Every CVE Search/ Get API key

CVE-2026-64422

net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes

7.1 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes

Reject invalid net.ipv4.tcp_reordering values before they reach TCP socket state. The sysctl is stored as an int but copied into the u32 tp->reordering field for new sockets, so negative writes wrap to large values.

With tcp_mtu_probing=2, the wrapped value can overflow the tcp_mtu_probe() size calculation and drive the MTU probing path into an out-of-bounds read. Route tcp_reordering writes through proc_dointvec_minmax() and require it to be at least 1. Also require tcp_max_reordering to be at least 1 so the configured maximum cannot become negative either.

When registering the table for a non-init network namespace, relocate extra2 pointers that refer into init_net.ipv4 so the tcp_reordering upper bound follows that namespace's tcp_max_reordering.

Harden tcp_mtu_probe() itself by computing size_needed as u64. This keeps the send queue and window checks from being bypassed through signed integer overflow.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
High

Exploit likelihood

0.14%Down 0.1 points since Jul 25, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.1

net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes

In the Linux kernel, the following vulnerability has been resolved:

net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes

Reject invalid net.ipv4.tcp_reordering values before they reach TCP socket state. The sysctl is stored as an int but copied into the u32 tp->reordering field for new sockets, so negative writes wrap to large values.

With tcp_mtu_probing=2, the wrapped value can overflow the tcp_mtu_probe() size calculation and drive the MTU probing path into an out-of-bounds read. Route tcp_reordering writes through proc_dointvec_minmax() and require it to be at least 1. Also require tcp_max_reordering to be at least 1 so the configured maximum cannot become negative either.

When registering the table for a non-init network namespace, relocate extra2 pointers that refer into init_net.ipv4 so the tcp_reordering upper bound follows that namespace's tcp_max_reordering.

Harden tcp_mtu_probe() itself by computing size_needed as u64. This keeps the send queue and window checks from being bypassed through signed integer overflow.

Record
CVE-2026-64422
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness
CWE-190
Updated
2026-11-02
EUVDEUVD-2026-48966 7.1

In the Linux kernel, the following vulnerability has been resolved:

net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes

Reject invalid net.ipv4.tcp_reordering values before they reach TCP socket state. The sysctl is stored as an int but copied into the u32 tp->reordering field for new sockets, so negative writes wrap to large values.

With tcp_mtu_probing=2, the wrapped value can overflow the tcp_mtu_probe() size calculation and drive the MTU probing path into an out-of-bounds read. Route tcp_reordering writes through proc_dointvec_minmax() and require it to be at least 1. Also require tcp_max_reordering to be at least 1 so the configured maximum cannot become negative either.

When registering the table for a non-init network namespace, relocate extra2 pointers that refer into init_net.ipv4 so the tcp_reordering upper bound follows that namespace's tcp_max_reordering.

Harden tcp_mtu_probe() itself by computing size_needed as u64. This keeps the send queue and window checks from being bypassed through signed integer overflow.

Record
EUVD-2026-48966
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-gwmg-q555-3325 7.1

In the Linux kernel, the following vulnerability has been resolved: net: ipv4: bound TCP...

In the Linux kernel, the following vulnerability has been resolved:

net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes

Reject invalid net.ipv4.tcp_reordering values before they reach TCP socket state. The sysctl is stored as an int but copied into the u32 tp->reordering field for new sockets, so negative writes wrap to large values.

With tcp_mtu_probing=2, the wrapped value can overflow the tcp_mtu_probe() size calculation and drive the MTU probing path into an out-of-bounds read. Route tcp_reordering writes through proc_dointvec_minmax() and require it to be at least 1. Also require tcp_max_reordering to be at least 1 so the configured maximum cannot become negative either.

When registering the table for a non-init network namespace, relocate extra2 pointers that refer into init_net.ipv4 so the tcp_reordering upper bound follows that namespace's tcp_max_reordering.

Harden tcp_mtu_probe() itself by computing size_needed as u64. This keeps the send queue and window checks from being bypassed through signed integer overflow.

Record
GHSA-gwmg-q555-3325
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness
CWE-190
Updated
2026-11-02
NVD 7.1

In the Linux kernel, the following vulnerability has been resolved:

net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes

Reject invalid net.ipv4.tcp_reordering values before they reach TCP socket state. The sysctl is stored as an int but copied into the u32 tp->reordering field for new sockets, so negative writes wrap to large values.

With tcp_mtu_probing=2, the wrapped value can overflow the tcp_mtu_probe() size calculation and drive the MTU probing path into an out-of-bounds read. Route tcp_reordering writes through proc_dointvec_minmax() and require it to be at least 1. Also require tcp_max_reordering to be at least 1 so the configured maximum cannot become negative either.

When registering the table for a non-init network namespace, relocate extra2 pointers that refer into init_net.ipv4 so the tcp_reordering upper bound follows that namespace's tcp_max_reordering.

Harden tcp_mtu_probe() itself by computing size_needed as u64. This keeps the send queue and window checks from being bypassed through signed integer overflow.

Record
CVE-2026-64422
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness
CWE-190
Updated
2026-11-02
OSVBELL-CVE-2026-64422 7.1
Record
BELL-CVE-2026-64422
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSV 7.1

net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes

In the Linux kernel, the following vulnerability has been resolved:

net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes

Reject invalid net.ipv4.tcp_reordering values before they reach TCP socket state. The sysctl is stored as an int but copied into the u32 tp->reordering field for new sockets, so negative writes wrap to large values.

With tcp_mtu_probing=2, the wrapped value can overflow the tcp_mtu_probe() size calculation and drive the MTU probing path into an out-of-bounds read. Route tcp_reordering writes through proc_dointvec_minmax() and require it to be at least 1. Also require tcp_max_reordering to be at least 1 so the configured maximum cannot become negative either.

When registering the table for a non-init network namespace, relocate extra2 pointers that refer into init_net.ipv4 so the tcp_reordering upper bound follows that namespace's tcp_max_reordering.

Harden tcp_mtu_probe() itself by computing size_needed as u64. This keeps the send queue and window checks from being bypassed through signed integer overflow.

Record
CVE-2026-64422
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-04
Show 48 moreShow less
OSVDEBIAN-CVE-2026-64422 7.1

In the Linux kernel, the following vulnerability has been resolved: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes Reject invalid net.ipv4.tcp_reordering values before they reach TCP socket state. The sysctl is stored as an int but copied into the u32 tp->reordering field for new sockets, so negative writes wrap to large values. With tcp_mtu_probing=2, the wrapped value can overflow the tcp_mtu_probe() size calculation and drive the MTU probing path into an out-of-bounds read. Route tcp_reordering writes through proc_dointvec_minmax() and require it to be at least 1. Also require tcp_max_reordering to be at least 1 so the configured maximum cannot become negative either. When registering the table for a non-init network namespace, relocate extra2 pointers that refer into init_net.ipv4 so the tcp_reordering upper bound follows that namespace's tcp_max_reordering. Harden tcp_mtu_probe() itself by computing size_needed as u64. This keeps the send queue and window checks from being bypassed through signed integer overflow.

Record
DEBIAN-CVE-2026-64422
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-3532 9.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

uaccess: fix integer overflow on access_ok()

Three architectures check the end of a user access against the address limit without taking a possible overflow into account. Passing a negative length or another overflow in here returns success when it should not.

Use the most common correct implementation here, which optimizes for a constant 'size' argument, and turns the common case into a single comparison.(CVE-2022-49289)

In the Linux kernel, the following vulnerability has been resolved:

parisc: Fix double SIGFPE crash

Camm noticed that on parisc a SIGFPE exception will crash an application with a second SIGFPE in the signal handler. Dave analyzed it, and it happens because glibc uses a double-word floating-point store to atomically update function descriptors. As a result of lazy binding, we hit a floating-point store in fpe_func almost immediately.

When the T bit is set, an assist exception trap occurs when when the co-processor encounters any floating-point instruction except for a double store of register %fr0. The latter cancels all pending traps. Let's fix this by clearing the Trap (T) bit in the FP status register before returning to the signal handler in userspace.

The issue can be reproduced with this test program:

root@parisc:~# cat fpe.c

static void fpe_func(int sig, siginfo_t *i, void *v) { sigset_t set; sigemptyset(&set); sigaddset(&set, SIGFPE); sigprocmask(SIG_UNBLOCK, &set, NULL); printf("GOT signal %d with si_code %ld\n", sig, i->si_code); }

int main() { struct sigaction action = { .sa_sigaction = fpe_func, .sa_flags = SA_RESTART|SA_SIGINFO }; sigaction(SIGFPE, &action, 0); feenableexcept(FE_OVERFLOW); return printf("%lf\n",1.7976931348623158E308*1.7976931348623158E308); }

root@parisc:# gcc fpe.c -lm root@parisc:# ./a.out Floating point exception

root@parisc:~# strace -f ./a.out execve("./a.out", ["./a.out"], 0xf9ac7034 /* 20 vars /) = 0 getrlimit(RLIMIT_STACK, {rlim_cur=81921024, rlim_max=RLIM_INFINITY}) = 0 ... rt_sigaction(SIGFPE, {sa_handler=0x1110a, sa_mask=[], sa_flags=SA_RESTART|SA_SIGINFO}, NULL, 8) = 0 --- SIGFPE {si_signo=SIGFPE, si_code=FPE_FLTOVF, si_addr=0x1078f} --- --- SIGFPE {si_signo=SIGFPE, si_code=FPE_FLTOVF, si_addr=0xf8f21237} --- +++ killed by SIGFPE +++ Floating point exception(CVE-2025-37991)

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked()

kcalloc() may fail. When WS is non-zero and allocation fails, ectx.ws remains NULL while ectx.ws_size is set, leading to a potential NULL pointer dereference in atom_get_src_int() when accessing WS entries.

Return -ENOMEM on allocation failure to avoid the NULL dereference.(CVE-2025-68190)

In the Linux kernel, the following vulnerability has been resolved:

arm64/fpsimd: signal: Fix restoration of SVE context

When SME is supported, Restoring SVE signal context can go wrong in a few ways, including placing the task into an invalid state where the kernel may read from out-of-bounds memory (and may potentially take a fatal fault) and/or may kill the task with a SIGKILL.

(1) Restoring a context with SVE_SIG_FLAG_SM set can place the task into an invalid state where SVCR.SM is set (and sve_state is non-NULL) but TIF_SME is clear, consequently resuting in out-of-bounds memory reads and/or killing the task with SIGKILL.

This can only occur in unusual (but legitimate) cases where the SVE
signal context has either been modified by userspace or was saved in
the context of another task (e.g. as with CRIU), as otherwise the
presence of an SVE signal context with SVE_SIG_FLAG_SM…
Record
OESA-2026-3532
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-64422 7.1

In the Linux kernel, the following vulnerability has been resolved: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes Reject invalid net.ipv4.tcp_reordering values before they reach TCP socket state. The sysctl is stored as an int but copied into the u32 tp->reordering field for new sockets, so negative writes wrap to large values. With tcp_mtu_probing=2, the wrapped value can overflow the tcp_mtu_probe() size calculation and drive the MTU probing path into an out-of-bounds read. Route tcp_reordering writes through proc_dointvec_minmax() and require it to be at least 1. Also require tcp_max_reordering to be at least 1 so the configured maximum cannot become negative either. When registering the table for a non-init network namespace, relocate extra2 pointers that refer into init_net.ipv4 so the tcp_reordering upper bound follows that namespace's tcp_max_reordering. Harden tcp_mtu_probe() itself by computing size_needed as u64. This keeps the send queue and window checks from being bypassed through signed integer overflow.

Record
UBUNTU-CVE-2026-64422
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-06
OSVAZL-93581 No score

CVE-2026-64422 affecting package kernel for versions less than 6.6.145.2-1

In the Linux kernel, the following vulnerability has been resolved:

net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes

Reject invalid net.ipv4.tcp_reordering values before they reach TCP socket state. The sysctl is stored as an int but copied into the u32 tp->reordering field for new sockets, so negative writes wrap to large values.

With tcp_mtu_probing=2, the wrapped value can overflow the tcp_mtu_probe() size calculation and drive the MTU probing path into an out-of-bounds read. Route tcp_reordering writes through proc_dointvec_minmax() and require it to be at least 1. Also require tcp_max_reordering to be at least 1 so the configured maximum cannot become negative either.

When registering the table for a non-init network namespace, relocate extra2 pointers that refer into init_net.ipv4 so the tcp_reordering upper bound follows that namespace's tcp_max_reordering.

Harden tcp_mtu_probe() itself by computing size_needed as u64. This keeps the send queue and window checks from being bypassed through signed integer overflow.

Record
AZL-93581
Updated
2026-11-02
OSVCLSA-2026-1789037015 No score

kernel: Fix of 51 CVEs

  • net: openvswitch: fix skb leak on flow key update failure during ct {CVE-2026-74464}
  • can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error {CVE-2026-74456}
  • wifi: mwifiex: fix permanently busy scans after multiple roam iterations {CVE-2026-68469}
  • drm/amdgpu/gfx8: drop unecessary BUG_ON() {CVE-2026-68430}
  • sctp: auth: verify auth requirement when auth_chunk is NULL {CVE-2026-68300}
  • cdrom: fix stack out-of-bounds read in CDROMVOLCTRL {CVE-2026-68184}
  • wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read {CVE-2026-68351}
  • wifi: carl9170: fix buffer overflow in rx_stream failover path {CVE-2026-68349}
  • wifi: carl9170: fix OOB read from off-by-two in TX status handler {CVE-2026-68350}
  • net: sit: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72061}
  • net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72055}
  • net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72054}
  • net: ipip: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72053}
  • net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72051}
  • net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-63829}
  • usb: free iso schedules on failed submit {CVE-2026-64348}
  • smb: client: restrict implied bcc[0] exemption to responses without data area {CVE-2026-64448}
  • net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422}
  • netfilter: ebtables: terminate table name before find_table_lock() {CVE-2026-64411}
  • netfilter: ebtables: zero chainstack array {CVE-2026-64413}
  • USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}
  • USB: iowarrior: fix use-after-free on disconnect race {CVE-2026-64341}
  • udf: validate VAT header length against the VAT inode size {CVE-2026-64323}
  • udf: validate sparing table length as an entry count, not a byte count {CVE-2026-64322}
  • can: bcm: track a single source interface for ANYDEV timeout/throttle ops {CVE-2026-72115}
  • can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler() {CVE-2026-72117}
  • can: bcm: fix stale rx/tx ops after device removal {CVE-2026-72116}
  • can: bcm: add missing device refcount for CAN filter removal {CVE-2026-72113}
  • scsi: libiscsi: Move ehwait initialization to iscsi_session_setup() {CVE-2021-47328}
  • sctp: validate cookie AUTH state before use {CVE-2026-74752}
  • drm/amdgpu: reject oversized IBs with per-ring packet limits {CVE-2026-80576}
  • libceph: Avoid using invalid osd indices from primary_temp {CVE-2026-80558}
  • can: bcm: restore op->flags assignment lost in the bcm_tx_lock backport {CVE-2025-38004}
  • can: bcm: fix CAN frame rx/tx statistics {CVE-2026-72118}
  • can: bcm: add locking when updating filter and timer values {CVE-2026-72121}
  • can: bcm: fix out-of-bounds frame read introduced by the bcm_tx_lock backport {CVE-2025-38004}
  • mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() {CVE-2026-72308}
  • can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure {CVE-2026-72122}
  • can: bcm: fix warning in bcm_connect/proc_register {CVE-2026-72113}
  • ipv4: fix use-after-free in fib_nhc_update_mtu() {CVE-2026-74656}
  • perf/core: Fix group leader use-after-free after sibling detach {CVE-2026-74637}
  • sctp: fix use-after-free of cached ASCONF chunk {CVE-2026-74587}
  • sctp: clear control chunk transport if it is being removed {CVE-2026-74688}
  • ALSA: usb-audio: fix OOB write on Type II inbound URBs {CVE-2026-74682}
  • ALSA: usx2y: bound the hwdep mmap fault offset {CVE-2026-74641}
  • enic: fix tx_hang_reset use-after-free on device removal {CVE-2026-74725}
  • udp: fix potential use-after-free in tunnel segmentation {CVE-2026-74705}
  • ip6_tunnel: clear skb2->cb[] in ip6ip6_err() {CVE-2026-74597}
  • ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}
  • vhost: reset the vring metadata cache on vring reconfiguration {CVE-2026-74580} -…
Record
CLSA-2026-1789037015
Updated
2026-11-02
OSVCLSA-2026-1789039259 No score

kernel: Fix of 51 CVEs

  • net: openvswitch: fix skb leak on flow key update failure during ct {CVE-2026-74464}
  • can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error {CVE-2026-74456}
  • wifi: mwifiex: fix permanently busy scans after multiple roam iterations {CVE-2026-68469}
  • drm/amdgpu/gfx8: drop unecessary BUG_ON() {CVE-2026-68430}
  • sctp: auth: verify auth requirement when auth_chunk is NULL {CVE-2026-68300}
  • cdrom: fix stack out-of-bounds read in CDROMVOLCTRL {CVE-2026-68184}
  • wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read {CVE-2026-68351}
  • wifi: carl9170: fix buffer overflow in rx_stream failover path {CVE-2026-68349}
  • wifi: carl9170: fix OOB read from off-by-two in TX status handler {CVE-2026-68350}
  • net: sit: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72061}
  • net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72055}
  • net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72054}
  • net: ipip: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72053}
  • net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72051}
  • net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-63829}
  • usb: free iso schedules on failed submit {CVE-2026-64348}
  • smb: client: restrict implied bcc[0] exemption to responses without data area {CVE-2026-64448}
  • net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422}
  • netfilter: ebtables: terminate table name before find_table_lock() {CVE-2026-64411}
  • netfilter: ebtables: zero chainstack array {CVE-2026-64413}
  • USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}
  • USB: iowarrior: fix use-after-free on disconnect race {CVE-2026-64341}
  • udf: validate VAT header length against the VAT inode size {CVE-2026-64323}
  • udf: validate sparing table length as an entry count, not a byte count {CVE-2026-64322}
  • can: bcm: track a single source interface for ANYDEV timeout/throttle ops {CVE-2026-72115}
  • can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler() {CVE-2026-72117}
  • can: bcm: fix stale rx/tx ops after device removal {CVE-2026-72116}
  • can: bcm: add missing device refcount for CAN filter removal {CVE-2026-72113}
  • scsi: libiscsi: Move ehwait initialization to iscsi_session_setup() {CVE-2021-47328}
  • sctp: validate cookie AUTH state before use {CVE-2026-74752}
  • drm/amdgpu: reject oversized IBs with per-ring packet limits {CVE-2026-80576}
  • libceph: Avoid using invalid osd indices from primary_temp {CVE-2026-80558}
  • can: bcm: restore op->flags assignment lost in the bcm_tx_lock backport {CVE-2025-38004}
  • can: bcm: fix CAN frame rx/tx statistics {CVE-2026-72118}
  • can: bcm: add locking when updating filter and timer values {CVE-2026-72121}
  • can: bcm: fix out-of-bounds frame read introduced by the bcm_tx_lock backport {CVE-2025-38004}
  • mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() {CVE-2026-72308}
  • can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure {CVE-2026-72122}
  • can: bcm: fix warning in bcm_connect/proc_register {CVE-2026-72113}
  • ipv4: fix use-after-free in fib_nhc_update_mtu() {CVE-2026-74656}
  • perf/core: Fix group leader use-after-free after sibling detach {CVE-2026-74637}
  • sctp: fix use-after-free of cached ASCONF chunk {CVE-2026-74587}
  • sctp: clear control chunk transport if it is being removed {CVE-2026-74688}
  • ALSA: usb-audio: fix OOB write on Type II inbound URBs {CVE-2026-74682}
  • ALSA: usx2y: bound the hwdep mmap fault offset {CVE-2026-74641}
  • enic: fix tx_hang_reset use-after-free on device removal {CVE-2026-74725}
  • udp: fix potential use-after-free in tunnel segmentation {CVE-2026-74705}
  • ip6_tunnel: clear skb2->cb[] in ip6ip6_err() {CVE-2026-74597}
  • ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}
  • vhost: reset the vring metadata cache on vring reconfiguration {CVE-2026-74580} -…
Record
CLSA-2026-1789039259
Updated
2026-11-02
OSVCLSA-2026-1789039867 No score

kernel: Fix of 51 CVEs

  • net: openvswitch: fix skb leak on flow key update failure during ct {CVE-2026-74464}
  • can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error {CVE-2026-74456}
  • wifi: mwifiex: fix permanently busy scans after multiple roam iterations {CVE-2026-68469}
  • drm/amdgpu/gfx8: drop unecessary BUG_ON() {CVE-2026-68430}
  • sctp: auth: verify auth requirement when auth_chunk is NULL {CVE-2026-68300}
  • cdrom: fix stack out-of-bounds read in CDROMVOLCTRL {CVE-2026-68184}
  • wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read {CVE-2026-68351}
  • wifi: carl9170: fix buffer overflow in rx_stream failover path {CVE-2026-68349}
  • wifi: carl9170: fix OOB read from off-by-two in TX status handler {CVE-2026-68350}
  • net: sit: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72061}
  • net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72055}
  • net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72054}
  • net: ipip: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72053}
  • net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72051}
  • net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-63829}
  • usb: free iso schedules on failed submit {CVE-2026-64348}
  • smb: client: restrict implied bcc[0] exemption to responses without data area {CVE-2026-64448}
  • net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422}
  • netfilter: ebtables: terminate table name before find_table_lock() {CVE-2026-64411}
  • netfilter: ebtables: zero chainstack array {CVE-2026-64413}
  • USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}
  • USB: iowarrior: fix use-after-free on disconnect race {CVE-2026-64341}
  • udf: validate VAT header length against the VAT inode size {CVE-2026-64323}
  • udf: validate sparing table length as an entry count, not a byte count {CVE-2026-64322}
  • can: bcm: track a single source interface for ANYDEV timeout/throttle ops {CVE-2026-72115}
  • can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler() {CVE-2026-72117}
  • can: bcm: fix stale rx/tx ops after device removal {CVE-2026-72116}
  • can: bcm: add missing device refcount for CAN filter removal {CVE-2026-72113}
  • scsi: libiscsi: Move ehwait initialization to iscsi_session_setup() {CVE-2021-47328}
  • sctp: validate cookie AUTH state before use {CVE-2026-74752}
  • drm/amdgpu: reject oversized IBs with per-ring packet limits {CVE-2026-80576}
  • libceph: Avoid using invalid osd indices from primary_temp {CVE-2026-80558}
  • can: bcm: restore op->flags assignment lost in the bcm_tx_lock backport {CVE-2025-38004}
  • can: bcm: fix CAN frame rx/tx statistics {CVE-2026-72118}
  • can: bcm: add locking when updating filter and timer values {CVE-2026-72121}
  • can: bcm: fix out-of-bounds frame read introduced by the bcm_tx_lock backport {CVE-2025-38004}
  • mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() {CVE-2026-72308}
  • can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure {CVE-2026-72122}
  • can: bcm: fix warning in bcm_connect/proc_register {CVE-2026-72113}
  • ipv4: fix use-after-free in fib_nhc_update_mtu() {CVE-2026-74656}
  • perf/core: Fix group leader use-after-free after sibling detach {CVE-2026-74637}
  • sctp: fix use-after-free of cached ASCONF chunk {CVE-2026-74587}
  • sctp: clear control chunk transport if it is being removed {CVE-2026-74688}
  • ALSA: usb-audio: fix OOB write on Type II inbound URBs {CVE-2026-74682}
  • ALSA: usx2y: bound the hwdep mmap fault offset {CVE-2026-74641}
  • enic: fix tx_hang_reset use-after-free on device removal {CVE-2026-74725}
  • udp: fix potential use-after-free in tunnel segmentation {CVE-2026-74705}
  • ip6_tunnel: clear skb2->cb[] in ip6ip6_err() {CVE-2026-74597}
  • ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}
  • vhost: reset the vring metadata cache on vring reconfiguration {CVE-2026-74580} -…
Record
CLSA-2026-1789039867
Updated
2026-11-02
OSVCLSA-2026-1789898700 No score

kernel: Fix of 163 CVEs

  • drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON() {CVE-2026-68251}
  • amd/amdkfd: sync all devices to wait all processes being evicted {CVE-2024-36949}
  • Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted {CVE-2024-36909}
  • Drivers: hv: vmbus: Track decrypted status in vmbus_gpadl {CVE-2024-36912}
  • xfs: save ailp before dropping the AIL lock in push callbacks {CVE-2026-31454}
  • net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak {CVE-2026-43041}
  • netfilter: nf_conntrack: destroy stale expectfn expectations on unregister {CVE-2026-53349}
  • cifs: avoid NULL pointer dereference in dbg call {CVE-2025-37844}
  • fs/notify: call exportfs_encode_fid with s_umount {CVE-2025-40237}
  • cifs: fix potential oops in cifs_oplock_break {CVE-2023-54258}
  • pstore/ram: fix buffer overflow in persistent_ram_save_old() {CVE-2026-46253}
  • Bluetooth: ISO: fix iso_conn related locking and validity issues {CVE-2023-54164}
  • netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets {CVE-2026-45873}
  • ext4: always drain queued discard work in ext4_mb_release() {CVE-2026-43065}
  • ipvs: Defer ip_vs_ftp unregister during netns cleanup {CVE-2025-40018}
  • Bluetooth: MGMT: Fix memory leak in set_ssp_complete {CVE-2026-23151}
  • sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto {CVE-2025-40281}
  • fscache: Use wait_on_bit() to wait for the freeing of relinquished volume {CVE-2023-52982}
  • libceph: prevent potential out-of-bounds reads in process_message_header() {CVE-2026-43406}
  • netfilter: nf_tables: reject immediate NF_QUEUE verdict {CVE-2026-43024}
  • ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() {CVE-2025-68261}
  • bpf, sockmap: Fix af_unix iter deadlock {CVE-2026-53035}
  • sctp: stream: fully roll back denied add-stream state {CVE-2026-52929}
  • netfilter: xt_CT: drop pending enqueued packets on template removal {CVE-2026-23391}
  • netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() {CVE-2026-23457}
  • libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() {CVE-2026-43407}
  • af_unix: read UNIX_DIAG_VFS data under unix_state_lock {CVE-2026-31673}
  • jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted {CVE-2025-68337}
  • Bluetooth: Fix NULL pointer deference on eir_get_service_data {CVE-2025-38304}
  • net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption {CVE-2026-31533}
  • fsnotify: do not generate ACCESS/MODIFY events on child for special files {CVE-2025-68788}
  • isofs: validate Rock Ridge CE continuation extent against volume size {CVE-2026-46303}
  • net: strparser: fix skb_head leak in strp_abort_strp() {CVE-2026-46102}
  • sctp: fix uninit-value in __sctp_rcv_asconf_lookup() {CVE-2026-53225}
  • xfs: don't swallow dquot recovery verification errors {CVE-2026-80529}
  • xfs: dquot recovery does not validate the recovered dquot {CVE-2026-80529}
  • bpf: tcp: fix double sock release on batch realloc {CVE-2026-64575}
  • bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch() {CVE-2026-74714}
  • bpf: tcp: Avoid socket skips and repeats during iteration {CVE-2026-74714}
  • bpf: tcp: Use bpf_tcp_iter_batch_item for bpf_tcp_iter_state batch items {CVE-2026-74714}
  • bpf: tcp: Get rid of st_bucket_done {CVE-2026-74714}
  • bpf: tcp: Make sure iter->batch always contains a full bucket snapshot {CVE-2026-64575}
  • bpf: tcp: Make mem flags configurable through bpf_iter_tcp_realloc_batch {CVE-2026-74714}
  • USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343}
  • NFS: Decrement refcounts if allocating nfs_free_stateid_data fails {CVE-2026-74730}
  • NFS: Pin the 'struct nfs_server' during a FREE_STATEID call {CVE-2026-74730}
  • net/atm: fix slab-out-of-bounds read in vcc_setsockopt() {CVE-2026-74689}
  • net: Make copy_safe_from_sockptr() match documentation {CVE-2026-74689}
  • net: add copy_safe_from_sockptr() helper {CVE-2026-74689}
  • xfs: close crash window in attr dabtree…
Record
CLSA-2026-1789898700
Updated
2026-11-02
OSVCLSA-2026-1789958474 No score

Fix of 167 CVEs

  • CVE-2025-39826
    • net: rose: convert 'use' field to refcount_t {CVE-2025-39826}
  • CVE-2025-40146
    • blk-mq: fix potential deadlock while nr_requests grown {CVE-2025-40146}
  • CVE-2024-53216
    • nfsd: release svc_expkey/svc_export with rcu_work {CVE-2024-53216}
  • CVE-2026-89778
    • isofs: fix out-of-bounds page array access on empty zisofs block {CVE-2026-89778}
  • CVE-2026-23050
    • pNFS: Fix a deadlock when returning a delegation during open() {CVE-2026-23050}
  • CVE-2025-68796
    • f2fs: fix to avoid updating zero-sized extent in extent cache {CVE-2025-68796}
  • CVE-2025-68330
    • iio: accel: bmc150: Fix irq assumption regression {CVE-2025-68330}
  • CVE-2025-40333
    • f2fs: fix infinite loop in __insert_extent_tree() {CVE-2025-40333}
  • CVE-2025-40160
    • xen/events: Return -EEXIST for bound VIRQs {CVE-2025-40160}
  • CVE-2023-54047
    • drm/rockchip: dw_hdmi: cleanup drm encoder during unbind {CVE-2023-54047}
  • CVE-2025-68190
    • drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() {CVE-2025-68190}
  • CVE-2025-68188
    • tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() {CVE-2025-68188}
  • CVE-2026-89786
    • ext4: fix out-of-bounds read in ext4_read_inline_dir() {CVE-2026-89786}
  • CVE-2022-50764
    • ipv6/sit: use DEV_STATS_INC() to avoid data-races {CVE-2022-50764}
  • CVE-2026-80785
    • fbdev: serialize mode sysfs access with lock_fb_info() {CVE-2026-80785}
  • CVE-2026-80788
    • nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations {CVE-2026-80788}
  • CVE-2026-80747
    • drm/amdkfd: Add bounds check for CRAT subtype length {CVE-2026-80747}
  • CVE-2026-80907
    • drm/amdgpu: Fix UVD dpb min size calculation for H264 {CVE-2026-80907}
  • CVE-2026-80908
    • drm/amdgpu: Reject UVD message with dimensions above 4096 {CVE-2026-80908}
  • CVE-2026-80812
    • ALSA: dummy: Check card index validity at probe {CVE-2026-80812}
  • CVE-2026-80948
    • wifi: iwlwifi: dvm: fix memory leak in iwl_op_mode_dvm_start() {CVE-2026-80948}
  • CVE-2025-40137
    • f2fs: fix to truncate first page in error path of f2fs_truncate() {CVE-2025-40137}
  • CVE-2023-54150
    • drm/amd: Fix an out of bounds error in BIOS parser {CVE-2023-54150}
  • CVE-2026-89784
    • SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 {CVE-2026-89784}
  • CVE-2026-89783
    • xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full {CVE-2026-89783}
  • CVE-2026-89780
    • net: qualcomm: rmnet: restore skb->dev on deaggregated frames {CVE-2026-89780}
  • CVE-2026-89777
    • vfio/pci: clear vdev->msi_perm after freeing it on init failure {CVE-2026-89777}
  • CVE-2026-89789
    • gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free {CVE-2026-89789}
  • CVE-2025-68797
    • char: applicom: fix NULL pointer dereference in ac_ioctl {CVE-2025-68797}
  • CVE-2025-68767
    • hfsplus: Verify inode mode when loading from disk {CVE-2025-68767}
  • CVE-2026-63961
    • usb: typec: altmodes/displayport: validate count before reading Status Update VDO {CVE-2026-63961}
  • CVE-2026-63904
    • usb: usbtmc: check URB actual_length for interrupt-IN notifications {CVE-2026-63904}
  • CVE-2022-50864
    • nilfs2: fix shift-out-of-bounds due to too large exponent of block size {CVE-2022-50864}
  • CVE-2025-68771
    • ocfs2: fix kernel BUG in ocfs2_find_victim_chain {CVE-2025-68771}
  • CVE-2025-68750
    • usb: potential integer overflow in usbg_make_tpg() {CVE-2025-68750}
  • CVE-2026-80909
    • drm/amdgpu: Reject UVD message with invalid number of h265 refs {CVE-2026-80909}
  • CVE-2026-74402
    • crypto: atmel-sha204a - fix blocking and non-blocking rng logic {CVE-2026-74402} *…
Record
CLSA-2026-1789958474
Updated
2026-11-02
OSVCLSA-2026-1791132071 No score

Fix of 159 CVEs

  • CVE-2026-64375
    • proc: protect ptrace_may_access() with exec_update_lock (FD links) {CVE-2026-64375}
    • exec: Add exec_update_mutex to replace cred_guard_mutex {CVE-2026-64375}
  • CVE-2026-53266
    • netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
  • CVE-2025-39964
    • crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
  • CVE-2026-90413
    • IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413}
  • CVE-2026-53062
    • dm cache policy smq: test e->allocated under the policy lock {CVE-2026-53062}
    • dm cache policy smq: fix missing locks in invalidating cache blocks {CVE-2026-53062}
  • CVE-2026-64237
    • Input: elan_i2c - release the firmware on the short-file path {CVE-2026-64237}
    • Input: elan_i2c - validate firmware size before use {CVE-2026-64237}
  • CVE-2026-64109
    • af_unix: fix the UAF read of tail->len without losing the wakeup condition {CVE-2026-64109}
    • af_unix: Fix UAF read of tail->len in unix_stream_data_wait() {CVE-2026-64109}
  • CVE-2025-38512
    • wifi: prevent A-MSDU attacks in mesh networks {CVE-2025-38512}
  • CVE-2025-38117
    • Bluetooth: MGMT: Protect mgmt_pending list with its own lock {CVE-2025-38117}
  • CVE-2026-22980
    • nfsd: provide locking for v4_end_grace {CVE-2026-22980}
  • CVE-2023-53254
    • cacheinfo: Fix shared_cpu_map to handle shared caches at different levels {CVE-2023-53254}
  • CVE-2025-37885
    • KVM: x86: Reset IRTE to host control if new route isn't postable {CVE-2025-37885}
  • CVE-2026-23191
    • ALSA: aloop: Fix racy access at PCM trigger {CVE-2026-23191}
  • CVE-2025-37879
    • 9p/net: fix improper handling of bogus negative read/write replies {CVE-2025-37879}
  • CVE-2023-53039
    • HID: intel-ish-hid: ipc: Fix potential use-after-free in work function {CVE-2023-53039}
  • CVE-2019-12456
    • scsi: mpt3sas_ctl: fix double-fetch bug in _ctl_ioctl_main() {CVE-2019-12456}
  • CVE-2024-46812
    • drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration {CVE-2024-46812}
  • CVE-2026-31761
    • iio: gyro: mpu3050: Move iio_device_register() to correct location {CVE-2026-31761}
  • CVE-2026-53120
    • PCI: RCU-protect driver_override against pci_match_device() UAF {CVE-2026-53120}
  • CVE-2026-31598
    • ocfs2: fix possible deadlock between unlink and dio_end_io_write {CVE-2026-31598}
  • CVE-2026-43075
    • ocfs2: fix out-of-bounds write in ocfs2_write_end_inline {CVE-2026-43075}
  • CVE-2024-41013
    • xfs: don't walk off the end of a directory data block {CVE-2024-41013}
  • CVE-2026-31527
    • driver core: platform: RCU-protect driver_override against match() UAF {CVE-2026-31527}
  • CVE-2022-48744
    • net/mlx5e: Avoid field-overflowing memcpy() {CVE-2022-48744}
  • CVE-2023-53510
    • scsi: ufs: core: Fix handling of lrbp->cmd {CVE-2023-53510}
  • CVE-2026-23268
    • apparmor: fix unprivileged local user can do privileged policy management {CVE-2026-23268}
  • CVE-2026-23269
    • apparmor: validate DFA start states are in bounds in unpack_pdb {CVE-2026-23269}
  • CVE-2025-21812
    • ax25: rcu protect dev->ax25_ptr {CVE-2025-21812}
  • CVE-2026-46266
    • inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266}
  • CVE-2026-53228
    • ipv6: sit: reload inner IPv6 header after GSO offloads {CVE-2026-53228}
  • CVE-2026-53355
    • net: rds: clear i_sends on setup unwind {CVE-2026-53355}
  • CVE-2026-45970
    • bonding: alb: fix UAF in rlb_arp_recv during bond up/down {CVE-2026-45970}
  • CVE-2023-52922
    • can: bcm: Fix UAF in bcm_proc_show() {CVE-2023-52922}
  • CVE-2026-52920
    • netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920} *…
Record
CLSA-2026-1791132071
Updated
2026-11-02
OSVCLSA-2026-1791132078 No score

Fix of 160 CVEs

  • CVE-2026-64375
    • proc: protect ptrace_may_access() with exec_update_lock (FD links) {CVE-2026-64375}
    • exec: Add exec_update_mutex to replace cred_guard_mutex {CVE-2026-64375}
  • CVE-2026-53266
    • netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
  • CVE-2025-39964
    • crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
  • CVE-2026-90413
    • IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413}
  • CVE-2026-53062
    • dm cache policy smq: test e->allocated under the policy lock {CVE-2026-53062}
    • dm cache policy smq: fix missing locks in invalidating cache blocks {CVE-2026-53062}
  • CVE-2026-64237
    • Input: elan_i2c - release the firmware on the short-file path {CVE-2026-64237}
    • Input: elan_i2c - validate firmware size before use {CVE-2026-64237}
  • CVE-2026-64109
    • af_unix: fix the UAF read of tail->len without losing the wakeup condition {CVE-2026-64109}
    • af_unix: Fix UAF read of tail->len in unix_stream_data_wait() {CVE-2026-64109}
  • CVE-2025-38512
    • wifi: prevent A-MSDU attacks in mesh networks {CVE-2025-38512}
  • CVE-2025-38117
    • Bluetooth: MGMT: Protect mgmt_pending list with its own lock {CVE-2025-38117}
  • CVE-2026-22980
    • nfsd: provide locking for v4_end_grace {CVE-2026-22980}
  • CVE-2023-53254
    • cacheinfo: Fix shared_cpu_map to handle shared caches at different levels {CVE-2023-53254}
  • CVE-2025-37885
    • KVM: x86: Reset IRTE to host control if new route isn't postable {CVE-2025-37885}
  • CVE-2026-23191
    • ALSA: aloop: Fix racy access at PCM trigger {CVE-2026-23191}
  • CVE-2025-37879
    • 9p/net: fix improper handling of bogus negative read/write replies {CVE-2025-37879}
  • CVE-2023-53039
    • HID: intel-ish-hid: ipc: Fix potential use-after-free in work function {CVE-2023-53039}
  • CVE-2019-12456
    • scsi: mpt3sas_ctl: fix double-fetch bug in _ctl_ioctl_main() {CVE-2019-12456}
  • CVE-2024-46812
    • drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration {CVE-2024-46812}
  • CVE-2026-31761
    • iio: gyro: mpu3050: Move iio_device_register() to correct location {CVE-2026-31761}
  • CVE-2026-53120
    • PCI: RCU-protect driver_override against pci_match_device() UAF {CVE-2026-53120}
  • CVE-2026-31598
    • ocfs2: fix possible deadlock between unlink and dio_end_io_write {CVE-2026-31598}
  • CVE-2026-43075
    • ocfs2: fix out-of-bounds write in ocfs2_write_end_inline {CVE-2026-43075}
  • CVE-2024-41013
    • xfs: don't walk off the end of a directory data block {CVE-2024-41013}
  • CVE-2026-31527
    • driver core: platform: RCU-protect driver_override against match() UAF {CVE-2026-31527}
  • CVE-2022-48744
    • net/mlx5e: Avoid field-overflowing memcpy() {CVE-2022-48744}
  • CVE-2023-53510
    • scsi: ufs: core: Fix handling of lrbp->cmd {CVE-2023-53510}
  • CVE-2026-23268
    • apparmor: fix unprivileged local user can do privileged policy management {CVE-2026-23268}
  • CVE-2026-23269
    • apparmor: validate DFA start states are in bounds in unpack_pdb {CVE-2026-23269}
  • CVE-2025-21812
    • ax25: rcu protect dev->ax25_ptr {CVE-2025-21812}
  • CVE-2026-46266
    • inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266}
  • CVE-2026-53228
    • ipv6: sit: reload inner IPv6 header after GSO offloads {CVE-2026-53228}
  • CVE-2026-53355
    • net: rds: clear i_sends on setup unwind {CVE-2026-53355}
  • CVE-2026-45970
    • bonding: alb: fix UAF in rlb_arp_recv during bond up/down {CVE-2026-45970}
  • CVE-2023-52922
    • can: bcm: Fix UAF in bcm_proc_show() {CVE-2023-52922}
  • CVE-2026-52920
    • netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920} *…
Record
CLSA-2026-1791132078
Updated
2026-11-02
OSVCLSA-2026-1791800936 No score

kernel: Fix of 191 CVEs

  • drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check {CVE-2026-89818}
  • drm/amdgpu/vcn4: Avoid overflow on msg bound check {CVE-2026-46199}
  • drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg {CVE-2026-46199}
  • drm/amdgpu/vcn3: Avoid overflow on msg bound check {CVE-2026-46230}
  • drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg {CVE-2026-46230}
  • openvswitch: vport: fix self-deadlock on release of tunnel ports {CVE-2026-46165}
  • openvswitch: defer tunnel netdev_put to RCU release {CVE-2026-31678}
  • ALSA: usb: Fix UAF at delayed release of MIDI2 EPs {CVE-2026-74642}
  • ALSA: usb-audio: fix use-after-free in ump_to_endpoint() {CVE-2026-74501}
  • NFS: Decrement refcounts if allocating nfs_free_stateid_data fails {CVE-2026-74730}
  • NFS: Pin the 'struct nfs_server' during a FREE_STATEID call {CVE-2026-74730}
  • exec: do_close_on_exec() before taking exec_update_lock {CVE-2026-64371}
  • proc: Fix broken error paths for namespace links {CVE-2026-64371}
  • proc: protect ptrace_may_access() with exec_update_lock (part 1) {CVE-2026-64371}
  • ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes {CVE-2026-74503}
  • ALSA: timer: Forcibly close timer instances at closing {CVE-2026-53193}
  • usb: typec: ucsi: Fix race condition and ordering in port unregistration {CVE-2026-74441}
  • arp: do not assume dev_hard_header() does not change skb->head {CVE-2026-22988}
  • netfilter: nft_ct: fix use-after-free in timeout object destroy {CVE-2026-31665}
  • md/raid10: fix writes_pending and barrier reference leaks on discard failures {CVE-2026-72438}
  • md/raid10: fix deadlock with check operation and nowait requests {CVE-2026-46050}
  • mm: introduce and use {pgd,p4d}_populate_kernel() {CVE-2025-39844}
  • vsock/virtio: fix zerocopy completion for multi-skb sends {CVE-2026-53365}
  • vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting {CVE-2026-52994}
  • mm: do file ownership checks with the proper mount idmap {CVE-2026-64294}
  • udf: validate VAT header length against the VAT inode size {CVE-2026-64323}
  • SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths {CVE-2026-45870}
  • Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig {CVE-2026-53208}
  • slip: bound decode() reads against the compressed packet length {CVE-2026-45843}
  • net: tls: fix strparser anchor skb leak on offload RX setup failure {CVE-2026-52974}
  • netfilter: nf_tables: unconditionally bump set->nelems before insertion {CVE-2026-23272}
  • rbd: Reset positive result codes to zero in object map update path {CVE-2026-68131}
  • netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() {CVE-2026-23458}
  • mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr {CVE-2025-21938}
  • bpf: Fix NULL deref in map_kptr_match_type for scalar regs {CVE-2026-53032}
  • bpf: Explicitly check accesses to bpf_sock_addr {CVE-2025-40078}
  • nexthop: Forbid FDB status change while nexthop is in a group {CVE-2025-39980}
  • bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN {CVE-2026-31525}
  • x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() {CVE-2025-21913}
  • ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple() {CVE-2024-57994}
  • drm/i915/vrr: require valid min/max vfreq for VRR {CVE-2026-68254}
  • libceph: handle rbtree insertion error in decode_choose_args() {CVE-2026-52954}
  • gfs2: prevent NULL pointer dereference during unmount {CVE-2026-53048}
  • smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path {CVE-2026-31708}
  • ext4: reject mount if bigalloc with s_first_data_block != 0 {CVE-2026-31447}
  • NFSD: Fix crash in nfsd4_read_release() {CVE-2025-40324}
  • netfilter: x_tables: guard option walkers against 1-byte tail reads {CVE-2026-43452}
  • smb: client: Fix refcount leak for cifs_sb_tlink {CVE-2025-40103}
  • smb: client: harden POSIX SID length parsing {CVE-2026-64380}
  • crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() {CVE-2026-64438}
  • bpf: Allow LPM map access from sleepable…
Record
CLSA-2026-1791800936
Updated
2026-11-02
OSVCLSA-2026-1791852988 No score

kernel: Fix of 107 CVEs

  • netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
  • IB/isert: reject PDUs declaring more data than was received {CVE-2026-90414}
  • RDMA/mlx5: Fix integer overflow of user QP buffer size {CVE-2026-90435}
  • sctp: validate embedded address parameter length {CVE-2026-74287}
  • IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413}
  • xfrm: ah6: validate routing header segments_left {CVE-2026-80844}
  • drm/amd/display: set new_stream to NULL after release {CVE-2026-68236}
  • RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters {CVE-2026-100075}
  • nvmet-rdma: handle inline data with a nonzero offset {CVE-2026-72129}
  • netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() {CVE-2026-97417}
  • sctp: validate cookie AUTH state before use {CVE-2026-74752}
  • ipvlan: inherit needed_headroom and needed_tailroom from phy_dev {CVE-2026-74744}
  • enic: fix tx_hang_reset use-after-free on device removal {CVE-2026-74725}
  • net/atm: fix slab-out-of-bounds read in vcc_setsockopt() {CVE-2026-74689}
  • drm/amdgpu: reject oversized IBs with per-ring packet limits {CVE-2026-80576}
  • xfs: bounds-check buffer log item's dirty bitmap {CVE-2026-80536}
  • nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page {CVE-2026-64320}
  • smb: client: reject overlapping data areas in SMB2 responses {CVE-2026-64257}
  • smb: client: restrict implied bcc[0] exemption to responses without data area {CVE-2026-64448}
  • crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() {CVE-2026-64438}
  • crypto: qat - protect interrupt mask CSRs with a spinlock {CVE-2026-64438}
  • crypto: qat - remove intermediate tasklet for vf2pf {CVE-2026-64438}
  • usb: free iso schedules on failed submit {CVE-2026-64348}
  • USB: iowarrior: fix use-after-free on disconnect race {CVE-2026-64341}
  • crypto: qat - protect service table iterations with service_lock {CVE-2026-64305}
  • crypto: qat - validate RSA CRT component lengths {CVE-2026-64304}
  • net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422}
  • udf: validate VAT header length against the VAT inode size {CVE-2026-64323}
  • crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
  • crypto: algif_aead - fix uninitialized ctx->init {CVE-2025-39964}
  • sctp: fix race between sctp_wait_for_connect and peeloff {CVE-2026-63971}
  • mpls: reload header after pskb_may_pull() {CVE-2026-89555}
  • net: tun: bound receive headroom {CVE-2026-81000}
  • bridge: stp: Fix a potential use-after-free when deleting a bridge {CVE-2026-72389}
  • scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer {CVE-2026-74556}
  • rhashtable: clear stale iter->p on table restart {CVE-2026-64563}
  • vhost: reset the vring metadata cache on vring reconfiguration {CVE-2026-74580}
  • net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
  • sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
  • USB: legousbtower: fix use-after-free on disconnect race {CVE-2026-64340}
  • USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343}
  • udf: validate sparing table length as an entry count, not a byte count {CVE-2026-64322}
  • ipv4: igmp: remove multicast group from hash table on device destruction {CVE-2026-64423}
  • USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}
  • sctp: fix use-after-free of cached ASCONF chunk {CVE-2026-74587}
  • RDMA/siw: bound Read Response placement to the RREAD length {CVE-2026-64268}
  • ip6_tunnel: clear skb2->cb[] in ip6ip6_err() {CVE-2026-74597}
  • ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}
  • netfilter: ebt_nflog: pin the NFLOG backend {CVE-2026-74660}
  • libceph: Avoid using invalid osd indices from primary_temp {CVE-2026-80558}
  • udp: fix potential use-after-free in tunnel segmentation {CVE-2026-74705}
  • Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}
  • wifi: ath9k: hif_usb: don't dereference hif_dev after…
Record
CLSA-2026-1791852988
Updated
2026-11-02
OSVCLSA-2026-1791858083 No score

kernel: Fix of 94 CVEs

  • netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
  • IB/isert: reject PDUs declaring more data than was received {CVE-2026-90414}
  • RDMA/mlx5: Fix integer overflow of user QP buffer size {CVE-2026-90435}
  • IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413}
  • xfrm: ah6: validate routing header segments_left {CVE-2026-80844}
  • drm/amd/display: set new_stream to NULL after release {CVE-2026-68236}
  • RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters {CVE-2026-100075}
  • nvmet-rdma: handle inline data with a nonzero offset {CVE-2026-72129}
  • netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() {CVE-2026-97417}
  • smb: client: restrict implied bcc[0] exemption to responses without data area {CVE-2026-64448}
  • usb: free iso schedules on failed submit {CVE-2026-64348}
  • USB: iowarrior: fix use-after-free on disconnect race {CVE-2026-64341}
  • USB: legousbtower: fix use-after-free on disconnect race {CVE-2026-64340}
  • crypto: qat - protect service table iterations with service_lock {CVE-2026-64305}
  • crypto: qat - validate RSA CRT component lengths {CVE-2026-64304}
  • net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422}
  • udf: validate VAT header length against the VAT inode size {CVE-2026-64323}
  • crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
  • net: tun: bound receive headroom {CVE-2026-81000}
  • bridge: stp: Fix a potential use-after-free when deleting a bridge {CVE-2026-72389}
  • scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer {CVE-2026-74556}
  • rhashtable: clear stale iter->p on table restart {CVE-2026-64563}
  • mpls: reload header after pskb_may_pull() {CVE-2026-89555}
  • vhost: reset the vring metadata cache on vring reconfiguration {CVE-2026-74580}
  • net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
  • sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
  • USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343}
  • udf: validate sparing table length as an entry count, not a byte count {CVE-2026-64322}
  • ipv4: igmp: remove multicast group from hash table on device destruction {CVE-2026-64423}
  • USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}
  • RDMA/siw: bound Read Response placement to the RREAD length {CVE-2026-64268}
  • sctp: fix use-after-free of cached ASCONF chunk {CVE-2026-74587}
  • ip6_tunnel: clear skb2->cb[] in ip6ip6_err() {CVE-2026-74597}
  • ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}
  • netfilter: ebt_nflog: pin the NFLOG backend {CVE-2026-74660}
  • netfilter: flowtable: publish GC-visible tuple last {CVE-2026-74746}
  • libceph: Avoid using invalid osd indices from primary_temp {CVE-2026-80558}
  • udp: fix potential use-after-free in tunnel segmentation {CVE-2026-74705}
  • Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}
  • wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request {CVE-2026-68363}
  • ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() {CVE-2026-68160}
  • libceph: Reject monmaps advertising zero monitors {CVE-2026-68155}
  • sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}
  • net: slip: serialize receive against buffer reallocation {CVE-2026-68143}
  • libceph: remove debugfs files before client teardown {CVE-2026-68153}
  • libceph: refresh auth->authorizer_buf{,_len} after authorizer update {CVE-2026-68156}
  • media: rtl2832: fix use-after-free in rtl2832_remove() {CVE-2026-68214}
  • sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}
  • pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}
  • libceph: Fix multiplication overflow in decode_new_up_state_weight() {CVE-2026-68158}
  • ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() {CVE-2026-74499}
  • can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet…
Record
CLSA-2026-1791858083
Updated
2026-11-02
OSVCLSA-2026-1791946572 No score

Fix of 198 CVEs

  • CVE-2024-36894
    • usb: gadget: f_fs: drop the duplicate usb_ep_free_request() in ffs_user_copy_worker() {CVE-2024-36894}
  • CVE-2026-97447
    • ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() {CVE-2026-97447}
  • CVE-2026-93822
    • PCI: iproc: Protect root bus removal with rescan lock {CVE-2026-93822}
  • CVE-2026-93826
    • HID: hidpp: fix potential UAF in hidpp_connect_event() {CVE-2026-93826}
  • CVE-2026-97954
    • net/rds: fix tcp stream corruption with large pages {CVE-2026-97954}
  • CVE-2026-97949
    • configfs: unhash the dentry before dropping the item in rmdir {CVE-2026-97949}
  • CVE-2026-97931
    • ALSA: us122l: Prevent write upgrades for read mappings {CVE-2026-97931}
  • CVE-2026-97940
    • ipv6: fix fib6 walker UAF on seq stop {CVE-2026-97940}
  • CVE-2026-97539
    • usb: xusbatm: don't rely on id table pointer arithmetic {CVE-2026-97539}
  • CVE-2026-74510
    • Bluetooth: mgmt: fix UAF in pair command cancellation {CVE-2026-74510}
  • CVE-2026-72084
    • scsi: target: Bound PR-OUT TransportID parsing to the received buffer {CVE-2026-72084}
  • CVE-2026-90302
    • ocfs2: synchronize heartbeat callbacks with o2net teardown {CVE-2026-90302}
  • CVE-2026-90320
    • ocfs2: validate external xattr entries when reading metadata {CVE-2026-90320}
  • CVE-2026-90321
    • ocfs2: validate inline xattrs during inode block validation {CVE-2026-90321}
  • CVE-2026-90431
    • remoteproc: Prevent crash handling to race with rproc_del() {CVE-2026-90431}
  • CVE-2026-74637
    • perf/core: Fix group leader use-after-free after sibling detach {CVE-2026-74637}
  • CVE-2026-74752
    • sctp: validate cookie AUTH state before use {CVE-2026-74752}
  • CVE-2026-74387
    • ALSA: seq: midi: Serialize output teardown with event_input {CVE-2026-74387}
  • CVE-2026-80536
    • xfs: bounds-check buffer log item's dirty bitmap {CVE-2026-80536}
  • CVE-2026-89659
    • NFSD: Prevent client use-after-free during delegation revoke {CVE-2026-89659}
  • CVE-2026-80576
    • drm/amdgpu: reject oversized IBs with per-ring packet limits {CVE-2026-80576}
  • CVE-2026-90223
    • nfc: llcp: bound SNL TLV parsing to the skb and add length checks {CVE-2026-90223}
  • CVE-2026-80994
    • net: openvswitch: fix flow mask use-after-free on flow deletion {CVE-2026-80994}
  • CVE-2026-72398
    • sctp: add INIT verification after cookie unpacking {CVE-2026-72398}
  • CVE-2026-74583
    • net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
  • CVE-2026-72322
    • ipv6: mcast: Fix potential UAF in MLD delayed work {CVE-2026-72322}
  • CVE-2026-93095
    • hfsplus: validate thread record before delete key rebuild {CVE-2026-93095}
  • CVE-2026-72472
    • nfs: use nfsi->rwsem to protect traversal of the file lock list {CVE-2026-72472}
  • CVE-2026-90045
    • USB: gadget: ffs: fix mm lifetime handling {CVE-2026-90045}
  • CVE-2026-90421
    • PCI: Fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-90421}
  • CVE-2026-64583
    • usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown {CVE-2026-64583}
  • CVE-2026-68329
    • iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() {CVE-2026-68329}
  • CVE-2026-89448
    • iommu/vt-d: Force requesting ACS when tboot is enabled {CVE-2026-89448}
  • CVE-2026-64001
    • ALSA: pcm: oss: Fix setup list UAF on proc write error {CVE-2026-64001}
  • CVE-2026-64305
    • crypto: qat - protect service table iterations with service_lock {CVE-2026-64305}
  • CVE-2026-64348
    • usb: free iso schedules on failed submit {CVE-2026-64348}
  • CVE-2026-64422
    • net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422}
  • CVE-2026-90180
    • block:…
Record
CLSA-2026-1791946572
Updated
2026-11-02
OSVCLSA-2026-1791949745 No score

kernel: Fix of 69 CVEs

  • sctp: fix err_chunk memory leaks in INIT handling {CVE-2026-72413}
  • ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() {CVE-2026-97455}
  • ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() {CVE-2026-97445}
  • Bluetooth: L2CAP: validate connectionless PSM length {CVE-2026-97408}
  • wifi: libipw: fix key index receive bound checks {CVE-2026-93803}
  • netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() {CVE-2026-98077}
  • configfs: unhash the dentry before dropping the item in rmdir {CVE-2026-97949}
  • reboot: fix cad_pid use-after-free race {CVE-2026-97938}
  • ALSA: us122l: Prevent write upgrades for read mappings {CVE-2026-97931}
  • net: usb: pegasus: don't rely on id table pointer arithmetic {CVE-2026-97540}
  • usb: xusbatm: don't rely on id table pointer arithmetic {CVE-2026-97539}
  • scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown {CVE-2026-97536}
  • xfrm: hold net_device reference under RCU in bundle creation {CVE-2026-98364}
  • wifi: libipw: reject too-short beacon and probe responses {CVE-2026-98349}
  • wifi: libipw: reject too-short association responses {CVE-2026-98348}
  • net: lock the socket in sock_gettstamp() {CVE-2026-98276}
  • ALSA: core: Fix potential UAF after asynchronous card release {CVE-2026-98266}
  • wifi: libertas_tf: fix UAF in lbtf_free_adapter() {CVE-2026-98194}
  • wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() {CVE-2026-72070}
  • netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
  • ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data {CVE-2026-74388}
  • PCI: Fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-90421}
  • sunrpc: route to a populated pool in svc_pool_for_cpu() {CVE-2026-89549}
  • nfsd: validate symlink target length in NFSv4 CREATE {CVE-2026-89699}
  • smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() {CVE-2026-89633}
  • KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug {CVE-2026-68093}
  • inet: frags: strip GSO state from fragments before reassembly {CVE-2026-80590}
  • misc: sgi-gru: remove interrupt-context page-table walks {CVE-2026-90383}
  • slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() {CVE-2026-90057}
  • slip: fix use-after-free in sl_sync() {CVE-2026-81001}
  • xfs: bounds-check buffer log item's dirty bitmap {CVE-2026-80536}
  • nfsd: gate nfs3 setacl by argp->mask {CVE-2026-89671}
  • SUNRPC: svcauth_gss: enforce krb5 token minimum length {CVE-2026-89550}
  • ALSA: mtpav: shut down output timer before card teardown {CVE-2026-90116}
  • char: tlclk: fix use-after-free in tlclk_cleanup() {CVE-2026-80622}
  • net/atm: fix slab-out-of-bounds read in vcc_setsockopt() {CVE-2026-74689}
  • sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
  • ALSA: usx2y: bound the hwdep mmap fault offset {CVE-2026-74641}
  • scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer {CVE-2026-74556}
  • sctp: add INIT verification after cookie unpacking {CVE-2026-72398}
  • sctp: validate embedded address parameter length {CVE-2026-74287}
  • configfs_lookup(): don't leave ->s_dentry dangling on failure {CVE-2026-74359}
  • ALSA: seq: midi: Serialize output teardown with event_input {CVE-2026-74387}
  • ipv6: mcast: Fix potential UAF in MLD delayed work {CVE-2026-72322}
  • ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}
  • USB: serial: io_edgeport: cap received transmit credits {CVE-2026-68365}
  • sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}
  • net/sched: fix packet loop on netem when duplicate is on {CVE-2026-63983}
  • fbdev: fix use-after-free in store_modes() {CVE-2026-63826}
  • ipv6: exthdrs: refresh nh after handling HAO option {CVE-2026-63922}
  • Bluetooth: btusb: fix use-after-free on registration failure {CVE-2026-64471}
  • Squashfs: check block offset is not negative {CVE-2026-90203}
  • ALSA: usb-audio: fix OOB write in…
Record
CLSA-2026-1791949745
Updated
2026-11-02
OSVCLSA-2026-1792020435 No score

kernel: Fix of 68 CVEs

  • sctp: fix err_chunk memory leaks in INIT handling {CVE-2026-72413}
  • ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() {CVE-2026-97455}
  • ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() {CVE-2026-97445}
  • Bluetooth: L2CAP: validate connectionless PSM length {CVE-2026-97408}
  • wifi: libipw: fix key index receive bound checks {CVE-2026-93803}
  • netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() {CVE-2026-98077}
  • configfs: unhash the dentry before dropping the item in rmdir {CVE-2026-97949}
  • reboot: fix cad_pid use-after-free race {CVE-2026-97938}
  • ALSA: us122l: Prevent write upgrades for read mappings {CVE-2026-97931}
  • net: usb: pegasus: don't rely on id table pointer arithmetic {CVE-2026-97540}
  • usb: xusbatm: don't rely on id table pointer arithmetic {CVE-2026-97539}
  • scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown {CVE-2026-97536}
  • xfrm: hold net_device reference under RCU in bundle creation {CVE-2026-98364}
  • wifi: libipw: reject too-short beacon and probe responses {CVE-2026-98349}
  • wifi: libipw: reject too-short association responses {CVE-2026-98348}
  • net: lock the socket in sock_gettstamp() {CVE-2026-98276}
  • ALSA: core: Fix potential UAF after asynchronous card release {CVE-2026-98266}
  • wifi: libertas_tf: fix UAF in lbtf_free_adapter() {CVE-2026-98194}
  • wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() {CVE-2026-72070}
  • netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
  • ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data {CVE-2026-74388}
  • PCI: Fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-90421}
  • sunrpc: route to a populated pool in svc_pool_for_cpu() {CVE-2026-89549}
  • nfsd: validate symlink target length in NFSv4 CREATE {CVE-2026-89699}
  • smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() {CVE-2026-89633}
  • KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug {CVE-2026-68093}
  • inet: frags: strip GSO state from fragments before reassembly {CVE-2026-80590}
  • misc: sgi-gru: remove interrupt-context page-table walks {CVE-2026-90383}
  • slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() {CVE-2026-90057}
  • slip: fix use-after-free in sl_sync() {CVE-2026-81001}
  • xfs: bounds-check buffer log item's dirty bitmap {CVE-2026-80536}
  • nfsd: gate nfs3 setacl by argp->mask {CVE-2026-89671}
  • SUNRPC: svcauth_gss: enforce krb5 token minimum length {CVE-2026-89550}
  • ALSA: mtpav: shut down output timer before card teardown {CVE-2026-90116}
  • char: tlclk: fix use-after-free in tlclk_cleanup() {CVE-2026-80622}
  • net/atm: fix slab-out-of-bounds read in vcc_setsockopt() {CVE-2026-74689}
  • sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
  • ALSA: usx2y: bound the hwdep mmap fault offset {CVE-2026-74641}
  • scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer {CVE-2026-74556}
  • sctp: add INIT verification after cookie unpacking {CVE-2026-72398}
  • sctp: validate embedded address parameter length {CVE-2026-74287}
  • configfs_lookup(): don't leave ->s_dentry dangling on failure {CVE-2026-74359}
  • ALSA: seq: midi: Serialize output teardown with event_input {CVE-2026-74387}
  • ipv6: mcast: Fix potential UAF in MLD delayed work {CVE-2026-72322}
  • ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}
  • USB: serial: io_edgeport: cap received transmit credits {CVE-2026-68365}
  • sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}
  • net/sched: fix packet loop on netem when duplicate is on {CVE-2026-63983}
  • fbdev: fix use-after-free in store_modes() {CVE-2026-63826}
  • ipv6: exthdrs: refresh nh after handling HAO option {CVE-2026-63922}
  • Bluetooth: btusb: fix use-after-free on registration failure {CVE-2026-64471}
  • Squashfs: check block offset is not negative {CVE-2026-90203}
  • ALSA: usb-audio: fix OOB write in…
Record
CLSA-2026-1792020435
Updated
2026-11-02
OSVCLSA-2026-1792137027 No score

kernel-uek: Fix of 161 CVEs

  • net: usb: pegasus: don't rely on id table pointer arithmetic {CVE-2026-97540}
  • ocfs2: validate directory-index entry counts when reading metadata {CVE-2026-89492}
  • ocfs2: validate dx_root extent list fields during block read {CVE-2026-89492}
  • nvme-tcp: reject a read that transferred too few bytes {CVE-2026-89480}
  • sctp: add INIT verification after cookie unpacking {CVE-2026-72398}
  • sctp: validate embedded INIT chunk and address list lengths in cookie {CVE-2026-53224}
  • sctp: fix NULL deref on untransmitted RECONF completion {CVE-2026-89477}
  • net/packet: defer vmalloc TX_RING free until skbs finish {CVE-2026-80841}
  • netfilter: nf_log: unregister loggers before per-net teardown {CVE-2026-97608}
  • netfilter: nf_tables: make nft_object rhltable per table {CVE-2026-74565}
  • packet: use consistent hard_header_len in non-ring send paths {CVE-2026-74582}
  • net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header {CVE-2026-80731}
  • net/atm: fix slab-out-of-bounds read in vcc_setsockopt() {CVE-2026-74689}
  • net: do not send ICMP/NDISC Redirects when peer allocation fails {CVE-2026-74550}
  • tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() {CVE-2026-72404}
  • net/sched: sch_teql: move rcu_read_lock()/spin_lock() from _bh variants {CVE-2026-72390}
  • net/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF {CVE-2026-72390}
  • Drivers: hv: vmbus: use generic driver_override infrastructure {CVE-2026-80676}
  • NFSD: Prevent client use-after-free during delegation revoke {CVE-2026-89659}
  • sunrpc: route to a populated pool in svc_pool_for_cpu() {CVE-2026-89549}
  • sctp: fix stream->outcnt underflow on duplicate RECONF responses {CVE-2026-89476}
  • sctp: distinguish sequence zero from wildcard in reconf lookup {CVE-2026-89476}
  • ipv6: mcast: Fix potential UAF in MLD delayed work {CVE-2026-72322}
  • net/sched: fix packet loop on netem when duplicate is on {CVE-2026-63983}
  • net: Introduce skb tc depth field to track packet loops {CVE-2026-63983}
  • netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst {CVE-2026-72255}
  • sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing {CVE-2026-53246}
  • ipv6: mcast: Fix use-after-free when processing MLD queries {CVE-2026-53275}
  • scsi: xen: scsiback: Free unsubmitted command instead of double-putting it {CVE-2026-72085}
  • ipv4: fib: Don't dump dying fib_info in fib_leaf_notify(). {CVE-2026-74289}
  • sctp: fix err_chunk memory leaks in INIT handling {CVE-2026-72413}
  • net/sched: defer qdisc freeing after failed creation {CVE-2026-98017}
  • IB/isert: wait for deferred control PDU completions before releasing the connection {CVE-2026-98357}
  • RDMA/mad: Fix receive buffer leak when PKey enforcement fails {CVE-2026-98354}
  • sctp: validate embedded address parameter length {CVE-2026-74287}
  • nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget {CVE-2026-89674}
  • IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413}
  • drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() {CVE-2026-46209}
  • RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() {CVE-2026-46181}
  • nvmet-tcp: fix race between ICReq handling and queue teardown {CVE-2026-46135}
  • ALSA: aloop: Fix peer runtime UAF during format-change stop {CVE-2026-46090}
  • ALSA: aloop: Fix racy access at PCM trigger {CVE-2026-23191}
  • drm/nouveau: fix u32 overflow in pushbuf reloc bounds check {CVE-2026-46006}
  • gfs2: Fix use-after-free in iomap inline data write path {CVE-2026-45984}
  • bonding: alb: fix UAF in rlb_arp_recv during bond up/down {CVE-2026-45970}
  • Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold {CVE-2026-31408}
  • Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect() {CVE-2024-36013}
  • mt76: fix use-after-free by removing a non-RCU wcid pointer {CVE-2022-49328}
  • mt76: fix per-driver wcid range checks after wcid array size bump {CVE-2022-49328}
  • af_unix: Fix UAF read of…
Record
CLSA-2026-1792137027
Updated
2026-11-02
OSVCLSA-2026-1792239979 No score

kernel: Fix of 73 CVEs

  • ipv4: validate checksum_start before completing checksum {CVE-2026-99999}
  • net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72055}
  • ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). {CVE-2026-63921}
  • ip6: vti: Use ip6_tnl.net in vti6_changelink(). {CVE-2026-63917}
  • bpf: Mask pseudo pointer values in verifier logs {CVE-2026-72402}
  • drop_monitor: perform u64_stats updates under IRQ-disabled section {CVE-2026-68286}
  • wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin {CVE-2026-68362}
  • gve: fix Rx queue stall on alloc failure {CVE-2026-68129}
  • vxlan: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-68432}
  • net: qrtr: restrict socket creation to the initial network namespace {CVE-2026-68294}
  • nbd: restrict sockets to TCP and UDP {CVE-2025-40080}
  • audit: fix recursive locking deadlock in audit_dupe_exe() {CVE-2026-68096}
  • scsi: smartpqi: Fix device resources accessed after device removal {CVE-2025-68371}
  • cifs: fix oops during encryption {CVE-2022-50341}
  • net: qrtr: ns: Limit the maximum server registration per node {CVE-2026-43491}
  • mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING {CVE-2022-50430}
  • ipvlan: inherit needed_headroom and needed_tailroom from phy_dev {CVE-2026-74744}
  • xfs: don't swallow dquot recovery verification errors {CVE-2026-80529}
  • xfs: dquot recovery does not validate the recovered dquot {CVE-2026-80529}
  • xfs: clean up dqblk extraction {CVE-2026-80529}
  • Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}
  • bpf: Fix accesses to uninit stack slots {CVE-2023-52452}
  • bpf: Allow reads from uninit stack {CVE-2023-52452}
  • fbdev: Fix incorrect page mapping clearance at fb_deferred_io_release() {CVE-2023-52731}
  • iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() {CVE-2026-68324}
  • nfsd: make sure exp active before svc_export_show {CVE-2024-56558}
  • Input: elan_i2c - validate firmware size before use {CVE-2026-64237}
  • net/sched: ets: use old 'nbands' while purging unused classes {CVE-2025-38684}
  • net_sched: ets: fix a race in ets_qdisc_change() {CVE-2025-38107}
  • fbcon: Fix OOB access in font allocation {CVE-2025-39967}
  • fbcon: fix integer overflow in fbcon_do_set_font {CVE-2025-39967}
  • kyber: fix out of bounds access when preempted {CVE-2021-46984}
  • padata: Reset next CPU when reorder sequence wraps around {CVE-2025-38584}
  • padata: Fix pd UAF once and for all {CVE-2025-38584}
  • padata: Fix refcnt handling in padata_free_shell() {CVE-2023-52854}
  • xen/privcmd: unregister xenstore notifier on module exit {CVE-2026-31788}
  • xen/privcmd: restrict usage in unprivileged domU {CVE-2026-31788}
  • Bluetooth: MGMT: Fix memory leak in set_ssp_complete {CVE-2026-23151}
  • Bluetooth: MGMT: Fix possible UAFs {CVE-2025-39981}
  • xfrm: Fix dev use-after-free in xfrm async resumption {CVE-2026-72463}
  • xfrm: hold dev ref until after transport_finish NF_HOOK {CVE-2026-31663}
  • netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one {CVE-2023-53333}
  • nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec {CVE-2026-22998}
  • bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() {CVE-2022-49840}
  • ALSA: firewire-motu: add bounds check in put_user loop for DSP events {CVE-2025-68753}
  • ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events {CVE-2025-68347}
  • HID: multitouch: Add NULL check in mt_input_configured {CVE-2024-58020}
  • HID: multitouch: Correct devm device reference for hidinput input_dev name {CVE-2023-53454}
  • RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction {CVE-2025-38161}
  • RDMA/mlx5: Return the firmware result upon destroying QP/RQ {CVE-2023-53286}
  • cifs: Fix warning and UAF when destroy the MR list {CVE-2023-53427}
  • cifs: Fix lost destroy smbd connection when MR allocate failed {CVE-2023-54260}
  • cifs: Fix oops due to uncleared server->smbd_conn in reconnect {CVE-2023-53006}
  • PCI/ASPM:…
Record
CLSA-2026-1792239979
Updated
2026-11-02
OSVopenSUSE-SU-2026:11476-1 No score

kernel-devel-7.1.7-1.1 on GA media

These are all security issues fixed in the kernel-devel-7.1.7-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11476-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:22091-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340).
  • CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock (bsc#1258335).
  • CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
  • CVE-2026-43210: tracing: ring-buffer: Fix to check event length before using (bsc#1264330).
  • CVE-2026-43272: ring-buffer: Fix possible dereference of uninitialized pointer (bsc#1264607).
  • CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
  • CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
  • CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
  • CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
  • CVE-2026-46272: coresight: tmc-etr: Fix race condition between sysfs and perf mode (bsc#1267672).
  • CVE-2026-53377: drm/msm: always recover the gpu (bsc#1271901).
  • CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
  • CVE-2026-63838: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] (bsc#1272388).
  • CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).
  • CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
  • CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
  • CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
  • CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
  • CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
  • CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
  • CVE-2026-64132: ipv6: ioam: refresh hdr pointer before ioam6_event() (bsc#1272347).
  • CVE-2026-64154: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() (bsc#1271950).
  • CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
  • CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
  • CVE-2026-64216: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (bsc#1272802).
  • CVE-2026-64235: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines (bsc#1272803).
  • CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
  • CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
  • CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970).
  • CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).
  • CVE-2026-64377: cpufreq: qcom-cpufreq-hw: Fix possible double free (bsc#1273297).
  • CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).
  • CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).
  • CVE-2026-64405: Bluetooth: separate CIS_LINK and BIS_LINK link types (bsc#1273512).
  • CVE-2026-64414: netfilter: handle unreadable frags (bsc#1273275).
  • CVE-2026-64418: mm: shrinker: fix shrinker_info teardown race with expansion (bsc#1273784).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).
  • CVE-2026-64457: virtio_pci: fix vq info pointer lookup via wrong index (bsc#1273491).
  • CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320).
  • CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).
  • CVE-2026-64475: vfio/pci: Release the…
Record
openSUSE-SU-2026:22091-1
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2026-64422 No score

CVE-2026-64422 in linux - Patched by Root

Root has patched CVE-2026-64422 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2026-64422
Updated
2026-11-02
OSVROOT-OS-UBUNTU-2204-CVE-2026-64422 No score

CVE-2026-64422 in linux - Patched by Root

Root has patched CVE-2026-64422 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2204-CVE-2026-64422
Updated
2026-11-06
OSVSUSE-SU-2026:24179-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340).
  • CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock (bsc#1258335).
  • CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
  • CVE-2026-43210: tracing: ring-buffer: Fix to check event length before using (bsc#1264330).
  • CVE-2026-43272: ring-buffer: Fix possible dereference of uninitialized pointer (bsc#1264607).
  • CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
  • CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
  • CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
  • CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
  • CVE-2026-46272: coresight: tmc-etr: Fix race condition between sysfs and perf mode (bsc#1267672).
  • CVE-2026-53377: drm/msm: always recover the gpu (bsc#1271901).
  • CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
  • CVE-2026-63838: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] (bsc#1272388).
  • CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).
  • CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
  • CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
  • CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
  • CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
  • CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
  • CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
  • CVE-2026-64132: ipv6: ioam: refresh hdr pointer before ioam6_event() (bsc#1272347).
  • CVE-2026-64154: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() (bsc#1271950).
  • CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
  • CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
  • CVE-2026-64216: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (bsc#1272802).
  • CVE-2026-64235: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines (bsc#1272803).
  • CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
  • CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
  • CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970).
  • CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).
  • CVE-2026-64377: cpufreq: qcom-cpufreq-hw: Fix possible double free (bsc#1273297).
  • CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).
  • CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).
  • CVE-2026-64405: Bluetooth: separate CIS_LINK and BIS_LINK link types (bsc#1273512).
  • CVE-2026-64414: netfilter: handle unreadable frags (bsc#1273275).
  • CVE-2026-64418: mm: shrinker: fix shrinker_info teardown race with expansion (bsc#1273784).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).
  • CVE-2026-64457: virtio_pci: fix vq info pointer lookup via wrong index (bsc#1273491).
  • CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320).
  • CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).
  • CVE-2026-64475: vfio/pci: Release the…
Record
SUSE-SU-2026:24179-1
Updated
2026-11-02
OSVSUSE-SU-2026:24184-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340).
  • CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock (bsc#1258335).
  • CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
  • CVE-2026-43210: tracing: ring-buffer: Fix to check event length before using (bsc#1264330).
  • CVE-2026-43272: ring-buffer: Fix possible dereference of uninitialized pointer (bsc#1264607).
  • CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
  • CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
  • CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
  • CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
  • CVE-2026-46272: coresight: tmc-etr: Fix race condition between sysfs and perf mode (bsc#1267672).
  • CVE-2026-53377: drm/msm: always recover the gpu (bsc#1271901).
  • CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
  • CVE-2026-63838: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] (bsc#1272388).
  • CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).
  • CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
  • CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
  • CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
  • CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
  • CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
  • CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
  • CVE-2026-64132: ipv6: ioam: refresh hdr pointer before ioam6_event() (bsc#1272347).
  • CVE-2026-64154: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() (bsc#1271950).
  • CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
  • CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
  • CVE-2026-64216: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (bsc#1272802).
  • CVE-2026-64235: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines (bsc#1272803).
  • CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
  • CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
  • CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970).
  • CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).
  • CVE-2026-64377: cpufreq: qcom-cpufreq-hw: Fix possible double free (bsc#1273297).
  • CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).
  • CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).
  • CVE-2026-64405: Bluetooth: separate CIS_LINK and BIS_LINK link types (bsc#1273512).
  • CVE-2026-64414: netfilter: handle unreadable frags (bsc#1273275).
  • CVE-2026-64418: mm: shrinker: fix shrinker_info teardown race with expansion (bsc#1273784).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).
  • CVE-2026-64457: virtio_pci: fix vq info pointer lookup via wrong index (bsc#1273491).
  • CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320).
  • CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).
  • CVE-2026-64475: vfio/pci: Release the…
Record
SUSE-SU-2026:24184-1
Updated
2026-11-02
OSVSUSE-SU-2026:24197-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340).
  • CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock (bsc#1258335).
  • CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
  • CVE-2026-43210: tracing: ring-buffer: Fix to check event length before using (bsc#1264330).
  • CVE-2026-43272: ring-buffer: Fix possible dereference of uninitialized pointer (bsc#1264607).
  • CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
  • CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
  • CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
  • CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
  • CVE-2026-46272: coresight: tmc-etr: Fix race condition between sysfs and perf mode (bsc#1267672).
  • CVE-2026-53377: drm/msm: always recover the gpu (bsc#1271901).
  • CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
  • CVE-2026-63838: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] (bsc#1272388).
  • CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).
  • CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
  • CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
  • CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
  • CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
  • CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
  • CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
  • CVE-2026-64132: ipv6: ioam: refresh hdr pointer before ioam6_event() (bsc#1272347).
  • CVE-2026-64154: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() (bsc#1271950).
  • CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
  • CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
  • CVE-2026-64216: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (bsc#1272802).
  • CVE-2026-64235: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines (bsc#1272803).
  • CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
  • CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
  • CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970).
  • CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).
  • CVE-2026-64377: cpufreq: qcom-cpufreq-hw: Fix possible double free (bsc#1273297).
  • CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).
  • CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).
  • CVE-2026-64405: Bluetooth: separate CIS_LINK and BIS_LINK link types (bsc#1273512).
  • CVE-2026-64414: netfilter: handle unreadable frags (bsc#1273275).
  • CVE-2026-64418: mm: shrinker: fix shrinker_info teardown race with expansion (bsc#1273784).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).
  • CVE-2026-64457: virtio_pci: fix vq info pointer lookup via wrong index (bsc#1273491).
  • CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320).
  • CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).
  • CVE-2026-64475: vfio/pci: Release the…
Record
SUSE-SU-2026:24197-1
Updated
2026-11-02
OSVSUSE-SU-2026:24235-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340).
  • CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock (bsc#1258335).
  • CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
  • CVE-2026-43210: tracing: ring-buffer: Fix to check event length before using (bsc#1264330).
  • CVE-2026-43272: ring-buffer: Fix possible dereference of uninitialized pointer (bsc#1264607).
  • CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
  • CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
  • CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
  • CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
  • CVE-2026-46272: coresight: tmc-etr: Fix race condition between sysfs and perf mode (bsc#1267672).
  • CVE-2026-53377: drm/msm: always recover the gpu (bsc#1271901).
  • CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
  • CVE-2026-63838: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] (bsc#1272388).
  • CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).
  • CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
  • CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
  • CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
  • CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
  • CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
  • CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
  • CVE-2026-64132: ipv6: ioam: refresh hdr pointer before ioam6_event() (bsc#1272347).
  • CVE-2026-64154: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() (bsc#1271950).
  • CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
  • CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
  • CVE-2026-64216: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (bsc#1272802).
  • CVE-2026-64235: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines (bsc#1272803).
  • CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
  • CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
  • CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970).
  • CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).
  • CVE-2026-64377: cpufreq: qcom-cpufreq-hw: Fix possible double free (bsc#1273297).
  • CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).
  • CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).
  • CVE-2026-64405: Bluetooth: separate CIS_LINK and BIS_LINK link types (bsc#1273512).
  • CVE-2026-64414: netfilter: handle unreadable frags (bsc#1273275).
  • CVE-2026-64418: mm: shrinker: fix shrinker_info teardown race with expansion (bsc#1273784).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).
  • CVE-2026-64457: virtio_pci: fix vq info pointer lookup via wrong index (bsc#1273491).
  • CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320).
  • CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).
  • CVE-2026-64475: vfio/pci: Release the…
Record
SUSE-SU-2026:24235-1
Updated
2026-11-02
OSVSUSE-SU-2026:24371-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
  • CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
  • CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
  • CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178).
  • CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
  • CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
  • CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
  • CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
  • CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
  • CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
  • CVE-2026-64568: wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure (bsc#1274008).
  • CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
  • CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
  • CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
  • CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
  • CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
  • CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
  • CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
  • CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
  • CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
  • CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
  • CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
  • CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
  • CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
  • CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
  • CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
  • CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
  • CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232).
  • CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894).
  • CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
  • CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889).
  • CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
  • CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804).
  • CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931).
  • CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310).
  • CVE-2026-74723: btrfs: lzo: reject inline extents without valid headers (bsc#1276562).
  • CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode…
Record
SUSE-SU-2026:24371-1
Updated
2026-11-02
OSVSUSE-SU-2026:24379-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
  • CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
  • CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
  • CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178).
  • CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
  • CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
  • CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
  • CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
  • CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
  • CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
  • CVE-2026-64568: wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure (bsc#1274008).
  • CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
  • CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
  • CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
  • CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
  • CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
  • CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
  • CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
  • CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
  • CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
  • CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
  • CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
  • CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
  • CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
  • CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
  • CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
  • CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
  • CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232).
  • CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894).
  • CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
  • CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889).
  • CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
  • CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804).
  • CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931).
  • CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310).
  • CVE-2026-74723: btrfs: lzo: reject inline extents without valid headers (bsc#1276562).
  • CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode…
Record
SUSE-SU-2026:24379-1
Updated
2026-11-02
OSVSUSE-SU-2026:24473-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
  • CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
  • CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
  • CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178).
  • CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
  • CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
  • CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
  • CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
  • CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
  • CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
  • CVE-2026-64568: wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure (bsc#1274008).
  • CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
  • CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
  • CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
  • CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
  • CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
  • CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
  • CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
  • CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
  • CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
  • CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
  • CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
  • CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
  • CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
  • CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
  • CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
  • CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
  • CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232).
  • CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894).
  • CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
  • CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889).
  • CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
  • CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804).
  • CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931).
  • CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310).
  • CVE-2026-74723: btrfs: lzo: reject inline extents without valid headers (bsc#1276562).
  • CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode…
Record
SUSE-SU-2026:24473-1
Updated
2026-11-04
OSVSUSE-SU-2026:4639-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).
  • CVE-2026-68376: sctp: patch over auth_hmacs copy overflow (bsc#1274836).
  • CVE-2026-72083: target: fix double unmap data sg in core_scsi3_emulate_pro_register_and_move() (bsc#1275535).
  • CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).
  • CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985).
  • CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).
  • CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381).
  • CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253).
  • CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (bsc#1275696).
  • CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766).
  • CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493).
  • CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191).
  • CVE-2026-74641: ALSA: usx2y: bound the hwdep mmap fault offset (bsc#1278310).
  • CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908).
  • CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315).
  • CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619).
  • CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786).
  • CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397).
  • CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546).

The following non security issue was fixed:

  • Disable BATMAN in supported.conf
  • Disable CONFIG_BATMAN_ADV (jsc#PED-16892)
  • Disable CONFIG_CAN (jsc#PED-17000)
Record
SUSE-SU-2026:4639-1
Updated
2026-11-02
OSVSUSE-SU-2026:4660-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
  • CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
  • CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
  • CVE-2026-53266: netfilter: bridge: make ebt_snat ARP rewrite writable (bsc#1269136).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
  • CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1271955).
  • CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
  • CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).
  • CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251).
  • CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).
  • CVE-2026-68162: sctp: avoid auth_enable sysctl UAF during netns teardown (bsc#1274920).
  • CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977).
  • CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).
  • CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277).
  • CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).
  • CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).
  • CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388).
  • CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801).
  • CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803).
  • CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814).
  • CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818).
  • CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821).
  • CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249).
  • CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).
  • CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).
  • CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).
  • CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574).
  • CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544).
  • CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553).
  • CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
  • CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).
  • CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985).
  • CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).
  • CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).
  • CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).
  • CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381).
  • CVE-2026-72399: net: enetc: check the number of BDs needed for xdp_frame (bsc#1276553).
  • CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).
  • CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108).
  • CVE-2026-74267: net/sched: sch_codel: Do not call…
Record
SUSE-SU-2026:4660-1
Updated
2026-11-02
OSVSUSE-SU-2026:4665-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633).
  • CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
  • CVE-2025-40022: crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (bsc#1252682).
  • CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
  • CVE-2026-53266: netfilter: bridge: make ebt_snat ARP rewrite writable (bsc#1269136).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
  • CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
  • CVE-2026-64319: nvmet-auth: fix return value check in auth send (bsc#1273339).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251).
  • CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).
  • CVE-2026-68155: libceph: Reject monmaps advertising zero monitors (bsc#1275304).
  • CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1275307).
  • CVE-2026-68159: libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (bsc#1275470).
  • CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).
  • CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277).
  • CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).
  • CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).
  • CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388).
  • CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801).
  • CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803).
  • CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814).
  • CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818).
  • CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821).
  • CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249).
  • CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).
  • CVE-2026-72083: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (bsc#1275535).
  • CVE-2026-72084: scsi: target: core: Generate correct identifiers for PR OUT transport IDs (bsc#1275540).
  • CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).
  • CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).
  • CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574).
  • CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544).
  • CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553).
  • CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).
  • CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985).
  • CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006).
  • CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).
  • CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).
  • CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).
  • CVE-2026-72398: sctp: fix association labeling in the duplicate COOKIE-ECHO case (bsc#1276381).
  • CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).
  • CVE-2026-72449: drm/amdkfd: fix list_del…
Record
SUSE-SU-2026:4665-1
Updated
2026-11-02
OSVSUSE-SU-2026:4666-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633).
  • CVE-2024-56644: net/ipv6: release expired exception dst cached in socket (bsc#1216813 bsc#1235133).
  • CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
  • CVE-2025-40022: crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (bsc#1252682).
  • CVE-2026-53266: netfilter: bridge: make ebt_snat ARP rewrite writable (bsc#1269136).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
  • CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
  • CVE-2026-64319: nvmet-auth: fix return value check in auth send (bsc#1273339).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).
  • CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).
  • CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277).
  • CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).
  • CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).
  • CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801).
  • CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803).
  • CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814).
  • CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818).
  • CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821).
  • CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249).
  • CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).
  • CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).
  • CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).
  • CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574).
  • CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544).
  • CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).
  • CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).
  • CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).
  • CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).
  • CVE-2026-72398: sctp: fix association labeling in the duplicate COOKIE-ECHO case (bsc#1276381).
  • CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).
  • CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519).
  • CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475).
  • CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129).
  • CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410).
  • CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210).
  • CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211).
  • CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178).
  • CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792).
  • CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340).
  • CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354).
  • CVE-2026-74480: net: bridge: stop fast-leave…
Record
SUSE-SU-2026:4666-1
Updated
2026-11-02
OSVSUSE-SU-2026:4667-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633).
  • CVE-2025-39964: kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
  • CVE-2025-40022: kernel: crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (bsc#1252682).
  • CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
  • CVE-2026-53266: netfilter: bridge: make ebt_snat ARP rewrite writable (bsc#1269136).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
  • CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
  • CVE-2026-64319: nvmet-auth: fix return value check in auth send (bsc#1273339).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251).
  • CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).
  • CVE-2026-68155: libceph: Reject monmaps advertising zero monitors (bsc#1275304).
  • CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1275307).
  • CVE-2026-68159: libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (bsc#1275470).
  • CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).
  • CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277).
  • CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).
  • CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).
  • CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388).
  • CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801).
  • CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803).
  • CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814).
  • CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818).
  • CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821).
  • CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249).
  • CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).
  • CVE-2026-72083: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (bsc#1275535).
  • CVE-2026-72084: scsi: target: core: Generate correct identifiers for PR OUT transport IDs (bsc#1275540).
  • CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).
  • CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).
  • CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574).
  • CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544).
  • CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553).
  • CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).
  • CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985).
  • CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006).
  • CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).
  • CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).
  • CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).
  • CVE-2026-72398: sctp: fix association labeling in the duplicate COOKIE-ECHO case (bsc#1276381).
  • CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).
  • CVE-2026-72449: drm/amdkfd:…
Record
SUSE-SU-2026:4667-1
Updated
2026-11-02
OSVSUSE-SU-2026:4668-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633).
  • CVE-2024-56644: net/ipv6: release expired exception dst cached in socket (bsc#1216813 bsc#1235133).
  • CVE-2025-39964: crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (bsc#1252682).
  • CVE-2025-40022: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
  • CVE-2026-53266: netfilter: bridge: make ebt_snat ARP rewrite writable (bsc#1269136).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
  • CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
  • CVE-2026-64319: nvmet-auth: fix return value check in auth send (bsc#1273339).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).
  • CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).
  • CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277).
  • CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).
  • CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).
  • CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801).
  • CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803).
  • CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814).
  • CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818).
  • CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821).
  • CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249).
  • CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).
  • CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).
  • CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).
  • CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574).
  • CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544).
  • CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).
  • CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).
  • CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).
  • CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).
  • CVE-2026-72398: sctp: fix association labeling in the duplicate COOKIE-ECHO case (bsc#1276381).
  • CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).
  • CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519).
  • CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475).
  • CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129).
  • CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410).
  • CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210).
  • CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211).
  • CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178).
  • CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792).
  • CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340).
  • CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354).
  • CVE-2026-74480: net: bridge: stop fast-leave after…
Record
SUSE-SU-2026:4668-1
Updated
2026-11-02
OSVSUSE-SU-2026:4892-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2023-54158: btrfs: don't free qgroup space unless specified (bsc#1256076).
  • CVE-2023-54180: btrfs: handle case when repair happens with dev-replace (bsc#1255995).
  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-63948: Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn (bsc#1272670).
  • CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
  • CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
  • CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64456: hwrng: virtio: clamp device-reported used.len at copy_data() (bsc#1273288).
  • CVE-2026-64593: btrfs: do not trim a device which is not writeable (bsc#1274497).
  • CVE-2026-68106: drm/amdgpu: fix division by zero with invalid uvd dimensions (bsc#1274853).
  • CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
  • CVE-2026-68236: drm/amd/display: set new_stream to NULL after release (bsc#1275659).
  • CVE-2026-68303: drm/vc4: hvs/v3d: Fix null dereference in unbind (bsc#1275080).
  • CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
  • CVE-2026-68430: drm/amdgpu/gfx8: drop unecessary BUG_ON() (bsc#1276273).
  • CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
  • CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
  • CVE-2026-72319: ipvs: ensure inner headers in ICMP errors are in headroom (bsc#1275964).
  • CVE-2026-72476: dmaengine: Fix possible use after free (bsc#1276844).
  • CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
  • CVE-2026-74408: wifi: ath9k: fix OOB access from firmware tx status queue ID (bsc#1276387).
  • CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894).
  • CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
  • CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889).
  • CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
  • CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310).
  • CVE-2026-74675: vt: stabilize tty reference in kbd_keycode with tty_port_tty_get (bsc#1278313).
  • CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259).
  • CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).
  • CVE-2026-89726: lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen() (bsc#1281058).
  • CVE-2026-89778: isofs: fix out-of-bounds page array access on empty zisofs block (bsc#1280966).
  • CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819).
  • CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280).
  • CVE-2026-90283: hugetlbfs: release subpool on fill_super failure (bsc#1281771).
  • CVE-2026-93252: ocfs2: make ocfs2_set_acl() static (bsc#1282784).
  • CVE-2026-93287: i2c: smbus: reject oversized block transfers in the common path (bsc#1282744).
  • CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808).
  • CVE-2026-93820: PCI: rockchip: Protect root bus removal with rescan lock (bsc#1282755).
  • CVE-2026-93822: PCI: iproc: Protect root bus removal with rescan lock (bsc#1282762).
  • CVE-2026-97416: btrfs: balance: fix potential…
Record
SUSE-SU-2026:4892-1
Updated
2026-11-02
OSVSUSE-SU-2026:4935-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
  • CVE-2026-43132: dm-verity: correctly handle dm_bufio_client_create() failure (bsc#1264614).
  • CVE-2026-43184: rnbd-srv: Zero the rsp buffer before using it (bsc#1264622).
  • CVE-2026-43283: net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle (bsc#1264295).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-43457: mctp: i2c: fix skb memory leak in receive path (bsc#1265000).
  • CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
  • CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
  • CVE-2026-46034: vfio/cdx: Fix NULL pointer dereference in interrupt trigger path (bsc#1266757).
  • CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
  • CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178).
  • CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
  • CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
  • CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
  • CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
  • CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
  • CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039).
  • CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
  • CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
  • CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
  • CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
  • CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
  • CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
  • CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
  • CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
  • CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
  • CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
  • CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602).
  • CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
  • CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
  • CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
  • CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
  • CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
  • CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
  • CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
  • CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232).
  • CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894).
  • CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
  • CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889).
  • CVE-2026-74587:…
Record
SUSE-SU-2026:4935-1
Updated
2026-11-02
OSVSUSE-SU-2026:4940-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
  • CVE-2026-43132: dm-verity: correctly handle dm_bufio_client_create() failure (bsc#1264614).
  • CVE-2026-43184: rnbd-srv: Zero the rsp buffer before using it (bsc#1264622).
  • CVE-2026-43283: net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle (bsc#1264295).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-43457: mctp: i2c: fix skb memory leak in receive path (bsc#1265000).
  • CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
  • CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
  • CVE-2026-46034: vfio/cdx: Fix NULL pointer dereference in interrupt trigger path (bsc#1266757).
  • CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
  • CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178).
  • CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
  • CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
  • CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
  • CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
  • CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
  • CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039).
  • CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
  • CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
  • CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
  • CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
  • CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
  • CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
  • CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
  • CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
  • CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
  • CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
  • CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602).
  • CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
  • CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
  • CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
  • CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
  • CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
  • CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
  • CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
  • CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232).
  • CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894).
  • CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
  • CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889). -…
Record
SUSE-SU-2026:4940-1
Updated
2026-11-02
OSVUSN-8726-1 No score

linux, linux-aws, linux-aws-7.0, linux-gcp, linux-gke, linux-hwe-7.0, linux-realtime vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • User-space API (UAPI);
  • Kernel build system;
  • ARM32 architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Drivers core;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Character device driver;
  • Hardware random number generator core;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • System reset/shutdown drivers;
  • Power sequencing drivers;
  • PTP clock framework;
  • Voltage and Current Regulator drivers;
  • RPMSG subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • VME bus staging drivers;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Cadence USB3 driver;
  • ULPI bus;
  • DesignWare USB3 driver;
  • Faraday FOTG210 USB2 dual-role controller driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • Intel USBIO USB I/O expander driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • VFIO drivers;
  • Framebuffer layer;
  • Virtio drivers;
  • BTRFS file system;
  • EROFS file system;
  • exFAT file system;
  • F2FS file system;
  • File systems infrastructure;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • OCFS2 file system;
  • Proc file system;
  • SMB network file system;
  • UDF file system;
  • XFS file system;
  • Key management;
  • BPF subsystem;
  • Memory management;
  • Software nodes and device properties;
  • Glob pattern matching library;
  • Memory Management;
  • KVM subsystem;
  • Mellanox drivers;
  • Restartable sequences system call mechanism;
  • Socket messages infrastructure;
  • Network traffic control;
  • Bluetooth subsystem;
  • Netfilter;
  • Networking core;
  • Network sockets;
  • TCP network protocol;
  • io_uring subsystem;
  • IPC subsystem;
  • Audit subsystem;
  • Perf events;
  • Kernel fork() syscall;
  • Locking primitives;
  • Kernel module support;
  • Scheduler infrastructure; -…
Record
USN-8726-1
Updated
2026-11-06
OSVUSN-8726-2 No score

linux-raspi vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • User-space API (UAPI);
  • Kernel build system;
  • ARM32 architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Drivers core;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Character device driver;
  • Hardware random number generator core;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • System reset/shutdown drivers;
  • Power sequencing drivers;
  • PTP clock framework;
  • Voltage and Current Regulator drivers;
  • RPMSG subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • VME bus staging drivers;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Cadence USB3 driver;
  • ULPI bus;
  • DesignWare USB3 driver;
  • Faraday FOTG210 USB2 dual-role controller driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • Intel USBIO USB I/O expander driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • VFIO drivers;
  • Framebuffer layer;
  • Virtio drivers;
  • BTRFS file system;
  • EROFS file system;
  • exFAT file system;
  • F2FS file system;
  • File systems infrastructure;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • OCFS2 file system;
  • Proc file system;
  • SMB network file system;
  • UDF file system;
  • XFS file system;
  • Key management;
  • BPF subsystem;
  • Memory management;
  • Software nodes and device properties;
  • Glob pattern matching library;
  • Memory Management;
  • KVM subsystem;
  • Mellanox drivers;
  • Restartable sequences system call mechanism;
  • Socket messages infrastructure;
  • Network traffic control;
  • Bluetooth subsystem;
  • Netfilter;
  • Networking core;
  • Network sockets;
  • TCP network protocol;
  • io_uring subsystem;
  • IPC subsystem;
  • Audit subsystem;
  • Perf events;
  • Kernel fork() syscall;
  • Locking primitives;
  • Kernel module support;
  • Scheduler infrastructure; -…
Record
USN-8726-2
Updated
2026-11-06
OSVUSN-8726-3 No score

linux-ibm vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • User-space API (UAPI);
  • Kernel build system;
  • ARM32 architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Drivers core;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Character device driver;
  • Hardware random number generator core;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • System reset/shutdown drivers;
  • Power sequencing drivers;
  • PTP clock framework;
  • Voltage and Current Regulator drivers;
  • RPMSG subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • VME bus staging drivers;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Cadence USB3 driver;
  • ULPI bus;
  • DesignWare USB3 driver;
  • Faraday FOTG210 USB2 dual-role controller driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • Intel USBIO USB I/O expander driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • VFIO drivers;
  • Framebuffer layer;
  • Virtio drivers;
  • BTRFS file system;
  • EROFS file system;
  • exFAT file system;
  • F2FS file system;
  • File systems infrastructure;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • OCFS2 file system;
  • Proc file system;
  • SMB network file system;
  • UDF file system;
  • XFS file system;
  • Key management;
  • BPF subsystem;
  • Memory management;
  • Software nodes and device properties;
  • Glob pattern matching library;
  • Memory Management;
  • KVM subsystem;
  • Mellanox drivers;
  • Restartable sequences system call mechanism;
  • Socket messages infrastructure;
  • Network traffic control;
  • Bluetooth subsystem;
  • Netfilter;
  • Networking core;
  • Network sockets;
  • TCP network protocol;
  • io_uring subsystem;
  • IPC subsystem;
  • Audit subsystem;
  • Perf events;
  • Kernel fork() syscall;
  • Locking primitives;
  • Kernel module support;
  • Scheduler infrastructure; -…
Record
USN-8726-3
Updated
2026-11-06
OSVUSN-8726-4 No score

linux-azure, linux-oracle vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • User-space API (UAPI);
  • Kernel build system;
  • ARM32 architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Drivers core;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Character device driver;
  • Hardware random number generator core;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • System reset/shutdown drivers;
  • Power sequencing drivers;
  • PTP clock framework;
  • Voltage and Current Regulator drivers;
  • RPMSG subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • VME bus staging drivers;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Cadence USB3 driver;
  • ULPI bus;
  • DesignWare USB3 driver;
  • Faraday FOTG210 USB2 dual-role controller driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • Intel USBIO USB I/O expander driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • VFIO drivers;
  • Framebuffer layer;
  • Virtio drivers;
  • BTRFS file system;
  • EROFS file system;
  • exFAT file system;
  • F2FS file system;
  • File systems infrastructure;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • OCFS2 file system;
  • Proc file system;
  • SMB network file system;
  • UDF file system;
  • XFS file system;
  • Key management;
  • BPF subsystem;
  • Memory management;
  • Software nodes and device properties;
  • Glob pattern matching library;
  • Memory Management;
  • KVM subsystem;
  • Mellanox drivers;
  • Restartable sequences system call mechanism;
  • Socket messages infrastructure;
  • Network traffic control;
  • Bluetooth subsystem;
  • Netfilter;
  • Networking core;
  • Network sockets;
  • TCP network protocol;
  • io_uring subsystem;
  • IPC subsystem;
  • Audit subsystem;
  • Perf events;
  • Kernel fork() syscall;
  • Locking primitives;
  • Kernel module support;
  • Scheduler infrastructure; -…
Record
USN-8726-4
Updated
2026-11-06
OSVUSN-8727-1 No score

linux-oem-7.0 vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • User-space API (UAPI);
  • Kernel build system;
  • ARM32 architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Drivers core;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Character device driver;
  • Hardware random number generator core;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • System reset/shutdown drivers;
  • Power sequencing drivers;
  • PTP clock framework;
  • Voltage and Current Regulator drivers;
  • RPMSG subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • VME bus staging drivers;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • Cadence USB3 driver;
  • ULPI bus;
  • USB core drivers;
  • DesignWare USB3 driver;
  • Faraday FOTG210 USB2 dual-role controller driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • Intel USBIO USB I/O expander driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • VFIO drivers;
  • Framebuffer layer;
  • Virtio drivers;
  • BTRFS file system;
  • EROFS file system;
  • exFAT file system;
  • F2FS file system;
  • File systems infrastructure;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • OCFS2 file system;
  • Proc file system;
  • SMB network file system;
  • UDF file system;
  • XFS file system;
  • Key management;
  • BPF subsystem;
  • Memory management;
  • Software nodes and device properties;
  • Glob pattern matching library;
  • Memory Management;
  • KVM subsystem;
  • Mellanox drivers;
  • Restartable sequences system call mechanism;
  • Socket messages infrastructure;
  • Network traffic control;
  • Bluetooth subsystem;
  • Netfilter;
  • Networking core;
  • Network sockets;
  • TCP network protocol;
  • io_uring subsystem;
  • IPC subsystem;
  • Audit subsystem;
  • Perf events;
  • Kernel fork() syscall;
  • Locking primitives;
  • Kernel module support;
  • Scheduler infrastructure;
  • Signal handling…
Record
USN-8727-1
Updated
2026-11-06
OSVUSN-8728-1 No score

linux-gcp-7.0 vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • x86 platform drivers;
  • ARM64 architecture;
  • Cryptographic API;
  • PSP security protocol;
  • User-space API (UAPI);
  • Kernel build system;
  • ARM32 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Auxiliary display drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Ublk userspace block driver;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • Hardware random number generator core;
  • Clock framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • DPLL subsystem;
  • EDAC drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • EFI core;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • FWCTL subsystem;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • Parport drivers;
  • PCI subsystem;
  • PHY drivers;
  • Pin controllers subsystem;
  • Chrome hardware platform drivers;
  • ACPI WMI driver;
  • Generic PM domains;
  • MediaTek PM domains;
  • System reset/shutdown drivers;
  • Power sequencing drivers;
  • Power supply drivers;
  • PTP clock framework;
  • Voltage and Current Regulator drivers;
  • MPAM driver;
  • Amlogic Meson reset controller drivers;
  • RPMSG subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • NVIDIA Tegra Control Backbone (CBB) driver;
  • SPI subsystem;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • VME bus staging drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • DesignWare USB2 driver;
  • DesignWare USB3 driver;
  • Faraday FOTG210 USB2 dual-role controller driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB…
Record
USN-8728-1
Updated
2026-11-06
OSVUSN-8728-2 No score

linux-azure-7.0 vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • x86 platform drivers;
  • ARM64 architecture;
  • Cryptographic API;
  • PSP security protocol;
  • User-space API (UAPI);
  • Kernel build system;
  • ARM32 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Auxiliary display drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Ublk userspace block driver;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • Hardware random number generator core;
  • Clock framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • DPLL subsystem;
  • EDAC drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • EFI core;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • FWCTL subsystem;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • Parport drivers;
  • PCI subsystem;
  • PHY drivers;
  • Pin controllers subsystem;
  • Chrome hardware platform drivers;
  • ACPI WMI driver;
  • Generic PM domains;
  • MediaTek PM domains;
  • System reset/shutdown drivers;
  • Power sequencing drivers;
  • Power supply drivers;
  • PTP clock framework;
  • Voltage and Current Regulator drivers;
  • MPAM driver;
  • Amlogic Meson reset controller drivers;
  • RPMSG subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • NVIDIA Tegra Control Backbone (CBB) driver;
  • SPI subsystem;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • VME bus staging drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • DesignWare USB2 driver;
  • DesignWare USB3 driver;
  • Faraday FOTG210 USB2 dual-role controller driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB…
Record
USN-8728-2
Updated
2026-11-06
OSVUSN-8728-3 No score

linux-oracle-7.0 vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • x86 platform drivers;
  • ARM64 architecture;
  • Cryptographic API;
  • PSP security protocol;
  • User-space API (UAPI);
  • Kernel build system;
  • ARM32 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Auxiliary display drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Ublk userspace block driver;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • Hardware random number generator core;
  • Clock framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • DPLL subsystem;
  • EDAC drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • EFI core;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • FWCTL subsystem;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • Parport drivers;
  • PCI subsystem;
  • PHY drivers;
  • Pin controllers subsystem;
  • Chrome hardware platform drivers;
  • ACPI WMI driver;
  • Generic PM domains;
  • MediaTek PM domains;
  • System reset/shutdown drivers;
  • Power sequencing drivers;
  • Power supply drivers;
  • PTP clock framework;
  • Voltage and Current Regulator drivers;
  • MPAM driver;
  • Amlogic Meson reset controller drivers;
  • RPMSG subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • NVIDIA Tegra Control Backbone (CBB) driver;
  • SPI subsystem;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • VME bus staging drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • DesignWare USB2 driver;
  • DesignWare USB3 driver;
  • Faraday FOTG210 USB2 dual-role controller driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB…
Record
USN-8728-3
Updated
2026-11-06
OSVUSN-8760-1 No score

linux-nvidia-7.0 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • User-space API (UAPI);
  • Kernel build system;
  • ARM32 architecture;
  • ARM64 architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Drivers core;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Character device driver;
  • Hardware random number generator core;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • System reset/shutdown drivers;
  • Power sequencing drivers;
  • PTP clock framework;
  • Voltage and Current Regulator drivers;
  • RPMSG subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • VME bus staging drivers;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Cadence USB3 driver;
  • ULPI bus;
  • DesignWare USB3 driver;
  • Faraday FOTG210 USB2 dual-role controller driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • Intel USBIO USB I/O expander driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • VFIO drivers;
  • Framebuffer layer;
  • Virtio drivers;
  • BTRFS file system;
  • EROFS file system;
  • exFAT file system;
  • F2FS file system;
  • File systems infrastructure;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • OCFS2 file system;
  • Proc file system;
  • SMB network file system;
  • UDF file system;
  • XFS file system;
  • Key management;
  • BPF subsystem;
  • Memory management;
  • Software nodes and device properties;
  • Glob pattern matching library;
  • Memory Management;
  • KVM subsystem;
  • Mellanox drivers;
  • Restartable sequences system call mechanism;
  • Socket messages infrastructure;
  • Network traffic control;
  • Bluetooth subsystem;
  • Netfilter;
  • Networking core;
  • Network sockets;
  • TCP network protocol;
  • io_uring subsystem;
  • IPC subsystem;
  • Audit subsystem;
  • Perf events;
  • Kernel fork() syscall;
  • Locking primitives;
  • Kernel module support;
  • Scheduler infrastructure;
  • Signal handling mechanism;
  • Timer subsystem;
  • Tracing infrastructure;
  • Debug objects infrastructure;
  • 6LoWPAN network protocol;
  • IEEE 802 network protocols;
  • 9P file system network protocol;
  • B.A.T.M.A.N. meshing protocol;
  • Ethernet bridge;
  • Devlink API;
  • HSR network protocol;
  • IEEE802154.4 network protocol;
  • IPv4 networking;
  • IPv6 networking; …
Record
USN-8760-1
Updated
2026-11-06

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel
Azure Linux:3
 before 6.6.145.2-1
6.6.145.2-1
linux-lts
Alpaquita:23
 6.1.177-r0 up to 6.1.182-r0
6.1.182-r0
linux-lts
Alpaquita:25
 6.12.95-r0 up to 6.12.103-r0
6.12.103-r0
linux-lts
Alpaquita:stream
 6.18.38-r0 up to 6.18.43-r0
6.18.43-r0
bpftool
TuxCare:CentOS:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel
TuxCare:CentOS:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-debug
TuxCare:CentOS:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-debug-devel
TuxCare:CentOS:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-devel
TuxCare:CentOS:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-doc
TuxCare:CentOS:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-headers
TuxCare:CentOS:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-tools
TuxCare:CentOS:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-tools-libs
TuxCare:CentOS:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-tools-libs-devel
TuxCare:CentOS:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
perf
TuxCare:CentOS:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
python-perf
TuxCare:CentOS:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
bpftool
TuxCare:OracleLinux:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel
TuxCare:OracleLinux:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-debug
TuxCare:OracleLinux:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-debug-devel
TuxCare:OracleLinux:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-devel
TuxCare:OracleLinux:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-doc
TuxCare:OracleLinux:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-headers
TuxCare:OracleLinux:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-tools
TuxCare:OracleLinux:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-tools-libs
TuxCare:OracleLinux:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-tools-libs-devel
TuxCare:OracleLinux:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
perf
TuxCare:OracleLinux:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
python-perf
TuxCare:OracleLinux:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
bpftool
TuxCare:RHEL:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel
TuxCare:RHEL:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-debug
TuxCare:RHEL:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-debug-devel
TuxCare:RHEL:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-devel
TuxCare:RHEL:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-doc
TuxCare:RHEL:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-headers
TuxCare:RHEL:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-tools
TuxCare:RHEL:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-tools-libs
TuxCare:RHEL:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-tools-libs-devel
TuxCare:RHEL:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
perf
TuxCare:RHEL:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
python-perf
TuxCare:RHEL:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
bpftool
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 7.0.0-284.1101.el9_2.tuxcare.11.els14
7.0.0-284.1101.el9_2.tuxcare.11.els14
kernel
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-abi-stablelists
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-core
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-cross-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-debug-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-debug-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-debug-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-debug-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-debug-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-doc
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-ipaclones-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-selftests-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-tools
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-tools-libs
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-tools-libs-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
libbpf
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.11.els14
2:1.0.0-2.el9_2.tuxcare.11.els14
libbpf-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.11.els14
2:1.0.0-2.el9_2.tuxcare.11.els14
libbpf-static
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.11.els14
2:1.0.0-2.el9_2.tuxcare.11.els14
perf
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
python3-perf
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
rtla
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
linux-buildinfo-5.4.0-238-generic
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-buildinfo-5.4.0-238-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-cloud-tools-5.4.0-238
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-cloud-tools-5.4.0-238-generic
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-cloud-tools-5.4.0-238-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-cloud-tools-common
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-doc
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-headers-5.4.0-238
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-headers-5.4.0-238-generic
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-headers-5.4.0-238-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-image-unsigned-5.4.0-238-generic
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-image-unsigned-5.4.0-238-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-libc-dev
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-modules-5.4.0-238-generic
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-modules-5.4.0-238-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-modules-extra-5.4.0-238-generic
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-source-5.4.0
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-tools-5.4.0-238
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-tools-5.4.0-238-generic
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
Kernel
Linux
 2.6.24 up to 5.10.261, 5.11.0 up to 5.15.212, 5.16.0 up to 6.1.178, 6.2.0 up to 6.6.145, 6.7.0 up to 6.12.96, 6.13.0 up to 6.18.39, 6.19.0 up to 7.1.4
5.10.2615.15.2126.1.1786.6.1456.12.966.18.397.1.4
linux
Debian:12
 before 6.1.180-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 45 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.170-16.1.170-26.1.170-36.1.172-16.1.174-16.1.176-16.1.177-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-1
6.1.180-1
linux
Debian:13
 before 6.12.96-1, plus listed versions
6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-1
Show 25 moreShow less
6.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+1
6.12.96-1
linux
Debian:14
 before 7.1.4-1, plus listed versions
6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1
Show 45 moreShow less
6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1
7.1.4-1
linux-6.12
Debian:12
 before 6.12.100-1~deb12u1
6.12.100-1~deb12u1
kernel
openEuler:22.03-LTS-SP4
From an advisory covering 27 CVEs
 before 5.10.0-330.0.0.231.oe2203sp4
5.10.0-330.0.0.231.oe2203sp4
linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
rootio-linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
rootio-linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
kernel-obs-build
SUSE:Linux Micro Extras 6.2
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-syms
SUSE:Linux Micro Extras 6.2
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-64kb
SUSE:Linux Micro 6.2
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-default
SUSE:Linux Micro 6.2
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-default-base
SUSE:Linux Micro 6.2
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1.160000.2.26
6.12.0-160000.39.1.160000.2.26
kernel-rt
SUSE:Linux Micro 6.2
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-source
SUSE:Linux Micro 6.2
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-64kb
SUSE:Linux Enterprise Server 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-azure
SUSE:Linux Enterprise Server 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-default
SUSE:Linux Enterprise Server 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-default-base
SUSE:Linux Enterprise Server 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1.160000.2.26
6.12.0-160000.39.1.160000.2.26
kernel-docs
SUSE:Linux Enterprise Server 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-kvmsmall
SUSE:Linux Enterprise Server 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-obs-qa
SUSE:Linux Enterprise Server 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-source
SUSE:Linux Enterprise Server 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-syms
SUSE:Linux Enterprise Server 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-64kb
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-azure
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-default
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1.160000.2.26
6.12.0-160000.39.1.160000.2.26
kernel-docs
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-kvmsmall
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-obs-qa
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-source
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-syms
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-zfcpdump
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-default
SUSE:Linux Micro 6.0
From an advisory covering 98 CVEs
 before 6.4.0-159998.54.1
6.4.0-159998.54.1
kernel-default-base
SUSE:Linux Micro 6.0
From an advisory covering 98 CVEs
 before 6.4.0-159998.54.1.159998.21.40
6.4.0-159998.54.1.159998.21.40
kernel-kvmsmall
SUSE:Linux Micro 6.0
From an advisory covering 98 CVEs
 before 6.4.0-159998.54.1
6.4.0-159998.54.1
kernel-source
SUSE:Linux Micro 6.0
From an advisory covering 98 CVEs
 before 6.4.0-159998.54.1
6.4.0-159998.54.1
kernel-default
SUSE:Linux Micro 6.1
From an advisory covering 98 CVEs
 before 6.4.0-159998.54.1
6.4.0-159998.54.1
kernel-default-base
SUSE:Linux Micro 6.1
From an advisory covering 98 CVEs
 before 6.4.0-159998.54.1.159998.21.39
6.4.0-159998.54.1.159998.21.39
kernel-kvmsmall
SUSE:Linux Micro 6.1
From an advisory covering 98 CVEs
 before 6.4.0-159998.54.1
6.4.0-159998.54.1
kernel-source
SUSE:Linux Micro 6.1
From an advisory covering 98 CVEs
 before 6.4.0-159998.54.1
6.4.0-159998.54.1
kernel-rt
SUSE:Linux Micro 6.0
From an advisory covering 98 CVEs
 before 6.4.0-159998.54.1
6.4.0-159998.54.1
kernel-source-rt
SUSE:Linux Micro 6.0
From an advisory covering 98 CVEs
 before 6.4.0-159998.54.1
6.4.0-159998.54.1
kernel-default
SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE
From an advisory covering 20 CVEs
 before 3.0.101-108.223.1
3.0.101-108.223.1
kernel-docs
SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE
From an advisory covering 20 CVEs
 before 3.0.101-108.223.1
3.0.101-108.223.1
kernel-ec2
SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE
From an advisory covering 20 CVEs
 before 3.0.101-108.223.1
3.0.101-108.223.1
kernel-source
SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE
From an advisory covering 20 CVEs
 before 3.0.101-108.223.1
3.0.101-108.223.1
kernel-syms
SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE
From an advisory covering 20 CVEs
 before 3.0.101-108.223.1
3.0.101-108.223.1
kernel-trace
SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE
From an advisory covering 20 CVEs
 before 3.0.101-108.223.1
3.0.101-108.223.1
kernel-xen
SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE
From an advisory covering 20 CVEs
 before 3.0.101-108.223.1
3.0.101-108.223.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1
6.4.0-150600.23.138.1
kernel-livepatch-SLE15-SP6_Update_32
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 124 CVEs
 before 1-150600.13.3.1
1-150600.13.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP6
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1
6.4.0-150600.23.138.1
kernel-64kb
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1
6.4.0-150600.23.138.1
kernel-default
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1
6.4.0-150600.23.138.1
kernel-default-base
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1.150600.12.64.1
6.4.0-150600.23.138.1.150600.12.64.1
kernel-docs
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1
6.4.0-150600.23.138.1
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1
6.4.0-150600.23.138.1
kernel-source
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1
6.4.0-150600.23.138.1
kernel-syms
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1
6.4.0-150600.23.138.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1
6.4.0-150600.23.138.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1
6.4.0-150600.23.138.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1.150600.12.64.1
6.4.0-150600.23.138.1.150600.12.64.1
kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1
6.4.0-150600.23.138.1
kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1
6.4.0-150600.23.138.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1
6.4.0-150600.23.138.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1
6.4.0-150600.23.138.1
kernel-rt
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 110 CVEs
 before 5.14.21-150500.13.164.1
5.14.21-150500.13.164.1
kernel-source-rt
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 110 CVEs
 before 5.14.21-150500.13.164.1
5.14.21-150500.13.164.1
kernel-rt
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 86 CVEs
 before 5.14.21-150400.15.189.1
5.14.21-150400.15.189.1
kernel-source-rt
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 86 CVEs
 before 5.14.21-150400.15.189.1
5.14.21-150400.15.189.1
kernel-rt
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 86 CVEs
 before 5.14.21-150400.15.189.1
5.14.21-150400.15.189.1
kernel-source-rt
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 86 CVEs
 before 5.14.21-150400.15.189.1
5.14.21-150400.15.189.1
kernel-default
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 110 CVEs
 before 5.14.21-150500.55.192.2
5.14.21-150500.55.192.2
kernel-default-base
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 110 CVEs
 before 5.14.21-150500.55.192.2.150500.6.89.2
5.14.21-150500.55.192.2.150500.6.89.2
kernel-source
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 110 CVEs
 before 5.14.21-150500.55.192.2
5.14.21-150500.55.192.2
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP5
From an advisory covering 110 CVEs
 before 5.14.21-150500.55.192.2
5.14.21-150500.55.192.2
kernel-livepatch-SLE15-SP5_Update_46
SUSE:Linux Enterprise Live Patching 15 SP5
From an advisory covering 110 CVEs
 before 1-150500.11.3.2
1-150500.11.3.2
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 110 CVEs
 before 5.14.21-150500.55.192.2
5.14.21-150500.55.192.2
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 110 CVEs
 before 5.14.21-150500.55.192.2
5.14.21-150500.55.192.2
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 110 CVEs
 before 5.14.21-150500.55.192.2.150500.6.89.2
5.14.21-150500.55.192.2.150500.6.89.2
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 110 CVEs
 before 5.14.21-150500.55.192.1
5.14.21-150500.55.192.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 110 CVEs
 before 5.14.21-150500.55.192.2
5.14.21-150500.55.192.2
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 110 CVEs
 before 5.14.21-150500.55.192.2
5.14.21-150500.55.192.2
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 110 CVEs
 before 5.14.21-150500.55.192.1
5.14.21-150500.55.192.1
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 110 CVEs
 before 5.14.21-150500.55.192.2
5.14.21-150500.55.192.2
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 110 CVEs
 before 5.14.21-150500.55.192.2
5.14.21-150500.55.192.2
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 110 CVEs
 before 5.14.21-150500.55.192.2.150500.6.89.2
5.14.21-150500.55.192.2.150500.6.89.2
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 110 CVEs
 before 5.14.21-150500.55.192.1
5.14.21-150500.55.192.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 110 CVEs
 before 5.14.21-150500.55.192.2
5.14.21-150500.55.192.2
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 110 CVEs
 before 5.14.21-150500.55.192.2
5.14.21-150500.55.192.2
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 110 CVEs
 before 5.14.21-150500.55.192.1
5.14.21-150500.55.192.1
kernel-64kb
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 110 CVEs
 before 5.14.21-150500.55.192.2
5.14.21-150500.55.192.2
kernel-default
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 110 CVEs
 before 5.14.21-150500.55.192.2
5.14.21-150500.55.192.2
kernel-default-base
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 110 CVEs
 before 5.14.21-150500.55.192.2.150500.6.89.2
5.14.21-150500.55.192.2.150500.6.89.2
kernel-docs
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 110 CVEs
 before 5.14.21-150500.55.192.1
5.14.21-150500.55.192.1
linux
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
3.11.0-12.193.12.0-1.33.12.0-2.53.12.0-2.73.12.0-3.8
Show 45 moreShow less
3.12.0-3.93.12.0-4.103.12.0-4.123.12.0-5.133.12.0-7.153.13.0-1.163.13.0-2.173.13.0-3.183.13.0-4.193.13.0-5.203.13.0-6.233.13.0-7.253.13.0-7.263.13.0-8.273.13.0-8.283.13.0-10.303.13.0-11.313.13.0-12.323.13.0-13.333.13.0-14.343.13.0-15.353.13.0-16.363.13.0-17.373.13.0-18.383.13.0-19.393.13.0-19.403.13.0-20.423.13.0-21.433.13.0-22.443.13.0-23.453.13.0-24.463.13.0-24.473.13.0-27.503.13.0-29.533.13.0-30.543.13.0-30.553.13.0-32.573.13.0-33.583.13.0-34.603.13.0-35.623.13.0-36.633.13.0-37.643.13.0-39.663.13.0-40.693.13.0-41.70
 None known
linux-aws
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9
Show 45 moreShow less
4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80
 None known
linux-azure
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2
Show 45 moreShow less
4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1
 None known
linux-lts-xenial
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1
Show 45 moreShow less
4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1
 None known
linux
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11
Show 45 moreShow less
4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96
 None known
linux-aws
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18
Show 45 moreShow less
4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93
 None known
linux-aws-hwe
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1
Show 45 moreShow less
4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1
 None known
linux-azure
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 45 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71
 None known
linux-gcp
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
Show 45 moreShow less
4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1
 None known
linux-hwe
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 45 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1
 None known
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-kvm
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15
Show 45 moreShow less
4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.674.4.0-1062.694.4.0-1063.704.4.0-1064.714.4.0-1065.724.4.0-1066.734.4.0-1068.754.4.0-1069.764.4.0-1070.774.4.0-1071.784.4.0-1075.824.4.0-1076.834.4.0-1077.84
 None known
linux-oracle
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1
Show 45 moreShow less
4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1
 None known
linux-fips
Ubuntu:Pro:FIPS-updates:16.04:LTS
 All versions, plus listed versions
4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13
Show 45 moreShow less
4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78
 None known
linux-fips
Ubuntu:Pro:FIPS:16.04:LTS
 All versions, plus listed versions
4.4.0-1001.14.4.0-1002.2
 None known
linux
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 45 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107
 None known
linux-aws
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 45 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-aws-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-4.15
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102
Show 45 moreShow less
4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1
Show 45 moreShow less
5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-4.15
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92
Show 45 moreShow less
4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gcp-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 45 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-ibm-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1
Show 45 moreShow less
5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1
 None known
linux-kvm
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8
Show 45 moreShow less
4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13
Show 45 moreShow less
4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-oracle-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1
 None known
linux-raspi-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1
Show 45 moreShow less
5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1
 None known
linux-aws-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24
Show 45 moreShow less
4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93
 None known
linux-azure-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10
Show 45 moreShow less
4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80
 None known
linux-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42
Show 45 moreShow less
4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21
Show 45 moreShow less
4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.794.15.0-2075.804.15.0-2076.814.15.0-2077.83
 None known
linux-aws-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.4
 None known
linux-azure-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.2
 None known
linux-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1011.12
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.1
 None known
linux
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 45 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110
 None known
linux-aws
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5
Show 45 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1117.124~20.04.1, plus listed versions
5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1
Show 45 moreShow less
5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1
5.15.0-1117.124~20.04.1
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8
Show 45 moreShow less
5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
linux-azure-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
 None known
linux-azure-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1123.132~20.04.1, plus listed versions
5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1
Show 45 moreShow less
5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1
5.15.0-1123.132~20.04.1
linux-azure-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
 None known
linux-azure-fde
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
 None known
linux-azure-fde-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1122.131~20.04.1, plus listed versions
5.15.0-1019.24~20.04.1.15.15.0-1020.25~20.04.1.15.15.0-1021.26~20.04.1.15.15.0-1029.36~20.04.1.15.15.0-1030.37~20.04.1.1
Show 45 moreShow less
5.15.0-1031.38~20.04.1.15.15.0-1033.40~20.04.1.15.15.0-1034.41~20.04.1.25.15.0-1035.42~20.04.1.15.15.0-1036.43~20.04.1.15.15.0-1037.44~20.04.1.15.15.0-1038.45~20.04.1.15.15.0-1039.46~20.04.1.15.15.0-1040.47~20.04.1.15.15.0-1041.48~20.04.1.15.15.0-1042.49~20.04.1.15.15.0-1043.50~20.04.1.15.15.0-1046.53~20.04.1.15.15.0-1047.54~20.04.1.15.15.0-1049.56~20.04.1.15.15.0-1050.57~20.04.1.15.15.0-1051.59~20.04.1.15.15.0-1052.60~20.04.1.15.15.0-1053.61~20.04.1.15.15.0-1054.62~20.04.1.15.15.0-1056.64~20.04.1.15.15.0-1057.65~20.04.1.15.15.0-1058.66~20.04.2.15.15.0-1059.67~20.04.1.15.15.0-1060.69~20.04.1.15.15.0-1061.70~20.04.1.15.15.0-1063.72~20.04.1.15.15.0-1064.73~20.04.1.15.15.0-1065.74~20.04.1.15.15.0-1067.76~20.04.1.15.15.0-1068.77~20.04.1.15.15.0-1070.79~20.04.1.15.15.0-1071.80~20.04.1.15.15.0-1072.81~20.04.1.15.15.0-1073.82~20.04.1.15.15.0-1074.83~20.04.1.15.15.0-1076.85~20.04.1.15.15.0-1078.87~20.04.1.15.15.0-1081.90~20.04.1.15.15.0-1082.91~20.04.1.15.15.0-1086.95~20.04.1.15.15.0-1087.96~20.04.1.15.15.0-1088.97~20.04.1.15.15.0-1089.98~20.04.1.15.15.0-1091.100~20.04.1.1
5.15.0-1122.131~20.04.1
linux-bluefield
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.4.0-1007.105.4.0-1011.145.4.0-1012.155.4.0-1013.165.4.0-1016.19
Show 45 moreShow less
5.4.0-1019.225.4.0-1020.235.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1030.335.4.0-1032.355.4.0-1035.385.4.0-1036.395.4.0-1040.445.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1049.555.4.0-1050.565.4.0-1054.605.4.0-1058.645.4.0-1059.655.4.0-1060.665.4.0-1062.685.4.0-1064.705.4.0-1065.715.4.0-1066.725.4.0-1068.745.4.0-1070.765.4.0-1071.775.4.0-1072.785.4.0-1073.795.4.0-1074.805.4.0-1075.815.4.0-1076.825.4.0-1077.835.4.0-1078.845.4.0-1079.855.4.0-1080.875.4.0-1081.885.4.0-1082.895.4.0-1083.905.4.0-1084.915.4.0-1085.92
 None known
linux-gcp
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7
Show 45 moreShow less
5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1033.355.4.0-1034.375.4.0-1036.395.4.0-1037.405.4.0-1038.415.4.0-1040.435.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1044.475.4.0-1046.495.4.0-1049.535.4.0-1051.555.4.0-1052.565.4.0-1053.575.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1060.645.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1065.695.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1072.775.4.0-1073.785.4.0-1075.80
 None known
linux-gcp-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1
Show 7 moreShow less
5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3
 None known
linux-gcp-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1
Show 8 moreShow less
5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1
 None known
linux-gcp-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1118.128~20.04.1, plus listed versions
5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2
Show 45 moreShow less
5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.15.15.0-1065.73~20.04.15.15.0-1066.74~20.04.15.15.0-1067.75~20.04.15.15.0-1068.76~20.04.15.15.0-1069.77~20.04.15.15.0-1070.78~20.04.15.15.0-1071.79~20.04.15.15.0-1072.80~20.04.15.15.0-1073.81~20.04.15.15.0-1074.83~20.04.1
5.15.0-1118.128~20.04.1
linux-gcp-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41
 None known
linux-gke
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
 None known
linux-gke-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1
Show 13 moreShow less
5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1
 None known
linux-gkeop
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13
Show 45 moreShow less
5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77
 None known
linux-gkeop-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2
Show 40 moreShow less
5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1
 None known
linux-hwe-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1
Show 7 moreShow less
5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1
 None known
linux-hwe-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1
Show 11 moreShow less
5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1
 None known
linux-hwe-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-198.208~20.04.1, plus listed versions
5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
Show 45 moreShow less
5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1
5.15.0-198.208~20.04.1
linux-hwe-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1
Show 16 moreShow less
5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1
 None known
linux-ibm
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.4.0-1003.45.4.0-1004.55.4.0-1005.65.4.0-1006.75.4.0-1007.8
Show 45 moreShow less
5.4.0-1008.95.4.0-1010.115.4.0-1012.135.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1017.195.4.0-1018.205.4.0-1019.215.4.0-1020.225.4.0-1021.235.4.0-1023.255.4.0-1026.295.4.0-1028.325.4.0-1029.335.4.0-1031.355.4.0-1032.365.4.0-1033.375.4.0-1034.385.4.0-1036.415.4.0-1037.425.4.0-1040.455.4.0-1041.465.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1048.535.4.0-1049.545.4.0-1050.555.4.0-1051.565.4.0-1052.575.4.0-1053.585.4.0-1054.595.4.0-1056.615.4.0-1057.625.4.0-1058.635.4.0-1059.645.4.0-1060.655.4.0-1061.665.4.0-1063.685.4.0-1064.695.4.0-1065.705.4.0-1066.71
 None known
linux-ibm-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1111.115~20.04.1, plus listed versions
5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1
Show 45 moreShow less
5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.15.15.0-1057.60~20.04.15.15.0-1058.61~20.04.15.15.0-1059.62~20.04.15.15.0-1060.63~20.04.15.15.0-1061.64~20.04.15.15.0-1062.65~20.04.15.15.0-1063.66~20.04.15.15.0-1064.67~20.04.15.15.0-1065.68~20.04.15.15.0-1066.69~20.04.15.15.0-1067.70~20.04.15.15.0-1068.71~20.04.15.15.0-1069.72~20.04.15.15.0-1074.77~20.04.15.15.0-1075.78~20.04.15.15.0-1076.79~20.04.15.15.0-1078.81~20.04.15.15.0-1079.82~20.04.15.15.0-1080.83~20.04.15.15.0-1081.84~20.04.15.15.0-1083.86~20.04.15.15.0-1085.88~20.04.15.15.0-1086.89~20.04.15.15.0-1087.90~20.04.15.15.0-1089.92~20.04.15.15.0-1090.93~20.04.15.15.0-1091.94~20.04.15.15.0-1092.95~20.04.15.15.0-1093.96~20.04.15.15.0-1094.97~20.04.1
5.15.0-1111.115~20.04.1
linux-intel-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19
 None known
linux-intel-iotg-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1112.118~20.04.1, plus listed versions
5.15.0-1003.5~20.04.15.15.0-1008.11~20.04.15.15.0-1010.14~20.04.15.15.0-1015.20~20.04.25.15.0-1016.21~20.04.1
Show 45 moreShow less
5.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1021.26~20.04.15.15.0-1023.28~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1030.35~20.04.15.15.0-1031.36~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1040.46~20.04.15.15.0-1043.49~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1060.66~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.25.15.0-1074.80~20.04.15.15.0-1077.83~20.04.15.15.0-1078.84~20.04.15.15.0-1079.85~20.04.15.15.0-1083.89~20.04.15.15.0-1084.90~20.04.15.15.0-1085.91~20.04.15.15.0-1086.92~20.04.1
5.15.0-1112.118~20.04.1
linux-iot
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.4.0-1001.35.4.0-1004.65.4.0-1005.75.4.0-1006.85.4.0-1009.11
Show 45 moreShow less
5.4.0-1010.125.4.0-1011.135.4.0-1012.145.4.0-1013.155.4.0-1014.165.4.0-1017.185.4.0-1018.195.4.0-1019.205.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1035.365.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1041.425.4.0-1042.435.4.0-1043.445.4.0-1044.455.4.0-1045.465.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1060.635.4.0-1061.645.4.0-1062.65
 None known
linux-kvm
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1004.45.4.0-1006.6
Show 45 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1023.235.4.0-1024.245.4.0-1026.275.4.0-1028.295.4.0-1030.315.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1041.425.4.0-1044.465.4.0-1045.475.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1050.525.4.0-1051.535.4.0-1053.555.4.0-1054.565.4.0-1055.575.4.0-1056.585.4.0-1058.615.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1068.725.4.0-1070.755.4.0-1071.765.4.0-1073.78
 None known
linux-lowlatency-hwe-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-195.205~20.04.1, plus listed versions
5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
Show 45 moreShow less
5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.88~20.04.15.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.95~20.04.15.15.0-87.96~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-110.120~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1
5.15.0-195.205~20.04.1
linux-nvidia-tegra-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1070.72~20.04.1, plus listed versions
5.15.0-1009.9~20.04.15.15.0-1010.10~20.04.15.15.0-1012.12~20.04.15.15.0-1014.14~20.04.15.15.0-1015.15~20.04.1
Show 36 moreShow less
5.15.0-1016.16~20.04.15.15.0-1017.17~20.04.15.15.0-1018.18~20.04.15.15.0-1019.19~20.04.15.15.0-1020.20~20.04.15.15.0-1022.22~20.04.15.15.0-1025.25~20.04.15.15.0-1027.27~20.04.15.15.0-1030.30~20.04.15.15.0-1032.32~20.04.15.15.0-1039.39~20.04.15.15.0-1040.40~20.04.15.15.0-1041.41~20.04.15.15.0-1042.42~20.04.15.15.0-1043.43~20.04.15.15.0-1044.44~20.04.15.15.0-1045.45~20.04.15.15.0-1046.46~20.04.15.15.0-1047.47~20.04.15.15.0-1048.48~20.04.15.15.0-1049.49~20.04.15.15.0-1050.50~20.04.15.15.0-1051.51~20.04.15.15.0-1052.52~20.04.25.15.0-1053.53~20.04.15.15.0-1055.55~20.04.15.15.0-1057.57~20.04.15.15.0-1058.58~20.04.15.15.0-1060.60~20.04.15.15.0-1061.61~20.04.15.15.0-1063.63~20.04.15.15.0-1064.66~20.04.15.15.0-1065.67~20.04.15.15.0-1066.68~20.04.15.15.0-1067.69~20.04.15.15.0-1068.70~20.04.1
5.15.0-1070.72~20.04.1
linux-oem-5.10
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17
Show 21 moreShow less
5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61
 None known
linux-oem-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21
Show 7 moreShow less
5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36
 None known
linux-oem-5.14
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10
Show 30 moreShow less
5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67
 None known
linux-oem-5.6
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13
Show 24 moreShow less
5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60
 None known
kernel-source
openSUSE:Tumbleweed
From an advisory covering 351 CVEs
 before 7.1.7-1.1
7.1.7-1.1
dtb-aarch64
openSUSE:Leap 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-64kb
openSUSE:Leap 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-azure
openSUSE:Leap 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-default
openSUSE:Leap 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-default-base
openSUSE:Leap 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1.160000.2.25
6.12.0-160000.39.1.160000.2.25
kernel-docs
openSUSE:Leap 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-kvmsmall
openSUSE:Leap 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-obs-build
openSUSE:Leap 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-obs-qa
openSUSE:Leap 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-rt
openSUSE:Leap 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-source
openSUSE:Leap 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-syms
openSUSE:Leap 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-zfcpdump
openSUSE:Leap 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1

History

History
RecordedChangedSources
affectedOSV
affectedOSV
affected, aliases, referencesOSV
affected, aliases, referencesOSV
affected, facts, referencesOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-64422 is a high vulnerability (CVSS 7.1) in Linux, published July 25, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.14%, the 3rd percentile. Fixed in kernel 6.6.145.2-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 564 package rows, 3,064 versions, 5,733 references and the rest of 41 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 12 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open