Every CVE Search/ Get API key

CVE-2026-64320

nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page

9.1 CriticalFix available

In the Linux kernel, the following vulnerability has been resolved:

nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page

nvmet_execute_disc_get_log_page() validates only the dword alignment of the host-supplied Log Page Offset (lpo). The 64-bit offset is then added to a small kzalloc'd buffer that holds the discovery log page and the result is passed straight to nvmet_copy_to_sgl(), which memcpy()s data_len bytes out to the host with no source-side bound check:

u64 offset      = nvmet_get_log_page_offset(req->cmd);  /* 64-bit host */
size_t data_len = nvmet_get_log_page_len(req->cmd);     /* 32-bit host */
...
if (offset & 0x3) { ... }                               /* only check */
...
alloc_len = sizeof(*hdr) + entry_size * discovery_log_entries(req);
buffer = kzalloc(alloc_len, GFP_KERNEL);
...
status = nvmet_copy_to_sgl(req, 0, buffer + offset, data_len);

The Discovery controller is unauthenticated -- nvmet_host_allowed() returns true unconditionally for the discovery subsystem -- so the call is reachable pre-authentication by any TCP/RDMA/FC peer that can reach the nvmet target. With a discovery log page of ~1 KiB, an attacker requesting up to 4 KiB starting at offset == alloc_len reads the next slab page out and gets its content returned over the fabric (an empirical run on a default nvmet-tcp loopback target leaked 81 canonical kernel pointers in one Get Log Page response). Pointing the offset at unmapped kernel memory faults the in-kernel memcpy and crashes (or panics, on panic_on_oops=1) the target host instead.

The attacker-controlled source-side offset pattern "nvmet_copy_to_sgl(req, 0, buffer + ATTACKER_OFFSET, ...)" is unique to nvmet_execute_disc_get_log_page in the entire nvmet codebase: every other Get Log Page handler in admin-cmd.c either ignores lpo (and silently starts every response at offset 0) or tracks a local destination offset with a fixed source pointer.

Validate the host-supplied offset against the log page size, cap the copy length to what is actually available, and zero-fill any remainder of the host transfer buffer. The zero-fill matches the existing short-response pattern in nvmet_execute_get_log_changed_ns() (admin-cmd.c) and prevents leaking transport SGL contents when the host asks for more bytes than the log page contains.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
High

Exploit likelihood

0.80%Up 0.6 points since Jul 25, 2026
90%50%10%1%

What each source reports

CVE List Score used 9.1

nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page

In the Linux kernel, the following vulnerability has been resolved:

nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page

nvmet_execute_disc_get_log_page() validates only the dword alignment of the host-supplied Log Page Offset (lpo). The 64-bit offset is then added to a small kzalloc'd buffer that holds the discovery log page and the result is passed straight to nvmet_copy_to_sgl(), which memcpy()s data_len bytes out to the host with no source-side bound check:

u64 offset      = nvmet_get_log_page_offset(req->cmd);  /* 64-bit host */
size_t data_len = nvmet_get_log_page_len(req->cmd);     /* 32-bit host */
...
if (offset & 0x3) { ... }                               /* only check */
...
alloc_len = sizeof(*hdr) + entry_size * discovery_log_entries(req);
buffer = kzalloc(alloc_len, GFP_KERNEL);
...
status = nvmet_copy_to_sgl(req, 0, buffer + offset, data_len);

The Discovery controller is unauthenticated -- nvmet_host_allowed() returns true unconditionally for the discovery subsystem -- so the call is reachable pre-authentication by any TCP/RDMA/FC peer that can reach the nvmet target. With a discovery log page of ~1 KiB, an attacker requesting up to 4 KiB starting at offset == alloc_len reads the next slab page out and gets its content returned over the fabric (an empirical run on a default nvmet-tcp loopback target leaked 81 canonical kernel pointers in one Get Log Page response). Pointing the offset at unmapped kernel memory faults the in-kernel memcpy and crashes (or panics, on panic_on_oops=1) the target host instead.

The attacker-controlled source-side offset pattern "nvmet_copy_to_sgl(req, 0, buffer + ATTACKER_OFFSET, ...)" is unique to nvmet_execute_disc_get_log_page in the entire nvmet codebase: every other Get Log Page handler in admin-cmd.c either ignores lpo (and silently starts every response at offset 0) or tracks a local destination offset with a fixed source pointer.

Validate the host-supplied offset against the log page size, cap the copy length to what is actually available, and zero-fill any remainder of the host transfer buffer. The zero-fill matches the existing short-response pattern in nvmet_execute_get_log_changed_ns() (admin-cmd.c) and prevents leaking transport SGL contents when the host asks for more bytes than the log page contains.

Record
CVE-2026-64320
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
EUVDEUVD-2026-49032 9.1

In the Linux kernel, the following vulnerability has been resolved:

nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page

nvmet_execute_disc_get_log_page() validates only the dword alignment of the host-supplied Log Page Offset (lpo). The 64-bit offset is then added to a small kzalloc'd buffer that holds the discovery log page and the result is passed straight to nvmet_copy_to_sgl(), which memcpy()s data_len bytes out to the host with no source-side bound check:

u64 offset      = nvmet_get_log_page_offset(req->cmd);  /* 64-bit host */
size_t data_len = nvmet_get_log_page_len(req->cmd);     /* 32-bit host */
...
if (offset & 0x3) { ... }                               /* only check */
...
alloc_len = sizeof(*hdr) + entry_size * discovery_log_entries(req);
buffer = kzalloc(alloc_len, GFP_KERNEL);
...
status = nvmet_copy_to_sgl(req, 0, buffer + offset, data_len);

The Discovery controller is unauthenticated -- nvmet_host_allowed() returns true unconditionally for the discovery subsystem -- so the call is reachable pre-authentication by any TCP/RDMA/FC peer that can reach the nvmet target. With a discovery log page of ~1 KiB, an attacker requesting up to 4 KiB starting at offset == alloc_len reads the next slab page out and gets its content returned over the fabric (an empirical run on a default nvmet-tcp loopback target leaked 81 canonical kernel pointers in one Get Log Page response). Pointing the offset at unmapped kernel memory faults the in-kernel memcpy and crashes (or panics, on panic_on_oops=1) the target host instead.

The attacker-controlled source-side offset pattern "nvmet_copy_to_sgl(req, 0, buffer + ATTACKER_OFFSET, ...)" is unique to nvmet_execute_disc_get_log_page in the entire nvmet codebase: every other Get Log Page handler in admin-cmd.c either ignores lpo (and silently starts every response at offset 0) or tracks a local destination offset with a fixed source pointer.

Validate the host-supplied offset against the log page size, cap the copy length to what is actually available, and zero-fill any remainder of the host transfer buffer. The zero-fill matches the existing short-response pattern in nvmet_execute_get_log_changed_ns() (admin-cmd.c) and prevents leaking transport SGL contents when the host asks for more bytes than the log page contains.

Record
EUVD-2026-49032
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-qw96-j6m6-f3qh 9.1

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix pre-auth out-of...

In the Linux kernel, the following vulnerability has been resolved:

nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page

nvmet_execute_disc_get_log_page() validates only the dword alignment of the host-supplied Log Page Offset (lpo). The 64-bit offset is then added to a small kzalloc'd buffer that holds the discovery log page and the result is passed straight to nvmet_copy_to_sgl(), which memcpy()s data_len bytes out to the host with no source-side bound check:

u64 offset      = nvmet_get_log_page_offset(req->cmd);  /* 64-bit host */
size_t data_len = nvmet_get_log_page_len(req->cmd);     /* 32-bit host */
...
if (offset & 0x3) { ... }                               /* only check */
...
alloc_len = sizeof(*hdr) + entry_size * discovery_log_entries(req);
buffer = kzalloc(alloc_len, GFP_KERNEL);
...
status = nvmet_copy_to_sgl(req, 0, buffer + offset, data_len);

The Discovery controller is unauthenticated -- nvmet_host_allowed() returns true unconditionally for the discovery subsystem -- so the call is reachable pre-authentication by any TCP/RDMA/FC peer that can reach the nvmet target. With a discovery log page of ~1 KiB, an attacker requesting up to 4 KiB starting at offset == alloc_len reads the next slab page out and gets its content returned over the fabric (an empirical run on a default nvmet-tcp loopback target leaked 81 canonical kernel pointers in one Get Log Page response). Pointing the offset at unmapped kernel memory faults the in-kernel memcpy and crashes (or panics, on panic_on_oops=1) the target host instead.

The attacker-controlled source-side offset pattern "nvmet_copy_to_sgl(req, 0, buffer + ATTACKER_OFFSET, ...)" is unique to nvmet_execute_disc_get_log_page in the entire nvmet codebase: every other Get Log Page handler in admin-cmd.c either ignores lpo (and silently starts every response at offset 0) or tracks a local destination offset with a fixed source pointer.

Validate the host-supplied offset against the log page size, cap the copy length to what is actually available, and zero-fill any remainder of the host transfer buffer. The zero-fill matches the existing short-response pattern in nvmet_execute_get_log_changed_ns() (admin-cmd.c) and prevents leaking transport SGL contents when the host asks for more bytes than the log page contains.

Record
GHSA-qw96-j6m6-f3qh
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
NVD 9.1

In the Linux kernel, the following vulnerability has been resolved:

nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page

nvmet_execute_disc_get_log_page() validates only the dword alignment of the host-supplied Log Page Offset (lpo). The 64-bit offset is then added to a small kzalloc'd buffer that holds the discovery log page and the result is passed straight to nvmet_copy_to_sgl(), which memcpy()s data_len bytes out to the host with no source-side bound check:

u64 offset      = nvmet_get_log_page_offset(req->cmd);  /* 64-bit host */
size_t data_len = nvmet_get_log_page_len(req->cmd);     /* 32-bit host */
...
if (offset & 0x3) { ... }                               /* only check */
...
alloc_len = sizeof(*hdr) + entry_size * discovery_log_entries(req);
buffer = kzalloc(alloc_len, GFP_KERNEL);
...
status = nvmet_copy_to_sgl(req, 0, buffer + offset, data_len);

The Discovery controller is unauthenticated -- nvmet_host_allowed() returns true unconditionally for the discovery subsystem -- so the call is reachable pre-authentication by any TCP/RDMA/FC peer that can reach the nvmet target. With a discovery log page of ~1 KiB, an attacker requesting up to 4 KiB starting at offset == alloc_len reads the next slab page out and gets its content returned over the fabric (an empirical run on a default nvmet-tcp loopback target leaked 81 canonical kernel pointers in one Get Log Page response). Pointing the offset at unmapped kernel memory faults the in-kernel memcpy and crashes (or panics, on panic_on_oops=1) the target host instead.

The attacker-controlled source-side offset pattern "nvmet_copy_to_sgl(req, 0, buffer + ATTACKER_OFFSET, ...)" is unique to nvmet_execute_disc_get_log_page in the entire nvmet codebase: every other Get Log Page handler in admin-cmd.c either ignores lpo (and silently starts every response at offset 0) or tracks a local destination offset with a fixed source pointer.

Validate the host-supplied offset against the log page size, cap the copy length to what is actually available, and zero-fill any remainder of the host transfer buffer. The zero-fill matches the existing short-response pattern in nvmet_execute_get_log_changed_ns() (admin-cmd.c) and prevents leaking transport SGL contents when the host asks for more bytes than the log page contains.

Record
CVE-2026-64320
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
OSVBELL-CVE-2026-64320 9.1
Record
BELL-CVE-2026-64320
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-04
OSV 9.1

nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page

In the Linux kernel, the following vulnerability has been resolved:

nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page

nvmet_execute_disc_get_log_page() validates only the dword alignment of the host-supplied Log Page Offset (lpo). The 64-bit offset is then added to a small kzalloc'd buffer that holds the discovery log page and the result is passed straight to nvmet_copy_to_sgl(), which memcpy()s data_len bytes out to the host with no source-side bound check:

u64 offset      = nvmet_get_log_page_offset(req->cmd);  /* 64-bit host */
size_t data_len = nvmet_get_log_page_len(req->cmd);     /* 32-bit host */
...
if (offset & 0x3) { ... }                               /* only check */
...
alloc_len = sizeof(*hdr) + entry_size * discovery_log_entries(req);
buffer = kzalloc(alloc_len, GFP_KERNEL);
...
status = nvmet_copy_to_sgl(req, 0, buffer + offset, data_len);

The Discovery controller is unauthenticated -- nvmet_host_allowed() returns true unconditionally for the discovery subsystem -- so the call is reachable pre-authentication by any TCP/RDMA/FC peer that can reach the nvmet target. With a discovery log page of ~1 KiB, an attacker requesting up to 4 KiB starting at offset == alloc_len reads the next slab page out and gets its content returned over the fabric (an empirical run on a default nvmet-tcp loopback target leaked 81 canonical kernel pointers in one Get Log Page response). Pointing the offset at unmapped kernel memory faults the in-kernel memcpy and crashes (or panics, on panic_on_oops=1) the target host instead.

The attacker-controlled source-side offset pattern "nvmet_copy_to_sgl(req, 0, buffer + ATTACKER_OFFSET, ...)" is unique to nvmet_execute_disc_get_log_page in the entire nvmet codebase: every other Get Log Page handler in admin-cmd.c either ignores lpo (and silently starts every response at offset 0) or tracks a local destination offset with a fixed source pointer.

Validate the host-supplied offset against the log page size, cap the copy length to what is actually available, and zero-fill any remainder of the host transfer buffer. The zero-fill matches the existing short-response pattern in nvmet_execute_get_log_changed_ns() (admin-cmd.c) and prevents leaking transport SGL contents when the host asks for more bytes than the log page contains.

Record
CVE-2026-64320
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
Show 48 moreShow less
OSVDEBIAN-CVE-2026-64320 9.1

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page nvmet_execute_disc_get_log_page() validates only the dword alignment of the host-supplied Log Page Offset (lpo). The 64-bit offset is then added to a small kzalloc'd buffer that holds the discovery log page and the result is passed straight to nvmet_copy_to_sgl(), which memcpy()s data_len bytes out to the host with no source-side bound check: u64 offset = nvmet_get_log_page_offset(req->cmd); /* 64-bit host / size_t data_len = nvmet_get_log_page_len(req->cmd); / 32-bit host / ... if (offset & 0x3) { ... } / only check */ ... alloc_len = sizeof(*hdr) + entry_size * discovery_log_entries(req); buffer = kzalloc(alloc_len, GFP_KERNEL); ... status = nvmet_copy_to_sgl(req, 0, buffer + offset, data_len); The Discovery controller is unauthenticated -- nvmet_host_allowed() returns true unconditionally for the discovery subsystem -- so the call is reachable pre-authentication by any TCP/RDMA/FC peer that can reach the nvmet target. With a discovery log page of ~1 KiB, an attacker requesting up to 4 KiB starting at offset == alloc_len reads the next slab page out and gets its content returned over the fabric (an empirical run on a default nvmet-tcp loopback target leaked 81 canonical kernel pointers in one Get Log Page response). Pointing the offset at unmapped kernel memory faults the in-kernel memcpy and crashes (or panics, on panic_on_oops=1) the target host instead. The attacker-controlled source-side offset pattern "nvmet_copy_to_sgl(req, 0, buffer + ATTACKER_OFFSET, ...)" is unique to nvmet_execute_disc_get_log_page in the entire nvmet codebase: every other Get Log Page handler in admin-cmd.c either ignores lpo (and silently starts every response at offset 0) or tracks a local destination offset with a fixed source pointer. Validate the host-supplied offset against the log page size, cap the copy length to what is actually available, and zero-fill any remainder of the host transfer buffer. The zero-fill matches the existing short-response pattern in nvmet_execute_get_log_changed_ns() (admin-cmd.c) and prevents leaking transport SGL contents when the host asks for more bytes than the log page contains.

Record
DEBIAN-CVE-2026-64320
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-3317 9.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: prevent immediate PASID reuse case

PASID resue could cause interrupt issue when process immediately runs into hw state left by previous process exited with the same PASID, it's possible that page faults are still pending in the IH ring buffer when the process exits and frees up its PASID. To prevent the case, it uses idr cyclic allocator same as kernel pid's.

(cherry picked from commit 8f1de51f49be692de137c8525106e0fce2d1912d)(CVE-2026-31462)

In the Linux kernel, the following vulnerability has been resolved:

media: hackrf: fix to not free memory after the device is registered in hackrf_probe()

In hackrf driver, the following race condition occurs:

		CPU0						CPU1
hackrf_probe()
  kzalloc(); // alloc hackrf_dev
  ....
  v4l2_device_register();
  ....
						fd = sys_open("/path/to/dev"); // open hackrf fd
						....
  v4l2_device_unregister();
  ....
  kfree(); // free hackrf_dev
  ....
						sys_ioctl(fd, ...);
						  v4l2_ioctl();
						    video_is_registered() // UAF!!
						....
						sys_close(fd);
						  v4l2_release() // UAF!!
						    hackrf_video_release()
						      kfree(); // DFB!!

When a V4L2 or video device is unregistered, the device node is removed so new open() calls are blocked.

However, file descriptors that are already open-and any in-flight I/O-do not terminate immediately; they remain valid until the last reference is dropped and the driver's release() is invoked.

Therefore, freeing device memory on the error path after hackrf_probe() has registered dev it will lead to a race to use-after-free vuln, since those already-open handles haven't been released yet.

And since release() free memory too, race to use-after-free and double-free vuln occur.

To prevent this, if device is registered from probe(), it should be modified to free memory only through release() rather than calling kfree() directly.(CVE-2026-31576)

In the Linux kernel, the following vulnerability has been resolved:

nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map

The DAT inode's btree node cache (i_assoc_inode) is initialized lazily during btree operations. However, nilfs_mdt_save_to_shadow_map() assumes i_assoc_inode is already initialized when copying dirty pages to the shadow map during GC.

If NILFS_IOCTL_CLEAN_SEGMENTS is called immediately after mount before any btree operation has occurred on the DAT inode, i_assoc_inode is NULL leading to a general protection fault.

Fix this by calling nilfs_attach_btree_node_cache() on the DAT inode in nilfs_dat_read() at mount time, ensuring i_assoc_inode is always initialized before any GC operation can use it.(CVE-2026-31577)

In the Linux kernel, the following vulnerability has been resolved:

media: as102: fix to not free memory after the device is registered in as102_usb_probe()

In as102_usb driver, the following race condition occurs:

		CPU0						CPU1
as102_usb_probe()
  kzalloc(); // alloc as102_dev_t
  ....
  usb_register_dev();
						fd = sys_open("/path/to/dev"); // open as102 fd
						....
  usb_deregister_dev();
  ....
  kfree(); // free as102_dev_t
  ....
						sys_close(fd);
						  as102_release() // UAF!!
						    as102_usb_release()
						      kfree(); // DFB!!

When a USB character device registered with usb_register_dev() is later unregistered (via usb_deregister_dev() or disconnect), the device node is removed so new open() calls fail. However, file descriptors that are already open do not go away immediately: they remain valid until the last reference is dropped and the driver's .release() is invoked.

In as102, as102_usb_probe() calls usb_register_dev() and then, on an error path, does usb_deregister_dev() and frees as102_dev_t right away. If userspace raced a successful open() before the deregistration, that open…

Record
OESA-2026-3317
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-3704 9.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

net: hns3: add VLAN id validation before using

Currently, the VLAN id may be used without validation when receive a VLAN configuration mailbox from VF. The length of vlan_del_fail_bmap is BITS_TO_LONGS(VLAN_N_VID). It may cause out-of-bounds memory access once the VLAN id is bigger than or equal to VLAN_N_VID.

Therefore, VLAN id needs to be checked to ensure it is within the range of VLAN_N_VID.(CVE-2025-71112)

In the Linux kernel, the following vulnerability has been resolved:

ext4: fix string copying in parse_apply_sb_mount_options()

strscpy_pad() can't be used to copy a non-NUL-term string into a NUL-term string of possibly bigger size. Commit 0efc5990bca5 ("string.h: Introduce memtostr() and memtostr_pad()") provides additional information in that regard. So if this happens, the following warning is observed:

strnlen: detected buffer overflow: 65 byte read of buffer size 64 WARNING: CPU: 0 PID: 28655 at lib/string_helpers.c:1032 __fortify_report+0x96/0xc0 lib/string_helpers.c:1032 Modules linked in: CPU: 0 UID: 0 PID: 28655 Comm: syz-executor.3 Not tainted 6.12.54-syzkaller-00144-g5f0270f1ba00 #0 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:__fortify_report+0x96/0xc0 lib/string_helpers.c:1032 Call Trace: <TASK> __fortify_panic+0x1f/0x30 lib/string_helpers.c:1039 strnlen include/linux/fortify-string.h:235 [inline] sized_strscpy include/linux/fortify-string.h:309 [inline] parse_apply_sb_mount_options fs/ext4/super.c:2504 [inline] __ext4_fill_super fs/ext4/super.c:5261 [inline] ext4_fill_super+0x3c35/0xad00 fs/ext4/super.c:5706 get_tree_bdev_flags+0x387/0x620 fs/super.c:1636 vfs_get_tree+0x93/0x380 fs/super.c:1814 do_new_mount fs/namespace.c:3553 [inline] path_mount+0x6ae/0x1f70 fs/namespace.c:3880 do_mount fs/namespace.c:3893 [inline] __do_sys_mount fs/namespace.c:4103 [inline] __se_sys_mount fs/namespace.c:4080 [inline] __x64_sys_mount+0x280/0x300 fs/namespace.c:4080 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x64/0x140 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x76/0x7e

Since userspace is expected to provide s_mount_opts field to be at most 63 characters long with the ending byte being NUL-term, use a 64-byte buffer which matches the size of s_mount_opts, so that strscpy_pad() does its job properly. Return with error if the user still managed to provide a non-NUL-term string here.

Found by Linux Verification Center (linuxtesting.org) with Syzkaller.(CVE-2025-71123)

In the Linux kernel, the following vulnerability has been resolved:

RDMA/umad: Reject negative data_len in ib_umad_write

ib_umad_write computes data_len from user-controlled count and the MAD header sizes. With a mismatched user MAD header size and RMPP header length, data_len can become negative and reach ib_create_send_mad(). This can make the padding calculation exceed the segment size and trigger an out-of-bounds memset in alloc_send_rmpp_list().

Add an explicit check to reject negative data_len before creating the send buffer.

KASAN splat: [ 211.363464] BUG: KASAN: slab-out-of-bounds in ib_create_send_mad+0xa01/0x11b0 [ 211.364077] Write of size 220 at addr ffff88800c3fa1f8 by task spray_thread/102 [ 211.365867] ib_create_send_mad+0xa01/0x11b0 [ 211.365887] ib_umad_write+0x853/0x1c80(CVE-2026-23243)

In the Linux kernel, the following vulnerability has been resolved:

nvme: fix memory allocation in nvme_pr_read_keys()

nvme_pr_read_keys() takes num_keys from userspace and uses it to calculate the allocation size for rse via struct_size(). The upper limit is PR_KEYS_MAX (64K).

A malicious or buggy userspace can pass a large num_keys value that results in a 4MB allocation attempt at most, causing a warning in the page allocator when the order exceeds…

Record
OESA-2026-3704
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:59737 8.8

Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Record
RHSA-2026:59737
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:59821 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:59821
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:61887 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:61887
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:64808 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:64808
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:77216 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:77216
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:79782 8.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:79782
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:59737 7.0

Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: sctp: purge outqueue on stale COOKIE-ECHO handling (CVE-2026-52924)

  • kernel: scsi: target: iscsi: Validate CHAP_R length before base64 decode (CVE-2026-63886)

  • kernel: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CVE-2026-63913)

  • kernel: i2c: stub: Reject I2C block transfers with invalid length (CVE-2026-64191)

  • kernel: netfilter: ipset: fix race between dump and ip_set_list resize (CVE-2026-64189)

  • kernel: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CVE-2026-64320)

  • kernel: Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CVE-2026-64277)

  • kernel: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CVE-2026-64276)

Bug Fix(es) and Enhancement(s):

  • [Rocky Linux-RT] usb_hub_wq items may run on isolated+nohz_full cores (JIRA:Rocky Linux-178088)

  • SELinux TCP/MPTCP connect check bypass via TCP Fast Open [rhel-8.10.z] (JIRA:Rocky Linux-222800)

  • ss core dumped when there is an SCTP session [rhel-8.10.z] (JIRA:Rocky Linux-212400)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:59737
CVSS 3.1
7.0 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
Updated
2026-11-02
OSVRLSA-2026:59821 7.0

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: sctp: purge outqueue on stale COOKIE-ECHO handling (CVE-2026-52924)

  • kernel: scsi: target: iscsi: Validate CHAP_R length before base64 decode (CVE-2026-63886)

  • kernel: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CVE-2026-63913)

  • kernel: i2c: stub: Reject I2C block transfers with invalid length (CVE-2026-64191)

  • kernel: netfilter: ipset: fix race between dump and ip_set_list resize (CVE-2026-64189)

  • kernel: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CVE-2026-64320)

  • kernel: Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CVE-2026-64277)

  • kernel: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CVE-2026-64276)

Bug Fix(es) and Enhancement(s):

  • ss core dumped when there is an SCTP session [rhel-8.10.z] (JIRA:Rocky Linux-212400)

  • SELinux TCP/MPTCP connect check bypass via TCP Fast Open [rhel-8.10.z] (JIRA:Rocky Linux-222800)

  • [Rocky Linux-RT] usb_hub_wq items may run on isolated+nohz_full cores (JIRA:Rocky Linux-178088)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:59821
CVSS 3.1
7.0 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
Updated
2026-11-02
OSVRLSA-2026:61887 8.8

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: seccomp: passthrough uretprobe systemcall without filtering (CVE-2025-21834)

  • kernel: ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CVE-2026-23003)

  • kernel: netfilter: nf_tables: Fix for duplicate device in netdev hooks (CVE-2026-43454)

  • kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CVE-2026-43450)

  • kernel: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CVE-2026-45970)

  • kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() (CVE-2026-46120)

  • kernel: iommu/amd: Fix clone_alias() to use the original device's devid (CVE-2026-53053)

  • kernel: NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CVE-2026-53026)

  • kernel: zram: fix use-after-free in zram_bvec_write_partial() (CVE-2026-53185)

  • kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info() (CVE-2026-53196)

  • kernel: mm/huge_memory: update file PMD counter before folio_put() (CVE-2026-53189)

  • kernel: mm/list_lru: drain before clearing xarray entry on reparent (CVE-2026-53153)

  • kernel: pNFS: Fix use-after-free in pnfs_update_layout() (CVE-2026-63800)

  • kernel: nfsd: fix posix_acl leak on SETACL decode failure (CVE-2026-53397)

  • kernel: nfsd: release layout stid on setlease failure (CVE-2026-53399)

  • kernel: NFSv4/flexfiles: reject zero filehandle version count (CVE-2026-53392)

  • kernel: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CVE-2026-53391)

  • kernel: net: mana: validate rx_req_idx to prevent out-of-bounds array access (CVE-2026-64018)

  • kernel: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CVE-2026-64136)

  • kernel: netfilter: ipset: fix race between dump and ip_set_list resize (CVE-2026-64189)

  • kernel: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CVE-2026-64320)

  • kernel: crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (CVE-2026-64438)

  • kernel: crypto: qat - validate RSA CRT component lengths (CVE-2026-64304)

  • kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CVE-2026-64298)

  • kernel: ALSA: virtio: Validate control metadata from the device (CVE-2026-64490)

  • kernel: mm: shrinker: fix shrinker_info teardown race with expansion (CVE-2026-64418)

  • kernel: smb: client: fix change notify replay double-free (CVE-2026-64384)

  • kernel: Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CVE-2026-64277)

  • kernel: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CVE-2026-64276)

  • kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability (CVE-2026-68480)

  • kernel: mm/khugepaged: write all dirty file folios when collapsing (CVE-2026-68086)

  • kernel: Linux kernel: Arbitrary code execution via userfaultfd shadow stack manipulation (CVE-2026-68166)

  • kernel: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CVE-2026-72069)

  • kernel: nvmet-auth: reject short AUTH_RECEIVE buffers (CVE-2026-72130)

Bug Fix(es) and Enhancement(s):

  • Rocky Linux 10: s390: Revert support for DCACHE_WORD_ACCESS [rhel-10.2.z] (JIRA:Rocky Linux-188180)

  • qede: build_skb failure causes off-by-one BD ring corruption and kernel panic [rhel-10.2.z] (JIRA:Rocky Linux-193043)

  • ss core dumped when there is an SCTP session [rhel-10.2.z] (JIRA:Rocky Linux-212393)

  • [Rocky Linux-10.2.z] Intel CWF: CPU is unable to obtain cstate1 on idle system (JIRA:Rocky Linux-218627)

  • Rocky Linux10.0 - s390/pfault: Fix virtual vs physical address confusion [rhel-10.2.z] (JIRA:Rocky Linux-222507)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:61887
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:64808 7.8

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: can: bcm: add locking for bcm_op runtime updates (CVE-2025-38004)

  • kernel: io_uring/poll: fix signed comparison in io_poll_get_ownership() (CVE-2026-52933)

  • kernel: netfilter: nat: use kfree_rcu to release ops (CVE-2026-53000)

  • kernel: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CVE-2026-64136)

  • kernel: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CVE-2026-64320)

  • kernel: nvmet-auth: validate reply message payload bounds against transfer length (CVE-2026-64319)

  • kernel: KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CVE-2026-64287)

  • kernel: smb: client: fix change notify replay double-free (CVE-2026-64384)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:64808
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-64320 8.8

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page nvmet_execute_disc_get_log_page() validates only the dword alignment of the host-supplied Log Page Offset (lpo). The 64-bit offset is then added to a small kzalloc'd buffer that holds the discovery log page and the result is passed straight to nvmet_copy_to_sgl(), which memcpy()s data_len bytes out to the host with no source-side bound check: u64 offset = nvmet_get_log_page_offset(req->cmd); /* 64-bit host / size_t data_len = nvmet_get_log_page_len(req->cmd); / 32-bit host / ... if (offset & 0x3) { ... } / only check */ ... alloc_len = sizeof(*hdr) + entry_size * discovery_log_entries(req); buffer = kzalloc(alloc_len, GFP_KERNEL); ... status = nvmet_copy_to_sgl(req, 0, buffer + offset, data_len); The Discovery controller is unauthenticated -- nvmet_host_allowed() returns true unconditionally for the discovery subsystem -- so the call is reachable pre-authentication by any TCP/RDMA/FC peer that can reach the nvmet target. With a discovery log page of ~1 KiB, an attacker requesting up to 4 KiB starting at offset == alloc_len reads the next slab page out and gets its content returned over the fabric (an empirical run on a default nvmet-tcp loopback target leaked 81 canonical kernel pointers in one Get Log Page response). Pointing the offset at unmapped kernel memory faults the in-kernel memcpy and crashes (or panics, on panic_on_oops=1) the target host instead. The attacker-controlled source-side offset pattern "nvmet_copy_to_sgl(req, 0, buffer + ATTACKER_OFFSET, ...)" is unique to nvmet_execute_disc_get_log_page in the entire nvmet codebase: every other Get Log Page handler in admin-cmd.c either ignores lpo (and silently starts every response at offset 0) or tracks a local destination offset with a fixed source pointer. Validate the host-supplied offset against the log page size, cap the copy length to what is actually available, and zero-fill any remainder of the host transfer buffer. The zero-fill matches the existing short-response pattern in nvmet_execute_get_log_changed_ns() (admin-cmd.c) and prevents leaking transport SGL contents when the host asks for more bytes than the log page contains.

Record
UBUNTU-CVE-2026-64320
CVSS 4.0
8.8 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-10
OSVALSA-2026:59737 No score

Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: sctp: purge outqueue on stale COOKIE-ECHO handling (CVE-2026-52924)
  • kernel: scsi: target: iscsi: Validate CHAP_R length before base64 decode (CVE-2026-63886)
  • kernel: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CVE-2026-63913)
  • kernel: i2c: stub: Reject I2C block transfers with invalid length (CVE-2026-64191)
  • kernel: netfilter: ipset: fix race between dump and ip_set_list resize (CVE-2026-64189)
  • kernel: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CVE-2026-64320)
  • kernel: Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CVE-2026-64277)
  • kernel: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CVE-2026-64276)

Bug Fix(es) and Enhancement(s):

  • [AlmaLinux-RT] usb_hub_wq items may run on isolated+nohz_full cores (JIRA:AlmaLinux-178088)
  • SELinux TCP/MPTCP connect check bypass via TCP Fast Open [almalinux-8.10.z] (JIRA:AlmaLinux-222800)
  • ss core dumped when there is an SCTP session [almalinux-8.10.z] (JIRA:AlmaLinux-212400)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:59737
Updated
2026-11-02
OSVALSA-2026:59821 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: sctp: purge outqueue on stale COOKIE-ECHO handling (CVE-2026-52924)
  • kernel: scsi: target: iscsi: Validate CHAP_R length before base64 decode (CVE-2026-63886)
  • kernel: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CVE-2026-63913)
  • kernel: i2c: stub: Reject I2C block transfers with invalid length (CVE-2026-64191)
  • kernel: netfilter: ipset: fix race between dump and ip_set_list resize (CVE-2026-64189)
  • kernel: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CVE-2026-64320)
  • kernel: Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CVE-2026-64277)
  • kernel: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CVE-2026-64276)

Bug Fix(es) and Enhancement(s):

  • ss core dumped when there is an SCTP session [almalinux-8.10.z] (JIRA:AlmaLinux-212400)
  • SELinux TCP/MPTCP connect check bypass via TCP Fast Open [almalinux-8.10.z] (JIRA:AlmaLinux-222800)
  • [AlmaLinux-RT] usb_hub_wq items may run on isolated+nohz_full cores (JIRA:AlmaLinux-178088)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:59821
Updated
2026-11-02
OSVALSA-2026:61887 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: seccomp: passthrough uretprobe systemcall without filtering (CVE-2025-21834)
  • kernel: ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CVE-2026-23003)
  • kernel: netfilter: nf_tables: Fix for duplicate device in netdev hooks (CVE-2026-43454)
  • kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CVE-2026-43450)
  • kernel: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CVE-2026-45970)
  • kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() (CVE-2026-46120)
  • kernel: iommu/amd: Fix clone_alias() to use the original device's devid (CVE-2026-53053)
  • kernel: NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CVE-2026-53026)
  • kernel: zram: fix use-after-free in zram_bvec_write_partial() (CVE-2026-53185)
  • kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info() (CVE-2026-53196)
  • kernel: mm/huge_memory: update file PMD counter before folio_put() (CVE-2026-53189)
  • kernel: mm/list_lru: drain before clearing xarray entry on reparent (CVE-2026-53153)
  • kernel: pNFS: Fix use-after-free in pnfs_update_layout() (CVE-2026-63800)
  • kernel: nfsd: fix posix_acl leak on SETACL decode failure (CVE-2026-53397)
  • kernel: nfsd: release layout stid on setlease failure (CVE-2026-53399)
  • kernel: NFSv4/flexfiles: reject zero filehandle version count (CVE-2026-53392)
  • kernel: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CVE-2026-53391)
  • kernel: net: mana: validate rx_req_idx to prevent out-of-bounds array access (CVE-2026-64018)
  • kernel: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CVE-2026-64136)
  • kernel: netfilter: ipset: fix race between dump and ip_set_list resize (CVE-2026-64189)
  • kernel: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CVE-2026-64320)
  • kernel: crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (CVE-2026-64438)
  • kernel: crypto: qat - validate RSA CRT component lengths (CVE-2026-64304)
  • kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CVE-2026-64298)
  • kernel: ALSA: virtio: Validate control metadata from the device (CVE-2026-64490)
  • kernel: mm: shrinker: fix shrinker_info teardown race with expansion (CVE-2026-64418)
  • kernel: smb: client: fix change notify replay double-free (CVE-2026-64384)
  • kernel: Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CVE-2026-64277)
  • kernel: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CVE-2026-64276)
  • kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability (CVE-2026-68480)
  • kernel: mm/khugepaged: write all dirty file folios when collapsing (CVE-2026-68086)
  • kernel: Linux kernel: Arbitrary code execution via userfaultfd shadow stack manipulation (CVE-2026-68166)
  • kernel: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CVE-2026-72069)
  • kernel: nvmet-auth: reject short AUTH_RECEIVE buffers (CVE-2026-72130)
  • kernel: ceph: give up on paths longer than PATH_MAX (CVE-2024-53685)
  • kernel: ceph: fix memory leaks in ceph_mdsc_build_path() (CVE-2026-43419)
  • kernel: ceph: add a bunch of missing ceph_path_info initializers (CVE-2026-43408)

Bug Fix(es) and Enhancement(s):

  • AlmaLinux 10: s390: Revert support for DCACHE_WORD_ACCESS [almalinux-10.2.z] (JIRA:AlmaLinux-188180)
  • qede: build_skb failure causes off-by-one BD ring corruption and kernel panic [almalinux-10.2.z] (JIRA:AlmaLinux-193043)
  • ss core dumped when there is an SCTP session [almalinux-10.2.z] (JIRA:AlmaLinux-212393)
  • [AlmaLinux-10.2.z] Intel CWF: CPU is unable to obtain cstate1 on idle system (JIRA:AlmaLinux-218627)
  • AlmaLinux10.0 - s390/pfault: Fix virtual vs physical address confusion [almalinux-10.2.z] (JIRA:AlmaLinux-222507)

For more details about the security…

Record
ALSA-2026:61887
Updated
2026-11-02
OSVALSA-2026:64808 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: can: bcm: add locking for bcm_op runtime updates (CVE-2025-38004)
  • kernel: io_uring/poll: fix signed comparison in io_poll_get_ownership() (CVE-2026-52933)
  • kernel: netfilter: nat: use kfree_rcu to release ops (CVE-2026-53000)
  • kernel: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CVE-2026-64136)
  • kernel: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CVE-2026-64320)
  • kernel: nvmet-auth: validate reply message payload bounds against transfer length (CVE-2026-64319)
  • kernel: KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CVE-2026-64287)
  • kernel: smb: client: fix change notify replay double-free (CVE-2026-64384)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:64808
Updated
2026-11-02
OSVAZL-93521 No score

CVE-2026-64320 affecting package kernel 6.6.161.1-1

In the Linux kernel, the following vulnerability has been resolved:

nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page

nvmet_execute_disc_get_log_page() validates only the dword alignment of the host-supplied Log Page Offset (lpo). The 64-bit offset is then added to a small kzalloc'd buffer that holds the discovery log page and the result is passed straight to nvmet_copy_to_sgl(), which memcpy()s data_len bytes out to the host with no source-side bound check:

u64 offset      = nvmet_get_log_page_offset(req->cmd);  /* 64-bit host */
size_t data_len = nvmet_get_log_page_len(req->cmd);     /* 32-bit host */
...
if (offset & 0x3) { ... }                               /* only check */
...
alloc_len = sizeof(*hdr) + entry_size * discovery_log_entries(req);
buffer = kzalloc(alloc_len, GFP_KERNEL);
...
status = nvmet_copy_to_sgl(req, 0, buffer + offset, data_len);

The Discovery controller is unauthenticated -- nvmet_host_allowed() returns true unconditionally for the discovery subsystem -- so the call is reachable pre-authentication by any TCP/RDMA/FC peer that can reach the nvmet target. With a discovery log page of ~1 KiB, an attacker requesting up to 4 KiB starting at offset == alloc_len reads the next slab page out and gets its content returned over the fabric (an empirical run on a default nvmet-tcp loopback target leaked 81 canonical kernel pointers in one Get Log Page response). Pointing the offset at unmapped kernel memory faults the in-kernel memcpy and crashes (or panics, on panic_on_oops=1) the target host instead.

The attacker-controlled source-side offset pattern "nvmet_copy_to_sgl(req, 0, buffer + ATTACKER_OFFSET, ...)" is unique to nvmet_execute_disc_get_log_page in the entire nvmet codebase: every other Get Log Page handler in admin-cmd.c either ignores lpo (and silently starts every response at offset 0) or tracks a local destination offset with a fixed source pointer.

Validate the host-supplied offset against the log page size, cap the copy length to what is actually available, and zero-fill any remainder of the host transfer buffer. The zero-fill matches the existing short-response pattern in nvmet_execute_get_log_changed_ns() (admin-cmd.c) and prevents leaking transport SGL contents when the host asks for more bytes than the log page contains.

Record
AZL-93521
Updated
2026-11-05
OSVCLSA-2026-1789898700 No score

kernel: Fix of 163 CVEs

  • drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON() {CVE-2026-68251}
  • amd/amdkfd: sync all devices to wait all processes being evicted {CVE-2024-36949}
  • Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted {CVE-2024-36909}
  • Drivers: hv: vmbus: Track decrypted status in vmbus_gpadl {CVE-2024-36912}
  • xfs: save ailp before dropping the AIL lock in push callbacks {CVE-2026-31454}
  • net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak {CVE-2026-43041}
  • netfilter: nf_conntrack: destroy stale expectfn expectations on unregister {CVE-2026-53349}
  • cifs: avoid NULL pointer dereference in dbg call {CVE-2025-37844}
  • fs/notify: call exportfs_encode_fid with s_umount {CVE-2025-40237}
  • cifs: fix potential oops in cifs_oplock_break {CVE-2023-54258}
  • pstore/ram: fix buffer overflow in persistent_ram_save_old() {CVE-2026-46253}
  • Bluetooth: ISO: fix iso_conn related locking and validity issues {CVE-2023-54164}
  • netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets {CVE-2026-45873}
  • ext4: always drain queued discard work in ext4_mb_release() {CVE-2026-43065}
  • ipvs: Defer ip_vs_ftp unregister during netns cleanup {CVE-2025-40018}
  • Bluetooth: MGMT: Fix memory leak in set_ssp_complete {CVE-2026-23151}
  • sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto {CVE-2025-40281}
  • fscache: Use wait_on_bit() to wait for the freeing of relinquished volume {CVE-2023-52982}
  • libceph: prevent potential out-of-bounds reads in process_message_header() {CVE-2026-43406}
  • netfilter: nf_tables: reject immediate NF_QUEUE verdict {CVE-2026-43024}
  • ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() {CVE-2025-68261}
  • bpf, sockmap: Fix af_unix iter deadlock {CVE-2026-53035}
  • sctp: stream: fully roll back denied add-stream state {CVE-2026-52929}
  • netfilter: xt_CT: drop pending enqueued packets on template removal {CVE-2026-23391}
  • netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() {CVE-2026-23457}
  • libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() {CVE-2026-43407}
  • af_unix: read UNIX_DIAG_VFS data under unix_state_lock {CVE-2026-31673}
  • jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted {CVE-2025-68337}
  • Bluetooth: Fix NULL pointer deference on eir_get_service_data {CVE-2025-38304}
  • net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption {CVE-2026-31533}
  • fsnotify: do not generate ACCESS/MODIFY events on child for special files {CVE-2025-68788}
  • isofs: validate Rock Ridge CE continuation extent against volume size {CVE-2026-46303}
  • net: strparser: fix skb_head leak in strp_abort_strp() {CVE-2026-46102}
  • sctp: fix uninit-value in __sctp_rcv_asconf_lookup() {CVE-2026-53225}
  • xfs: don't swallow dquot recovery verification errors {CVE-2026-80529}
  • xfs: dquot recovery does not validate the recovered dquot {CVE-2026-80529}
  • bpf: tcp: fix double sock release on batch realloc {CVE-2026-64575}
  • bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch() {CVE-2026-74714}
  • bpf: tcp: Avoid socket skips and repeats during iteration {CVE-2026-74714}
  • bpf: tcp: Use bpf_tcp_iter_batch_item for bpf_tcp_iter_state batch items {CVE-2026-74714}
  • bpf: tcp: Get rid of st_bucket_done {CVE-2026-74714}
  • bpf: tcp: Make sure iter->batch always contains a full bucket snapshot {CVE-2026-64575}
  • bpf: tcp: Make mem flags configurable through bpf_iter_tcp_realloc_batch {CVE-2026-74714}
  • USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343}
  • NFS: Decrement refcounts if allocating nfs_free_stateid_data fails {CVE-2026-74730}
  • NFS: Pin the 'struct nfs_server' during a FREE_STATEID call {CVE-2026-74730}
  • net/atm: fix slab-out-of-bounds read in vcc_setsockopt() {CVE-2026-74689}
  • net: Make copy_safe_from_sockptr() match documentation {CVE-2026-74689}
  • net: add copy_safe_from_sockptr() helper {CVE-2026-74689}
  • xfs: close crash window in attr dabtree…
Record
CLSA-2026-1789898700
Updated
2026-11-02
OSVCLSA-2026-1789958474 No score

Fix of 167 CVEs

  • CVE-2025-39826
    • net: rose: convert 'use' field to refcount_t {CVE-2025-39826}
  • CVE-2025-40146
    • blk-mq: fix potential deadlock while nr_requests grown {CVE-2025-40146}
  • CVE-2024-53216
    • nfsd: release svc_expkey/svc_export with rcu_work {CVE-2024-53216}
  • CVE-2026-89778
    • isofs: fix out-of-bounds page array access on empty zisofs block {CVE-2026-89778}
  • CVE-2026-23050
    • pNFS: Fix a deadlock when returning a delegation during open() {CVE-2026-23050}
  • CVE-2025-68796
    • f2fs: fix to avoid updating zero-sized extent in extent cache {CVE-2025-68796}
  • CVE-2025-68330
    • iio: accel: bmc150: Fix irq assumption regression {CVE-2025-68330}
  • CVE-2025-40333
    • f2fs: fix infinite loop in __insert_extent_tree() {CVE-2025-40333}
  • CVE-2025-40160
    • xen/events: Return -EEXIST for bound VIRQs {CVE-2025-40160}
  • CVE-2023-54047
    • drm/rockchip: dw_hdmi: cleanup drm encoder during unbind {CVE-2023-54047}
  • CVE-2025-68190
    • drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() {CVE-2025-68190}
  • CVE-2025-68188
    • tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() {CVE-2025-68188}
  • CVE-2026-89786
    • ext4: fix out-of-bounds read in ext4_read_inline_dir() {CVE-2026-89786}
  • CVE-2022-50764
    • ipv6/sit: use DEV_STATS_INC() to avoid data-races {CVE-2022-50764}
  • CVE-2026-80785
    • fbdev: serialize mode sysfs access with lock_fb_info() {CVE-2026-80785}
  • CVE-2026-80788
    • nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations {CVE-2026-80788}
  • CVE-2026-80747
    • drm/amdkfd: Add bounds check for CRAT subtype length {CVE-2026-80747}
  • CVE-2026-80907
    • drm/amdgpu: Fix UVD dpb min size calculation for H264 {CVE-2026-80907}
  • CVE-2026-80908
    • drm/amdgpu: Reject UVD message with dimensions above 4096 {CVE-2026-80908}
  • CVE-2026-80812
    • ALSA: dummy: Check card index validity at probe {CVE-2026-80812}
  • CVE-2026-80948
    • wifi: iwlwifi: dvm: fix memory leak in iwl_op_mode_dvm_start() {CVE-2026-80948}
  • CVE-2025-40137
    • f2fs: fix to truncate first page in error path of f2fs_truncate() {CVE-2025-40137}
  • CVE-2023-54150
    • drm/amd: Fix an out of bounds error in BIOS parser {CVE-2023-54150}
  • CVE-2026-89784
    • SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 {CVE-2026-89784}
  • CVE-2026-89783
    • xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full {CVE-2026-89783}
  • CVE-2026-89780
    • net: qualcomm: rmnet: restore skb->dev on deaggregated frames {CVE-2026-89780}
  • CVE-2026-89777
    • vfio/pci: clear vdev->msi_perm after freeing it on init failure {CVE-2026-89777}
  • CVE-2026-89789
    • gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free {CVE-2026-89789}
  • CVE-2025-68797
    • char: applicom: fix NULL pointer dereference in ac_ioctl {CVE-2025-68797}
  • CVE-2025-68767
    • hfsplus: Verify inode mode when loading from disk {CVE-2025-68767}
  • CVE-2026-63961
    • usb: typec: altmodes/displayport: validate count before reading Status Update VDO {CVE-2026-63961}
  • CVE-2026-63904
    • usb: usbtmc: check URB actual_length for interrupt-IN notifications {CVE-2026-63904}
  • CVE-2022-50864
    • nilfs2: fix shift-out-of-bounds due to too large exponent of block size {CVE-2022-50864}
  • CVE-2025-68771
    • ocfs2: fix kernel BUG in ocfs2_find_victim_chain {CVE-2025-68771}
  • CVE-2025-68750
    • usb: potential integer overflow in usbg_make_tpg() {CVE-2025-68750}
  • CVE-2026-80909
    • drm/amdgpu: Reject UVD message with invalid number of h265 refs {CVE-2026-80909}
  • CVE-2026-74402
    • crypto: atmel-sha204a - fix blocking and non-blocking rng logic {CVE-2026-74402} *…
Record
CLSA-2026-1789958474
Updated
2026-11-02
OSVCLSA-2026-1791800936 No score

kernel: Fix of 191 CVEs

  • drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check {CVE-2026-89818}
  • drm/amdgpu/vcn4: Avoid overflow on msg bound check {CVE-2026-46199}
  • drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg {CVE-2026-46199}
  • drm/amdgpu/vcn3: Avoid overflow on msg bound check {CVE-2026-46230}
  • drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg {CVE-2026-46230}
  • openvswitch: vport: fix self-deadlock on release of tunnel ports {CVE-2026-46165}
  • openvswitch: defer tunnel netdev_put to RCU release {CVE-2026-31678}
  • ALSA: usb: Fix UAF at delayed release of MIDI2 EPs {CVE-2026-74642}
  • ALSA: usb-audio: fix use-after-free in ump_to_endpoint() {CVE-2026-74501}
  • NFS: Decrement refcounts if allocating nfs_free_stateid_data fails {CVE-2026-74730}
  • NFS: Pin the 'struct nfs_server' during a FREE_STATEID call {CVE-2026-74730}
  • exec: do_close_on_exec() before taking exec_update_lock {CVE-2026-64371}
  • proc: Fix broken error paths for namespace links {CVE-2026-64371}
  • proc: protect ptrace_may_access() with exec_update_lock (part 1) {CVE-2026-64371}
  • ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes {CVE-2026-74503}
  • ALSA: timer: Forcibly close timer instances at closing {CVE-2026-53193}
  • usb: typec: ucsi: Fix race condition and ordering in port unregistration {CVE-2026-74441}
  • arp: do not assume dev_hard_header() does not change skb->head {CVE-2026-22988}
  • netfilter: nft_ct: fix use-after-free in timeout object destroy {CVE-2026-31665}
  • md/raid10: fix writes_pending and barrier reference leaks on discard failures {CVE-2026-72438}
  • md/raid10: fix deadlock with check operation and nowait requests {CVE-2026-46050}
  • mm: introduce and use {pgd,p4d}_populate_kernel() {CVE-2025-39844}
  • vsock/virtio: fix zerocopy completion for multi-skb sends {CVE-2026-53365}
  • vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting {CVE-2026-52994}
  • mm: do file ownership checks with the proper mount idmap {CVE-2026-64294}
  • udf: validate VAT header length against the VAT inode size {CVE-2026-64323}
  • SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths {CVE-2026-45870}
  • Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig {CVE-2026-53208}
  • slip: bound decode() reads against the compressed packet length {CVE-2026-45843}
  • net: tls: fix strparser anchor skb leak on offload RX setup failure {CVE-2026-52974}
  • netfilter: nf_tables: unconditionally bump set->nelems before insertion {CVE-2026-23272}
  • rbd: Reset positive result codes to zero in object map update path {CVE-2026-68131}
  • netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() {CVE-2026-23458}
  • mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr {CVE-2025-21938}
  • bpf: Fix NULL deref in map_kptr_match_type for scalar regs {CVE-2026-53032}
  • bpf: Explicitly check accesses to bpf_sock_addr {CVE-2025-40078}
  • nexthop: Forbid FDB status change while nexthop is in a group {CVE-2025-39980}
  • bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN {CVE-2026-31525}
  • x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() {CVE-2025-21913}
  • ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple() {CVE-2024-57994}
  • drm/i915/vrr: require valid min/max vfreq for VRR {CVE-2026-68254}
  • libceph: handle rbtree insertion error in decode_choose_args() {CVE-2026-52954}
  • gfs2: prevent NULL pointer dereference during unmount {CVE-2026-53048}
  • smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path {CVE-2026-31708}
  • ext4: reject mount if bigalloc with s_first_data_block != 0 {CVE-2026-31447}
  • NFSD: Fix crash in nfsd4_read_release() {CVE-2025-40324}
  • netfilter: x_tables: guard option walkers against 1-byte tail reads {CVE-2026-43452}
  • smb: client: Fix refcount leak for cifs_sb_tlink {CVE-2025-40103}
  • smb: client: harden POSIX SID length parsing {CVE-2026-64380}
  • crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() {CVE-2026-64438}
  • bpf: Allow LPM map access from sleepable…
Record
CLSA-2026-1791800936
Updated
2026-11-02
OSVCLSA-2026-1791852988 No score

kernel: Fix of 107 CVEs

  • netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
  • IB/isert: reject PDUs declaring more data than was received {CVE-2026-90414}
  • RDMA/mlx5: Fix integer overflow of user QP buffer size {CVE-2026-90435}
  • sctp: validate embedded address parameter length {CVE-2026-74287}
  • IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413}
  • xfrm: ah6: validate routing header segments_left {CVE-2026-80844}
  • drm/amd/display: set new_stream to NULL after release {CVE-2026-68236}
  • RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters {CVE-2026-100075}
  • nvmet-rdma: handle inline data with a nonzero offset {CVE-2026-72129}
  • netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() {CVE-2026-97417}
  • sctp: validate cookie AUTH state before use {CVE-2026-74752}
  • ipvlan: inherit needed_headroom and needed_tailroom from phy_dev {CVE-2026-74744}
  • enic: fix tx_hang_reset use-after-free on device removal {CVE-2026-74725}
  • net/atm: fix slab-out-of-bounds read in vcc_setsockopt() {CVE-2026-74689}
  • drm/amdgpu: reject oversized IBs with per-ring packet limits {CVE-2026-80576}
  • xfs: bounds-check buffer log item's dirty bitmap {CVE-2026-80536}
  • nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page {CVE-2026-64320}
  • smb: client: reject overlapping data areas in SMB2 responses {CVE-2026-64257}
  • smb: client: restrict implied bcc[0] exemption to responses without data area {CVE-2026-64448}
  • crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() {CVE-2026-64438}
  • crypto: qat - protect interrupt mask CSRs with a spinlock {CVE-2026-64438}
  • crypto: qat - remove intermediate tasklet for vf2pf {CVE-2026-64438}
  • usb: free iso schedules on failed submit {CVE-2026-64348}
  • USB: iowarrior: fix use-after-free on disconnect race {CVE-2026-64341}
  • crypto: qat - protect service table iterations with service_lock {CVE-2026-64305}
  • crypto: qat - validate RSA CRT component lengths {CVE-2026-64304}
  • net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422}
  • udf: validate VAT header length against the VAT inode size {CVE-2026-64323}
  • crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
  • crypto: algif_aead - fix uninitialized ctx->init {CVE-2025-39964}
  • sctp: fix race between sctp_wait_for_connect and peeloff {CVE-2026-63971}
  • mpls: reload header after pskb_may_pull() {CVE-2026-89555}
  • net: tun: bound receive headroom {CVE-2026-81000}
  • bridge: stp: Fix a potential use-after-free when deleting a bridge {CVE-2026-72389}
  • scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer {CVE-2026-74556}
  • rhashtable: clear stale iter->p on table restart {CVE-2026-64563}
  • vhost: reset the vring metadata cache on vring reconfiguration {CVE-2026-74580}
  • net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
  • sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
  • USB: legousbtower: fix use-after-free on disconnect race {CVE-2026-64340}
  • USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343}
  • udf: validate sparing table length as an entry count, not a byte count {CVE-2026-64322}
  • ipv4: igmp: remove multicast group from hash table on device destruction {CVE-2026-64423}
  • USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}
  • sctp: fix use-after-free of cached ASCONF chunk {CVE-2026-74587}
  • RDMA/siw: bound Read Response placement to the RREAD length {CVE-2026-64268}
  • ip6_tunnel: clear skb2->cb[] in ip6ip6_err() {CVE-2026-74597}
  • ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}
  • netfilter: ebt_nflog: pin the NFLOG backend {CVE-2026-74660}
  • libceph: Avoid using invalid osd indices from primary_temp {CVE-2026-80558}
  • udp: fix potential use-after-free in tunnel segmentation {CVE-2026-74705}
  • Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}
  • wifi: ath9k: hif_usb: don't dereference hif_dev after…
Record
CLSA-2026-1791852988
Updated
2026-11-02
OSVCLSA-2026-1792137027 No score

kernel-uek: Fix of 161 CVEs

  • net: usb: pegasus: don't rely on id table pointer arithmetic {CVE-2026-97540}
  • ocfs2: validate directory-index entry counts when reading metadata {CVE-2026-89492}
  • ocfs2: validate dx_root extent list fields during block read {CVE-2026-89492}
  • nvme-tcp: reject a read that transferred too few bytes {CVE-2026-89480}
  • sctp: add INIT verification after cookie unpacking {CVE-2026-72398}
  • sctp: validate embedded INIT chunk and address list lengths in cookie {CVE-2026-53224}
  • sctp: fix NULL deref on untransmitted RECONF completion {CVE-2026-89477}
  • net/packet: defer vmalloc TX_RING free until skbs finish {CVE-2026-80841}
  • netfilter: nf_log: unregister loggers before per-net teardown {CVE-2026-97608}
  • netfilter: nf_tables: make nft_object rhltable per table {CVE-2026-74565}
  • packet: use consistent hard_header_len in non-ring send paths {CVE-2026-74582}
  • net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header {CVE-2026-80731}
  • net/atm: fix slab-out-of-bounds read in vcc_setsockopt() {CVE-2026-74689}
  • net: do not send ICMP/NDISC Redirects when peer allocation fails {CVE-2026-74550}
  • tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() {CVE-2026-72404}
  • net/sched: sch_teql: move rcu_read_lock()/spin_lock() from _bh variants {CVE-2026-72390}
  • net/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF {CVE-2026-72390}
  • Drivers: hv: vmbus: use generic driver_override infrastructure {CVE-2026-80676}
  • NFSD: Prevent client use-after-free during delegation revoke {CVE-2026-89659}
  • sunrpc: route to a populated pool in svc_pool_for_cpu() {CVE-2026-89549}
  • sctp: fix stream->outcnt underflow on duplicate RECONF responses {CVE-2026-89476}
  • sctp: distinguish sequence zero from wildcard in reconf lookup {CVE-2026-89476}
  • ipv6: mcast: Fix potential UAF in MLD delayed work {CVE-2026-72322}
  • net/sched: fix packet loop on netem when duplicate is on {CVE-2026-63983}
  • net: Introduce skb tc depth field to track packet loops {CVE-2026-63983}
  • netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst {CVE-2026-72255}
  • sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing {CVE-2026-53246}
  • ipv6: mcast: Fix use-after-free when processing MLD queries {CVE-2026-53275}
  • scsi: xen: scsiback: Free unsubmitted command instead of double-putting it {CVE-2026-72085}
  • ipv4: fib: Don't dump dying fib_info in fib_leaf_notify(). {CVE-2026-74289}
  • sctp: fix err_chunk memory leaks in INIT handling {CVE-2026-72413}
  • net/sched: defer qdisc freeing after failed creation {CVE-2026-98017}
  • IB/isert: wait for deferred control PDU completions before releasing the connection {CVE-2026-98357}
  • RDMA/mad: Fix receive buffer leak when PKey enforcement fails {CVE-2026-98354}
  • sctp: validate embedded address parameter length {CVE-2026-74287}
  • nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget {CVE-2026-89674}
  • IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413}
  • drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() {CVE-2026-46209}
  • RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() {CVE-2026-46181}
  • nvmet-tcp: fix race between ICReq handling and queue teardown {CVE-2026-46135}
  • ALSA: aloop: Fix peer runtime UAF during format-change stop {CVE-2026-46090}
  • ALSA: aloop: Fix racy access at PCM trigger {CVE-2026-23191}
  • drm/nouveau: fix u32 overflow in pushbuf reloc bounds check {CVE-2026-46006}
  • gfs2: Fix use-after-free in iomap inline data write path {CVE-2026-45984}
  • bonding: alb: fix UAF in rlb_arp_recv during bond up/down {CVE-2026-45970}
  • Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold {CVE-2026-31408}
  • Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect() {CVE-2024-36013}
  • mt76: fix use-after-free by removing a non-RCU wcid pointer {CVE-2022-49328}
  • mt76: fix per-driver wcid range checks after wcid array size bump {CVE-2022-49328}
  • af_unix: Fix UAF read of…
Record
CLSA-2026-1792137027
Updated
2026-11-02
OSVCLSA-2026-1792243729 No score

kernel: Fix of 53 CVEs

  • ipv4: validate checksum_start before completing checksum {CVE-2026-99999}
  • vsock/vmci: fix UAF when peer resets connection during handshake {CVE-2026-64115}
  • af_unix: Fix UAF read of tail->len in unix_stream_data_wait() {CVE-2026-64109}
  • tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done {CVE-2026-63801}
  • tipc: fix double-free in tipc_buf_append() {CVE-2026-52993}
  • Drivers: hv: vmbus: Use after free in __vmbus_open() {CVE-2021-47049}
  • dm: fix a buffer overflow in ioctl processing {CVE-2026-46294}
  • scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown {CVE-2026-97536}
  • drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() {CVE-2026-46209}
  • drm: Remove plane hsub/vsub alignment requirement for core helpers {CVE-2026-46209}
  • nfsd: make sure exp active before svc_export_show {CVE-2024-56558}
  • USB: serial: io_edgeport: cap received transmit credits {CVE-2026-68365}
  • ALSA: seq: close a re-opened queue timer in the destructor {CVE-2026-68202}
  • geneve: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-68142}
  • net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-63829}
  • drm/amd/display: Bound VBIOS record-chain walk loops {CVE-2026-53138}
  • drm/amd/display: Clamp VBIOS HDMI retimer register count to array size {CVE-2026-53136}
  • RDMA/srp: Do not call scsi_done() from srp_abort() {CVE-2023-52515}
  • netfilter: nf_log: unregister loggers before per-net teardown {CVE-2026-97608}
  • net: usb: pegasus: don't rely on id table pointer arithmetic {CVE-2026-97540}
  • RDMA/mad: Fix receive buffer leak when PKey enforcement fails {CVE-2026-98354}
  • wifi: cfg80211: cancel sched scan results work on unregister {CVE-2026-68414}
  • ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF {CVE-2026-68398}
  • mm/khugepaged: fix ->anon_vma race {CVE-2023-52935}
  • netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check {CVE-2026-52998}
  • drm/nouveau: fix u32 overflow in pushbuf reloc bounds check {CVE-2026-46006}
  • scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress {CVE-2023-52974}
  • drm/edid: fix OOB read in drm_parse_tiled_block() {CVE-2026-64546}
  • bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() {CVE-2026-64548}
  • NFSv4.2: fix LAYOUTSTATS send buffer exhaustion {CVE-2026-90103}
  • xen/netfront: drop RX packets with a short Ethernet header {CVE-2026-98375}
  • Squashfs: check block offset is not negative {CVE-2026-90203}
  • tty: clear cdev pointer after cdev_add() failure {CVE-2026-90334}
  • wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length {CVE-2026-90382}
  • uio: Fix stale info pointer in failed registration path {CVE-2026-93054}
  • md/raid5-ppl: fix use-after-free in ppl_do_flush() {CVE-2026-93262}
  • net/atm: fix slab-out-of-bounds read in vcc_setsockopt() {CVE-2026-74689}
  • ipvs: clear IPv4 options after rebasing tunnel ICMP errors {CVE-2026-74669}
  • net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers {CVE-2026-74700}
  • ALSA: usx2y: bound the hwdep mmap fault offset {CVE-2026-74641}
  • ALSA: usx2y: Fix potential leaks of uninitialized memory {CVE-2026-74641}
  • bpf, sockmap: Fix sk_redir use-after-free in send verdict {CVE-2026-74589}
  • net/packet: reset the MAC header on the packet-socket transmit path {CVE-2026-74667}
  • drm/amdgpu: reject oversized IBs with per-ring packet limits {CVE-2026-80576}
  • sctp: validate cookie AUTH state before use {CVE-2026-74752}
  • ipvlan: inherit needed_headroom and needed_tailroom from phy_dev {CVE-2026-74744}
  • nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page {CVE-2026-64320}
  • tipc: read le->link under the node lock in tipc_node_link_down() {CVE-2026-74609}
  • crypto: pcrypt - Fix handling of MAY_BACKLOG requests {CVE-2026-43493}
  • libceph: define and enforce CEPH_MAX_KEY_LEN {CVE-2026-43304}
  • nvme-tcp: fix UAF when detecting digest errors {CVE-2022-48686}
  • isdn: cpai: check ctr->cnr…
Record
CLSA-2026-1792243729
Updated
2026-11-02
OSVCLSA-2026-1792759740 No score

kernel: Fix of 134 CVEs

  • net: skbuff: propagate shared-frag marker in skb_zerocopy()
  • net: bridge: stop fast-leave after deleting a port group {CVE-2026-74480}
  • net: ipv6: clear suppressed fib6 rule result {CVE-2026-74581}
  • ipvs: do not propagate one-packet flag to synced conns {CVE-2026-80714}
  • net: skbuff: propagate shared-frag marker through frag-transfer helpers {CVE-2026-43503}
  • net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow {CVE-2026-98025}
  • ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF {CVE-2026-98116}
  • sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START {CVE-2026-98130}
  • dm cache policy smq: check allocation under invalidate lock {CVE-2026-53265}
  • RDMA/siw: Bound fragmented header copies by the remaining length {CVE-2026-98323}
  • tty: clear cdev pointer after cdev_add() failure {CVE-2026-90334}
  • tty: skip cdev_del() when no cdev is registered {CVE-2026-90335}
  • procfs: fix missing RCU protection when reading real_parent in do_task_stat() {CVE-2026-46259}
  • sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL {CVE-2026-46227}
  • drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() {CVE-2026-46209}
  • drm: Remove plane hsub/vsub alignment requirement for core helpers {CVE-2026-46209}
  • RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path {CVE-2026-46189}
  • RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() {CVE-2026-46181}
  • scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() {CVE-2026-46149}
  • RDMA/rxe: Reject unknown opcodes before ICRC processing {CVE-2026-46133}
  • ip6_gre: Use cached t->net in ip6erspan_changelink(). {CVE-2026-46120}
  • libceph: Fix slab-out-of-bounds access in auth message processing {CVE-2026-46119}
  • Bluetooth: hci_event: fix potential UAF in SSP passkey handlers {CVE-2026-46056}
  • net: qrtr: ns: Fix use-after-free in driver remove() {CVE-2026-46047}
  • RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv {CVE-2026-46043}
  • gfs2: Fix use-after-free in iomap inline data write path {CVE-2026-45984}
  • gfs2: Add metapath_dibh helper {CVE-2026-45984}
  • bonding: alb: fix UAF in rlb_arp_recv during bond up/down {CVE-2026-45970}
  • gfs2: Fix slab-use-after-free in qd_put {CVE-2026-45861}
  • RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send {CVE-2026-45856}
  • dm: fix a buffer overflow in ioctl processing {CVE-2026-46294}
  • wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task {CVE-2026-46180}
  • netfilter: nf_log: validate MAC header was set before dumping it {CVE-2026-52942}
  • xfrm: espintcp: do not reuse an in-progress partial send {CVE-2026-52935}
  • sctp: purge outqueue on stale COOKIE-ECHO handling {CVE-2026-52924}
  • ipc: limit next_id allocation to the valid ID range {CVE-2026-52923}
  • netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920}
  • netfilter: nf_queue: hold bridge skb->dev while queued {CVE-2026-52912}
  • ipvs: clear the svc scheduler ptr early on edit {CVE-2026-53270}
  • netfilter: conntrack_irc: fix possible out-of-bounds read {CVE-2026-53268}
  • net/sched: act_api: use RCU with deferred freeing for action lifecycle {CVE-2026-53264}
  • Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() {CVE-2026-53256}
  • Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
  • xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() {CVE-2026-53239}
  • ipv6: sit: reload inner IPv6 header after GSO offloads {CVE-2026-53228}
  • net: guard timestamp cmsgs to real error queue skbs {CVE-2026-53223}
  • USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() {CVE-2026-53195}
  • wifi: nl80211: reject oversized EMA RNR lists {CVE-2026-53182}
  • netfilter: require Ethernet MAC header before using eth_hdr() {CVE-2026-53131}
  • bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops {CVE-2026-53078}
  • ppp: require CAP_NET_ADMIN in target…
Record
CLSA-2026-1792759740
Updated
2026-11-02
OSVopenSUSE-SU-2026:11476-1 No score

kernel-devel-7.1.7-1.1 on GA media

These are all security issues fixed in the kernel-devel-7.1.7-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11476-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21910-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (bsc#1256671).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-23113: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).
  • CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
  • CVE-2026-23348: cxl/mem: Clarify @host for devm_cxl_add_nvdimm() (bsc#1260577).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31530: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (bsc#1262756).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132).
  • CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
  • CVE-2026-46135: nvmet-tcp: remove redundant calls to nvmet_tcp_fatal_error() (bsc#1267373).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). -…
Record
openSUSE-SU-2026:21910-1
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2026-64320 No score

CVE-2026-64320 in linux - Patched by Root

Root has patched CVE-2026-64320 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2026-64320
Updated
2026-11-02
OSVROOT-OS-UBUNTU-2204-CVE-2026-64320 No score

CVE-2026-64320 in linux - Patched by Root

Root has patched CVE-2026-64320 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2204-CVE-2026-64320
Updated
2026-11-06
OSVSUSE-SU-2026:23881-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (bsc#1256671).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-23113: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).
  • CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
  • CVE-2026-23348: cxl/mem: Clarify @host for devm_cxl_add_nvdimm() (bsc#1260577).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31530: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (bsc#1262756).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132).
  • CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
  • CVE-2026-46135: nvmet-tcp: remove redundant calls to nvmet_tcp_fatal_error() (bsc#1267373).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). -…
Record
SUSE-SU-2026:23881-1
Updated
2026-11-02
OSVSUSE-SU-2026:23887-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (bsc#1256671).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-23113: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).
  • CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
  • CVE-2026-23348: cxl/mem: Clarify @host for devm_cxl_add_nvdimm() (bsc#1260577).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31530: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (bsc#1262756).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132).
  • CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
  • CVE-2026-46135: nvmet-tcp: remove redundant calls to nvmet_tcp_fatal_error() (bsc#1267373).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). -…
Record
SUSE-SU-2026:23887-1
Updated
2026-11-02
OSVSUSE-SU-2026:23897-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (bsc#1256671).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-23113: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).
  • CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
  • CVE-2026-23348: cxl/mem: Clarify @host for devm_cxl_add_nvdimm() (bsc#1260577).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31530: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (bsc#1262756).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132).
  • CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
  • CVE-2026-46135: nvmet-tcp: remove redundant calls to nvmet_tcp_fatal_error() (bsc#1267373).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). -…
Record
SUSE-SU-2026:23897-1
Updated
2026-11-02
OSVSUSE-SU-2026:23902-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (bsc#1256671).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-23113: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).
  • CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
  • CVE-2026-23348: cxl/mem: Clarify @host for devm_cxl_add_nvdimm() (bsc#1260577).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31530: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (bsc#1262756).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132).
  • CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
  • CVE-2026-46135: nvmet-tcp: remove redundant calls to nvmet_tcp_fatal_error() (bsc#1267373).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). -…
Record
SUSE-SU-2026:23902-1
Updated
2026-11-02
OSVSUSE-SU-2026:24181-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
  • CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
  • CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298).
  • CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
  • CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017).
  • CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
  • CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
  • CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
  • CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
  • CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
  • CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
  • CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
  • CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
  • CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
  • CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
  • CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
  • CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
  • CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
  • CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
  • CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
  • CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
  • CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
  • CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
  • CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
  • CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
  • CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
  • CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
  • CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
  • CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
  • CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
  • CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870).
  • CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
  • CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
  • CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).
  • CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420). -…
Record
SUSE-SU-2026:24181-1
Updated
2026-11-02
OSVSUSE-SU-2026:24182-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
  • CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
  • CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298).
  • CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
  • CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017).
  • CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
  • CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
  • CVE-2026-53090: bpf: Fix ld_{abs,ind} failure path analysis in subprogs (bsc#1269532).
  • CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1271955).
  • CVE-2026-68162: sctp: avoid auth_enable sysctl UAF during netns teardown (bsc#1274920).
  • CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277).
  • CVE-2026-72084: scsi: target: Bound PR-OUT TransportID parsing to the received buffer (bsc#1275540).
  • CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
  • CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
  • CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
  • CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
  • CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
  • CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
  • CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
  • CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
  • CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
  • CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
  • CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
  • CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
  • CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
  • CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
  • CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
  • CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
  • CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
  • CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
  • CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
  • CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
  • CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
  • CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
  • CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
  • CVE-2026-64279: i2c:…
Record
SUSE-SU-2026:24182-1
Updated
2026-11-02
OSVSUSE-SU-2026:24315-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
  • CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
  • CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298).
  • CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
  • CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017).
  • CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
  • CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
  • CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
  • CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
  • CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
  • CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
  • CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
  • CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
  • CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
  • CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
  • CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
  • CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
  • CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
  • CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
  • CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
  • CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
  • CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
  • CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
  • CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
  • CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
  • CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
  • CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
  • CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
  • CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
  • CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
  • CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870).
  • CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
  • CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
  • CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).
  • CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420). -…
Record
SUSE-SU-2026:24315-1
Updated
2026-11-02
OSVSUSE-SU-2026:24316-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
  • CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
  • CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298).
  • CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
  • CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017).
  • CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
  • CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
  • CVE-2026-53090: bpf: Fix ld_{abs,ind} failure path analysis in subprogs (bsc#1269532).
  • CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1271955).
  • CVE-2026-68162: sctp: avoid auth_enable sysctl UAF during netns teardown (bsc#1274920).
  • CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277).
  • CVE-2026-72084: scsi: target: Bound PR-OUT TransportID parsing to the received buffer (bsc#1275540).
  • CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
  • CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
  • CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
  • CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
  • CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
  • CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
  • CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
  • CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
  • CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
  • CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
  • CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
  • CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
  • CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
  • CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
  • CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
  • CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
  • CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
  • CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
  • CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
  • CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
  • CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
  • CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
  • CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
  • CVE-2026-64279: i2c:…
Record
SUSE-SU-2026:24316-1
Updated
2026-11-02
OSVSUSE-SU-2026:4640-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
  • CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
  • CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
  • CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
  • CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
  • CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
  • CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
  • CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
  • CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
  • CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
  • CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
  • CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
  • CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
  • CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
  • CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
  • CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
  • CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
  • CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
  • CVE-2026-63987: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES (bsc#1272971).
  • CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
  • CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
  • CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
  • CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
  • CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
  • CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
  • CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
  • CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
  • CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
  • CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
  • CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
  • CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870).
  • CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
  • CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
  • CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).
  • CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420).
  • CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).
  • CVE-2026-64373: cpufreq: Fix hotplug-suspend race during…
Record
SUSE-SU-2026:4640-1
Updated
2026-11-02
OSVSUSE-SU-2026:4660-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
  • CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
  • CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
  • CVE-2026-53266: netfilter: bridge: make ebt_snat ARP rewrite writable (bsc#1269136).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
  • CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1271955).
  • CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
  • CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).
  • CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251).
  • CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).
  • CVE-2026-68162: sctp: avoid auth_enable sysctl UAF during netns teardown (bsc#1274920).
  • CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977).
  • CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).
  • CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277).
  • CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).
  • CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).
  • CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388).
  • CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801).
  • CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803).
  • CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814).
  • CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818).
  • CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821).
  • CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249).
  • CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).
  • CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).
  • CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).
  • CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574).
  • CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544).
  • CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553).
  • CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
  • CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).
  • CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985).
  • CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).
  • CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).
  • CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).
  • CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381).
  • CVE-2026-72399: net: enetc: check the number of BDs needed for xdp_frame (bsc#1276553).
  • CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).
  • CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108).
  • CVE-2026-74267: net/sched: sch_codel: Do not call…
Record
SUSE-SU-2026:4660-1
Updated
2026-11-02
OSVSUSE-SU-2026:4687-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633).
  • CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
  • CVE-2026-43428: USB: core: Limit the length of unkillable synchronous timeouts (bsc#1265138).
  • CVE-2026-45834: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() (bsc#1266412).
  • CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
  • CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
  • CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-46312: media: videobuf2: Set vma_flags in vb2_dma_sg_mmap (bsc#1267990).
  • CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).
  • CVE-2026-53037: HID: usbhid: fix deadlock in hid_post_reset() (bsc#1269081).
  • CVE-2026-53237: gpio: mvebu: fix NULL pointer dereference in suspend/resume (bsc#1269131).
  • CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
  • CVE-2026-53385: vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write (bsc#1271834).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1273953).
  • CVE-2026-63897: USB: serial: mct_u232: fix missing interrupt-in transfer sanity check (bsc#1272642).
  • CVE-2026-63900: USB: serial: keyspan: fix missing indat transfer sanity check (bsc#1272499).
  • CVE-2026-63902: USB: serial: cypress_m8: validate interrupt packet headers (bsc#1272517).
  • CVE-2026-63903: USB: serial: belkin_sa: validate interrupt status length (bsc#1272522).
  • CVE-2026-63904: usb: usbtmc: check URB actual_length for interrupt-IN notifications (bsc#1272523).
  • CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
  • CVE-2026-63942: parport: Fix race between port and client registration (bsc#1273023).
  • CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
  • CVE-2026-63957: USB: serial: safe_serial: fix memory corruption with small endpoint (bsc#1272472).
  • CVE-2026-63961: usb: typec: altmodes/displayport: validate count before reading Status Update VDO (bsc#1272480).
  • CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
  • CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
  • CVE-2026-64014: Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer size (bsc#1273769).
  • CVE-2026-64097: drm/amd/display: Validate GPIO pin LUT table size before iterating (bsc#1273480).
  • CVE-2026-64191: i2c: stub: Reject I2C block transfers with invalid length (bsc#1272211).
  • CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
  • CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
  • CVE-2026-64320: nvmet: fix discover log page when offsets are used (bsc#1273420).
  • CVE-2026-64342: USB: iowarrior: fix use-after-free on disconnect (bsc#1274011).
  • CVE-2026-64348: usb: free iso schedules on failed submit (bsc#1274026).
  • CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).
  • CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776).
  • CVE-2026-64375: proc: protect ptrace_may_access() with exec_update_lock (FD links) (bsc#1273868).
  • CVE-2026-64378: writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() (bsc#1273603).
  • CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).
  • CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982). -…
Record
SUSE-SU-2026:4687-1
Updated
2026-11-02
OSVSUSE-SU-2026:4706-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
  • CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
  • CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
  • CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
  • CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
  • CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
  • CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
  • CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
  • CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
  • CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
  • CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
  • CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
  • CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
  • CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
  • CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
  • CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
  • CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
  • CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
  • CVE-2026-63987: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES (bsc#1272971).
  • CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
  • CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
  • CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
  • CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
  • CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
  • CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
  • CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
  • CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
  • CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
  • CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
  • CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
  • CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870).
  • CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
  • CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
  • CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).
  • CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420).
  • CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).
  • CVE-2026-64373: cpufreq: Fix hotplug-suspend race during…
Record
SUSE-SU-2026:4706-1
Updated
2026-11-02
OSVUSN-8726-1 No score

linux, linux-aws, linux-aws-7.0, linux-gcp, linux-gke, linux-hwe-7.0, linux-realtime vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • User-space API (UAPI);
  • Kernel build system;
  • ARM32 architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Drivers core;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Character device driver;
  • Hardware random number generator core;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • System reset/shutdown drivers;
  • Power sequencing drivers;
  • PTP clock framework;
  • Voltage and Current Regulator drivers;
  • RPMSG subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • VME bus staging drivers;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Cadence USB3 driver;
  • ULPI bus;
  • DesignWare USB3 driver;
  • Faraday FOTG210 USB2 dual-role controller driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • Intel USBIO USB I/O expander driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • VFIO drivers;
  • Framebuffer layer;
  • Virtio drivers;
  • BTRFS file system;
  • EROFS file system;
  • exFAT file system;
  • F2FS file system;
  • File systems infrastructure;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • OCFS2 file system;
  • Proc file system;
  • SMB network file system;
  • UDF file system;
  • XFS file system;
  • Key management;
  • BPF subsystem;
  • Memory management;
  • Software nodes and device properties;
  • Glob pattern matching library;
  • Memory Management;
  • KVM subsystem;
  • Mellanox drivers;
  • Restartable sequences system call mechanism;
  • Socket messages infrastructure;
  • Network traffic control;
  • Bluetooth subsystem;
  • Netfilter;
  • Networking core;
  • Network sockets;
  • TCP network protocol;
  • io_uring subsystem;
  • IPC subsystem;
  • Audit subsystem;
  • Perf events;
  • Kernel fork() syscall;
  • Locking primitives;
  • Kernel module support;
  • Scheduler infrastructure; -…
Record
USN-8726-1
Updated
2026-11-09
OSVUSN-8726-2 No score

linux-raspi vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • User-space API (UAPI);
  • Kernel build system;
  • ARM32 architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Drivers core;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Character device driver;
  • Hardware random number generator core;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • System reset/shutdown drivers;
  • Power sequencing drivers;
  • PTP clock framework;
  • Voltage and Current Regulator drivers;
  • RPMSG subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • VME bus staging drivers;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Cadence USB3 driver;
  • ULPI bus;
  • DesignWare USB3 driver;
  • Faraday FOTG210 USB2 dual-role controller driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • Intel USBIO USB I/O expander driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • VFIO drivers;
  • Framebuffer layer;
  • Virtio drivers;
  • BTRFS file system;
  • EROFS file system;
  • exFAT file system;
  • F2FS file system;
  • File systems infrastructure;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • OCFS2 file system;
  • Proc file system;
  • SMB network file system;
  • UDF file system;
  • XFS file system;
  • Key management;
  • BPF subsystem;
  • Memory management;
  • Software nodes and device properties;
  • Glob pattern matching library;
  • Memory Management;
  • KVM subsystem;
  • Mellanox drivers;
  • Restartable sequences system call mechanism;
  • Socket messages infrastructure;
  • Network traffic control;
  • Bluetooth subsystem;
  • Netfilter;
  • Networking core;
  • Network sockets;
  • TCP network protocol;
  • io_uring subsystem;
  • IPC subsystem;
  • Audit subsystem;
  • Perf events;
  • Kernel fork() syscall;
  • Locking primitives;
  • Kernel module support;
  • Scheduler infrastructure; -…
Record
USN-8726-2
Updated
2026-11-09
OSVUSN-8726-3 No score

linux-ibm vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • User-space API (UAPI);
  • Kernel build system;
  • ARM32 architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Drivers core;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Character device driver;
  • Hardware random number generator core;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • System reset/shutdown drivers;
  • Power sequencing drivers;
  • PTP clock framework;
  • Voltage and Current Regulator drivers;
  • RPMSG subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • VME bus staging drivers;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Cadence USB3 driver;
  • ULPI bus;
  • DesignWare USB3 driver;
  • Faraday FOTG210 USB2 dual-role controller driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • Intel USBIO USB I/O expander driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • VFIO drivers;
  • Framebuffer layer;
  • Virtio drivers;
  • BTRFS file system;
  • EROFS file system;
  • exFAT file system;
  • F2FS file system;
  • File systems infrastructure;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • OCFS2 file system;
  • Proc file system;
  • SMB network file system;
  • UDF file system;
  • XFS file system;
  • Key management;
  • BPF subsystem;
  • Memory management;
  • Software nodes and device properties;
  • Glob pattern matching library;
  • Memory Management;
  • KVM subsystem;
  • Mellanox drivers;
  • Restartable sequences system call mechanism;
  • Socket messages infrastructure;
  • Network traffic control;
  • Bluetooth subsystem;
  • Netfilter;
  • Networking core;
  • Network sockets;
  • TCP network protocol;
  • io_uring subsystem;
  • IPC subsystem;
  • Audit subsystem;
  • Perf events;
  • Kernel fork() syscall;
  • Locking primitives;
  • Kernel module support;
  • Scheduler infrastructure; -…
Record
USN-8726-3
Updated
2026-11-09
OSVUSN-8726-4 No score

linux-azure, linux-oracle vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • User-space API (UAPI);
  • Kernel build system;
  • ARM32 architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Drivers core;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Character device driver;
  • Hardware random number generator core;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • System reset/shutdown drivers;
  • Power sequencing drivers;
  • PTP clock framework;
  • Voltage and Current Regulator drivers;
  • RPMSG subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • VME bus staging drivers;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Cadence USB3 driver;
  • ULPI bus;
  • DesignWare USB3 driver;
  • Faraday FOTG210 USB2 dual-role controller driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • Intel USBIO USB I/O expander driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • VFIO drivers;
  • Framebuffer layer;
  • Virtio drivers;
  • BTRFS file system;
  • EROFS file system;
  • exFAT file system;
  • F2FS file system;
  • File systems infrastructure;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • OCFS2 file system;
  • Proc file system;
  • SMB network file system;
  • UDF file system;
  • XFS file system;
  • Key management;
  • BPF subsystem;
  • Memory management;
  • Software nodes and device properties;
  • Glob pattern matching library;
  • Memory Management;
  • KVM subsystem;
  • Mellanox drivers;
  • Restartable sequences system call mechanism;
  • Socket messages infrastructure;
  • Network traffic control;
  • Bluetooth subsystem;
  • Netfilter;
  • Networking core;
  • Network sockets;
  • TCP network protocol;
  • io_uring subsystem;
  • IPC subsystem;
  • Audit subsystem;
  • Perf events;
  • Kernel fork() syscall;
  • Locking primitives;
  • Kernel module support;
  • Scheduler infrastructure; -…
Record
USN-8726-4
Updated
2026-11-09
OSVUSN-8727-1 No score

linux-oem-7.0 vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • User-space API (UAPI);
  • Kernel build system;
  • ARM32 architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Drivers core;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Character device driver;
  • Hardware random number generator core;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • System reset/shutdown drivers;
  • Power sequencing drivers;
  • PTP clock framework;
  • Voltage and Current Regulator drivers;
  • RPMSG subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • VME bus staging drivers;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • Cadence USB3 driver;
  • ULPI bus;
  • USB core drivers;
  • DesignWare USB3 driver;
  • Faraday FOTG210 USB2 dual-role controller driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • Intel USBIO USB I/O expander driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • VFIO drivers;
  • Framebuffer layer;
  • Virtio drivers;
  • BTRFS file system;
  • EROFS file system;
  • exFAT file system;
  • F2FS file system;
  • File systems infrastructure;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • OCFS2 file system;
  • Proc file system;
  • SMB network file system;
  • UDF file system;
  • XFS file system;
  • Key management;
  • BPF subsystem;
  • Memory management;
  • Software nodes and device properties;
  • Glob pattern matching library;
  • Memory Management;
  • KVM subsystem;
  • Mellanox drivers;
  • Restartable sequences system call mechanism;
  • Socket messages infrastructure;
  • Network traffic control;
  • Bluetooth subsystem;
  • Netfilter;
  • Networking core;
  • Network sockets;
  • TCP network protocol;
  • io_uring subsystem;
  • IPC subsystem;
  • Audit subsystem;
  • Perf events;
  • Kernel fork() syscall;
  • Locking primitives;
  • Kernel module support;
  • Scheduler infrastructure;
  • Signal handling…
Record
USN-8727-1
Updated
2026-11-09
OSVUSN-8728-1 No score

linux-gcp-7.0 vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • x86 platform drivers;
  • ARM64 architecture;
  • Cryptographic API;
  • PSP security protocol;
  • User-space API (UAPI);
  • Kernel build system;
  • ARM32 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Auxiliary display drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Ublk userspace block driver;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • Hardware random number generator core;
  • Clock framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • DPLL subsystem;
  • EDAC drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • EFI core;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • FWCTL subsystem;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • Parport drivers;
  • PCI subsystem;
  • PHY drivers;
  • Pin controllers subsystem;
  • Chrome hardware platform drivers;
  • ACPI WMI driver;
  • Generic PM domains;
  • MediaTek PM domains;
  • System reset/shutdown drivers;
  • Power sequencing drivers;
  • Power supply drivers;
  • PTP clock framework;
  • Voltage and Current Regulator drivers;
  • MPAM driver;
  • Amlogic Meson reset controller drivers;
  • RPMSG subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • NVIDIA Tegra Control Backbone (CBB) driver;
  • SPI subsystem;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • VME bus staging drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • DesignWare USB2 driver;
  • DesignWare USB3 driver;
  • Faraday FOTG210 USB2 dual-role controller driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB…
Record
USN-8728-1
Updated
2026-11-07

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel-rt
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.158.1.rt7.499.el8_10
4.18.0-553.158.1.rt7.499.el8_10
kernel-rt-core
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.158.1.rt7.499.el8_10
4.18.0-553.158.1.rt7.499.el8_10
kernel-rt-debug
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.158.1.rt7.499.el8_10
4.18.0-553.158.1.rt7.499.el8_10
kernel-rt-debug-core
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.158.1.rt7.499.el8_10
4.18.0-553.158.1.rt7.499.el8_10
kernel-rt-debug-devel
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.158.1.rt7.499.el8_10
4.18.0-553.158.1.rt7.499.el8_10
kernel-rt-debug-modules
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.158.1.rt7.499.el8_10
4.18.0-553.158.1.rt7.499.el8_10
kernel-rt-debug-modules-extra
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.158.1.rt7.499.el8_10
4.18.0-553.158.1.rt7.499.el8_10
kernel-rt-devel
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.158.1.rt7.499.el8_10
4.18.0-553.158.1.rt7.499.el8_10
kernel-rt-modules
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.158.1.rt7.499.el8_10
4.18.0-553.158.1.rt7.499.el8_10
kernel-rt-modules-extra
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.158.1.rt7.499.el8_10
4.18.0-553.158.1.rt7.499.el8_10
Show 290 moreShow less
Affected packages
PackageAffectedFixed
bpftool
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.158.1.el8_10
4.18.0-553.158.1.el8_10
kernel
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.158.1.el8_10
4.18.0-553.158.1.el8_10
kernel-abi-stablelists
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.158.1.el8_10
4.18.0-553.158.1.el8_10
kernel-core
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.158.1.el8_10
4.18.0-553.158.1.el8_10
kernel-cross-headers
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.158.1.el8_10
4.18.0-553.158.1.el8_10
kernel-debug
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.158.1.el8_10
4.18.0-553.158.1.el8_10
kernel-debug-core
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.158.1.el8_10
4.18.0-553.158.1.el8_10
kernel-debug-devel
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.158.1.el8_10
4.18.0-553.158.1.el8_10
kernel-debug-modules
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.158.1.el8_10
4.18.0-553.158.1.el8_10
kernel-debug-modules-extra
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.158.1.el8_10
4.18.0-553.158.1.el8_10
kernel-devel
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.158.1.el8_10
4.18.0-553.158.1.el8_10
kernel-doc
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.158.1.el8_10
4.18.0-553.158.1.el8_10
kernel-headers
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.158.1.el8_10
4.18.0-553.158.1.el8_10
kernel-modules
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.158.1.el8_10
4.18.0-553.158.1.el8_10
kernel-modules-extra
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.158.1.el8_10
4.18.0-553.158.1.el8_10
kernel-tools
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.158.1.el8_10
4.18.0-553.158.1.el8_10
kernel-tools-libs
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.158.1.el8_10
4.18.0-553.158.1.el8_10
kernel-tools-libs-devel
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.158.1.el8_10
4.18.0-553.158.1.el8_10
kernel-zfcpdump
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.158.1.el8_10
4.18.0-553.158.1.el8_10
kernel-zfcpdump-core
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.158.1.el8_10
4.18.0-553.158.1.el8_10
kernel-zfcpdump-devel
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.158.1.el8_10
4.18.0-553.158.1.el8_10
kernel-zfcpdump-modules
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.158.1.el8_10
4.18.0-553.158.1.el8_10
kernel-zfcpdump-modules-extra
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.158.1.el8_10
4.18.0-553.158.1.el8_10
perf
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.158.1.el8_10
4.18.0-553.158.1.el8_10
python3-perf
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.158.1.el8_10
4.18.0-553.158.1.el8_10
kernel
AlmaLinux:10
From an advisory covering 37 CVEs
 before 6.12.0-211.50.1.el10_2
6.12.0-211.50.1.el10_2
kernel-64k
AlmaLinux:10
From an advisory covering 37 CVEs
 before 6.12.0-211.50.1.el10_2
6.12.0-211.50.1.el10_2
kernel-64k-core
AlmaLinux:10
From an advisory covering 37 CVEs
 before 6.12.0-211.50.1.el10_2
6.12.0-211.50.1.el10_2
kernel-64k-debug
AlmaLinux:10
From an advisory covering 37 CVEs
 before 6.12.0-211.50.1.el10_2
6.12.0-211.50.1.el10_2
kernel-64k-debug-core
AlmaLinux:10
From an advisory covering 37 CVEs
 before 6.12.0-211.50.1.el10_2
6.12.0-211.50.1.el10_2
kernel-64k-debug-devel
AlmaLinux:10
From an advisory covering 37 CVEs
 before 6.12.0-211.50.1.el10_2
6.12.0-211.50.1.el10_2
kernel-64k-debug-devel-matched
AlmaLinux:10
From an advisory covering 37 CVEs
 before 6.12.0-211.50.1.el10_2
6.12.0-211.50.1.el10_2
kernel-64k-debug-modules
AlmaLinux:10
From an advisory covering 37 CVEs
 before 6.12.0-211.50.1.el10_2
6.12.0-211.50.1.el10_2
kernel-64k-debug-modules-core
AlmaLinux:10
From an advisory covering 37 CVEs
 before 6.12.0-211.50.1.el10_2
6.12.0-211.50.1.el10_2
kernel-64k-debug-modules-extra
AlmaLinux:10
From an advisory covering 37 CVEs
 before 6.12.0-211.50.1.el10_2
6.12.0-211.50.1.el10_2
kernel-64k-devel
AlmaLinux:10
From an advisory covering 37 CVEs
 before 6.12.0-211.50.1.el10_2
6.12.0-211.50.1.el10_2
kernel-64k-devel-matched
AlmaLinux:10
From an advisory covering 37 CVEs
 before 6.12.0-211.50.1.el10_2
6.12.0-211.50.1.el10_2
kernel-64k-modules
AlmaLinux:10
From an advisory covering 37 CVEs
 before 6.12.0-211.50.1.el10_2
6.12.0-211.50.1.el10_2
kernel-64k-modules-core
AlmaLinux:10
From an advisory covering 37 CVEs
 before 6.12.0-211.50.1.el10_2
6.12.0-211.50.1.el10_2
kernel-64k-modules-extra
AlmaLinux:10
From an advisory covering 37 CVEs
 before 6.12.0-211.50.1.el10_2
6.12.0-211.50.1.el10_2
kernel-abi-stablelists
AlmaLinux:10
From an advisory covering 37 CVEs
 before 6.12.0-211.50.1.el10_2
6.12.0-211.50.1.el10_2
kernel-core
AlmaLinux:10
From an advisory covering 37 CVEs
 before 6.12.0-211.50.1.el10_2
6.12.0-211.50.1.el10_2
kernel-cross-headers
AlmaLinux:10
From an advisory covering 37 CVEs
 before 6.12.0-211.50.1.el10_2
6.12.0-211.50.1.el10_2
kernel-debug
AlmaLinux:10
From an advisory covering 37 CVEs
 before 6.12.0-211.50.1.el10_2
6.12.0-211.50.1.el10_2
kernel
Azure Linux:3
 through 6.6.161.1-1 None known
linux-lts
Alpaquita:23
 6.1.189-r0 up to 6.1.191-r0
6.1.191-r0
linux-lts
Alpaquita:25
 6.12.95-r0 up to 6.12.103-r0
6.12.103-r0
linux-lts
Alpaquita:stream
 6.18.38-r0 up to 6.18.43-r0
6.18.43-r0
bpftool
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 7.0.0-284.1101.el9_2.tuxcare.11.els14
7.0.0-284.1101.el9_2.tuxcare.11.els14
kernel
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-abi-stablelists
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-core
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-cross-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-debug-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-debug-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-debug-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-debug-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-debug-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-doc
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-ipaclones-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-selftests-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-tools
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-tools-libs
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-tools-libs-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
libbpf
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.11.els14
2:1.0.0-2.el9_2.tuxcare.11.els14
libbpf-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.11.els14
2:1.0.0-2.el9_2.tuxcare.11.els14
libbpf-static
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.11.els14
2:1.0.0-2.el9_2.tuxcare.11.els14
perf
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
python3-perf
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
rtla
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
linux-buildinfo-5.4.0-238-generic
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-buildinfo-5.4.0-238-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-cloud-tools-5.4.0-238
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-cloud-tools-5.4.0-238-generic
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-cloud-tools-5.4.0-238-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-cloud-tools-common
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-doc
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-headers-5.4.0-238
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-headers-5.4.0-238-generic
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-headers-5.4.0-238-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-image-unsigned-5.4.0-238-generic
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-image-unsigned-5.4.0-238-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-libc-dev
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-modules-5.4.0-238-generic
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-modules-5.4.0-238-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-modules-extra-5.4.0-238-generic
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-source-5.4.0
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-tools-5.4.0-238
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
Kernel
Linux
 4.8.0 up to 6.1.191, 6.2.0 up to 6.6.160, 6.7.0 up to 6.12.96, 6.13.0 up to 6.18.39, 6.19.0 up to 7.1.4
6.1.1916.6.1606.12.966.18.397.1.4
linux
Debian:12
 All versions, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 45 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.170-16.1.170-26.1.170-36.1.172-16.1.174-16.1.176-16.1.177-16.1.180-16.1.187-16.1.190-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+1
 None known
linux
Debian:13
 before 6.12.96-1, plus listed versions
6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-1
Show 25 moreShow less
6.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+1
6.12.96-1
linux
Debian:14
 before 7.1.4-1, plus listed versions
6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1
Show 45 moreShow less
6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1
7.1.4-1
linux-6.12
Debian:12
 before 6.12.100-1~deb12u1
6.12.100-1~deb12u1
kernel
openEuler:22.03-LTS-SP4
From an advisory covering 33 CVEs
 before 5.10.0-328.0.0.229.oe2203sp4
5.10.0-328.0.0.229.oe2203sp4
kernel
openEuler:24.03-LTS-SP3
From an advisory covering 165 CVEs
 before 6.6.0-145.3.29.160.oe2403sp3
6.6.0-145.3.29.160.oe2403sp3
kernel-rt
Red Hat:enterprise_linux:8::nfv
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.rt7.499.el8_10
0:4.18.0-553.158.1.rt7.499.el8_10
kernel-rt-core
Red Hat:enterprise_linux:8::nfv
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.rt7.499.el8_10
0:4.18.0-553.158.1.rt7.499.el8_10
kernel-rt-debug
Red Hat:enterprise_linux:8::nfv
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.rt7.499.el8_10
0:4.18.0-553.158.1.rt7.499.el8_10
kernel-rt-debug-core
Red Hat:enterprise_linux:8::nfv
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.rt7.499.el8_10
0:4.18.0-553.158.1.rt7.499.el8_10
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:8::nfv
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.rt7.499.el8_10
0:4.18.0-553.158.1.rt7.499.el8_10
kernel-rt-debug-devel
Red Hat:enterprise_linux:8::nfv
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.rt7.499.el8_10
0:4.18.0-553.158.1.rt7.499.el8_10
kernel-rt-debug-kvm
Red Hat:enterprise_linux:8::nfv
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.rt7.499.el8_10
0:4.18.0-553.158.1.rt7.499.el8_10
kernel-rt-debug-modules
Red Hat:enterprise_linux:8::nfv
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.rt7.499.el8_10
0:4.18.0-553.158.1.rt7.499.el8_10
kernel-rt-debug-modules-extra
Red Hat:enterprise_linux:8::nfv
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.rt7.499.el8_10
0:4.18.0-553.158.1.rt7.499.el8_10
kernel-rt-debuginfo
Red Hat:enterprise_linux:8::nfv
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.rt7.499.el8_10
0:4.18.0-553.158.1.rt7.499.el8_10
kernel-rt-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::nfv
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.rt7.499.el8_10
0:4.18.0-553.158.1.rt7.499.el8_10
kernel-rt-devel
Red Hat:enterprise_linux:8::nfv
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.rt7.499.el8_10
0:4.18.0-553.158.1.rt7.499.el8_10
kernel-rt-kvm
Red Hat:enterprise_linux:8::nfv
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.rt7.499.el8_10
0:4.18.0-553.158.1.rt7.499.el8_10
kernel-rt-modules
Red Hat:enterprise_linux:8::nfv
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.rt7.499.el8_10
0:4.18.0-553.158.1.rt7.499.el8_10
kernel-rt-modules-extra
Red Hat:enterprise_linux:8::nfv
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.rt7.499.el8_10
0:4.18.0-553.158.1.rt7.499.el8_10
kernel-rt
Red Hat:enterprise_linux:8::realtime
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.rt7.499.el8_10
0:4.18.0-553.158.1.rt7.499.el8_10
kernel-rt-core
Red Hat:enterprise_linux:8::realtime
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.rt7.499.el8_10
0:4.18.0-553.158.1.rt7.499.el8_10
kernel-rt-debug
Red Hat:enterprise_linux:8::realtime
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.rt7.499.el8_10
0:4.18.0-553.158.1.rt7.499.el8_10
kernel-rt-debug-core
Red Hat:enterprise_linux:8::realtime
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.rt7.499.el8_10
0:4.18.0-553.158.1.rt7.499.el8_10
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:8::realtime
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.rt7.499.el8_10
0:4.18.0-553.158.1.rt7.499.el8_10
kernel-rt-debug-devel
Red Hat:enterprise_linux:8::realtime
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.rt7.499.el8_10
0:4.18.0-553.158.1.rt7.499.el8_10
kernel-rt-debug-modules
Red Hat:enterprise_linux:8::realtime
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.rt7.499.el8_10
0:4.18.0-553.158.1.rt7.499.el8_10
kernel-rt-debug-modules-extra
Red Hat:enterprise_linux:8::realtime
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.rt7.499.el8_10
0:4.18.0-553.158.1.rt7.499.el8_10
kernel-rt-debuginfo
Red Hat:enterprise_linux:8::realtime
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.rt7.499.el8_10
0:4.18.0-553.158.1.rt7.499.el8_10
kernel-rt-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::realtime
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.rt7.499.el8_10
0:4.18.0-553.158.1.rt7.499.el8_10
kernel-rt-devel
Red Hat:enterprise_linux:8::realtime
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.rt7.499.el8_10
0:4.18.0-553.158.1.rt7.499.el8_10
kernel-rt-modules
Red Hat:enterprise_linux:8::realtime
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.rt7.499.el8_10
0:4.18.0-553.158.1.rt7.499.el8_10
kernel-rt-modules-extra
Red Hat:enterprise_linux:8::realtime
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.rt7.499.el8_10
0:4.18.0-553.158.1.rt7.499.el8_10
bpftool
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.el8_10
0:4.18.0-553.158.1.el8_10
bpftool-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.el8_10
0:4.18.0-553.158.1.el8_10
kernel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.el8_10
0:4.18.0-553.158.1.el8_10
kernel-abi-stablelists
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.el8_10
0:4.18.0-553.158.1.el8_10
kernel-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.el8_10
0:4.18.0-553.158.1.el8_10
kernel-debug
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.el8_10
0:4.18.0-553.158.1.el8_10
kernel-debug-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.el8_10
0:4.18.0-553.158.1.el8_10
kernel-debug-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.el8_10
0:4.18.0-553.158.1.el8_10
kernel-debug-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.el8_10
0:4.18.0-553.158.1.el8_10
kernel-debug-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.el8_10
0:4.18.0-553.158.1.el8_10
kernel-debug-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.el8_10
0:4.18.0-553.158.1.el8_10
kernel-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.el8_10
0:4.18.0-553.158.1.el8_10
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.el8_10
0:4.18.0-553.158.1.el8_10
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.el8_10
0:4.18.0-553.158.1.el8_10
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.el8_10
0:4.18.0-553.158.1.el8_10
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.el8_10
0:4.18.0-553.158.1.el8_10
kernel-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.el8_10
0:4.18.0-553.158.1.el8_10
kernel-doc
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.el8_10
0:4.18.0-553.158.1.el8_10
kernel-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.el8_10
0:4.18.0-553.158.1.el8_10
kernel-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.el8_10
0:4.18.0-553.158.1.el8_10
kernel-tools
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.el8_10
0:4.18.0-553.158.1.el8_10
kernel-tools-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.el8_10
0:4.18.0-553.158.1.el8_10
kernel-tools-libs
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.el8_10
0:4.18.0-553.158.1.el8_10
kernel-zfcpdump
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.el8_10
0:4.18.0-553.158.1.el8_10
kernel-zfcpdump-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.el8_10
0:4.18.0-553.158.1.el8_10
kernel-rt
Rocky Linux:8
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.rt7.499.el8_10
0:4.18.0-553.158.1.rt7.499.el8_10
kernel
Rocky Linux:8
From an advisory covering 8 CVEs
 before 0:4.18.0-553.158.1.el8_10
0:4.18.0-553.158.1.el8_10
kernel
Rocky Linux:10
From an advisory covering 34 CVEs
 before 0:6.12.0-211.50.1.el10_2
0:6.12.0-211.50.1.el10_2
kernel
Rocky Linux:9
From an advisory covering 8 CVEs
 before 0:5.14.0-687.45.1.el9_8
0:5.14.0-687.45.1.el9_8
linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
rootio-linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
rootio-linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
kernel-obs-build
SUSE:Linux Micro Extras 6.2
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-syms
SUSE:Linux Micro Extras 6.2
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-64kb
SUSE:Linux Micro 6.2
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default
SUSE:Linux Micro 6.2
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default-base
SUSE:Linux Micro 6.2
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1.160000.2.23
6.12.0-160000.38.1.160000.2.23
kernel-rt
SUSE:Linux Micro 6.2
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-source
SUSE:Linux Micro 6.2
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-64kb
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-azure
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default-base
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1.160000.2.23
6.12.0-160000.38.1.160000.2.23
kernel-docs
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-kvmsmall
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-obs-qa
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-source
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-syms
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-64kb
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-azure
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1.160000.2.23
6.12.0-160000.38.1.160000.2.23
kernel-docs
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-kvmsmall
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-obs-qa
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-source
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-syms
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-zfcpdump
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default
SUSE:Linux Micro 6.1
From an advisory covering 473 CVEs
 before 6.4.0-159998.53.1
6.4.0-159998.53.1
kernel-default-base
SUSE:Linux Micro 6.1
From an advisory covering 473 CVEs
 before 6.4.0-159998.53.1.159998.21.38
6.4.0-159998.53.1.159998.21.38
kernel-kvmsmall
SUSE:Linux Micro 6.1
From an advisory covering 473 CVEs
 before 6.4.0-159998.53.1
6.4.0-159998.53.1
kernel-source
SUSE:Linux Micro 6.1
From an advisory covering 473 CVEs
 before 6.4.0-159998.53.1
6.4.0-159998.53.1
podman
SUSE:Linux Micro 6.2
From an advisory covering 479 CVEs
 before 5.4.2-160000.6.1
5.4.2-160000.6.1
kernel-rt
SUSE:Linux Micro 6.1
From an advisory covering 479 CVEs
 before 6.4.0-159998.53.1
6.4.0-159998.53.1
kernel-source-rt
SUSE:Linux Micro 6.1
From an advisory covering 479 CVEs
 before 6.4.0-159998.53.1
6.4.0-159998.53.1
kernel-default
SUSE:Linux Micro 6.0
From an advisory covering 473 CVEs
 before 6.4.0-159998.53.1
6.4.0-159998.53.1
kernel-default-base
SUSE:Linux Micro 6.0
From an advisory covering 473 CVEs
 before 6.4.0-159998.53.1.159998.21.38
6.4.0-159998.53.1.159998.21.38
kernel-kvmsmall
SUSE:Linux Micro 6.0
From an advisory covering 473 CVEs
 before 6.4.0-159998.53.1
6.4.0-159998.53.1
kernel-source
SUSE:Linux Micro 6.0
From an advisory covering 473 CVEs
 before 6.4.0-159998.53.1
6.4.0-159998.53.1
kernel-rt
SUSE:Linux Micro 6.0
From an advisory covering 479 CVEs
 before 6.4.0-159998.53.1
6.4.0-159998.53.1
kernel-source-rt
SUSE:Linux Micro 6.0
From an advisory covering 479 CVEs
 before 6.4.0-159998.53.1
6.4.0-159998.53.1
kernel-livepatch-SLE15-SP7-RT_Update_21
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 508 CVEs
 before 1-150700.1.3.1
1-150700.1.3.1
kernel-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 508 CVEs
 before 6.4.0-150700.7.78.1
6.4.0-150700.7.78.1
kernel-source-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 508 CVEs
 before 6.4.0-150700.7.78.1
6.4.0-150700.7.78.1
kernel-syms-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 508 CVEs
 before 6.4.0-150700.7.78.1
6.4.0-150700.7.78.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1
6.4.0-150600.23.138.1
kernel-livepatch-SLE15-SP6_Update_32
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 124 CVEs
 before 1-150600.13.3.1
1-150600.13.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP6
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1
6.4.0-150600.23.138.1
kernel-64kb
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1
6.4.0-150600.23.138.1
kernel-default
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1
6.4.0-150600.23.138.1
kernel-default-base
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1.150600.12.64.1
6.4.0-150600.23.138.1.150600.12.64.1
kernel-docs
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1
6.4.0-150600.23.138.1
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1
6.4.0-150600.23.138.1
linux-azure
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2
Show 45 moreShow less
4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1
 None known
linux-aws-hwe
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1
Show 45 moreShow less
4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1
 None known
linux-azure
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 45 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71
 None known
linux-gcp
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
Show 45 moreShow less
4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1
 None known
linux-hwe
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 45 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1
 None known
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-oracle
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1
Show 45 moreShow less
4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1
 None known
linux
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 45 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107
 None known
linux-aws
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 45 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-aws-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-4.15
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102
Show 45 moreShow less
4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1
Show 45 moreShow less
5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-4.15
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92
Show 45 moreShow less
4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gcp-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 45 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-ibm-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1
Show 45 moreShow less
5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1
 None known
linux-kvm
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8
Show 45 moreShow less
4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13
Show 45 moreShow less
4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-oracle-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1
 None known
linux-raspi-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1
Show 45 moreShow less
5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1
 None known
linux-aws-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24
Show 45 moreShow less
4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93
 None known
linux-azure-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10
Show 45 moreShow less
4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80
 None known
linux-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42
Show 45 moreShow less
4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21
Show 45 moreShow less
4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.794.15.0-2075.804.15.0-2076.814.15.0-2077.83
 None known
linux-aws-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.4
 None known
linux-azure-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.2
 None known
linux-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1011.12
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.1
 None known
linux
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 45 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110
 None known
linux-aws
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5
Show 45 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.15
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1
Show 45 moreShow less
5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1
 None known
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8
Show 45 moreShow less
5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
linux-azure-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
 None known
linux-azure-5.15
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1
Show 45 moreShow less
5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1
 None known
kernel-source
openSUSE:Tumbleweed
From an advisory covering 351 CVEs
 before 7.1.7-1.1
7.1.7-1.1
dtb-aarch64
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-64kb
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-azure
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default-base
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1.160000.2.22
6.12.0-160000.38.1.160000.2.22
kernel-docs
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-kvmsmall
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-obs-build
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-obs-qa
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-rt
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-source
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-syms
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-zfcpdump
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1

History

History
RecordedChangedSources
affectedOSV
affectedOSV
affectedOSV
affectedOSV
affectedOSV
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-64320 is a critical vulnerability (CVSS 9.1) in Linux, published July 25, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.80%, the 56th percentile. Fixed in linux-lts 6.1.191-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 941 package rows, 2,268 versions, 6,177 references and the rest of 29 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 8 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open