Every CVE Search/ Get API key

CVE-2026-64268

RDMA/siw: bound Read Response placement to the RREAD length

9.8 CriticalFix available

In the Linux kernel, the following vulnerability has been resolved:

RDMA/siw: bound Read Response placement to the RREAD length

In drivers/infiniband/sw/siw/siw_qp_rx.c, siw_proc_rresp() places each inbound Read Response DDP segment at sge->laddr + wqe->processed and then accumulates wqe->processed, but it never checks the running total against the sink buffer length on continuation segments. siw_check_sge() resolves and validates the sink memory only on the first fragment (the if (!*mem) branch), and siw_rresp_check_ntoh() compares the cumulative length against wqe->bytes only on the final segment (the !frx->more_ddp_segs guard).

A connected siw peer that answers an outstanding RREAD with Read Response segments that keep the DDP Last flag clear, carrying more total payload than the RREAD requested, drives wqe->processed past the validated sink buffer; the next siw_rx_data() call writes out of bounds at sge->laddr + wqe->processed. siw runs iWARP over ordinary routable TCP, so the peer is the remote end of an established RDMA connection and needs no local privilege.

Bound every segment before placement, exactly as siw_proc_send() and siw_proc_write() already do for their tagged and untagged paths, and terminate the connection with a base-or-bounds DDP error when the Read Response would overrun the sink buffer.

This is the second receive-path length fix for this file. A separate change rejects an MPA FPDU length that underflows the per-fragment remainder in the header decode; that guard does not cover this case, because here each individual segment length is self-consistent and only the accumulated placement offset overruns the buffer.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.71%Up 0.5 points since Jul 25, 2026
90%50%10%1%

What each source reports

CVE List Score used 9.8

RDMA/siw: bound Read Response placement to the RREAD length

In the Linux kernel, the following vulnerability has been resolved:

RDMA/siw: bound Read Response placement to the RREAD length

In drivers/infiniband/sw/siw/siw_qp_rx.c, siw_proc_rresp() places each inbound Read Response DDP segment at sge->laddr + wqe->processed and then accumulates wqe->processed, but it never checks the running total against the sink buffer length on continuation segments. siw_check_sge() resolves and validates the sink memory only on the first fragment (the if (!*mem) branch), and siw_rresp_check_ntoh() compares the cumulative length against wqe->bytes only on the final segment (the !frx->more_ddp_segs guard).

A connected siw peer that answers an outstanding RREAD with Read Response segments that keep the DDP Last flag clear, carrying more total payload than the RREAD requested, drives wqe->processed past the validated sink buffer; the next siw_rx_data() call writes out of bounds at sge->laddr + wqe->processed. siw runs iWARP over ordinary routable TCP, so the peer is the remote end of an established RDMA connection and needs no local privilege.

Bound every segment before placement, exactly as siw_proc_send() and siw_proc_write() already do for their tagged and untagged paths, and terminate the connection with a base-or-bounds DDP error when the Read Response would overrun the sink buffer.

This is the second receive-path length fix for this file. A separate change rejects an MPA FPDU length that underflows the per-fragment remainder in the header decode; that guard does not cover this case, because here each individual segment length is self-consistent and only the accumulated placement offset overruns the buffer.

Record
CVE-2026-64268
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-02
EUVDEUVD-2026-48980 9.8

In the Linux kernel, the following vulnerability has been resolved:

RDMA/siw: bound Read Response placement to the RREAD length

In drivers/infiniband/sw/siw/siw_qp_rx.c, siw_proc_rresp() places each inbound Read Response DDP segment at sge->laddr + wqe->processed and then accumulates wqe->processed, but it never checks the running total against the sink buffer length on continuation segments. siw_check_sge() resolves and validates the sink memory only on the first fragment (the if (!*mem) branch), and siw_rresp_check_ntoh() compares the cumulative length against wqe->bytes only on the final segment (the !frx->more_ddp_segs guard).

A connected siw peer that answers an outstanding RREAD with Read Response segments that keep the DDP Last flag clear, carrying more total payload than the RREAD requested, drives wqe->processed past the validated sink buffer; the next siw_rx_data() call writes out of bounds at sge->laddr + wqe->processed. siw runs iWARP over ordinary routable TCP, so the peer is the remote end of an established RDMA connection and needs no local privilege.

Bound every segment before placement, exactly as siw_proc_send() and siw_proc_write() already do for their tagged and untagged paths, and terminate the connection with a base-or-bounds DDP error when the Read Response would overrun the sink buffer.

This is the second receive-path length fix for this file. A separate change rejects an MPA FPDU length that underflows the per-fragment remainder in the header decode; that guard does not cover this case, because here each individual segment length is self-consistent and only the accumulated placement offset overruns the buffer.

Record
EUVD-2026-48980
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-86rp-m36j-7r28 9.8

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: bound Read...

In the Linux kernel, the following vulnerability has been resolved:

RDMA/siw: bound Read Response placement to the RREAD length

In drivers/infiniband/sw/siw/siw_qp_rx.c, siw_proc_rresp() places each inbound Read Response DDP segment at sge->laddr + wqe->processed and then accumulates wqe->processed, but it never checks the running total against the sink buffer length on continuation segments. siw_check_sge() resolves and validates the sink memory only on the first fragment (the if (!*mem) branch), and siw_rresp_check_ntoh() compares the cumulative length against wqe->bytes only on the final segment (the !frx->more_ddp_segs guard).

A connected siw peer that answers an outstanding RREAD with Read Response segments that keep the DDP Last flag clear, carrying more total payload than the RREAD requested, drives wqe->processed past the validated sink buffer; the next siw_rx_data() call writes out of bounds at sge->laddr + wqe->processed. siw runs iWARP over ordinary routable TCP, so the peer is the remote end of an established RDMA connection and needs no local privilege.

Bound every segment before placement, exactly as siw_proc_send() and siw_proc_write() already do for their tagged and untagged paths, and terminate the connection with a base-or-bounds DDP error when the Read Response would overrun the sink buffer.

This is the second receive-path length fix for this file. A separate change rejects an MPA FPDU length that underflows the per-fragment remainder in the header decode; that guard does not cover this case, because here each individual segment length is self-consistent and only the accumulated placement offset overruns the buffer.

Record
GHSA-86rp-m36j-7r28
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-02
NVD 9.8

In the Linux kernel, the following vulnerability has been resolved:

RDMA/siw: bound Read Response placement to the RREAD length

In drivers/infiniband/sw/siw/siw_qp_rx.c, siw_proc_rresp() places each inbound Read Response DDP segment at sge->laddr + wqe->processed and then accumulates wqe->processed, but it never checks the running total against the sink buffer length on continuation segments. siw_check_sge() resolves and validates the sink memory only on the first fragment (the if (!*mem) branch), and siw_rresp_check_ntoh() compares the cumulative length against wqe->bytes only on the final segment (the !frx->more_ddp_segs guard).

A connected siw peer that answers an outstanding RREAD with Read Response segments that keep the DDP Last flag clear, carrying more total payload than the RREAD requested, drives wqe->processed past the validated sink buffer; the next siw_rx_data() call writes out of bounds at sge->laddr + wqe->processed. siw runs iWARP over ordinary routable TCP, so the peer is the remote end of an established RDMA connection and needs no local privilege.

Bound every segment before placement, exactly as siw_proc_send() and siw_proc_write() already do for their tagged and untagged paths, and terminate the connection with a base-or-bounds DDP error when the Read Response would overrun the sink buffer.

This is the second receive-path length fix for this file. A separate change rejects an MPA FPDU length that underflows the per-fragment remainder in the header decode; that guard does not cover this case, because here each individual segment length is self-consistent and only the accumulated placement offset overruns the buffer.

Record
CVE-2026-64268
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-02
OSVBELL-CVE-2026-64268 9.8
Record
BELL-CVE-2026-64268
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 9.8

RDMA/siw: bound Read Response placement to the RREAD length

In the Linux kernel, the following vulnerability has been resolved:

RDMA/siw: bound Read Response placement to the RREAD length

In drivers/infiniband/sw/siw/siw_qp_rx.c, siw_proc_rresp() places each inbound Read Response DDP segment at sge->laddr + wqe->processed and then accumulates wqe->processed, but it never checks the running total against the sink buffer length on continuation segments. siw_check_sge() resolves and validates the sink memory only on the first fragment (the if (!*mem) branch), and siw_rresp_check_ntoh() compares the cumulative length against wqe->bytes only on the final segment (the !frx->more_ddp_segs guard).

A connected siw peer that answers an outstanding RREAD with Read Response segments that keep the DDP Last flag clear, carrying more total payload than the RREAD requested, drives wqe->processed past the validated sink buffer; the next siw_rx_data() call writes out of bounds at sge->laddr + wqe->processed. siw runs iWARP over ordinary routable TCP, so the peer is the remote end of an established RDMA connection and needs no local privilege.

Bound every segment before placement, exactly as siw_proc_send() and siw_proc_write() already do for their tagged and untagged paths, and terminate the connection with a base-or-bounds DDP error when the Read Response would overrun the sink buffer.

This is the second receive-path length fix for this file. A separate change rejects an MPA FPDU length that underflows the per-fragment remainder in the header decode; that guard does not cover this case, because here each individual segment length is self-consistent and only the accumulated placement offset overruns the buffer.

Record
CVE-2026-64268
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 48 moreShow less
OSVDEBIAN-CVE-2026-64268 9.8

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: bound Read Response placement to the RREAD length In drivers/infiniband/sw/siw/siw_qp_rx.c, siw_proc_rresp() places each inbound Read Response DDP segment at sge->laddr + wqe->processed and then accumulates wqe->processed, but it never checks the running total against the sink buffer length on continuation segments. siw_check_sge() resolves and validates the sink memory only on the first fragment (the if (!*mem) branch), and siw_rresp_check_ntoh() compares the cumulative length against wqe->bytes only on the final segment (the !frx->more_ddp_segs guard). A connected siw peer that answers an outstanding RREAD with Read Response segments that keep the DDP Last flag clear, carrying more total payload than the RREAD requested, drives wqe->processed past the validated sink buffer; the next siw_rx_data() call writes out of bounds at sge->laddr + wqe->processed. siw runs iWARP over ordinary routable TCP, so the peer is the remote end of an established RDMA connection and needs no local privilege. Bound every segment before placement, exactly as siw_proc_send() and siw_proc_write() already do for their tagged and untagged paths, and terminate the connection with a base-or-bounds DDP error when the Read Response would overrun the sink buffer. This is the second receive-path length fix for this file. A separate change rejects an MPA FPDU length that underflows the per-fragment remainder in the header decode; that guard does not cover this case, because here each individual segment length is self-consistent and only the accumulated placement offset overruns the buffer.

Record
DEBIAN-CVE-2026-64268
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:63013 8.8

Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Record
RHSA-2026:63013
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:63014 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:63014
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:63129 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:63129
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:65710 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:65710
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:67720 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:67720
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:68100 8.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:68100
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:69837 8.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:69837
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:69906 8.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:69906
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:70482 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:70482
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:70483 8.8

Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Record
RHSA-2026:70483
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:63013 8.8

Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: s390/cpum_sf: Handle CPU hotplug remove during sampling (CVE-2024-57849)

  • kernel: smc91x: fix broken irq-context in PREEMPT_RT (CVE-2025-71132)

  • kernel: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CVE-2026-45970)

  • kernel: zram: fix use-after-free in zram_bvec_write_partial() (CVE-2026-53185)

  • kernel: pNFS: Fix use-after-free in pnfs_update_layout() (CVE-2026-63800)

  • kernel: nfsd: fix posix_acl leak on SETACL decode failure (CVE-2026-53397)

  • kernel: nfsd: release layout stid on setlease failure (CVE-2026-53399)

  • kernel: NFSv4/flexfiles: reject zero filehandle version count (CVE-2026-53392)

  • kernel: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CVE-2026-53391)

  • kernel: net: mana: validate rx_req_idx to prevent out-of-bounds array access (CVE-2026-64018)

  • kernel: Kernel: Remote out-of-bounds write in RDMA/siw (CVE-2026-64268)

  • kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CVE-2026-64298)

  • kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability (CVE-2026-68480)

  • kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer (CVE-2026-74581)

Bug Fix(es) and Enhancement(s):

  • qede: build_skb failure causes off-by-one BD ring corruption and kernel panic [rhel-8.10.z] (JIRA:Rocky Linux-193045)

  • powerpc/pseries: lparcfg - fix kbuf[] underflow (JIRA:Rocky Linux-240144)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:63013
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:63014 8.8

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: s390/cpum_sf: Handle CPU hotplug remove during sampling (CVE-2024-57849)

  • kernel: smc91x: fix broken irq-context in PREEMPT_RT (CVE-2025-71132)

  • kernel: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CVE-2026-45970)

  • kernel: zram: fix use-after-free in zram_bvec_write_partial() (CVE-2026-53185)

  • kernel: pNFS: Fix use-after-free in pnfs_update_layout() (CVE-2026-63800)

  • kernel: nfsd: fix posix_acl leak on SETACL decode failure (CVE-2026-53397)

  • kernel: nfsd: release layout stid on setlease failure (CVE-2026-53399)

  • kernel: NFSv4/flexfiles: reject zero filehandle version count (CVE-2026-53392)

  • kernel: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CVE-2026-53391)

  • kernel: net: mana: validate rx_req_idx to prevent out-of-bounds array access (CVE-2026-64018)

  • kernel: Kernel: Remote out-of-bounds write in RDMA/siw (CVE-2026-64268)

  • kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CVE-2026-64298)

  • kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability (CVE-2026-68480)

  • kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer (CVE-2026-74581)

Bug Fix(es) and Enhancement(s):

  • qede: build_skb failure causes off-by-one BD ring corruption and kernel panic [rhel-8.10.z] (JIRA:Rocky Linux-193045)

  • powerpc/pseries: lparcfg - fix kbuf[] underflow (JIRA:Rocky Linux-240144)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:63014
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:63129 8.8

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: smc: Fix use-after-free in __pnet_find_base_ndev() (CVE-2025-40064)

  • kernel: Linux kernel: Denial of Service due to memory leak in tpm2_load_cmd (CVE-2025-71147)

  • kernel: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CVE-2026-45970)

  • kernel: smb/client: fix out-of-bounds read in symlink_data() (CVE-2026-46185)

  • kernel: Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CVE-2026-53073)

  • kernel: pNFS: Fix use-after-free in pnfs_update_layout() (CVE-2026-63800)

  • kernel: nfsd: fix posix_acl leak on SETACL decode failure (CVE-2026-53397)

  • kernel: exfat: fix potential use-after-free in exfat_find_dir_entry() (CVE-2026-63808)

  • kernel: nfsd: release layout stid on setlease failure (CVE-2026-53399)

  • kernel: NFSv4/flexfiles: reject zero filehandle version count (CVE-2026-53392)

  • kernel: KEYS: fix overflow in keyctl_pkey_params_get_2() (CVE-2026-63824)

  • kernel: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CVE-2026-53391)

  • kernel: scsi: target: iscsi: Validate CHAP_R length before base64 decode (CVE-2026-63886)

  • kernel: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CVE-2026-64002)

  • kernel: net: mana: validate rx_req_idx to prevent out-of-bounds array access (CVE-2026-64018)

  • kernel: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CVE-2026-63887)

  • kernel: smb: client: fix query directory replay double-free (CVE-2026-64387)

  • kernel: Kernel: Remote out-of-bounds write in RDMA/siw (CVE-2026-64268)

  • kernel: crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (CVE-2026-64438)

  • kernel: crypto: qat - validate RSA CRT component lengths (CVE-2026-64304)

  • kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CVE-2026-64298)

  • kernel: ALSA: virtio: Validate control metadata from the device (CVE-2026-64490)

  • kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability (CVE-2026-68480)

  • kernel: Linux kernel: Arbitrary code execution via userfaultfd shadow stack manipulation (CVE-2026-68166)

  • kernel: iomap: fix out-of-bounds bitmap_set() with zero-length range (CVE-2026-68145)

  • kernel: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CVE-2026-72069)

  • kernel: nvmet-auth: reject short AUTH_RECEIVE buffers (CVE-2026-72130)

Bug Fix(es) and Enhancement(s):

  • [Rocky Linux 9] TPM becomes completely unresponsive and requires a full reboot to clear [rhel-9.8.z] (JIRA:Rocky Linux-213940)

  • RT scheduler livelock caused by missing backport of 94894c9c477e [rhel-9.8.z] (JIRA:Rocky Linux-240634)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:63129
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-64268 9.8

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: bound Read Response placement to the RREAD length In drivers/infiniband/sw/siw/siw_qp_rx.c, siw_proc_rresp() places each inbound Read Response DDP segment at sge->laddr + wqe->processed and then accumulates wqe->processed, but it never checks the running total against the sink buffer length on continuation segments. siw_check_sge() resolves and validates the sink memory only on the first fragment (the if (!*mem) branch), and siw_rresp_check_ntoh() compares the cumulative length against wqe->bytes only on the final segment (the !frx->more_ddp_segs guard). A connected siw peer that answers an outstanding RREAD with Read Response segments that keep the DDP Last flag clear, carrying more total payload than the RREAD requested, drives wqe->processed past the validated sink buffer; the next siw_rx_data() call writes out of bounds at sge->laddr + wqe->processed. siw runs iWARP over ordinary routable TCP, so the peer is the remote end of an established RDMA connection and needs no local privilege. Bound every segment before placement, exactly as siw_proc_send() and siw_proc_write() already do for their tagged and untagged paths, and terminate the connection with a base-or-bounds DDP error when the Read Response would overrun the sink buffer. This is the second receive-path length fix for this file. A separate change rejects an MPA FPDU length that underflows the per-fragment remainder in the header decode; that guard does not cover this case, because here each individual segment length is self-consistent and only the accumulated placement offset overruns the buffer.

Record
UBUNTU-CVE-2026-64268
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVALSA-2026:63013 No score

Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: s390/cpum_sf: Handle CPU hotplug remove during sampling (CVE-2024-57849)
  • kernel: smc91x: fix broken irq-context in PREEMPT_RT (CVE-2025-71132)
  • kernel: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CVE-2026-45970)
  • kernel: zram: fix use-after-free in zram_bvec_write_partial() (CVE-2026-53185)
  • kernel: pNFS: Fix use-after-free in pnfs_update_layout() (CVE-2026-63800)
  • kernel: nfsd: fix posix_acl leak on SETACL decode failure (CVE-2026-53397)
  • kernel: nfsd: release layout stid on setlease failure (CVE-2026-53399)
  • kernel: NFSv4/flexfiles: reject zero filehandle version count (CVE-2026-53392)
  • kernel: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CVE-2026-53391)
  • kernel: net: mana: validate rx_req_idx to prevent out-of-bounds array access (CVE-2026-64018)
  • kernel: Kernel: Remote out-of-bounds write in RDMA/siw (CVE-2026-64268)
  • kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CVE-2026-64298)
  • kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability (CVE-2026-68480)
  • kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer (CVE-2026-74581)

Bug Fix(es) and Enhancement(s):

  • qede: build_skb failure causes off-by-one BD ring corruption and kernel panic [almalinux-8.10.z] (JIRA:AlmaLinux-193045)
  • powerpc/pseries: lparcfg - fix kbuf[] underflow (JIRA:AlmaLinux-240144)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:63013
Updated
2026-11-02
OSVALSA-2026:63014 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: s390/cpum_sf: Handle CPU hotplug remove during sampling (CVE-2024-57849)
  • kernel: smc91x: fix broken irq-context in PREEMPT_RT (CVE-2025-71132)
  • kernel: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CVE-2026-45970)
  • kernel: zram: fix use-after-free in zram_bvec_write_partial() (CVE-2026-53185)
  • kernel: pNFS: Fix use-after-free in pnfs_update_layout() (CVE-2026-63800)
  • kernel: nfsd: fix posix_acl leak on SETACL decode failure (CVE-2026-53397)
  • kernel: nfsd: release layout stid on setlease failure (CVE-2026-53399)
  • kernel: NFSv4/flexfiles: reject zero filehandle version count (CVE-2026-53392)
  • kernel: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CVE-2026-53391)
  • kernel: net: mana: validate rx_req_idx to prevent out-of-bounds array access (CVE-2026-64018)
  • kernel: Kernel: Remote out-of-bounds write in RDMA/siw (CVE-2026-64268)
  • kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CVE-2026-64298)
  • kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability (CVE-2026-68480)
  • kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer (CVE-2026-74581)

Bug Fix(es) and Enhancement(s):

  • qede: build_skb failure causes off-by-one BD ring corruption and kernel panic [almalinux-8.10.z] (JIRA:AlmaLinux-193045)
  • powerpc/pseries: lparcfg - fix kbuf[] underflow (JIRA:AlmaLinux-240144)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:63014
Updated
2026-11-02
OSVALSA-2026:63129 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: smc: Fix use-after-free in __pnet_find_base_ndev() (CVE-2025-40064)
  • kernel: Linux kernel: Denial of Service due to memory leak in tpm2_load_cmd (CVE-2025-71147)
  • kernel: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CVE-2026-45970)
  • kernel: smb/client: fix out-of-bounds read in symlink_data() (CVE-2026-46185)
  • kernel: Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CVE-2026-53073)
  • kernel: pNFS: Fix use-after-free in pnfs_update_layout() (CVE-2026-63800)
  • kernel: nfsd: fix posix_acl leak on SETACL decode failure (CVE-2026-53397)
  • kernel: exfat: fix potential use-after-free in exfat_find_dir_entry() (CVE-2026-63808)
  • kernel: nfsd: release layout stid on setlease failure (CVE-2026-53399)
  • kernel: NFSv4/flexfiles: reject zero filehandle version count (CVE-2026-53392)
  • kernel: KEYS: fix overflow in keyctl_pkey_params_get_2() (CVE-2026-63824)
  • kernel: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CVE-2026-53391)
  • kernel: scsi: target: iscsi: Validate CHAP_R length before base64 decode (CVE-2026-63886)
  • kernel: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CVE-2026-64002)
  • kernel: net: mana: validate rx_req_idx to prevent out-of-bounds array access (CVE-2026-64018)
  • kernel: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CVE-2026-63887)
  • kernel: smb: client: fix query directory replay double-free (CVE-2026-64387)
  • kernel: Kernel: Remote out-of-bounds write in RDMA/siw (CVE-2026-64268)
  • kernel: crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (CVE-2026-64438)
  • kernel: crypto: qat - validate RSA CRT component lengths (CVE-2026-64304)
  • kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CVE-2026-64298)
  • kernel: ALSA: virtio: Validate control metadata from the device (CVE-2026-64490)
  • kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability (CVE-2026-68480)
  • kernel: Linux kernel: Arbitrary code execution via userfaultfd shadow stack manipulation (CVE-2026-68166)
  • kernel: iomap: fix out-of-bounds bitmap_set() with zero-length range (CVE-2026-68145)
  • kernel: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CVE-2026-72069)
  • kernel: nvmet-auth: reject short AUTH_RECEIVE buffers (CVE-2026-72130)

Bug Fix(es) and Enhancement(s):

  • [AlmaLinux 9] TPM becomes completely unresponsive and requires a full reboot to clear [almalinux-9.8.z] (JIRA:AlmaLinux-213940)
  • RT scheduler livelock caused by missing backport of 94894c9c477e [almalinux-9.8.z] (JIRA:AlmaLinux-240634)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:63129
Updated
2026-11-02
OSVAZL-93798 No score

CVE-2026-64268 affecting package kernel for versions less than 6.6.145.2-1

In the Linux kernel, the following vulnerability has been resolved:

RDMA/siw: bound Read Response placement to the RREAD length

In drivers/infiniband/sw/siw/siw_qp_rx.c, siw_proc_rresp() places each inbound Read Response DDP segment at sge->laddr + wqe->processed and then accumulates wqe->processed, but it never checks the running total against the sink buffer length on continuation segments. siw_check_sge() resolves and validates the sink memory only on the first fragment (the if (!*mem) branch), and siw_rresp_check_ntoh() compares the cumulative length against wqe->bytes only on the final segment (the !frx->more_ddp_segs guard).

A connected siw peer that answers an outstanding RREAD with Read Response segments that keep the DDP Last flag clear, carrying more total payload than the RREAD requested, drives wqe->processed past the validated sink buffer; the next siw_rx_data() call writes out of bounds at sge->laddr + wqe->processed. siw runs iWARP over ordinary routable TCP, so the peer is the remote end of an established RDMA connection and needs no local privilege.

Bound every segment before placement, exactly as siw_proc_send() and siw_proc_write() already do for their tagged and untagged paths, and terminate the connection with a base-or-bounds DDP error when the Read Response would overrun the sink buffer.

This is the second receive-path length fix for this file. A separate change rejects an MPA FPDU length that underflows the per-fragment remainder in the header decode; that guard does not cover this case, because here each individual segment length is self-consistent and only the accumulated placement offset overruns the buffer.

Record
AZL-93798
Updated
2026-11-02
OSVCLSA-2026-1787307395 No score

kernel: Fix of 83 CVEs

  • net/sched: serialize qdisc_rtab_list against concurrent get/put {CVE-2026-68138}
  • static_call: Replace pointless WARN_ON() in static_call_module_notify() {CVE-2024-49954}
  • static_call: Handle module init failure correctly in static_call_del_module() {CVE-2024-50002}
  • smb: client: require a full NFS mode SID before reading mode bits {CVE-2026-43350}
  • octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() {CVE-2025-39978}
  • scsi: core: Fix refcount leak for tagset_refcnt {CVE-2026-23296}
  • wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() {CVE-2026-23336}
  • smb: client: fix memory leak in cifs_construct_tcon() {CVE-2025-68295}
  • sched/deadline: Fix warning in migrate_enable for boosted tasks {CVE-2024-56583}
  • nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() {CVE-2025-40261}
  • usbnet: Prevents free active kevent {CVE-2025-68312}
  • libceph: bound get_version reply decode to front len {CVE-2026-68433}
  • neigh: let neigh_xmit take skb ownership {CVE-2026-52981}
  • gve: prevent ethtool ops after shutdown {CVE-2025-38735}
  • vfs: Don't leak disconnected dentries on umount {CVE-2025-40105}
  • NFSD: NFSv4 file creation neglects setting ACL {CVE-2025-68803}
  • thermal: intel: int340x: processor: Fix warning during module unload {CVE-2024-50093}
  • quota: fix warning in dqgrab() {CVE-2023-54177}
  • mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0] {CVE-2026-31458}
  • net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change {CVE-2025-71066}
  • bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue {CVE-2024-36938}
  • net: hv_netvsc: reject RSS hash key programming without RX indirection table {CVE-2026-23054}
  • xsk: tighten UMEM headroom validation to account for tailroom and min frame {CVE-2026-43093}
  • drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE) {CVE-2024-39497}
  • bpf: Fix OOB in pcpu_init_value {CVE-2026-53076}
  • ftrace: Clean up hash direct_functions on register failures {CVE-2022-49402}
  • binfmt_misc: restore write access before closing files opened by open_exec() {CVE-2025-68239}
  • smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path {CVE-2025-39929}
  • wifi: mt76: Fix memory leak after mt76_connac_mcu_alloc_sta_req() {CVE-2026-53102}
  • xen: Add support for XenServer 6.1 platform device {CVE-2025-38046}
  • i2c: tegra: Do not mark ACPI devices as irq safe {CVE-2024-45029}
  • bpf: Add preempt_count_{sub,add} into btf id deny list {CVE-2023-54086}
  • libceph: Fix multiplication overflow in decode_new_up_state_weight() {CVE-2026-68158}
  • mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose() {CVE-2025-68291}
  • net/mlx5: Fix missing lock on sync reset reload {CVE-2024-42268}
  • vxlan: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-68432}
  • netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels {CVE-2026-23274}
  • drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async {CVE-2026-64219}
  • mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations {CVE-2026-31394}
  • bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path {CVE-2026-53096}
  • scsi: mpi3mr: Fix possible crash when setting up bsg fails {CVE-2025-21723}
  • net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup {CVE-2025-68192}
  • net: stream: purge sk_error_queue in sk_stream_kill_queues() {CVE-2022-50838}
  • clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context {CVE-2025-21767}
  • net: netpoll: fix incorrect refcount handling causing incorrect cleanup {CVE-2025-68245}
  • drm/amd/display: Check link_res->hpo_dp_link_enc before using it {CVE-2024-47704}
  • crypto: qat - flush misc workqueue during device shutdown {CVE-2025-39721}
  • crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed {CVE-2026-31698}
  • smb: client: split cached_fid bitfields to avoid…
Record
CLSA-2026-1787307395
Updated
2026-11-02
OSVCLSA-2026-1788168285 No score

kernel: Fix of 193 CVEs

  • mac802154: llsec: reject frames shorter than the authentication tag {CVE-2026-68125}
  • KVM: x86/mmu: Fix use-after-free on vendor module reload {CVE-2026-68428}
  • wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper {CVE-2026-68197}
  • bpf: account for current allocated stack depth in widen_imprecise_scalars() {CVE-2025-68208}
  • tun: free page on build_skb failure in tun_xdp_one() {CVE-2026-46322}
  • smb: client: fix potential cfid UAF in smb2_query_info_compound {CVE-2025-40320}
  • net/packet: avoid fanout hook re-registration after unregister {CVE-2026-68338}
  • wifi: cfg80211: cancel sched scan results work on unregister {CVE-2026-68414}
  • binfmt_misc: set have_execfd only once the interpreter is opened {CVE-2026-68186}
  • tracing: Fix resource leak on mmiotrace trace_pipe close {CVE-2026-68175}
  • tipc: fix u16 MTU truncation in media and bearer MTU validation {CVE-2026-68297}
  • net: gro: fix double aggregation of flush-marked skbs {CVE-2026-68136}
  • bpf, sockmap: Reject unhashed UDP sockets on sockmap update {CVE-2026-68386}
  • wifi: brcmfmac: fix 802.1X-SHA256 call trace warning {CVE-2026-68304}
  • udf: fix partition descriptor append bookkeeping {CVE-2026-45991}
  • Bluetooth: SCO: fix race conditions in sco_sock_connect() {CVE-2026-43023}
  • smb: client: validate dacloffset before building DACL pointers {CVE-2026-46195}
  • smb/client: fix out-of-bounds read in symlink_data() {CVE-2026-46185}
  • net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo {CVE-2026-46132}
  • Bluetooth: hci_event: fix potential UAF in SSP passkey handlers {CVE-2026-46056}
  • RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send {CVE-2026-45856}
  • RDMA/mana: Validate rx_hash_key_len {CVE-2026-46145}
  • scsi: qla2xxx: Completely fix fcport double free {CVE-2026-43414}
  • bpf: Fix bpf_xdp_store_bytes proto for read-only arg {CVE-2026-45886}
  • libceph: Fix slab-out-of-bounds access in auth message processing {CVE-2026-46119}
  • wifi: mac80211: use safe list iteration in radar detect work {CVE-2026-46166}
  • RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads {CVE-2026-46114}
  • nfsd: never defer requests during idmap lookup {CVE-2026-45983}
  • drop_monitor: fix size calculations for 64-bit attributes {CVE-2026-68287}
  • openvswitch: cap upcall PID array size and pre-size vport replies {CVE-2026-45840}
  • procfs: fix missing RCU protection when reading real_parent in do_task_stat() {CVE-2026-46259}
  • wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() {CVE-2026-46069}
  • dm mirror: fix integer overflow in create_dirty_log() {CVE-2026-46023}
  • netfilter: nft_inner: Fix IPv6 inner_thoff desync {CVE-2026-46244}
  • drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe() {CVE-2026-68429}
  • crypto: authencesn - reject short ahash digests during instance creation {CVE-2026-46033}
  • RDMA/rxe: Fix race condition in QP timer handlers {CVE-2026-45910}
  • wifi: mac80211: remove station if connection prep fails {CVE-2026-46125}
  • tcp: call sk_data_ready() after listener migration {CVE-2026-46015}
  • scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk {CVE-2025-38289}
  • net/sched: act_ct: Only release RCU read lock after ct_ft {CVE-2026-46319}
  • dm: fix a buffer overflow in ioctl processing {CVE-2026-46294}
  • io-wq: check that the predecessor is hashed in io_wq_remove_pending() {CVE-2026-46274}
  • wifi: mac80211: drop stray 'static' from fast-RX rx_result {CVE-2026-46152}
  • io_uring/poll: fix signed comparison in io_poll_get_ownership() {CVE-2026-52933}
  • xfrm: espintcp: do not reuse an in-progress partial send {CVE-2026-52935}
  • Bluetooth: btusb: validate Realtek vendor event length {CVE-2026-68339}
  • Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() {CVE-2026-53256}
  • Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
  • netfilter: nft_exthdr: fix register tracking for F_PRESENT flag {CVE-2026-53218}
  • ipc: limit next_id…
Record
CLSA-2026-1788168285
Updated
2026-11-02
OSVCLSA-2026-1789141176 No score

kernel: Fix of 131 CVEs

  • net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-63829}
  • USB: legousbtower: fix use-after-free on disconnect race {CVE-2026-64340}
  • udf: validate sparing table length as an entry count, not a byte count {CVE-2026-64322}
  • ipv4: igmp: remove multicast group from hash table on device destruction {CVE-2026-64423}
  • USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343}
  • USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}
  • net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers {CVE-2026-74700}
  • ipvs: clear IPv4 options after rebasing tunnel ICMP errors {CVE-2026-74669}
  • netfilter: ebt_nflog: pin the NFLOG backend {CVE-2026-74660}
  • ipv4: fix use-after-free in fib_nhc_update_mtu() {CVE-2026-74656}
  • ALSA: usx2y: bound the hwdep mmap fault offset {CVE-2026-74641}
  • ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}
  • tipc: read le->link under the node lock in tipc_node_link_down() {CVE-2026-74609}
  • ip6_tunnel: clear skb2->cb[] in ip6ip6_err() {CVE-2026-74597}
  • bpf, sockmap: Fix sk_redir use-after-free in send verdict {CVE-2026-74589}
  • sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
  • netfilter: nf_tables: make nft_object rhltable per table {CVE-2026-74565}
  • scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write {CVE-2026-74470}
  • nfs: use nfsi->rwsem to protect traversal of the file lock list {CVE-2026-72472}
  • geneve: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-68142}
  • sctp: fix use-after-free of cached ASCONF chunk {CVE-2026-74587}
  • net/packet: reset the MAC header on the packet-socket transmit path {CVE-2026-74667}
  • ALSA: usb-audio: fix OOB write on Type II inbound URBs {CVE-2026-74682}
  • sctp: clear control chunk transport if it is being removed {CVE-2026-74688}
  • udp: fix potential use-after-free in tunnel segmentation {CVE-2026-74705}
  • bpf: Preserve pointer state for commuted arithmetic {CVE-2026-74720}
  • RDMA/siw: bound Read Response placement to the RREAD length {CVE-2026-64268}
  • libceph: Avoid using invalid osd indices from primary_temp {CVE-2026-80558}
  • drm/i915: Fix potential UAF in TTM object purge {CVE-2026-63884}
  • wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request {CVE-2026-68363}
  • ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() {CVE-2026-68160}
  • libceph: Reject monmaps advertising zero monitors {CVE-2026-68155}
  • sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}
  • Bluetooth: hci_sync: Protect UUID list traversal {CVE-2026-68189}
  • net: slip: serialize receive against buffer reallocation {CVE-2026-68143}
  • libceph: remove debugfs files before client teardown {CVE-2026-68153}
  • media: rtl2832: fix use-after-free in rtl2832_remove() {CVE-2026-68214}
  • sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}
  • drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async {CVE-2026-64219}
  • pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}
  • libceph: Fix multiplication overflow in decode_new_up_state_weight() {CVE-2026-68158}
  • ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() {CVE-2026-74499}
  • fbdev: Fix invalid page access after closing deferred I/O devices {CVE-2023-52731}
  • Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync {CVE-2023-53252}
  • net_sched: red: fix a race in __red_change() {CVE-2025-38108}
  • iio: event: Fix event FIFO reset race {CVE-2026-64496}
  • netfilter: ctnetlink: ensure safe access to master conntrack {CVE-2026-43116}
  • NFSv4: include MAY_WRITE in open permission mask for O_TRUNC {CVE-2026-64298}
  • openvswitch: fix GSO userspace truncation underflow {CVE-2026-68123}
  • media: cx23885: add ioremap return check and cleanup {CVE-2026-68226}
  • tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev {CVE-2026-68176} -…
Record
CLSA-2026-1789141176
Updated
2026-11-02
OSVCLSA-2026-1789460387 No score

Fix of 134 CVEs

  • CVE-2026-72463
    • xfrm: Fix dev use-after-free in xfrm async resumption {CVE-2026-72463}
  • CVE-2026-64600
    • xfs: resample the data fork mapping after cycling ILOCK {CVE-2026-64600}
  • CVE-2026-46175
    • f2fs: fix fsck inconsistency caused by FGGC of node block {CVE-2026-46175}
  • CVE-2025-68254
    • staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing {CVE-2025-68254}
  • CVE-2025-68255
    • staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing {CVE-2025-68255}
  • CVE-2026-64268
    • RDMA/siw: bound Read Response placement to the RREAD length {CVE-2026-64268}
  • CVE-2025-68286
    • drm/amd/display: Check NULL before accessing {CVE-2025-68286}
  • CVE-2026-53024
    • greybus: raw: fix use-after-free if write is called after disconnect {CVE-2026-53024}
  • CVE-2026-53025
    • greybus: raw: fix use-after-free on cdev close {CVE-2026-53025}
  • CVE-2026-52934
    • batman-adv: tvlv: reject oversized TVLV packets {CVE-2026-52934}
  • CVE-2025-68303
    • platform/x86: intel: punit_ipc: fix memory corruption {CVE-2025-68303}
  • CVE-2026-64280
    • fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() {CVE-2026-64280}
  • CVE-2026-64188
    • net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() {CVE-2026-64188}
  • CVE-2026-64109
    • af_unix: Fix UAF read of tail->len in unix_stream_data_wait() {CVE-2026-64109}
  • CVE-2026-64274
    • Input: goodix - clamp the device-reported contact count {CVE-2026-64274}
  • CVE-2026-64270
    • Input: mms114 - reject an oversized device packet size {CVE-2026-64270}
  • CVE-2026-64093
    • batman-adv: tp_meter: directly shut down timer on cleanup {CVE-2026-64093}
  • CVE-2026-64091
    • batman-adv: tt: fix TOCTOU race for reported vlans {CVE-2026-64091}
  • CVE-2026-53329
    • drm/amd/display: Use krealloc_array() in dal_vector_reserve() {CVE-2026-53329}
  • CVE-2026-64298
    • NFSv4: include MAY_WRITE in open permission mask for O_TRUNC {CVE-2026-64298}
  • CVE-2026-64276
    • Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count {CVE-2026-64276}
  • CVE-2026-64273
    • Input: iforce - bound the device-reported force-feedback effect index {CVE-2026-64273}
  • CVE-2026-64271
    • Input: touchwin - reset the packet index on every complete packet {CVE-2026-64271}
  • CVE-2026-64266
    • fuse: re-lock request before returning from fuse_ref_folio() {CVE-2026-64266}
  • CVE-2026-64191
    • i2c: stub: Reject I2C block transfers with invalid length {CVE-2026-64191}
  • CVE-2026-64189
    • netfilter: ipset: fix race between dump and ip_set_list resize {CVE-2026-64189}
  • CVE-2026-31786
    • Buffer overflow in drivers/xen/sys-hypervisor.c {CVE-2026-31786}
  • CVE-2025-68799
    • caif: fix integer underflow in cffrml_receive() {CVE-2025-68799}
  • CVE-2025-68302
    • net: sxgbe: fix potential NULL dereference in sxgbe_rx() {CVE-2025-68302}
  • CVE-2025-40243
    • hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits() {CVE-2025-40243}
  • CVE-2025-40233
    • ocfs2: clear extent cache after moving/defragmenting extents {CVE-2025-40233}
  • CVE-2026-23269
    • apparmor: validate DFA start states are in bounds in unpack_pdb {CVE-2026-23269}
  • CVE-2026-43249
    • 9p/xen: protect xen_9pfs_front_free against concurrent calls {CVE-2026-43249}
  • CVE-2026-31657
    • batman-adv: hold claim backbone gateways by reference {CVE-2026-31657}
  • CVE-2026-31598
    • ocfs2: fix possible deadlock between unlink and dio_end_io_write {CVE-2026-31598}
  • CVE-2026-31768
    • iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() {CVE-2026-31768}
  • CVE-2026-23216
    • scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() {CVE-2026-23216} *…
Record
CLSA-2026-1789460387
Updated
2026-11-02
OSVCLSA-2026-1791852988 No score

kernel: Fix of 107 CVEs

  • netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
  • IB/isert: reject PDUs declaring more data than was received {CVE-2026-90414}
  • RDMA/mlx5: Fix integer overflow of user QP buffer size {CVE-2026-90435}
  • sctp: validate embedded address parameter length {CVE-2026-74287}
  • IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413}
  • xfrm: ah6: validate routing header segments_left {CVE-2026-80844}
  • drm/amd/display: set new_stream to NULL after release {CVE-2026-68236}
  • RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters {CVE-2026-100075}
  • nvmet-rdma: handle inline data with a nonzero offset {CVE-2026-72129}
  • netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() {CVE-2026-97417}
  • sctp: validate cookie AUTH state before use {CVE-2026-74752}
  • ipvlan: inherit needed_headroom and needed_tailroom from phy_dev {CVE-2026-74744}
  • enic: fix tx_hang_reset use-after-free on device removal {CVE-2026-74725}
  • net/atm: fix slab-out-of-bounds read in vcc_setsockopt() {CVE-2026-74689}
  • drm/amdgpu: reject oversized IBs with per-ring packet limits {CVE-2026-80576}
  • xfs: bounds-check buffer log item's dirty bitmap {CVE-2026-80536}
  • nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page {CVE-2026-64320}
  • smb: client: reject overlapping data areas in SMB2 responses {CVE-2026-64257}
  • smb: client: restrict implied bcc[0] exemption to responses without data area {CVE-2026-64448}
  • crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() {CVE-2026-64438}
  • crypto: qat - protect interrupt mask CSRs with a spinlock {CVE-2026-64438}
  • crypto: qat - remove intermediate tasklet for vf2pf {CVE-2026-64438}
  • usb: free iso schedules on failed submit {CVE-2026-64348}
  • USB: iowarrior: fix use-after-free on disconnect race {CVE-2026-64341}
  • crypto: qat - protect service table iterations with service_lock {CVE-2026-64305}
  • crypto: qat - validate RSA CRT component lengths {CVE-2026-64304}
  • net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422}
  • udf: validate VAT header length against the VAT inode size {CVE-2026-64323}
  • crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
  • crypto: algif_aead - fix uninitialized ctx->init {CVE-2025-39964}
  • sctp: fix race between sctp_wait_for_connect and peeloff {CVE-2026-63971}
  • mpls: reload header after pskb_may_pull() {CVE-2026-89555}
  • net: tun: bound receive headroom {CVE-2026-81000}
  • bridge: stp: Fix a potential use-after-free when deleting a bridge {CVE-2026-72389}
  • scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer {CVE-2026-74556}
  • rhashtable: clear stale iter->p on table restart {CVE-2026-64563}
  • vhost: reset the vring metadata cache on vring reconfiguration {CVE-2026-74580}
  • net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
  • sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
  • USB: legousbtower: fix use-after-free on disconnect race {CVE-2026-64340}
  • USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343}
  • udf: validate sparing table length as an entry count, not a byte count {CVE-2026-64322}
  • ipv4: igmp: remove multicast group from hash table on device destruction {CVE-2026-64423}
  • USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}
  • sctp: fix use-after-free of cached ASCONF chunk {CVE-2026-74587}
  • RDMA/siw: bound Read Response placement to the RREAD length {CVE-2026-64268}
  • ip6_tunnel: clear skb2->cb[] in ip6ip6_err() {CVE-2026-74597}
  • ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}
  • netfilter: ebt_nflog: pin the NFLOG backend {CVE-2026-74660}
  • libceph: Avoid using invalid osd indices from primary_temp {CVE-2026-80558}
  • udp: fix potential use-after-free in tunnel segmentation {CVE-2026-74705}
  • Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}
  • wifi: ath9k: hif_usb: don't dereference hif_dev after…
Record
CLSA-2026-1791852988
Updated
2026-11-02
OSVCLSA-2026-1791858083 No score

kernel: Fix of 94 CVEs

  • netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
  • IB/isert: reject PDUs declaring more data than was received {CVE-2026-90414}
  • RDMA/mlx5: Fix integer overflow of user QP buffer size {CVE-2026-90435}
  • IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413}
  • xfrm: ah6: validate routing header segments_left {CVE-2026-80844}
  • drm/amd/display: set new_stream to NULL after release {CVE-2026-68236}
  • RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters {CVE-2026-100075}
  • nvmet-rdma: handle inline data with a nonzero offset {CVE-2026-72129}
  • netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() {CVE-2026-97417}
  • smb: client: restrict implied bcc[0] exemption to responses without data area {CVE-2026-64448}
  • usb: free iso schedules on failed submit {CVE-2026-64348}
  • USB: iowarrior: fix use-after-free on disconnect race {CVE-2026-64341}
  • USB: legousbtower: fix use-after-free on disconnect race {CVE-2026-64340}
  • crypto: qat - protect service table iterations with service_lock {CVE-2026-64305}
  • crypto: qat - validate RSA CRT component lengths {CVE-2026-64304}
  • net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422}
  • udf: validate VAT header length against the VAT inode size {CVE-2026-64323}
  • crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
  • net: tun: bound receive headroom {CVE-2026-81000}
  • bridge: stp: Fix a potential use-after-free when deleting a bridge {CVE-2026-72389}
  • scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer {CVE-2026-74556}
  • rhashtable: clear stale iter->p on table restart {CVE-2026-64563}
  • mpls: reload header after pskb_may_pull() {CVE-2026-89555}
  • vhost: reset the vring metadata cache on vring reconfiguration {CVE-2026-74580}
  • net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
  • sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
  • USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343}
  • udf: validate sparing table length as an entry count, not a byte count {CVE-2026-64322}
  • ipv4: igmp: remove multicast group from hash table on device destruction {CVE-2026-64423}
  • USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}
  • RDMA/siw: bound Read Response placement to the RREAD length {CVE-2026-64268}
  • sctp: fix use-after-free of cached ASCONF chunk {CVE-2026-74587}
  • ip6_tunnel: clear skb2->cb[] in ip6ip6_err() {CVE-2026-74597}
  • ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}
  • netfilter: ebt_nflog: pin the NFLOG backend {CVE-2026-74660}
  • netfilter: flowtable: publish GC-visible tuple last {CVE-2026-74746}
  • libceph: Avoid using invalid osd indices from primary_temp {CVE-2026-80558}
  • udp: fix potential use-after-free in tunnel segmentation {CVE-2026-74705}
  • Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}
  • wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request {CVE-2026-68363}
  • ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() {CVE-2026-68160}
  • libceph: Reject monmaps advertising zero monitors {CVE-2026-68155}
  • sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}
  • net: slip: serialize receive against buffer reallocation {CVE-2026-68143}
  • libceph: remove debugfs files before client teardown {CVE-2026-68153}
  • libceph: refresh auth->authorizer_buf{,_len} after authorizer update {CVE-2026-68156}
  • media: rtl2832: fix use-after-free in rtl2832_remove() {CVE-2026-68214}
  • sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}
  • pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}
  • libceph: Fix multiplication overflow in decode_new_up_state_weight() {CVE-2026-68158}
  • ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() {CVE-2026-74499}
  • can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet…
Record
CLSA-2026-1791858083
Updated
2026-11-02
OSVopenSUSE-SU-2026:11476-1 No score

kernel-devel-7.1.7-1.1 on GA media

These are all security issues fixed in the kernel-devel-7.1.7-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11476-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21910-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (bsc#1256671).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-23113: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).
  • CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
  • CVE-2026-23348: cxl/mem: Clarify @host for devm_cxl_add_nvdimm() (bsc#1260577).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31530: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (bsc#1262756).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132).
  • CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
  • CVE-2026-46135: nvmet-tcp: remove redundant calls to nvmet_tcp_fatal_error() (bsc#1267373).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). -…
Record
openSUSE-SU-2026:21910-1
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2026-64268 No score

CVE-2026-64268 in linux - Patched by Root

Root has patched CVE-2026-64268 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2026-64268
Updated
2026-11-02
OSVROOT-OS-UBUNTU-2204-CVE-2026-64268 No score

CVE-2026-64268 in linux - Patched by Root

Root has patched CVE-2026-64268 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2204-CVE-2026-64268
Updated
2026-11-06
OSVSUSE-SU-2026:23477-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1235944)
  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-31392: smb: client: fix krb5 mount with username option (bsc#1261788).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).
  • CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
  • CVE-2026-43278: dm: clear cloned request bio pointer when last clone bio completes (bsc#1264584).
  • CVE-2026-43319: spi: spidev: fix lock inversion between spi_lock and buf_lock (bsc#1264788).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).
  • CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).
  • CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).
  • CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).
  • CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).
  • CVE-2026-53076: bpf: Fix OOB in pcpu_init_value (bsc#1269695).
  • CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412).
  • CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783).
  • CVE-2026-53091: net: account for encap headers in qdisc pkt len (bsc#1269530).
  • CVE-2026-53094: bpf: Fix stale offload->prog pointer after constant blinding (bsc#1269965).
  • CVE-2026-53096: bpf: Use RCU-safe iteration in…
Record
SUSE-SU-2026:23477-1
Updated
2026-11-02
OSVSUSE-SU-2026:23481-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1269731).
  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-31392: smb: client: fix krb5 mount with username option (bsc#1261788).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).
  • CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
  • CVE-2026-43278: dm: clear cloned request bio pointer when last clone bio completes (bsc#1264584).
  • CVE-2026-43319: spi: spidev: fix lock inversion between spi_lock and buf_lock (bsc#1264788).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).
  • CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).
  • CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).
  • CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).
  • CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).
  • CVE-2026-53076: bpf: Fix OOB in pcpu_init_value (bsc#1269695).
  • CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412).
  • CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783).
  • CVE-2026-53091: net: account for encap headers in qdisc pkt len (bsc#1269530).
  • CVE-2026-53094: bpf: Fix stale offload->prog pointer after constant blinding (bsc#1269965).
  • CVE-2026-53096: bpf: Use RCU-safe iteration in…
Record
SUSE-SU-2026:23481-1
Updated
2026-11-02
OSVSUSE-SU-2026:23528-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1235944)
  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-31392: smb: client: fix krb5 mount with username option (bsc#1261788).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).
  • CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
  • CVE-2026-43278: dm: clear cloned request bio pointer when last clone bio completes (bsc#1264584).
  • CVE-2026-43319: spi: spidev: fix lock inversion between spi_lock and buf_lock (bsc#1264788).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).
  • CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).
  • CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).
  • CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).
  • CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).
  • CVE-2026-53076: bpf: Fix OOB in pcpu_init_value (bsc#1269695).
  • CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412).
  • CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783).
  • CVE-2026-53091: net: account for encap headers in qdisc pkt len (bsc#1269530).
  • CVE-2026-53094: bpf: Fix stale offload->prog pointer after constant blinding (bsc#1269965).
  • CVE-2026-53096: bpf: Use RCU-safe iteration in…
Record
SUSE-SU-2026:23528-1
Updated
2026-11-02
OSVSUSE-SU-2026:23529-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1269731).
  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-31392: smb: client: fix krb5 mount with username option (bsc#1261788).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).
  • CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
  • CVE-2026-43278: dm: clear cloned request bio pointer when last clone bio completes (bsc#1264584).
  • CVE-2026-43319: spi: spidev: fix lock inversion between spi_lock and buf_lock (bsc#1264788).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).
  • CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).
  • CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).
  • CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).
  • CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).
  • CVE-2026-53076: bpf: Fix OOB in pcpu_init_value (bsc#1269695).
  • CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412).
  • CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783).
  • CVE-2026-53091: net: account for encap headers in qdisc pkt len (bsc#1269530).
  • CVE-2026-53094: bpf: Fix stale offload->prog pointer after constant blinding (bsc#1269965).
  • CVE-2026-53096: bpf: Use RCU-safe iteration in…
Record
SUSE-SU-2026:23529-1
Updated
2026-11-02
OSVSUSE-SU-2026:23881-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (bsc#1256671).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-23113: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).
  • CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
  • CVE-2026-23348: cxl/mem: Clarify @host for devm_cxl_add_nvdimm() (bsc#1260577).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31530: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (bsc#1262756).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132).
  • CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
  • CVE-2026-46135: nvmet-tcp: remove redundant calls to nvmet_tcp_fatal_error() (bsc#1267373).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). -…
Record
SUSE-SU-2026:23881-1
Updated
2026-11-02
OSVSUSE-SU-2026:23887-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (bsc#1256671).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-23113: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).
  • CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
  • CVE-2026-23348: cxl/mem: Clarify @host for devm_cxl_add_nvdimm() (bsc#1260577).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31530: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (bsc#1262756).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132).
  • CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
  • CVE-2026-46135: nvmet-tcp: remove redundant calls to nvmet_tcp_fatal_error() (bsc#1267373).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). -…
Record
SUSE-SU-2026:23887-1
Updated
2026-11-02
OSVSUSE-SU-2026:23897-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (bsc#1256671).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-23113: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).
  • CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
  • CVE-2026-23348: cxl/mem: Clarify @host for devm_cxl_add_nvdimm() (bsc#1260577).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31530: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (bsc#1262756).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132).
  • CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
  • CVE-2026-46135: nvmet-tcp: remove redundant calls to nvmet_tcp_fatal_error() (bsc#1267373).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). -…
Record
SUSE-SU-2026:23897-1
Updated
2026-11-02
OSVSUSE-SU-2026:23902-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (bsc#1256671).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-23113: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).
  • CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
  • CVE-2026-23348: cxl/mem: Clarify @host for devm_cxl_add_nvdimm() (bsc#1260577).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31530: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (bsc#1262756).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132).
  • CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
  • CVE-2026-46135: nvmet-tcp: remove redundant calls to nvmet_tcp_fatal_error() (bsc#1267373).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). -…
Record
SUSE-SU-2026:23902-1
Updated
2026-11-02
OSVSUSE-SU-2026:4120-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1235944).
  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).
  • CVE-2026-31658: net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() (bsc#1263052).
  • CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
  • CVE-2026-43014: net: macb: properly unregister fixed rate clocks (bsc#1264012).
  • CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43213: wifi: rtw89: pci: validate sequence number of TX release report (bsc#1264643).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43386: staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie (bsc#1264740).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46078: erofs: fix the out-of-bounds nameoff handling for trailing dirents (bsc#1267505).
  • CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46127: RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() (bsc#1267236).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).
  • CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).
  • CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).
  • CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).
  • CVE-2026-53034: bpf, sockmap: Fix af_unix null-ptr-deref in proto update (bsc#1269140).
  • CVE-2026-53059: dm…
Record
SUSE-SU-2026:4120-1
Updated
2026-11-02
OSVSUSE-SU-2026:4254-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-57841,CVE-2026-53260: net: fix memory leak in tcp_conn_request() (bsc#1235944 bsc#1269731).
  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).
  • CVE-2026-31658: net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() (bsc#1263052).
  • CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
  • CVE-2026-43014,CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010 bsc#1264012).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43213: wifi: rtw89: pci: validate sequence number of TX release report (bsc#1264643).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43386: staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie (bsc#1264740).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46078: erofs: fix the out-of-bounds nameoff handling for trailing dirents (bsc#1267505).
  • CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46127: RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() (bsc#1267236).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).
  • CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).
  • CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).
  • CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).
  • CVE-2026-53034: bpf, sockmap: Fix af_unix null-ptr-deref in proto update (bsc#1269140).
  • CVE-2026-53059: dm log: fix out-of-bounds write due…
Record
SUSE-SU-2026:4254-1
Updated
2026-11-02
OSVSUSE-SU-2026:4279-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2023-53109: net: tunnels: annotate lockless accesses to dev->needed_headroom (bsc#1242405 bsc#1275784).
  • CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1235944).
  • CVE-2026-53260: tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req() (bsc#1269731).
  • CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
  • CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
  • CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).
  • CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-52910: bpf: Free reuseport cBPF prog after RCU grace period (bsc#1268659).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).
  • CVE-2026-53163: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (bsc#1269306).
  • CVE-2026-53264: net/sched: act_api: use RCU with deferred freeing for action lifecycle (bsc#1269238).
  • CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271830).
  • CVE-2026-63801: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (bsc#1272230).
  • CVE-2026-63823: keys: Pin request_key_auth payload in instantiate paths (bsc#1272182).
  • CVE-2026-63827: apparmor: fix use-after-free in rawdata dedup loop (bsc#1272179).
  • CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272385).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272390).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1272877).
  • CVE-2026-63992: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (bsc#1272868).
  • CVE-2026-64002: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774).
  • CVE-2026-64007: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105).
  • CVE-2026-64010: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (bsc#1273882).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1273891).
  • CVE-2026-64015: security/keys: fix missed RCU read section on lookup (bsc#1273762).
  • CVE-2026-64047: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060).
  • CVE-2026-64048: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (bsc#1273484).
  • CVE-2026-64098: drm/virtio: use uninterruptible resv lock for plane updates (bsc#1273488).
  • CVE-2026-64109: af_unix: Peek the queue synchronized (bsc#1273748).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273742).
  • CVE-2026-64115: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745).
  • CVE-2026-64268: RDMA/siw: bound Read Response placement to the RREAD length (bsc#1273276).
  • CVE-2026-64304: crypto: qat - validate RSA CRT component lengths (bsc#1273944).
  • CVE-2026-64355: bpf: Reject fragmented frames in devmap (bsc#1273422).
  • CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1274274).
  • CVE-2026-64450: tipc: fix out-of-bounds read in broadcast Gap ACK blocks (bsc#1273523).
  • CVE-2026-64481: ALSA: hda/cs35l41: Fix firmware load work teardown (bsc#1274547).
  • CVE-2026-64541: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (bsc#1273303).
  • CVE-2026-64543: tipc: fix use-after-free of…
Record
SUSE-SU-2026:4279-1
Updated
2026-11-02
OSVSUSE-SU-2026:4284-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2023-53109: net: tunnels: annotate lockless accesses to dev->needed_headroom (bsc#1242405 bsc#1275784).
  • CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1235944).
  • CVE-2026-53260: tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req() (bsc#1269731).
  • CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
  • CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
  • CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).
  • CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-52910: bpf: Free reuseport cBPF prog after RCU grace period (bsc#1268659).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).
  • CVE-2026-53163: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (bsc#1269306).
  • CVE-2026-53264: net/sched: act_api: use RCU with deferred freeing for action lifecycle (bsc#1269238).
  • CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271830).
  • CVE-2026-63801: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (bsc#1272230).
  • CVE-2026-63823: keys: Pin request_key_auth payload in instantiate paths (bsc#1272182).
  • CVE-2026-63827: apparmor: fix use-after-free in rawdata dedup loop (bsc#1272179).
  • CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272385).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272390).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1272877).
  • CVE-2026-63992: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (bsc#1272868).
  • CVE-2026-64002: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774).
  • CVE-2026-64007: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105).
  • CVE-2026-64010: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (bsc#1273882).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1273891).
  • CVE-2026-64015: security/keys: fix missed RCU read section on lookup (bsc#1273762).
  • CVE-2026-64047: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060).
  • CVE-2026-64048: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (bsc#1273484).
  • CVE-2026-64098: drm/virtio: use uninterruptible resv lock for plane updates (bsc#1273488).
  • CVE-2026-64109: af_unix: Peek the queue synchronized (bsc#1273748).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273742).
  • CVE-2026-64115: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745).
  • CVE-2026-64268: RDMA/siw: bound Read Response placement to the RREAD length (bsc#1273276).
  • CVE-2026-64304: crypto: qat - validate RSA CRT component lengths (bsc#1273944).
  • CVE-2026-64355: bpf: Reject fragmented frames in devmap (bsc#1273422).
  • CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1274274).
  • CVE-2026-64450: tipc: fix out-of-bounds read in broadcast Gap ACK blocks (bsc#1273523).
  • CVE-2026-64481: ALSA: hda/cs35l41: Fix firmware load work teardown (bsc#1274547).
  • CVE-2026-64541: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (bsc#1273303).
  • CVE-2026-64543: tipc: fix use-after-free of the…
Record
SUSE-SU-2026:4284-1
Updated
2026-11-02
OSVSUSE-SU-2026:4347-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-57841,CVE-2026-53260: net: fix memory leak in tcp_conn_request() (bsc#1235944 bsc#1269731).
  • CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
  • CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
  • CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-52910: bpf: Free reuseport cBPF prog after RCU grace period (bsc#1268659).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).
  • CVE-2026-53163: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (bsc#1269306).
  • CVE-2026-53264: net/sched: act_api: use RCU with deferred freeing for action lifecycle (bsc#1269238).
  • CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271830).
  • CVE-2026-63801: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (bsc#1272230).
  • CVE-2026-63823: keys: Pin request_key_auth payload in instantiate paths (bsc#1272182).
  • CVE-2026-63827: apparmor: fix use-after-free in rawdata dedup loop (bsc#1272179).
  • CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272385).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272390).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1272877).
  • CVE-2026-63992: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (bsc#1272868).
  • CVE-2026-64002: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774).
  • CVE-2026-64007: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105).
  • CVE-2026-64010: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (bsc#1273882).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1273891).
  • CVE-2026-64015: security/keys: fix missed RCU read section on lookup (bsc#1273762).
  • CVE-2026-64047: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060).
  • CVE-2026-64048: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (bsc#1273484).
  • CVE-2026-64098: drm/virtio: use uninterruptible resv lock for plane updates (bsc#1273488).
  • CVE-2026-64109: af_unix: Peek the queue synchronized (bsc#1273748).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273742).
  • CVE-2026-64115: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745).
  • CVE-2026-64268: RDMA/siw: bound Read Response placement to the RREAD length (bsc#1273276).
  • CVE-2026-64304: crypto: qat - validate RSA CRT component lengths (bsc#1273944).
  • CVE-2026-64355: bpf: Reject fragmented frames in devmap (bsc#1273422).
  • CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1274274).
  • CVE-2026-64450: tipc: fix out-of-bounds read in broadcast Gap ACK blocks (bsc#1273523).
  • CVE-2026-64481: ALSA: hda/cs35l41: Fix firmware load work teardown (bsc#1274547).
  • CVE-2026-64541: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (bsc#1273303).
  • CVE-2026-64543: tipc: fix use-after-free of the discoverer in tipc_disc_rcv() (bsc#1273311).
  • CVE-2026-64562: KVM: nVMX: Hide shadow VMCS right after VMCLEAR (bsc#1273930).
  • CVE-2026-64563: rhashtable: clear stale iter->p on table restart (bsc#1273995).
  • CVE-2026-64572: ipv4: fib: free fib_alias with kfree_rcu() on insert…
Record
SUSE-SU-2026:4347-1
Updated
2026-11-02
OSVSUSE-SU-2026:4369-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-57841,CVE-2026-53260: net: fix memory leak in tcp_conn_request() (bsc#1235944 bsc#1269731).
  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
  • CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
  • CVE-2026-43147: Revert 'PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV' (bsc#1264642).
  • CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-52910: bpf: Free reuseport cBPF prog after RCU grace period (bsc#1268659).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).
  • CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).
  • CVE-2026-53110: selftests/bpf: Add ASSERT_OK_FD macro (bsc#1269985).
  • CVE-2026-53163: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (bsc#1269306).
  • CVE-2026-53264: net/sched: act_api: use RCU with deferred freeing for action lifecycle (bsc#1269238).
  • CVE-2026-53365: vsock/virtio: fix zerocopy completion for multi-skb sends (bsc#1271365).
  • CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271830).
  • CVE-2026-63801: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (bsc#1272230).
  • CVE-2026-63823: keys: Pin request_key_auth payload in instantiate paths (bsc#1272182).
  • CVE-2026-63827: apparmor: fix use-after-free in rawdata dedup loop (bsc#1272179).
  • CVE-2026-63879: drm/amdgpu: fix amdgpu_hmm_range_get_pages (bsc#1272569).
  • CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).
  • CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272385).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272390).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1272877).
  • CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1272662).
  • CVE-2026-63970: vsock/virtio: bind uarg before filling zerocopy skb (bsc#1272673).
  • CVE-2026-63992: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (bsc#1272868).
  • CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273030).
  • CVE-2026-64002: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774).
  • CVE-2026-64007: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105).
  • CVE-2026-64010: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (bsc#1273882).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1273891).
  • CVE-2026-64015: security/keys: fix missed RCU read section on lookup (bsc#1273762).
  • CVE-2026-64029: ALSA: seq: Serialize UMP output teardown with event_input (bsc#1273766).
  • CVE-2026-64048: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (bsc#1273484).
  • CVE-2026-64098: drm/virtio: use uninterruptible resv lock for plane updates (bsc#1273488).
  • CVE-2026-64109: af_unix: Peek the queue synchronized (bsc#1273748).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273742).
  • CVE-2026-64115: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745).
  • CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues…
Record
SUSE-SU-2026:4369-1
Updated
2026-11-02
OSVSUSE-SU-2026:4595-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-57841,CVE-2026-53260: net: fix memory leak in tcp_conn_request() (bsc#1235944 bsc#1269731).
  • CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
  • CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
  • CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-52910: bpf: Free reuseport cBPF prog after RCU grace period (bsc#1268659).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).
  • CVE-2026-53163: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (bsc#1269306).
  • CVE-2026-53264: net/sched: act_api: use RCU with deferred freeing for action lifecycle (bsc#1269238).
  • CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271830).
  • CVE-2026-63801: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (bsc#1272230).
  • CVE-2026-63823: keys: Pin request_key_auth payload in instantiate paths (bsc#1272182).
  • CVE-2026-63827: apparmor: fix use-after-free in rawdata dedup loop (bsc#1272179).
  • CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272385).
  • CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272390).
  • CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1272877).
  • CVE-2026-63992: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (bsc#1272868).
  • CVE-2026-64002: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774).
  • CVE-2026-64007: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105).
  • CVE-2026-64010: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (bsc#1273882).
  • CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1273891).
  • CVE-2026-64015: security/keys: fix missed RCU read section on lookup (bsc#1273762).
  • CVE-2026-64047: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060).
  • CVE-2026-64048: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (bsc#1273484).
  • CVE-2026-64098: drm/virtio: use uninterruptible resv lock for plane updates (bsc#1273488).
  • CVE-2026-64109: af_unix: Peek the queue synchronized (bsc#1273748).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273742).
  • CVE-2026-64115: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745).
  • CVE-2026-64268: RDMA/siw: bound Read Response placement to the RREAD length (bsc#1273276).
  • CVE-2026-64304: crypto: qat - validate RSA CRT component lengths (bsc#1273944).
  • CVE-2026-64355: bpf: Reject fragmented frames in devmap (bsc#1273422).
  • CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1274274).
  • CVE-2026-64450: tipc: fix out-of-bounds read in broadcast Gap ACK blocks (bsc#1273523).
  • CVE-2026-64481: ALSA: hda/cs35l41: Fix firmware load work teardown (bsc#1274547).
  • CVE-2026-64541: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (bsc#1273303).
  • CVE-2026-64543: tipc: fix use-after-free of the discoverer in tipc_disc_rcv() (bsc#1273311).
  • CVE-2026-64562: KVM: nVMX: Hide shadow VMCS right after VMCLEAR (bsc#1273930).
  • CVE-2026-64563: rhashtable: clear stale iter->p on table restart (bsc#1273995).
  • CVE-2026-64572: ipv4: fib: free fib_alias with kfree_rcu() on insert error…
Record
SUSE-SU-2026:4595-1
Updated
2026-11-02
OSVUSN-8726-1 No score

linux, linux-aws, linux-aws-7.0, linux-gcp, linux-gke, linux-hwe-7.0, linux-realtime vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • User-space API (UAPI);
  • Kernel build system;
  • ARM32 architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Drivers core;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Character device driver;
  • Hardware random number generator core;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • System reset/shutdown drivers;
  • Power sequencing drivers;
  • PTP clock framework;
  • Voltage and Current Regulator drivers;
  • RPMSG subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • VME bus staging drivers;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Cadence USB3 driver;
  • ULPI bus;
  • DesignWare USB3 driver;
  • Faraday FOTG210 USB2 dual-role controller driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • Intel USBIO USB I/O expander driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • VFIO drivers;
  • Framebuffer layer;
  • Virtio drivers;
  • BTRFS file system;
  • EROFS file system;
  • exFAT file system;
  • F2FS file system;
  • File systems infrastructure;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • OCFS2 file system;
  • Proc file system;
  • SMB network file system;
  • UDF file system;
  • XFS file system;
  • Key management;
  • BPF subsystem;
  • Memory management;
  • Software nodes and device properties;
  • Glob pattern matching library;
  • Memory Management;
  • KVM subsystem;
  • Mellanox drivers;
  • Restartable sequences system call mechanism;
  • Socket messages infrastructure;
  • Network traffic control;
  • Bluetooth subsystem;
  • Netfilter;
  • Networking core;
  • Network sockets;
  • TCP network protocol;
  • io_uring subsystem;
  • IPC subsystem;
  • Audit subsystem;
  • Perf events;
  • Kernel fork() syscall;
  • Locking primitives;
  • Kernel module support;
  • Scheduler infrastructure; -…
Record
USN-8726-1
Updated
2026-11-06
OSVUSN-8726-2 No score

linux-raspi vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • User-space API (UAPI);
  • Kernel build system;
  • ARM32 architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Drivers core;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Character device driver;
  • Hardware random number generator core;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • System reset/shutdown drivers;
  • Power sequencing drivers;
  • PTP clock framework;
  • Voltage and Current Regulator drivers;
  • RPMSG subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • VME bus staging drivers;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Cadence USB3 driver;
  • ULPI bus;
  • DesignWare USB3 driver;
  • Faraday FOTG210 USB2 dual-role controller driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • Intel USBIO USB I/O expander driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • VFIO drivers;
  • Framebuffer layer;
  • Virtio drivers;
  • BTRFS file system;
  • EROFS file system;
  • exFAT file system;
  • F2FS file system;
  • File systems infrastructure;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • OCFS2 file system;
  • Proc file system;
  • SMB network file system;
  • UDF file system;
  • XFS file system;
  • Key management;
  • BPF subsystem;
  • Memory management;
  • Software nodes and device properties;
  • Glob pattern matching library;
  • Memory Management;
  • KVM subsystem;
  • Mellanox drivers;
  • Restartable sequences system call mechanism;
  • Socket messages infrastructure;
  • Network traffic control;
  • Bluetooth subsystem;
  • Netfilter;
  • Networking core;
  • Network sockets;
  • TCP network protocol;
  • io_uring subsystem;
  • IPC subsystem;
  • Audit subsystem;
  • Perf events;
  • Kernel fork() syscall;
  • Locking primitives;
  • Kernel module support;
  • Scheduler infrastructure; -…
Record
USN-8726-2
Updated
2026-11-06
OSVUSN-8726-3 No score

linux-ibm vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • User-space API (UAPI);
  • Kernel build system;
  • ARM32 architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Drivers core;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Character device driver;
  • Hardware random number generator core;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • System reset/shutdown drivers;
  • Power sequencing drivers;
  • PTP clock framework;
  • Voltage and Current Regulator drivers;
  • RPMSG subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • VME bus staging drivers;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Cadence USB3 driver;
  • ULPI bus;
  • DesignWare USB3 driver;
  • Faraday FOTG210 USB2 dual-role controller driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • Intel USBIO USB I/O expander driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • VFIO drivers;
  • Framebuffer layer;
  • Virtio drivers;
  • BTRFS file system;
  • EROFS file system;
  • exFAT file system;
  • F2FS file system;
  • File systems infrastructure;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • OCFS2 file system;
  • Proc file system;
  • SMB network file system;
  • UDF file system;
  • XFS file system;
  • Key management;
  • BPF subsystem;
  • Memory management;
  • Software nodes and device properties;
  • Glob pattern matching library;
  • Memory Management;
  • KVM subsystem;
  • Mellanox drivers;
  • Restartable sequences system call mechanism;
  • Socket messages infrastructure;
  • Network traffic control;
  • Bluetooth subsystem;
  • Netfilter;
  • Networking core;
  • Network sockets;
  • TCP network protocol;
  • io_uring subsystem;
  • IPC subsystem;
  • Audit subsystem;
  • Perf events;
  • Kernel fork() syscall;
  • Locking primitives;
  • Kernel module support;
  • Scheduler infrastructure; -…
Record
USN-8726-3
Updated
2026-11-06
OSVUSN-8726-4 No score

linux-azure, linux-oracle vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • User-space API (UAPI);
  • Kernel build system;
  • ARM32 architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Drivers core;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Character device driver;
  • Hardware random number generator core;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • System reset/shutdown drivers;
  • Power sequencing drivers;
  • PTP clock framework;
  • Voltage and Current Regulator drivers;
  • RPMSG subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • VME bus staging drivers;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Cadence USB3 driver;
  • ULPI bus;
  • DesignWare USB3 driver;
  • Faraday FOTG210 USB2 dual-role controller driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • Intel USBIO USB I/O expander driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • VFIO drivers;
  • Framebuffer layer;
  • Virtio drivers;
  • BTRFS file system;
  • EROFS file system;
  • exFAT file system;
  • F2FS file system;
  • File systems infrastructure;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • OCFS2 file system;
  • Proc file system;
  • SMB network file system;
  • UDF file system;
  • XFS file system;
  • Key management;
  • BPF subsystem;
  • Memory management;
  • Software nodes and device properties;
  • Glob pattern matching library;
  • Memory Management;
  • KVM subsystem;
  • Mellanox drivers;
  • Restartable sequences system call mechanism;
  • Socket messages infrastructure;
  • Network traffic control;
  • Bluetooth subsystem;
  • Netfilter;
  • Networking core;
  • Network sockets;
  • TCP network protocol;
  • io_uring subsystem;
  • IPC subsystem;
  • Audit subsystem;
  • Perf events;
  • Kernel fork() syscall;
  • Locking primitives;
  • Kernel module support;
  • Scheduler infrastructure; -…
Record
USN-8726-4
Updated
2026-11-06

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel-rt
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.rt7.500.el8_10
4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-core
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.rt7.500.el8_10
4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debug
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.rt7.500.el8_10
4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debug-core
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.rt7.500.el8_10
4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debug-devel
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.rt7.500.el8_10
4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debug-modules
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.rt7.500.el8_10
4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debug-modules-extra
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.rt7.500.el8_10
4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-devel
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.rt7.500.el8_10
4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-modules
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.rt7.500.el8_10
4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-modules-extra
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.rt7.500.el8_10
4.18.0-553.159.1.rt7.500.el8_10
Show 290 moreShow less
Affected packages
PackageAffectedFixed
bpftool
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-abi-stablelists
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-core
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-cross-headers
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-debug
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-debug-core
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-debug-devel
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-debug-modules
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-debug-modules-extra
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-devel
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-doc
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-headers
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-modules
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-modules-extra
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-tools
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-tools-libs
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-tools-libs-devel
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-zfcpdump
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-zfcpdump-core
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-zfcpdump-devel
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-zfcpdump-modules
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-zfcpdump-modules-extra
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
perf
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
python3-perf
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.44.1.el9_8
5.14.0-687.44.1.el9_8
kernel-64k
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.44.1.el9_8
5.14.0-687.44.1.el9_8
kernel-64k-core
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.44.1.el9_8
5.14.0-687.44.1.el9_8
kernel-64k-debug
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.44.1.el9_8
5.14.0-687.44.1.el9_8
kernel-64k-debug-core
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.44.1.el9_8
5.14.0-687.44.1.el9_8
kernel-64k-debug-devel
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.44.1.el9_8
5.14.0-687.44.1.el9_8
kernel-64k-debug-devel-matched
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.44.1.el9_8
5.14.0-687.44.1.el9_8
kernel-64k-debug-modules
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.44.1.el9_8
5.14.0-687.44.1.el9_8
kernel-64k-debug-modules-core
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.44.1.el9_8
5.14.0-687.44.1.el9_8
kernel-64k-debug-modules-extra
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.44.1.el9_8
5.14.0-687.44.1.el9_8
kernel-64k-devel
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.44.1.el9_8
5.14.0-687.44.1.el9_8
kernel-64k-devel-matched
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.44.1.el9_8
5.14.0-687.44.1.el9_8
kernel-64k-modules
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.44.1.el9_8
5.14.0-687.44.1.el9_8
kernel-64k-modules-core
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.44.1.el9_8
5.14.0-687.44.1.el9_8
kernel-64k-modules-extra
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.44.1.el9_8
5.14.0-687.44.1.el9_8
kernel-abi-stablelists
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.44.1.el9_8
5.14.0-687.44.1.el9_8
kernel-core
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.44.1.el9_8
5.14.0-687.44.1.el9_8
kernel-cross-headers
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.44.1.el9_8
5.14.0-687.44.1.el9_8
kernel-debug
AlmaLinux:9
From an advisory covering 27 CVEs
 before 5.14.0-687.44.1.el9_8
5.14.0-687.44.1.el9_8
kernel
Azure Linux:3
 before 6.6.145.2-1
6.6.145.2-1
linux-lts
Alpaquita:23
 6.1.177-r0 up to 6.1.182-r0
6.1.182-r0
linux-lts
Alpaquita:25
 6.12.95-r0 up to 6.12.103-r0
6.12.103-r0
linux-lts
Alpaquita:stream
 6.18.38-r0 up to 6.18.43-r0
6.18.43-r0
bpftool
TuxCare:AlmaLinux:9.2
From an advisory covering 84 CVEs
 before 7.0.0-284.1101.el9_2.tuxcare.11.els12
7.0.0-284.1101.el9_2.tuxcare.11.els12
kernel
TuxCare:AlmaLinux:9.2
From an advisory covering 84 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els12
5.14.0-284.1101.el9_2.tuxcare.11.els12
kernel-abi-stablelists
TuxCare:AlmaLinux:9.2
From an advisory covering 84 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els12
5.14.0-284.1101.el9_2.tuxcare.11.els12
kernel-core
TuxCare:AlmaLinux:9.2
From an advisory covering 84 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els12
5.14.0-284.1101.el9_2.tuxcare.11.els12
kernel-cross-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 84 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els12
5.14.0-284.1101.el9_2.tuxcare.11.els12
kernel-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 84 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els12
5.14.0-284.1101.el9_2.tuxcare.11.els12
kernel-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 84 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els12
5.14.0-284.1101.el9_2.tuxcare.11.els12
kernel-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 84 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els12
5.14.0-284.1101.el9_2.tuxcare.11.els12
kernel-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 84 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els12
5.14.0-284.1101.el9_2.tuxcare.11.els12
kernel-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 84 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els12
5.14.0-284.1101.el9_2.tuxcare.11.els12
kernel-debug-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 84 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els12
5.14.0-284.1101.el9_2.tuxcare.11.els12
kernel-debug-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 84 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els12
5.14.0-284.1101.el9_2.tuxcare.11.els12
kernel-debug-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 84 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els12
5.14.0-284.1101.el9_2.tuxcare.11.els12
kernel-debug-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 84 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els12
5.14.0-284.1101.el9_2.tuxcare.11.els12
kernel-debug-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 84 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els12
5.14.0-284.1101.el9_2.tuxcare.11.els12
kernel-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 84 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els12
5.14.0-284.1101.el9_2.tuxcare.11.els12
kernel-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 84 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els12
5.14.0-284.1101.el9_2.tuxcare.11.els12
kernel-doc
TuxCare:AlmaLinux:9.2
From an advisory covering 84 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els12
5.14.0-284.1101.el9_2.tuxcare.11.els12
kernel-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 84 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els12
5.14.0-284.1101.el9_2.tuxcare.11.els12
kernel-ipaclones-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 84 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els12
5.14.0-284.1101.el9_2.tuxcare.11.els12
kernel-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 84 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els12
5.14.0-284.1101.el9_2.tuxcare.11.els12
kernel-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 84 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els12
5.14.0-284.1101.el9_2.tuxcare.11.els12
kernel-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 84 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els12
5.14.0-284.1101.el9_2.tuxcare.11.els12
kernel-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 84 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els12
5.14.0-284.1101.el9_2.tuxcare.11.els12
kernel-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 84 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els12
5.14.0-284.1101.el9_2.tuxcare.11.els12
kernel-selftests-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 84 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els12
5.14.0-284.1101.el9_2.tuxcare.11.els12
kernel-tools
TuxCare:AlmaLinux:9.2
From an advisory covering 84 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els12
5.14.0-284.1101.el9_2.tuxcare.11.els12
kernel-tools-libs
TuxCare:AlmaLinux:9.2
From an advisory covering 84 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els12
5.14.0-284.1101.el9_2.tuxcare.11.els12
kernel-tools-libs-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 84 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els12
5.14.0-284.1101.el9_2.tuxcare.11.els12
kernel-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 84 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els12
5.14.0-284.1101.el9_2.tuxcare.11.els12
libbpf
TuxCare:AlmaLinux:9.2
From an advisory covering 84 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.11.els12
2:1.0.0-2.el9_2.tuxcare.11.els12
libbpf-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 84 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.11.els12
2:1.0.0-2.el9_2.tuxcare.11.els12
libbpf-static
TuxCare:AlmaLinux:9.2
From an advisory covering 84 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.11.els12
2:1.0.0-2.el9_2.tuxcare.11.els12
perf
TuxCare:AlmaLinux:9.2
From an advisory covering 84 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els12
5.14.0-284.1101.el9_2.tuxcare.11.els12
python3-perf
TuxCare:AlmaLinux:9.2
From an advisory covering 84 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els12
5.14.0-284.1101.el9_2.tuxcare.11.els12
rtla
TuxCare:AlmaLinux:9.2
From an advisory covering 84 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els12
5.14.0-284.1101.el9_2.tuxcare.11.els12
kernel
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-core
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-debug
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-debug-core
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-debug-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-debug-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-debug-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-debug-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-debug-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-debug-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-debug-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
Kernel
Linux
 5.3.0 up to 5.10.261, 5.11.0 up to 5.15.212, 5.16.0 up to 6.1.178, 6.2.0 up to 6.6.145, 6.7.0 up to 6.12.96, 6.13.0 up to 6.18.39, 6.19.0 up to 7.1.4
5.10.2615.15.2126.1.1786.6.1456.12.966.18.397.1.4
linux
Debian:12
 before 6.1.180-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 45 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.170-16.1.170-26.1.170-36.1.172-16.1.174-16.1.176-16.1.177-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-1
6.1.180-1
linux
Debian:13
 before 6.12.96-1, plus listed versions
6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-1
Show 25 moreShow less
6.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+1
6.12.96-1
linux
Debian:14
 before 7.1.4-1, plus listed versions
6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1
Show 45 moreShow less
6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1
7.1.4-1
linux-6.12
Debian:12
 before 6.12.100-1~deb12u1
6.12.100-1~deb12u1
kernel-rt
Red Hat:enterprise_linux:8::nfv
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-core
Red Hat:enterprise_linux:8::nfv
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debug
Red Hat:enterprise_linux:8::nfv
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debug-core
Red Hat:enterprise_linux:8::nfv
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:8::nfv
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debug-devel
Red Hat:enterprise_linux:8::nfv
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debug-kvm
Red Hat:enterprise_linux:8::nfv
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debug-modules
Red Hat:enterprise_linux:8::nfv
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debug-modules-extra
Red Hat:enterprise_linux:8::nfv
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debuginfo
Red Hat:enterprise_linux:8::nfv
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::nfv
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-devel
Red Hat:enterprise_linux:8::nfv
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-kvm
Red Hat:enterprise_linux:8::nfv
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-modules
Red Hat:enterprise_linux:8::nfv
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-modules-extra
Red Hat:enterprise_linux:8::nfv
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt
Red Hat:enterprise_linux:8::realtime
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-core
Red Hat:enterprise_linux:8::realtime
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debug
Red Hat:enterprise_linux:8::realtime
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debug-core
Red Hat:enterprise_linux:8::realtime
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:8::realtime
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debug-devel
Red Hat:enterprise_linux:8::realtime
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debug-modules
Red Hat:enterprise_linux:8::realtime
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debug-modules-extra
Red Hat:enterprise_linux:8::realtime
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debuginfo
Red Hat:enterprise_linux:8::realtime
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::realtime
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-devel
Red Hat:enterprise_linux:8::realtime
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-modules
Red Hat:enterprise_linux:8::realtime
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-modules-extra
Red Hat:enterprise_linux:8::realtime
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
bpftool
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
bpftool-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-abi-stablelists
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-debug
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-debug-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-debug-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-debug-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-debug-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-debug-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-doc
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-tools
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-tools-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-tools-libs
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-zfcpdump
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-zfcpdump-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-rt
Rocky Linux:8
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel
Rocky Linux:8
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel
Rocky Linux:9
From an advisory covering 27 CVEs
 before 0:5.14.0-687.44.1.el9_8
0:5.14.0-687.44.1.el9_8
linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
rootio-linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
rootio-linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
kernel-rt
SUSE:Linux Micro 6.0
From an advisory covering 588 CVEs
 before 6.4.0-52.1
6.4.0-52.1
kernel-source-rt
SUSE:Linux Micro 6.0
From an advisory covering 588 CVEs
 before 6.4.0-52.1
6.4.0-52.1
kernel-default
SUSE:Linux Micro 6.0
From an advisory covering 588 CVEs
 before 6.4.0-52.1
6.4.0-52.1
kernel-default-base
SUSE:Linux Micro 6.0
From an advisory covering 588 CVEs
 before 6.4.0-52.1.21.36
6.4.0-52.1.21.36
kernel-kvmsmall
SUSE:Linux Micro 6.0
From an advisory covering 588 CVEs
 before 6.4.0-52.1
6.4.0-52.1
kernel-source
SUSE:Linux Micro 6.0
From an advisory covering 588 CVEs
 before 6.4.0-52.1
6.4.0-52.1
kernel-rt
SUSE:Linux Micro 6.1
From an advisory covering 588 CVEs
 before 6.4.0-52.1
6.4.0-52.1
kernel-source-rt
SUSE:Linux Micro 6.1
From an advisory covering 588 CVEs
 before 6.4.0-52.1
6.4.0-52.1
kernel-default
SUSE:Linux Micro 6.1
From an advisory covering 588 CVEs
 before 6.4.0-52.1
6.4.0-52.1
kernel-default-base
SUSE:Linux Micro 6.1
From an advisory covering 588 CVEs
 before 6.4.0-52.1.21.34
6.4.0-52.1.21.34
kernel-kvmsmall
SUSE:Linux Micro 6.1
From an advisory covering 588 CVEs
 before 6.4.0-52.1
6.4.0-52.1
kernel-source
SUSE:Linux Micro 6.1
From an advisory covering 588 CVEs
 before 6.4.0-52.1
6.4.0-52.1
kernel-obs-build
SUSE:Linux Micro Extras 6.2
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-syms
SUSE:Linux Micro Extras 6.2
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-64kb
SUSE:Linux Micro 6.2
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default
SUSE:Linux Micro 6.2
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default-base
SUSE:Linux Micro 6.2
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1.160000.2.23
6.12.0-160000.38.1.160000.2.23
kernel-rt
SUSE:Linux Micro 6.2
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-source
SUSE:Linux Micro 6.2
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-64kb
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-azure
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default-base
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1.160000.2.23
6.12.0-160000.38.1.160000.2.23
kernel-docs
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-kvmsmall
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-obs-qa
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-source
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-syms
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-64kb
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-azure
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1.160000.2.23
6.12.0-160000.38.1.160000.2.23
kernel-docs
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-kvmsmall
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-obs-qa
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-source
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-syms
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-zfcpdump
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-livepatch-SLE15-SP7-RT_Update_20
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 662 CVEs
 before 1-150700.1.3.1
1-150700.1.3.1
kernel-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 662 CVEs
 before 6.4.0-150700.7.75.1
6.4.0-150700.7.75.1
kernel-source-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 662 CVEs
 before 6.4.0-150700.7.75.1
6.4.0-150700.7.75.1
kernel-syms-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 662 CVEs
 before 6.4.0-150700.7.75.1
6.4.0-150700.7.75.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 661 CVEs
 before 6.4.0-150700.53.81.1
6.4.0-150700.53.81.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 661 CVEs
 before 6.4.0-150700.53.81.1
6.4.0-150700.53.81.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 661 CVEs
 before 6.4.0-150700.53.81.1.150700.17.45.1
6.4.0-150700.53.81.1.150700.17.45.1
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 661 CVEs
 before 6.4.0-150700.53.81.1
6.4.0-150700.53.81.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 661 CVEs
 before 6.4.0-150700.53.81.1
6.4.0-150700.53.81.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 661 CVEs
 before 6.4.0-150700.53.81.1
6.4.0-150700.53.81.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 661 CVEs
 before 6.4.0-150700.53.81.1
6.4.0-150700.53.81.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 661 CVEs
 before 6.4.0-150700.53.81.1
6.4.0-150700.53.81.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 661 CVEs
 before 6.4.0-150700.53.81.1
6.4.0-150700.53.81.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP7
From an advisory covering 661 CVEs
 before 6.4.0-150700.53.81.1
6.4.0-150700.53.81.1
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-aws-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1
Show 45 moreShow less
5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gcp-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 45 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-ibm-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1
Show 45 moreShow less
5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-oracle-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1
 None known
linux-raspi-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1
Show 45 moreShow less
5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1
 None known
linux
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 45 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110
 None known
linux-aws
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5
Show 45 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1117.124~20.04.1, plus listed versions
5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1
Show 45 moreShow less
5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1
5.15.0-1117.124~20.04.1
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8
Show 45 moreShow less
5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
linux-azure-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
 None known
linux-azure-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1123.132~20.04.1, plus listed versions
5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1
Show 45 moreShow less
5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1
5.15.0-1123.132~20.04.1
linux-azure-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
 None known
linux-azure-fde
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
 None known
linux-azure-fde-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1122.131~20.04.1, plus listed versions
5.15.0-1019.24~20.04.1.15.15.0-1020.25~20.04.1.15.15.0-1021.26~20.04.1.15.15.0-1029.36~20.04.1.15.15.0-1030.37~20.04.1.1
Show 45 moreShow less
5.15.0-1031.38~20.04.1.15.15.0-1033.40~20.04.1.15.15.0-1034.41~20.04.1.25.15.0-1035.42~20.04.1.15.15.0-1036.43~20.04.1.15.15.0-1037.44~20.04.1.15.15.0-1038.45~20.04.1.15.15.0-1039.46~20.04.1.15.15.0-1040.47~20.04.1.15.15.0-1041.48~20.04.1.15.15.0-1042.49~20.04.1.15.15.0-1043.50~20.04.1.15.15.0-1046.53~20.04.1.15.15.0-1047.54~20.04.1.15.15.0-1049.56~20.04.1.15.15.0-1050.57~20.04.1.15.15.0-1051.59~20.04.1.15.15.0-1052.60~20.04.1.15.15.0-1053.61~20.04.1.15.15.0-1054.62~20.04.1.15.15.0-1056.64~20.04.1.15.15.0-1057.65~20.04.1.15.15.0-1058.66~20.04.2.15.15.0-1059.67~20.04.1.15.15.0-1060.69~20.04.1.15.15.0-1061.70~20.04.1.15.15.0-1063.72~20.04.1.15.15.0-1064.73~20.04.1.15.15.0-1065.74~20.04.1.15.15.0-1067.76~20.04.1.15.15.0-1068.77~20.04.1.15.15.0-1070.79~20.04.1.15.15.0-1071.80~20.04.1.15.15.0-1072.81~20.04.1.15.15.0-1073.82~20.04.1.15.15.0-1074.83~20.04.1.15.15.0-1076.85~20.04.1.15.15.0-1078.87~20.04.1.15.15.0-1081.90~20.04.1.15.15.0-1082.91~20.04.1.15.15.0-1086.95~20.04.1.15.15.0-1087.96~20.04.1.15.15.0-1088.97~20.04.1.15.15.0-1089.98~20.04.1.15.15.0-1091.100~20.04.1.1
5.15.0-1122.131~20.04.1
linux-bluefield
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.4.0-1007.105.4.0-1011.145.4.0-1012.155.4.0-1013.165.4.0-1016.19
Show 45 moreShow less
5.4.0-1019.225.4.0-1020.235.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1030.335.4.0-1032.355.4.0-1035.385.4.0-1036.395.4.0-1040.445.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1049.555.4.0-1050.565.4.0-1054.605.4.0-1058.645.4.0-1059.655.4.0-1060.665.4.0-1062.685.4.0-1064.705.4.0-1065.715.4.0-1066.725.4.0-1068.745.4.0-1070.765.4.0-1071.775.4.0-1072.785.4.0-1073.795.4.0-1074.805.4.0-1075.815.4.0-1076.825.4.0-1077.835.4.0-1078.845.4.0-1079.855.4.0-1080.875.4.0-1081.885.4.0-1082.895.4.0-1083.905.4.0-1084.915.4.0-1085.92
 None known
linux-gcp
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7
Show 45 moreShow less
5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1033.355.4.0-1034.375.4.0-1036.395.4.0-1037.405.4.0-1038.415.4.0-1040.435.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1044.475.4.0-1046.495.4.0-1049.535.4.0-1051.555.4.0-1052.565.4.0-1053.575.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1060.645.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1065.695.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1072.775.4.0-1073.785.4.0-1075.80
 None known
linux-gcp-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1
Show 7 moreShow less
5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3
 None known
linux-gcp-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1
Show 8 moreShow less
5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1
 None known
linux-gcp-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1118.128~20.04.1, plus listed versions
5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2
Show 45 moreShow less
5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.15.15.0-1065.73~20.04.15.15.0-1066.74~20.04.15.15.0-1067.75~20.04.15.15.0-1068.76~20.04.15.15.0-1069.77~20.04.15.15.0-1070.78~20.04.15.15.0-1071.79~20.04.15.15.0-1072.80~20.04.15.15.0-1073.81~20.04.15.15.0-1074.83~20.04.1
5.15.0-1118.128~20.04.1
linux-gcp-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41
 None known
linux-gke
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
 None known
linux-gke-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1
Show 13 moreShow less
5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1
 None known
linux-gkeop
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13
Show 45 moreShow less
5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77
 None known
linux-gkeop-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2
Show 40 moreShow less
5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1
 None known
linux-hwe-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1
Show 7 moreShow less
5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1
 None known
linux-hwe-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1
Show 11 moreShow less
5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1
 None known
linux-hwe-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-198.208~20.04.1, plus listed versions
5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
Show 45 moreShow less
5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1
5.15.0-198.208~20.04.1
linux-hwe-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1
Show 16 moreShow less
5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1
 None known
linux-ibm
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.4.0-1003.45.4.0-1004.55.4.0-1005.65.4.0-1006.75.4.0-1007.8
Show 45 moreShow less
5.4.0-1008.95.4.0-1010.115.4.0-1012.135.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1017.195.4.0-1018.205.4.0-1019.215.4.0-1020.225.4.0-1021.235.4.0-1023.255.4.0-1026.295.4.0-1028.325.4.0-1029.335.4.0-1031.355.4.0-1032.365.4.0-1033.375.4.0-1034.385.4.0-1036.415.4.0-1037.425.4.0-1040.455.4.0-1041.465.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1048.535.4.0-1049.545.4.0-1050.555.4.0-1051.565.4.0-1052.575.4.0-1053.585.4.0-1054.595.4.0-1056.615.4.0-1057.625.4.0-1058.635.4.0-1059.645.4.0-1060.655.4.0-1061.665.4.0-1063.685.4.0-1064.695.4.0-1065.705.4.0-1066.71
 None known
linux-ibm-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1111.115~20.04.1, plus listed versions
5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1
Show 45 moreShow less
5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.15.15.0-1057.60~20.04.15.15.0-1058.61~20.04.15.15.0-1059.62~20.04.15.15.0-1060.63~20.04.15.15.0-1061.64~20.04.15.15.0-1062.65~20.04.15.15.0-1063.66~20.04.15.15.0-1064.67~20.04.15.15.0-1065.68~20.04.15.15.0-1066.69~20.04.15.15.0-1067.70~20.04.15.15.0-1068.71~20.04.15.15.0-1069.72~20.04.15.15.0-1074.77~20.04.15.15.0-1075.78~20.04.15.15.0-1076.79~20.04.15.15.0-1078.81~20.04.15.15.0-1079.82~20.04.15.15.0-1080.83~20.04.15.15.0-1081.84~20.04.15.15.0-1083.86~20.04.15.15.0-1085.88~20.04.15.15.0-1086.89~20.04.15.15.0-1087.90~20.04.15.15.0-1089.92~20.04.15.15.0-1090.93~20.04.15.15.0-1091.94~20.04.15.15.0-1092.95~20.04.15.15.0-1093.96~20.04.15.15.0-1094.97~20.04.1
5.15.0-1111.115~20.04.1
linux-intel-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19
 None known
linux-intel-iotg-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1112.118~20.04.1, plus listed versions
5.15.0-1003.5~20.04.15.15.0-1008.11~20.04.15.15.0-1010.14~20.04.15.15.0-1015.20~20.04.25.15.0-1016.21~20.04.1
Show 45 moreShow less
5.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1021.26~20.04.15.15.0-1023.28~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1030.35~20.04.15.15.0-1031.36~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1040.46~20.04.15.15.0-1043.49~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1060.66~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.25.15.0-1074.80~20.04.15.15.0-1077.83~20.04.15.15.0-1078.84~20.04.15.15.0-1079.85~20.04.15.15.0-1083.89~20.04.15.15.0-1084.90~20.04.15.15.0-1085.91~20.04.15.15.0-1086.92~20.04.1
5.15.0-1112.118~20.04.1
kernel-source
openSUSE:Tumbleweed
From an advisory covering 351 CVEs
 before 7.1.7-1.1
7.1.7-1.1
dtb-aarch64
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-64kb
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-azure
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default-base
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1.160000.2.22
6.12.0-160000.38.1.160000.2.22
kernel-docs
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-kvmsmall
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-obs-build
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-obs-qa
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-rt
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-source
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-syms
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-zfcpdump
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1

History

History
RecordedChangedSources
affectedOSV
affectedOSV
affected, aliases, referencesOSV
affected, facts, referencesOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-64268 is a critical vulnerability (CVSS 9.8) in Linux, published July 25, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.71%, the 53rd percentile. Fixed in kernel 6.6.145.2-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 1,276 package rows, 1,118 versions, 6,348 references and the rest of 26 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 17 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open