6 moreShow less
5.19.0-41.42~22.04.15.19.0-42.43~22.04.15.19.0-43.44~22.04.15.19.0-45.46~22.04.15.19.0-46.47~22.04.15.19.0-50.50
None known
linux-hwe-6.2
Ubuntu:22.04:LTS
All versions, plus listed versions
6.2.0-25.25~22.04.26.2.0-26.26~22.04.16.2.0-31.31~22.04.16.2.0-32.32~22.04.16.2.0-33.33~22.04.1
Show 5 moreShow less
6.2.0-34.34~22.04.16.2.0-35.35~22.04.16.2.0-36.37~22.04.16.2.0-37.38~22.04.16.2.0-39.40~22.04.1
None known
linux-hwe-6.5
Ubuntu:22.04:LTS
All versions, plus listed versions
6.5.0-14.14~22.04.16.5.0-15.15~22.04.16.5.0-17.17~22.04.16.5.0-18.18~22.04.16.5.0-21.21~22.04.1
Show 8 moreShow less
6.5.0-25.25~22.04.16.5.0-26.26~22.04.16.5.0-27.28~22.04.16.5.0-28.29~22.04.16.5.0-35.35~22.04.16.5.0-41.41~22.04.26.5.0-44.44~22.04.16.5.0-45.45~22.04.1
None known
linux-hwe-6.8
Ubuntu:22.04:LTS
All versions, plus listed versions
6.8.0-38.38~22.04.16.8.0-39.39~22.04.16.8.0-40.40~22.04.36.8.0-45.45~22.04.16.8.0-47.47~22.04.1
Show 32 moreShow less
6.8.0-48.48~22.04.16.8.0-49.49~22.04.16.8.0-50.51~22.04.16.8.0-51.52~22.04.16.8.0-52.53~22.04.16.8.0-57.59~22.04.16.8.0-58.60~22.04.16.8.0-59.61~22.04.16.8.0-60.63~22.04.16.8.0-64.67~22.04.16.8.0-65.68~22.04.16.8.0-78.78~22.04.16.8.0-79.79~22.04.16.8.0-83.83~22.04.16.8.0-84.84~22.04.16.8.0-85.85~22.04.16.8.0-86.87~22.04.16.8.0-87.88~22.04.16.8.0-88.89~22.04.26.8.0-90.91~22.04.16.8.0-94.96~22.04.16.8.0-100.100~22.04.16.8.0-101.101~22.04.16.8.0-106.106~22.04.16.8.0-107.107~22.04.16.8.0-110.110~22.04.16.8.0-111.111~22.04.16.8.0-117.117~22.04.16.8.0-124.124~22.04.16.8.0-134.134~22.04.16.8.0-136.136~22.04.16.8.0-138.138~22.04.1
None known
linux-ibm-6.8
Ubuntu:22.04:LTS
before 6.8.0-1066.67~22.04.1, plus listed versions
6.8.0-1008.8~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.16.8.0-1013.13~22.04.1
Show 35 moreShow less
6.8.0-1014.14~22.04.16.8.0-1015.15~22.04.16.8.0-1016.16~22.04.16.8.0-1017.17~22.04.16.8.0-1018.18~22.04.16.8.0-1019.19~22.04.16.8.0-1023.23~22.04.16.8.0-1024.24~22.04.16.8.0-1025.25~22.04.16.8.0-1026.26~22.04.16.8.0-1027.27~22.04.16.8.0-1028.28~22.04.16.8.0-1029.29~22.04.16.8.0-1030.30~22.04.16.8.0-1033.33~22.04.16.8.0-1036.36~22.04.16.8.0-1037.37~22.04.16.8.0-1038.38~22.04.16.8.0-1039.39~22.04.16.8.0-1040.40~22.04.16.8.0-1041.41~22.04.16.8.0-1042.42~22.04.16.8.0-1043.43~22.04.16.8.0-1044.44~22.04.16.8.0-1045.45~22.04.16.8.0-1049.49~22.04.16.8.0-1050.50~22.04.16.8.0-1051.51~22.04.16.8.0-1052.52~22.04.16.8.0-1055.56~22.04.16.8.0-1057.58~22.04.16.8.0-1060.61~22.04.16.8.0-1061.62~22.04.16.8.0-1062.63~22.04.16.8.0-1063.64~22.04.1
6.8.0-1066.67~22.04.1
linux-intel-iot-realtime
Ubuntu:22.04:LTS
All versions, plus listed versions
5.15.0-1073.75
None known
linux-lowlatency-hwe-5.19
Ubuntu:22.04:LTS
All versions, plus listed versions
5.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.1
Show 5 moreShow less
5.19.0-1024.25~22.04.15.19.0-1025.26~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1030.30
None known
linux-lowlatency-hwe-6.2
Ubuntu:22.04:LTS
All versions, plus listed versions
6.2.0-1008.8~22.04.16.2.0-1009.9~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.1
Show 5 moreShow less
6.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1
None known
linux-lowlatency-hwe-6.5
Ubuntu:22.04:LTS
All versions, plus listed versions
6.5.0-14.14.1~22.04.16.5.0-15.15.1.1~22.04.16.5.0-17.17.1.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.1
Show 8 moreShow less
6.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.16.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-41.41.1~22.04.16.5.0-42.42.1~22.04.16.5.0-44.44.1~22.04.16.5.0-45.45.1~22.04.1
None known
linux-lowlatency-hwe-6.8
Ubuntu:22.04:LTS
before 6.8.0-139.139.1~22.04.1, plus listed versions
6.8.0-38.38.1~22.04.26.8.0-40.40.1~22.04.16.8.0-44.44.1~22.04.16.8.0-45.45.1~22.04.16.8.0-47.47.1~22.04.1
Show 37 moreShow less
6.8.0-48.48.3~22.04.16.8.0-49.49.1~22.04.16.8.0-50.51.1~22.04.16.8.0-51.52.1~22.04.16.8.0-52.53.1~22.04.16.8.0-54.56.1~22.04.16.8.0-55.57.1~22.04.16.8.0-56.58.1~22.04.16.8.0-57.59.1~22.04.16.8.0-58.60.1~22.04.16.8.0-59.61.1~22.04.16.8.0-60.63.1~22.04.16.8.0-62.65.1~22.04.16.8.0-63.66.1~22.04.16.8.0-64.67.1~22.04.16.8.0-65.68.1~22.04.16.8.0-78.78.1~22.04.16.8.0-79.79.1~22.04.16.8.0-83.83.1~22.04.16.8.0-84.84.1~22.04.16.8.0-85.85.1~22.04.16.8.0-86.87.1~22.04.16.8.0-87.88.1~22.04.16.8.0-88.89.1~22.04.16.8.0-90.91.1~22.04.16.8.0-94.96.1~22.04.16.8.0-100.100.1~22.04.16.8.0-101.101.1~22.04.16.8.0-106.106.1~22.04.16.8.0-107.107.1~22.04.16.8.0-110.110.1~22.04.16.8.0-111.111.1~22.04.16.8.0-117.117.1~22.04.16.8.0-134.134.1~22.04.16.8.0-136.136.2~22.04.16.8.0-137.137.1~22.04.16.8.0-138.138.1~22.04.1
6.8.0-139.139.1~22.04.1
linux-nvidia-6.2
Ubuntu:22.04:LTS
All versions, plus listed versions
6.2.0-1003.3~22.04.16.2.0-1009.96.2.0-1010.106.2.0-1011.116.2.0-1012.126.2.0-1013.136.2.0-1015.15
None known
linux-nvidia-6.5
Ubuntu:22.04:LTS
All versions, plus listed versions
6.5.0-1004.46.5.0-1007.76.5.0-1013.136.5.0-1014.146.5.0-1015.15
Show 6 moreShow less
6.5.0-1018.186.5.0-1019.196.5.0-1021.226.5.0-1022.236.5.0-1023.246.5.0-1024.25
None known
linux-nvidia-6.8
Ubuntu:22.04:LTS
before 6.8.0-1062.65~22.04.1, plus listed versions
6.8.0-1008.8~22.04.16.8.0-1009.9~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.1
Show 41 moreShow less
6.8.0-1013.14~22.04.16.8.0-1014.15~22.04.16.8.0-1015.16~22.04.16.8.0-1017.19~22.04.16.8.0-1018.20~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1022.25~22.04.26.8.0-1023.26~22.04.16.8.0-1024.27~22.04.16.8.0-1025.28~22.04.16.8.0-1026.29~22.04.16.8.0-1027.30~22.04.16.8.0-1028.31~22.04.16.8.0-1029.32~22.04.16.8.0-1030.33~22.04.16.8.0-1031.34~22.04.16.8.0-1032.35~22.04.16.8.0-1035.38~22.04.16.8.0-1036.39~22.04.16.8.0-1038.41~22.04.16.8.0-1039.42~22.04.16.8.0-1040.43~22.04.16.8.0-1041.44~22.04.26.8.0-1042.45~22.04.16.8.0-1043.46~22.04.16.8.0-1044.47~22.04.16.8.0-1045.48~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.16.8.0-1049.52~22.04.16.8.0-1050.53~22.04.16.8.0-1051.54~22.04.16.8.0-1052.55~22.04.16.8.0-1054.57~22.04.16.8.0-1055.58~22.04.16.8.0-1058.61~22.04.16.8.0-1059.62~22.04.16.8.0-1060.63~22.04.16.8.0-1061.64~22.04.1
6.8.0-1062.65~22.04.1
linux-oem-5.17
Ubuntu:22.04:LTS
All versions, plus listed versions
5.17.0-1003.35.17.0-1004.45.17.0-1006.65.17.0-1011.125.17.0-1012.13
Show 21 moreShow less
5.17.0-1013.145.17.0-1014.155.17.0-1015.165.17.0-1016.175.17.0-1017.185.17.0-1018.195.17.0-1019.205.17.0-1020.215.17.0-1021.225.17.0-1024.255.17.0-1025.265.17.0-1026.275.17.0-1027.285.17.0-1028.295.17.0-1029.305.17.0-1030.315.17.0-1031.325.17.0-1032.335.17.0-1033.345.17.0-1034.355.17.0-1035.36
None known
linux-oem-6.0
Ubuntu:22.04:LTS
All versions, plus listed versions
6.0.0-1006.66.0.0-1007.76.0.0-1008.86.0.0-1009.96.0.0-1010.10
Show 11 moreShow less
6.0.0-1011.116.0.0-1012.126.0.0-1013.136.0.0-1014.146.0.0-1015.156.0.0-1016.166.0.0-1017.176.0.0-1018.186.0.0-1019.196.0.0-1020.206.0.0-1021.21
None known
linux-oem-6.1
Ubuntu:22.04:LTS
All versions, plus listed versions
6.1.0-1004.46.1.0-1006.66.1.0-1007.76.1.0-1008.86.1.0-1009.9
Show 22 moreShow less
6.1.0-1010.106.1.0-1012.126.1.0-1013.136.1.0-1014.146.1.0-1015.156.1.0-1016.166.1.0-1017.176.1.0-1019.196.1.0-1020.206.1.0-1021.216.1.0-1022.226.1.0-1023.236.1.0-1024.246.1.0-1025.256.1.0-1026.266.1.0-1027.276.1.0-1028.286.1.0-1029.296.1.0-1033.336.1.0-1034.346.1.0-1035.356.1.0-1036.36
None known
linux-oem-6.5
Ubuntu:22.04:LTS
All versions, plus listed versions
6.5.0-1003.36.5.0-1004.46.5.0-1006.66.5.0-1007.76.5.0-1008.8
Show 14 moreShow less
6.5.0-1009.106.5.0-1011.126.5.0-1013.146.5.0-1014.156.5.0-1015.166.5.0-1016.176.5.0-1018.196.5.0-1019.206.5.0-1020.216.5.0-1022.236.5.0-1023.246.5.0-1024.256.5.0-1025.266.5.0-1027.28
None known
linux-oracle-6.5
Ubuntu:22.04:LTS
All versions, plus listed versions
6.5.0-1013.13~22.04.46.5.0-1014.14~22.04.16.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1018.18~22.04.1
Show 8 moreShow less
6.5.0-1019.19~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.16.5.0-1025.25~22.04.16.5.0-1026.26~22.04.16.5.0-1027.27~22.04.1
None known
linux-oracle-6.8
Ubuntu:22.04:LTS
before 6.8.0-1061.64~22.04.1, plus listed versions
6.8.0-1006.6~22.04.36.8.0-1008.8~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.1
Show 38 moreShow less
6.8.0-1013.13~22.04.16.8.0-1014.14~22.04.16.8.0-1015.15~22.04.16.8.0-1016.17~22.04.16.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.20~22.04.16.8.0-1020.21~22.04.16.8.0-1021.22~22.04.16.8.0-1022.23~22.04.16.8.0-1023.24~22.04.16.8.0-1024.25~22.04.16.8.0-1025.26~22.04.16.8.0-1026.27~22.04.16.8.0-1027.28~22.04.16.8.0-1028.29~22.04.16.8.0-1029.30~22.04.16.8.0-1030.31~22.04.16.8.0-1032.33~22.04.16.8.0-1033.34~22.04.16.8.0-1035.36~22.04.16.8.0-1037.38~22.04.16.8.0-1038.39~22.04.16.8.0-1039.40~22.04.16.8.0-1040.41~22.04.16.8.0-1041.42~22.04.16.8.0-1042.43~22.04.16.8.0-1043.44~22.04.16.8.0-1044.45~22.04.16.8.0-1047.48~22.04.16.8.0-1049.50~22.04.16.8.0-1050.51~22.04.16.8.0-1052.53~22.04.16.8.0-1054.55~22.04.16.8.0-1057.58~22.04.16.8.0-1058.61~22.04.16.8.0-1059.62~22.04.16.8.0-1060.63~22.04.1
6.8.0-1061.64~22.04.1
linux-realtime
Ubuntu:22.04:LTS
All versions, plus listed versions
5.15.0-1032.35
None known
linux-riscv
Ubuntu:22.04:LTS
All versions, plus listed versions
5.13.0-1004.45.13.0-1006.6+22.04.15.13.0-1007.7+22.04.15.13.0-1010.11+22.04.15.15.0-1004.4
Show 18 moreShow less
5.15.0-1005.55.15.0-1006.65.15.0-1007.75.15.0-1008.85.15.0-1011.125.15.0-1012.135.15.0-1014.165.15.0-1015.175.15.0-1016.185.15.0-1017.195.15.0-1018.215.15.0-1019.225.15.0-1020.235.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.32
None known
linux-riscv-5.19
Ubuntu:22.04:LTS
All versions, plus listed versions
5.19.0-1012.13~22.04.15.19.0-1015.16~22.04.15.19.0-1016.17~22.04.15.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.15.19.0-1021.23~22.04.1
None known
linux-riscv-6.5
Ubuntu:22.04:LTS
All versions, plus listed versions
6.5.0-17.17.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.16.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.1
Show 5 moreShow less
6.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-40.40.1~22.04.16.5.0-42.42.1~22.04.16.5.0-45.45.1~22.04.1
None known
linux-riscv-6.8
Ubuntu:22.04:LTS
before 6.8.0-139.139~22.04.1, plus listed versions
6.8.0-38.38.1~22.04.16.8.0-39.39.1~22.04.16.8.0-40.40.1~22.04.16.8.0-41.41.1~22.04.16.8.0-44.44.1~22.04.1
Show 37 moreShow less
6.8.0-47.47.1~22.04.16.8.0-48.48.1~22.04.26.8.0-49.49.1~22.04.16.8.0-50.51.1~22.04.16.8.0-51.52.1~22.04.16.8.0-52.53.1~22.04.16.8.0-53.55.1~22.04.16.8.0-55.57.1~22.04.16.8.0-56.58.1~22.04.16.8.0-57.59.1~22.04.16.8.0-58.60.1~22.04.16.8.0-59.61.1~22.04.16.8.0-62.65~22.04.16.8.0-63.66~22.04.16.8.0-64.67~22.04.16.8.0-71.71~22.04.16.8.0-78.78~22.04.16.8.0-79.79~22.04.16.8.0-83.83~22.04.16.8.0-84.84~22.04.16.8.0-86.87~22.04.16.8.0-87.88~22.04.16.8.0-88.89~22.04.16.8.0-90.91~22.04.16.8.0-94.96~22.04.16.8.0-100.100~22.04.16.8.0-101.101~22.04.16.8.0-106.106~22.04.16.8.0-107.107~22.04.16.8.0-110.110~22.04.16.8.0-111.111~22.04.16.8.0-117.117~22.04.16.8.0-124.124~22.04.16.8.0-134.134~22.04.16.8.0-136.136~22.04.36.8.0-137.137~22.04.16.8.0-138.138~22.04.1
6.8.0-139.139~22.04.1
linux-starfive-5.19
Ubuntu:22.04:LTS
All versions, plus listed versions
5.19.0-1014.16~22.04.15.19.0-1015.17~22.04.15.19.0-1016.18~22.04.15.19.0-1017.19~22.04.15.19.0-1018.20~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.1
None known
linux-starfive-6.2
Ubuntu:22.04:LTS
All versions, plus listed versions
6.2.0-1006.7~22.04.16.2.0-1007.8~22.04.16.2.0-1009.10~22.04.1
None known
linux-starfive-6.5
Ubuntu:22.04:LTS
All versions, plus listed versions
6.5.0-1007.8~22.04.16.5.0-1008.9~22.04.16.5.0-1009.10~22.04.16.5.0-1010.11~22.04.16.5.0-1011.12~22.04.1
Show 6 moreShow less
6.5.0-1012.13~22.04.16.5.0-1014.15~22.04.16.5.0-1015.16~22.04.16.5.0-1016.17~22.04.16.5.0-1017.18~22.04.16.5.0-1018.19~22.04.1
None known
linux-realtime-6.8
Ubuntu:Pro:Realtime:22.04:LTS
before 6.8.1-1059.60~22.04.1, plus listed versions
6.8.1-1004.4~22.04.16.8.1-1005.5~22.04.26.8.1-1006.6~22.04.16.8.1-1007.7~22.04.16.8.1-1008.8~22.04.1
Show 39 moreShow less
6.8.1-1009.9~22.04.16.8.1-1010.10~22.04.16.8.1-1011.11~22.04.16.8.1-1012.12~22.04.16.8.1-1013.14~22.04.16.8.1-1014.15~22.04.16.8.1-1015.16~22.04.16.8.1-1016.17~22.04.16.8.1-1017.18~22.04.16.8.1-1018.19~22.04.16.8.1-1019.20~22.04.16.8.1-1020.21~22.04.16.8.1-1021.22~22.04.16.8.1-1022.23~22.04.16.8.1-1023.24~22.04.16.8.1-1024.25~22.04.16.8.1-1025.26~22.04.16.8.1-1026.27~22.04.16.8.1-1030.31~22.04.16.8.1-1031.32~22.04.16.8.1-1034.35~22.04.16.8.1-1035.36~22.04.16.8.1-1036.37~22.04.16.8.1-1037.38~22.04.16.8.1-1038.39~22.04.16.8.1-1039.40~22.04.16.8.1-1040.41~22.04.16.8.1-1041.42~22.04.16.8.1-1042.43~22.04.16.8.1-1045.46~22.04.16.8.1-1046.47~22.04.26.8.1-1047.48~22.04.16.8.1-1048.49~22.04.16.8.1-1051.52~22.04.16.8.1-1052.53~22.04.16.8.1-1055.56~22.04.16.8.1-1056.57~22.04.26.8.1-1057.58~22.04.16.8.1-1058.59~22.04.1
6.8.1-1059.60~22.04.1
linux
Ubuntu:24.04:LTS
before 6.8.0-139.139, plus listed versions
6.5.0-9.96.6.0-14.146.8.0-11.116.8.0-20.206.8.0-22.22
Show 45 moreShow less
6.8.0-28.286.8.0-31.316.8.0-35.356.8.0-36.366.8.0-38.386.8.0-39.396.8.0-40.406.8.0-41.416.8.0-44.446.8.0-45.456.8.0-47.476.8.0-48.486.8.0-49.496.8.0-50.516.8.0-51.526.8.0-52.536.8.0-53.556.8.0-54.566.8.0-55.576.8.0-56.586.8.0-57.596.8.0-58.606.8.0-59.616.8.0-60.636.8.0-62.656.8.0-63.666.8.0-64.676.8.0-71.716.8.0-78.786.8.0-79.796.8.0-83.836.8.0-84.846.8.0-85.856.8.0-86.876.8.0-87.886.8.0-88.896.8.0-90.916.8.0-94.966.8.0-100.1006.8.0-101.1016.8.0-106.1066.8.0-107.1076.8.0-110.1106.8.0-111.1116.8.0-117.117
6.8.0-139.139
linux-aws
Ubuntu:24.04:LTS
before 6.8.0-1064.67, plus listed versions
6.5.0-1008.86.6.0-1001.16.8.0-1001.16.8.0-1006.66.8.0-1008.8
Show 45 moreShow less
6.8.0-1009.96.8.0-1010.106.8.0-1011.126.8.0-1012.136.8.0-1013.146.8.0-1014.156.8.0-1015.166.8.0-1016.176.8.0-1017.186.8.0-1018.206.8.0-1019.216.8.0-1020.226.8.0-1021.236.8.0-1023.256.8.0-1024.266.8.0-1025.276.8.0-1026.286.8.0-1027.296.8.0-1028.306.8.0-1029.316.8.0-1030.326.8.0-1031.336.8.0-1032.346.8.0-1033.356.8.0-1035.376.8.0-1036.386.8.0-1038.406.8.0-1039.416.8.0-1040.426.8.0-1041.436.8.0-1042.446.8.0-1043.456.8.0-1044.466.8.0-1045.476.8.0-1046.496.8.0-1047.506.8.0-1050.536.8.0-1051.546.8.0-1052.556.8.0-1053.566.8.0-1055.586.8.0-1057.606.8.0-1060.636.8.0-1061.646.8.0-1062.65
6.8.0-1064.67
linux-aws-6.14
Ubuntu:24.04:LTS
All versions, plus listed versions
6.14.0-1007.7~24.04.16.14.0-1009.9~24.04.16.14.0-1010.10~24.04.16.14.0-1011.11~24.04.16.14.0-1012.12~24.04.1
Show 6 moreShow less
6.14.0-1013.13~24.04.16.14.0-1014.14~24.04.16.14.0-1015.15~24.04.16.14.0-1016.16~24.04.16.14.0-1017.17~24.04.16.14.0-1018.18~24.04.1
None known
linux-aws-6.17
Ubuntu:24.04:LTS
All versions, plus listed versions
6.17.0-1005.5~24.04.26.17.0-1007.7~24.04.16.17.0-1009.9~24.04.26.17.0-1010.10~24.04.16.17.0-1012.12~24.04.1
Show 5 moreShow less
6.17.0-1013.13~24.04.16.17.0-1015.15~24.04.16.17.0-1017.17~24.04.16.17.0-1019.19~24.04.16.17.0-1020.20~24.04.1
None known
dtb-aarch64
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-64kb
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-azure
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default-base
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1.160000.2.22
6.12.0-160000.38.1.160000.2.22
kernel-docs
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-kvmsmall
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-obs-build
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-obs-qa
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-rt
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-source
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-syms
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-zfcpdump
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
before 6.12.0-160000.38.1
6.12.0-160000.38.1

History

History
RecordedChangedSources
affectedCVE List, EUVD, NVD, OSV
affectedOSV
affectedOSV
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-64121 is a high vulnerability (CVSS 7.1) in Linux, published July 19, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.13%, the 2nd percentile. Fixed in linux-lts 6.1.175-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 238 package rows, 133 versions, 4,029 references and the rest of 10 source descriptions. The JSON record has them. Also not on the record: 63 aliases. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 112 source records.

MoveEnter Open