Every CVE Search/ Get API key

CVE-2026-64560

posix-cpu-timers: Prevent UAF caused by non-leader exec() race

7.8 HighPublic exploitFix available

In the Linux kernel, the following vulnerability has been resolved:

posix-cpu-timers: Prevent UAF caused by non-leader exec() race

Wongi and Jungwoo decoded and reported a non-leader exec() related race which can result in an UAF:

sys_timer_delete() exec() posix_cpu_timer_del() // Observes old leader p = pid_task(pid, pid_type); de_thread() switch_leader(); release_task(old_leader) __exit_signal(old_leader) sighand = lock(old_leader, sighand); posix_cpu_timers*_exit(); sighand = lock_task_sighand(p) unhash_task(old_leader); sh = lock(p, sighand) old_leader->sighand = NULL; unlock(sighand); (p->sighand == NULL) unlock(sh) return NULL;

// Returns without action if(!sighand) return 0; free_posix_timer();

This is "harmless" unless the deleted timer was armed and enqueued in p->signal because on exec() a TGID targeted timer is inherited.

As sys_timer_delete() freed the underlying posix timer object run_posix_cpu_timers() or any timerqueue related add/delete operations on other timers will access the freed object's timerqueue node, which results in an UAF.

There is a similar problem vs. posix_cpu_timer_set(). For regular posix timers it just transiently returns -ESRCH to user space, but for the use case in do_cpu_nanosleep() it's the same UAF just that the k_itimer is allocated on the stack.

Also posix_cpu_timer_rearm() fails to rearm the timer, which means it stops to expire.

While debating solutions Frederic pointed out another problem:

posix_cpu_timer_del(tmr) __exit_signal(p) posix_cpu_timers*_exit(p); unhash_task(p); p->sighand = NULL; sh = lock_task_sighand(p) sighand = p->sighand; if (!sighand) return NULL; lock(sighand);

 if (!sh)
WARN_ON_ONCE(timer_queued(tmr));

On weakly ordered architectures it is not guaranteed that posix_cpu_timer_del() will observe the stores in posix_cpu_timers*_exit() when p->sighand is observed as NULL, which means the WARN() can be a false positive.

Solve these issues by:

  1. Changing the store in __exit_signal() to smp_store_release().

  2. Adding a smp_acquire__after_ctrl_dep() into the !sighand path of lock_task_sighand().

  3. Creating a helper function for looking up the task and locking sighand which does not return when sighand == NULL. Instead it retries the task lookup and only if that fails it gives up.

  4. Using that helper in the three affected functions.

#1/#2 ensures that the reader side which observes sighand == NULL also observes all preceeding stores, i.e. the stores in posix_cpu_timers*_exit() and the ones in unhash_task().

#3 ensures that the above described non-leader exec() situation is handled gracefully. When the task lookup returns the old leader, but sighand == NULL then it retries. In the non-leader exec() case the subsequent task lookup will observe the new leader due to #1/#2. In normal exit() scenarios the subsequent lookup fails.

When the task lookup fails, the function also checks whether the timer is still enqueued and issues a warning if that's the case. Unfortunately there is nothing which can be done about it, but as the task is already not longer visible the timer should not be accessed anymore. This check also requires memory ordering, which is not provided when the first lookup fails. To achieve that the check is preceeded by a smp_rmb() which pairs with the smp_wmb() in write_seqlock() in __exit_signal(). That ensures that the stores in posix_cpu_timers*_exit() are visible.

The history of the non-leader exec() issue goes back to the early days of posix CPU timers, which stored a pointer to the group leader task in the timer. That obviously fails when a non-leader exec() switches the leader. commit e0a70217107e ("posix-cpu-timers: workaround to suppress the problems with mt exec") added a temporary workaround for that in 2010 which surv ---truncated---

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.50%Up 0.4 points since Jul 30, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.8

posix-cpu-timers: Prevent UAF caused by non-leader exec() race

In the Linux kernel, the following vulnerability has been resolved:

posix-cpu-timers: Prevent UAF caused by non-leader exec() race

Wongi and Jungwoo decoded and reported a non-leader exec() related race which can result in an UAF:

sys_timer_delete() exec() posix_cpu_timer_del() // Observes old leader p = pid_task(pid, pid_type); de_thread() switch_leader(); release_task(old_leader) __exit_signal(old_leader) sighand = lock(old_leader, sighand); posix_cpu_timers*_exit(); sighand = lock_task_sighand(p) unhash_task(old_leader); sh = lock(p, sighand) old_leader->sighand = NULL; unlock(sighand); (p->sighand == NULL) unlock(sh) return NULL;

// Returns without action if(!sighand) return 0; free_posix_timer();

This is "harmless" unless the deleted timer was armed and enqueued in p->signal because on exec() a TGID targeted timer is inherited.

As sys_timer_delete() freed the underlying posix timer object run_posix_cpu_timers() or any timerqueue related add/delete operations on other timers will access the freed object's timerqueue node, which results in an UAF.

There is a similar problem vs. posix_cpu_timer_set(). For regular posix timers it just transiently returns -ESRCH to user space, but for the use case in do_cpu_nanosleep() it's the same UAF just that the k_itimer is allocated on the stack.

Also posix_cpu_timer_rearm() fails to rearm the timer, which means it stops to expire.

While debating solutions Frederic pointed out another problem:

posix_cpu_timer_del(tmr) __exit_signal(p) posix_cpu_timers*_exit(p); unhash_task(p); p->sighand = NULL; sh = lock_task_sighand(p) sighand = p->sighand; if (!sighand) return NULL; lock(sighand);

 if (!sh)
WARN_ON_ONCE(timer_queued(tmr));

On weakly ordered architectures it is not guaranteed that posix_cpu_timer_del() will observe the stores in posix_cpu_timers*_exit() when p->sighand is observed as NULL, which means the WARN() can be a false positive.

Solve these issues by:

  1. Changing the store in __exit_signal() to smp_store_release().

  2. Adding a smp_acquire__after_ctrl_dep() into the !sighand path of lock_task_sighand().

  3. Creating a helper function for looking up the task and locking sighand which does not return when sighand == NULL. Instead it retries the task lookup and only if that fails it gives up.

  4. Using that helper in the three affected functions.

#1/#2 ensures that the reader side which observes sighand == NULL also observes all preceeding stores, i.e. the stores in posix_cpu_timers*_exit() and the ones in unhash_task().

#3 ensures that the above described non-leader exec() situation is handled gracefully. When the task lookup returns the old leader, but sighand == NULL then it retries. In the non-leader exec() case the subsequent task lookup will observe the new leader due to #1/#2. In normal exit() scenarios the subsequent lookup fails.

When the task lookup fails, the function also checks whether the timer is still enqueued and issues a warning if that's the case. Unfortunately there is nothing which can be done about it, but as the task is already not longer visible the timer should not be accessed anymore. This check also requires memory ordering, which is not provided when the first lookup fails. To achieve that the check is preceeded by a smp_rmb() which pairs with the smp_wmb() in write_seqlock() in __exit_signal(). That ensures that the stores in posix_cpu_timers*_exit() are visible.

The history of the non-leader exec() issue goes back to the early days of posix CPU timers, which stored a pointer to the group leader task in the timer. That obviously fails when a non-leader exec() switches the leader. commit e0a70217107e ("posix-cpu-timers: workaround to suppress the problems with mt exec") added a temporary workaround for that in 2010 which surv ---truncated---

Record
CVE-2026-64560
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-362
Updated
2026-11-02
EUVDEUVD-2026-50417 7.8

In the Linux kernel, the following vulnerability has been resolved:

posix-cpu-timers: Prevent UAF caused by non-leader exec() race

Wongi and Jungwoo decoded and reported a non-leader exec() related race which can result in an UAF:

sys_timer_delete() exec() posix_cpu_timer_del() // Observes old leader p = pid_task(pid, pid_type); de_thread() switch_leader(); release_task(old_leader) __exit_signal(old_leader) sighand = lock(old_leader, sighand); posix_cpu_timers*_exit(); sighand = lock_task_sighand(p) unhash_task(old_leader); sh = lock(p, sighand) old_leader->sighand = NULL; unlock(sighand); (p->sighand == NULL) unlock(sh) return NULL;

// Returns without action if(!sighand) return 0; free_posix_timer();

This is "harmless" unless the deleted timer was armed and enqueued in p->signal because on exec() a TGID targeted timer is inherited.

As sys_timer_delete() freed the underlying posix timer object run_posix_cpu_timers() or any timerqueue related add/delete operations on other timers will access the freed object's timerqueue node, which results in an UAF.

There is a similar problem vs. posix_cpu_timer_set(). For regular posix timers it just transiently returns -ESRCH to user space, but for the use case in do_cpu_nanosleep() it's the same UAF just that the k_itimer is allocated on the stack.

Also posix_cpu_timer_rearm() fails to rearm the timer, which means it stops to expire.

While debating solutions Frederic pointed out another problem:

posix_cpu_timer_del(tmr) __exit_signal(p) posix_cpu_timers*_exit(p); unhash_task(p); p->sighand = NULL; sh = lock_task_sighand(p) sighand = p->sighand; if (!sighand) return NULL; lock(sighand);

 if (!sh)
WARN_ON_ONCE(timer_queued(tmr));

On weakly ordered architectures it is not guaranteed that posix_cpu_timer_del() will observe the stores in posix_cpu_timers*_exit() when p->sighand is observed as NULL, which means the WARN() can be a false positive.

Solve these issues by:

  1. Changing the store in __exit_signal() to smp_store_release().

  2. Adding a smp_acquire__after_ctrl_dep() into the !sighand path of lock_task_sighand().

  3. Creating a helper function for looking up the task and locking sighand which does not return when sighand == NULL. Instead it retries the task lookup and only if that fails it gives up.

  4. Using that helper in the three affected functions.

#1/#2 ensures that the reader side which observes sighand == NULL also observes all preceeding stores, i.e. the stores in posix_cpu_timers*_exit() and the ones in unhash_task().

#3 ensures that the above described non-leader exec() situation is handled gracefully. When the task lookup returns the old leader, but sighand == NULL then it retries. In the non-leader exec() case the subsequent task lookup will observe the new leader due to #1/#2. In normal exit() scenarios the subsequent lookup fails.

When the task lookup fails, the function also checks whether the timer is still enqueued and issues a warning if that's the case. Unfortunately there is nothing which can be done about it, but as the task is already not longer visible the timer should not be accessed anymore. This check also requires memory ordering, which is not provided when the first lookup fails. To achieve that the check is preceeded by a smp_rmb() which pairs with the smp_wmb() in write_seqlock() in __exit_signal(). That ensures that the stores in posix_cpu_timers*_exit() are visible.

The history of the non-leader exec() issue goes back to the early days of posix CPU timers, which stored a pointer to the group leader task in the timer. That obviously fails when a non-leader exec() switches the leader. commit e0a70217107e ("posix-cpu-timers: workaround to suppress the problems with mt exec") added a temporary workaround for that in 2010 which surv ---truncated---

Record
EUVD-2026-50417
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-78ph-mc3q-52vv 7.8

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent...

In the Linux kernel, the following vulnerability has been resolved:

posix-cpu-timers: Prevent UAF caused by non-leader exec() race

Wongi and Jungwoo decoded and reported a non-leader exec() related race which can result in an UAF:

sys_timer_delete() exec() posix_cpu_timer_del() // Observes old leader p = pid_task(pid, pid_type); de_thread() switch_leader(); release_task(old_leader) __exit_signal(old_leader) sighand = lock(old_leader, sighand); posix_cpu_timers*_exit(); sighand = lock_task_sighand(p) unhash_task(old_leader); sh = lock(p, sighand) old_leader->sighand = NULL; unlock(sighand); (p->sighand == NULL) unlock(sh) return NULL;

// Returns without action if(!sighand) return 0; free_posix_timer();

This is "harmless" unless the deleted timer was armed and enqueued in p->signal because on exec() a TGID targeted timer is inherited.

As sys_timer_delete() freed the underlying posix timer object run_posix_cpu_timers() or any timerqueue related add/delete operations on other timers will access the freed object's timerqueue node, which results in an UAF.

There is a similar problem vs. posix_cpu_timer_set(). For regular posix timers it just transiently returns -ESRCH to user space, but for the use case in do_cpu_nanosleep() it's the same UAF just that the k_itimer is allocated on the stack.

Also posix_cpu_timer_rearm() fails to rearm the timer, which means it stops to expire.

While debating solutions Frederic pointed out another problem:

posix_cpu_timer_del(tmr) __exit_signal(p) posix_cpu_timers*_exit(p); unhash_task(p); p->sighand = NULL; sh = lock_task_sighand(p) sighand = p->sighand; if (!sighand) return NULL; lock(sighand);

 if (!sh)
WARN_ON_ONCE(timer_queued(tmr));

On weakly ordered architectures it is not guaranteed that posix_cpu_timer_del() will observe the stores in posix_cpu_timers*_exit() when p->sighand is observed as NULL, which means the WARN() can be a false positive.

Solve these issues by:

  1. Changing the store in __exit_signal() to smp_store_release().

  2. Adding a smp_acquire__after_ctrl_dep() into the !sighand path of lock_task_sighand().

  3. Creating a helper function for looking up the task and locking sighand which does not return when sighand == NULL. Instead it retries the task lookup and only if that fails it gives up.

  4. Using that helper in the three affected functions.

#1/#2 ensures that the reader side which observes sighand == NULL also observes all preceeding stores, i.e. the stores in posix_cpu_timers*_exit() and the ones in unhash_task().

#3 ensures that the above described non-leader exec() situation is handled gracefully. When the task lookup returns the old leader, but sighand == NULL then it retries. In the non-leader exec() case the subsequent task lookup will observe the new leader due to #1/#2. In normal exit() scenarios the subsequent lookup fails.

When the task lookup fails, the function also checks whether the timer is still enqueued and issues a warning if that's the case. Unfortunately there is nothing which can be done about it, but as the task is already not longer visible the timer should not be accessed anymore. This check also requires memory ordering, which is not provided when the first lookup fails. To achieve that the check is preceeded by a smp_rmb() which pairs with the smp_wmb() in write_seqlock() in __exit_signal(). That ensures that the stores in posix_cpu_timers*_exit() are visible.

The history of the non-leader exec() issue goes back to the early days of posix CPU timers, which stored a pointer to the group leader task in the timer. That obviously fails when a non-leader exec() switches the leader. commit e0a70217107e ("posix-cpu-timers: workaround to suppress the problems with mt exec") added a temporary workaround for that in 2010 which surv ---truncated---

Record
GHSA-78ph-mc3q-52vv
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-362
Updated
2026-11-02
NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

posix-cpu-timers: Prevent UAF caused by non-leader exec() race

Wongi and Jungwoo decoded and reported a non-leader exec() related race which can result in an UAF:

sys_timer_delete() exec() posix_cpu_timer_del() // Observes old leader p = pid_task(pid, pid_type); de_thread() switch_leader(); release_task(old_leader) __exit_signal(old_leader) sighand = lock(old_leader, sighand); posix_cpu_timers*_exit(); sighand = lock_task_sighand(p) unhash_task(old_leader); sh = lock(p, sighand) old_leader->sighand = NULL; unlock(sighand); (p->sighand == NULL) unlock(sh) return NULL;

// Returns without action if(!sighand) return 0; free_posix_timer();

This is "harmless" unless the deleted timer was armed and enqueued in p->signal because on exec() a TGID targeted timer is inherited.

As sys_timer_delete() freed the underlying posix timer object run_posix_cpu_timers() or any timerqueue related add/delete operations on other timers will access the freed object's timerqueue node, which results in an UAF.

There is a similar problem vs. posix_cpu_timer_set(). For regular posix timers it just transiently returns -ESRCH to user space, but for the use case in do_cpu_nanosleep() it's the same UAF just that the k_itimer is allocated on the stack.

Also posix_cpu_timer_rearm() fails to rearm the timer, which means it stops to expire.

While debating solutions Frederic pointed out another problem:

posix_cpu_timer_del(tmr) __exit_signal(p) posix_cpu_timers*_exit(p); unhash_task(p); p->sighand = NULL; sh = lock_task_sighand(p) sighand = p->sighand; if (!sighand) return NULL; lock(sighand);

 if (!sh)
WARN_ON_ONCE(timer_queued(tmr));

On weakly ordered architectures it is not guaranteed that posix_cpu_timer_del() will observe the stores in posix_cpu_timers*_exit() when p->sighand is observed as NULL, which means the WARN() can be a false positive.

Solve these issues by:

  1. Changing the store in __exit_signal() to smp_store_release().

  2. Adding a smp_acquire__after_ctrl_dep() into the !sighand path of lock_task_sighand().

  3. Creating a helper function for looking up the task and locking sighand which does not return when sighand == NULL. Instead it retries the task lookup and only if that fails it gives up.

  4. Using that helper in the three affected functions.

#1/#2 ensures that the reader side which observes sighand == NULL also observes all preceeding stores, i.e. the stores in posix_cpu_timers*_exit() and the ones in unhash_task().

#3 ensures that the above described non-leader exec() situation is handled gracefully. When the task lookup returns the old leader, but sighand == NULL then it retries. In the non-leader exec() case the subsequent task lookup will observe the new leader due to #1/#2. In normal exit() scenarios the subsequent lookup fails.

When the task lookup fails, the function also checks whether the timer is still enqueued and issues a warning if that's the case. Unfortunately there is nothing which can be done about it, but as the task is already not longer visible the timer should not be accessed anymore. This check also requires memory ordering, which is not provided when the first lookup fails. To achieve that the check is preceeded by a smp_rmb() which pairs with the smp_wmb() in write_seqlock() in __exit_signal(). That ensures that the stores in posix_cpu_timers*_exit() are visible.

The history of the non-leader exec() issue goes back to the early days of posix CPU timers, which stored a pointer to the group leader task in the timer. That obviously fails when a non-leader exec() switches the leader. commit e0a70217107e ("posix-cpu-timers: workaround to suppress the problems with mt exec") added a temporary workaround for that in 2010 which surv ---truncated---

Record
CVE-2026-64560
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-362
Updated
2026-11-03
OSVBELL-CVE-2026-64560 7.8
Record
BELL-CVE-2026-64560
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 7.8

posix-cpu-timers: Prevent UAF caused by non-leader exec() race

In the Linux kernel, the following vulnerability has been resolved:

posix-cpu-timers: Prevent UAF caused by non-leader exec() race

Wongi and Jungwoo decoded and reported a non-leader exec() related race which can result in an UAF:

sys_timer_delete() exec() posix_cpu_timer_del() // Observes old leader p = pid_task(pid, pid_type); de_thread() switch_leader(); release_task(old_leader) __exit_signal(old_leader) sighand = lock(old_leader, sighand); posix_cpu_timers*_exit(); sighand = lock_task_sighand(p) unhash_task(old_leader); sh = lock(p, sighand) old_leader->sighand = NULL; unlock(sighand); (p->sighand == NULL) unlock(sh) return NULL;

// Returns without action if(!sighand) return 0; free_posix_timer();

This is "harmless" unless the deleted timer was armed and enqueued in p->signal because on exec() a TGID targeted timer is inherited.

As sys_timer_delete() freed the underlying posix timer object run_posix_cpu_timers() or any timerqueue related add/delete operations on other timers will access the freed object's timerqueue node, which results in an UAF.

There is a similar problem vs. posix_cpu_timer_set(). For regular posix timers it just transiently returns -ESRCH to user space, but for the use case in do_cpu_nanosleep() it's the same UAF just that the k_itimer is allocated on the stack.

Also posix_cpu_timer_rearm() fails to rearm the timer, which means it stops to expire.

While debating solutions Frederic pointed out another problem:

posix_cpu_timer_del(tmr) __exit_signal(p) posix_cpu_timers*_exit(p); unhash_task(p); p->sighand = NULL; sh = lock_task_sighand(p) sighand = p->sighand; if (!sighand) return NULL; lock(sighand);

 if (!sh)
WARN_ON_ONCE(timer_queued(tmr));

On weakly ordered architectures it is not guaranteed that posix_cpu_timer_del() will observe the stores in posix_cpu_timers*_exit() when p->sighand is observed as NULL, which means the WARN() can be a false positive.

Solve these issues by:

  1. Changing the store in __exit_signal() to smp_store_release().

  2. Adding a smp_acquire__after_ctrl_dep() into the !sighand path of lock_task_sighand().

  3. Creating a helper function for looking up the task and locking sighand which does not return when sighand == NULL. Instead it retries the task lookup and only if that fails it gives up.

  4. Using that helper in the three affected functions.

#1/#2 ensures that the reader side which observes sighand == NULL also observes all preceeding stores, i.e. the stores in posix_cpu_timers*_exit() and the ones in unhash_task().

#3 ensures that the above described non-leader exec() situation is handled gracefully. When the task lookup returns the old leader, but sighand == NULL then it retries. In the non-leader exec() case the subsequent task lookup will observe the new leader due to #1/#2. In normal exit() scenarios the subsequent lookup fails.

When the task lookup fails, the function also checks whether the timer is still enqueued and issues a warning if that's the case. Unfortunately there is nothing which can be done about it, but as the task is already not longer visible the timer should not be accessed anymore. This check also requires memory ordering, which is not provided when the first lookup fails. To achieve that the check is preceeded by a smp_rmb() which pairs with the smp_wmb() in write_seqlock() in __exit_signal(). That ensures that the stores in posix_cpu_timers*_exit() are visible.

The history of the non-leader exec() issue goes back to the early days of posix CPU timers, which stored a pointer to the group leader task in the timer. That obviously fails when a non-leader exec() switches the leader. commit e0a70217107e ("posix-cpu-timers: workaround to suppress the problems with mt exec") added a temporary workaround for that in 2010 which surv ---truncated---

Record
CVE-2026-64560
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-07
Show 48 moreShow less
OSVDEBIAN-CVE-2026-64560 7.8

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by non-leader exec() race Wongi and Jungwoo decoded and reported a non-leader exec() related race which can result in an UAF: sys_timer_delete() exec() posix_cpu_timer_del() // Observes old leader p = pid_task(pid, pid_type); de_thread() switch_leader(); release_task(old_leader) __exit_signal(old_leader) sighand = lock(old_leader, sighand); posix_cpu_timers*_exit(); sighand = lock_task_sighand(p) unhash_task(old_leader); sh = lock(p, sighand) old_leader->sighand = NULL; unlock(sighand); (p->sighand == NULL) unlock(sh) return NULL; // Returns without action if(!sighand) return 0; free_posix_timer(); This is "harmless" unless the deleted timer was armed and enqueued in p->signal because on exec() a TGID targeted timer is inherited. As sys_timer_delete() freed the underlying posix timer object run_posix_cpu_timers() or any timerqueue related add/delete operations on other timers will access the freed object's timerqueue node, which results in an UAF. There is a similar problem vs. posix_cpu_timer_set(). For regular posix timers it just transiently returns -ESRCH to user space, but for the use case in do_cpu_nanosleep() it's the same UAF just that the k_itimer is allocated on the stack. Also posix_cpu_timer_rearm() fails to rearm the timer, which means it stops to expire. While debating solutions Frederic pointed out another problem: posix_cpu_timer_del(tmr) __exit_signal(p) posix_cpu_timers*_exit(p); unhash_task(p); p->sighand = NULL; sh = lock_task_sighand(p) sighand = p->sighand; if (!sighand) return NULL; lock(sighand); if (!sh) WARN_ON_ONCE(timer_queued(tmr)); On weakly ordered architectures it is not guaranteed that posix_cpu_timer_del() will observe the stores in posix_cpu_timers*_exit() when p->sighand is observed as NULL, which means the WARN() can be a false positive. Solve these issues by: 1) Changing the store in __exit_signal() to smp_store_release(). 2) Adding a smp_acquire__after_ctrl_dep() into the !sighand path of lock_task_sighand(). 3) Creating a helper function for looking up the task and locking sighand which does not return when sighand == NULL. Instead it retries the task lookup and only if that fails it gives up. 4) Using that helper in the three affected functions. #1/#2 ensures that the reader side which observes sighand == NULL also observes all preceeding stores, i.e. the stores in posix_cpu_timers*_exit() and the ones in unhash_task(). #3 ensures that the above described non-leader exec() situation is handled gracefully. When the task lookup returns the old leader, but sighand == NULL then it retries. In the non-leader exec() case the subsequent task lookup will observe the new leader due to #1/#2. In normal exit() scenarios the subsequent lookup fails. When the task lookup fails, the function also checks whether the timer is still enqueued and issues a warning if that's the case. Unfortunately there is nothing which can be done about it, but as the task is already not longer visible the timer should not be accessed anymore. This check also requires memory ordering, which is not provided when the first lookup fails. To achieve that the check is preceeded by a smp_rmb() which pairs with the smp_wmb() in write_seqlock() in __exit_signal(). That ensures that the stores in posix_cpu_timers*_exit() are visible. The history of the non-leader exec() issue goes back to the early days of posix CPU timers, which stored a pointer to the group leader task in the timer. That obviously fails when a non-leader exec() switches the leader. commit e0a70217107e ("posix-cpu-timers: workaround to suppress the problems with mt exec") added a temporary workaround for that in 2010 which surv ---truncated---

Record
DEBIAN-CVE-2026-64560
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-04
OSVOESA-2026-3303 9.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

comedi: me4000: Fix potential overrun of firmware buffer

me4000_xilinx_download() loads the firmware that was requested by request_firmware(). It is possible for it to overrun the source buffer because it blindly trusts the file format. It reads a data stream length from the first 4 bytes into variable file_length and reads the data stream contents of length file_length from offset 16 onwards.

Add a test to ensure that the supplied firmware is long enough to contain the header and the data stream. On failure, log an error and return -EINVAL.

Note: The firmware loading was totally broken before commit ac584af59945 ("staging: comedi: me4000: fix firmware downloading"), but that is the most sensible target for this fix.(CVE-2026-31747)

In the Linux kernel, the following vulnerability has been resolved:

ASoC: soc-core: flush delayed work before removing DAIs and widgets

When a sound card is unbound while a PCM stream is open, a use-after-free can occur in snd_soc_dapm_stream_event(), called from the close_delayed_work workqueue handler.

During unbind, snd_soc_unbind_card() flushes delayed work and then calls soc_cleanup_card_resources(). Inside cleanup, snd_card_disconnect_sync() releases all PCM file descriptors, and the resulting PCM close path can call snd_soc_dapm_stream_stop() which schedules new delayed work with a pmdown_time timer delay. Since this happens after the flush in snd_soc_unbind_card(), the new work is not caught. soc_remove_link_components() then frees DAPM widgets before this work fires, leading to the use-after-free.

The existing flush in soc_free_pcm_runtime() also cannot help as it runs after soc_remove_link_components() has already freed the widgets.

Add a flush in soc_cleanup_card_resources() after snd_card_disconnect_sync() (after which no new PCM closes can schedule further delayed work) and before soc_remove_link_dais() and soc_remove_link_components() (which tear down the structures the delayed work accesses).(CVE-2026-43459)

In the Linux kernel, the following vulnerability has been resolved:

fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free

dlfb_ops_mmap() uses remap_pfn_range() to map vmalloc framebuffer pages to userspace but sets no vm_ops on the VMA. This means the kernel cannot track active mmaps. When dlfb_realloc_framebuffer() replaces the backing buffer via FBIOPUT_VSCREENINFO, existing mmap PTEs are not invalidated. On USB disconnect, dlfb_ops_destroy() calls vfree() on the old pages while userspace PTEs still reference them, resulting in a use-after-free: the process retains read/write access to freed kernel pages.

Add vm_operations_struct with open/close callbacks that maintain an atomic mmap_count on struct dlfb_data. In dlfb_realloc_framebuffer(), check mmap_count and return -EBUSY if the buffer is currently mapped, preventing buffer replacement while userspace holds stale PTEs.

Tested with PoC using dummy_hcd + raw_gadget USB device emulation.(CVE-2026-43497)

In the Linux kernel, the following vulnerability has been resolved:

RDMA/umem: Fix truncation for block sizes >= 4G

When the iommu is used the linearization of the mapping can give a single block that is very large split across multiple SG entries.

When __rdma_block_iter_next() reassembles the split SG entries it is overflowing the 32 bit stack values and computed the wrong DMA addresses for blocks after the truncation.

Use the right types to hold DMA addresses.(CVE-2026-53133)

In the Linux kernel, the following vulnerability has been resolved:

l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()

pppol2tp_ioctl() read sock->sk->sk_user_data directly without any locks or reference counting. If a controllable sleep was induced during copy_from_user() (e.g. via a userfaultfd page fault sleep), a concurrent socket…

Record
OESA-2026-3303
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-3704 9.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

net: hns3: add VLAN id validation before using

Currently, the VLAN id may be used without validation when receive a VLAN configuration mailbox from VF. The length of vlan_del_fail_bmap is BITS_TO_LONGS(VLAN_N_VID). It may cause out-of-bounds memory access once the VLAN id is bigger than or equal to VLAN_N_VID.

Therefore, VLAN id needs to be checked to ensure it is within the range of VLAN_N_VID.(CVE-2025-71112)

In the Linux kernel, the following vulnerability has been resolved:

ext4: fix string copying in parse_apply_sb_mount_options()

strscpy_pad() can't be used to copy a non-NUL-term string into a NUL-term string of possibly bigger size. Commit 0efc5990bca5 ("string.h: Introduce memtostr() and memtostr_pad()") provides additional information in that regard. So if this happens, the following warning is observed:

strnlen: detected buffer overflow: 65 byte read of buffer size 64 WARNING: CPU: 0 PID: 28655 at lib/string_helpers.c:1032 __fortify_report+0x96/0xc0 lib/string_helpers.c:1032 Modules linked in: CPU: 0 UID: 0 PID: 28655 Comm: syz-executor.3 Not tainted 6.12.54-syzkaller-00144-g5f0270f1ba00 #0 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:__fortify_report+0x96/0xc0 lib/string_helpers.c:1032 Call Trace: <TASK> __fortify_panic+0x1f/0x30 lib/string_helpers.c:1039 strnlen include/linux/fortify-string.h:235 [inline] sized_strscpy include/linux/fortify-string.h:309 [inline] parse_apply_sb_mount_options fs/ext4/super.c:2504 [inline] __ext4_fill_super fs/ext4/super.c:5261 [inline] ext4_fill_super+0x3c35/0xad00 fs/ext4/super.c:5706 get_tree_bdev_flags+0x387/0x620 fs/super.c:1636 vfs_get_tree+0x93/0x380 fs/super.c:1814 do_new_mount fs/namespace.c:3553 [inline] path_mount+0x6ae/0x1f70 fs/namespace.c:3880 do_mount fs/namespace.c:3893 [inline] __do_sys_mount fs/namespace.c:4103 [inline] __se_sys_mount fs/namespace.c:4080 [inline] __x64_sys_mount+0x280/0x300 fs/namespace.c:4080 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x64/0x140 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x76/0x7e

Since userspace is expected to provide s_mount_opts field to be at most 63 characters long with the ending byte being NUL-term, use a 64-byte buffer which matches the size of s_mount_opts, so that strscpy_pad() does its job properly. Return with error if the user still managed to provide a non-NUL-term string here.

Found by Linux Verification Center (linuxtesting.org) with Syzkaller.(CVE-2025-71123)

In the Linux kernel, the following vulnerability has been resolved:

RDMA/umad: Reject negative data_len in ib_umad_write

ib_umad_write computes data_len from user-controlled count and the MAD header sizes. With a mismatched user MAD header size and RMPP header length, data_len can become negative and reach ib_create_send_mad(). This can make the padding calculation exceed the segment size and trigger an out-of-bounds memset in alloc_send_rmpp_list().

Add an explicit check to reject negative data_len before creating the send buffer.

KASAN splat: [ 211.363464] BUG: KASAN: slab-out-of-bounds in ib_create_send_mad+0xa01/0x11b0 [ 211.364077] Write of size 220 at addr ffff88800c3fa1f8 by task spray_thread/102 [ 211.365867] ib_create_send_mad+0xa01/0x11b0 [ 211.365887] ib_umad_write+0x853/0x1c80(CVE-2026-23243)

In the Linux kernel, the following vulnerability has been resolved:

nvme: fix memory allocation in nvme_pr_read_keys()

nvme_pr_read_keys() takes num_keys from userspace and uses it to calculate the allocation size for rse via struct_size(). The upper limit is PR_KEYS_MAX (64K).

A malicious or buggy userspace can pass a large num_keys value that results in a 4MB allocation attempt at most, causing a warning in the page allocator when the order exceeds…

Record
OESA-2026-3704
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:57251 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:57251
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:57252 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:57252
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:65708 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:65708
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:57251 7.8

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CVE-2026-43206)

  • kernel: drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CVE-2026-43237)

  • kernel: crypto: pcrypt - Fix handling of MAY_BACKLOG requests (CVE-2026-43493)

  • kernel: udf: fix partition descriptor append bookkeeping (CVE-2026-45991)

  • kernel: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CVE-2026-45878)

  • kernel: smb/client: fix out-of-bounds read in symlink_data() (CVE-2026-46185)

  • kernel: sched/psi: fix race between file release and pressure write (CVE-2026-52991)

  • kernel: drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CVE-2026-53143)

  • kernel: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CVE-2026-53136)

  • kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CVE-2026-53329)

  • kernel: drm/i915/gem: Fix phys BO pread/pwrite with offset (CVE-2026-53356)

  • kernel: drm/amdgpu: zero-initialize GART table on allocation (CVE-2026-53374)

  • kernel: drm/i915: Fix potential UAF in TTM object purge (CVE-2026-63884)

  • kernel: scsi: target: iscsi: Validate CHAP_R length before base64 decode (CVE-2026-63886)

  • kernel: memfd: deny writeable mappings when implying SEAL_WRITE (CVE-2026-63952)

  • kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (CVE-2026-63888)

  • kernel: blk-mq: pop cached request if it is usable (CVE-2026-64017)

  • kernel: drm/amdgpu: fix amdgpu_hmm_range_get_pages (CVE-2026-63879)

  • kernel: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CVE-2026-64219)

  • kernel: smb: client: fix double-free in SMB2_open() replay (CVE-2026-64382)

  • kernel: smb: client: mask server-provided mode to 07777 in modefromsid (CVE-2026-64379)

  • kernel: smb: client: fix query_info() replay double-free (CVE-2026-64386)

  • kernel: posix-cpu-timers: Prevent UAF caused by non-leader exec() race (CVE-2026-64560)

  • kernel: smb/client: handle overlapping allocated ranges in fallocate (CVE-2026-68388)

Bug Fix(es) and Enhancement(s):

  • CLONE - Rocky Linux 10.2.z xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (JIRA:Rocky Linux-223954)

  • vhost: reset the vring metadata cache on vring reconfiguration [rhel-10.2.z] (JIRA:Rocky Linux-224545)

  • cifs: periodic IO errors when rename races with lease break [rhel-10.2.z] (JIRA:Rocky Linux-235459)

  • cifs: smb1 directory listings from xp server returning EINVAL and EIO [rhel-10.2.z] (JIRA:Rocky Linux-235812)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:57251
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:57252 7.8

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CVE-2026-43233)

  • kernel: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CVE-2026-43206)

  • kernel: drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CVE-2026-43237)

  • kernel: udf: fix partition descriptor append bookkeeping (CVE-2026-45991)

  • kernel: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CVE-2026-45878)

  • kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() (CVE-2026-46120)

  • kernel: sched/psi: fix race between file release and pressure write (CVE-2026-52991)

  • kernel: drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CVE-2026-53143)

  • kernel: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CVE-2026-53136)

  • kernel: mm/huge_memory: update file PMD counter before folio_put() (CVE-2026-53189)

  • kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CVE-2026-53329)

  • kernel: drm/i915/gem: Fix phys BO pread/pwrite with offset (CVE-2026-53356)

  • kernel: drm/amdgpu: zero-initialize GART table on allocation (CVE-2026-53374)

  • kernel: drm/i915: Fix potential UAF in TTM object purge (CVE-2026-63884)

  • kernel: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CVE-2026-64007)

  • kernel: memfd: deny writeable mappings when implying SEAL_WRITE (CVE-2026-63952)

  • kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (CVE-2026-63888)

  • kernel: drm/amdgpu: fix amdgpu_hmm_range_get_pages (CVE-2026-63879)

  • kernel: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CVE-2026-64048)

  • kernel: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CVE-2026-64219)

  • kernel: smb: client: fix double-free in SMB2_open() replay (CVE-2026-64382)

  • kernel: smb: client: mask server-provided mode to 07777 in modefromsid (CVE-2026-64379)

  • kernel: smb: client: fix query_info() replay double-free (CVE-2026-64386)

  • kernel: posix-cpu-timers: Prevent UAF caused by non-leader exec() race (CVE-2026-64560)

  • kernel: smb: client: validate DFS referral PathConsumed (CVE-2026-68343)

  • kernel: smb/client: handle overlapping allocated ranges in fallocate (CVE-2026-68388)

Bug Fix(es) and Enhancement(s):

  • kernel 5.14.0-687.5.1.el9_8 breaks wifi when using FIPS (JIRA:Rocky Linux-181065)

  • vhost: reset the vring metadata cache on vring reconfiguration [rhel-9.8.z] (JIRA:Rocky Linux-224549)

  • cifs: smb1 directory listings from xp server returning EINVAL and EIO [rhel-9.8.z] (JIRA:Rocky Linux-235811)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:57252
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-64560 7.8

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by non-leader exec() race Wongi and Jungwoo decoded and reported a non-leader exec() related race which can result in an UAF: sys_timer_delete() exec() posix_cpu_timer_del() // Observes old leader p = pid_task(pid, pid_type); de_thread() switch_leader(); release_task(old_leader) __exit_signal(old_leader) sighand = lock(old_leader, sighand); posix_cpu_timers*_exit(); sighand = lock_task_sighand(p) unhash_task(old_leader); sh = lock(p, sighand) old_leader->sighand = NULL; unlock(sighand); (p->sighand == NULL) unlock(sh) return NULL; // Returns without action if(!sighand) return 0; free_posix_timer(); This is "harmless" unless the deleted timer was armed and enqueued in p->signal because on exec() a TGID targeted timer is inherited. As sys_timer_delete() freed the underlying posix timer object run_posix_cpu_timers() or any timerqueue related add/delete operations on other timers will access the freed object's timerqueue node, which results in an UAF. There is a similar problem vs. posix_cpu_timer_set(). For regular posix timers it just transiently returns -ESRCH to user space, but for the use case in do_cpu_nanosleep() it's the same UAF just that the k_itimer is allocated on the stack. Also posix_cpu_timer_rearm() fails to rearm the timer, which means it stops to expire. While debating solutions Frederic pointed out another problem: posix_cpu_timer_del(tmr) __exit_signal(p) posix_cpu_timers*_exit(p); unhash_task(p); p->sighand = NULL; sh = lock_task_sighand(p) sighand = p->sighand; if (!sighand) return NULL; lock(sighand); if (!sh) WARN_ON_ONCE(timer_queued(tmr)); On weakly ordered architectures it is not guaranteed that posix_cpu_timer_del() will observe the stores in posix_cpu_timers*_exit() when p->sighand is observed as NULL, which means the WARN() can be a false positive. Solve these issues by: 1) Changing the store in __exit_signal() to smp_store_release(). 2) Adding a smp_acquire__after_ctrl_dep() into the !sighand path of lock_task_sighand(). 3) Creating a helper function for looking up the task and locking sighand which does not return when sighand == NULL. Instead it retries the task lookup and only if that fails it gives up. 4) Using that helper in the three affected functions. #1/#2 ensures that the reader side which observes sighand == NULL also observes all preceeding stores, i.e. the stores in posix_cpu_timers*_exit() and the ones in unhash_task(). #3 ensures that the above described non-leader exec() situation is handled gracefully. When the task lookup returns the old leader, but sighand == NULL then it retries. In the non-leader exec() case the subsequent task lookup will observe the new leader due to #1/#2. In normal exit() scenarios the subsequent lookup fails. When the task lookup fails, the function also checks whether the timer is still enqueued and issues a warning if that's the case. Unfortunately there is nothing which can be done about it, but as the task is already not longer visible the timer should not be accessed anymore. This check also requires memory ordering, which is not provided when the first lookup fails. To achieve that the check is preceeded by a smp_rmb() which pairs with the smp_wmb() in write_seqlock() in __exit_signal(). That ensures that the stores in posix_cpu_timers*_exit() are visible. The history of the non-leader exec() issue goes back to the early days of posix CPU timers, which stored a pointer to the group leader task in the timer. That obviously fails when a non-leader exec() switches the leader. commit e0a70217107e ("posix-cpu-timers: workaround to suppress the problems with mt exec") added a temporary workaround for that in 2010 which surv ---truncated---

Record
UBUNTU-CVE-2026-64560
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVALSA-2026:57251 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CVE-2026-43206)
  • kernel: drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CVE-2026-43237)
  • kernel: crypto: pcrypt - Fix handling of MAY_BACKLOG requests (CVE-2026-43493)
  • kernel: udf: fix partition descriptor append bookkeeping (CVE-2026-45991)
  • kernel: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CVE-2026-45878)
  • kernel: smb/client: fix out-of-bounds read in symlink_data() (CVE-2026-46185)
  • kernel: sched/psi: fix race between file release and pressure write (CVE-2026-52991)
  • kernel: drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CVE-2026-53143)
  • kernel: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CVE-2026-53136)
  • kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CVE-2026-53329)
  • kernel: drm/i915/gem: Fix phys BO pread/pwrite with offset (CVE-2026-53356)
  • kernel: drm/amdgpu: zero-initialize GART table on allocation (CVE-2026-53374)
  • kernel: drm/i915: Fix potential UAF in TTM object purge (CVE-2026-63884)
  • kernel: scsi: target: iscsi: Validate CHAP_R length before base64 decode (CVE-2026-63886)
  • kernel: memfd: deny writeable mappings when implying SEAL_WRITE (CVE-2026-63952)
  • kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (CVE-2026-63888)
  • kernel: blk-mq: pop cached request if it is usable (CVE-2026-64017)
  • kernel: drm/amdgpu: fix amdgpu_hmm_range_get_pages (CVE-2026-63879)
  • kernel: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CVE-2026-64219)
  • kernel: smb: client: fix double-free in SMB2_open() replay (CVE-2026-64382)
  • kernel: smb: client: mask server-provided mode to 07777 in modefromsid (CVE-2026-64379)
  • kernel: smb: client: fix query_info() replay double-free (CVE-2026-64386)
  • kernel: posix-cpu-timers: Prevent UAF caused by non-leader exec() race (CVE-2026-64560)
  • kernel: smb/client: handle overlapping allocated ranges in fallocate (CVE-2026-68388)

Bug Fix(es) and Enhancement(s):

  • CLONE - AlmaLinux 10.2.z xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (JIRA:AlmaLinux-223954)
  • vhost: reset the vring metadata cache on vring reconfiguration [almalinux-10.2.z] (JIRA:AlmaLinux-224545)
  • cifs: periodic IO errors when rename races with lease break [almalinux-10.2.z] (JIRA:AlmaLinux-235459)
  • cifs: smb1 directory listings from xp server returning EINVAL and EIO [almalinux-10.2.z] (JIRA:AlmaLinux-235812)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:57251
Updated
2026-11-02
OSVALSA-2026:57252 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CVE-2026-43233)
  • kernel: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CVE-2026-43206)
  • kernel: drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CVE-2026-43237)
  • kernel: udf: fix partition descriptor append bookkeeping (CVE-2026-45991)
  • kernel: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CVE-2026-45878)
  • kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() (CVE-2026-46120)
  • kernel: sched/psi: fix race between file release and pressure write (CVE-2026-52991)
  • kernel: drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CVE-2026-53143)
  • kernel: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CVE-2026-53136)
  • kernel: mm/huge_memory: update file PMD counter before folio_put() (CVE-2026-53189)
  • kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CVE-2026-53329)
  • kernel: drm/i915/gem: Fix phys BO pread/pwrite with offset (CVE-2026-53356)
  • kernel: drm/amdgpu: zero-initialize GART table on allocation (CVE-2026-53374)
  • kernel: drm/i915: Fix potential UAF in TTM object purge (CVE-2026-63884)
  • kernel: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CVE-2026-64007)
  • kernel: memfd: deny writeable mappings when implying SEAL_WRITE (CVE-2026-63952)
  • kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (CVE-2026-63888)
  • kernel: drm/amdgpu: fix amdgpu_hmm_range_get_pages (CVE-2026-63879)
  • kernel: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CVE-2026-64048)
  • kernel: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CVE-2026-64219)
  • kernel: smb: client: fix double-free in SMB2_open() replay (CVE-2026-64382)
  • kernel: smb: client: mask server-provided mode to 07777 in modefromsid (CVE-2026-64379)
  • kernel: smb: client: fix query_info() replay double-free (CVE-2026-64386)
  • kernel: posix-cpu-timers: Prevent UAF caused by non-leader exec() race (CVE-2026-64560)
  • kernel: smb: client: validate DFS referral PathConsumed (CVE-2026-68343)
  • kernel: smb/client: handle overlapping allocated ranges in fallocate (CVE-2026-68388)

Bug Fix(es) and Enhancement(s):

  • kernel 5.14.0-687.5.1.el9_8 breaks wifi when using FIPS (JIRA:AlmaLinux-181065)
  • vhost: reset the vring metadata cache on vring reconfiguration [almalinux-9.8.z] (JIRA:AlmaLinux-224549)
  • cifs: smb1 directory listings from xp server returning EINVAL and EIO [almalinux-9.8.z] (JIRA:AlmaLinux-235811)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:57252
Updated
2026-11-02
OSVASB-A-533808379 No score

In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Record
ASB-A-533808379
Updated
2026-11-05
OSVAZL-94148 No score

CVE-2026-64560 affecting package kernel for versions less than 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved:

posix-cpu-timers: Prevent UAF caused by non-leader exec() race

Wongi and Jungwoo decoded and reported a non-leader exec() related race which can result in an UAF:

sys_timer_delete() exec() posix_cpu_timer_del() // Observes old leader p = pid_task(pid, pid_type); de_thread() switch_leader(); release_task(old_leader) __exit_signal(old_leader) sighand = lock(old_leader, sighand); posix_cpu_timers*_exit(); sighand = lock_task_sighand(p) unhash_task(old_leader); sh = lock(p, sighand) old_leader->sighand = NULL; unlock(sighand); (p->sighand == NULL) unlock(sh) return NULL;

// Returns without action if(!sighand) return 0; free_posix_timer();

This is "harmless" unless the deleted timer was armed and enqueued in p->signal because on exec() a TGID targeted timer is inherited.

As sys_timer_delete() freed the underlying posix timer object run_posix_cpu_timers() or any timerqueue related add/delete operations on other timers will access the freed object's timerqueue node, which results in an UAF.

There is a similar problem vs. posix_cpu_timer_set(). For regular posix timers it just transiently returns -ESRCH to user space, but for the use case in do_cpu_nanosleep() it's the same UAF just that the k_itimer is allocated on the stack.

Also posix_cpu_timer_rearm() fails to rearm the timer, which means it stops to expire.

While debating solutions Frederic pointed out another problem:

posix_cpu_timer_del(tmr) __exit_signal(p) posix_cpu_timers*_exit(p); unhash_task(p); p->sighand = NULL; sh = lock_task_sighand(p) sighand = p->sighand; if (!sighand) return NULL; lock(sighand);

 if (!sh)
WARN_ON_ONCE(timer_queued(tmr));

On weakly ordered architectures it is not guaranteed that posix_cpu_timer_del() will observe the stores in posix_cpu_timers*_exit() when p->sighand is observed as NULL, which means the WARN() can be a false positive.

Solve these issues by:

  1. Changing the store in __exit_signal() to smp_store_release().

  2. Adding a smp_acquire__after_ctrl_dep() into the !sighand path of lock_task_sighand().

  3. Creating a helper function for looking up the task and locking sighand which does not return when sighand == NULL. Instead it retries the task lookup and only if that fails it gives up.

  4. Using that helper in the three affected functions.

#1/#2 ensures that the reader side which observes sighand == NULL also observes all preceeding stores, i.e. the stores in posix_cpu_timers*_exit() and the ones in unhash_task().

#3 ensures that the above described non-leader exec() situation is handled gracefully. When the task lookup returns the old leader, but sighand == NULL then it retries. In the non-leader exec() case the subsequent task lookup will observe the new leader due to #1/#2. In normal exit() scenarios the subsequent lookup fails.

When the task lookup fails, the function also checks whether the timer is still enqueued and issues a warning if that's the case. Unfortunately there is nothing which can be done about it, but as the task is already not longer visible the timer should not be accessed anymore. This check also requires memory ordering, which is not provided when the first lookup fails. To achieve that the check is preceeded by a smp_rmb() which pairs with the smp_wmb() in write_seqlock() in __exit_signal(). That ensures that the stores in posix_cpu_timers*_exit() are visible.

The history of the non-leader exec() issue goes back to the early days of posix CPU timers, which stored a pointer to the group leader task in the timer. That obviously fails when a non-leader exec() switches the leader. commit e0a70217107e ("posix-cpu-timers: workaround to suppress the problems with mt exec") added a temporary workaround for that in 2010 which surv ---truncated---

Record
AZL-94148
Updated
2026-11-02
OSVCLSA-2026-1792243434 No score

kernel: Fix of 123 CVEs

  • ipv4: validate checksum_start before completing checksum {CVE-2026-99999}
  • slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() {CVE-2026-90057}
  • mm/hugetlb: fix list corruption in allocate_file_region_entries() {CVE-2026-74518}
  • mm/page_reporting: use system_freezable_wq to fix UAF during suspend {CVE-2026-74481}
  • bpf: Fix UAF in sock clone early bailouts {CVE-2026-68399}
  • xen/netfront: drop RX packets with a short Ethernet header {CVE-2026-98375}
  • net/sched: fix packet loop on netem when duplicate is on {CVE-2026-63983}
  • net: Introduce skb tc depth field to track packet loops {CVE-2026-63983}
  • ALSA: seq: midi: Serialize output teardown with event_input {CVE-2026-74387}
  • netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst {CVE-2026-72255}
  • net: thunderbolt: Fix frags[] overflow by bounding frame_count {CVE-2026-72157}
  • SUNRPC: svcauth_gss: enforce krb5 token minimum length {CVE-2026-89550}
  • rxrpc: serialize kernel accept preallocation with socket teardown {CVE-2026-74436}
  • isofs: fix out-of-bounds page array access on empty zisofs block {CVE-2026-89778}
  • ata: libata-core: Reject an invalid concurrent positioning ranges count {CVE-2026-72030}
  • wifi: mac80211: validate extension-frame layout before RX {CVE-2026-68470}
  • wifi: mac80211: pass 'sta' to ieee80211_rx_data_set_sta() {CVE-2026-68470}
  • drm/amd/pm: fix pptable use-after-free {CVE-2026-74450}
  • smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 {CVE-2026-89637}
  • smb: client: clear ce->tgthint in free_tgts() {CVE-2026-89636}
  • smb: client: harden DFS cache against invalid target hints {CVE-2026-93210}
  • smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() {CVE-2026-89633}
  • nouveau/gem: reserve the bo in the info ioctl around the vma lookup {CVE-2026-89553}
  • HID: sony: clean up device list on probe failure {CVE-2026-90041}
  • drm/amd/display: Fix dangling pointer in CRTC reset function {CVE-2026-93175}
  • hwrng: core - fix rng list on registration error {CVE-2026-93163}
  • RDMA/rvt: Return NULL after port allocation failure {CVE-2026-93104}
  • fs/resctrl: Prevent use-after-free in rdtgroup_kn_put() {CVE-2026-93100}
  • bpf: Fix potential UAF when reading bpf link info {CVE-2026-90392}
  • HID: synchronize input before cleaning up a failed probe {CVE-2026-90329}
  • bpf: Don't predict JMP32 pointer vs zero comparisons {CVE-2026-98041}
  • smb: client: cancel reconnect work in clean_demultiplex_info() {CVE-2026-98175}
  • smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs {CVE-2026-98171}
  • netfilter: cttimeout: prevent UAF during module unload {CVE-2026-97609}
  • thunderbolt: Prevent XDomain delayed work use-after-free on disconnect {CVE-2026-74575}
  • NFSv4.2: fix LAYOUTSTATS send buffer exhaustion {CVE-2026-90103}
  • Squashfs: check block offset is not negative {CVE-2026-90203}
  • RDMA/siw: Fix endpoint/socket association handling {CVE-2026-74345}
  • HID: hidpp: fix potential UAF in hidpp_connect_event() {CVE-2026-93826}
  • hid: hid-logitech-hidpp: avoid unnecessary assignments in hidpp_connect_event {CVE-2026-93826}
  • configfs: unhash the dentry before dropping the item in rmdir {CVE-2026-97949}
  • ALSA: us122l: Prevent write upgrades for read mappings {CVE-2026-97931}
  • smb: client: reject userspace cifs.idmap descriptions {CVE-2026-97564}
  • scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown {CVE-2026-97536}
  • RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept {CVE-2026-98367}
  • ALSA: 6fire: fix OOB write from device-reported iso length {CVE-2026-98312}
  • scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf {CVE-2026-63887}
  • scsi: target: Fix hexadecimal CHAP_I handling {CVE-2026-63886}
  • scsi: target: iscsi: Validate CHAP_R length before base64 decode {CVE-2026-63886}
  • wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length {CVE-2026-90382}
  • nfsd: RCU-protect cl_cb_session to fix…
Record
CLSA-2026-1792243434
Updated
2026-11-02
OSVCLSA-2026-1792445930 No score

kernel: Fix of 92 CVEs

  • ipv4: validate checksum_start before completing checksum {CVE-2026-99999}
  • smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 {CVE-2026-89637}
  • smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() {CVE-2026-89633}
  • sunrpc: defer rq_argp and rq_resp free until after RCU grace period {CVE-2026-89545}
  • seg6: reset IP6CB after IPv6 decapsulation {CVE-2026-80976}
  • ipv6: seg6: clear IPv4 control block on IPIP decapsulation {CVE-2026-80840}
  • i3c: master: svc: bound IBI payload to the requested max_payload_len {CVE-2026-80951}
  • i3c: master: svc: Use readsb helper for reading MDB {CVE-2026-80951}
  • configfs: unhash the dentry before dropping the item in rmdir {CVE-2026-97949}
  • ALSA: us122l: Prevent write upgrades for read mappings {CVE-2026-97931}
  • RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access {CVE-2026-98365}
  • ipv4: raw: reject IP_HDRINCL packets with ihl < 5 {CVE-2026-64114}
  • ixgbevf: fix use-after-free in VEPA multicast source pruning {CVE-2026-64113}
  • drm/virtio: use uninterruptible resv lock for plane updates {CVE-2026-64098}
  • keys: Pin request_key_auth payload in instantiate paths {CVE-2026-63823}
  • exfat: fix potential use-after-free in exfat_find_dir_entry() {CVE-2026-63808}
  • ethtool: cmis: require exact CDB reply length {CVE-2026-63996}
  • tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 {CVE-2026-63994}
  • ipv6: exthdrs: refresh nh after handling HAO option {CVE-2026-63922}
  • netpoll: fix a use-after-free on shutdown path {CVE-2026-64424}
  • HID: lg-g15: cancel pending work on remove to fix a use-after-free {CVE-2026-64362}
  • bpf: Validate BTF repeated field counts before expansion {CVE-2026-64354}
  • USB: iowarrior: fix use-after-free on disconnect {CVE-2026-64342}
  • ALSA: seq: Serialize UMP output teardown with event_input {CVE-2026-64029}
  • xfrm: Check for underflow in xfrm_state_mtu {CVE-2026-64009}
  • vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() {CVE-2026-63993}
  • tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() {CVE-2026-63992}
  • vsock/virtio: bind uarg before filling zerocopy skb {CVE-2026-63970}
  • KVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_handle_mops() {CVE-2026-64555}
  • drm/edid: fix OOB read in drm_parse_tiled_block() {CVE-2026-64546}
  • crypto: af_alg - zero initialize memory allocated via sock_kmalloc {CVE-2025-71113}
  • mailbox: mailbox-test: don't free the reused channel {CVE-2026-53294}
  • drm/amd/display: Bound VBIOS record-chain walk loops {CVE-2026-53138}
  • af_unix: Fix UAF read of tail->len in unix_stream_data_wait() {CVE-2026-64109}
  • nfsd: release layout stid on setlease failure {CVE-2026-53399}
  • fuse: re-lock request before replacing page cache folio {CVE-2026-53388}
  • blk-mq: pop cached request if it is usable {CVE-2026-64017}
  • scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() {CVE-2026-63888}
  • posix-cpu-timers: Prevent UAF caused by non-leader exec() race {CVE-2026-64560}
  • sctp: add INIT verification after cookie unpacking {CVE-2026-72398}
  • sctp: validate embedded INIT chunk and address list lengths in cookie {CVE-2026-53224}
  • sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing {CVE-2026-53246}
  • tcp: clear sock_ops cb flags before force-closing a child socket {CVE-2026-74268}
  • Bluetooth: btusb: fix use-after-free on marvell probe failure {CVE-2026-64470}
  • Bluetooth: btusb: fix use-after-free on registration failure {CVE-2026-64471}
  • sched/core: Make core-sched flips wait for in-flight selections {CVE-2026-89520}
  • net/packet: defer vmalloc TX_RING free until skbs finish {CVE-2026-80841}
  • reboot: fix cad_pid use-after-free race {CVE-2026-97938}
  • drm/amd/pm: fix pptable use-after-free {CVE-2026-74450}
  • tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() {CVE-2026-72404}
  • NFSD: Prevent client use-after-free during delegation revoke…
Record
CLSA-2026-1792445930
Updated
2026-11-02
OSVMGASA-2026-0336 No score

Updated kernel, kmod-xtables-addons, kmod-virtualbox, kmod-nvidia-current-wopengpu & drakx-installer-images packages fix security vulnerabilities

Upstream kernel 6.18.44 version fixes bugs and vulnerabilities. The kmod-xtables-addons, kmod-virtualbox, kmod-nvidia-current-wopengpu & drakx-installer-images packages have been updated to work with this new kernel.

Record
MGASA-2026-0336
Updated
2026-11-02
OSVMGASA-2026-0337 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.18.44 fixes vulnerabilities. For information about the vulnerabilities see the links.

Record
MGASA-2026-0337
Updated
2026-11-02
OSVopenSUSE-SU-2026:11476-1 No score

kernel-devel-7.1.7-1.1 on GA media

These are all security issues fixed in the kernel-devel-7.1.7-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11476-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21555-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
  • CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
  • CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
  • CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
  • CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
  • CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
  • CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
  • CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
  • CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
  • CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
  • CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
  • CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
  • CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46023: dm mirror: fix integer…
Record
openSUSE-SU-2026:21555-1
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2026-64560 No score

CVE-2026-64560 in linux - Patched by Root

Root has patched CVE-2026-64560 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2026-64560
Updated
2026-11-02
OSVSUSE-SU-2026:23066-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
  • CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
  • CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
  • CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
  • CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
  • CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
  • CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
  • CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
  • CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
  • CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
  • CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
  • CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
  • CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46023: dm mirror: fix integer…
Record
SUSE-SU-2026:23066-1
Updated
2026-11-02
OSVSUSE-SU-2026:23068-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
  • CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
  • CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
  • CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
  • CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
  • CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
  • CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
  • CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
  • CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
  • CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
  • CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
  • CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
  • CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46023: dm mirror: fix integer…
Record
SUSE-SU-2026:23068-1
Updated
2026-11-02
OSVSUSE-SU-2026:23193-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
  • CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" (bsc#1256675).
  • CVE-2026-23097: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).
  • CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43130: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).
  • CVE-2026-43161: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (bsc#1264333).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43170: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43328: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832).
  • CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
  • CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45877: HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (bsc#1266468).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
  • CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46023: dm mirror: fix integer overflow in create_dirty_log() (bsc#1267449).
  • CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).
  • CVE-2026-46027: net/smc: avoid early lgr access in smc_clc_wait_msg (bsc#1266744).
  • CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).
  • CVE-2026-46040: inotify:…
Record
SUSE-SU-2026:23193-1
Updated
2026-11-02
OSVSUSE-SU-2026:23194-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
  • CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" (bsc#1256675).
  • CVE-2026-23097: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).
  • CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43130: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).
  • CVE-2026-43161: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (bsc#1264333).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43170: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43328: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832).
  • CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
  • CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45877: HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (bsc#1266468).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
  • CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46023: dm mirror: fix integer overflow in create_dirty_log() (bsc#1267449).
  • CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).
  • CVE-2026-46027: net/smc: avoid early lgr access in smc_clc_wait_msg (bsc#1266744).
  • CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).
  • CVE-2026-46040: inotify: fix…
Record
SUSE-SU-2026:23194-1
Updated
2026-11-02
OSVSUSE-SU-2026:23221-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
  • CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
  • CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
  • CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
  • CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
  • CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
  • CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
  • CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
  • CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
  • CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
  • CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
  • CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
  • CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46023: dm mirror: fix integer…
Record
SUSE-SU-2026:23221-1
Updated
2026-11-02
OSVSUSE-SU-2026:23231-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
  • CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
  • CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
  • CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
  • CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
  • CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
  • CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
  • CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
  • CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
  • CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
  • CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
  • CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
  • CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46023: dm mirror: fix integer…
Record
SUSE-SU-2026:23231-1
Updated
2026-11-02
OSVSUSE-SU-2026:23237-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
  • CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
  • CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
  • CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
  • CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
  • CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
  • CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
  • CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
  • CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
  • CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
  • CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
  • CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
  • CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46023: dm mirror: fix integer…
Record
SUSE-SU-2026:23237-1
Updated
2026-11-02
OSVSUSE-SU-2026:23241-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
  • CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" (bsc#1256675).
  • CVE-2026-23097: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).
  • CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43130: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).
  • CVE-2026-43161: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (bsc#1264333).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43170: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43328: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832).
  • CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
  • CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45877: HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (bsc#1266468).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
  • CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46023: dm mirror: fix integer overflow in create_dirty_log() (bsc#1267449).
  • CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).
  • CVE-2026-46027: net/smc: avoid early lgr access in smc_clc_wait_msg (bsc#1266744).
  • CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).
  • CVE-2026-46040: inotify:…
Record
SUSE-SU-2026:23241-1
Updated
2026-11-02
OSVSUSE-SU-2026:23244-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
  • CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" (bsc#1256675).
  • CVE-2026-23097: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).
  • CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43130: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).
  • CVE-2026-43161: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (bsc#1264333).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43170: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43328: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832).
  • CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
  • CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45877: HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (bsc#1266468).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
  • CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46023: dm mirror: fix integer overflow in create_dirty_log() (bsc#1267449).
  • CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).
  • CVE-2026-46027: net/smc: avoid early lgr access in smc_clc_wait_msg (bsc#1266744).
  • CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).
  • CVE-2026-46040: inotify: fix…
Record
SUSE-SU-2026:23244-1
Updated
2026-11-02
OSVSUSE-SU-2026:3593-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2022-4994: KVM: x86: wean fast IN from emulator_pio_in (bsc#1273097).
  • CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1255616).
  • CVE-2026-46052: ceph: only d_add() negative dentries when they are unhashed (bsc#1267494).
  • CVE-2026-46056: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (bsc#1267435).
  • CVE-2026-46145: RDMA/mana: Validate rx_hash_key_len (bsc#1267715).
  • CVE-2026-46193: xfrm: ah: account for ESN high bits in async callbacks (bsc#1267656).
  • CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1269172).
  • CVE-2026-52958: libceph: Fix potential out-of-bounds access in osdmap_decode() (bsc#1269174).
  • CVE-2026-52967: smb/client: fix possible infinite loop and oob read in symlink_data() (bsc#1269181).
  • CVE-2026-52986: netfilter: nf_conntrack_sip: don't use simple_strtoul (bsc#1269289).
  • CVE-2026-53050: quota: Fix race of dquot_scan_active() with quota deactivation (bsc#1269188).
  • CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269773).
  • CVE-2026-53196: USB: serial: io_ti: fix heap overflow in get_manuf_info() (bsc#1269986).
  • CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1269997).
  • CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1269988).
  • CVE-2026-53256: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (bsc#1269993).
  • CVE-2026-53260: preempt: Provide preempt_[dis|en]able_nested() (bsc#1269731).
  • CVE-2026-53267: netfilter: nft_ct: bail out on template ct in get eval (bsc#1269577).
  • CVE-2026-53354: arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1270230).
  • CVE-2026-53357: Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (bsc#1270257).
  • CVE-2026-53375: drm/amdgpu/vce: Prevent partial address patches (bsc#1271899).
  • CVE-2026-53388: fuse: re-lock request before replacing page cache folio (bsc#1271825).
  • CVE-2026-53391: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (bsc#1271904).
  • CVE-2026-53402: fbdev: fbcon: fix out-of-bounds read in err_out of (bsc#1271908).
  • CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271964).
  • CVE-2026-63806: KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() (bsc#1272268).
  • CVE-2026-63807: KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (bsc#1272263).
  • CVE-2026-63824: KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1272180).
  • CVE-2026-63829: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1272176).
  • CVE-2026-63893: thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() (bsc#1272607).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1272904).
  • CVE-2026-63919: xfrm: input: hold netns during deferred transport reinjection (bsc#1272907).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1272918).
  • CVE-2026-63922,CVE-2026-63924: ipv6: exthdrs: recompute network header pointer once (bsc#1272855).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272678).
  • CVE-2026-63975: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (bsc#1272694).
  • CVE-2026-63984: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (bsc#1272865).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp() (bsc#1273035).
  • CVE-2026-64106: KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits (bsc#1272242).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272207).
  • CVE-2026-64561: KVM: x86: Check for invalid/obsolete root after making MMU pages available (bsc#1273231). -…
Record
SUSE-SU-2026:3593-1
Updated
2026-11-02
OSVSUSE-SU-2026:3595-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2022-4994: KVM: x86: wean fast IN from emulator_pio_in (bsc#1273097).
  • CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1255616).
  • CVE-2024-38542: RDMA/mana_ib: boundary check before installing cq callbacks (bsc#1226591).
  • CVE-2025-21953: net: mana: cleanup mana struct after debugfs_remove() (bsc#1240727).
  • CVE-2026-46052: ceph: only d_add() negative dentries when they are unhashed (bsc#1267494).
  • CVE-2026-46056: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (bsc#1267435).
  • CVE-2026-46145: RDMA/mana: Validate rx_hash_key_len (bsc#1267715).
  • CVE-2026-46193: xfrm: ah: account for ESN high bits in async callbacks (bsc#1267656).
  • CVE-2026-52933: io_uring/poll: fix signed comparison in io_poll_get_ownership() (bsc#1268989).
  • CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1269172).
  • CVE-2026-52958: libceph: Fix potential out-of-bounds access in osdmap_decode() (bsc#1269174).
  • CVE-2026-52967: smb/client: fix possible infinite loop and oob read in symlink_data() (bsc#1269181).
  • CVE-2026-52986: netfilter: nf_conntrack_sip: don't use simple_strtoul (bsc#1269289).
  • CVE-2026-53050: quota: Fix race of dquot_scan_active() with quota deactivation (bsc#1269188).
  • CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269773).
  • CVE-2026-53196: USB: serial: io_ti: fix heap overflow in get_manuf_info() (bsc#1269986).
  • CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1269997).
  • CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1269988).
  • CVE-2026-53256: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (bsc#1269993).
  • CVE-2026-53260: preempt: Provide preempt_[dis|en]able_nested() (bsc#1269731).
  • CVE-2026-53267: netfilter: nft_ct: bail out on template ct in get eval (bsc#1269577).
  • CVE-2026-53357: Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (bsc#1270257).
  • CVE-2026-53375: drm/amdgpu/vce: Prevent partial address patches (bsc#1271899).
  • CVE-2026-53388: fuse: re-lock request before replacing page cache folio (bsc#1271825).
  • CVE-2026-53391: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (bsc#1271904).
  • CVE-2026-53402: fbdev: fbcon: fix out-of-bounds read in err_out of (bsc#1271908).
  • CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271964).
  • CVE-2026-63806: KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() (bsc#1272268).
  • CVE-2026-63807: KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (bsc#1272263).
  • CVE-2026-63824: KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1272180).
  • CVE-2026-63829: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1272176).
  • CVE-2026-63884: drm/i915: Fix potential UAF in TTM object purge (bsc#1272573).
  • CVE-2026-63893: thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() (bsc#1272607).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1272904).
  • CVE-2026-63919: xfrm: input: hold netns during deferred transport reinjection (bsc#1272907).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1272918).
  • CVE-2026-63922,CVE-2026-63924: ipv6: exthdrs: recompute network header pointer once (bsc#1272855).
  • CVE-2026-63946: Bluetooth: ISO: fix UAF in iso_recv_frame (bsc#1272665).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272678).
  • CVE-2026-63975: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (bsc#1272694).
  • CVE-2026-63984: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (bsc#1272865).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in…
Record
SUSE-SU-2026:3595-1
Updated
2026-11-02
OSVSUSE-SU-2026:3602-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2026-46056: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (bsc#1267435).
  • CVE-2026-46193: xfrm: ah: account for ESN high bits in async callbacks (bsc#1267656).
  • CVE-2026-46324: netfilter: nf_tables: Introduce functions freeing nft_hook objects (bsc#1267995).
  • CVE-2026-52967: smb/client: fix possible infinite loop and oob read in symlink_data() (bsc#1269181).
  • CVE-2026-52986: netfilter: nf_conntrack_sip: don't use simple_strtoul (bsc#1269289).
  • CVE-2026-53050: quota: Fix race of dquot_scan_active() with quota deactivation (bsc#1269188).
  • CVE-2026-53129: fs/mbcache: cancel shrink work before destroying the cache (bsc#1269633).
  • CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269773).
  • CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1269997).
  • CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1269988).
  • CVE-2026-53250: xsk: cache csum_start/csum_offset to fix TOCTOU in xsk_skb_metadata() (bsc#1269808).
  • CVE-2026-53262: l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl() (bsc#1270000).
  • CVE-2026-53267: netfilter: nft_ct: bail out on template ct in get eval (bsc#1269577).
  • CVE-2026-53354: arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1270230).
  • CVE-2026-53375: drm/amdgpu/vce: Prevent partial address patches (bsc#1271899).
  • CVE-2026-53388: fuse: re-lock request before replacing page cache folio (bsc#1271825).
  • CVE-2026-53391: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (bsc#1271904).
  • CVE-2026-53402: fbdev: fbcon: fix out-of-bounds read in err_out of (bsc#1271908).
  • CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271964).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272282).
  • CVE-2026-63806: KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() (bsc#1272268).
  • CVE-2026-63807: KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (bsc#1272263).
  • CVE-2026-63824: KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1272180).
  • CVE-2026-63826: fbdev: fix use-after-free in store_modes() (bsc#1272183).
  • CVE-2026-63829: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1272176).
  • CVE-2026-63884: drm/i915: Fix potential UAF in TTM object purge (bsc#1272573).
  • CVE-2026-63893: thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() (bsc#1272607).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272836).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1272904).
  • CVE-2026-63919: xfrm: input: hold netns during deferred transport reinjection (bsc#1272907).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1272918).
  • CVE-2026-63922,CVE-2026-63924: ipv6: exthdrs: refresh nh after handling HAO option (bsc#1272855).
  • CVE-2026-63946: Bluetooth: ISO: fix UAF in iso_recv_frame (bsc#1272665).
  • CVE-2026-63952: memfd: deny writeable mappings when implying SEAL_WRITE (bsc#1272468).
  • CVE-2026-63968: ipv6: fix possible infinite loop in fib6_select_path() (bsc#1272466).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272678).
  • CVE-2026-63975: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (bsc#1272694).
  • CVE-2026-63984: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (bsc#1272865).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp() (bsc#1273035).
  • CVE-2026-64106: KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits (bsc#1272242).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272207).
  • CVE-2026-64560: posix-cpu-timers:…
Record
SUSE-SU-2026:3602-1
Updated
2026-11-02
OSVSUSE-SU-2026:3616-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2022-4994: KVM: x86: wean fast IN from emulator_pio_in (bsc#1273097).
  • CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1255616).
  • CVE-2026-46052: ceph: only d_add() negative dentries when they are unhashed (bsc#1267494).
  • CVE-2026-46056: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (bsc#1267435).
  • CVE-2026-46145: RDMA/mana: Validate rx_hash_key_len (bsc#1267715).
  • CVE-2026-46193: xfrm: ah: account for ESN high bits in async callbacks (bsc#1267656).
  • CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1269172).
  • CVE-2026-52958: libceph: Fix potential out-of-bounds access in osdmap_decode() (bsc#1269174).
  • CVE-2026-52967: smb/client: fix possible infinite loop and oob read in symlink_data() (bsc#1269181).
  • CVE-2026-52986: netfilter: nf_conntrack_sip: don't use simple_strtoul (bsc#1269289).
  • CVE-2026-53050: quota: Fix race of dquot_scan_active() with quota deactivation (bsc#1269188).
  • CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269773).
  • CVE-2026-53196: USB: serial: io_ti: fix heap overflow in get_manuf_info() (bsc#1269986).
  • CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1269997).
  • CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1269988).
  • CVE-2026-53256: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (bsc#1269993).
  • CVE-2026-53260: preempt: Provide preempt_[dis|en]able_nested() (bsc#1269731).
  • CVE-2026-53267: netfilter: nft_ct: bail out on template ct in get eval (bsc#1269577).
  • CVE-2026-53357: Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (bsc#1270257).
  • CVE-2026-53375: drm/amdgpu/vce: Prevent partial address patches (bsc#1271899).
  • CVE-2026-53388: fuse: re-lock request before replacing page cache folio (bsc#1271825).
  • CVE-2026-53391: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (bsc#1271904).
  • CVE-2026-53402: fbdev: fbcon: fix out-of-bounds read in err_out of (bsc#1271908).
  • CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271964).
  • CVE-2026-63806: KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() (bsc#1272268).
  • CVE-2026-63807: KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (bsc#1272263).
  • CVE-2026-63824: KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1272180).
  • CVE-2026-63829: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1272176).
  • CVE-2026-63893: thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() (bsc#1272607).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1272904).
  • CVE-2026-63919: xfrm: input: hold netns during deferred transport reinjection (bsc#1272907).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1272918).
  • CVE-2026-63922,CVE-2026-63924: ipv6: exthdrs: refresh nh after handling HAO option (bsc#1272855).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272678).
  • CVE-2026-63975: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (bsc#1272694).
  • CVE-2026-63984: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (bsc#1272865).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp() (bsc#1273035).
  • CVE-2026-64106: KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits (bsc#1272242).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272207).
  • CVE-2026-64560: posix-cpu-timers: Prevent UAF caused by non-leader exec() race (bsc#1273004).
  • CVE-2026-64561: KVM: x86: Check for invalid/obsolete root after making MMU pages available (bsc#1273231). -…
Record
SUSE-SU-2026:3616-1
Updated
2026-11-02
OSVSUSE-SU-2026:3617-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2022-4994: KVM: x86: wean fast IN from emulator_pio_in (bsc#1273097).
  • CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1255616).
  • CVE-2024-38542: RDMA/mana_ib: boundary check before installing cq callbacks (bsc#1226591).
  • CVE-2025-21953: net: mana: cleanup mana struct after debugfs_remove() (bsc#1240727).
  • CVE-2026-46052: ceph: only d_add() negative dentries when they are unhashed (bsc#1267494).
  • CVE-2026-46056: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (bsc#1267435).
  • CVE-2026-46145: RDMA/mana: Validate rx_hash_key_len (bsc#1267715).
  • CVE-2026-46193: xfrm: ah: account for ESN high bits in async callbacks (bsc#1267656).
  • CVE-2026-52933: io_uring/poll: fix signed comparison in io_poll_get_ownership() (bsc#1268989).
  • CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1269172).
  • CVE-2026-52958: libceph: Fix potential out-of-bounds access in osdmap_decode() (bsc#1269174).
  • CVE-2026-52967: smb/client: fix possible infinite loop and oob read in symlink_data() (bsc#1269181).
  • CVE-2026-52986: netfilter: nf_conntrack_sip: don't use simple_strtoul (bsc#1269289).
  • CVE-2026-53050: quota: Fix race of dquot_scan_active() with quota deactivation (bsc#1269188).
  • CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269773).
  • CVE-2026-53196: USB: serial: io_ti: fix heap overflow in get_manuf_info() (bsc#1269986).
  • CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1269997).
  • CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1269988).
  • CVE-2026-53256: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (bsc#1269993).
  • CVE-2026-53260: preempt: Provide preempt_[dis|en]able_nested() (bsc#1269731).
  • CVE-2026-53267: netfilter: nft_ct: bail out on template ct in get eval (bsc#1269577).
  • CVE-2026-53357: Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (bsc#1270257).
  • CVE-2026-53375: drm/amdgpu/vce: Prevent partial address patches (bsc#1271899).
  • CVE-2026-53388: fuse: re-lock request before replacing page cache folio (bsc#1271825).
  • CVE-2026-53391: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (bsc#1271904).
  • CVE-2026-53402: fbdev: fbcon: fix out-of-bounds read in err_out of (bsc#1271908).
  • CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271964).
  • CVE-2026-63806: KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() (bsc#1272268).
  • CVE-2026-63807: KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (bsc#1272263).
  • CVE-2026-63824: KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1272180).
  • CVE-2026-63829: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1272176).
  • CVE-2026-63884: drm/i915: Fix potential UAF in TTM object purge (bsc#1272573).
  • CVE-2026-63893: thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() (bsc#1272607).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1272904).
  • CVE-2026-63919: xfrm: input: hold netns during deferred transport reinjection (bsc#1272907).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1272918).
  • CVE-2026-63922,CVE-2026-63924: ipv6: exthdrs: refresh nh after handling HAO option (bsc#1272855).
  • CVE-2026-63946: Bluetooth: ISO: fix UAF in iso_recv_frame (bsc#1272665).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272678).
  • CVE-2026-63975: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (bsc#1272694).
  • CVE-2026-63984: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (bsc#1272865).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in…
Record
SUSE-SU-2026:3617-1
Updated
2026-11-02
OSVSUSE-SU-2026:3790-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
  • CVE-2025-68818: scsi: Revert 'scsi: qla2xxx: Perform lockless command completion in abort path' (bsc#1256675).
  • CVE-2026-23097: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).
  • CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43130: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).
  • CVE-2026-43161: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (bsc#1264333).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43170: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43328: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).
  • CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).
  • CVE-2026-46137: mptcp: pm: ADD_ADDR rtx: fix potential data-race (bsc#1267570).
  • CVE-2026-46147: KVM: arm64: Factor out pKVM hyp vcpu creation to separate function (bsc#1267689).
  • CVE-2026-46158: mptcp: pm: ADD_ADDR rtx: always decrease sk refcount (bsc#1266880).
  • CVE-2026-46168: mptcp: sockopt: set timestamp flags on subflow socket, not msk (bsc#1266869).
  • CVE-2026-46170: mptcp: pm: reuse ID 0 after delete and re-add (bsc#1267714).
  • CVE-2026-46180: wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task (bsc#1266813).
  • CVE-2026-46189: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (bsc#1266918).
  • CVE-2026-46193: xfrm: ah: account for ESN high bits in async callbacks (bsc#1267656).
  • CVE-2026-46234: vsock: fix buffer size clamping order (bsc#1266904).
  • CVE-2026-46245: drm/amd/display: Fix dc_link NULL handling in HPD init (bsc#1267678). -…
Record
SUSE-SU-2026:3790-1
Updated
2026-11-02
OSVSUSE-SU-2026:3810-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
  • CVE-2025-68818: scsi: Revert 'scsi: qla2xxx: Perform lockless command completion in abort path' (bsc#1256675).
  • CVE-2026-23097: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).
  • CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43130: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).
  • CVE-2026-43161: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (bsc#1264333).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43170: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43328: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).
  • CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).
  • CVE-2026-46137: mptcp: pm: ADD_ADDR rtx: fix potential data-race (bsc#1267570).
  • CVE-2026-46147: KVM: arm64: Factor out pKVM hyp vcpu creation to separate function (bsc#1267689).
  • CVE-2026-46158: mptcp: pm: ADD_ADDR rtx: always decrease sk refcount (bsc#1266880).
  • CVE-2026-46168: mptcp: sockopt: set timestamp flags on subflow socket, not msk (bsc#1266869).
  • CVE-2026-46170: mptcp: pm: reuse ID 0 after delete and re-add (bsc#1267714).
  • CVE-2026-46180: wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task (bsc#1266813).
  • CVE-2026-46189: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (bsc#1266918).
  • CVE-2026-46193: xfrm: ah: account for ESN high bits in async callbacks (bsc#1267656).
  • CVE-2026-46234: vsock: fix buffer size clamping order (bsc#1266904).
  • CVE-2026-46245: drm/amd/display: Fix dc_link NULL handling in HPD init (bsc#1267678). -…
Record
SUSE-SU-2026:3810-1
Updated
2026-11-02
OSVUSN-8875-1 No score

linux, linux-aws, linux-aws-5.15, linux-aws-fips, linux-azure, linux-azure-5.15, linux-azure-fde-5.15, linux-azure-fips, linux-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iot-realtime, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-oracle, linux-realtime, linux-xilinx-zynqmp vulnerabilities

It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • User-space API (UAPI);
  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • Hardware random number generator core;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DAX dirext access to differentiated memory framework;
  • DMA engine subsystem;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Generic PM domains;
  • System reset/shutdown drivers;
  • Power supply drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Reset controller framework;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • USB DSL drivers;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • DesignWare USB2 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C support driver;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • HFS file system;
  • HFS+ file system;
  • Journaling layer for block devices (JBD2); …
Record
USN-8875-1
Updated
2026-11-07
OSVUSN-8875-2 No score

linux-nvidia vulnerabilities

It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • User-space API (UAPI);
  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • Hardware random number generator core;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DAX dirext access to differentiated memory framework;
  • DMA engine subsystem;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Generic PM domains;
  • System reset/shutdown drivers;
  • Power supply drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Reset controller framework;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • USB DSL drivers;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • DesignWare USB2 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C support driver;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • HFS file system;
  • HFS+ file system;
  • Journaling layer for block devices (JBD2); …
Record
USN-8875-2
Updated
2026-11-07
OSVUSN-8876-1 No score

linux-azure-fde vulnerabilities

It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • Hardware random number generator core;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DAX dirext access to differentiated memory framework;
  • DMA engine subsystem;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • Intel Stratix 10 firmware drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Generic PM domains;
  • Power supply drivers;
  • Voltage and Current Regulator drivers;
  • Reset controller framework;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • USB DSL drivers;
  • Cadence USB3 driver;
  • ULPI bus;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • HFS file system;
  • HFS+ file system;
  • Journaling layer for block devices (JBD2);
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • OCFS2 file system;
  • OrangeFS file system;
  • Proc file system;
  • SMB network file system;
  • UDF file system;
  • XFS file system;
  • Software nodes and device…
Record
USN-8876-1
Updated
2026-11-07
OSVUSN-8877-1 No score

linux-gcp, linux-gcp-fips vulnerabilities

It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • User-space API (UAPI);
  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • Hardware random number generator core;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DAX dirext access to differentiated memory framework;
  • DMA engine subsystem;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Generic PM domains;
  • System reset/shutdown drivers;
  • Power supply drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Reset controller framework;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • USB DSL drivers;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • DesignWare USB2 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C support driver;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • HFS file system;
  • HFS+ file system;
  • Journaling layer for block devices (JBD2); …
Record
USN-8877-1
Updated
2026-11-07
OSVUSN-8878-1 No score

linux-gcp-5.15 vulnerabilities

It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114)

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • User-space API (UAPI);
  • ARM32 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • Hardware random number generator core;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DAX dirext access to differentiated memory framework;
  • DMA engine subsystem;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Generic PM domains;
  • System reset/shutdown drivers;
  • Power supply drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Reset controller framework;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • USB DSL drivers;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • DesignWare USB2 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C support driver;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer…
Record
USN-8878-1
Updated
2026-11-07
OSVUSN-8879-1 No score

linux-oracle-5.15 vulnerabilities

It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114)

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • User-space API (UAPI);
  • ARM32 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • Hardware random number generator core;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DAX dirext access to differentiated memory framework;
  • DMA engine subsystem;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Generic PM domains;
  • System reset/shutdown drivers;
  • Power supply drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Reset controller framework;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • USB DSL drivers;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • DesignWare USB2 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C support driver;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer…
Record
USN-8879-1
Updated
2026-11-07
OSVUSN-8886-1 No score

linux-nvidia-tegra vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • NVDIMM (Non-Volatile Memory Device) drivers;
  • Handshake API;
  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • OpenRISC architecture;
  • PowerPC architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Intel NPU Driver;
  • Android drivers;
  • Rados block device (RBD) driver;
  • Bluetooth drivers;
  • Hardware random number generator core;
  • TPM device driver;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DMA engine subsystem;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • Amazon Nitro Secure Module driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • Texas Instruments network drivers;
  • NTB driver;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • Parport drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • i.MX PM domains;
  • System reset/shutdown drivers;
  • PTP clock framework;
  • Voltage and Current Regulator drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • SPI subsystem;
  • Realtek RTL8723BS SDIO drivers;
  • VME bus staging drivers;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • DesignWare USB2 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • vDPA drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Watchdog drivers;
  • 9P distributed file system;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • exFAT file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • Journaling layer for block devices (JBD2);
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NTFS3 file system;
  • OCFS2 file system;
  • Proc file system;
  • SMB network file system;
  • Tracing file system;
  • UDF file system;
  • XFS file system;
  • Key management;
  • BPF subsystem;
  • Control group (cgroup);
  • Glob pattern matching library;
  • MAC80211 subsystem;
  • Mellanox drivers;
  • Networking core;
  • Network sockets;
  • IPv6 networking;
  • Bluetooth subsystem;
  • Wireless networking;
  • IPv4 networking;
  • Netfilter;
  • Network traffic control;
  • SCTP protocol;
  • TCP network protocol;
  • XFRM subsystem;
  • RDMA verbs API;
  • io_uring subsystem;
  • IPC subsystem;
  • Audit subsystem;
  • Kernel CPU control infrastructure;
  • Perf events;
  • Kernel exit() syscall;
  • Kernel fork() syscall;
  • Scheduler infrastructure;
  • Signal handling mechanism;
  • Timer subsystem;
  • Tracing infrastructure;
  • Resizable hashtable library;
  • Memory management;
  • 6LoWPAN network protocol;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • B.A.T.M.A.N. meshing protocol;
  • Ethernet bridge;
  • CAN network layer;
  • Ceph Core library;
  • Ethtool driver;
  • HSR network protocol;
  • IEEE802154.4 network protocol;
  • IUCV driver;
  • KCM (Kernel Connection Multiplexor) sockets driver;
  • IEEE 802.15.4 subsystem;
  • Multipath TCP;
  • Open vSwitch;
  • Packet sockets;
  • Phonet protocol;
  • Qualcomm IPC Router (QRTR);
  • RDS protocol;
  • RxRPC session sockets;
  • SMC…
Record
USN-8886-1
Updated
2026-11-06
OSVUSN-8887-1 No score

linux, linux-aws, linux-gcp, linux-gke, linux-ibm, linux-oracle, linux-realtime vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • Handshake API;
  • ARM32 architecture;
  • MIPS architecture;
  • OpenRISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • Rados block device (RBD) driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • DAX dirext access to differentiated memory framework;
  • DIBS (Direct Internal Buffer Sharing) drivers;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • DPLL subsystem;
  • EDAC drivers;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIB drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Intel Management Engine Interface driver;
  • Amazon Nitro Secure Module driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • Device tree and open firmware driver;
  • Operating Performance Points (OPP) driver;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • i.MX PM domains;
  • MediaTek PM domains;
  • Power supply drivers;
  • PTP clock framework;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • MPAM driver;
  • Reset controller framework;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Xilinx SoC drivers;
  • SoundWire subsystem;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TTY drivers;
  • UFS subsystem;
  • USB DSL drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Virtio drivers;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • 9P distributed file system;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • Journaling layer for block devices (JBD2);
  • Network file systems library;
  • Network…
Record
USN-8887-1
Updated
2026-11-02
OSVUSN-8887-2 No score

linux-aws-7.0 vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • Handshake API;
  • ARM32 architecture;
  • MIPS architecture;
  • OpenRISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • Rados block device (RBD) driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • DAX dirext access to differentiated memory framework;
  • DIBS (Direct Internal Buffer Sharing) drivers;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • DPLL subsystem;
  • EDAC drivers;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIB drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Intel Management Engine Interface driver;
  • Amazon Nitro Secure Module driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • Device tree and open firmware driver;
  • Operating Performance Points (OPP) driver;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • i.MX PM domains;
  • MediaTek PM domains;
  • Power supply drivers;
  • PTP clock framework;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • MPAM driver;
  • Reset controller framework;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Xilinx SoC drivers;
  • SoundWire subsystem;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TTY drivers;
  • UFS subsystem;
  • USB DSL drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Virtio drivers;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • 9P distributed file system;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • Journaling layer for block devices (JBD2);
  • Network file systems library;
  • Network…
Record
USN-8887-2
Updated
2026-11-02
OSVUSN-8887-3 No score

linux-gcp-7.0, linux-hwe-7.0, linux-oracle-7.0 vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • Handshake API;
  • ARM32 architecture;
  • MIPS architecture;
  • OpenRISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • Rados block device (RBD) driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • DAX dirext access to differentiated memory framework;
  • DIBS (Direct Internal Buffer Sharing) drivers;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • DPLL subsystem;
  • EDAC drivers;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIB drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Intel Management Engine Interface driver;
  • Amazon Nitro Secure Module driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • Device tree and open firmware driver;
  • Operating Performance Points (OPP) driver;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • i.MX PM domains;
  • MediaTek PM domains;
  • Power supply drivers;
  • PTP clock framework;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • MPAM driver;
  • Reset controller framework;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Xilinx SoC drivers;
  • SoundWire subsystem;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TTY drivers;
  • UFS subsystem;
  • USB DSL drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Virtio drivers;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • 9P distributed file system;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • Journaling layer for block devices (JBD2);
  • Network file systems library;
  • Network…
Record
USN-8887-3
Updated
2026-11-02
OSVUSN-8888-1 No score

linux-azure, linux-azure-fde vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • Handshake API;
  • ARM32 architecture;
  • MIPS architecture;
  • OpenRISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • DAX dirext access to differentiated memory framework;
  • DIBS (Direct Internal Buffer Sharing) drivers;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • DPLL subsystem;
  • EDAC drivers;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIB drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Intel Management Engine Interface driver;
  • Amazon Nitro Secure Module driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • Device tree and open firmware driver;
  • Operating Performance Points (OPP) driver;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • i.MX PM domains;
  • MediaTek PM domains;
  • Power supply drivers;
  • PTP clock framework;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • MPAM driver;
  • Reset controller framework;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Xilinx SoC drivers;
  • SoundWire subsystem;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • TTY drivers;
  • UFS subsystem;
  • USB DSL drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Virtio drivers;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • 9P distributed file system;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • Journaling layer…
Record
USN-8888-1
Updated
2026-11-02
OSVUSN-8888-2 No score

linux-azure-7.0, linux-azure-fde-7.0 vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • Handshake API;
  • ARM32 architecture;
  • MIPS architecture;
  • OpenRISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • DAX dirext access to differentiated memory framework;
  • DIBS (Direct Internal Buffer Sharing) drivers;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • DPLL subsystem;
  • EDAC drivers;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIB drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Intel Management Engine Interface driver;
  • Amazon Nitro Secure Module driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • Device tree and open firmware driver;
  • Operating Performance Points (OPP) driver;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • i.MX PM domains;
  • MediaTek PM domains;
  • Power supply drivers;
  • PTP clock framework;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • MPAM driver;
  • Reset controller framework;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Xilinx SoC drivers;
  • SoundWire subsystem;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • TTY drivers;
  • UFS subsystem;
  • USB DSL drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Virtio drivers;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • 9P distributed file system;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • Journaling layer…
Record
USN-8888-2
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-64k
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-64k-core
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-64k-debug
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-64k-debug-core
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-64k-debug-devel
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-64k-debug-devel-matched
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-64k-debug-modules
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-64k-debug-modules-core
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-64k-debug-modules-extra
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-64k-devel
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-64k-devel-matched
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-64k-modules
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-64k-modules-core
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-64k-modules-extra
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-abi-stablelists
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-core
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-cross-headers
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-debug
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-debug-core
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-debug-devel
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-debug-devel-matched
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-debug-modules
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-debug-modules-core
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-debug-modules-extra
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-debug-uki-virt
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-devel
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-devel-matched
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-doc
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-headers
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-modules
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-modules-core
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-modules-extra
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-modules-extra-matched
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt-64k
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt-64k-core
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt-64k-debug
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt-64k-debug-core
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt-64k-debug-devel
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt-64k-debug-modules
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt-64k-debug-modules-core
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt-64k-debug-modules-extra
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt-64k-devel
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt-64k-modules
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt-64k-modules-core
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt-64k-modules-extra
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt-core
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt-debug
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt-debug-core
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt-debug-devel
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt-debug-modules
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt-debug-modules-core
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
:linux_kernel:
Android
 :0 up to :2026-11-05, plus listed versions
Kernel
:2026-11-05
kernel
Azure Linux:3
 before 6.6.150.1-1
6.6.150.1-1
linux-lts
Alpaquita:23
 6.1.177-r0 up to 6.1.182-r0
6.1.182-r0
linux-lts
Alpaquita:25
 6.12.95-r0 up to 6.12.103-r0
6.12.103-r0
linux-lts
Alpaquita:stream
 6.18.38-r0 up to 6.18.43-r0
6.18.43-r0
bpftool
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 7.0.0-284.1101.el9_2.tuxcare.11.els16
7.0.0-284.1101.el9_2.tuxcare.11.els16
kernel
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-64k
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-64k-core
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-64k-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-64k-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-64k-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-64k-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-64k-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-64k-debug-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-64k-debug-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-64k-debug-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-64k-debug-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-64k-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-64k-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-64k-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-64k-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-64k-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-64k-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-64k-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-abi-stablelists
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-core
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-cross-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-debug-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-debug-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-debug-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-debug-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-debug-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-doc
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-ipaclones-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-selftests-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-tools
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-tools-libs
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-tools-libs-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
kernel-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
libbpf
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.11.els16
2:1.0.0-2.el9_2.tuxcare.11.els16
libbpf-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.11.els16
2:1.0.0-2.el9_2.tuxcare.11.els16
libbpf-static
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.11.els16
2:1.0.0-2.el9_2.tuxcare.11.els16
perf
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
python3-perf
TuxCare:AlmaLinux:9.2
From an advisory covering 120 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els16
5.14.0-284.1101.el9_2.tuxcare.11.els16
Kernel
Linux
 5.7.0 up to 5.10.262, 5.11.0 up to 5.15.213, 5.16.0 up to 6.1.180, 6.2.0 up to 6.6.147, 6.7.0 up to 6.12.100, 6.13.0 up to 6.18.41, 6.19.0 up to 7.1.5
5.10.2625.15.2136.1.1806.6.1476.12.1006.18.417.1.5
linux
Debian:12
 before 6.1.180-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 45 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.170-16.1.170-26.1.170-36.1.172-16.1.174-16.1.176-16.1.177-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-1
6.1.180-1
linux
Debian:13
 before 6.12.100-1, plus listed versions
6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-1
Show 26 moreShow less
6.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-1
6.12.100-1
linux
Debian:14
 before 7.1.5-1, plus listed versions
6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1
Show 45 moreShow less
6.12.113-16.12.115-16.12.115-26.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp1
7.1.5-1
linux-6.12
Debian:12
 before 6.12.100-1~deb12u1
6.12.100-1~deb12u1
kernel
Mageia:10
From an advisory covering 367 CVEs
 before 6.18.44-1.mga10
6.18.44-1.mga10
kmod-xtables-addons
Mageia:10
From an advisory covering 367 CVEs
 before 3.30-4.mga10
3.30-4.mga10
kmod-virtualbox
Mageia:10
From an advisory covering 367 CVEs
 before 7.2.14-30.mga10
7.2.14-30.mga10
kmod-nvidia-current-wopengpu
Mageia:10
From an advisory covering 367 CVEs
 before 580.173.02-39.mga10.nonfree
580.173.02-39.mga10.nonfree
drakx-installer-images
Mageia:10
From an advisory covering 367 CVEs
 before 2.94-55.mga10.nonfree
2.94-55.mga10.nonfree
kernel-linus
Mageia:10
From an advisory covering 367 CVEs
 before 6.18.44-1.mga10
6.18.44-1.mga10
kernel
openEuler:22.03-LTS-SP4
From an advisory covering 26 CVEs
 before 5.10.0-327.0.0.228.oe2203sp4
5.10.0-327.0.0.228.oe2203sp4
kernel
openEuler:24.03-LTS-SP3
From an advisory covering 165 CVEs
 before 6.6.0-145.3.29.160.oe2403sp3
6.6.0-145.3.29.160.oe2403sp3
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-64k-debug-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-64k-debug-devel-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-64k-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-64k-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-64k-devel-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-debug-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-debug-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-debug-devel-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-devel-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-doc
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-rt-64k-debug-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-rt-64k-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-rt-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-tools-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-zfcpdump-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-zfcpdump-devel-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
libperf-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
perf
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
perf-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
python3-perf
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
python3-perf-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
rtla
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
rv
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-64k
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-64k-core
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-64k-debug
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-64k-debug-core
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-64k-debug-modules
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-64k-debug-modules-core
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-64k-debug-modules-extra
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-64k-modules
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-64k-modules-core
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-64k-modules-extra
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-abi-stablelists
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-core
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-debug
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-debug-core
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-debug-modules
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-debug-modules-core
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-debug-modules-extra
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-debug-uki-virt
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-modules
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-modules-core
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel
Rocky Linux:10
From an advisory covering 24 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel
Rocky Linux:9
From an advisory covering 26 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
rootio-linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
kernel-obs-build
SUSE:Linux Micro Extras 6.2
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-syms
SUSE:Linux Micro Extras 6.2
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-64kb
SUSE:Linux Micro 6.2
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-default
SUSE:Linux Micro 6.2
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-default-base
SUSE:Linux Micro 6.2
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1.160000.2.19
6.12.0-160000.37.1.160000.2.19
kernel-rt
SUSE:Linux Micro 6.2
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-source
SUSE:Linux Micro 6.2
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-rt
SUSE:Linux Micro 6.1
From an advisory covering 648 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-source-rt
SUSE:Linux Micro 6.1
From an advisory covering 648 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-default
SUSE:Linux Micro 6.1
From an advisory covering 647 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-kvmsmall
SUSE:Linux Micro 6.1
From an advisory covering 647 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-source
SUSE:Linux Micro 6.1
From an advisory covering 647 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-64kb
SUSE:Linux Enterprise Server 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-azure
SUSE:Linux Enterprise Server 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-default
SUSE:Linux Enterprise Server 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-default-base
SUSE:Linux Enterprise Server 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1.160000.2.19
6.12.0-160000.37.1.160000.2.19
kernel-docs
SUSE:Linux Enterprise Server 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-kvmsmall
SUSE:Linux Enterprise Server 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-obs-qa
SUSE:Linux Enterprise Server 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-source
SUSE:Linux Enterprise Server 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-syms
SUSE:Linux Enterprise Server 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-64kb
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-azure
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-default
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1.160000.2.19
6.12.0-160000.37.1.160000.2.19
kernel-docs
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-kvmsmall
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-obs-qa
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-source
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-syms
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-zfcpdump
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-rt
SUSE:Linux Micro 6.0
From an advisory covering 648 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-source-rt
SUSE:Linux Micro 6.0
From an advisory covering 648 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-default
SUSE:Linux Micro 6.0
From an advisory covering 647 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-kvmsmall
SUSE:Linux Micro 6.0
From an advisory covering 647 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-source
SUSE:Linux Micro 6.0
From an advisory covering 647 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-default
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 59 CVEs
 before 5.14.21-150400.24.235.1
5.14.21-150400.24.235.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 59 CVEs
 before 5.14.21-150400.24.235.1.150400.24.118.3
5.14.21-150400.24.235.1.150400.24.118.3
kernel-source
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 59 CVEs
 before 5.14.21-150400.24.235.1
5.14.21-150400.24.235.1
kernel-default
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 59 CVEs
 before 5.14.21-150400.24.235.1
5.14.21-150400.24.235.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 59 CVEs
 before 5.14.21-150400.24.235.1.150400.24.118.3
5.14.21-150400.24.235.1.150400.24.118.3
kernel-source
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 59 CVEs
 before 5.14.21-150400.24.235.1
5.14.21-150400.24.235.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP4
From an advisory covering 59 CVEs
 before 5.14.21-150400.24.235.1
5.14.21-150400.24.235.1
kernel-livepatch-SLE15-SP4_Update_58
SUSE:Linux Enterprise Live Patching 15 SP4
From an advisory covering 59 CVEs
 before 1-150400.9.7.1
1-150400.9.7.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP4
From an advisory covering 59 CVEs
 before 5.14.21-150400.24.235.1
5.14.21-150400.24.235.1
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 59 CVEs
 before 5.14.21-150400.24.235.1
5.14.21-150400.24.235.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 59 CVEs
 before 5.14.21-150400.24.235.1
5.14.21-150400.24.235.1
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 59 CVEs
 before 5.14.21-150400.24.235.1.150400.24.118.3
5.14.21-150400.24.235.1.150400.24.118.3
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 59 CVEs
 before 5.14.21-150400.24.235.1
5.14.21-150400.24.235.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 59 CVEs
 before 5.14.21-150400.24.235.1
5.14.21-150400.24.235.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 59 CVEs
 before 5.14.21-150400.24.235.1
5.14.21-150400.24.235.1
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1117.124~20.04.1, plus listed versions
5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1
Show 45 moreShow less
5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1
5.15.0-1117.124~20.04.1
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
linux-azure-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
 None known
linux-azure-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1123.132~20.04.1, plus listed versions
5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1
Show 45 moreShow less
5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1
5.15.0-1123.132~20.04.1
linux-azure-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
 None known
linux-azure-fde
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
 None known
linux-azure-fde-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1122.131~20.04.1, plus listed versions
5.15.0-1019.24~20.04.1.15.15.0-1020.25~20.04.1.15.15.0-1021.26~20.04.1.15.15.0-1029.36~20.04.1.15.15.0-1030.37~20.04.1.1
Show 45 moreShow less
5.15.0-1031.38~20.04.1.15.15.0-1033.40~20.04.1.15.15.0-1034.41~20.04.1.25.15.0-1035.42~20.04.1.15.15.0-1036.43~20.04.1.15.15.0-1037.44~20.04.1.15.15.0-1038.45~20.04.1.15.15.0-1039.46~20.04.1.15.15.0-1040.47~20.04.1.15.15.0-1041.48~20.04.1.15.15.0-1042.49~20.04.1.15.15.0-1043.50~20.04.1.15.15.0-1046.53~20.04.1.15.15.0-1047.54~20.04.1.15.15.0-1049.56~20.04.1.15.15.0-1050.57~20.04.1.15.15.0-1051.59~20.04.1.15.15.0-1052.60~20.04.1.15.15.0-1053.61~20.04.1.15.15.0-1054.62~20.04.1.15.15.0-1056.64~20.04.1.15.15.0-1057.65~20.04.1.15.15.0-1058.66~20.04.2.15.15.0-1059.67~20.04.1.15.15.0-1060.69~20.04.1.15.15.0-1061.70~20.04.1.15.15.0-1063.72~20.04.1.15.15.0-1064.73~20.04.1.15.15.0-1065.74~20.04.1.15.15.0-1067.76~20.04.1.15.15.0-1068.77~20.04.1.15.15.0-1070.79~20.04.1.15.15.0-1071.80~20.04.1.15.15.0-1072.81~20.04.1.15.15.0-1073.82~20.04.1.15.15.0-1074.83~20.04.1.15.15.0-1076.85~20.04.1.15.15.0-1078.87~20.04.1.15.15.0-1081.90~20.04.1.15.15.0-1082.91~20.04.1.15.15.0-1086.95~20.04.1.15.15.0-1087.96~20.04.1.15.15.0-1088.97~20.04.1.15.15.0-1089.98~20.04.1.15.15.0-1091.100~20.04.1.1
5.15.0-1122.131~20.04.1
linux-gcp-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1
Show 7 moreShow less
5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3
 None known
linux-gcp-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1
Show 8 moreShow less
5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1
 None known
linux-gcp-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1118.128~20.04.1, plus listed versions
5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2
Show 45 moreShow less
5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.15.15.0-1065.73~20.04.15.15.0-1066.74~20.04.15.15.0-1067.75~20.04.15.15.0-1068.76~20.04.15.15.0-1069.77~20.04.15.15.0-1070.78~20.04.15.15.0-1071.79~20.04.15.15.0-1072.80~20.04.15.15.0-1073.81~20.04.15.15.0-1074.83~20.04.1
5.15.0-1118.128~20.04.1
linux-gcp-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41
 None known
linux-gke
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
 None known
linux-gke-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1
Show 13 moreShow less
5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1
 None known
linux-gkeop
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13
Show 45 moreShow less
5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77
 None known
linux-gkeop-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2
Show 40 moreShow less
5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1
 None known
linux-hwe-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1
Show 7 moreShow less
5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1
 None known
linux-hwe-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1
Show 11 moreShow less
5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1
 None known
linux-hwe-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-198.208~20.04.1, plus listed versions
5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
Show 45 moreShow less
5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1
5.15.0-198.208~20.04.1
linux-hwe-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1
Show 16 moreShow less
5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1
 None known
linux-ibm-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1111.115~20.04.1, plus listed versions
5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1
Show 45 moreShow less
5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.15.15.0-1057.60~20.04.15.15.0-1058.61~20.04.15.15.0-1059.62~20.04.15.15.0-1060.63~20.04.15.15.0-1061.64~20.04.15.15.0-1062.65~20.04.15.15.0-1063.66~20.04.15.15.0-1064.67~20.04.15.15.0-1065.68~20.04.15.15.0-1066.69~20.04.15.15.0-1067.70~20.04.15.15.0-1068.71~20.04.15.15.0-1069.72~20.04.15.15.0-1074.77~20.04.15.15.0-1075.78~20.04.15.15.0-1076.79~20.04.15.15.0-1078.81~20.04.15.15.0-1079.82~20.04.15.15.0-1080.83~20.04.15.15.0-1081.84~20.04.15.15.0-1083.86~20.04.15.15.0-1085.88~20.04.15.15.0-1086.89~20.04.15.15.0-1087.90~20.04.15.15.0-1089.92~20.04.15.15.0-1090.93~20.04.15.15.0-1091.94~20.04.15.15.0-1092.95~20.04.15.15.0-1093.96~20.04.15.15.0-1094.97~20.04.1
5.15.0-1111.115~20.04.1
linux-intel-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19
 None known
linux-intel-iotg-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1112.118~20.04.1, plus listed versions
5.15.0-1003.5~20.04.15.15.0-1008.11~20.04.15.15.0-1010.14~20.04.15.15.0-1015.20~20.04.25.15.0-1016.21~20.04.1
Show 45 moreShow less
5.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1021.26~20.04.15.15.0-1023.28~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1030.35~20.04.15.15.0-1031.36~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1040.46~20.04.15.15.0-1043.49~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1060.66~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.25.15.0-1074.80~20.04.15.15.0-1077.83~20.04.15.15.0-1078.84~20.04.15.15.0-1079.85~20.04.15.15.0-1083.89~20.04.15.15.0-1084.90~20.04.15.15.0-1085.91~20.04.15.15.0-1086.92~20.04.1
5.15.0-1112.118~20.04.1
linux-lowlatency-hwe-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-195.205~20.04.1, plus listed versions
5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
Show 45 moreShow less
5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.88~20.04.15.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.95~20.04.15.15.0-87.96~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-110.120~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1
5.15.0-195.205~20.04.1
linux-nvidia-tegra-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1070.72~20.04.1, plus listed versions
5.15.0-1009.9~20.04.15.15.0-1010.10~20.04.15.15.0-1012.12~20.04.15.15.0-1014.14~20.04.15.15.0-1015.15~20.04.1
Show 36 moreShow less
5.15.0-1016.16~20.04.15.15.0-1017.17~20.04.15.15.0-1018.18~20.04.15.15.0-1019.19~20.04.15.15.0-1020.20~20.04.15.15.0-1022.22~20.04.15.15.0-1025.25~20.04.15.15.0-1027.27~20.04.15.15.0-1030.30~20.04.15.15.0-1032.32~20.04.15.15.0-1039.39~20.04.15.15.0-1040.40~20.04.15.15.0-1041.41~20.04.15.15.0-1042.42~20.04.15.15.0-1043.43~20.04.15.15.0-1044.44~20.04.15.15.0-1045.45~20.04.15.15.0-1046.46~20.04.15.15.0-1047.47~20.04.15.15.0-1048.48~20.04.15.15.0-1049.49~20.04.15.15.0-1050.50~20.04.15.15.0-1051.51~20.04.15.15.0-1052.52~20.04.25.15.0-1053.53~20.04.15.15.0-1055.55~20.04.15.15.0-1057.57~20.04.15.15.0-1058.58~20.04.15.15.0-1060.60~20.04.15.15.0-1061.61~20.04.15.15.0-1063.63~20.04.15.15.0-1064.66~20.04.15.15.0-1065.67~20.04.15.15.0-1066.68~20.04.15.15.0-1067.69~20.04.15.15.0-1068.70~20.04.1
5.15.0-1070.72~20.04.1
linux-oem-5.10
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17
Show 21 moreShow less
5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61
 None known
linux-oem-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21
Show 7 moreShow less
5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36
 None known
linux-oem-5.14
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10
Show 30 moreShow less
5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67
 None known
linux-oem-5.6
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13
Show 24 moreShow less
5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60
 None known
linux-oracle-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-oracle-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1
Show 7 moreShow less
5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1
 None known
linux-oracle-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1114.120~20.04.1, plus listed versions
5.15.0-1007.9~20.04.15.15.0-1013.17~20.04.15.15.0-1016.20~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.1
Show 45 moreShow less
5.15.0-1019.24~20.04.15.15.0-1021.27~20.04.15.15.0-1022.28~20.04.15.15.0-1025.31~20.04.25.15.0-1027.33~20.04.15.15.0-1029.35~20.04.15.15.0-1030.36~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1041.47~20.04.15.15.0-1042.48~20.04.15.15.0-1044.50~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1047.53~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1053.59~20.04.15.15.0-1054.60~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1074.80~20.04.1
5.15.0-1114.120~20.04.1
linux-oracle-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1
 None known
linux-raspi2
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
 None known
kernel-source
openSUSE:Tumbleweed
From an advisory covering 351 CVEs
 before 7.1.7-1.1
7.1.7-1.1
dtb-aarch64
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-64kb
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-azure
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-default
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-default-base
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1.160000.2.19
6.12.0-160000.37.1.160000.2.19
kernel-docs
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-kvmsmall
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-obs-build
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-obs-qa
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-rt
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-source
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-syms
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-zfcpdump
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubitsmichiya/exploit-CVE-2026-645602026-07-23
PoC in GitHubvillager1314/CVE-2026-64560-Analysis2026-08-03
PoC in GitHubquyicheng03-boop/xiaomi15-dada-cve-2026-645602026-09-05
PoC in GitHubRMDycz/K80Pro-miro-CVE-2026-645602026-09-18
PoC in GitHuba23bc/op13-cve-2026-645602026-09-24
PoC in GitHubBecome-ILLUSORY/cve-2026-64560-a162026-09-25
PoC in GitHubWangs-official/opace6-cve-2026-645602026-09-25
PoC in GitHubqingle009/opace6-cve-2026-645602026-09-26
PoC in GitHubMeniben/redmi14c-pond-cve-2026-645602026-10-02
PoC in GitHubsangsheng2026/honor-90gt-mag-an00-root-research2026-10-09
Show 11 moreShow less
Public exploits
SourceLinkDate
PoC in GitHubfeiguang-ai/plz110-6.12.69-cve-2026-64560-ksu2026-10-15
PoC in GitHubChaYeWuu/prague-CVE-2026-64560-OS4.02026-10-17
PoC in GitHubmaosasagawa/pmx110-cve-2026-645602026-10-17
PoC in GitHubtotsiaw/cve-2026-64560-rmx66992026-10-17
PoC in GitHubFeng1586/CVE-2026-64560-public2026-10-19
PoC in GitHubFeng1586/CVE-2026-64560-sources2026-10-19
PoC in GitHubNo-World/rootkit2026-10-24
PoC in GitHubwanwuzhishi/ksu-root2026-10-25
PoC in GitHubyoussefnoser/opd2415-6.6.118-cve-2026-64560-ksu2026-10-27
PoC in GitHubaucai/Redmi-K90-CVE-2026-645602026-10-30
PoC in GitHubexumeOAO/plr110-6.12.38-cve-2026-64560-ksu2026-10-31

History

History
RecordedChangedSources
affected, aliases, referencesOSV
affectedOSV
affectedOSV
affected, aliases, referencesOSV
exploitsPoC in GitHub
affectedOSV
affected, referencesOSV
factsNVD, OSV
exploits
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-64560 is a high vulnerability (CVSS 7.8) in Linux, published July 29, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.50%, the 43rd percentile. Fixed in :linux_kernel: :2026-11-05.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 862 package rows, 378 versions, 5,630 references and the rest of 33 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 5 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open