Every CVE Search/ Get API key

CVE-2026-64319

nvmet-auth: validate reply message payload bounds against transfer length

9.1 CriticalFix available

In the Linux kernel, the following vulnerability has been resolved:

nvmet-auth: validate reply message payload bounds against transfer length

nvmet_auth_reply() accesses the variable-length rval[] array using attacker-controlled hl (hash length) and dhvlen (DH value length) fields without verifying they fit within the allocated buffer of tl bytes.

A malicious NVMe-oF initiator can craft a DHCHAP_REPLY message with a small transfer length but large hl/dhvlen values, causing out-of-bounds heap reads when the target processes the DH public key (rval + 2*hl) or performs the host response memcmp.

With DH authentication configured, the OOB pointer is passed directly to sg_init_one() and read by crypto_kpp_compute_shared_secret(), reaching up to 526 bytes past the buffer. This is exploitable pre-authentication.

Add bounds validation ensuring sizeof(data) + 2hl + dhvlen <= tl before any access to the variable-length fields.

Discovered by Atuin - Automated Vulnerability Discovery Engine.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
High

Exploit likelihood

0.56%Up 0.3 points since Jul 25, 2026
90%50%10%1%

What each source reports

CVE List Score used 9.1

nvmet-auth: validate reply message payload bounds against transfer length

In the Linux kernel, the following vulnerability has been resolved:

nvmet-auth: validate reply message payload bounds against transfer length

nvmet_auth_reply() accesses the variable-length rval[] array using attacker-controlled hl (hash length) and dhvlen (DH value length) fields without verifying they fit within the allocated buffer of tl bytes.

A malicious NVMe-oF initiator can craft a DHCHAP_REPLY message with a small transfer length but large hl/dhvlen values, causing out-of-bounds heap reads when the target processes the DH public key (rval + 2*hl) or performs the host response memcmp.

With DH authentication configured, the OOB pointer is passed directly to sg_init_one() and read by crypto_kpp_compute_shared_secret(), reaching up to 526 bytes past the buffer. This is exploitable pre-authentication.

Add bounds validation ensuring sizeof(data) + 2hl + dhvlen <= tl before any access to the variable-length fields.

Discovered by Atuin - Automated Vulnerability Discovery Engine.

Record
CVE-2026-64319
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
EUVDEUVD-2026-49031 9.1

In the Linux kernel, the following vulnerability has been resolved:

nvmet-auth: validate reply message payload bounds against transfer length

nvmet_auth_reply() accesses the variable-length rval[] array using attacker-controlled hl (hash length) and dhvlen (DH value length) fields without verifying they fit within the allocated buffer of tl bytes.

A malicious NVMe-oF initiator can craft a DHCHAP_REPLY message with a small transfer length but large hl/dhvlen values, causing out-of-bounds heap reads when the target processes the DH public key (rval + 2*hl) or performs the host response memcmp.

With DH authentication configured, the OOB pointer is passed directly to sg_init_one() and read by crypto_kpp_compute_shared_secret(), reaching up to 526 bytes past the buffer. This is exploitable pre-authentication.

Add bounds validation ensuring sizeof(data) + 2hl + dhvlen <= tl before any access to the variable-length fields.

Discovered by Atuin - Automated Vulnerability Discovery Engine.

Record
EUVD-2026-49031
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-78p6-7rph-cp36 9.1

In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: validate reply...

In the Linux kernel, the following vulnerability has been resolved:

nvmet-auth: validate reply message payload bounds against transfer length

nvmet_auth_reply() accesses the variable-length rval[] array using attacker-controlled hl (hash length) and dhvlen (DH value length) fields without verifying they fit within the allocated buffer of tl bytes.

A malicious NVMe-oF initiator can craft a DHCHAP_REPLY message with a small transfer length but large hl/dhvlen values, causing out-of-bounds heap reads when the target processes the DH public key (rval + 2*hl) or performs the host response memcmp.

With DH authentication configured, the OOB pointer is passed directly to sg_init_one() and read by crypto_kpp_compute_shared_secret(), reaching up to 526 bytes past the buffer. This is exploitable pre-authentication.

Add bounds validation ensuring sizeof(data) + 2hl + dhvlen <= tl before any access to the variable-length fields.

Discovered by Atuin - Automated Vulnerability Discovery Engine.

Record
GHSA-78p6-7rph-cp36
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
NVD 9.1

In the Linux kernel, the following vulnerability has been resolved:

nvmet-auth: validate reply message payload bounds against transfer length

nvmet_auth_reply() accesses the variable-length rval[] array using attacker-controlled hl (hash length) and dhvlen (DH value length) fields without verifying they fit within the allocated buffer of tl bytes.

A malicious NVMe-oF initiator can craft a DHCHAP_REPLY message with a small transfer length but large hl/dhvlen values, causing out-of-bounds heap reads when the target processes the DH public key (rval + 2*hl) or performs the host response memcmp.

With DH authentication configured, the OOB pointer is passed directly to sg_init_one() and read by crypto_kpp_compute_shared_secret(), reaching up to 526 bytes past the buffer. This is exploitable pre-authentication.

Add bounds validation ensuring sizeof(data) + 2hl + dhvlen <= tl before any access to the variable-length fields.

Discovered by Atuin - Automated Vulnerability Discovery Engine.

Record
CVE-2026-64319
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
OSVBELL-CVE-2026-64319 9.1
Record
BELL-CVE-2026-64319
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-04
OSV 9.1

nvmet-auth: validate reply message payload bounds against transfer length

In the Linux kernel, the following vulnerability has been resolved:

nvmet-auth: validate reply message payload bounds against transfer length

nvmet_auth_reply() accesses the variable-length rval[] array using attacker-controlled hl (hash length) and dhvlen (DH value length) fields without verifying they fit within the allocated buffer of tl bytes.

A malicious NVMe-oF initiator can craft a DHCHAP_REPLY message with a small transfer length but large hl/dhvlen values, causing out-of-bounds heap reads when the target processes the DH public key (rval + 2*hl) or performs the host response memcmp.

With DH authentication configured, the OOB pointer is passed directly to sg_init_one() and read by crypto_kpp_compute_shared_secret(), reaching up to 526 bytes past the buffer. This is exploitable pre-authentication.

Add bounds validation ensuring sizeof(data) + 2hl + dhvlen <= tl before any access to the variable-length fields.

Discovered by Atuin - Automated Vulnerability Discovery Engine.

Record
CVE-2026-64319
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
Show 43 moreShow less
OSVDEBIAN-CVE-2026-64319 9.1

In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: validate reply message payload bounds against transfer length nvmet_auth_reply() accesses the variable-length rval[] array using attacker-controlled hl (hash length) and dhvlen (DH value length) fields without verifying they fit within the allocated buffer of tl bytes. A malicious NVMe-oF initiator can craft a DHCHAP_REPLY message with a small transfer length but large hl/dhvlen values, causing out-of-bounds heap reads when the target processes the DH public key (rval + 2*hl) or performs the host response memcmp. With DH authentication configured, the OOB pointer is passed directly to sg_init_one() and read by crypto_kpp_compute_shared_secret(), reaching up to 526 bytes past the buffer. This is exploitable pre-authentication. Add bounds validation ensuring sizeof(data) + 2hl + dhvlen <= tl before any access to the variable-length fields. Discovered by Atuin - Automated Vulnerability Discovery Engine.

Record
DEBIAN-CVE-2026-64319
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-3704 9.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

net: hns3: add VLAN id validation before using

Currently, the VLAN id may be used without validation when receive a VLAN configuration mailbox from VF. The length of vlan_del_fail_bmap is BITS_TO_LONGS(VLAN_N_VID). It may cause out-of-bounds memory access once the VLAN id is bigger than or equal to VLAN_N_VID.

Therefore, VLAN id needs to be checked to ensure it is within the range of VLAN_N_VID.(CVE-2025-71112)

In the Linux kernel, the following vulnerability has been resolved:

ext4: fix string copying in parse_apply_sb_mount_options()

strscpy_pad() can't be used to copy a non-NUL-term string into a NUL-term string of possibly bigger size. Commit 0efc5990bca5 ("string.h: Introduce memtostr() and memtostr_pad()") provides additional information in that regard. So if this happens, the following warning is observed:

strnlen: detected buffer overflow: 65 byte read of buffer size 64 WARNING: CPU: 0 PID: 28655 at lib/string_helpers.c:1032 __fortify_report+0x96/0xc0 lib/string_helpers.c:1032 Modules linked in: CPU: 0 UID: 0 PID: 28655 Comm: syz-executor.3 Not tainted 6.12.54-syzkaller-00144-g5f0270f1ba00 #0 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:__fortify_report+0x96/0xc0 lib/string_helpers.c:1032 Call Trace: <TASK> __fortify_panic+0x1f/0x30 lib/string_helpers.c:1039 strnlen include/linux/fortify-string.h:235 [inline] sized_strscpy include/linux/fortify-string.h:309 [inline] parse_apply_sb_mount_options fs/ext4/super.c:2504 [inline] __ext4_fill_super fs/ext4/super.c:5261 [inline] ext4_fill_super+0x3c35/0xad00 fs/ext4/super.c:5706 get_tree_bdev_flags+0x387/0x620 fs/super.c:1636 vfs_get_tree+0x93/0x380 fs/super.c:1814 do_new_mount fs/namespace.c:3553 [inline] path_mount+0x6ae/0x1f70 fs/namespace.c:3880 do_mount fs/namespace.c:3893 [inline] __do_sys_mount fs/namespace.c:4103 [inline] __se_sys_mount fs/namespace.c:4080 [inline] __x64_sys_mount+0x280/0x300 fs/namespace.c:4080 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x64/0x140 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x76/0x7e

Since userspace is expected to provide s_mount_opts field to be at most 63 characters long with the ending byte being NUL-term, use a 64-byte buffer which matches the size of s_mount_opts, so that strscpy_pad() does its job properly. Return with error if the user still managed to provide a non-NUL-term string here.

Found by Linux Verification Center (linuxtesting.org) with Syzkaller.(CVE-2025-71123)

In the Linux kernel, the following vulnerability has been resolved:

RDMA/umad: Reject negative data_len in ib_umad_write

ib_umad_write computes data_len from user-controlled count and the MAD header sizes. With a mismatched user MAD header size and RMPP header length, data_len can become negative and reach ib_create_send_mad(). This can make the padding calculation exceed the segment size and trigger an out-of-bounds memset in alloc_send_rmpp_list().

Add an explicit check to reject negative data_len before creating the send buffer.

KASAN splat: [ 211.363464] BUG: KASAN: slab-out-of-bounds in ib_create_send_mad+0xa01/0x11b0 [ 211.364077] Write of size 220 at addr ffff88800c3fa1f8 by task spray_thread/102 [ 211.365867] ib_create_send_mad+0xa01/0x11b0 [ 211.365887] ib_umad_write+0x853/0x1c80(CVE-2026-23243)

In the Linux kernel, the following vulnerability has been resolved:

nvme: fix memory allocation in nvme_pr_read_keys()

nvme_pr_read_keys() takes num_keys from userspace and uses it to calculate the allocation size for rse via struct_size(). The upper limit is PR_KEYS_MAX (64K).

A malicious or buggy userspace can pass a large num_keys value that results in a 4MB allocation attempt at most, causing a warning in the page allocator when the order exceeds…

Record
OESA-2026-3704
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:64775 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:64775
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:64808 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:64808
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:64775 7.8

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: can: bcm: add locking for bcm_op runtime updates (CVE-2025-38004)

  • kernel: ipv6: add NULL checks for idev in SRv6 paths (CVE-2026-23442)

  • kernel: udp: Fix wildcard bind conflict check when using hash2 (CVE-2026-31503)

  • kernel: ipv6: prevent possible UaF in addrconf_permanent_addr() (CVE-2026-43339)

  • kernel: tcp: call sk_data_ready() after listener migration (CVE-2026-46015)

  • kernel: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (CVE-2026-46266)

  • kernel: flow_dissector: do not dissect PPPoE PFC frames (CVE-2026-46306)

  • kernel: io_uring/poll: fix signed comparison in io_poll_get_ownership() (CVE-2026-52933)

  • kernel: ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (CVE-2026-53075)

  • kernel: KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CVE-2026-53277)

  • kernel: ipv6: sit: reload inner IPv6 header after GSO offloads (CVE-2026-53228)

  • kernel: net: add pskb_may_pull() to skb_gro_receive_list() (CVE-2026-53235)

  • kernel: net: guard timestamp cmsgs to real error queue skbs (CVE-2026-53223)

  • kernel: ipv6: mcast: Fix use-after-free when processing MLD queries (CVE-2026-53275)

  • kernel: ipv6: anycast: insert aca into global hash under idev->lock (CVE-2026-53259)

  • kernel: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CVE-2026-64002)

  • kernel: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (CVE-2026-63993)

  • kernel: fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (CVE-2026-64265)

  • kernel: nvmet-auth: validate reply message payload bounds against transfer length (CVE-2026-64319)

  • kernel: KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CVE-2026-64287)

  • kernel: rhashtable: clear stale iter->p on table restart (CVE-2026-64563)

  • kernel: smb: client: fix double-free in SMB2_close() replay (CVE-2026-64597)

Bug Fix(es) and Enhancement(s):

  • Customer needs "netfilter: nfnetlink_queue: optimize verdict lookup with hash table" patch [Rocky Linux 10.2] (JIRA:Rocky Linux-132852)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:64775
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:64808 7.8

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: can: bcm: add locking for bcm_op runtime updates (CVE-2025-38004)

  • kernel: io_uring/poll: fix signed comparison in io_poll_get_ownership() (CVE-2026-52933)

  • kernel: netfilter: nat: use kfree_rcu to release ops (CVE-2026-53000)

  • kernel: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CVE-2026-64136)

  • kernel: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CVE-2026-64320)

  • kernel: nvmet-auth: validate reply message payload bounds against transfer length (CVE-2026-64319)

  • kernel: KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CVE-2026-64287)

  • kernel: smb: client: fix change notify replay double-free (CVE-2026-64384)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:64808
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-64319 8.8

In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: validate reply message payload bounds against transfer length nvmet_auth_reply() accesses the variable-length rval[] array using attacker-controlled hl (hash length) and dhvlen (DH value length) fields without verifying they fit within the allocated buffer of tl bytes. A malicious NVMe-oF initiator can craft a DHCHAP_REPLY message with a small transfer length but large hl/dhvlen values, causing out-of-bounds heap reads when the target processes the DH public key (rval + 2*hl) or performs the host response memcmp. With DH authentication configured, the OOB pointer is passed directly to sg_init_one() and read by crypto_kpp_compute_shared_secret(), reaching up to 526 bytes past the buffer. This is exploitable pre-authentication. Add bounds validation ensuring sizeof(data) + 2hl + dhvlen <= tl before any access to the variable-length fields. Discovered by Atuin - Automated Vulnerability Discovery Engine.

Record
UBUNTU-CVE-2026-64319
CVSS 4.0
8.8 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-10
OSVALSA-2026:64808 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: can: bcm: add locking for bcm_op runtime updates (CVE-2025-38004)
  • kernel: io_uring/poll: fix signed comparison in io_poll_get_ownership() (CVE-2026-52933)
  • kernel: netfilter: nat: use kfree_rcu to release ops (CVE-2026-53000)
  • kernel: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CVE-2026-64136)
  • kernel: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CVE-2026-64320)
  • kernel: nvmet-auth: validate reply message payload bounds against transfer length (CVE-2026-64319)
  • kernel: KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CVE-2026-64287)
  • kernel: smb: client: fix change notify replay double-free (CVE-2026-64384)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:64808
Updated
2026-11-02
OSVCLSA-2026-1791741836 No score

kernel: Fix of 127 CVEs

  • md/raid1,raid10: strip REQ_NOWAIT from member bios {CVE-2025-22125}
  • md/raid1: fix data lost for writemostly rdev {CVE-2025-22125}
  • md/raid1,raid10: don't handle IO error for REQ_RAHEAD and REQ_NOWAIT {CVE-2025-22125}
  • md/raid1,raid10: don't ignore IO flags {CVE-2025-22125}
  • net/sched: netem: fix queue limit check to include reordered packets {CVE-2026-52984}
  • netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() {CVE-2025-21703}
  • net/sched: netem: account for backlog updates from child qdisc {CVE-2024-56770}
  • drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check {CVE-2026-89818}
  • drm/amdgpu/vcn4: Avoid overflow on msg bound check {CVE-2026-46199}
  • drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg {CVE-2026-46199}
  • drm/amdgpu/vcn3: Avoid overflow on msg bound check {CVE-2026-46230}
  • drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg {CVE-2026-46230}
  • vhost: Allow null msg.size on VHOST_IOTLB_INVALIDATE {CVE-2022-48862}
  • vhost: handle error while adding split ranges to iotlb {CVE-2022-48862}
  • vhost: allow batching hint without size {CVE-2022-48862}
  • vhost: fix hung thread due to erroneous iotlb entries {CVE-2022-48862}
  • md raid: fix hang when stopping arrays with metadata through dm-raid {CVE-2026-43309}
  • dm raid: use proper md_ro_state enumerators {CVE-2026-43309}
  • i40e: When removing VF MAC filters, only check PF-set MAC {CVE-2024-26830}
  • i40e: Fix VF MAC filter removal {CVE-2024-26830}
  • i40e: Do not allow untrusted VF to remove administratively set MAC {CVE-2024-26830}
  • netlink: make sure we allow at least one dump skb {CVE-2025-38465}
  • netlink: avoid infinite retry looping in netlink_unicast() {CVE-2025-38465}
  • netlink: Fix rmem check in netlink_broadcast_deliver(). {CVE-2025-38465}
  • netlink: Fix wraparounds of sk->sk_rmem_alloc. {CVE-2025-38465}
  • ipv6: fix possible infinite loop in rt6_fill_node() {CVE-2024-56703}
  • ipv6: prevent infinite loop in rt6_nlmsg_size() {CVE-2024-56703}
  • ipv6: Fix soft lockups in fib6_select_path under high next hop churn {CVE-2024-56703}
  • qede: fix out-of-bounds check for cqe->len_list[] {CVE-2025-40252}
  • net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() {CVE-2025-40252}
  • scsi: lpfc: apply the HBA_SETUP dev_loss check to SLI4 only {CVE-2024-49891}
  • scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths {CVE-2024-49891}
  • ext4: fix string copying in parse_apply_sb_mount_options() {CVE-2025-71123}
  • ext4: avoid potential buffer over-read in parse_apply_sb_mount_options() {CVE-2025-40198}
  • openvswitch: vport: fix self-deadlock on release of tunnel ports {CVE-2026-31678}
  • openvswitch: defer tunnel netdev_put to RCU release {CVE-2026-31678}
  • blk-iolatency: Fix memory leak on add_disk() failures {CVE-2022-50550}
  • drm/vkms: Fix use after free and double free on init error {CVE-2025-22097}
  • iommu/amd: move wait_on_sem() out of spinlock {CVE-2026-43253}
  • fbdev: bitblit: bound-check glyph index in bit_cursor() {CVE-2026-74635}
  • KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page {CVE-2026-80726}
  • wifi: nl80211: reject beacons with bad HE operation {CVE-2026-97517}
  • sctp: prevent peer transport count overflow {CVE-2026-74469}
  • IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413}
  • sctp: validate embedded address parameter length {CVE-2026-74287}
  • tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() {CVE-2026-98374}
  • ALSA: usb-audio: Fix a DMA to stack memory bug {CVE-2024-53197}
  • ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices {CVE-2024-53197}
  • USB: core: Limit the length of unkillable synchronous timeouts {CVE-2026-43428}
  • ext4: refresh inline data size before write operations {CVE-2025-68264}
  • net, bpf: check master for NULL in xdp_master_redirect() {CVE-2026-64545}
  • iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() {CVE-2026-31505}
  • dm cache: fix…
Record
CLSA-2026-1791741836
Updated
2026-11-02
OSVCLSA-2026-1791800936 No score

kernel: Fix of 191 CVEs

  • drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check {CVE-2026-89818}
  • drm/amdgpu/vcn4: Avoid overflow on msg bound check {CVE-2026-46199}
  • drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg {CVE-2026-46199}
  • drm/amdgpu/vcn3: Avoid overflow on msg bound check {CVE-2026-46230}
  • drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg {CVE-2026-46230}
  • openvswitch: vport: fix self-deadlock on release of tunnel ports {CVE-2026-46165}
  • openvswitch: defer tunnel netdev_put to RCU release {CVE-2026-31678}
  • ALSA: usb: Fix UAF at delayed release of MIDI2 EPs {CVE-2026-74642}
  • ALSA: usb-audio: fix use-after-free in ump_to_endpoint() {CVE-2026-74501}
  • NFS: Decrement refcounts if allocating nfs_free_stateid_data fails {CVE-2026-74730}
  • NFS: Pin the 'struct nfs_server' during a FREE_STATEID call {CVE-2026-74730}
  • exec: do_close_on_exec() before taking exec_update_lock {CVE-2026-64371}
  • proc: Fix broken error paths for namespace links {CVE-2026-64371}
  • proc: protect ptrace_may_access() with exec_update_lock (part 1) {CVE-2026-64371}
  • ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes {CVE-2026-74503}
  • ALSA: timer: Forcibly close timer instances at closing {CVE-2026-53193}
  • usb: typec: ucsi: Fix race condition and ordering in port unregistration {CVE-2026-74441}
  • arp: do not assume dev_hard_header() does not change skb->head {CVE-2026-22988}
  • netfilter: nft_ct: fix use-after-free in timeout object destroy {CVE-2026-31665}
  • md/raid10: fix writes_pending and barrier reference leaks on discard failures {CVE-2026-72438}
  • md/raid10: fix deadlock with check operation and nowait requests {CVE-2026-46050}
  • mm: introduce and use {pgd,p4d}_populate_kernel() {CVE-2025-39844}
  • vsock/virtio: fix zerocopy completion for multi-skb sends {CVE-2026-53365}
  • vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting {CVE-2026-52994}
  • mm: do file ownership checks with the proper mount idmap {CVE-2026-64294}
  • udf: validate VAT header length against the VAT inode size {CVE-2026-64323}
  • SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths {CVE-2026-45870}
  • Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig {CVE-2026-53208}
  • slip: bound decode() reads against the compressed packet length {CVE-2026-45843}
  • net: tls: fix strparser anchor skb leak on offload RX setup failure {CVE-2026-52974}
  • netfilter: nf_tables: unconditionally bump set->nelems before insertion {CVE-2026-23272}
  • rbd: Reset positive result codes to zero in object map update path {CVE-2026-68131}
  • netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() {CVE-2026-23458}
  • mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr {CVE-2025-21938}
  • bpf: Fix NULL deref in map_kptr_match_type for scalar regs {CVE-2026-53032}
  • bpf: Explicitly check accesses to bpf_sock_addr {CVE-2025-40078}
  • nexthop: Forbid FDB status change while nexthop is in a group {CVE-2025-39980}
  • bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN {CVE-2026-31525}
  • x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() {CVE-2025-21913}
  • ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple() {CVE-2024-57994}
  • drm/i915/vrr: require valid min/max vfreq for VRR {CVE-2026-68254}
  • libceph: handle rbtree insertion error in decode_choose_args() {CVE-2026-52954}
  • gfs2: prevent NULL pointer dereference during unmount {CVE-2026-53048}
  • smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path {CVE-2026-31708}
  • ext4: reject mount if bigalloc with s_first_data_block != 0 {CVE-2026-31447}
  • NFSD: Fix crash in nfsd4_read_release() {CVE-2025-40324}
  • netfilter: x_tables: guard option walkers against 1-byte tail reads {CVE-2026-43452}
  • smb: client: Fix refcount leak for cifs_sb_tlink {CVE-2025-40103}
  • smb: client: harden POSIX SID length parsing {CVE-2026-64380}
  • crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() {CVE-2026-64438}
  • bpf: Allow LPM map access from sleepable…
Record
CLSA-2026-1791800936
Updated
2026-11-02
OSVopenSUSE-SU-2026:11476-1 No score

kernel-devel-7.1.7-1.1 on GA media

These are all security issues fixed in the kernel-devel-7.1.7-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11476-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21910-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (bsc#1256671).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-23113: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).
  • CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
  • CVE-2026-23348: cxl/mem: Clarify @host for devm_cxl_add_nvdimm() (bsc#1260577).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31530: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (bsc#1262756).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132).
  • CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
  • CVE-2026-46135: nvmet-tcp: remove redundant calls to nvmet_tcp_fatal_error() (bsc#1267373).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). -…
Record
openSUSE-SU-2026:21910-1
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2026-64319 No score

CVE-2026-64319 in linux - Patched by Root

Root has patched CVE-2026-64319 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2026-64319
Updated
2026-11-02
OSVROOT-OS-UBUNTU-2204-CVE-2026-64319 No score

CVE-2026-64319 in linux - Patched by Root

Root has patched CVE-2026-64319 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2204-CVE-2026-64319
Updated
2026-11-06
OSVSUSE-SU-2026:23881-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (bsc#1256671).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-23113: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).
  • CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
  • CVE-2026-23348: cxl/mem: Clarify @host for devm_cxl_add_nvdimm() (bsc#1260577).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31530: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (bsc#1262756).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132).
  • CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
  • CVE-2026-46135: nvmet-tcp: remove redundant calls to nvmet_tcp_fatal_error() (bsc#1267373).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). -…
Record
SUSE-SU-2026:23881-1
Updated
2026-11-02
OSVSUSE-SU-2026:23887-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (bsc#1256671).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-23113: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).
  • CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
  • CVE-2026-23348: cxl/mem: Clarify @host for devm_cxl_add_nvdimm() (bsc#1260577).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31530: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (bsc#1262756).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132).
  • CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
  • CVE-2026-46135: nvmet-tcp: remove redundant calls to nvmet_tcp_fatal_error() (bsc#1267373).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). -…
Record
SUSE-SU-2026:23887-1
Updated
2026-11-02
OSVSUSE-SU-2026:23897-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (bsc#1256671).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-23113: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).
  • CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
  • CVE-2026-23348: cxl/mem: Clarify @host for devm_cxl_add_nvdimm() (bsc#1260577).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31530: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (bsc#1262756).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132).
  • CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
  • CVE-2026-46135: nvmet-tcp: remove redundant calls to nvmet_tcp_fatal_error() (bsc#1267373).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). -…
Record
SUSE-SU-2026:23897-1
Updated
2026-11-02
OSVSUSE-SU-2026:23902-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (bsc#1256671).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-23113: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).
  • CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
  • CVE-2026-23348: cxl/mem: Clarify @host for devm_cxl_add_nvdimm() (bsc#1260577).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31530: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (bsc#1262756).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132).
  • CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
  • CVE-2026-46135: nvmet-tcp: remove redundant calls to nvmet_tcp_fatal_error() (bsc#1267373).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). -…
Record
SUSE-SU-2026:23902-1
Updated
2026-11-02
OSVSUSE-SU-2026:24181-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
  • CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
  • CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298).
  • CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
  • CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017).
  • CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
  • CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
  • CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
  • CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
  • CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
  • CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
  • CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
  • CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
  • CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
  • CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
  • CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
  • CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
  • CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
  • CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
  • CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
  • CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
  • CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
  • CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
  • CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
  • CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
  • CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
  • CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
  • CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
  • CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
  • CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
  • CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870).
  • CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
  • CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
  • CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).
  • CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420). -…
Record
SUSE-SU-2026:24181-1
Updated
2026-11-02
OSVSUSE-SU-2026:24182-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
  • CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
  • CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298).
  • CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
  • CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017).
  • CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
  • CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
  • CVE-2026-53090: bpf: Fix ld_{abs,ind} failure path analysis in subprogs (bsc#1269532).
  • CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1271955).
  • CVE-2026-68162: sctp: avoid auth_enable sysctl UAF during netns teardown (bsc#1274920).
  • CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277).
  • CVE-2026-72084: scsi: target: Bound PR-OUT TransportID parsing to the received buffer (bsc#1275540).
  • CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
  • CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
  • CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
  • CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
  • CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
  • CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
  • CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
  • CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
  • CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
  • CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
  • CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
  • CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
  • CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
  • CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
  • CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
  • CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
  • CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
  • CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
  • CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
  • CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
  • CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
  • CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
  • CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
  • CVE-2026-64279: i2c:…
Record
SUSE-SU-2026:24182-1
Updated
2026-11-02
OSVSUSE-SU-2026:24315-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
  • CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
  • CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298).
  • CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
  • CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017).
  • CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
  • CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
  • CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
  • CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
  • CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
  • CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
  • CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
  • CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
  • CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
  • CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
  • CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
  • CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
  • CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
  • CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
  • CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
  • CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
  • CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
  • CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
  • CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
  • CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
  • CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
  • CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
  • CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
  • CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
  • CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
  • CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870).
  • CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
  • CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
  • CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).
  • CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420). -…
Record
SUSE-SU-2026:24315-1
Updated
2026-11-02
OSVSUSE-SU-2026:24316-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
  • CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
  • CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298).
  • CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
  • CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017).
  • CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
  • CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
  • CVE-2026-53090: bpf: Fix ld_{abs,ind} failure path analysis in subprogs (bsc#1269532).
  • CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1271955).
  • CVE-2026-68162: sctp: avoid auth_enable sysctl UAF during netns teardown (bsc#1274920).
  • CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277).
  • CVE-2026-72084: scsi: target: Bound PR-OUT TransportID parsing to the received buffer (bsc#1275540).
  • CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
  • CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
  • CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
  • CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
  • CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
  • CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
  • CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
  • CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
  • CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
  • CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
  • CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
  • CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
  • CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
  • CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
  • CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
  • CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
  • CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
  • CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
  • CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
  • CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
  • CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
  • CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
  • CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
  • CVE-2026-64279: i2c:…
Record
SUSE-SU-2026:24316-1
Updated
2026-11-02
OSVSUSE-SU-2026:4640-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
  • CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
  • CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
  • CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
  • CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
  • CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
  • CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
  • CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
  • CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
  • CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
  • CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
  • CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
  • CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
  • CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
  • CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
  • CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
  • CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
  • CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
  • CVE-2026-63987: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES (bsc#1272971).
  • CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
  • CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
  • CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
  • CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
  • CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
  • CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
  • CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
  • CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
  • CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
  • CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
  • CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
  • CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870).
  • CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
  • CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
  • CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).
  • CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420).
  • CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).
  • CVE-2026-64373: cpufreq: Fix hotplug-suspend race during…
Record
SUSE-SU-2026:4640-1
Updated
2026-11-02
OSVSUSE-SU-2026:4660-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
  • CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
  • CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
  • CVE-2026-53266: netfilter: bridge: make ebt_snat ARP rewrite writable (bsc#1269136).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
  • CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1271955).
  • CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
  • CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).
  • CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251).
  • CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).
  • CVE-2026-68162: sctp: avoid auth_enable sysctl UAF during netns teardown (bsc#1274920).
  • CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977).
  • CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).
  • CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277).
  • CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).
  • CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).
  • CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388).
  • CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801).
  • CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803).
  • CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814).
  • CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818).
  • CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821).
  • CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249).
  • CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).
  • CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).
  • CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).
  • CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574).
  • CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544).
  • CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553).
  • CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
  • CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).
  • CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985).
  • CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).
  • CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).
  • CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).
  • CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381).
  • CVE-2026-72399: net: enetc: check the number of BDs needed for xdp_frame (bsc#1276553).
  • CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).
  • CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108).
  • CVE-2026-74267: net/sched: sch_codel: Do not call…
Record
SUSE-SU-2026:4660-1
Updated
2026-11-02
OSVSUSE-SU-2026:4665-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633).
  • CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
  • CVE-2025-40022: crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (bsc#1252682).
  • CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
  • CVE-2026-53266: netfilter: bridge: make ebt_snat ARP rewrite writable (bsc#1269136).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
  • CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
  • CVE-2026-64319: nvmet-auth: fix return value check in auth send (bsc#1273339).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251).
  • CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).
  • CVE-2026-68155: libceph: Reject monmaps advertising zero monitors (bsc#1275304).
  • CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1275307).
  • CVE-2026-68159: libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (bsc#1275470).
  • CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).
  • CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277).
  • CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).
  • CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).
  • CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388).
  • CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801).
  • CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803).
  • CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814).
  • CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818).
  • CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821).
  • CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249).
  • CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).
  • CVE-2026-72083: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (bsc#1275535).
  • CVE-2026-72084: scsi: target: core: Generate correct identifiers for PR OUT transport IDs (bsc#1275540).
  • CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).
  • CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).
  • CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574).
  • CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544).
  • CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553).
  • CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).
  • CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985).
  • CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006).
  • CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).
  • CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).
  • CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).
  • CVE-2026-72398: sctp: fix association labeling in the duplicate COOKIE-ECHO case (bsc#1276381).
  • CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).
  • CVE-2026-72449: drm/amdkfd: fix list_del…
Record
SUSE-SU-2026:4665-1
Updated
2026-11-02
OSVSUSE-SU-2026:4666-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633).
  • CVE-2024-56644: net/ipv6: release expired exception dst cached in socket (bsc#1216813 bsc#1235133).
  • CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
  • CVE-2025-40022: crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (bsc#1252682).
  • CVE-2026-53266: netfilter: bridge: make ebt_snat ARP rewrite writable (bsc#1269136).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
  • CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
  • CVE-2026-64319: nvmet-auth: fix return value check in auth send (bsc#1273339).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).
  • CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).
  • CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277).
  • CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).
  • CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).
  • CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801).
  • CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803).
  • CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814).
  • CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818).
  • CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821).
  • CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249).
  • CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).
  • CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).
  • CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).
  • CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574).
  • CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544).
  • CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).
  • CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).
  • CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).
  • CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).
  • CVE-2026-72398: sctp: fix association labeling in the duplicate COOKIE-ECHO case (bsc#1276381).
  • CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).
  • CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519).
  • CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475).
  • CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129).
  • CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410).
  • CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210).
  • CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211).
  • CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178).
  • CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792).
  • CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340).
  • CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354).
  • CVE-2026-74480: net: bridge: stop fast-leave…
Record
SUSE-SU-2026:4666-1
Updated
2026-11-02
OSVSUSE-SU-2026:4667-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633).
  • CVE-2025-39964: kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
  • CVE-2025-40022: kernel: crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (bsc#1252682).
  • CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
  • CVE-2026-53266: netfilter: bridge: make ebt_snat ARP rewrite writable (bsc#1269136).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
  • CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
  • CVE-2026-64319: nvmet-auth: fix return value check in auth send (bsc#1273339).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251).
  • CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).
  • CVE-2026-68155: libceph: Reject monmaps advertising zero monitors (bsc#1275304).
  • CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1275307).
  • CVE-2026-68159: libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (bsc#1275470).
  • CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).
  • CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277).
  • CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).
  • CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).
  • CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388).
  • CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801).
  • CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803).
  • CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814).
  • CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818).
  • CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821).
  • CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249).
  • CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).
  • CVE-2026-72083: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (bsc#1275535).
  • CVE-2026-72084: scsi: target: core: Generate correct identifiers for PR OUT transport IDs (bsc#1275540).
  • CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).
  • CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).
  • CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574).
  • CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544).
  • CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553).
  • CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).
  • CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985).
  • CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006).
  • CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).
  • CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).
  • CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).
  • CVE-2026-72398: sctp: fix association labeling in the duplicate COOKIE-ECHO case (bsc#1276381).
  • CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).
  • CVE-2026-72449: drm/amdkfd:…
Record
SUSE-SU-2026:4667-1
Updated
2026-11-02
OSVSUSE-SU-2026:4668-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633).
  • CVE-2024-56644: net/ipv6: release expired exception dst cached in socket (bsc#1216813 bsc#1235133).
  • CVE-2025-39964: crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (bsc#1252682).
  • CVE-2025-40022: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
  • CVE-2026-53266: netfilter: bridge: make ebt_snat ARP rewrite writable (bsc#1269136).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
  • CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
  • CVE-2026-64319: nvmet-auth: fix return value check in auth send (bsc#1273339).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).
  • CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).
  • CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277).
  • CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).
  • CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).
  • CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801).
  • CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803).
  • CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814).
  • CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818).
  • CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821).
  • CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249).
  • CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).
  • CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).
  • CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).
  • CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574).
  • CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544).
  • CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).
  • CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).
  • CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).
  • CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).
  • CVE-2026-72398: sctp: fix association labeling in the duplicate COOKIE-ECHO case (bsc#1276381).
  • CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).
  • CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519).
  • CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475).
  • CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129).
  • CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410).
  • CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210).
  • CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211).
  • CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178).
  • CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792).
  • CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340).
  • CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354).
  • CVE-2026-74480: net: bridge: stop fast-leave after…
Record
SUSE-SU-2026:4668-1
Updated
2026-11-02
OSVSUSE-SU-2026:4706-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
  • CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
  • CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
  • CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
  • CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
  • CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
  • CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
  • CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
  • CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
  • CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
  • CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
  • CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
  • CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
  • CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
  • CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
  • CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
  • CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
  • CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
  • CVE-2026-63987: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES (bsc#1272971).
  • CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
  • CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
  • CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
  • CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
  • CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
  • CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
  • CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
  • CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
  • CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
  • CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
  • CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
  • CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870).
  • CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
  • CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
  • CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).
  • CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420).
  • CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).
  • CVE-2026-64373: cpufreq: Fix hotplug-suspend race during…
Record
SUSE-SU-2026:4706-1
Updated
2026-11-02
OSVUSN-8726-1 No score

linux, linux-aws, linux-aws-7.0, linux-gcp, linux-gke, linux-hwe-7.0, linux-realtime vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • User-space API (UAPI);
  • Kernel build system;
  • ARM32 architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Drivers core;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Character device driver;
  • Hardware random number generator core;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • System reset/shutdown drivers;
  • Power sequencing drivers;
  • PTP clock framework;
  • Voltage and Current Regulator drivers;
  • RPMSG subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • VME bus staging drivers;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Cadence USB3 driver;
  • ULPI bus;
  • DesignWare USB3 driver;
  • Faraday FOTG210 USB2 dual-role controller driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • Intel USBIO USB I/O expander driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • VFIO drivers;
  • Framebuffer layer;
  • Virtio drivers;
  • BTRFS file system;
  • EROFS file system;
  • exFAT file system;
  • F2FS file system;
  • File systems infrastructure;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • OCFS2 file system;
  • Proc file system;
  • SMB network file system;
  • UDF file system;
  • XFS file system;
  • Key management;
  • BPF subsystem;
  • Memory management;
  • Software nodes and device properties;
  • Glob pattern matching library;
  • Memory Management;
  • KVM subsystem;
  • Mellanox drivers;
  • Restartable sequences system call mechanism;
  • Socket messages infrastructure;
  • Network traffic control;
  • Bluetooth subsystem;
  • Netfilter;
  • Networking core;
  • Network sockets;
  • TCP network protocol;
  • io_uring subsystem;
  • IPC subsystem;
  • Audit subsystem;
  • Perf events;
  • Kernel fork() syscall;
  • Locking primitives;
  • Kernel module support;
  • Scheduler infrastructure; -…
Record
USN-8726-1
Updated
2026-11-09
OSVUSN-8726-2 No score

linux-raspi vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • User-space API (UAPI);
  • Kernel build system;
  • ARM32 architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Drivers core;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Character device driver;
  • Hardware random number generator core;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • System reset/shutdown drivers;
  • Power sequencing drivers;
  • PTP clock framework;
  • Voltage and Current Regulator drivers;
  • RPMSG subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • VME bus staging drivers;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Cadence USB3 driver;
  • ULPI bus;
  • DesignWare USB3 driver;
  • Faraday FOTG210 USB2 dual-role controller driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • Intel USBIO USB I/O expander driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • VFIO drivers;
  • Framebuffer layer;
  • Virtio drivers;
  • BTRFS file system;
  • EROFS file system;
  • exFAT file system;
  • F2FS file system;
  • File systems infrastructure;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • OCFS2 file system;
  • Proc file system;
  • SMB network file system;
  • UDF file system;
  • XFS file system;
  • Key management;
  • BPF subsystem;
  • Memory management;
  • Software nodes and device properties;
  • Glob pattern matching library;
  • Memory Management;
  • KVM subsystem;
  • Mellanox drivers;
  • Restartable sequences system call mechanism;
  • Socket messages infrastructure;
  • Network traffic control;
  • Bluetooth subsystem;
  • Netfilter;
  • Networking core;
  • Network sockets;
  • TCP network protocol;
  • io_uring subsystem;
  • IPC subsystem;
  • Audit subsystem;
  • Perf events;
  • Kernel fork() syscall;
  • Locking primitives;
  • Kernel module support;
  • Scheduler infrastructure; -…
Record
USN-8726-2
Updated
2026-11-09
OSVUSN-8726-3 No score

linux-ibm vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • User-space API (UAPI);
  • Kernel build system;
  • ARM32 architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Drivers core;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Character device driver;
  • Hardware random number generator core;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • System reset/shutdown drivers;
  • Power sequencing drivers;
  • PTP clock framework;
  • Voltage and Current Regulator drivers;
  • RPMSG subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • VME bus staging drivers;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Cadence USB3 driver;
  • ULPI bus;
  • DesignWare USB3 driver;
  • Faraday FOTG210 USB2 dual-role controller driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • Intel USBIO USB I/O expander driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • VFIO drivers;
  • Framebuffer layer;
  • Virtio drivers;
  • BTRFS file system;
  • EROFS file system;
  • exFAT file system;
  • F2FS file system;
  • File systems infrastructure;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • OCFS2 file system;
  • Proc file system;
  • SMB network file system;
  • UDF file system;
  • XFS file system;
  • Key management;
  • BPF subsystem;
  • Memory management;
  • Software nodes and device properties;
  • Glob pattern matching library;
  • Memory Management;
  • KVM subsystem;
  • Mellanox drivers;
  • Restartable sequences system call mechanism;
  • Socket messages infrastructure;
  • Network traffic control;
  • Bluetooth subsystem;
  • Netfilter;
  • Networking core;
  • Network sockets;
  • TCP network protocol;
  • io_uring subsystem;
  • IPC subsystem;
  • Audit subsystem;
  • Perf events;
  • Kernel fork() syscall;
  • Locking primitives;
  • Kernel module support;
  • Scheduler infrastructure; -…
Record
USN-8726-3
Updated
2026-11-09
OSVUSN-8726-4 No score

linux-azure, linux-oracle vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • User-space API (UAPI);
  • Kernel build system;
  • ARM32 architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Drivers core;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Character device driver;
  • Hardware random number generator core;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • System reset/shutdown drivers;
  • Power sequencing drivers;
  • PTP clock framework;
  • Voltage and Current Regulator drivers;
  • RPMSG subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • VME bus staging drivers;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Cadence USB3 driver;
  • ULPI bus;
  • DesignWare USB3 driver;
  • Faraday FOTG210 USB2 dual-role controller driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • Intel USBIO USB I/O expander driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • VFIO drivers;
  • Framebuffer layer;
  • Virtio drivers;
  • BTRFS file system;
  • EROFS file system;
  • exFAT file system;
  • F2FS file system;
  • File systems infrastructure;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • OCFS2 file system;
  • Proc file system;
  • SMB network file system;
  • UDF file system;
  • XFS file system;
  • Key management;
  • BPF subsystem;
  • Memory management;
  • Software nodes and device properties;
  • Glob pattern matching library;
  • Memory Management;
  • KVM subsystem;
  • Mellanox drivers;
  • Restartable sequences system call mechanism;
  • Socket messages infrastructure;
  • Network traffic control;
  • Bluetooth subsystem;
  • Netfilter;
  • Networking core;
  • Network sockets;
  • TCP network protocol;
  • io_uring subsystem;
  • IPC subsystem;
  • Audit subsystem;
  • Perf events;
  • Kernel fork() syscall;
  • Locking primitives;
  • Kernel module support;
  • Scheduler infrastructure; -…
Record
USN-8726-4
Updated
2026-11-09
OSVUSN-8727-1 No score

linux-oem-7.0 vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • User-space API (UAPI);
  • Kernel build system;
  • ARM32 architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Drivers core;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Character device driver;
  • Hardware random number generator core;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • System reset/shutdown drivers;
  • Power sequencing drivers;
  • PTP clock framework;
  • Voltage and Current Regulator drivers;
  • RPMSG subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • VME bus staging drivers;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • Cadence USB3 driver;
  • ULPI bus;
  • USB core drivers;
  • DesignWare USB3 driver;
  • Faraday FOTG210 USB2 dual-role controller driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • Intel USBIO USB I/O expander driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • VFIO drivers;
  • Framebuffer layer;
  • Virtio drivers;
  • BTRFS file system;
  • EROFS file system;
  • exFAT file system;
  • F2FS file system;
  • File systems infrastructure;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • OCFS2 file system;
  • Proc file system;
  • SMB network file system;
  • UDF file system;
  • XFS file system;
  • Key management;
  • BPF subsystem;
  • Memory management;
  • Software nodes and device properties;
  • Glob pattern matching library;
  • Memory Management;
  • KVM subsystem;
  • Mellanox drivers;
  • Restartable sequences system call mechanism;
  • Socket messages infrastructure;
  • Network traffic control;
  • Bluetooth subsystem;
  • Netfilter;
  • Networking core;
  • Network sockets;
  • TCP network protocol;
  • io_uring subsystem;
  • IPC subsystem;
  • Audit subsystem;
  • Perf events;
  • Kernel fork() syscall;
  • Locking primitives;
  • Kernel module support;
  • Scheduler infrastructure;
  • Signal handling…
Record
USN-8727-1
Updated
2026-11-09
OSVUSN-8728-1 No score

linux-gcp-7.0 vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • x86 platform drivers;
  • ARM64 architecture;
  • Cryptographic API;
  • PSP security protocol;
  • User-space API (UAPI);
  • Kernel build system;
  • ARM32 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Auxiliary display drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Ublk userspace block driver;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • Hardware random number generator core;
  • Clock framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • DPLL subsystem;
  • EDAC drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • EFI core;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • FWCTL subsystem;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • Parport drivers;
  • PCI subsystem;
  • PHY drivers;
  • Pin controllers subsystem;
  • Chrome hardware platform drivers;
  • ACPI WMI driver;
  • Generic PM domains;
  • MediaTek PM domains;
  • System reset/shutdown drivers;
  • Power sequencing drivers;
  • Power supply drivers;
  • PTP clock framework;
  • Voltage and Current Regulator drivers;
  • MPAM driver;
  • Amlogic Meson reset controller drivers;
  • RPMSG subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • NVIDIA Tegra Control Backbone (CBB) driver;
  • SPI subsystem;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • VME bus staging drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • DesignWare USB2 driver;
  • DesignWare USB3 driver;
  • Faraday FOTG210 USB2 dual-role controller driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB…
Record
USN-8728-1
Updated
2026-11-07
OSVUSN-8728-2 No score

linux-azure-7.0 vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • x86 platform drivers;
  • ARM64 architecture;
  • Cryptographic API;
  • PSP security protocol;
  • User-space API (UAPI);
  • Kernel build system;
  • ARM32 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Auxiliary display drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Ublk userspace block driver;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • Hardware random number generator core;
  • Clock framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • DPLL subsystem;
  • EDAC drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • EFI core;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • FWCTL subsystem;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • Parport drivers;
  • PCI subsystem;
  • PHY drivers;
  • Pin controllers subsystem;
  • Chrome hardware platform drivers;
  • ACPI WMI driver;
  • Generic PM domains;
  • MediaTek PM domains;
  • System reset/shutdown drivers;
  • Power sequencing drivers;
  • Power supply drivers;
  • PTP clock framework;
  • Voltage and Current Regulator drivers;
  • MPAM driver;
  • Amlogic Meson reset controller drivers;
  • RPMSG subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • NVIDIA Tegra Control Backbone (CBB) driver;
  • SPI subsystem;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • VME bus staging drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • DesignWare USB2 driver;
  • DesignWare USB3 driver;
  • Faraday FOTG210 USB2 dual-role controller driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB…
Record
USN-8728-2
Updated
2026-11-07
OSVUSN-8728-3 No score

linux-oracle-7.0 vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • x86 platform drivers;
  • ARM64 architecture;
  • Cryptographic API;
  • PSP security protocol;
  • User-space API (UAPI);
  • Kernel build system;
  • ARM32 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Auxiliary display drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Ublk userspace block driver;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • Hardware random number generator core;
  • Clock framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • DPLL subsystem;
  • EDAC drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • EFI core;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • FWCTL subsystem;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • Parport drivers;
  • PCI subsystem;
  • PHY drivers;
  • Pin controllers subsystem;
  • Chrome hardware platform drivers;
  • ACPI WMI driver;
  • Generic PM domains;
  • MediaTek PM domains;
  • System reset/shutdown drivers;
  • Power sequencing drivers;
  • Power supply drivers;
  • PTP clock framework;
  • Voltage and Current Regulator drivers;
  • MPAM driver;
  • Amlogic Meson reset controller drivers;
  • RPMSG subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • NVIDIA Tegra Control Backbone (CBB) driver;
  • SPI subsystem;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • VME bus staging drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • DesignWare USB2 driver;
  • DesignWare USB3 driver;
  • Faraday FOTG210 USB2 dual-role controller driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB…
Record
USN-8728-3
Updated
2026-11-07
OSVUSN-8760-1 No score

linux-nvidia-7.0 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • User-space API (UAPI);
  • Kernel build system;
  • ARM32 architecture;
  • ARM64 architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Drivers core;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Character device driver;
  • Hardware random number generator core;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • System reset/shutdown drivers;
  • Power sequencing drivers;
  • PTP clock framework;
  • Voltage and Current Regulator drivers;
  • RPMSG subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • VME bus staging drivers;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Cadence USB3 driver;
  • ULPI bus;
  • DesignWare USB3 driver;
  • Faraday FOTG210 USB2 dual-role controller driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • Intel USBIO USB I/O expander driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • VFIO drivers;
  • Framebuffer layer;
  • Virtio drivers;
  • BTRFS file system;
  • EROFS file system;
  • exFAT file system;
  • F2FS file system;
  • File systems infrastructure;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • OCFS2 file system;
  • Proc file system;
  • SMB network file system;
  • UDF file system;
  • XFS file system;
  • Key management;
  • BPF subsystem;
  • Memory management;
  • Software nodes and device properties;
  • Glob pattern matching library;
  • Memory Management;
  • KVM subsystem;
  • Mellanox drivers;
  • Restartable sequences system call mechanism;
  • Socket messages infrastructure;
  • Network traffic control;
  • Bluetooth subsystem;
  • Netfilter;
  • Networking core;
  • Network sockets;
  • TCP network protocol;
  • io_uring subsystem;
  • IPC subsystem;
  • Audit subsystem;
  • Perf events;
  • Kernel fork() syscall;
  • Locking primitives;
  • Kernel module support;
  • Scheduler infrastructure;
  • Signal handling mechanism;
  • Timer subsystem;
  • Tracing infrastructure;
  • Debug objects infrastructure;
  • 6LoWPAN network protocol;
  • IEEE 802 network protocols;
  • 9P file system network protocol;
  • B.A.T.M.A.N. meshing protocol;
  • Ethernet bridge;
  • Devlink API;
  • HSR network protocol;
  • IEEE802154.4 network protocol;
  • IPv4 networking;
  • IPv6 networking; …
Record
USN-8760-1
Updated
2026-11-09
OSVUSN-8760-2 No score

linux-nvidia vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • User-space API (UAPI);
  • Kernel build system;
  • ARM32 architecture;
  • ARM64 architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Drivers core;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Character device driver;
  • Hardware random number generator core;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • System reset/shutdown drivers;
  • Power sequencing drivers;
  • PTP clock framework;
  • Voltage and Current Regulator drivers;
  • RPMSG subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • VME bus staging drivers;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Cadence USB3 driver;
  • ULPI bus;
  • DesignWare USB3 driver;
  • Faraday FOTG210 USB2 dual-role controller driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • Intel USBIO USB I/O expander driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • VFIO drivers;
  • Framebuffer layer;
  • Virtio drivers;
  • BTRFS file system;
  • EROFS file system;
  • exFAT file system;
  • F2FS file system;
  • File systems infrastructure;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • OCFS2 file system;
  • Proc file system;
  • SMB network file system;
  • UDF file system;
  • XFS file system;
  • Key management;
  • BPF subsystem;
  • Memory management;
  • Software nodes and device properties;
  • Glob pattern matching library;
  • Memory Management;
  • KVM subsystem;
  • Mellanox drivers;
  • Restartable sequences system call mechanism;
  • Socket messages infrastructure;
  • Network traffic control;
  • Bluetooth subsystem;
  • Netfilter;
  • Networking core;
  • Network sockets;
  • TCP network protocol;
  • io_uring subsystem;
  • IPC subsystem;
  • Audit subsystem;
  • Perf events;
  • Kernel fork() syscall;
  • Locking primitives;
  • Kernel module support;
  • Scheduler infrastructure;
  • Signal handling mechanism;
  • Timer subsystem;
  • Tracing infrastructure;
  • Debug objects infrastructure;
  • 6LoWPAN network protocol;
  • IEEE 802 network protocols;
  • 9P file system network protocol;
  • B.A.T.M.A.N. meshing protocol;
  • Ethernet bridge;
  • Devlink API;
  • HSR network protocol;
  • IEEE802154.4 network protocol;
  • IPv4 networking;
  • IPv6 networking; …
Record
USN-8760-2
Updated
2026-11-09
OSVUSN-8781-1 No score

linux-nvidia-tegra vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • User-space API (UAPI);
  • Kernel build system;
  • ARM32 architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Cryptographic API;
  • Intel NPU Driver;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Ublk userspace block driver;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • EFI core;
  • FPGA Framework;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • I3C subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • MediaTek network drivers;
  • NVME drivers;
  • Operating Performance Points (OPP) driver;
  • PCI subsystem;
  • PTP clock framework;
  • RPMSG subsystem;
  • SCSI subsystem;
  • SoundWire subsystem;
  • SPI subsystem;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • USB Gadget drivers;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Virtio drivers;
  • Xen hypervisor drivers;
  • 9P distributed file system;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • exFAT file system;
  • F2FS file system;
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • JFS file system;
  • Network file systems library;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NTFS3 file system;
  • OCFS2 file system;
  • OrangeFS file system;
  • SMB network file system;
  • BPF subsystem;
  • File system encryption (fscrypt);
  • Software nodes and device properties;
  • IPv4 networking;
  • KVM subsystem;
  • Mellanox drivers;
  • Memory management;
  • Networking core;
  • Netfilter;
  • Socket messages infrastructure;
  • MediaTek SoC drivers;
  • Sun RPC protocol;
  • Network traffic control;
  • IPv6 networking;
  • Amateur Radio drivers;
  • Bluetooth subsystem;
  • IP tunnels definitions;
  • KCM (Kernel Connection Multiplexor) sockets driver;
  • MultiProtocol Label Switching driver;
  • TCP network protocol;
  • XFRM subsystem;
  • Tracing infrastructure;
  • io_uring subsystem;
  • Control group (cgroup);
  • Perf events;
  • IRQ subsystem;
  • Locking primitives;
  • KProbes tracing;
  • 9P file system network protocol;
  • B.A.T.M.A.N. meshing protocol;
  • Ethernet bridge;
  • CAN network layer;
  • Ceph Core library;
  • Handshake API;
  • HSR network protocol;
  • IFE protocol;
  • L2TP protocol;
  • MAC80211 subsystem;
  • IEEE 802.15.4 subsystem;
  • Multipath TCP;
  • NFC subsystem;
  • Open vSwitch;
  • Phonet protocol;
  • RDS protocol;
  • RxRPC session sockets;
  • SCTP protocol;
  • SMC…
Record
USN-8781-1
Updated
2026-11-09
OSVUSN-8800-1 No score

linux-nvidia-bos vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • User-space API (UAPI);
  • Kernel build system;
  • ARM32 architecture;
  • ARM64 architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Drivers core;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Character device driver;
  • Hardware random number generator core;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • System reset/shutdown drivers;
  • Power sequencing drivers;
  • PTP clock framework;
  • Voltage and Current Regulator drivers;
  • RPMSG subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • VME bus staging drivers;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Cadence USB3 driver;
  • ULPI bus;
  • DesignWare USB3 driver;
  • Faraday FOTG210 USB2 dual-role controller driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • Intel USBIO USB I/O expander driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • VFIO drivers;
  • Framebuffer layer;
  • Virtio drivers;
  • BTRFS file system;
  • EROFS file system;
  • exFAT file system;
  • F2FS file system;
  • File systems infrastructure;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • OCFS2 file system;
  • Proc file system;
  • SMB network file system;
  • UDF file system;
  • XFS file system;
  • Key management;
  • BPF subsystem;
  • Memory management;
  • Software nodes and device properties;
  • Glob pattern matching library;
  • Memory Management;
  • KVM subsystem;
  • Mellanox drivers;
  • Restartable sequences system call mechanism;
  • Socket messages infrastructure;
  • Network traffic control;
  • Bluetooth subsystem;
  • Netfilter;
  • Networking core;
  • Network sockets;
  • TCP network protocol;
  • io_uring subsystem;
  • IPC subsystem;
  • Audit subsystem;
  • Perf events;
  • Kernel fork() syscall;
  • Locking primitives;
  • Kernel module support;
  • Scheduler infrastructure;
  • Signal handling mechanism;
  • Timer subsystem;
  • Tracing infrastructure;
  • Debug objects infrastructure;
  • 6LoWPAN network protocol;
  • IEEE 802 network protocols;
  • 9P file system network protocol;
  • B.A.T.M.A.N. meshing protocol;
  • Ethernet bridge;
  • Devlink API;
  • HSR network protocol;
  • IEEE802154.4 network protocol;
  • IPv4 networking; -…
Record
USN-8800-1
Updated
2026-11-09
OSVUSN-8917-1 No score

linux, linux-aws, linux-aws-fips, linux-fips, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-ibm, linux-lowlatency, linux-oracle, linux-realtime vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • NVDIMM (Non-Volatile Memory Device) drivers;
  • Handshake API;
  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • Hardware random number generator core;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DAX dirext access to differentiated memory framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Intel Management Engine Interface driver;
  • Amazon Nitro Secure Module driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • PCI subsystem;
  • x86 platform drivers;
  • i.MX PM domains;
  • System reset/shutdown drivers;
  • Power supply drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • Reset controller framework;
  • RPMSG subsystem;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Xilinx SoC drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • VME bus staging drivers;
  • TCM subsystem;
  • TTY drivers;
  • USB DSL drivers;
  • Cadence USB3 driver;
  • ULPI bus;
  • USB core drivers;
  • DesignWare USB3 driver;
  • Faraday FOTG210 USB2 dual-role controller driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • 9P distributed file system;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file…
Record
USN-8917-1
Updated
2026-11-09
OSVUSN-8918-1 No score

linux-azure, linux-azure-fde, linux-azure-fips vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • NVDIMM (Non-Volatile Memory Device) drivers;
  • Handshake API;
  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • Hardware random number generator core;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DAX dirext access to differentiated memory framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Intel Management Engine Interface driver;
  • Amazon Nitro Secure Module driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • PCI subsystem;
  • x86 platform drivers;
  • i.MX PM domains;
  • System reset/shutdown drivers;
  • Power supply drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • Reset controller framework;
  • RPMSG subsystem;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Xilinx SoC drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • VME bus staging drivers;
  • TCM subsystem;
  • TTY drivers;
  • USB DSL drivers;
  • Cadence USB3 driver;
  • ULPI bus;
  • USB core drivers;
  • DesignWare USB3 driver;
  • Faraday FOTG210 USB2 dual-role controller driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • 9P distributed file system;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file…
Record
USN-8918-1
Updated
2026-11-09

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-64k
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-64k-core
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-64k-debug
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-64k-debug-core
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-64k-debug-devel
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-64k-debug-devel-matched
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-64k-debug-modules
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-64k-debug-modules-core
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-64k-debug-modules-extra
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-64k-devel
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-64k-devel-matched
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-64k-modules
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-64k-modules-core
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-64k-modules-extra
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-abi-stablelists
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-core
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-cross-headers
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-debug
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-debug-core
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-debug-devel
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-debug-devel-matched
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-debug-modules
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-debug-modules-core
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-debug-modules-extra
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-debug-uki-virt
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-devel
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-devel-matched
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-doc
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-headers
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-modules
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-modules-core
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-modules-extra
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-rt
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-rt-64k
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-rt-64k-core
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-rt-64k-debug
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-rt-64k-debug-core
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-rt-64k-debug-devel
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-rt-64k-debug-modules
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-rt-64k-debug-modules-core
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-rt-64k-debug-modules-extra
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-rt-64k-devel
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-rt-64k-modules
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-rt-64k-modules-core
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-rt-64k-modules-extra
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-rt-core
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-rt-debug
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-rt-debug-core
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-rt-debug-devel
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-rt-debug-modules
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-rt-debug-modules-core
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-rt-debug-modules-extra
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-rt-devel
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
kernel-rt-modules
AlmaLinux:9
From an advisory covering 8 CVEs
 before 5.14.0-687.45.1.el9_8
5.14.0-687.45.1.el9_8
linux-lts
Alpaquita:23
 6.1.189-r0 up to 6.1.191-r0
6.1.191-r0
linux-lts
Alpaquita:25
 6.12.95-r0 up to 6.12.103-r0
6.12.103-r0
linux-lts
Alpaquita:stream
 6.18.38-r0 up to 6.18.43-r0
6.18.43-r0
bpftool
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 7.0.0-284.1101.el9_2.tuxcare.11.els15
7.0.0-284.1101.el9_2.tuxcare.11.els15
kernel
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-64k
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-64k-core
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-64k-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-64k-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-64k-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-64k-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-64k-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-64k-debug-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-64k-debug-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-64k-debug-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-64k-debug-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-64k-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-64k-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-64k-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-64k-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-64k-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-64k-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-64k-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-abi-stablelists
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-core
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-cross-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-debug-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-debug-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-debug-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-debug-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-debug-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-doc
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-ipaclones-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-selftests-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-tools
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-tools-libs
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-tools-libs-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
kernel-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
libbpf
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.11.els15
2:1.0.0-2.el9_2.tuxcare.11.els15
libbpf-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.11.els15
2:1.0.0-2.el9_2.tuxcare.11.els15
libbpf-static
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.11.els15
2:1.0.0-2.el9_2.tuxcare.11.els15
perf
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
python3-perf
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
rtla
TuxCare:AlmaLinux:9.2
From an advisory covering 130 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els15
5.14.0-284.1101.el9_2.tuxcare.11.els15
Kernel
Linux
 6.0.0 up to 6.1.191, 6.2.0 up to 6.6.145, 6.7.0 up to 6.12.96, 6.13.0 up to 6.18.39, 6.19.0 up to 7.1.4
6.1.1916.6.1456.12.966.18.397.1.4
linux
Debian:12
 All versions, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 45 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.170-16.1.170-26.1.170-36.1.172-16.1.174-16.1.176-16.1.177-16.1.180-16.1.187-16.1.190-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+1
 None known
linux
Debian:13
 before 6.12.96-1, plus listed versions
6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-1
Show 25 moreShow less
6.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+1
6.12.96-1
linux
Debian:14
 before 7.1.4-1, plus listed versions
6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1
Show 45 moreShow less
6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1
7.1.4-1
linux-6.12
Debian:12
 before 6.12.100-1~deb12u1
6.12.100-1~deb12u1
kernel
openEuler:24.03-LTS-SP3
From an advisory covering 165 CVEs
 before 6.6.0-145.3.29.160.oe2403sp3
6.6.0-145.3.29.160.oe2403sp3
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-64k-debug-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-64k-debug-devel-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-64k-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-64k-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-64k-devel-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-debug-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-debug-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-debug-devel-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-devel-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-doc
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-rt-64k-debug-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-rt-64k-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-rt-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-tools-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-zfcpdump-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-zfcpdump-devel-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
libperf-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
perf
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
perf-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
python3-perf
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
python3-perf-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
rtla
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
rv
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-64k
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-64k-core
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-64k-debug
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-64k-debug-core
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-64k-debug-modules
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-64k-debug-modules-core
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-64k-debug-modules-extra
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-64k-modules
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-64k-modules-core
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-64k-modules-extra
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-abi-stablelists
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-core
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-debug
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-debug-core
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-debug-modules
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-debug-modules-core
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-debug-modules-extra
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-debug-uki-virt
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-modules
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-modules-core
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel-modules-extra
Red Hat:enterprise_linux:10.2
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel
Rocky Linux:10
From an advisory covering 22 CVEs
 before 0:6.12.0-211.52.1.el10_2
0:6.12.0-211.52.1.el10_2
kernel
Rocky Linux:9
From an advisory covering 8 CVEs
 before 0:5.14.0-687.45.1.el9_8
0:5.14.0-687.45.1.el9_8
linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
rootio-linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
rootio-linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
kernel-obs-build
SUSE:Linux Micro Extras 6.2
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-syms
SUSE:Linux Micro Extras 6.2
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-64kb
SUSE:Linux Micro 6.2
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default
SUSE:Linux Micro 6.2
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default-base
SUSE:Linux Micro 6.2
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1.160000.2.23
6.12.0-160000.38.1.160000.2.23
kernel-rt
SUSE:Linux Micro 6.2
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-source
SUSE:Linux Micro 6.2
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-64kb
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-azure
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default-base
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1.160000.2.23
6.12.0-160000.38.1.160000.2.23
kernel-docs
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-kvmsmall
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-obs-qa
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-source
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-syms
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-64kb
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-azure
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1.160000.2.23
6.12.0-160000.38.1.160000.2.23
kernel-docs
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-kvmsmall
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-obs-qa
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-source
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-syms
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-zfcpdump
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default
SUSE:Linux Micro 6.1
From an advisory covering 473 CVEs
 before 6.4.0-159998.53.1
6.4.0-159998.53.1
kernel-default-base
SUSE:Linux Micro 6.1
From an advisory covering 473 CVEs
 before 6.4.0-159998.53.1.159998.21.38
6.4.0-159998.53.1.159998.21.38
kernel-kvmsmall
SUSE:Linux Micro 6.1
From an advisory covering 473 CVEs
 before 6.4.0-159998.53.1
6.4.0-159998.53.1
kernel-source
SUSE:Linux Micro 6.1
From an advisory covering 473 CVEs
 before 6.4.0-159998.53.1
6.4.0-159998.53.1
podman
SUSE:Linux Micro 6.2
From an advisory covering 479 CVEs
 before 5.4.2-160000.6.1
5.4.2-160000.6.1
kernel-rt
SUSE:Linux Micro 6.1
From an advisory covering 479 CVEs
 before 6.4.0-159998.53.1
6.4.0-159998.53.1
kernel-source-rt
SUSE:Linux Micro 6.1
From an advisory covering 479 CVEs
 before 6.4.0-159998.53.1
6.4.0-159998.53.1
kernel-default
SUSE:Linux Micro 6.0
From an advisory covering 473 CVEs
 before 6.4.0-159998.53.1
6.4.0-159998.53.1
kernel-default-base
SUSE:Linux Micro 6.0
From an advisory covering 473 CVEs
 before 6.4.0-159998.53.1.159998.21.38
6.4.0-159998.53.1.159998.21.38
kernel-kvmsmall
SUSE:Linux Micro 6.0
From an advisory covering 473 CVEs
 before 6.4.0-159998.53.1
6.4.0-159998.53.1
kernel-source
SUSE:Linux Micro 6.0
From an advisory covering 473 CVEs
 before 6.4.0-159998.53.1
6.4.0-159998.53.1
kernel-rt
SUSE:Linux Micro 6.0
From an advisory covering 479 CVEs
 before 6.4.0-159998.53.1
6.4.0-159998.53.1
kernel-source-rt
SUSE:Linux Micro 6.0
From an advisory covering 479 CVEs
 before 6.4.0-159998.53.1
6.4.0-159998.53.1
kernel-livepatch-SLE15-SP7-RT_Update_21
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 508 CVEs
 before 1-150700.1.3.1
1-150700.1.3.1
kernel-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 508 CVEs
 before 6.4.0-150700.7.78.1
6.4.0-150700.7.78.1
kernel-source-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 508 CVEs
 before 6.4.0-150700.7.78.1
6.4.0-150700.7.78.1
kernel-syms-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 508 CVEs
 before 6.4.0-150700.7.78.1
6.4.0-150700.7.78.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1
6.4.0-150600.23.138.1
kernel-livepatch-SLE15-SP6_Update_32
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 124 CVEs
 before 1-150600.13.3.1
1-150600.13.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP6
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1
6.4.0-150600.23.138.1
kernel-64kb
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1
6.4.0-150600.23.138.1
kernel-default
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1
6.4.0-150600.23.138.1
kernel-default-base
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1.150600.12.64.1
6.4.0-150600.23.138.1.150600.12.64.1
kernel-docs
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1
6.4.0-150600.23.138.1
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1
6.4.0-150600.23.138.1
kernel-source
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1
6.4.0-150600.23.138.1
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
linux-azure-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
 None known
linux-azure-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
 None known
linux-azure-fde
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
 None known
linux-gcp-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1
Show 7 moreShow less
5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3
 None known
linux-gcp-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1
Show 8 moreShow less
5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1
 None known
linux-gcp-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41
 None known
linux-gke
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
 None known
linux-gke-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1
Show 13 moreShow less
5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1
 None known
linux-gkeop
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13
Show 45 moreShow less
5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77
 None known
linux-gkeop-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2
Show 40 moreShow less
5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1
 None known
linux-hwe-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1
Show 7 moreShow less
5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1
 None known
linux-hwe-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1
Show 11 moreShow less
5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1
 None known
linux-hwe-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1
Show 16 moreShow less
5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1
 None known
linux-intel-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19
 None known
linux-oem-5.10
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17
Show 21 moreShow less
5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61
 None known
linux-oem-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21
Show 7 moreShow less
5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36
 None known
linux-oem-5.14
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10
Show 30 moreShow less
5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67
 None known
linux-oem-5.6
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13
Show 24 moreShow less
5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60
 None known
linux-oracle-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-oracle-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1
Show 7 moreShow less
5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1
 None known
linux-oracle-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1
 None known
linux-raspi2
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
 None known
linux-riscv
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34
Show 7 moreShow less
5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45
 None known
linux-riscv-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1
Show 8 moreShow less
5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35
 None known
linux-riscv-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1
Show 5 moreShow less
5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1
 None known
linux-allwinner-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1
 None known
linux-aws-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1
Show 5 moreShow less
5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1
 None known
linux-aws-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 9 moreShow less
6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1
 None known
linux-aws-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1
Show 9 moreShow less
6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1
 None known
linux-aws-6.8
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.8.0-1009.9~22.04.26.8.0-1010.10~22.04.26.8.0-1011.12~22.04.16.8.0-1013.14~22.04.16.8.0-1014.15~22.04.1
Show 41 moreShow less
6.8.0-1015.16~22.04.16.8.0-1016.17~22.04.26.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1023.25~22.04.16.8.0-1024.26~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1035.37~22.04.16.8.0-1036.38~22.04.16.8.0-1039.41~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.44~22.04.16.8.0-1043.45~22.04.16.8.0-1044.46~22.04.16.8.0-1045.47~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.16.8.0-1050.53~22.04.16.8.0-1051.54~22.04.16.8.0-1052.55~22.04.16.8.0-1053.56~22.04.16.8.0-1055.58~22.04.16.8.0-1057.60~22.04.16.8.0-1060.63~22.04.16.8.0-1061.64~22.04.16.8.0-1062.65~22.04.26.8.0-1063.66~22.04.16.8.0-1064.67~22.04.16.8.0-1065.68~22.04.16.8.0-1066.69~22.04.16.8.0-1069.74~22.04.1
 None known
linux-azure-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2
 None known
linux-azure-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 8 moreShow less
6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1
 None known
linux-azure-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1
Show 9 moreShow less
6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1
 None known
linux-azure-6.8
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.8.0-1008.8~22.04.16.8.0-1009.9~22.04.16.8.0-1010.10~22.04.16.8.0-1012.14~22.04.16.8.0-1013.15~22.04.1
Show 29 moreShow less
6.8.0-1014.16~22.04.16.8.0-1015.17~22.04.26.8.0-1017.20~22.04.16.8.0-1018.21~22.04.16.8.0-1020.23~22.04.16.8.0-1021.25~22.04.16.8.0-1025.30~22.04.16.8.0-1026.31~22.04.16.8.0-1027.32~22.04.16.8.0-1028.33~22.04.16.8.0-1029.34~22.04.16.8.0-1030.35~22.04.16.8.0-1031.36~22.04.16.8.0-1034.39~22.04.16.8.0-1036.42~22.04.16.8.0-1040.46~22.04.16.8.0-1041.47~22.04.16.8.0-1044.50~22.04.16.8.0-1051.57~22.04.16.8.0-1052.58~22.04.16.8.0-1059.65~22.04.16.8.0-1062.69~22.04.16.8.0-1063.71~22.04.16.8.0-1064.72~22.04.16.8.0-1065.73~22.04.16.8.0-1067.75~22.04.16.8.0-1068.76~22.04.16.8.0-1070.78~22.04.16.8.0-1073.82~22.04.1
 None known
kernel-source
openSUSE:Tumbleweed
From an advisory covering 351 CVEs
 before 7.1.7-1.1
7.1.7-1.1
dtb-aarch64
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-64kb
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-azure
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default-base
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1.160000.2.22
6.12.0-160000.38.1.160000.2.22
kernel-docs
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-kvmsmall
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-obs-build
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-obs-qa
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-rt
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-source
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-syms
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-zfcpdump
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1

History

History
RecordedChangedSources
affectedOSV
affectedOSV
affectedOSV
affectedOSV
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-64319 is a critical vulnerability (CVSS 9.1) in Linux, published July 25, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.56%, the 47th percentile. Fixed in linux-lts 6.1.191-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 552 package rows, 460 versions, 5,490 references and the rest of 33 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open