CVE-2026-68160
ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()
9.8 CriticalFix available
In the Linux kernel, the following vulnerability has been resolved:
ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()
ceph_handle_caps() reads snap_trace_len from the wire-format ceph_mds_caps header and uses it unconditionally to build a fake end pointer (snaptrace + snaptrace_len) that is later handed to ceph_update_snap_trace() in the CEPH_CAP_OP_IMPORT case:
snaptrace = h + 1;
snaptrace_len = le32_to_cpu(h->snap_trace_len);
p = snaptrace + snaptrace_len;
...
case CEPH_CAP_OP_IMPORT:
if (snaptrace_len) {
...
if (ceph_update_snap_trace(mdsc, snaptrace,
snaptrace + snaptrace_len,
false, &realm)) { ... }
ceph_update_snap_trace() then decodes a struct ceph_mds_snap_realm from snaptrace using ceph_decode_need(&p, e, sizeof(*ri), bad) with the attacker-supplied fake end e == snaptrace + snaptrace_len. With snaptrace_len == 0xFFFFFFFF the bound check is trivially satisfied, ri = p reads sizeof(struct ceph_mds_snap_realm) past the legitimate msg->front buffer, and ri->num_snaps / ri->num_prior_parent_snaps then drive further out-of-bounds reads of the encoded snap arrays.
The eleven msg_version >= 2 .. msg_version >= 12 decoder blocks above the op switch each catch this OOB through their ceph_decode_*_safe() / ceph_decode_need() helpers, but they sit behind a hdr.version-gated if, so a malicious or compromised MDS that sets msg->hdr.version = 1 reaches the IMPORT path with no version-gated decoder having validated snap_trace_len. The shape has been present since ceph_handle_caps() was introduced.
Validate snap_trace_len against the message front buffer before consuming it, using the canonical ceph_decode_need() / ceph_has_room() helper. The helper bounds the length with subtraction (n <= end - p, guarded by end >= p) rather than pointer addition, so it is wrap-safe for the attacker-controlled u32 length on 32-bit builds where p + snap_trace_len could overflow the address space. This matches the rest of the ceph decode path (e.g. the pool_ns_len check a few lines below), and the existing goto bad cleanup already covers this exit path.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
0.77%Up 0.6 points since Aug 11, 2026
What each source reports
CVE List Score used
ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()
In the Linux kernel, the following vulnerability has been resolved:
ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()
ceph_handle_caps() reads snap_trace_len from the wire-format ceph_mds_caps header and uses it unconditionally to build a fake end pointer (snaptrace + snaptrace_len) that is later handed to ceph_update_snap_trace() in the CEPH_CAP_OP_IMPORT case:
snaptrace = h + 1;
snaptrace_len = le32_to_cpu(h->snap_trace_len);
p = snaptrace + snaptrace_len;
...
case CEPH_CAP_OP_IMPORT:
if (snaptrace_len) {
...
if (ceph_update_snap_trace(mdsc, snaptrace,
snaptrace + snaptrace_len,
false, &realm)) { ... }
ceph_update_snap_trace() then decodes a struct ceph_mds_snap_realm from snaptrace using ceph_decode_need(&p, e, sizeof(*ri), bad) with the attacker-supplied fake end e == snaptrace + snaptrace_len. With snaptrace_len == 0xFFFFFFFF the bound check is trivially satisfied, ri = p reads sizeof(struct ceph_mds_snap_realm) past the legitimate msg->front buffer, and ri->num_snaps / ri->num_prior_parent_snaps then drive further out-of-bounds reads of the encoded snap arrays.
The eleven msg_version >= 2 .. msg_version >= 12 decoder blocks above the op switch each catch this OOB through their ceph_decode_*_safe() / ceph_decode_need() helpers, but they sit behind a hdr.version-gated if, so a malicious or compromised MDS that sets msg->hdr.version = 1 reaches the IMPORT path with no version-gated decoder having validated snap_trace_len. The shape has been present since ceph_handle_caps() was introduced.
Validate snap_trace_len against the message front buffer before consuming it, using the canonical ceph_decode_need() / ceph_has_room() helper. The helper bounds the length with subtraction (n <= end - p, guarded by end >= p) rather than pointer addition, so it is wrap-safe for the attacker-controlled u32 length on 32-bit builds where p + snap_trace_len could overflow the address space. This matches the rest of the ceph decode path (e.g. the pool_ns_len check a few lines below), and the existing goto bad cleanup already covers this exit path.
- Record
CVE-2026-68160- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
EUVDEUVD-2026-55546
In the Linux kernel, the following vulnerability has been resolved:
ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()
ceph_handle_caps() reads snap_trace_len from the wire-format ceph_mds_caps header and uses it unconditionally to build a fake end pointer (snaptrace + snaptrace_len) that is later handed to ceph_update_snap_trace() in the CEPH_CAP_OP_IMPORT case:
snaptrace = h + 1;
snaptrace_len = le32_to_cpu(h->snap_trace_len);
p = snaptrace + snaptrace_len;
...
case CEPH_CAP_OP_IMPORT:
if (snaptrace_len) {
...
if (ceph_update_snap_trace(mdsc, snaptrace,
snaptrace + snaptrace_len,
false, &realm)) { ... }
ceph_update_snap_trace() then decodes a struct ceph_mds_snap_realm from snaptrace using ceph_decode_need(&p, e, sizeof(*ri), bad) with the attacker-supplied fake end e == snaptrace + snaptrace_len. With snaptrace_len == 0xFFFFFFFF the bound check is trivially satisfied, ri = p reads sizeof(struct ceph_mds_snap_realm) past the legitimate msg->front buffer, and ri->num_snaps / ri->num_prior_parent_snaps then drive further out-of-bounds reads of the encoded snap arrays.
The eleven msg_version >= 2 .. msg_version >= 12 decoder blocks above the op switch each catch this OOB through their ceph_decode_*_safe() / ceph_decode_need() helpers, but they sit behind a hdr.version-gated if, so a malicious or compromised MDS that sets msg->hdr.version = 1 reaches the IMPORT path with no version-gated decoder having validated snap_trace_len. The shape has been present since ceph_handle_caps() was introduced.
Validate snap_trace_len against the message front buffer before consuming it, using the canonical ceph_decode_need() / ceph_has_room() helper. The helper bounds the length with subtraction (n <= end - p, guarded by end >= p) rather than pointer addition, so it is wrap-safe for the attacker-controlled u32 length on 32-bit builds where p + snap_trace_len could overflow the address space. This matches the rest of the ceph decode path (e.g. the pool_ns_len check a few lines below), and the existing goto bad cleanup already covers this exit path.
- Record
EUVD-2026-55546- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-prf2-r76g-87fc
In the Linux kernel, the following vulnerability has been resolved: ceph: fix pre-auth out-of...
In the Linux kernel, the following vulnerability has been resolved:
ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()
ceph_handle_caps() reads snap_trace_len from the wire-format ceph_mds_caps header and uses it unconditionally to build a fake end pointer (snaptrace + snaptrace_len) that is later handed to ceph_update_snap_trace() in the CEPH_CAP_OP_IMPORT case:
snaptrace = h + 1;
snaptrace_len = le32_to_cpu(h->snap_trace_len);
p = snaptrace + snaptrace_len;
...
case CEPH_CAP_OP_IMPORT:
if (snaptrace_len) {
...
if (ceph_update_snap_trace(mdsc, snaptrace,
snaptrace + snaptrace_len,
false, &realm)) { ... }
ceph_update_snap_trace() then decodes a struct ceph_mds_snap_realm from snaptrace using ceph_decode_need(&p, e, sizeof(*ri), bad) with the attacker-supplied fake end e == snaptrace + snaptrace_len. With snaptrace_len == 0xFFFFFFFF the bound check is trivially satisfied, ri = p reads sizeof(struct ceph_mds_snap_realm) past the legitimate msg->front buffer, and ri->num_snaps / ri->num_prior_parent_snaps then drive further out-of-bounds reads of the encoded snap arrays.
The eleven msg_version >= 2 .. msg_version >= 12 decoder blocks above the op switch each catch this OOB through their ceph_decode_*_safe() / ceph_decode_need() helpers, but they sit behind a hdr.version-gated if, so a malicious or compromised MDS that sets msg->hdr.version = 1 reaches the IMPORT path with no version-gated decoder having validated snap_trace_len. The shape has been present since ceph_handle_caps() was introduced.
Validate snap_trace_len against the message front buffer before consuming it, using the canonical ceph_decode_need() / ceph_has_room() helper. The helper bounds the length with subtraction (n <= end - p, guarded by end >= p) rather than pointer addition, so it is wrap-safe for the attacker-controlled u32 length on 32-bit builds where p + snap_trace_len could overflow the address space. This matches the rest of the ceph decode path (e.g. the pool_ns_len check a few lines below), and the existing goto bad cleanup already covers this exit path.
- Record
GHSA-prf2-r76g-87fc- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
NVD
In the Linux kernel, the following vulnerability has been resolved:
ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()
ceph_handle_caps() reads snap_trace_len from the wire-format ceph_mds_caps header and uses it unconditionally to build a fake end pointer (snaptrace + snaptrace_len) that is later handed to ceph_update_snap_trace() in the CEPH_CAP_OP_IMPORT case:
snaptrace = h + 1;
snaptrace_len = le32_to_cpu(h->snap_trace_len);
p = snaptrace + snaptrace_len;
...
case CEPH_CAP_OP_IMPORT:
if (snaptrace_len) {
...
if (ceph_update_snap_trace(mdsc, snaptrace,
snaptrace + snaptrace_len,
false, &realm)) { ... }
ceph_update_snap_trace() then decodes a struct ceph_mds_snap_realm from snaptrace using ceph_decode_need(&p, e, sizeof(*ri), bad) with the attacker-supplied fake end e == snaptrace + snaptrace_len. With snaptrace_len == 0xFFFFFFFF the bound check is trivially satisfied, ri = p reads sizeof(struct ceph_mds_snap_realm) past the legitimate msg->front buffer, and ri->num_snaps / ri->num_prior_parent_snaps then drive further out-of-bounds reads of the encoded snap arrays.
The eleven msg_version >= 2 .. msg_version >= 12 decoder blocks above the op switch each catch this OOB through their ceph_decode_*_safe() / ceph_decode_need() helpers, but they sit behind a hdr.version-gated if, so a malicious or compromised MDS that sets msg->hdr.version = 1 reaches the IMPORT path with no version-gated decoder having validated snap_trace_len. The shape has been present since ceph_handle_caps() was introduced.
Validate snap_trace_len against the message front buffer before consuming it, using the canonical ceph_decode_need() / ceph_has_room() helper. The helper bounds the length with subtraction (n <= end - p, guarded by end >= p) rather than pointer addition, so it is wrap-safe for the attacker-controlled u32 length on 32-bit builds where p + snap_trace_len could overflow the address space. This matches the rest of the ceph decode path (e.g. the pool_ns_len check a few lines below), and the existing goto bad cleanup already covers this exit path.
- Record
CVE-2026-68160- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
OSVBELL-CVE-2026-68160
- Record
BELL-CVE-2026-68160- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV
ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()
In the Linux kernel, the following vulnerability has been resolved:
ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()
ceph_handle_caps() reads snap_trace_len from the wire-format ceph_mds_caps header and uses it unconditionally to build a fake end pointer (snaptrace + snaptrace_len) that is later handed to ceph_update_snap_trace() in the CEPH_CAP_OP_IMPORT case:
snaptrace = h + 1;
snaptrace_len = le32_to_cpu(h->snap_trace_len);
p = snaptrace + snaptrace_len;
...
case CEPH_CAP_OP_IMPORT:
if (snaptrace_len) {
...
if (ceph_update_snap_trace(mdsc, snaptrace,
snaptrace + snaptrace_len,
false, &realm)) { ... }
ceph_update_snap_trace() then decodes a struct ceph_mds_snap_realm from snaptrace using ceph_decode_need(&p, e, sizeof(*ri), bad) with the attacker-supplied fake end e == snaptrace + snaptrace_len. With snaptrace_len == 0xFFFFFFFF the bound check is trivially satisfied, ri = p reads sizeof(struct ceph_mds_snap_realm) past the legitimate msg->front buffer, and ri->num_snaps / ri->num_prior_parent_snaps then drive further out-of-bounds reads of the encoded snap arrays.
The eleven msg_version >= 2 .. msg_version >= 12 decoder blocks above the op switch each catch this OOB through their ceph_decode_*_safe() / ceph_decode_need() helpers, but they sit behind a hdr.version-gated if, so a malicious or compromised MDS that sets msg->hdr.version = 1 reaches the IMPORT path with no version-gated decoder having validated snap_trace_len. The shape has been present since ceph_handle_caps() was introduced.
Validate snap_trace_len against the message front buffer before consuming it, using the canonical ceph_decode_need() / ceph_has_room() helper. The helper bounds the length with subtraction (n <= end - p, guarded by end >= p) rather than pointer addition, so it is wrap-safe for the attacker-controlled u32 length on 32-bit builds where p + snap_trace_len could overflow the address space. This matches the rest of the ceph decode path (e.g. the pool_ns_len check a few lines below), and the existing goto bad cleanup already covers this exit path.
- Record
CVE-2026-68160- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-05
Show 47 moreShow less
OSVDEBIAN-CVE-2026-68160
In the Linux kernel, the following vulnerability has been resolved: ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() ceph_handle_caps() reads snap_trace_len from the wire-format ceph_mds_caps header and uses it unconditionally to build a fake end pointer (snaptrace + snaptrace_len) that is later handed to ceph_update_snap_trace() in the CEPH_CAP_OP_IMPORT case: snaptrace = h + 1; snaptrace_len = le32_to_cpu(h->snap_trace_len); p = snaptrace + snaptrace_len; ... case CEPH_CAP_OP_IMPORT: if (snaptrace_len) { ... if (ceph_update_snap_trace(mdsc, snaptrace, snaptrace + snaptrace_len, false, &realm)) { ... } ceph_update_snap_trace() then decodes a struct ceph_mds_snap_realm from snaptrace using ceph_decode_need(&p, e, sizeof(ri), bad) with the attacker-supplied fake end e == snaptrace + snaptrace_len. With snaptrace_len == 0xFFFFFFFF the bound check is trivially satisfied, ri = p reads sizeof(struct ceph_mds_snap_realm) past the legitimate msg->front buffer, and ri->num_snaps / ri->num_prior_parent_snaps then drive further out-of-bounds reads of the encoded snap arrays. The eleven msg_version >= 2 .. msg_version >= 12 decoder blocks above the op switch each catch this OOB through their ceph_decode__safe() / ceph_decode_need() helpers, but they sit behind a hdr.version-gated if, so a malicious or compromised MDS that sets msg->hdr.version = 1 reaches the IMPORT path with no version-gated decoder having validated snap_trace_len. The shape has been present since ceph_handle_caps() was introduced. Validate snap_trace_len against the message front buffer before consuming it, using the canonical ceph_decode_need() / ceph_has_room() helper. The helper bounds the length with subtraction (n <= end - p, guarded by end >= p) rather than pointer addition, so it is wrap-safe for the attacker-controlled u32 length on 32-bit builds where p + snap_trace_len could overflow the address space. This matches the rest of the ceph decode path (e.g. the pool_ns_len check a few lines below), and the existing goto bad cleanup already covers this exit path.
- Record
DEBIAN-CVE-2026-68160- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2026-3531
kernel security update
The Linux Kernel, the operating system core itself.
Security Fix(es):
In the Linux kernel, the following vulnerability has been resolved:
ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()
ceph_handle_caps() reads snap_trace_len from the wire-format ceph_mds_caps header and uses it unconditionally to build a fake end pointer (snaptrace + snaptrace_len) that is later handed to ceph_update_snap_trace() in the CEPH_CAP_OP_IMPORT case:
snaptrace = h + 1;
snaptrace_len = le32_to_cpu(h->snap_trace_len);
p = snaptrace + snaptrace_len;
...
case CEPH_CAP_OP_IMPORT:
if (snaptrace_len) {
...
if (ceph_update_snap_trace(mdsc, snaptrace,
snaptrace + snaptrace_len,
false, &realm)) { ... }
ceph_update_snap_trace() then decodes a struct ceph_mds_snap_realm from snaptrace using ceph_decode_need(&p, e, sizeof(*ri), bad) with the attacker-supplied fake end e == snaptrace + snaptrace_len. With snaptrace_len == 0xFFFFFFFF the bound check is trivially satisfied, ri = p reads sizeof(struct ceph_mds_snap_realm) past the legitimate msg->front buffer, and ri->num_snaps / ri->num_prior_parent_snaps then drive further out-of-bounds reads of the encoded snap arrays.
The eleven msg_version >= 2 .. msg_version >= 12 decoder blocks above the op switch each catch this OOB through their ceph_decode_*_safe() / ceph_decode_need() helpers, but they sit behind a hdr.version-gated if, so a malicious or compromised MDS that sets msg->hdr.version = 1 reaches the IMPORT path with no version-gated decoder having validated snap_trace_len. The shape has been present since ceph_handle_caps() was introduced.
Validate snap_trace_len against the message front buffer before consuming it, using the canonical ceph_decode_need() / ceph_has_room() helper. The helper bounds the length with subtraction (n <= end - p, guarded by end >= p) rather than pointer addition, so it is wrap-safe for the attacker-controlled u32 length on 32-bit builds where p + snap_trace_len could overflow the address space. This matches the rest of the ceph decode path (e.g. the pool_ns_len check a few lines below), and the existing goto bad cleanup already covers this exit path.(CVE-2026-68160)
- Record
OESA-2026-3531- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2026-3532
kernel security update
The Linux Kernel, the operating system core itself.
Security Fix(es):
In the Linux kernel, the following vulnerability has been resolved:
uaccess: fix integer overflow on access_ok()
Three architectures check the end of a user access against the address limit without taking a possible overflow into account. Passing a negative length or another overflow in here returns success when it should not.
Use the most common correct implementation here, which optimizes for a constant 'size' argument, and turns the common case into a single comparison.(CVE-2022-49289)
In the Linux kernel, the following vulnerability has been resolved:
parisc: Fix double SIGFPE crash
Camm noticed that on parisc a SIGFPE exception will crash an application with a second SIGFPE in the signal handler. Dave analyzed it, and it happens because glibc uses a double-word floating-point store to atomically update function descriptors. As a result of lazy binding, we hit a floating-point store in fpe_func almost immediately.
When the T bit is set, an assist exception trap occurs when when the co-processor encounters any floating-point instruction except for a double store of register %fr0. The latter cancels all pending traps. Let's fix this by clearing the Trap (T) bit in the FP status register before returning to the signal handler in userspace.
The issue can be reproduced with this test program:
root@parisc:~# cat fpe.c
static void fpe_func(int sig, siginfo_t *i, void *v) { sigset_t set; sigemptyset(&set); sigaddset(&set, SIGFPE); sigprocmask(SIG_UNBLOCK, &set, NULL); printf("GOT signal %d with si_code %ld\n", sig, i->si_code); }
int main() { struct sigaction action = { .sa_sigaction = fpe_func, .sa_flags = SA_RESTART|SA_SIGINFO }; sigaction(SIGFPE, &action, 0); feenableexcept(FE_OVERFLOW); return printf("%lf\n",1.7976931348623158E308*1.7976931348623158E308); }
root@parisc:# gcc fpe.c -lm
root@parisc:# ./a.out
Floating point exception
root@parisc:~# strace -f ./a.out execve("./a.out", ["./a.out"], 0xf9ac7034 /* 20 vars /) = 0 getrlimit(RLIMIT_STACK, {rlim_cur=81921024, rlim_max=RLIM_INFINITY}) = 0 ... rt_sigaction(SIGFPE, {sa_handler=0x1110a, sa_mask=[], sa_flags=SA_RESTART|SA_SIGINFO}, NULL, 8) = 0 --- SIGFPE {si_signo=SIGFPE, si_code=FPE_FLTOVF, si_addr=0x1078f} --- --- SIGFPE {si_signo=SIGFPE, si_code=FPE_FLTOVF, si_addr=0xf8f21237} --- +++ killed by SIGFPE +++ Floating point exception(CVE-2025-37991)
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked()
kcalloc() may fail. When WS is non-zero and allocation fails, ectx.ws remains NULL while ectx.ws_size is set, leading to a potential NULL pointer dereference in atom_get_src_int() when accessing WS entries.
Return -ENOMEM on allocation failure to avoid the NULL dereference.(CVE-2025-68190)
In the Linux kernel, the following vulnerability has been resolved:
arm64/fpsimd: signal: Fix restoration of SVE context
When SME is supported, Restoring SVE signal context can go wrong in a few ways, including placing the task into an invalid state where the kernel may read from out-of-bounds memory (and may potentially take a fatal fault) and/or may kill the task with a SIGKILL.
(1) Restoring a context with SVE_SIG_FLAG_SM set can place the task into an invalid state where SVCR.SM is set (and sve_state is non-NULL) but TIF_SME is clear, consequently resuting in out-of-bounds memory reads and/or killing the task with SIGKILL.
This can only occur in unusual (but legitimate) cases where the SVE
signal context has either been modified by userspace or was saved in
the context of another task (e.g. as with CRIU), as otherwise the
presence of an SVE signal context with SVE_SIG_FLAG_SM…
- Record
OESA-2026-3532- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-68160
In the Linux kernel, the following vulnerability has been resolved: ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() ceph_handle_caps() reads snap_trace_len from the wire-format ceph_mds_caps header and uses it unconditionally to build a fake end pointer (snaptrace + snaptrace_len) that is later handed to ceph_update_snap_trace() in the CEPH_CAP_OP_IMPORT case: snaptrace = h + 1; snaptrace_len = le32_to_cpu(h->snap_trace_len); p = snaptrace + snaptrace_len; ... case CEPH_CAP_OP_IMPORT: if (snaptrace_len) { ... if (ceph_update_snap_trace(mdsc, snaptrace, snaptrace + snaptrace_len, false, &realm)) { ... } ceph_update_snap_trace() then decodes a struct ceph_mds_snap_realm from snaptrace using ceph_decode_need(&p, e, sizeof(ri), bad) with the attacker-supplied fake end e == snaptrace + snaptrace_len. With snaptrace_len == 0xFFFFFFFF the bound check is trivially satisfied, ri = p reads sizeof(struct ceph_mds_snap_realm) past the legitimate msg->front buffer, and ri->num_snaps / ri->num_prior_parent_snaps then drive further out-of-bounds reads of the encoded snap arrays. The eleven msg_version >= 2 .. msg_version >= 12 decoder blocks above the op switch each catch this OOB through their ceph_decode__safe() / ceph_decode_need() helpers, but they sit behind a hdr.version-gated if, so a malicious or compromised MDS that sets msg->hdr.version = 1 reaches the IMPORT path with no version-gated decoder having validated snap_trace_len. The shape has been present since ceph_handle_caps() was introduced. Validate snap_trace_len against the message front buffer before consuming it, using the canonical ceph_decode_need() / ceph_has_room() helper. The helper bounds the length with subtraction (n <= end - p, guarded by end >= p) rather than pointer addition, so it is wrap-safe for the attacker-controlled u32 length on 32-bit builds where p + snap_trace_len could overflow the address space. This matches the rest of the ceph decode path (e.g. the pool_ns_len check a few lines below), and the existing goto bad cleanup already covers this exit path.
- Record
UBUNTU-CVE-2026-68160- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-06
OSVCLSA-2026-1787935638 No score
kernel: Fix of 164 CVEs
- wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds {CVE-2023-53582}
- net/sched: accept TCA_STAB only for root qdisc {CVE-2024-50039}
- bpf, sockmap: Several fixes to bpf_msg_pop_data {CVE-2024-56720}
- net: add more sanity checks to qdisc_pkt_len_init() {CVE-2024-49948}
- nvme-tcp: sanitize request list handling {CVE-2025-38264}
- smb: client: fix double free of TCP_Server_Info::hostname {CVE-2025-21673}
- net/sched: ets: Remove drr class from the active list if it changes to strict {CVE-2025-68815}
- net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo {CVE-2026-46132}
- RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send {CVE-2026-45856}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers {CVE-2026-46056}
- bpf: Fix bpf_xdp_store_bytes proto for read-only arg {CVE-2026-45886}
- libceph: Fix slab-out-of-bounds access in auth message processing {CVE-2026-46119}
- nfsd: never defer requests during idmap lookup {CVE-2026-45983}
- openvswitch: cap upcall PID array size and pre-size vport replies {CVE-2026-45840}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() {CVE-2026-46259}
- dm mirror: fix integer overflow in create_dirty_log() {CVE-2026-46023}
- thermal: core: Fix thermal zone governor cleanup issues {CVE-2026-46021}
- tcp: call sk_data_ready() after listener migration {CVE-2026-46015}
- dm: fix a buffer overflow in ioctl processing {CVE-2026-46294}
- Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
- xfrm: espintcp: do not reuse an in-progress partial send {CVE-2026-52935}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() {CVE-2026-53195}
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag {CVE-2026-53218}
- netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920}
- Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() {CVE-2026-53256}
- tipc: fix double-free in tipc_buf_append() {CVE-2026-52993}
- Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER {CVE-2026-53072}
- netfilter: conntrack: remove sprintf usage {CVE-2026-53002}
- smb: client: fix krb5 mount with username option {CVE-2026-31392}
- netfilter: nft_tunnel: fix use-after-free on object destroy {CVE-2026-53212}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() {CVE-2026-53196}
- crypto: ccp - copy IV using skcipher ivsize {CVE-2026-53016}
- netfilter: conntrack_irc: fix possible out-of-bounds read {CVE-2026-53268}
- IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN {CVE-2026-53176}
- fuse: reject fuse_notify() pagecache ops on directories {CVE-2026-53168}
- ppp: require CAP_NET_ADMIN in target netns for unattached ioctls {CVE-2026-53075}
- xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() {CVE-2026-53239}
- ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options {CVE-2026-53249}
- ipv6: sit: reload inner IPv6 header after GSO offloads {CVE-2026-53228}
- uio_hv_generic: Let userspace take care of interrupt mask {CVE-2025-40048}
- net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove {CVE-2026-52947}
- net: guard timestamp cmsgs to real error queue skbs {CVE-2026-53223}
- libceph: Fix potential out-of-bounds access in crush_decode() {CVE-2026-52955}
- libceph: Fix potential null-ptr-deref in decode_choose_args() {CVE-2026-52957}
- netfilter: nft_ct: fix missing expect put in obj eval {CVE-2026-52970}
- netfilter: nf_tables: always walk all pending catchall elements {CVE-2026-23278}
- crypto: af_alg - Cap AEAD AD length to 0x80000000 {CVE-2026-52972}
- wifi: cfg80211: advance loop vars in cfg80211_merge_profile() {CVE-2026-64174}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr {CVE-2026-53391}
- Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock {CVE-2026-63945}
- pNFS: Fix use-after-free in pnfs_update_layout() {CVE-2026-63800}
- RDMA/vmw_pvrdma: Fix…
- Record
CLSA-2026-1787935638- Updated
- 2026-11-02
OSVCLSA-2026-1788170774 No score
kernel: Fix of 132 CVEs
- sctp: fix potential deadlock on &net->sctp.addr_wq_lock {CVE-2024-0639}
- sctp: delay auto_asconf init until binding the first addr {CVE-2021-23133}
- netfilter: nf_log: validate MAC header was set before dumping it {CVE-2026-52942}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check {CVE-2026-52998}
- drm/nouveau: fix u32 overflow in pushbuf reloc bounds check {CVE-2026-46006}
- btrfs: fix use-after-free when attempting to join an aborted transaction {CVE-2025-21753}
- btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
- team: fix header_ops type confusion with non-Ethernet ports {CVE-2026-31502}
- xfrm: Fix dev use-after-free in xfrm async resumption {CVE-2026-72463}
- xfrm: hold dev ref until after transport_finish NF_HOOK {CVE-2026-31663}
- xen/privcmd: restrict usage in unprivileged domU {CVE-2026-31788}
- xen/privcmd: add IOCTL_PRIVCMD_RESTRICT {CVE-2026-31788}
- Bluetooth: L2CAP: make l2cap_connect() return void {CVE-2024-36013}
- btrfs: fix incorrect splitting in btrfs_drop_extent_map_range {CVE-2023-54121}
- netfilter: nf_conntrack: defer invalid log until after unlock {CVE-2026-74624}
- NFS: Pin the 'struct nfs_server' during a FREE_STATEID call {CVE-2026-74730}
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error {CVE-2024-50280}
- audit: fix recursive locking deadlock in audit_dupe_exe() {CVE-2026-68096}
- RDMA/rxe: Reject unknown opcodes before ICRC processing {CVE-2026-46133}
- Bluetooth: bnep: reject short frames before parsing {CVE-2026-53253}
- net: pull headers in qdisc_pkt_len_segs_init() {CVE-2026-53091}
- inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266}
- Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
- sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed {CVE-2022-50103}
- btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
- fanotify: fix false positive on permission events {CVE-2026-46150}
- HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103}
- ext4: fix e4b bitmap inconsistency reports {CVE-2026-45942}
- Bluetooth: serialize accept_q access {CVE-2026-52918}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing {CVE-2026-43279}
- RDMA/bnxt_re: zero shared page before exposing to userspace {CVE-2026-74584}
- sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
- ipvs: clear IPv4 options after rebasing tunnel ICMP errors {CVE-2026-74669}
- wifi: cfg80211: Partial revert "wifi: cfg80211: Fix use after free for wext" {CVE-2023-53153}
- net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
- nfs: use nfsi->rwsem to protect traversal of the file lock list {CVE-2026-72472}
- Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}
- drm/amdgpu/vce: fix integer overflow in image size {CVE-2026-68108}
- ALSA: seq: close a re-opened queue timer in the destructor {CVE-2026-68202}
- ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() {CVE-2026-74499}
- USB: serial: io_edgeport: cap received transmit credits {CVE-2026-68365}
- net: slip: serialize receive against buffer reallocation {CVE-2026-68143}
- wifi: cfg80211: cancel sched scan results work on unregister {CVE-2026-68414}
- sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}
- sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}
- pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}
- ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() {CVE-2026-68160}
- libceph: refresh auth->authorizer_buf{,_len} after authorizer update {CVE-2026-68156}
- libceph: remove debugfs files before client teardown {CVE-2026-68153}
- libceph: Fix multiplication overflow in decode_new_up_state_weight() {CVE-2026-68158}
- libceph: reject zero bucket types in crush_decode {CVE-2026-68154}
- libceph: bound…
- Record
CLSA-2026-1788170774- Updated
- 2026-11-02
OSVCLSA-2026-1788257079 No score
kernel: Fix of 131 CVEs
- sctp: fix potential deadlock on &net->sctp.addr_wq_lock {CVE-2024-0639}
- sctp: delay auto_asconf init until binding the first addr {CVE-2021-23133}
- netfilter: nf_log: validate MAC header was set before dumping it {CVE-2026-52942}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check {CVE-2026-52998}
- drm/nouveau: fix u32 overflow in pushbuf reloc bounds check {CVE-2026-46006}
- btrfs: fix use-after-free when attempting to join an aborted transaction {CVE-2025-21753}
- btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
- team: fix header_ops type confusion with non-Ethernet ports {CVE-2026-31502}
- xfrm: Fix dev use-after-free in xfrm async resumption {CVE-2026-72463}
- xfrm: hold dev ref until after transport_finish NF_HOOK {CVE-2026-31663}
- xen/privcmd: restrict usage in unprivileged domU {CVE-2026-31788}
- xen/privcmd: add IOCTL_PRIVCMD_RESTRICT {CVE-2026-31788}
- Bluetooth: L2CAP: make l2cap_connect() return void {CVE-2024-36013}
- btrfs: fix incorrect splitting in btrfs_drop_extent_map_range {CVE-2023-54121}
- netfilter: nf_conntrack: defer invalid log until after unlock {CVE-2026-74624}
- NFS: Pin the 'struct nfs_server' during a FREE_STATEID call {CVE-2026-74730}
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error {CVE-2024-50280}
- audit: fix recursive locking deadlock in audit_dupe_exe() {CVE-2026-68096}
- RDMA/rxe: Reject unknown opcodes before ICRC processing {CVE-2026-46133}
- Bluetooth: bnep: reject short frames before parsing {CVE-2026-53253}
- net: pull headers in qdisc_pkt_len_segs_init() {CVE-2026-53091}
- inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266}
- Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
- sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed {CVE-2022-50103}
- btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
- fanotify: fix false positive on permission events {CVE-2026-46150}
- HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103}
- ext4: fix e4b bitmap inconsistency reports {CVE-2026-45942}
- Bluetooth: serialize accept_q access {CVE-2026-52918}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing {CVE-2026-43279}
- RDMA/bnxt_re: zero shared page before exposing to userspace {CVE-2026-74584}
- sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
- ipvs: clear IPv4 options after rebasing tunnel ICMP errors {CVE-2026-74669}
- wifi: cfg80211: Partial revert "wifi: cfg80211: Fix use after free for wext" {CVE-2023-53153}
- net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
- nfs: use nfsi->rwsem to protect traversal of the file lock list {CVE-2026-72472}
- Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}
- drm/amdgpu/vce: fix integer overflow in image size {CVE-2026-68108}
- ALSA: seq: close a re-opened queue timer in the destructor {CVE-2026-68202}
- ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() {CVE-2026-74499}
- USB: serial: io_edgeport: cap received transmit credits {CVE-2026-68365}
- net: slip: serialize receive against buffer reallocation {CVE-2026-68143}
- wifi: cfg80211: cancel sched scan results work on unregister {CVE-2026-68414}
- sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}
- sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}
- pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}
- ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() {CVE-2026-68160}
- libceph: refresh auth->authorizer_buf{,_len} after authorizer update {CVE-2026-68156}
- libceph: remove debugfs files before client teardown {CVE-2026-68153}
- libceph: Fix multiplication overflow in decode_new_up_state_weight() {CVE-2026-68158}
- libceph: reject zero bucket types in crush_decode {CVE-2026-68154}
- libceph: bound…
- Record
CLSA-2026-1788257079- Updated
- 2026-11-02
OSVCLSA-2026-1788259625 No score
kernel: Fix of 132 CVEs
- sctp: fix potential deadlock on &net->sctp.addr_wq_lock {CVE-2024-0639}
- sctp: delay auto_asconf init until binding the first addr {CVE-2021-23133}
- netfilter: nf_log: validate MAC header was set before dumping it {CVE-2026-52942}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check {CVE-2026-52998}
- drm/nouveau: fix u32 overflow in pushbuf reloc bounds check {CVE-2026-46006}
- btrfs: fix use-after-free when attempting to join an aborted transaction {CVE-2025-21753}
- btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
- team: fix header_ops type confusion with non-Ethernet ports {CVE-2026-31502}
- xfrm: Fix dev use-after-free in xfrm async resumption {CVE-2026-72463}
- xfrm: hold dev ref until after transport_finish NF_HOOK {CVE-2026-31663}
- xen/privcmd: restrict usage in unprivileged domU {CVE-2026-31788}
- xen/privcmd: add IOCTL_PRIVCMD_RESTRICT {CVE-2026-31788}
- Bluetooth: L2CAP: make l2cap_connect() return void {CVE-2024-36013}
- btrfs: fix incorrect splitting in btrfs_drop_extent_map_range {CVE-2023-54121}
- netfilter: nf_conntrack: defer invalid log until after unlock {CVE-2026-74624}
- NFS: Pin the 'struct nfs_server' during a FREE_STATEID call {CVE-2026-74730}
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error {CVE-2024-50280}
- audit: fix recursive locking deadlock in audit_dupe_exe() {CVE-2026-68096}
- RDMA/rxe: Reject unknown opcodes before ICRC processing {CVE-2026-46133}
- Bluetooth: bnep: reject short frames before parsing {CVE-2026-53253}
- net: pull headers in qdisc_pkt_len_segs_init() {CVE-2026-53091}
- inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266}
- Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
- sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed {CVE-2022-50103}
- btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
- fanotify: fix false positive on permission events {CVE-2026-46150}
- HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103}
- ext4: fix e4b bitmap inconsistency reports {CVE-2026-45942}
- Bluetooth: serialize accept_q access {CVE-2026-52918}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing {CVE-2026-43279}
- RDMA/bnxt_re: zero shared page before exposing to userspace {CVE-2026-74584}
- sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
- ipvs: clear IPv4 options after rebasing tunnel ICMP errors {CVE-2026-74669}
- wifi: cfg80211: Partial revert "wifi: cfg80211: Fix use after free for wext" {CVE-2023-53153}
- net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
- nfs: use nfsi->rwsem to protect traversal of the file lock list {CVE-2026-72472}
- Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}
- drm/amdgpu/vce: fix integer overflow in image size {CVE-2026-68108}
- ALSA: seq: close a re-opened queue timer in the destructor {CVE-2026-68202}
- ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() {CVE-2026-74499}
- USB: serial: io_edgeport: cap received transmit credits {CVE-2026-68365}
- net: slip: serialize receive against buffer reallocation {CVE-2026-68143}
- wifi: cfg80211: cancel sched scan results work on unregister {CVE-2026-68414}
- sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}
- sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}
- pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}
- ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() {CVE-2026-68160}
- libceph: refresh auth->authorizer_buf{,_len} after authorizer update {CVE-2026-68156}
- libceph: remove debugfs files before client teardown {CVE-2026-68153}
- libceph: Fix multiplication overflow in decode_new_up_state_weight() {CVE-2026-68158}
- libceph: reject zero bucket types in crush_decode {CVE-2026-68154}
- libceph: bound…
- Record
CLSA-2026-1788259625- Updated
- 2026-11-02
OSVCLSA-2026-1789141176 No score
kernel: Fix of 131 CVEs
- net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-63829}
- USB: legousbtower: fix use-after-free on disconnect race {CVE-2026-64340}
- udf: validate sparing table length as an entry count, not a byte count {CVE-2026-64322}
- ipv4: igmp: remove multicast group from hash table on device destruction {CVE-2026-64423}
- USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343}
- USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}
- net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers {CVE-2026-74700}
- ipvs: clear IPv4 options after rebasing tunnel ICMP errors {CVE-2026-74669}
- netfilter: ebt_nflog: pin the NFLOG backend {CVE-2026-74660}
- ipv4: fix use-after-free in fib_nhc_update_mtu() {CVE-2026-74656}
- ALSA: usx2y: bound the hwdep mmap fault offset {CVE-2026-74641}
- ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}
- tipc: read le->link under the node lock in tipc_node_link_down() {CVE-2026-74609}
- ip6_tunnel: clear skb2->cb[] in ip6ip6_err() {CVE-2026-74597}
- bpf, sockmap: Fix sk_redir use-after-free in send verdict {CVE-2026-74589}
- sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
- netfilter: nf_tables: make nft_object rhltable per table {CVE-2026-74565}
- scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write {CVE-2026-74470}
- nfs: use nfsi->rwsem to protect traversal of the file lock list {CVE-2026-72472}
- geneve: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-68142}
- sctp: fix use-after-free of cached ASCONF chunk {CVE-2026-74587}
- net/packet: reset the MAC header on the packet-socket transmit path {CVE-2026-74667}
- ALSA: usb-audio: fix OOB write on Type II inbound URBs {CVE-2026-74682}
- sctp: clear control chunk transport if it is being removed {CVE-2026-74688}
- udp: fix potential use-after-free in tunnel segmentation {CVE-2026-74705}
- bpf: Preserve pointer state for commuted arithmetic {CVE-2026-74720}
- RDMA/siw: bound Read Response placement to the RREAD length {CVE-2026-64268}
- libceph: Avoid using invalid osd indices from primary_temp {CVE-2026-80558}
- drm/i915: Fix potential UAF in TTM object purge {CVE-2026-63884}
- wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request {CVE-2026-68363}
- ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() {CVE-2026-68160}
- libceph: Reject monmaps advertising zero monitors {CVE-2026-68155}
- sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}
- Bluetooth: hci_sync: Protect UUID list traversal {CVE-2026-68189}
- net: slip: serialize receive against buffer reallocation {CVE-2026-68143}
- libceph: remove debugfs files before client teardown {CVE-2026-68153}
- media: rtl2832: fix use-after-free in rtl2832_remove() {CVE-2026-68214}
- sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async {CVE-2026-64219}
- pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}
- libceph: Fix multiplication overflow in decode_new_up_state_weight() {CVE-2026-68158}
- ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() {CVE-2026-74499}
- fbdev: Fix invalid page access after closing deferred I/O devices {CVE-2023-52731}
- Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync {CVE-2023-53252}
- net_sched: red: fix a race in __red_change() {CVE-2025-38108}
- iio: event: Fix event FIFO reset race {CVE-2026-64496}
- netfilter: ctnetlink: ensure safe access to master conntrack {CVE-2026-43116}
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC {CVE-2026-64298}
- openvswitch: fix GSO userspace truncation underflow {CVE-2026-68123}
- media: cx23885: add ioremap return check and cleanup {CVE-2026-68226}
- tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev {CVE-2026-68176} -…
- Record
CLSA-2026-1789141176- Updated
- 2026-11-02
OSVCLSA-2026-1789958474 No score
Fix of 167 CVEs
- CVE-2025-39826
- net: rose: convert 'use' field to refcount_t {CVE-2025-39826}
- CVE-2025-40146
- blk-mq: fix potential deadlock while nr_requests grown {CVE-2025-40146}
- CVE-2024-53216
- nfsd: release svc_expkey/svc_export with rcu_work {CVE-2024-53216}
- CVE-2026-89778
- isofs: fix out-of-bounds page array access on empty zisofs block {CVE-2026-89778}
- CVE-2026-23050
- pNFS: Fix a deadlock when returning a delegation during open() {CVE-2026-23050}
- CVE-2025-68796
- f2fs: fix to avoid updating zero-sized extent in extent cache {CVE-2025-68796}
- CVE-2025-68330
- iio: accel: bmc150: Fix irq assumption regression {CVE-2025-68330}
- CVE-2025-40333
- f2fs: fix infinite loop in __insert_extent_tree() {CVE-2025-40333}
- CVE-2025-40160
- xen/events: Return -EEXIST for bound VIRQs {CVE-2025-40160}
- CVE-2023-54047
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind {CVE-2023-54047}
- CVE-2025-68190
- drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() {CVE-2025-68190}
- CVE-2025-68188
- tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() {CVE-2025-68188}
- CVE-2026-89786
- ext4: fix out-of-bounds read in ext4_read_inline_dir() {CVE-2026-89786}
- CVE-2022-50764
- ipv6/sit: use DEV_STATS_INC() to avoid data-races {CVE-2022-50764}
- CVE-2026-80785
- fbdev: serialize mode sysfs access with lock_fb_info() {CVE-2026-80785}
- CVE-2026-80788
- nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations {CVE-2026-80788}
- CVE-2026-80747
- drm/amdkfd: Add bounds check for CRAT subtype length {CVE-2026-80747}
- CVE-2026-80907
- drm/amdgpu: Fix UVD dpb min size calculation for H264 {CVE-2026-80907}
- CVE-2026-80908
- drm/amdgpu: Reject UVD message with dimensions above 4096 {CVE-2026-80908}
- CVE-2026-80812
- ALSA: dummy: Check card index validity at probe {CVE-2026-80812}
- CVE-2026-80948
- wifi: iwlwifi: dvm: fix memory leak in iwl_op_mode_dvm_start() {CVE-2026-80948}
- CVE-2025-40137
- f2fs: fix to truncate first page in error path of f2fs_truncate() {CVE-2025-40137}
- CVE-2023-54150
- drm/amd: Fix an out of bounds error in BIOS parser {CVE-2023-54150}
- CVE-2026-89784
- SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 {CVE-2026-89784}
- CVE-2026-89783
- xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full {CVE-2026-89783}
- CVE-2026-89780
- net: qualcomm: rmnet: restore skb->dev on deaggregated frames {CVE-2026-89780}
- CVE-2026-89777
- vfio/pci: clear vdev->msi_perm after freeing it on init failure {CVE-2026-89777}
- CVE-2026-89789
- gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free {CVE-2026-89789}
- CVE-2025-68797
- char: applicom: fix NULL pointer dereference in ac_ioctl {CVE-2025-68797}
- CVE-2025-68767
- hfsplus: Verify inode mode when loading from disk {CVE-2025-68767}
- CVE-2026-63961
- usb: typec: altmodes/displayport: validate count before reading Status Update VDO {CVE-2026-63961}
- CVE-2026-63904
- usb: usbtmc: check URB actual_length for interrupt-IN notifications {CVE-2026-63904}
- CVE-2022-50864
- nilfs2: fix shift-out-of-bounds due to too large exponent of block size {CVE-2022-50864}
- CVE-2025-68771
- ocfs2: fix kernel BUG in ocfs2_find_victim_chain {CVE-2025-68771}
- CVE-2025-68750
- usb: potential integer overflow in usbg_make_tpg() {CVE-2025-68750}
- CVE-2026-80909
- drm/amdgpu: Reject UVD message with invalid number of h265 refs {CVE-2026-80909}
- CVE-2026-74402
- crypto: atmel-sha204a - fix blocking and non-blocking rng logic {CVE-2026-74402} *…
- Record
CLSA-2026-1789958474- Updated
- 2026-11-02
OSVCLSA-2026-1789986443 No score
kernel: Fix of 121 CVEs
- dlm: validate length in dlm_search_rsb_tree {CVE-2026-43125}
- mm/damon/core: validate ranges in damon_set_regions() {CVE-2026-68165}
- netpoll: Fix deadlock in memory allocation under spinlock {CVE-2025-68169}
- drm/amdkfd: Check bounds on CRIU restore queue type and mqd size {CVE-2026-68258}
- gve: fix Rx queue stall on alloc failure {CVE-2026-68129}
- drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved {CVE-2026-68234}
- libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE {CVE-2026-68159}
- media: v4l2-ctrls: validate HEVC active reference counts {CVE-2026-68206}
- drm/i915/hdcp: check streams[] bounds before overflow {CVE-2026-68253}
- drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() {CVE-2026-68245}
- drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON() {CVE-2026-68115}
- drm/i915: Return NULL on error in active_instance {CVE-2026-68248}
- smb: client: validate DFS referral PathConsumed {CVE-2026-68343}
- ext4: fix use-after-free in update_super_work when racing with umount {CVE-2026-31446}
- debugobjects: Plug race against a concurrent OOM disable {CVE-2026-68090}
- HID: wacom: stop hardware after post-start probe failures {CVE-2026-68091}
- drm/xe/pt: Reset current_op in xe_pt_update_ops_init() {CVE-2026-68264}
- net: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOAD {CVE-2026-68288}
- drm/amdgpu/gfx12: replace BUG_ON() with WARN_ON() {CVE-2026-68113}
- openvswitch: fix GSO userspace truncation underflow {CVE-2026-68123}
- drm/amd/display: use kvzalloc to allocate struct dc {CVE-2026-68436}
- drm/i915/gem: Add missing nospec on parallel submit slot {CVE-2026-68269}
- Bluetooth: MGMT: revalidate LOAD_CONN_PARAM queued update {CVE-2026-68394}
- sctp: avoid auth_enable sysctl UAF during netns teardown {CVE-2026-68162}
- wifi: mt76: mt7925: fix crash in reset link replay {CVE-2026-68307}
- Bluetooth: hci_sync: extend conn_hash lookup critical sections {CVE-2026-68393}
- drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU {CVE-2026-68243}
- block: fix memory leak in __blkdev_issue_zero_pages {CVE-2026-68348}
- drm/amdgpu/gfx: fix cleaner shader IB buffer overflow {CVE-2026-68276}
- tracing: Do not call map->ops->elt_free() if elt_alloc() fails {CVE-2026-64173}
- wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin {CVE-2026-68362}
- ovl: check access to copy_file_range source with src mounter creds {CVE-2026-68448}
- drm/nouveau: fix reversed error cleanup order in ucopy functions {CVE-2026-68271}
- vxlan: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-68432}
- drm/vmwgfx: Validate vmw_surface_metadata::array_size {CVE-2026-68446}
- net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM {CVE-2026-68296}
- Input: elan_i2c - prevent division by zero and arithmetic underflow {CVE-2026-64275}
- iomap: fix out-of-bounds bitmap_set() with zero-length range {CVE-2026-68145}
- vsock: fix lock inversion in vsock_assign_transport() {CVE-2025-40231}
- ASoC: nau8821: Cancel delayed work on component remove {CVE-2026-45963}
- ext4: validate p_idx bounds in ext4_ext_correct_indexes {CVE-2026-31449}
- ipc: fix memleak if msg_init_ns failed in create_ipc_ns {CVE-2024-53175}
- tls: make sure to abort the stream if headers are bogus {CVE-2025-39946}
- ipv6: prevent infinite loop in rt6_nlmsg_size() {CVE-2025-38588}
- gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL {CVE-2026-23386}
- xsk: validate MTU against usable frame size on bind {CVE-2026-43092}
- RDMA/irdma: Harden depth calculation functions {CVE-2026-31491}
- iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() {CVE-2026-31505}
- net/ip6_tunnel: Prevent perpetual tunnel growth {CVE-2025-40173}
- net/mlx5: Fix deadlock between devlink lock and esw->wq {CVE-2026-43468}
- mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0] {CVE-2026-31458}
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling {CVE-2026-52946}
- nvmet: move async event…
- Record
CLSA-2026-1789986443- Updated
- 2026-11-02
OSVCLSA-2026-1791852988 No score
kernel: Fix of 107 CVEs
- netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
- IB/isert: reject PDUs declaring more data than was received {CVE-2026-90414}
- RDMA/mlx5: Fix integer overflow of user QP buffer size {CVE-2026-90435}
- sctp: validate embedded address parameter length {CVE-2026-74287}
- IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413}
- xfrm: ah6: validate routing header segments_left {CVE-2026-80844}
- drm/amd/display: set new_stream to NULL after release {CVE-2026-68236}
- RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters {CVE-2026-100075}
- nvmet-rdma: handle inline data with a nonzero offset {CVE-2026-72129}
- netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() {CVE-2026-97417}
- sctp: validate cookie AUTH state before use {CVE-2026-74752}
- ipvlan: inherit needed_headroom and needed_tailroom from phy_dev {CVE-2026-74744}
- enic: fix tx_hang_reset use-after-free on device removal {CVE-2026-74725}
- net/atm: fix slab-out-of-bounds read in vcc_setsockopt() {CVE-2026-74689}
- drm/amdgpu: reject oversized IBs with per-ring packet limits {CVE-2026-80576}
- xfs: bounds-check buffer log item's dirty bitmap {CVE-2026-80536}
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page {CVE-2026-64320}
- smb: client: reject overlapping data areas in SMB2 responses {CVE-2026-64257}
- smb: client: restrict implied bcc[0] exemption to responses without data area {CVE-2026-64448}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() {CVE-2026-64438}
- crypto: qat - protect interrupt mask CSRs with a spinlock {CVE-2026-64438}
- crypto: qat - remove intermediate tasklet for vf2pf {CVE-2026-64438}
- usb: free iso schedules on failed submit {CVE-2026-64348}
- USB: iowarrior: fix use-after-free on disconnect race {CVE-2026-64341}
- crypto: qat - protect service table iterations with service_lock {CVE-2026-64305}
- crypto: qat - validate RSA CRT component lengths {CVE-2026-64304}
- net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422}
- udf: validate VAT header length against the VAT inode size {CVE-2026-64323}
- crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
- crypto: algif_aead - fix uninitialized ctx->init {CVE-2025-39964}
- sctp: fix race between sctp_wait_for_connect and peeloff {CVE-2026-63971}
- mpls: reload header after pskb_may_pull() {CVE-2026-89555}
- net: tun: bound receive headroom {CVE-2026-81000}
- bridge: stp: Fix a potential use-after-free when deleting a bridge {CVE-2026-72389}
- scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer {CVE-2026-74556}
- rhashtable: clear stale iter->p on table restart {CVE-2026-64563}
- vhost: reset the vring metadata cache on vring reconfiguration {CVE-2026-74580}
- net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
- sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
- USB: legousbtower: fix use-after-free on disconnect race {CVE-2026-64340}
- USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343}
- udf: validate sparing table length as an entry count, not a byte count {CVE-2026-64322}
- ipv4: igmp: remove multicast group from hash table on device destruction {CVE-2026-64423}
- USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}
- sctp: fix use-after-free of cached ASCONF chunk {CVE-2026-74587}
- RDMA/siw: bound Read Response placement to the RREAD length {CVE-2026-64268}
- ip6_tunnel: clear skb2->cb[] in ip6ip6_err() {CVE-2026-74597}
- ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}
- netfilter: ebt_nflog: pin the NFLOG backend {CVE-2026-74660}
- libceph: Avoid using invalid osd indices from primary_temp {CVE-2026-80558}
- udp: fix potential use-after-free in tunnel segmentation {CVE-2026-74705}
- Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}
- wifi: ath9k: hif_usb: don't dereference hif_dev after…
- Record
CLSA-2026-1791852988- Updated
- 2026-11-02
OSVCLSA-2026-1791858083 No score
kernel: Fix of 94 CVEs
- netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
- IB/isert: reject PDUs declaring more data than was received {CVE-2026-90414}
- RDMA/mlx5: Fix integer overflow of user QP buffer size {CVE-2026-90435}
- IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413}
- xfrm: ah6: validate routing header segments_left {CVE-2026-80844}
- drm/amd/display: set new_stream to NULL after release {CVE-2026-68236}
- RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters {CVE-2026-100075}
- nvmet-rdma: handle inline data with a nonzero offset {CVE-2026-72129}
- netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() {CVE-2026-97417}
- smb: client: restrict implied bcc[0] exemption to responses without data area {CVE-2026-64448}
- usb: free iso schedules on failed submit {CVE-2026-64348}
- USB: iowarrior: fix use-after-free on disconnect race {CVE-2026-64341}
- USB: legousbtower: fix use-after-free on disconnect race {CVE-2026-64340}
- crypto: qat - protect service table iterations with service_lock {CVE-2026-64305}
- crypto: qat - validate RSA CRT component lengths {CVE-2026-64304}
- net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422}
- udf: validate VAT header length against the VAT inode size {CVE-2026-64323}
- crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
- net: tun: bound receive headroom {CVE-2026-81000}
- bridge: stp: Fix a potential use-after-free when deleting a bridge {CVE-2026-72389}
- scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer {CVE-2026-74556}
- rhashtable: clear stale iter->p on table restart {CVE-2026-64563}
- mpls: reload header after pskb_may_pull() {CVE-2026-89555}
- vhost: reset the vring metadata cache on vring reconfiguration {CVE-2026-74580}
- net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
- sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
- USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343}
- udf: validate sparing table length as an entry count, not a byte count {CVE-2026-64322}
- ipv4: igmp: remove multicast group from hash table on device destruction {CVE-2026-64423}
- USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}
- RDMA/siw: bound Read Response placement to the RREAD length {CVE-2026-64268}
- sctp: fix use-after-free of cached ASCONF chunk {CVE-2026-74587}
- ip6_tunnel: clear skb2->cb[] in ip6ip6_err() {CVE-2026-74597}
- ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}
- netfilter: ebt_nflog: pin the NFLOG backend {CVE-2026-74660}
- netfilter: flowtable: publish GC-visible tuple last {CVE-2026-74746}
- libceph: Avoid using invalid osd indices from primary_temp {CVE-2026-80558}
- udp: fix potential use-after-free in tunnel segmentation {CVE-2026-74705}
- Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}
- wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request {CVE-2026-68363}
- ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() {CVE-2026-68160}
- libceph: Reject monmaps advertising zero monitors {CVE-2026-68155}
- sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}
- net: slip: serialize receive against buffer reallocation {CVE-2026-68143}
- libceph: remove debugfs files before client teardown {CVE-2026-68153}
- libceph: refresh auth->authorizer_buf{,_len} after authorizer update {CVE-2026-68156}
- media: rtl2832: fix use-after-free in rtl2832_remove() {CVE-2026-68214}
- sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}
- pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}
- libceph: Fix multiplication overflow in decode_new_up_state_weight() {CVE-2026-68158}
- ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() {CVE-2026-74499}
- can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet…
- Record
CLSA-2026-1791858083- Updated
- 2026-11-02
OSVCLSA-2026-1791876326 No score
Fix of 274 CVEs
- CVE-2026-53091
- xfrm: Don't clobber inner headers when already set {CVE-2026-53091}
- net: account for encap headers in qdisc pkt len {CVE-2026-53091}
- CVE-2026-93803
- wifi: libipw: fix key index receive bound checks {CVE-2026-93803}
- CVE-2026-93286
- net: appletalk: fix NULL pointer dereference in aarp_send_ddp() {CVE-2026-93286}
- CVE-2026-93280
- greybus: audio: bound the topology section sizes against the fetched size {CVE-2026-93280}
- CVE-2026-93213
- of: fix out-of-bounds read in of_alias_scan() stem parser {CVE-2026-93213}
- CVE-2026-93802
- wifi: rsi: validate beacon length before fixed buffer copy {CVE-2026-93802}
- CVE-2026-93206
- PCI/proc: Use file_ns_capable() when checking config space read access {CVE-2026-93206}
- CVE-2026-97448
- ACPICA: Add validation for node in acpi_ns_build_normalized_path() {CVE-2026-97448}
- CVE-2026-97408
- Bluetooth: L2CAP: validate connectionless PSM length {CVE-2026-97408}
- CVE-2026-93268
- ext4: skip extra isize expansion during mount to prevent deadlock {CVE-2026-93268}
- CVE-2026-93782
- vhost-scsi: flush backend after device ioctls {CVE-2026-93782}
- CVE-2026-93783
- Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame {CVE-2026-93783}
- CVE-2026-97455
- ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() {CVE-2026-97455}
- CVE-2026-93807
- wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers {CVE-2026-93807}
- CVE-2026-93808
- ALSA: usb-audio: caiaq: validate EP1 reply lengths {CVE-2026-93808}
- CVE-2026-89938
- iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF {CVE-2026-89938}
- CVE-2026-89927
- KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock {CVE-2026-89927}
- CVE-2026-89949
- batman-adv: dat: avoid unaligned fault in IP extraction {CVE-2026-89949}
- CVE-2026-89912
- KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save {CVE-2026-89912}
- CVE-2026-89932
- KVM: nVMX: Always flush vpid02 on first use {CVE-2026-89932}
- CVE-2026-89833
- f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages() {CVE-2026-89833}
- CVE-2026-90045
- USB: gadget: ffs: fix mm lifetime handling {CVE-2026-90045}
- CVE-2026-89854
- scsi: qla2xxx: Fix cs84xx use-after-free on host teardown {CVE-2026-89854}
- CVE-2026-90015
- xhci: fix lost bounce buffers on TDs spanning several ring segments {CVE-2026-90015}
- CVE-2026-89979
- ALSA: pcm: Fix race between non-atomic ops and trigger-start {CVE-2026-89979}
- CVE-2026-89852
- scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state() {CVE-2026-89852}
- CVE-2026-89861
- scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition() {CVE-2026-89861}
- CVE-2026-89859
- scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak {CVE-2026-89859}
- CVE-2026-90036
- NFSD: Prevent client use-after-free during blocked-lock reaping {CVE-2026-90036}
- CVE-2026-89987
- mm/huge_memory: transfer the pmd dirty bit to the folio on zap {CVE-2026-89987}
- CVE-2026-89799
- bpf: Disable preemption in bpf_get_stackid {CVE-2026-89799}
- CVE-2026-90032
- media: usbtv: keep device alive while ALSA card exists {CVE-2026-90032}
- CVE-2026-89822
- drm/i915: Guard against NULL driver_data in i915_pci_probe() {CVE-2026-89822}
- CVE-2026-89929
- KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU {CVE-2026-89929}
- CVE-2026-89840
- f2fs: validate MOVE_RANGE destination size {CVE-2026-89840}
- CVE-2026-89913
- KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables {CVE-2026-89913} *…
- Record
CLSA-2026-1791876326- Updated
- 2026-11-02
OSVCLSA-2026-1791878869 No score
Fix of 274 CVEs
- CVE-2026-53091
- xfrm: Don't clobber inner headers when already set {CVE-2026-53091}
- net: account for encap headers in qdisc pkt len {CVE-2026-53091}
- CVE-2026-93803
- wifi: libipw: fix key index receive bound checks {CVE-2026-93803}
- CVE-2026-93286
- net: appletalk: fix NULL pointer dereference in aarp_send_ddp() {CVE-2026-93286}
- CVE-2026-93280
- greybus: audio: bound the topology section sizes against the fetched size {CVE-2026-93280}
- CVE-2026-93213
- of: fix out-of-bounds read in of_alias_scan() stem parser {CVE-2026-93213}
- CVE-2026-93802
- wifi: rsi: validate beacon length before fixed buffer copy {CVE-2026-93802}
- CVE-2026-93206
- PCI/proc: Use file_ns_capable() when checking config space read access {CVE-2026-93206}
- CVE-2026-97448
- ACPICA: Add validation for node in acpi_ns_build_normalized_path() {CVE-2026-97448}
- CVE-2026-97408
- Bluetooth: L2CAP: validate connectionless PSM length {CVE-2026-97408}
- CVE-2026-93268
- ext4: skip extra isize expansion during mount to prevent deadlock {CVE-2026-93268}
- CVE-2026-93782
- vhost-scsi: flush backend after device ioctls {CVE-2026-93782}
- CVE-2026-93783
- Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame {CVE-2026-93783}
- CVE-2026-97455
- ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() {CVE-2026-97455}
- CVE-2026-93807
- wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers {CVE-2026-93807}
- CVE-2026-93808
- ALSA: usb-audio: caiaq: validate EP1 reply lengths {CVE-2026-93808}
- CVE-2026-89938
- iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF {CVE-2026-89938}
- CVE-2026-89927
- KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock {CVE-2026-89927}
- CVE-2026-89949
- batman-adv: dat: avoid unaligned fault in IP extraction {CVE-2026-89949}
- CVE-2026-89912
- KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save {CVE-2026-89912}
- CVE-2026-89932
- KVM: nVMX: Always flush vpid02 on first use {CVE-2026-89932}
- CVE-2026-89833
- f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages() {CVE-2026-89833}
- CVE-2026-90045
- USB: gadget: ffs: fix mm lifetime handling {CVE-2026-90045}
- CVE-2026-89854
- scsi: qla2xxx: Fix cs84xx use-after-free on host teardown {CVE-2026-89854}
- CVE-2026-90015
- xhci: fix lost bounce buffers on TDs spanning several ring segments {CVE-2026-90015}
- CVE-2026-89979
- ALSA: pcm: Fix race between non-atomic ops and trigger-start {CVE-2026-89979}
- CVE-2026-89852
- scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state() {CVE-2026-89852}
- CVE-2026-89861
- scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition() {CVE-2026-89861}
- CVE-2026-89859
- scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak {CVE-2026-89859}
- CVE-2026-90036
- NFSD: Prevent client use-after-free during blocked-lock reaping {CVE-2026-90036}
- CVE-2026-89987
- mm/huge_memory: transfer the pmd dirty bit to the folio on zap {CVE-2026-89987}
- CVE-2026-89799
- bpf: Disable preemption in bpf_get_stackid {CVE-2026-89799}
- CVE-2026-90032
- media: usbtv: keep device alive while ALSA card exists {CVE-2026-90032}
- CVE-2026-89822
- drm/i915: Guard against NULL driver_data in i915_pci_probe() {CVE-2026-89822}
- CVE-2026-89929
- KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU {CVE-2026-89929}
- CVE-2026-89840
- f2fs: validate MOVE_RANGE destination size {CVE-2026-89840}
- CVE-2026-89913
- KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables {CVE-2026-89913} *…
- Record
CLSA-2026-1791878869- Updated
- 2026-11-02
OSVCLSA-2026-1791946572 No score
Fix of 198 CVEs
- CVE-2024-36894
- usb: gadget: f_fs: drop the duplicate usb_ep_free_request() in ffs_user_copy_worker() {CVE-2024-36894}
- CVE-2026-97447
- ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() {CVE-2026-97447}
- CVE-2026-93822
- PCI: iproc: Protect root bus removal with rescan lock {CVE-2026-93822}
- CVE-2026-93826
- HID: hidpp: fix potential UAF in hidpp_connect_event() {CVE-2026-93826}
- CVE-2026-97954
- net/rds: fix tcp stream corruption with large pages {CVE-2026-97954}
- CVE-2026-97949
- configfs: unhash the dentry before dropping the item in rmdir {CVE-2026-97949}
- CVE-2026-97931
- ALSA: us122l: Prevent write upgrades for read mappings {CVE-2026-97931}
- CVE-2026-97940
- ipv6: fix fib6 walker UAF on seq stop {CVE-2026-97940}
- CVE-2026-97539
- usb: xusbatm: don't rely on id table pointer arithmetic {CVE-2026-97539}
- CVE-2026-74510
- Bluetooth: mgmt: fix UAF in pair command cancellation {CVE-2026-74510}
- CVE-2026-72084
- scsi: target: Bound PR-OUT TransportID parsing to the received buffer {CVE-2026-72084}
- CVE-2026-90302
- ocfs2: synchronize heartbeat callbacks with o2net teardown {CVE-2026-90302}
- CVE-2026-90320
- ocfs2: validate external xattr entries when reading metadata {CVE-2026-90320}
- CVE-2026-90321
- ocfs2: validate inline xattrs during inode block validation {CVE-2026-90321}
- CVE-2026-90431
- remoteproc: Prevent crash handling to race with rproc_del() {CVE-2026-90431}
- CVE-2026-74637
- perf/core: Fix group leader use-after-free after sibling detach {CVE-2026-74637}
- CVE-2026-74752
- sctp: validate cookie AUTH state before use {CVE-2026-74752}
- CVE-2026-74387
- ALSA: seq: midi: Serialize output teardown with event_input {CVE-2026-74387}
- CVE-2026-80536
- xfs: bounds-check buffer log item's dirty bitmap {CVE-2026-80536}
- CVE-2026-89659
- NFSD: Prevent client use-after-free during delegation revoke {CVE-2026-89659}
- CVE-2026-80576
- drm/amdgpu: reject oversized IBs with per-ring packet limits {CVE-2026-80576}
- CVE-2026-90223
- nfc: llcp: bound SNL TLV parsing to the skb and add length checks {CVE-2026-90223}
- CVE-2026-80994
- net: openvswitch: fix flow mask use-after-free on flow deletion {CVE-2026-80994}
- CVE-2026-72398
- sctp: add INIT verification after cookie unpacking {CVE-2026-72398}
- CVE-2026-74583
- net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
- CVE-2026-72322
- ipv6: mcast: Fix potential UAF in MLD delayed work {CVE-2026-72322}
- CVE-2026-93095
- hfsplus: validate thread record before delete key rebuild {CVE-2026-93095}
- CVE-2026-72472
- nfs: use nfsi->rwsem to protect traversal of the file lock list {CVE-2026-72472}
- CVE-2026-90045
- USB: gadget: ffs: fix mm lifetime handling {CVE-2026-90045}
- CVE-2026-90421
- PCI: Fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-90421}
- CVE-2026-64583
- usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown {CVE-2026-64583}
- CVE-2026-68329
- iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() {CVE-2026-68329}
- CVE-2026-89448
- iommu/vt-d: Force requesting ACS when tboot is enabled {CVE-2026-89448}
- CVE-2026-64001
- ALSA: pcm: oss: Fix setup list UAF on proc write error {CVE-2026-64001}
- CVE-2026-64305
- crypto: qat - protect service table iterations with service_lock {CVE-2026-64305}
- CVE-2026-64348
- usb: free iso schedules on failed submit {CVE-2026-64348}
- CVE-2026-64422
- net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422}
- CVE-2026-90180
- block:…
- Record
CLSA-2026-1791946572- Updated
- 2026-11-02
OSVMGASA-2026-0336 No score
Updated kernel, kmod-xtables-addons, kmod-virtualbox, kmod-nvidia-current-wopengpu & drakx-installer-images packages fix security vulnerabilities
Upstream kernel 6.18.44 version fixes bugs and vulnerabilities. The kmod-xtables-addons, kmod-virtualbox, kmod-nvidia-current-wopengpu & drakx-installer-images packages have been updated to work with this new kernel.
- Record
MGASA-2026-0336- Updated
- 2026-11-02
OSVMGASA-2026-0337 No score
Updated kernel-linus packages fix security vulnerabilities
Vanilla upstream kernel version 6.18.44 fixes vulnerabilities. For information about the vulnerabilities see the links.
- Record
MGASA-2026-0337- Updated
- 2026-11-02
OSVSUSE-SU-2026:23477-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1235944)
- CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
- CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
- CVE-2026-31392: smb: client: fix krb5 mount with username option (bsc#1261788).
- CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
- CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
- CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).
- CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
- CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
- CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
- CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
- CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
- CVE-2026-43278: dm: clear cloned request bio pointer when last clone bio completes (bsc#1264584).
- CVE-2026-43319: spi: spidev: fix lock inversion between spi_lock and buf_lock (bsc#1264788).
- CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
- CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
- CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).
- CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
- CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
- CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).
- CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
- CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
- CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
- CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
- CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).
- CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
- CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
- CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
- CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
- CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).
- CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
- CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).
- CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).
- CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).
- CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).
- CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).
- CVE-2026-53076: bpf: Fix OOB in pcpu_init_value (bsc#1269695).
- CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412).
- CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783).
- CVE-2026-53091: net: account for encap headers in qdisc pkt len (bsc#1269530).
- CVE-2026-53094: bpf: Fix stale offload->prog pointer after constant blinding (bsc#1269965).
- CVE-2026-53096: bpf: Use RCU-safe iteration in…
- Record
SUSE-SU-2026:23477-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23481-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1269731).
- CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
- CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
- CVE-2026-31392: smb: client: fix krb5 mount with username option (bsc#1261788).
- CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
- CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
- CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).
- CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
- CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
- CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
- CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
- CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
- CVE-2026-43278: dm: clear cloned request bio pointer when last clone bio completes (bsc#1264584).
- CVE-2026-43319: spi: spidev: fix lock inversion between spi_lock and buf_lock (bsc#1264788).
- CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
- CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
- CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).
- CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
- CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
- CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).
- CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
- CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
- CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
- CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
- CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).
- CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
- CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
- CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
- CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
- CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).
- CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
- CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).
- CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).
- CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).
- CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).
- CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).
- CVE-2026-53076: bpf: Fix OOB in pcpu_init_value (bsc#1269695).
- CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412).
- CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783).
- CVE-2026-53091: net: account for encap headers in qdisc pkt len (bsc#1269530).
- CVE-2026-53094: bpf: Fix stale offload->prog pointer after constant blinding (bsc#1269965).
- CVE-2026-53096: bpf: Use RCU-safe iteration in…
- Record
SUSE-SU-2026:23481-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23528-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1235944)
- CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
- CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
- CVE-2026-31392: smb: client: fix krb5 mount with username option (bsc#1261788).
- CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
- CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
- CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).
- CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
- CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
- CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
- CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
- CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
- CVE-2026-43278: dm: clear cloned request bio pointer when last clone bio completes (bsc#1264584).
- CVE-2026-43319: spi: spidev: fix lock inversion between spi_lock and buf_lock (bsc#1264788).
- CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
- CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
- CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).
- CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
- CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
- CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).
- CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
- CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
- CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
- CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
- CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).
- CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
- CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
- CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
- CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
- CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).
- CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
- CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).
- CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).
- CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).
- CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).
- CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).
- CVE-2026-53076: bpf: Fix OOB in pcpu_init_value (bsc#1269695).
- CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412).
- CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783).
- CVE-2026-53091: net: account for encap headers in qdisc pkt len (bsc#1269530).
- CVE-2026-53094: bpf: Fix stale offload->prog pointer after constant blinding (bsc#1269965).
- CVE-2026-53096: bpf: Use RCU-safe iteration in…
- Record
SUSE-SU-2026:23528-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23529-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1269731).
- CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
- CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
- CVE-2026-31392: smb: client: fix krb5 mount with username option (bsc#1261788).
- CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
- CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
- CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).
- CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
- CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
- CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
- CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
- CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
- CVE-2026-43278: dm: clear cloned request bio pointer when last clone bio completes (bsc#1264584).
- CVE-2026-43319: spi: spidev: fix lock inversion between spi_lock and buf_lock (bsc#1264788).
- CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
- CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
- CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).
- CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
- CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
- CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).
- CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
- CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
- CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
- CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
- CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).
- CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
- CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
- CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
- CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
- CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).
- CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
- CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).
- CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).
- CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).
- CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).
- CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).
- CVE-2026-53076: bpf: Fix OOB in pcpu_init_value (bsc#1269695).
- CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412).
- CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783).
- CVE-2026-53091: net: account for encap headers in qdisc pkt len (bsc#1269530).
- CVE-2026-53094: bpf: Fix stale offload->prog pointer after constant blinding (bsc#1269965).
- CVE-2026-53096: bpf: Use RCU-safe iteration in…
- Record
SUSE-SU-2026:23529-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:4120-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1235944).
- CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
- CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
- CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
- CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
- CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).
- CVE-2026-31658: net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() (bsc#1263052).
- CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
- CVE-2026-43014: net: macb: properly unregister fixed rate clocks (bsc#1264012).
- CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010).
- CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
- CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
- CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
- CVE-2026-43213: wifi: rtw89: pci: validate sequence number of TX release report (bsc#1264643).
- CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
- CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
- CVE-2026-43386: staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie (bsc#1264740).
- CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
- CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
- CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).
- CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
- CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
- CVE-2026-46078: erofs: fix the out-of-bounds nameoff handling for trailing dirents (bsc#1267505).
- CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).
- CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
- CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
- CVE-2026-46127: RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() (bsc#1267236).
- CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
- CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
- CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).
- CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
- CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
- CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
- CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
- CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).
- CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
- CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).
- CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).
- CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).
- CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).
- CVE-2026-53034: bpf, sockmap: Fix af_unix null-ptr-deref in proto update (bsc#1269140).
- CVE-2026-53059: dm…
- Record
SUSE-SU-2026:4120-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:4254-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2024-57841,CVE-2026-53260: net: fix memory leak in tcp_conn_request() (bsc#1235944 bsc#1269731).
- CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
- CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
- CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
- CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
- CVE-2026-31557: nvmet: move async event work off nvmet-wq (bsc#1263061).
- CVE-2026-31658: net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() (bsc#1263052).
- CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
- CVE-2026-43014,CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010 bsc#1264012).
- CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
- CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
- CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
- CVE-2026-43213: wifi: rtw89: pci: validate sequence number of TX release report (bsc#1264643).
- CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
- CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
- CVE-2026-43386: staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie (bsc#1264740).
- CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
- CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
- CVE-2026-45897: bpf: Fix UAF in sock clone early bailouts (bsc#1266897).
- CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
- CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
- CVE-2026-46078: erofs: fix the out-of-bounds nameoff handling for trailing dirents (bsc#1267505).
- CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).
- CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
- CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
- CVE-2026-46127: RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() (bsc#1267236).
- CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
- CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
- CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).
- CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
- CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
- CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
- CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
- CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).
- CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
- CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).
- CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).
- CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).
- CVE-2026-53033: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).
- CVE-2026-53034: bpf, sockmap: Fix af_unix null-ptr-deref in proto update (bsc#1269140).
- CVE-2026-53059: dm log: fix out-of-bounds write due…
- Record
SUSE-SU-2026:4254-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:4279-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2023-53109: net: tunnels: annotate lockless accesses to dev->needed_headroom (bsc#1242405 bsc#1275784).
- CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1235944).
- CVE-2026-53260: tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req() (bsc#1269731).
- CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
- CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
- CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).
- CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
- CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
- CVE-2026-52910: bpf: Free reuseport cBPF prog after RCU grace period (bsc#1268659).
- CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
- CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
- CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
- CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).
- CVE-2026-53163: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (bsc#1269306).
- CVE-2026-53264: net/sched: act_api: use RCU with deferred freeing for action lifecycle (bsc#1269238).
- CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271830).
- CVE-2026-63801: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (bsc#1272230).
- CVE-2026-63823: keys: Pin request_key_auth payload in instantiate paths (bsc#1272182).
- CVE-2026-63827: apparmor: fix use-after-free in rawdata dedup loop (bsc#1272179).
- CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272385).
- CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272390).
- CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1272877).
- CVE-2026-63992: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (bsc#1272868).
- CVE-2026-64002: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774).
- CVE-2026-64007: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105).
- CVE-2026-64010: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (bsc#1273882).
- CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1273891).
- CVE-2026-64015: security/keys: fix missed RCU read section on lookup (bsc#1273762).
- CVE-2026-64047: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060).
- CVE-2026-64048: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (bsc#1273484).
- CVE-2026-64098: drm/virtio: use uninterruptible resv lock for plane updates (bsc#1273488).
- CVE-2026-64109: af_unix: Peek the queue synchronized (bsc#1273748).
- CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273742).
- CVE-2026-64115: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745).
- CVE-2026-64268: RDMA/siw: bound Read Response placement to the RREAD length (bsc#1273276).
- CVE-2026-64304: crypto: qat - validate RSA CRT component lengths (bsc#1273944).
- CVE-2026-64355: bpf: Reject fragmented frames in devmap (bsc#1273422).
- CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1274274).
- CVE-2026-64450: tipc: fix out-of-bounds read in broadcast Gap ACK blocks (bsc#1273523).
- CVE-2026-64481: ALSA: hda/cs35l41: Fix firmware load work teardown (bsc#1274547).
- CVE-2026-64541: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (bsc#1273303).
- CVE-2026-64543: tipc: fix use-after-free of…
- Record
SUSE-SU-2026:4279-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:4284-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2023-53109: net: tunnels: annotate lockless accesses to dev->needed_headroom (bsc#1242405 bsc#1275784).
- CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1235944).
- CVE-2026-53260: tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req() (bsc#1269731).
- CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
- CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
- CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).
- CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
- CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
- CVE-2026-52910: bpf: Free reuseport cBPF prog after RCU grace period (bsc#1268659).
- CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
- CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
- CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
- CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).
- CVE-2026-53163: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (bsc#1269306).
- CVE-2026-53264: net/sched: act_api: use RCU with deferred freeing for action lifecycle (bsc#1269238).
- CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271830).
- CVE-2026-63801: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (bsc#1272230).
- CVE-2026-63823: keys: Pin request_key_auth payload in instantiate paths (bsc#1272182).
- CVE-2026-63827: apparmor: fix use-after-free in rawdata dedup loop (bsc#1272179).
- CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272385).
- CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272390).
- CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1272877).
- CVE-2026-63992: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (bsc#1272868).
- CVE-2026-64002: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774).
- CVE-2026-64007: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105).
- CVE-2026-64010: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (bsc#1273882).
- CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1273891).
- CVE-2026-64015: security/keys: fix missed RCU read section on lookup (bsc#1273762).
- CVE-2026-64047: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060).
- CVE-2026-64048: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (bsc#1273484).
- CVE-2026-64098: drm/virtio: use uninterruptible resv lock for plane updates (bsc#1273488).
- CVE-2026-64109: af_unix: Peek the queue synchronized (bsc#1273748).
- CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273742).
- CVE-2026-64115: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745).
- CVE-2026-64268: RDMA/siw: bound Read Response placement to the RREAD length (bsc#1273276).
- CVE-2026-64304: crypto: qat - validate RSA CRT component lengths (bsc#1273944).
- CVE-2026-64355: bpf: Reject fragmented frames in devmap (bsc#1273422).
- CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1274274).
- CVE-2026-64450: tipc: fix out-of-bounds read in broadcast Gap ACK blocks (bsc#1273523).
- CVE-2026-64481: ALSA: hda/cs35l41: Fix firmware load work teardown (bsc#1274547).
- CVE-2026-64541: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (bsc#1273303).
- CVE-2026-64543: tipc: fix use-after-free of the…
- Record
SUSE-SU-2026:4284-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:4347-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2024-57841,CVE-2026-53260: net: fix memory leak in tcp_conn_request() (bsc#1235944 bsc#1269731).
- CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
- CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
- CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).
- CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
- CVE-2026-52910: bpf: Free reuseport cBPF prog after RCU grace period (bsc#1268659).
- CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
- CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
- CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
- CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).
- CVE-2026-53163: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (bsc#1269306).
- CVE-2026-53264: net/sched: act_api: use RCU with deferred freeing for action lifecycle (bsc#1269238).
- CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271830).
- CVE-2026-63801: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (bsc#1272230).
- CVE-2026-63823: keys: Pin request_key_auth payload in instantiate paths (bsc#1272182).
- CVE-2026-63827: apparmor: fix use-after-free in rawdata dedup loop (bsc#1272179).
- CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272385).
- CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272390).
- CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1272877).
- CVE-2026-63992: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (bsc#1272868).
- CVE-2026-64002: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774).
- CVE-2026-64007: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105).
- CVE-2026-64010: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (bsc#1273882).
- CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1273891).
- CVE-2026-64015: security/keys: fix missed RCU read section on lookup (bsc#1273762).
- CVE-2026-64047: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060).
- CVE-2026-64048: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (bsc#1273484).
- CVE-2026-64098: drm/virtio: use uninterruptible resv lock for plane updates (bsc#1273488).
- CVE-2026-64109: af_unix: Peek the queue synchronized (bsc#1273748).
- CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273742).
- CVE-2026-64115: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745).
- CVE-2026-64268: RDMA/siw: bound Read Response placement to the RREAD length (bsc#1273276).
- CVE-2026-64304: crypto: qat - validate RSA CRT component lengths (bsc#1273944).
- CVE-2026-64355: bpf: Reject fragmented frames in devmap (bsc#1273422).
- CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1274274).
- CVE-2026-64450: tipc: fix out-of-bounds read in broadcast Gap ACK blocks (bsc#1273523).
- CVE-2026-64481: ALSA: hda/cs35l41: Fix firmware load work teardown (bsc#1274547).
- CVE-2026-64541: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (bsc#1273303).
- CVE-2026-64543: tipc: fix use-after-free of the discoverer in tipc_disc_rcv() (bsc#1273311).
- CVE-2026-64562: KVM: nVMX: Hide shadow VMCS right after VMCLEAR (bsc#1273930).
- CVE-2026-64563: rhashtable: clear stale iter->p on table restart (bsc#1273995).
- CVE-2026-64572: ipv4: fib: free fib_alias with kfree_rcu() on insert…
- Record
SUSE-SU-2026:4347-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:4369-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2024-57841,CVE-2026-53260: net: fix memory leak in tcp_conn_request() (bsc#1235944 bsc#1269731).
- CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
- CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
- CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
- CVE-2026-43147: Revert 'PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV' (bsc#1264642).
- CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).
- CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
- CVE-2026-52910: bpf: Free reuseport cBPF prog after RCU grace period (bsc#1268659).
- CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
- CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
- CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
- CVE-2026-52994: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).
- CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).
- CVE-2026-53110: selftests/bpf: Add ASSERT_OK_FD macro (bsc#1269985).
- CVE-2026-53163: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (bsc#1269306).
- CVE-2026-53264: net/sched: act_api: use RCU with deferred freeing for action lifecycle (bsc#1269238).
- CVE-2026-53365: vsock/virtio: fix zerocopy completion for multi-skb sends (bsc#1271365).
- CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271830).
- CVE-2026-63801: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (bsc#1272230).
- CVE-2026-63823: keys: Pin request_key_auth payload in instantiate paths (bsc#1272182).
- CVE-2026-63827: apparmor: fix use-after-free in rawdata dedup loop (bsc#1272179).
- CVE-2026-63879: drm/amdgpu: fix amdgpu_hmm_range_get_pages (bsc#1272569).
- CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).
- CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272385).
- CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272390).
- CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1272877).
- CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1272662).
- CVE-2026-63970: vsock/virtio: bind uarg before filling zerocopy skb (bsc#1272673).
- CVE-2026-63992: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (bsc#1272868).
- CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273030).
- CVE-2026-64002: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774).
- CVE-2026-64007: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105).
- CVE-2026-64010: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (bsc#1273882).
- CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1273891).
- CVE-2026-64015: security/keys: fix missed RCU read section on lookup (bsc#1273762).
- CVE-2026-64029: ALSA: seq: Serialize UMP output teardown with event_input (bsc#1273766).
- CVE-2026-64048: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (bsc#1273484).
- CVE-2026-64098: drm/virtio: use uninterruptible resv lock for plane updates (bsc#1273488).
- CVE-2026-64109: af_unix: Peek the queue synchronized (bsc#1273748).
- CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273742).
- CVE-2026-64115: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745).
- CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues…
- Record
SUSE-SU-2026:4369-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:4595-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues:
The following security issues were fixed:
- CVE-2024-57841,CVE-2026-53260: net: fix memory leak in tcp_conn_request() (bsc#1235944 bsc#1269731).
- CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
- CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
- CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).
- CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
- CVE-2026-52910: bpf: Free reuseport cBPF prog after RCU grace period (bsc#1268659).
- CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
- CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
- CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
- CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).
- CVE-2026-53163: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (bsc#1269306).
- CVE-2026-53264: net/sched: act_api: use RCU with deferred freeing for action lifecycle (bsc#1269238).
- CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271830).
- CVE-2026-63801: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (bsc#1272230).
- CVE-2026-63823: keys: Pin request_key_auth payload in instantiate paths (bsc#1272182).
- CVE-2026-63827: apparmor: fix use-after-free in rawdata dedup loop (bsc#1272179).
- CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272385).
- CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272390).
- CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1272877).
- CVE-2026-63992: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (bsc#1272868).
- CVE-2026-64002: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774).
- CVE-2026-64007: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105).
- CVE-2026-64010: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (bsc#1273882).
- CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1273891).
- CVE-2026-64015: security/keys: fix missed RCU read section on lookup (bsc#1273762).
- CVE-2026-64047: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060).
- CVE-2026-64048: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (bsc#1273484).
- CVE-2026-64098: drm/virtio: use uninterruptible resv lock for plane updates (bsc#1273488).
- CVE-2026-64109: af_unix: Peek the queue synchronized (bsc#1273748).
- CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273742).
- CVE-2026-64115: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745).
- CVE-2026-64268: RDMA/siw: bound Read Response placement to the RREAD length (bsc#1273276).
- CVE-2026-64304: crypto: qat - validate RSA CRT component lengths (bsc#1273944).
- CVE-2026-64355: bpf: Reject fragmented frames in devmap (bsc#1273422).
- CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1274274).
- CVE-2026-64450: tipc: fix out-of-bounds read in broadcast Gap ACK blocks (bsc#1273523).
- CVE-2026-64481: ALSA: hda/cs35l41: Fix firmware load work teardown (bsc#1274547).
- CVE-2026-64541: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (bsc#1273303).
- CVE-2026-64543: tipc: fix use-after-free of the discoverer in tipc_disc_rcv() (bsc#1273311).
- CVE-2026-64562: KVM: nVMX: Hide shadow VMCS right after VMCLEAR (bsc#1273930).
- CVE-2026-64563: rhashtable: clear stale iter->p on table restart (bsc#1273995).
- CVE-2026-64572: ipv4: fib: free fib_alias with kfree_rcu() on insert error…
- Record
SUSE-SU-2026:4595-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:5111-1 No score
Security update for cephfs
This update for cephfs fixes the following security issues:
-
CVE-2026-68160: ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() (bsc#1275472).
-
CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
-
CVE-2026-52961: ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size (bsc#1269129).
-
CVE-2026-46052: ceph: only d_add() negative dentries when they are unhashed (bsc#1267494).
-
CVE-2026-52962: ceph: fix a buffer leak in __ceph_setxattr() (bsc#1269135).
-
CVE-2026-43420: ceph: fix i_nlink underrun during async unlink (bsc#1264814).
-
CVE-2026-43419: ceph: fix memory leaks in ceph_mdsc_build_path() (bsc#1264661).
-
CVE-2026-23201: ceph: fix oops due to invalid pointer for kfree() in parse_longname() (bsc#1258337).
-
CVE-2025-68297: ceph: fix crash in process_v2_sparse_read() for encrypted directories (bsc#1255403).
-
CVE-2025-38660: ceph: parse_longname(): strrchr() expects NUL-terminated string (bsc#1248634).
-
ceph: validate snapdirname option length when mounting (git-fixes).
-
ceph: fix possible integer overflow in ceph_zero_objects() (git-fixes).
- Record
SUSE-SU-2026:5111-1- Updated
- 2026-11-05
OSVUSN-8781-1 No score
linux-nvidia-tegra vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- User-space API (UAPI);
- Kernel build system;
- ARM32 architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Cryptographic API;
- Intel NPU Driver;
- Compute Acceleration Framework;
- ACPI drivers;
- Drivers core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Ublk userspace block driver;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Hardware crypto device drivers;
- CXL (Compute Express Link) drivers;
- Arm Firmware Framework for ARMv8-A(FFA);
- EFI core;
- FPGA Framework;
- GPU drivers;
- HID subsystem;
- Hardware monitoring drivers;
- I2C subsystem;
- I3C subsystem;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Mouse) drivers;
- IOMMU subsystem;
- Multiple devices driver;
- Media drivers;
- Fastrpc Driver;
- Network drivers;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- MediaTek network drivers;
- NVME drivers;
- Operating Performance Points (OPP) driver;
- PCI subsystem;
- PTP clock framework;
- RPMSG subsystem;
- SCSI subsystem;
- SoundWire subsystem;
- SPI subsystem;
- Greybus lights staging drivers;
- Media staging drivers;
- NVIDIA Tegra embedded controller (NVEC) staging driver;
- Realtek RTL8723BS SDIO drivers;
- TCM subsystem;
- Trusted Execution Environment drivers;
- Thunderbolt and USB4 drivers;
- TTY drivers;
- USB Gadget drivers;
- USB Dual Role (OTG-ready) Controller drivers;
- USB Serial drivers;
- vDPA drivers;
- VFIO drivers;
- Virtio Host (VHOST) subsystem;
- Virtio drivers;
- Xen hypervisor drivers;
- 9P distributed file system;
- AFS file system;
- File systems infrastructure;
- BTRFS file system;
- Ceph distributed file system;
- exFAT file system;
- F2FS file system;
- GFS2 file system;
- HFS file system;
- HFS+ file system;
- JFS file system;
- Network file systems library;
- Network file system (NFS) client;
- Network file system (NFS) server daemon;
- NTFS3 file system;
- OCFS2 file system;
- OrangeFS file system;
- SMB network file system;
- BPF subsystem;
- File system encryption (fscrypt);
- Software nodes and device properties;
- IPv4 networking;
- KVM subsystem;
- Mellanox drivers;
- Memory management;
- Networking core;
- Netfilter;
- Socket messages infrastructure;
- MediaTek SoC drivers;
- Sun RPC protocol;
- Network traffic control;
- IPv6 networking;
- Amateur Radio drivers;
- Bluetooth subsystem;
- IP tunnels definitions;
- KCM (Kernel Connection Multiplexor) sockets driver;
- MultiProtocol Label Switching driver;
- TCP network protocol;
- XFRM subsystem;
- Tracing infrastructure;
- io_uring subsystem;
- Control group (cgroup);
- Perf events;
- IRQ subsystem;
- Locking primitives;
- KProbes tracing;
- 9P file system network protocol;
- B.A.T.M.A.N. meshing protocol;
- Ethernet bridge;
- CAN network layer;
- Ceph Core library;
- Handshake API;
- HSR network protocol;
- IFE protocol;
- L2TP protocol;
- MAC80211 subsystem;
- IEEE 802.15.4 subsystem;
- Multipath TCP;
- NFC subsystem;
- Open vSwitch;
- Phonet protocol;
- RDS protocol;
- RxRPC session sockets;
- SCTP protocol;
- SMC…
- Record
USN-8781-1- Updated
- 2026-11-06
OSVUSN-8875-1 No score
linux, linux-aws, linux-aws-5.15, linux-aws-fips, linux-azure, linux-azure-5.15, linux-azure-fde-5.15, linux-azure-fips, linux-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iot-realtime, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-oracle, linux-realtime, linux-xilinx-zynqmp vulnerabilities
It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- User-space API (UAPI);
- ARM32 architecture;
- ARM64 architecture;
- MIPS architecture;
- PowerPC architecture;
- RISC-V architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- ACPI drivers;
- Android drivers;
- Serial ATA and Parallel ATA drivers;
- Drivers core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Bluetooth drivers;
- Cdrom driver;
- Character device driver;
- Hardware random number generator core;
- TPM device driver;
- Data acquisition framework and drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- DAX dirext access to differentiated memory framework;
- DMA engine subsystem;
- FireWire subsystem;
- Arm Firmware Framework for ARMv8-A(FFA);
- ARM SCMI message protocol;
- Intel Stratix 10 firmware drivers;
- FPGA Framework;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- Hardware monitoring drivers;
- Intel Trace Hub HW tracing drivers;
- I2C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- IIO Magnetometer sensors drivers;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Miscellaneous) drivers;
- Input Device (Mouse) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- LED subsystem;
- Multiple devices driver;
- Media drivers;
- MemoryStick subsystem;
- Multifunction device drivers;
- Fastrpc Driver;
- MMC subsystem;
- MTD block device drivers;
- Ethernet bonding driver;
- Network drivers;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- Texas Instruments network drivers;
- MediaTek network drivers;
- NTB driver;
- NVDIMM (Non-Volatile Memory Device) drivers;
- NVME drivers;
- Parport drivers;
- PCI subsystem;
- Pin controllers subsystem;
- Generic PM domains;
- System reset/shutdown drivers;
- Power supply drivers;
- RapidIO drivers;
- Voltage and Current Regulator drivers;
- Reset controller framework;
- S/390 drivers;
- SCSI subsystem;
- SLIMbus drivers;
- SPI subsystem;
- Media staging drivers;
- Media Oriented Systems Transport (MOST) driver;
- NVIDIA Tegra embedded controller (NVEC) staging driver;
- Realtek RTL8723BS SDIO drivers;
- TCM subsystem;
- Trusted Execution Environment drivers;
- Thermal drivers;
- Thunderbolt and USB4 drivers;
- TTY drivers;
- USB DSL drivers;
- Cadence USB3 driver;
- USB Device Class drivers;
- ULPI bus;
- DesignWare USB2 driver;
- DesignWare USB3 driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB ChaosKey driver;
- Siemens ID Mouse USB driver;
- IOWarrior USB driver;
- LD Didactic USB driver;
- LEGO USB Tower driver;
- USS720 USB parallel port adapter driver;
- MediaTek USB3 DRD driver;
- USB Serial drivers;
- USB Type-C support driver;
- USB Type-C Port Controller Manager driver;
- USB Type-C Connector System Software Interface driver;
- USB over IP driver;
- vDPA drivers;
- VFIO drivers;
- Virtio Host (VHOST) subsystem;
- Framebuffer layer;
- Watchdog drivers;
- Xen hypervisor drivers;
- AFS file system;
- File systems infrastructure;
- BTRFS file system;
- Ceph distributed file system;
- EROFS file system;
- exFAT file system;
- Ext4 file system;
- F2FS file system;
- FUSE (File system in Userspace);
- HFS file system;
- HFS+ file system;
- Journaling layer for block devices (JBD2); …
- Record
USN-8875-1- Updated
- 2026-11-07
OSVUSN-8875-2 No score
linux-nvidia vulnerabilities
It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- User-space API (UAPI);
- ARM32 architecture;
- ARM64 architecture;
- MIPS architecture;
- PowerPC architecture;
- RISC-V architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- ACPI drivers;
- Android drivers;
- Serial ATA and Parallel ATA drivers;
- Drivers core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Bluetooth drivers;
- Cdrom driver;
- Character device driver;
- Hardware random number generator core;
- TPM device driver;
- Data acquisition framework and drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- DAX dirext access to differentiated memory framework;
- DMA engine subsystem;
- FireWire subsystem;
- Arm Firmware Framework for ARMv8-A(FFA);
- ARM SCMI message protocol;
- Intel Stratix 10 firmware drivers;
- FPGA Framework;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- Hardware monitoring drivers;
- Intel Trace Hub HW tracing drivers;
- I2C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- IIO Magnetometer sensors drivers;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Miscellaneous) drivers;
- Input Device (Mouse) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- LED subsystem;
- Multiple devices driver;
- Media drivers;
- MemoryStick subsystem;
- Multifunction device drivers;
- Fastrpc Driver;
- MMC subsystem;
- MTD block device drivers;
- Ethernet bonding driver;
- Network drivers;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- Texas Instruments network drivers;
- MediaTek network drivers;
- NTB driver;
- NVDIMM (Non-Volatile Memory Device) drivers;
- NVME drivers;
- Parport drivers;
- PCI subsystem;
- Pin controllers subsystem;
- Generic PM domains;
- System reset/shutdown drivers;
- Power supply drivers;
- RapidIO drivers;
- Voltage and Current Regulator drivers;
- Reset controller framework;
- S/390 drivers;
- SCSI subsystem;
- SLIMbus drivers;
- SPI subsystem;
- Media staging drivers;
- Media Oriented Systems Transport (MOST) driver;
- NVIDIA Tegra embedded controller (NVEC) staging driver;
- Realtek RTL8723BS SDIO drivers;
- TCM subsystem;
- Trusted Execution Environment drivers;
- Thermal drivers;
- Thunderbolt and USB4 drivers;
- TTY drivers;
- USB DSL drivers;
- Cadence USB3 driver;
- USB Device Class drivers;
- ULPI bus;
- DesignWare USB2 driver;
- DesignWare USB3 driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB ChaosKey driver;
- Siemens ID Mouse USB driver;
- IOWarrior USB driver;
- LD Didactic USB driver;
- LEGO USB Tower driver;
- USS720 USB parallel port adapter driver;
- MediaTek USB3 DRD driver;
- USB Serial drivers;
- USB Type-C support driver;
- USB Type-C Port Controller Manager driver;
- USB Type-C Connector System Software Interface driver;
- USB over IP driver;
- vDPA drivers;
- VFIO drivers;
- Virtio Host (VHOST) subsystem;
- Framebuffer layer;
- Watchdog drivers;
- Xen hypervisor drivers;
- AFS file system;
- File systems infrastructure;
- BTRFS file system;
- Ceph distributed file system;
- EROFS file system;
- exFAT file system;
- Ext4 file system;
- F2FS file system;
- FUSE (File system in Userspace);
- HFS file system;
- HFS+ file system;
- Journaling layer for block devices (JBD2); …
- Record
USN-8875-2- Updated
- 2026-11-07
OSVUSN-8876-1 No score
linux-azure-fde vulnerabilities
It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM32 architecture;
- ARM64 architecture;
- MIPS architecture;
- PowerPC architecture;
- RISC-V architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- ACPI drivers;
- Android drivers;
- Serial ATA and Parallel ATA drivers;
- Drivers core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Bluetooth drivers;
- Cdrom driver;
- Character device driver;
- Hardware random number generator core;
- TPM device driver;
- Data acquisition framework and drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- DAX dirext access to differentiated memory framework;
- DMA engine subsystem;
- FireWire subsystem;
- Arm Firmware Framework for ARMv8-A(FFA);
- Intel Stratix 10 firmware drivers;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- Hardware monitoring drivers;
- Intel Trace Hub HW tracing drivers;
- I2C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- IIO Magnetometer sensors drivers;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Miscellaneous) drivers;
- Input Device (Mouse) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- LED subsystem;
- Multiple devices driver;
- Media drivers;
- MemoryStick subsystem;
- Multifunction device drivers;
- Fastrpc Driver;
- MTD block device drivers;
- Network drivers;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- Texas Instruments network drivers;
- MediaTek network drivers;
- NTB driver;
- NVDIMM (Non-Volatile Memory Device) drivers;
- NVME drivers;
- PCI subsystem;
- Pin controllers subsystem;
- Generic PM domains;
- Power supply drivers;
- Voltage and Current Regulator drivers;
- Reset controller framework;
- S/390 drivers;
- SCSI subsystem;
- SLIMbus drivers;
- SPI subsystem;
- Media staging drivers;
- Media Oriented Systems Transport (MOST) driver;
- NVIDIA Tegra embedded controller (NVEC) staging driver;
- Realtek RTL8723BS SDIO drivers;
- TCM subsystem;
- Trusted Execution Environment drivers;
- Thermal drivers;
- Thunderbolt and USB4 drivers;
- USB DSL drivers;
- Cadence USB3 driver;
- ULPI bus;
- DesignWare USB3 driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB ChaosKey driver;
- Siemens ID Mouse USB driver;
- IOWarrior USB driver;
- LD Didactic USB driver;
- LEGO USB Tower driver;
- USS720 USB parallel port adapter driver;
- MediaTek USB3 DRD driver;
- USB Serial drivers;
- USB Type-C Port Controller Manager driver;
- USB Type-C Connector System Software Interface driver;
- USB over IP driver;
- vDPA drivers;
- VFIO drivers;
- Virtio Host (VHOST) subsystem;
- Framebuffer layer;
- Watchdog drivers;
- Xen hypervisor drivers;
- AFS file system;
- File systems infrastructure;
- BTRFS file system;
- Ceph distributed file system;
- EROFS file system;
- exFAT file system;
- Ext4 file system;
- F2FS file system;
- FUSE (File system in Userspace);
- HFS file system;
- HFS+ file system;
- Journaling layer for block devices (JBD2);
- Network file system (NFS) client;
- Network file system (NFS) server daemon;
- NILFS2 file system;
- NTFS3 file system;
- OCFS2 file system;
- OrangeFS file system;
- Proc file system;
- SMB network file system;
- UDF file system;
- XFS file system;
- Software nodes and device…
- Record
USN-8876-1- Updated
- 2026-11-07
OSVUSN-8877-1 No score
linux-gcp, linux-gcp-fips vulnerabilities
It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- User-space API (UAPI);
- ARM32 architecture;
- ARM64 architecture;
- MIPS architecture;
- PowerPC architecture;
- RISC-V architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- ACPI drivers;
- Android drivers;
- Serial ATA and Parallel ATA drivers;
- Drivers core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Bluetooth drivers;
- Cdrom driver;
- Character device driver;
- Hardware random number generator core;
- TPM device driver;
- Data acquisition framework and drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- DAX dirext access to differentiated memory framework;
- DMA engine subsystem;
- FireWire subsystem;
- Arm Firmware Framework for ARMv8-A(FFA);
- ARM SCMI message protocol;
- Intel Stratix 10 firmware drivers;
- FPGA Framework;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- Hardware monitoring drivers;
- Intel Trace Hub HW tracing drivers;
- I2C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- IIO Magnetometer sensors drivers;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Miscellaneous) drivers;
- Input Device (Mouse) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- LED subsystem;
- Multiple devices driver;
- Media drivers;
- MemoryStick subsystem;
- Multifunction device drivers;
- Fastrpc Driver;
- MMC subsystem;
- MTD block device drivers;
- Ethernet bonding driver;
- Network drivers;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- Texas Instruments network drivers;
- MediaTek network drivers;
- NTB driver;
- NVDIMM (Non-Volatile Memory Device) drivers;
- NVME drivers;
- Parport drivers;
- PCI subsystem;
- Pin controllers subsystem;
- Generic PM domains;
- System reset/shutdown drivers;
- Power supply drivers;
- RapidIO drivers;
- Voltage and Current Regulator drivers;
- Reset controller framework;
- S/390 drivers;
- SCSI subsystem;
- SLIMbus drivers;
- SPI subsystem;
- Media staging drivers;
- Media Oriented Systems Transport (MOST) driver;
- NVIDIA Tegra embedded controller (NVEC) staging driver;
- Realtek RTL8723BS SDIO drivers;
- TCM subsystem;
- Trusted Execution Environment drivers;
- Thermal drivers;
- Thunderbolt and USB4 drivers;
- TTY drivers;
- USB DSL drivers;
- Cadence USB3 driver;
- USB Device Class drivers;
- ULPI bus;
- DesignWare USB2 driver;
- DesignWare USB3 driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB ChaosKey driver;
- Siemens ID Mouse USB driver;
- IOWarrior USB driver;
- LD Didactic USB driver;
- LEGO USB Tower driver;
- USS720 USB parallel port adapter driver;
- MediaTek USB3 DRD driver;
- USB Serial drivers;
- USB Type-C support driver;
- USB Type-C Port Controller Manager driver;
- USB Type-C Connector System Software Interface driver;
- USB over IP driver;
- vDPA drivers;
- VFIO drivers;
- Virtio Host (VHOST) subsystem;
- Framebuffer layer;
- Watchdog drivers;
- Xen hypervisor drivers;
- AFS file system;
- File systems infrastructure;
- BTRFS file system;
- Ceph distributed file system;
- EROFS file system;
- exFAT file system;
- Ext4 file system;
- F2FS file system;
- FUSE (File system in Userspace);
- HFS file system;
- HFS+ file system;
- Journaling layer for block devices (JBD2); …
- Record
USN-8877-1- Updated
- 2026-11-07
OSVUSN-8878-1 No score
linux-gcp-5.15 vulnerabilities
It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114)
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- User-space API (UAPI);
- ARM32 architecture;
- MIPS architecture;
- PowerPC architecture;
- RISC-V architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- ACPI drivers;
- Android drivers;
- Serial ATA and Parallel ATA drivers;
- Drivers core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Bluetooth drivers;
- Cdrom driver;
- Character device driver;
- Hardware random number generator core;
- TPM device driver;
- Data acquisition framework and drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- DAX dirext access to differentiated memory framework;
- DMA engine subsystem;
- FireWire subsystem;
- Arm Firmware Framework for ARMv8-A(FFA);
- ARM SCMI message protocol;
- Intel Stratix 10 firmware drivers;
- FPGA Framework;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- Hardware monitoring drivers;
- Intel Trace Hub HW tracing drivers;
- I2C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- IIO Magnetometer sensors drivers;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Miscellaneous) drivers;
- Input Device (Mouse) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- LED subsystem;
- Multiple devices driver;
- Media drivers;
- MemoryStick subsystem;
- Multifunction device drivers;
- Fastrpc Driver;
- MMC subsystem;
- MTD block device drivers;
- Ethernet bonding driver;
- Network drivers;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- Texas Instruments network drivers;
- MediaTek network drivers;
- NTB driver;
- NVDIMM (Non-Volatile Memory Device) drivers;
- NVME drivers;
- Parport drivers;
- PCI subsystem;
- Pin controllers subsystem;
- Generic PM domains;
- System reset/shutdown drivers;
- Power supply drivers;
- RapidIO drivers;
- Voltage and Current Regulator drivers;
- Reset controller framework;
- S/390 drivers;
- SCSI subsystem;
- SLIMbus drivers;
- SPI subsystem;
- Media staging drivers;
- Media Oriented Systems Transport (MOST) driver;
- NVIDIA Tegra embedded controller (NVEC) staging driver;
- Realtek RTL8723BS SDIO drivers;
- TCM subsystem;
- Trusted Execution Environment drivers;
- Thermal drivers;
- Thunderbolt and USB4 drivers;
- TTY drivers;
- USB DSL drivers;
- Cadence USB3 driver;
- USB Device Class drivers;
- ULPI bus;
- DesignWare USB2 driver;
- DesignWare USB3 driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB ChaosKey driver;
- Siemens ID Mouse USB driver;
- IOWarrior USB driver;
- LD Didactic USB driver;
- LEGO USB Tower driver;
- USS720 USB parallel port adapter driver;
- MediaTek USB3 DRD driver;
- USB Serial drivers;
- USB Type-C support driver;
- USB Type-C Port Controller Manager driver;
- USB Type-C Connector System Software Interface driver;
- USB over IP driver;
- vDPA drivers;
- VFIO drivers;
- Virtio Host (VHOST) subsystem;
- Framebuffer…
- Record
USN-8878-1- Updated
- 2026-11-07
OSVUSN-8879-1 No score
linux-oracle-5.15 vulnerabilities
It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114)
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- User-space API (UAPI);
- ARM32 architecture;
- MIPS architecture;
- PowerPC architecture;
- RISC-V architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- ACPI drivers;
- Android drivers;
- Serial ATA and Parallel ATA drivers;
- Drivers core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Bluetooth drivers;
- Cdrom driver;
- Character device driver;
- Hardware random number generator core;
- TPM device driver;
- Data acquisition framework and drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- DAX dirext access to differentiated memory framework;
- DMA engine subsystem;
- FireWire subsystem;
- Arm Firmware Framework for ARMv8-A(FFA);
- ARM SCMI message protocol;
- Intel Stratix 10 firmware drivers;
- FPGA Framework;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- Hardware monitoring drivers;
- Intel Trace Hub HW tracing drivers;
- I2C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- IIO Magnetometer sensors drivers;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Miscellaneous) drivers;
- Input Device (Mouse) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- LED subsystem;
- Multiple devices driver;
- Media drivers;
- MemoryStick subsystem;
- Multifunction device drivers;
- Fastrpc Driver;
- MMC subsystem;
- MTD block device drivers;
- Ethernet bonding driver;
- Network drivers;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- Texas Instruments network drivers;
- MediaTek network drivers;
- NTB driver;
- NVDIMM (Non-Volatile Memory Device) drivers;
- NVME drivers;
- Parport drivers;
- PCI subsystem;
- Pin controllers subsystem;
- Generic PM domains;
- System reset/shutdown drivers;
- Power supply drivers;
- RapidIO drivers;
- Voltage and Current Regulator drivers;
- Reset controller framework;
- S/390 drivers;
- SCSI subsystem;
- SLIMbus drivers;
- SPI subsystem;
- Media staging drivers;
- Media Oriented Systems Transport (MOST) driver;
- NVIDIA Tegra embedded controller (NVEC) staging driver;
- Realtek RTL8723BS SDIO drivers;
- TCM subsystem;
- Trusted Execution Environment drivers;
- Thermal drivers;
- Thunderbolt and USB4 drivers;
- TTY drivers;
- USB DSL drivers;
- Cadence USB3 driver;
- USB Device Class drivers;
- ULPI bus;
- DesignWare USB2 driver;
- DesignWare USB3 driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB ChaosKey driver;
- Siemens ID Mouse USB driver;
- IOWarrior USB driver;
- LD Didactic USB driver;
- LEGO USB Tower driver;
- USS720 USB parallel port adapter driver;
- MediaTek USB3 DRD driver;
- USB Serial drivers;
- USB Type-C support driver;
- USB Type-C Port Controller Manager driver;
- USB Type-C Connector System Software Interface driver;
- USB over IP driver;
- vDPA drivers;
- VFIO drivers;
- Virtio Host (VHOST) subsystem;
- Framebuffer…
- Record
USN-8879-1- Updated
- 2026-11-07
OSVUSN-8887-1 No score
linux, linux-aws, linux-gcp, linux-gke, linux-ibm, linux-oracle, linux-realtime vulnerabilities
It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- NVDIMM (Non-Volatile Memory Device) drivers;
- Handshake API;
- ARM32 architecture;
- MIPS architecture;
- OpenRISC architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Cryptographic API;
- Compute Acceleration Framework;
- Intel NPU Driver;
- ACPI drivers;
- Android drivers;
- Serial ATA and Parallel ATA drivers;
- Drivers core;
- Rados block device (RBD) driver;
- Ublk userspace block driver;
- Bluetooth drivers;
- Cdrom driver;
- Character device driver;
- TPM device driver;
- Data acquisition framework and drivers;
- Hardware crypto device drivers;
- CXL (Compute Express Link) drivers;
- DAX dirext access to differentiated memory framework;
- DIBS (Direct Internal Buffer Sharing) drivers;
- Buffer Sharing and Synchronization framework;
- DMA engine subsystem;
- DPLL subsystem;
- EDAC drivers;
- FireWire subsystem;
- Arm Firmware Framework for ARMv8-A(FFA);
- ARM SCMI message protocol;
- Intel Stratix 10 firmware drivers;
- FPGA Framework;
- GPIB drivers;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- Microsoft Hyper-V drivers;
- Hardware monitoring drivers;
- CoreSight HW tracing drivers;
- Intel Trace Hub HW tracing drivers;
- I2C subsystem;
- I3C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- IIO Magnetometer sensors drivers;
- InfiniBand drivers;
- Input Device (Miscellaneous) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- LED subsystem;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- MemoryStick subsystem;
- Multifunction device drivers;
- Intel Management Engine Interface driver;
- Amazon Nitro Secure Module driver;
- MMC subsystem;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- Texas Instruments network drivers;
- MediaTek network drivers;
- NTB driver;
- NVME drivers;
- Device tree and open firmware driver;
- Operating Performance Points (OPP) driver;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- i.MX PM domains;
- MediaTek PM domains;
- Power supply drivers;
- PTP clock framework;
- RapidIO drivers;
- Voltage and Current Regulator drivers;
- Remote Processor subsystem;
- MPAM driver;
- Reset controller framework;
- Real Time Clock drivers;
- S/390 drivers;
- SCSI subsystem;
- Xilinx SoC drivers;
- SoundWire subsystem;
- SPI subsystem;
- Media staging drivers;
- Media Oriented Systems Transport (MOST) driver;
- NVIDIA Tegra embedded controller (NVEC) staging driver;
- Realtek RTL8723BS SDIO drivers;
- TTY drivers;
- UFS subsystem;
- USB DSL drivers;
- USB core drivers;
- DesignWare USB3 driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB Dual Role (OTG-ready) Controller drivers;
- USB Serial drivers;
- vDPA drivers;
- VFIO drivers;
- Virtio Host (VHOST) subsystem;
- Framebuffer layer;
- Virtio drivers;
- Watchdog drivers;
- Xen hypervisor drivers;
- 9P distributed file system;
- AFS file system;
- File systems infrastructure;
- BTRFS file system;
- Ceph distributed file system;
- Ext4 file system;
- F2FS file system;
- FUSE (File system in Userspace);
- Journaling layer for block devices (JBD2);
- Network file systems library;
- Network…
- Record
USN-8887-1- Updated
- 2026-11-02
OSVUSN-8887-2 No score
linux-aws-7.0 vulnerabilities
It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- NVDIMM (Non-Volatile Memory Device) drivers;
- Handshake API;
- ARM32 architecture;
- MIPS architecture;
- OpenRISC architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Cryptographic API;
- Compute Acceleration Framework;
- Intel NPU Driver;
- ACPI drivers;
- Android drivers;
- Serial ATA and Parallel ATA drivers;
- Drivers core;
- Rados block device (RBD) driver;
- Ublk userspace block driver;
- Bluetooth drivers;
- Cdrom driver;
- Character device driver;
- TPM device driver;
- Data acquisition framework and drivers;
- Hardware crypto device drivers;
- CXL (Compute Express Link) drivers;
- DAX dirext access to differentiated memory framework;
- DIBS (Direct Internal Buffer Sharing) drivers;
- Buffer Sharing and Synchronization framework;
- DMA engine subsystem;
- DPLL subsystem;
- EDAC drivers;
- FireWire subsystem;
- Arm Firmware Framework for ARMv8-A(FFA);
- ARM SCMI message protocol;
- Intel Stratix 10 firmware drivers;
- FPGA Framework;
- GPIB drivers;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- Microsoft Hyper-V drivers;
- Hardware monitoring drivers;
- CoreSight HW tracing drivers;
- Intel Trace Hub HW tracing drivers;
- I2C subsystem;
- I3C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- IIO Magnetometer sensors drivers;
- InfiniBand drivers;
- Input Device (Miscellaneous) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- LED subsystem;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- MemoryStick subsystem;
- Multifunction device drivers;
- Intel Management Engine Interface driver;
- Amazon Nitro Secure Module driver;
- MMC subsystem;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- Texas Instruments network drivers;
- MediaTek network drivers;
- NTB driver;
- NVME drivers;
- Device tree and open firmware driver;
- Operating Performance Points (OPP) driver;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- i.MX PM domains;
- MediaTek PM domains;
- Power supply drivers;
- PTP clock framework;
- RapidIO drivers;
- Voltage and Current Regulator drivers;
- Remote Processor subsystem;
- MPAM driver;
- Reset controller framework;
- Real Time Clock drivers;
- S/390 drivers;
- SCSI subsystem;
- Xilinx SoC drivers;
- SoundWire subsystem;
- SPI subsystem;
- Media staging drivers;
- Media Oriented Systems Transport (MOST) driver;
- NVIDIA Tegra embedded controller (NVEC) staging driver;
- Realtek RTL8723BS SDIO drivers;
- TTY drivers;
- UFS subsystem;
- USB DSL drivers;
- USB core drivers;
- DesignWare USB3 driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB Dual Role (OTG-ready) Controller drivers;
- USB Serial drivers;
- vDPA drivers;
- VFIO drivers;
- Virtio Host (VHOST) subsystem;
- Framebuffer layer;
- Virtio drivers;
- Watchdog drivers;
- Xen hypervisor drivers;
- 9P distributed file system;
- AFS file system;
- File systems infrastructure;
- BTRFS file system;
- Ceph distributed file system;
- Ext4 file system;
- F2FS file system;
- FUSE (File system in Userspace);
- Journaling layer for block devices (JBD2);
- Network file systems library;
- Network…
- Record
USN-8887-2- Updated
- 2026-11-02
OSVUSN-8887-3 No score
linux-gcp-7.0, linux-hwe-7.0, linux-oracle-7.0 vulnerabilities
It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- NVDIMM (Non-Volatile Memory Device) drivers;
- Handshake API;
- ARM32 architecture;
- MIPS architecture;
- OpenRISC architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Cryptographic API;
- Compute Acceleration Framework;
- Intel NPU Driver;
- ACPI drivers;
- Android drivers;
- Serial ATA and Parallel ATA drivers;
- Drivers core;
- Rados block device (RBD) driver;
- Ublk userspace block driver;
- Bluetooth drivers;
- Cdrom driver;
- Character device driver;
- TPM device driver;
- Data acquisition framework and drivers;
- Hardware crypto device drivers;
- CXL (Compute Express Link) drivers;
- DAX dirext access to differentiated memory framework;
- DIBS (Direct Internal Buffer Sharing) drivers;
- Buffer Sharing and Synchronization framework;
- DMA engine subsystem;
- DPLL subsystem;
- EDAC drivers;
- FireWire subsystem;
- Arm Firmware Framework for ARMv8-A(FFA);
- ARM SCMI message protocol;
- Intel Stratix 10 firmware drivers;
- FPGA Framework;
- GPIB drivers;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- Microsoft Hyper-V drivers;
- Hardware monitoring drivers;
- CoreSight HW tracing drivers;
- Intel Trace Hub HW tracing drivers;
- I2C subsystem;
- I3C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- IIO Magnetometer sensors drivers;
- InfiniBand drivers;
- Input Device (Miscellaneous) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- LED subsystem;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- MemoryStick subsystem;
- Multifunction device drivers;
- Intel Management Engine Interface driver;
- Amazon Nitro Secure Module driver;
- MMC subsystem;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- Texas Instruments network drivers;
- MediaTek network drivers;
- NTB driver;
- NVME drivers;
- Device tree and open firmware driver;
- Operating Performance Points (OPP) driver;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- i.MX PM domains;
- MediaTek PM domains;
- Power supply drivers;
- PTP clock framework;
- RapidIO drivers;
- Voltage and Current Regulator drivers;
- Remote Processor subsystem;
- MPAM driver;
- Reset controller framework;
- Real Time Clock drivers;
- S/390 drivers;
- SCSI subsystem;
- Xilinx SoC drivers;
- SoundWire subsystem;
- SPI subsystem;
- Media staging drivers;
- Media Oriented Systems Transport (MOST) driver;
- NVIDIA Tegra embedded controller (NVEC) staging driver;
- Realtek RTL8723BS SDIO drivers;
- TTY drivers;
- UFS subsystem;
- USB DSL drivers;
- USB core drivers;
- DesignWare USB3 driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB Dual Role (OTG-ready) Controller drivers;
- USB Serial drivers;
- vDPA drivers;
- VFIO drivers;
- Virtio Host (VHOST) subsystem;
- Framebuffer layer;
- Virtio drivers;
- Watchdog drivers;
- Xen hypervisor drivers;
- 9P distributed file system;
- AFS file system;
- File systems infrastructure;
- BTRFS file system;
- Ceph distributed file system;
- Ext4 file system;
- F2FS file system;
- FUSE (File system in Userspace);
- Journaling layer for block devices (JBD2);
- Network file systems library;
- Network…
- Record
USN-8887-3- Updated
- 2026-11-02
OSVUSN-8888-1 No score
linux-azure, linux-azure-fde vulnerabilities
It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- NVDIMM (Non-Volatile Memory Device) drivers;
- Handshake API;
- ARM32 architecture;
- MIPS architecture;
- OpenRISC architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Cryptographic API;
- Compute Acceleration Framework;
- Intel NPU Driver;
- ACPI drivers;
- Android drivers;
- Serial ATA and Parallel ATA drivers;
- Drivers core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Ublk userspace block driver;
- Bluetooth drivers;
- Cdrom driver;
- Character device driver;
- TPM device driver;
- Data acquisition framework and drivers;
- Hardware crypto device drivers;
- CXL (Compute Express Link) drivers;
- DAX dirext access to differentiated memory framework;
- DIBS (Direct Internal Buffer Sharing) drivers;
- Buffer Sharing and Synchronization framework;
- DMA engine subsystem;
- DPLL subsystem;
- EDAC drivers;
- FireWire subsystem;
- Arm Firmware Framework for ARMv8-A(FFA);
- ARM SCMI message protocol;
- Intel Stratix 10 firmware drivers;
- FPGA Framework;
- GPIB drivers;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- Microsoft Hyper-V drivers;
- Hardware monitoring drivers;
- CoreSight HW tracing drivers;
- Intel Trace Hub HW tracing drivers;
- I2C subsystem;
- I3C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- IIO Magnetometer sensors drivers;
- InfiniBand drivers;
- Input Device (Miscellaneous) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- LED subsystem;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- MemoryStick subsystem;
- Multifunction device drivers;
- Intel Management Engine Interface driver;
- Amazon Nitro Secure Module driver;
- MMC subsystem;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- Texas Instruments network drivers;
- MediaTek network drivers;
- NTB driver;
- NVME drivers;
- Device tree and open firmware driver;
- Operating Performance Points (OPP) driver;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- i.MX PM domains;
- MediaTek PM domains;
- Power supply drivers;
- PTP clock framework;
- RapidIO drivers;
- Voltage and Current Regulator drivers;
- Remote Processor subsystem;
- MPAM driver;
- Reset controller framework;
- Real Time Clock drivers;
- S/390 drivers;
- SCSI subsystem;
- Xilinx SoC drivers;
- SoundWire subsystem;
- SPI subsystem;
- Media staging drivers;
- Media Oriented Systems Transport (MOST) driver;
- NVIDIA Tegra embedded controller (NVEC) staging driver;
- Realtek RTL8723BS SDIO drivers;
- TCM subsystem;
- TTY drivers;
- UFS subsystem;
- USB DSL drivers;
- USB core drivers;
- DesignWare USB3 driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB Dual Role (OTG-ready) Controller drivers;
- USB Serial drivers;
- vDPA drivers;
- VFIO drivers;
- Virtio Host (VHOST) subsystem;
- Framebuffer layer;
- Virtio drivers;
- Watchdog drivers;
- Xen hypervisor drivers;
- 9P distributed file system;
- AFS file system;
- File systems infrastructure;
- BTRFS file system;
- Ceph distributed file system;
- Ext4 file system;
- F2FS file system;
- FUSE (File system in Userspace);
- Journaling layer…
- Record
USN-8888-1- Updated
- 2026-11-02
OSVUSN-8888-2 No score
linux-azure-7.0, linux-azure-fde-7.0 vulnerabilities
It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- NVDIMM (Non-Volatile Memory Device) drivers;
- Handshake API;
- ARM32 architecture;
- MIPS architecture;
- OpenRISC architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Cryptographic API;
- Compute Acceleration Framework;
- Intel NPU Driver;
- ACPI drivers;
- Android drivers;
- Serial ATA and Parallel ATA drivers;
- Drivers core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Ublk userspace block driver;
- Bluetooth drivers;
- Cdrom driver;
- Character device driver;
- TPM device driver;
- Data acquisition framework and drivers;
- Hardware crypto device drivers;
- CXL (Compute Express Link) drivers;
- DAX dirext access to differentiated memory framework;
- DIBS (Direct Internal Buffer Sharing) drivers;
- Buffer Sharing and Synchronization framework;
- DMA engine subsystem;
- DPLL subsystem;
- EDAC drivers;
- FireWire subsystem;
- Arm Firmware Framework for ARMv8-A(FFA);
- ARM SCMI message protocol;
- Intel Stratix 10 firmware drivers;
- FPGA Framework;
- GPIB drivers;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- Microsoft Hyper-V drivers;
- Hardware monitoring drivers;
- CoreSight HW tracing drivers;
- Intel Trace Hub HW tracing drivers;
- I2C subsystem;
- I3C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- IIO Magnetometer sensors drivers;
- InfiniBand drivers;
- Input Device (Miscellaneous) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- LED subsystem;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- MemoryStick subsystem;
- Multifunction device drivers;
- Intel Management Engine Interface driver;
- Amazon Nitro Secure Module driver;
- MMC subsystem;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- Texas Instruments network drivers;
- MediaTek network drivers;
- NTB driver;
- NVME drivers;
- Device tree and open firmware driver;
- Operating Performance Points (OPP) driver;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- i.MX PM domains;
- MediaTek PM domains;
- Power supply drivers;
- PTP clock framework;
- RapidIO drivers;
- Voltage and Current Regulator drivers;
- Remote Processor subsystem;
- MPAM driver;
- Reset controller framework;
- Real Time Clock drivers;
- S/390 drivers;
- SCSI subsystem;
- Xilinx SoC drivers;
- SoundWire subsystem;
- SPI subsystem;
- Media staging drivers;
- Media Oriented Systems Transport (MOST) driver;
- NVIDIA Tegra embedded controller (NVEC) staging driver;
- Realtek RTL8723BS SDIO drivers;
- TCM subsystem;
- TTY drivers;
- UFS subsystem;
- USB DSL drivers;
- USB core drivers;
- DesignWare USB3 driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB Dual Role (OTG-ready) Controller drivers;
- USB Serial drivers;
- vDPA drivers;
- VFIO drivers;
- Virtio Host (VHOST) subsystem;
- Framebuffer layer;
- Virtio drivers;
- Watchdog drivers;
- Xen hypervisor drivers;
- 9P distributed file system;
- AFS file system;
- File systems infrastructure;
- BTRFS file system;
- Ceph distributed file system;
- Ext4 file system;
- F2FS file system;
- FUSE (File system in Userspace);
- Journaling layer…
- Record
USN-8888-2- Updated
- 2026-11-02
OSVUSN-8889-1 No score
linux-oem-7.0 vulnerabilities
It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- NVDIMM (Non-Volatile Memory Device) drivers;
- Handshake API;
- ARM32 architecture;
- MIPS architecture;
- OpenRISC architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Cryptographic API;
- Compute Acceleration Framework;
- Intel NPU Driver;
- ACPI drivers;
- Android drivers;
- Serial ATA and Parallel ATA drivers;
- Drivers core;
- Rados block device (RBD) driver;
- Ublk userspace block driver;
- Bluetooth drivers;
- Cdrom driver;
- Character device driver;
- TPM device driver;
- Data acquisition framework and drivers;
- Hardware crypto device drivers;
- CXL (Compute Express Link) drivers;
- DAX dirext access to differentiated memory framework;
- DIBS (Direct Internal Buffer Sharing) drivers;
- Buffer Sharing and Synchronization framework;
- DMA engine subsystem;
- DPLL subsystem;
- EDAC drivers;
- FireWire subsystem;
- Arm Firmware Framework for ARMv8-A(FFA);
- ARM SCMI message protocol;
- Intel Stratix 10 firmware drivers;
- FPGA Framework;
- GPIB drivers;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- Microsoft Hyper-V drivers;
- Hardware monitoring drivers;
- CoreSight HW tracing drivers;
- Intel Trace Hub HW tracing drivers;
- I2C subsystem;
- I3C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- IIO Magnetometer sensors drivers;
- InfiniBand drivers;
- Input Device (Miscellaneous) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- LED subsystem;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- MemoryStick subsystem;
- Multifunction device drivers;
- Intel Management Engine Interface driver;
- Amazon Nitro Secure Module driver;
- MMC subsystem;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- Texas Instruments network drivers;
- MediaTek network drivers;
- NTB driver;
- NVME drivers;
- Device tree and open firmware driver;
- Operating Performance Points (OPP) driver;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- i.MX PM domains;
- MediaTek PM domains;
- Power supply drivers;
- PTP clock framework;
- RapidIO drivers;
- Voltage and Current Regulator drivers;
- Remote Processor subsystem;
- MPAM driver;
- Reset controller framework;
- Real Time Clock drivers;
- S/390 drivers;
- SCSI subsystem;
- Xilinx SoC drivers;
- SoundWire subsystem;
- SPI subsystem;
- Media staging drivers;
- Media Oriented Systems Transport (MOST) driver;
- NVIDIA Tegra embedded controller (NVEC) staging driver;
- Realtek RTL8723BS SDIO drivers;
- TTY drivers;
- UFS subsystem;
- USB DSL drivers;
- USB core drivers;
- DesignWare USB3 driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB Dual Role (OTG-ready) Controller drivers;
- USB Serial drivers;
- vDPA drivers;
- VFIO drivers;
- Virtio Host (VHOST) subsystem;
- Framebuffer layer;
- Virtio drivers;
- Watchdog drivers;
- Xen hypervisor drivers;
- 9P distributed file system;
- AFS file system;
- File systems infrastructure;
- BTRFS file system;
- Ceph distributed file system;
- Ext4 file system;
- F2FS file system;
- FUSE (File system in Userspace);
- Journaling layer for block devices (JBD2);
- Network file systems library;
- Network…
- Record
USN-8889-1- Updated
- 2026-11-02
OSVUSN-8917-1 No score
linux, linux-aws, linux-aws-fips, linux-fips, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-ibm, linux-lowlatency, linux-oracle, linux-realtime vulnerabilities
It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- NVDIMM (Non-Volatile Memory Device) drivers;
- Handshake API;
- ARM32 architecture;
- ARM64 architecture;
- MIPS architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Intel NPU Driver;
- ACPI drivers;
- Android drivers;
- Serial ATA and Parallel ATA drivers;
- Drivers core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Bluetooth drivers;
- Cdrom driver;
- Character device driver;
- Hardware random number generator core;
- TPM device driver;
- Data acquisition framework and drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- DAX dirext access to differentiated memory framework;
- Buffer Sharing and Synchronization framework;
- DMA engine subsystem;
- FireWire subsystem;
- Arm Firmware Framework for ARMv8-A(FFA);
- ARM SCMI message protocol;
- Intel Stratix 10 firmware drivers;
- FPGA Framework;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- Microsoft Hyper-V drivers;
- Hardware monitoring drivers;
- CoreSight HW tracing drivers;
- Intel Trace Hub HW tracing drivers;
- I2C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- IIO Magnetometer sensors drivers;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Miscellaneous) drivers;
- Input Device (Mouse) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- LED subsystem;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- MemoryStick subsystem;
- Multifunction device drivers;
- Intel Management Engine Interface driver;
- Amazon Nitro Secure Module driver;
- MMC subsystem;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- MediaTek network drivers;
- NTB driver;
- NVME drivers;
- PCI subsystem;
- x86 platform drivers;
- i.MX PM domains;
- System reset/shutdown drivers;
- Power supply drivers;
- RapidIO drivers;
- Voltage and Current Regulator drivers;
- Remote Processor subsystem;
- Reset controller framework;
- RPMSG subsystem;
- Real Time Clock drivers;
- S/390 drivers;
- SCSI subsystem;
- Xilinx SoC drivers;
- SPI subsystem;
- Media staging drivers;
- Media Oriented Systems Transport (MOST) driver;
- NVIDIA Tegra embedded controller (NVEC) staging driver;
- Realtek RTL8723BS SDIO drivers;
- VME bus staging drivers;
- TCM subsystem;
- TTY drivers;
- USB DSL drivers;
- Cadence USB3 driver;
- ULPI bus;
- USB core drivers;
- DesignWare USB3 driver;
- Faraday FOTG210 USB2 dual-role controller driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB ChaosKey driver;
- Siemens ID Mouse USB driver;
- IOWarrior USB driver;
- LD Didactic USB driver;
- LEGO USB Tower driver;
- USS720 USB parallel port adapter driver;
- MediaTek USB3 DRD driver;
- USB Dual Role (OTG-ready) Controller drivers;
- USB Serial drivers;
- USB Type-C Port Controller Manager driver;
- USB Type-C Connector System Software Interface driver;
- USB over IP driver;
- vDPA drivers;
- VFIO drivers;
- Virtio Host (VHOST) subsystem;
- Framebuffer layer;
- Watchdog drivers;
- Xen hypervisor drivers;
- 9P distributed file system;
- AFS file system;
- File systems infrastructure;
- BTRFS file…
- Record
USN-8917-1- Updated
- 2026-11-06
OSVUSN-8918-1 No score
linux-azure, linux-azure-fde, linux-azure-fips vulnerabilities
It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- NVDIMM (Non-Volatile Memory Device) drivers;
- Handshake API;
- ARM32 architecture;
- ARM64 architecture;
- MIPS architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Intel NPU Driver;
- ACPI drivers;
- Android drivers;
- Serial ATA and Parallel ATA drivers;
- Drivers core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Bluetooth drivers;
- Cdrom driver;
- Character device driver;
- Hardware random number generator core;
- TPM device driver;
- Data acquisition framework and drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- DAX dirext access to differentiated memory framework;
- Buffer Sharing and Synchronization framework;
- DMA engine subsystem;
- FireWire subsystem;
- Arm Firmware Framework for ARMv8-A(FFA);
- ARM SCMI message protocol;
- Intel Stratix 10 firmware drivers;
- FPGA Framework;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- Microsoft Hyper-V drivers;
- Hardware monitoring drivers;
- CoreSight HW tracing drivers;
- Intel Trace Hub HW tracing drivers;
- I2C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- IIO Magnetometer sensors drivers;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Miscellaneous) drivers;
- Input Device (Mouse) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- LED subsystem;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- MemoryStick subsystem;
- Multifunction device drivers;
- Intel Management Engine Interface driver;
- Amazon Nitro Secure Module driver;
- MMC subsystem;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- MediaTek network drivers;
- NTB driver;
- NVME drivers;
- PCI subsystem;
- x86 platform drivers;
- i.MX PM domains;
- System reset/shutdown drivers;
- Power supply drivers;
- RapidIO drivers;
- Voltage and Current Regulator drivers;
- Remote Processor subsystem;
- Reset controller framework;
- RPMSG subsystem;
- Real Time Clock drivers;
- S/390 drivers;
- SCSI subsystem;
- Xilinx SoC drivers;
- SPI subsystem;
- Media staging drivers;
- Media Oriented Systems Transport (MOST) driver;
- NVIDIA Tegra embedded controller (NVEC) staging driver;
- Realtek RTL8723BS SDIO drivers;
- VME bus staging drivers;
- TCM subsystem;
- TTY drivers;
- USB DSL drivers;
- Cadence USB3 driver;
- ULPI bus;
- USB core drivers;
- DesignWare USB3 driver;
- Faraday FOTG210 USB2 dual-role controller driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB ChaosKey driver;
- Siemens ID Mouse USB driver;
- IOWarrior USB driver;
- LD Didactic USB driver;
- LEGO USB Tower driver;
- USS720 USB parallel port adapter driver;
- MediaTek USB3 DRD driver;
- USB Dual Role (OTG-ready) Controller drivers;
- USB Serial drivers;
- USB Type-C Port Controller Manager driver;
- USB Type-C Connector System Software Interface driver;
- USB over IP driver;
- vDPA drivers;
- VFIO drivers;
- Virtio Host (VHOST) subsystem;
- Framebuffer layer;
- Watchdog drivers;
- Xen hypervisor drivers;
- 9P distributed file system;
- AFS file system;
- File systems infrastructure;
- BTRFS file…
- Record
USN-8918-1- Updated
- 2026-11-06
OSVUSN-8963-1 No score
linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-nvidia-tegra-igx vulnerabilities
Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol implementation in the Linux kernel, leading to use-after-free vulnerabilities. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-1205)
It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- USB Gadget drivers;
- Networking core;
- User-space API (UAPI);
- ARM32 architecture;
- ARM64 architecture;
- MIPS architecture;
- OpenRISC architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Speakup Console Speech Driver;
- ACPI drivers;
- Android drivers;
- Serial ATA and Parallel ATA drivers;
- Auxiliary display drivers;
- Drivers core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Bluetooth drivers;
- Cdrom driver;
- Character device driver;
- Hardware random number generator core;
- TPM device driver;
- Clock framework and drivers;
- Clocksource drivers;
- Data acquisition framework and drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- DAX dirext access to differentiated memory framework;
- Buffer Sharing and Synchronization framework;
- DMA engine subsystem;
- EDAC drivers;
- FireWire subsystem;
- Arm Firmware Framework for ARMv8-A(FFA);
- ARM SCMI message protocol;
- ARM SCPI message protocol;
- Google firmware drivers;
- Intel Stratix 10 firmware drivers;
- FPGA Framework;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- HSI subsystem;
- Hardware monitoring drivers;
- CoreSight HW tracing drivers;
- Intel Trace Hub HW tracing drivers;
- I2C subsystem;
- I3C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- IIO Magnetometer sensors drivers;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Miscellaneous) drivers;
- Input Device (Mouse) drivers;
- On-Chip Interconnect management framework;
- IOMMU subsystem;
- IRQ chip drivers;
- LED subsystem;
- Multiple devices driver;
- Media drivers;
- MemoryStick subsystem;
- Multifunction device drivers;
- Analog Devices digital potentiometer driver;
- Broadcom VK accelerator driver;
- Fastrpc Driver;
- MMC subsystem;
- MTD block device drivers;
- Ethernet bonding driver;
- Network drivers;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- STMicroelectronics network drivers;
- Texas Instruments network drivers;
- MediaTek network drivers;
- Near Field Communication (NFC) drivers;
- NTB driver;
- NVDIMM (Non-Volatile Memory Device) drivers;
- NVME drivers;
- Device tree and open firmware driver;
- PA-RISC drivers;
- Parport drivers;
- PCI subsystem;
- PHY drivers;
- Pin controllers subsystem;
- Chrome hardware platform drivers;
- Mellanox platform drivers;
- Microsoft Surface platform drivers;
- x86 platform drivers;
- Generic PM domains;
- System reset/shutdown drivers;
- Power supply drivers;
- RapidIO drivers;
- Voltage and Current Regulator drivers;
- Remote Processor subsystem;
- Reset controller framework;
- RPMSG subsystem;
- Real Time Clock drivers;
- S/390 drivers;
- SCSI subsystem;
- SLIMbus drivers;
- SPI subsystem;
- small TFT LCD display modules;
- Greybus lights staging drivers;
- Media staging drivers;
- Media Oriented Systems Transport (MOST) driver;
- NVIDIA Tegra embedded controller (NVEC)…
- Record
USN-8963-1- Updated
- 2026-11-07
OSVUSN-9003-1 No score
linux-nvidia-7.0, linux-nvidia-bos vulnerabilities
It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- NVDIMM (Non-Volatile Memory Device) drivers;
- Handshake API;
- ARM32 architecture;
- MIPS architecture;
- OpenRISC architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Cryptographic API;
- Compute Acceleration Framework;
- Intel NPU Driver;
- ACPI drivers;
- Android drivers;
- Serial ATA and Parallel ATA drivers;
- Drivers core;
- DRBD Distributed Replicated Block Device drivers;
- Rados block device (RBD) driver;
- Ublk userspace block driver;
- Bluetooth drivers;
- Cdrom driver;
- Character device driver;
- TPM device driver;
- Data acquisition framework and drivers;
- Hardware crypto device drivers;
- CXL (Compute Express Link) drivers;
- DAX dirext access to differentiated memory framework;
- DIBS (Direct Internal Buffer Sharing) drivers;
- Buffer Sharing and Synchronization framework;
- DMA engine subsystem;
- DPLL subsystem;
- EDAC drivers;
- FireWire subsystem;
- Arm Firmware Framework for ARMv8-A(FFA);
- ARM SCMI message protocol;
- Intel Stratix 10 firmware drivers;
- FPGA Framework;
- GPIB drivers;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- Microsoft Hyper-V drivers;
- Hardware monitoring drivers;
- CoreSight HW tracing drivers;
- Intel Trace Hub HW tracing drivers;
- I2C subsystem;
- I3C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- IIO Magnetometer sensors drivers;
- InfiniBand drivers;
- Input Device (Miscellaneous) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- LED subsystem;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- MemoryStick subsystem;
- Multifunction device drivers;
- Intel Management Engine Interface driver;
- Amazon Nitro Secure Module driver;
- MMC subsystem;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- Texas Instruments network drivers;
- MediaTek network drivers;
- NTB driver;
- NVME drivers;
- Device tree and open firmware driver;
- Operating Performance Points (OPP) driver;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- i.MX PM domains;
- MediaTek PM domains;
- Power supply drivers;
- PTP clock framework;
- RapidIO drivers;
- Voltage and Current Regulator drivers;
- Remote Processor subsystem;
- MPAM driver;
- Reset controller framework;
- Real Time Clock drivers;
- S/390 drivers;
- SCSI subsystem;
- Xilinx SoC drivers;
- SoundWire subsystem;
- SPI subsystem;
- Media staging drivers;
- Media Oriented Systems Transport (MOST) driver;
- NVIDIA Tegra embedded controller (NVEC) staging driver;
- Realtek RTL8723BS SDIO drivers;
- TCM subsystem;
- TTY drivers;
- UFS subsystem;
- USB DSL drivers;
- USB core drivers;
- DesignWare USB3 driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB Dual Role (OTG-ready) Controller drivers;
- USB Serial drivers;
- vDPA drivers;
- VFIO drivers;
- Virtio Host (VHOST) subsystem;
- Framebuffer layer;
- Virtio drivers;
- Watchdog drivers;
- Xen hypervisor drivers;
- 9P distributed file system;
- AFS file system;
- File systems infrastructure;
- BTRFS file system;
- Ceph distributed file system;
- Ext4 file system;
- F2FS file system;
- FUSE (File system in Userspace);
- Journaling layer…
- Record
USN-9003-1- Updated
- 2026-11-06
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linux-ltsAlpaquita:23 |
6.1.182-r0 up to 6.1.189-r0 | 6.1.189-r0 |
linux-ltsAlpaquita:25 |
6.12.95-r0 up to 6.12.103-r0 | 6.12.103-r0 |
linux-ltsAlpaquita:stream |
6.18.38-r0 up to 6.18.43-r0 | 6.18.43-r0 |
bpftoolTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 7.0.0-284.1101.el9_2.tuxcare.11.els13 | 7.0.0-284.1101.el9_2.tuxcare.11.els13 |
kernelTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-64kTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-64k-coreTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-64k-debugTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-64k-debug-coreTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-64k-debug-develTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
Show 290 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-64k-debug-devel-matchedTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-64k-debug-modulesTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-64k-debug-modules-coreTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-64k-debug-modules-extraTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-64k-debug-modules-internalTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-64k-debug-modules-partnerTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-64k-develTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-64k-devel-matchedTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-64k-modulesTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-64k-modules-coreTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-64k-modules-extraTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-64k-modules-internalTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-64k-modules-partnerTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-abi-stablelistsTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-coreTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-cross-headersTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-debugTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-debug-coreTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-debug-develTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-debug-devel-matchedTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-debug-modulesTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-debug-modules-coreTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-debug-modules-extraTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-debug-modules-internalTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-debug-modules-partnerTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-debug-uki-virtTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-develTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-devel-matchedTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-docTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-headersTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-ipaclones-internalTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-modulesTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-modules-coreTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-modules-extraTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-modules-internalTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-modules-partnerTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-selftests-internalTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-toolsTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-tools-libsTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-tools-libs-develTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
kernel-uki-virtTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
libbpfTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 2:1.0.0-2.el9_2.tuxcare.11.els13 | 2:1.0.0-2.el9_2.tuxcare.11.els13 |
libbpf-develTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 2:1.0.0-2.el9_2.tuxcare.11.els13 | 2:1.0.0-2.el9_2.tuxcare.11.els13 |
libbpf-staticTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 2:1.0.0-2.el9_2.tuxcare.11.els13 | 2:1.0.0-2.el9_2.tuxcare.11.els13 |
perfTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
python3-perfTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
rtlaTuxCare:AlmaLinux:9.2 From an advisory covering 157 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els13 | 5.14.0-284.1101.el9_2.tuxcare.11.els13 |
bpftoolTuxCare:CentOS:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernelTuxCare:CentOS:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-debugTuxCare:CentOS:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-debug-develTuxCare:CentOS:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-develTuxCare:CentOS:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-docTuxCare:CentOS:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-headersTuxCare:CentOS:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-toolsTuxCare:CentOS:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-tools-libsTuxCare:CentOS:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-tools-libs-develTuxCare:CentOS:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
perfTuxCare:CentOS:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
python-perfTuxCare:CentOS:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
bpftoolTuxCare:OracleLinux:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernelTuxCare:OracleLinux:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-debugTuxCare:OracleLinux:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-debug-develTuxCare:OracleLinux:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-develTuxCare:OracleLinux:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-docTuxCare:OracleLinux:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-headersTuxCare:OracleLinux:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-toolsTuxCare:OracleLinux:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-tools-libsTuxCare:OracleLinux:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-tools-libs-develTuxCare:OracleLinux:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
perfTuxCare:OracleLinux:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
python-perfTuxCare:OracleLinux:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
bpftoolTuxCare:RHEL:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernelTuxCare:RHEL:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-debugTuxCare:RHEL:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-debug-develTuxCare:RHEL:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-develTuxCare:RHEL:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-docTuxCare:RHEL:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-headersTuxCare:RHEL:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-toolsTuxCare:RHEL:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-tools-libsTuxCare:RHEL:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
kernel-tools-libs-develTuxCare:RHEL:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
perfTuxCare:RHEL:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
python-perfTuxCare:RHEL:7 From an advisory covering 135 CVEs |
before 3.10.0-1160.156.1.el7.tuxcare.els3 | 3.10.0-1160.156.1.el7.tuxcare.els3 |
bpftoolTuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs |
before 4.18.0-553.6.1.el8_10.tuxcare.els30 | 4.18.0-553.6.1.el8_10.tuxcare.els30 |
kernelTuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs |
before 4.18.0-553.6.1.el8_10.tuxcare.els30 | 4.18.0-553.6.1.el8_10.tuxcare.els30 |
kernel-coreTuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs |
before 4.18.0-553.6.1.el8_10.tuxcare.els30 | 4.18.0-553.6.1.el8_10.tuxcare.els30 |
kernel-cross-headersTuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs |
before 4.18.0-553.6.1.el8_10.tuxcare.els30 | 4.18.0-553.6.1.el8_10.tuxcare.els30 |
kernel-debugTuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs |
before 4.18.0-553.6.1.el8_10.tuxcare.els30 | 4.18.0-553.6.1.el8_10.tuxcare.els30 |
KernelLinux |
2.6.34 up to 5.10.265, 5.11.0 up to 5.15.216, 5.16.0 up to 6.1.183, 6.2.0 up to 6.6.148, 6.7.0 up to 6.12.101, 6.13.0 up to 6.18.42, 6.19.0 up to 7.1.6 | 5.10.2655.15.2166.1.1836.6.1486.12.1016.18.427.1.6 |
linuxDebian:12 |
before 6.1.187-1, plus listed versions 6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1 Show 45 moreShow less6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.170-16.1.170-26.1.170-36.1.172-16.1.174-16.1.176-16.1.177-16.1.180-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-1 |
6.1.187-1 |
linuxDebian:13 |
before 6.12.101-1, plus listed versions 6.12.100-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+1 Show 27 moreShow less6.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-1 |
6.12.101-1 |
linuxDebian:14 |
before 7.1.6-1, plus listed versions 6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1 Show 45 moreShow less6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1 |
7.1.6-1 |
linux-6.12Debian:12 |
before 6.12.101-1~deb12u1, plus listed versions 6.12.100-1~deb12u1 |
6.12.101-1~deb12u1 |
kernelMageia:10 From an advisory covering 367 CVEs |
before 6.18.44-1.mga10 | 6.18.44-1.mga10 |
kmod-xtables-addonsMageia:10 From an advisory covering 367 CVEs |
before 3.30-4.mga10 | 3.30-4.mga10 |
kmod-virtualboxMageia:10 From an advisory covering 367 CVEs |
before 7.2.14-30.mga10 | 7.2.14-30.mga10 |
kmod-nvidia-current-wopengpuMageia:10 From an advisory covering 367 CVEs |
before 580.173.02-39.mga10.nonfree | 580.173.02-39.mga10.nonfree |
drakx-installer-imagesMageia:10 From an advisory covering 367 CVEs |
before 2.94-55.mga10.nonfree | 2.94-55.mga10.nonfree |
kernel-linusMageia:10 From an advisory covering 367 CVEs |
before 6.18.44-1.mga10 | 6.18.44-1.mga10 |
kernelopenEuler:20.03-LTS-SP4 |
before 4.19.90-2608.5.0.0387.oe2003sp4 | 4.19.90-2608.5.0.0387.oe2003sp4 |
kernelopenEuler:22.03-LTS-SP4 From an advisory covering 27 CVEs |
before 5.10.0-330.0.0.231.oe2203sp4 | 5.10.0-330.0.0.231.oe2203sp4 |
kernel-rtSUSE:Linux Micro 6.0 From an advisory covering 588 CVEs |
before 6.4.0-52.1 | 6.4.0-52.1 |
kernel-source-rtSUSE:Linux Micro 6.0 From an advisory covering 588 CVEs |
before 6.4.0-52.1 | 6.4.0-52.1 |
kernel-defaultSUSE:Linux Micro 6.0 From an advisory covering 588 CVEs |
before 6.4.0-52.1 | 6.4.0-52.1 |
kernel-default-baseSUSE:Linux Micro 6.0 From an advisory covering 588 CVEs |
before 6.4.0-52.1.21.36 | 6.4.0-52.1.21.36 |
kernel-kvmsmallSUSE:Linux Micro 6.0 From an advisory covering 588 CVEs |
before 6.4.0-52.1 | 6.4.0-52.1 |
kernel-sourceSUSE:Linux Micro 6.0 From an advisory covering 588 CVEs |
before 6.4.0-52.1 | 6.4.0-52.1 |
kernel-rtSUSE:Linux Micro 6.1 From an advisory covering 588 CVEs |
before 6.4.0-52.1 | 6.4.0-52.1 |
kernel-source-rtSUSE:Linux Micro 6.1 From an advisory covering 588 CVEs |
before 6.4.0-52.1 | 6.4.0-52.1 |
kernel-defaultSUSE:Linux Micro 6.1 From an advisory covering 588 CVEs |
before 6.4.0-52.1 | 6.4.0-52.1 |
kernel-default-baseSUSE:Linux Micro 6.1 From an advisory covering 588 CVEs |
before 6.4.0-52.1.21.34 | 6.4.0-52.1.21.34 |
kernel-kvmsmallSUSE:Linux Micro 6.1 From an advisory covering 588 CVEs |
before 6.4.0-52.1 | 6.4.0-52.1 |
kernel-sourceSUSE:Linux Micro 6.1 From an advisory covering 588 CVEs |
before 6.4.0-52.1 | 6.4.0-52.1 |
kernel-livepatch-SLE15-SP7-RT_Update_20SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 662 CVEs |
before 1-150700.1.3.1 | 1-150700.1.3.1 |
kernel-rtSUSE:Real Time Module 15 SP7 From an advisory covering 662 CVEs |
before 6.4.0-150700.7.75.1 | 6.4.0-150700.7.75.1 |
kernel-source-rtSUSE:Real Time Module 15 SP7 From an advisory covering 662 CVEs |
before 6.4.0-150700.7.75.1 | 6.4.0-150700.7.75.1 |
kernel-syms-rtSUSE:Real Time Module 15 SP7 From an advisory covering 662 CVEs |
before 6.4.0-150700.7.75.1 | 6.4.0-150700.7.75.1 |
kernel-64kbSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 661 CVEs |
before 6.4.0-150700.53.81.1 | 6.4.0-150700.53.81.1 |
kernel-defaultSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 661 CVEs |
before 6.4.0-150700.53.81.1 | 6.4.0-150700.53.81.1 |
kernel-default-baseSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 661 CVEs |
before 6.4.0-150700.53.81.1.150700.17.45.1 | 6.4.0-150700.53.81.1.150700.17.45.1 |
kernel-sourceSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 661 CVEs |
before 6.4.0-150700.53.81.1 | 6.4.0-150700.53.81.1 |
kernel-zfcpdumpSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 661 CVEs |
before 6.4.0-150700.53.81.1 | 6.4.0-150700.53.81.1 |
kernel-docsSUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 661 CVEs |
before 6.4.0-150700.53.81.1 | 6.4.0-150700.53.81.1 |
kernel-obs-buildSUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 661 CVEs |
before 6.4.0-150700.53.81.1 | 6.4.0-150700.53.81.1 |
kernel-sourceSUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 661 CVEs |
before 6.4.0-150700.53.81.1 | 6.4.0-150700.53.81.1 |
kernel-symsSUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 661 CVEs |
before 6.4.0-150700.53.81.1 | 6.4.0-150700.53.81.1 |
kernel-defaultSUSE:Linux Enterprise Module for Legacy 15 SP7 From an advisory covering 661 CVEs |
before 6.4.0-150700.53.81.1 | 6.4.0-150700.53.81.1 |
kernel-defaultSUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 661 CVEs |
before 6.4.0-150700.53.81.1 | 6.4.0-150700.53.81.1 |
kernel-livepatch-SLE15-SP7_Update_21SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 661 CVEs |
before 1-150700.15.3.1 | 1-150700.15.3.1 |
kernel-azureSUSE:Linux Enterprise Module for Public Cloud 15 SP7 From an advisory covering 661 CVEs |
before 6.4.0-150700.53.81.1 | 6.4.0-150700.53.81.1 |
kernel-defaultSUSE:Linux Enterprise High Availability Extension 15 SP7 From an advisory covering 661 CVEs |
before 6.4.0-150700.53.81.1 | 6.4.0-150700.53.81.1 |
kernel-defaultSUSE:Linux Enterprise Workstation Extension 15 SP7 From an advisory covering 661 CVEs |
before 6.4.0-150700.53.81.1 | 6.4.0-150700.53.81.1 |
kernel-rtSUSE:Linux Enterprise Micro 5.3 From an advisory covering 101 CVEs |
before 5.14.21-150400.15.186.1 | 5.14.21-150400.15.186.1 |
kernel-source-rtSUSE:Linux Enterprise Micro 5.3 From an advisory covering 101 CVEs |
before 5.14.21-150400.15.186.1 | 5.14.21-150400.15.186.1 |
kernel-rtSUSE:Linux Enterprise Micro 5.4 From an advisory covering 101 CVEs |
before 5.14.21-150400.15.186.1 | 5.14.21-150400.15.186.1 |
kernel-source-rtSUSE:Linux Enterprise Micro 5.4 From an advisory covering 101 CVEs |
before 5.14.21-150400.15.186.1 | 5.14.21-150400.15.186.1 |
kernel-defaultSUSE:Linux Enterprise Micro 5.3 From an advisory covering 101 CVEs |
before 5.14.21-150400.24.240.2 | 5.14.21-150400.24.240.2 |
kernel-default-baseSUSE:Linux Enterprise Micro 5.3 From an advisory covering 101 CVEs |
before 5.14.21-150400.24.240.2.150400.24.120.2 | 5.14.21-150400.24.240.2.150400.24.120.2 |
kernel-sourceSUSE:Linux Enterprise Micro 5.3 From an advisory covering 101 CVEs |
before 5.14.21-150400.24.240.1 | 5.14.21-150400.24.240.1 |
kernel-defaultSUSE:Linux Enterprise Micro 5.4 From an advisory covering 101 CVEs |
before 5.14.21-150400.24.240.2 | 5.14.21-150400.24.240.2 |
kernel-default-baseSUSE:Linux Enterprise Micro 5.4 From an advisory covering 101 CVEs |
before 5.14.21-150400.24.240.2.150400.24.120.2 | 5.14.21-150400.24.240.2.150400.24.120.2 |
kernel-sourceSUSE:Linux Enterprise Micro 5.4 From an advisory covering 101 CVEs |
before 5.14.21-150400.24.240.1 | 5.14.21-150400.24.240.1 |
kernel-defaultSUSE:Linux Enterprise Live Patching 15 SP4 From an advisory covering 101 CVEs |
before 5.14.21-150400.24.240.2 | 5.14.21-150400.24.240.2 |
kernel-livepatch-SLE15-SP4_Update_59SUSE:Linux Enterprise Live Patching 15 SP4 From an advisory covering 101 CVEs |
before 1-150400.9.5.1 | 1-150400.9.5.1 |
kernel-defaultSUSE:Linux Enterprise High Availability Extension 15 SP4 From an advisory covering 101 CVEs |
before 5.14.21-150400.24.240.2 | 5.14.21-150400.24.240.2 |
kernel-64kbSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 101 CVEs |
before 5.14.21-150400.24.240.2 | 5.14.21-150400.24.240.2 |
kernel-defaultSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 101 CVEs |
before 5.14.21-150400.24.240.2 | 5.14.21-150400.24.240.2 |
kernel-default-baseSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 101 CVEs |
before 5.14.21-150400.24.240.2.150400.24.120.2 | 5.14.21-150400.24.240.2.150400.24.120.2 |
kernel-docsSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 101 CVEs |
before 5.14.21-150400.24.240.1 | 5.14.21-150400.24.240.1 |
kernel-obs-buildSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 101 CVEs |
before 5.14.21-150400.24.240.1 | 5.14.21-150400.24.240.1 |
kernel-sourceSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 101 CVEs |
before 5.14.21-150400.24.240.1 | 5.14.21-150400.24.240.1 |
kernel-symsSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 101 CVEs |
before 5.14.21-150400.24.240.1 | 5.14.21-150400.24.240.1 |
kernel-64kbSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 101 CVEs |
before 5.14.21-150400.24.240.2 | 5.14.21-150400.24.240.2 |
kernel-defaultSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 101 CVEs |
before 5.14.21-150400.24.240.2 | 5.14.21-150400.24.240.2 |
kernel-default-baseSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 101 CVEs |
before 5.14.21-150400.24.240.2.150400.24.120.2 | 5.14.21-150400.24.240.2.150400.24.120.2 |
kernel-docsSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 101 CVEs |
before 5.14.21-150400.24.240.1 | 5.14.21-150400.24.240.1 |
kernel-obs-buildSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 101 CVEs |
before 5.14.21-150400.24.240.1 | 5.14.21-150400.24.240.1 |
kernel-sourceSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 101 CVEs |
before 5.14.21-150400.24.240.1 | 5.14.21-150400.24.240.1 |
kernel-symsSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 101 CVEs |
before 5.14.21-150400.24.240.1 | 5.14.21-150400.24.240.1 |
kernel-64kbSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 101 CVEs |
before 5.14.21-150400.24.240.2 | 5.14.21-150400.24.240.2 |
kernel-defaultSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 101 CVEs |
before 5.14.21-150400.24.240.2 | 5.14.21-150400.24.240.2 |
kernel-default-baseSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 101 CVEs |
before 5.14.21-150400.24.240.2.150400.24.120.2 | 5.14.21-150400.24.240.2.150400.24.120.2 |
kernel-docsSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 101 CVEs |
before 5.14.21-150400.24.240.1 | 5.14.21-150400.24.240.1 |
kernel-obs-buildSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 101 CVEs |
before 5.14.21-150400.24.240.1 | 5.14.21-150400.24.240.1 |
kernel-sourceSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 101 CVEs |
before 5.14.21-150400.24.240.1 | 5.14.21-150400.24.240.1 |
kernel-symsSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 101 CVEs |
before 5.14.21-150400.24.240.1 | 5.14.21-150400.24.240.1 |
kernel-zfcpdumpSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 101 CVEs |
before 5.14.21-150400.24.240.2 | 5.14.21-150400.24.240.2 |
kernel-defaultSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 101 CVEs |
before 5.14.21-150400.24.240.2 | 5.14.21-150400.24.240.2 |
kernel-default-baseSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 101 CVEs |
before 5.14.21-150400.24.240.2.150400.24.120.2 | 5.14.21-150400.24.240.2.150400.24.120.2 |
kernel-docsSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 101 CVEs |
before 5.14.21-150400.24.240.1 | 5.14.21-150400.24.240.1 |
kernel-obs-buildSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 101 CVEs |
before 5.14.21-150400.24.240.1 | 5.14.21-150400.24.240.1 |
kernel-sourceSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 101 CVEs |
before 5.14.21-150400.24.240.1 | 5.14.21-150400.24.240.1 |
kernel-symsSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 101 CVEs |
before 5.14.21-150400.24.240.1 | 5.14.21-150400.24.240.1 |
kernel-rtSUSE:Linux Enterprise Micro 5.5 From an advisory covering 84 CVEs |
before 5.14.21-150500.13.161.1 | 5.14.21-150500.13.161.1 |
kernel-source-rtSUSE:Linux Enterprise Micro 5.5 From an advisory covering 84 CVEs |
before 5.14.21-150500.13.161.1 | 5.14.21-150500.13.161.1 |
kernel-defaultSUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 131 CVEs |
before 6.4.0-150600.23.135.1 | 6.4.0-150600.23.135.1 |
kernel-livepatch-SLE15-SP6_Update_31SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 131 CVEs |
before 1-150600.13.3.4 | 1-150600.13.3.4 |
kernel-defaultSUSE:Linux Enterprise High Availability Extension 15 SP6 From an advisory covering 131 CVEs |
before 6.4.0-150600.23.135.1 | 6.4.0-150600.23.135.1 |
kernel-64kbSUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 131 CVEs |
before 6.4.0-150600.23.135.1 | 6.4.0-150600.23.135.1 |
kernel-defaultSUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 131 CVEs |
before 6.4.0-150600.23.135.1 | 6.4.0-150600.23.135.1 |
kernel-default-baseSUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 131 CVEs |
before 6.4.0-150600.23.135.1.150600.12.62.4 | 6.4.0-150600.23.135.1.150600.12.62.4 |
kernel-docsSUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 131 CVEs |
before 6.4.0-150600.23.135.1 | 6.4.0-150600.23.135.1 |
kernel-obs-buildSUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 131 CVEs |
before 6.4.0-150600.23.135.1 | 6.4.0-150600.23.135.1 |
kernel-sourceSUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 131 CVEs |
before 6.4.0-150600.23.135.1 | 6.4.0-150600.23.135.1 |
kernel-symsSUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 131 CVEs |
before 6.4.0-150600.23.135.1 | 6.4.0-150600.23.135.1 |
kernel-zfcpdumpSUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 131 CVEs |
before 6.4.0-150600.23.135.1 | 6.4.0-150600.23.135.1 |
kernel-defaultSUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 131 CVEs |
before 6.4.0-150600.23.135.1 | 6.4.0-150600.23.135.1 |
kernel-default-baseSUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 131 CVEs |
before 6.4.0-150600.23.135.1.150600.12.62.4 | 6.4.0-150600.23.135.1.150600.12.62.4 |
kernel-docsSUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 131 CVEs |
before 6.4.0-150600.23.135.1 | 6.4.0-150600.23.135.1 |
kernel-obs-buildSUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 131 CVEs |
before 6.4.0-150600.23.135.1 | 6.4.0-150600.23.135.1 |
kernel-sourceSUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 131 CVEs |
before 6.4.0-150600.23.135.1 | 6.4.0-150600.23.135.1 |
kernel-symsSUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 131 CVEs |
before 6.4.0-150600.23.135.1 | 6.4.0-150600.23.135.1 |
kernel-defaultSUSE:Linux Enterprise Micro 5.5 From an advisory covering 84 CVEs |
before 5.14.21-150500.55.189.1 | 5.14.21-150500.55.189.1 |
kernel-default-baseSUSE:Linux Enterprise Micro 5.5 From an advisory covering 84 CVEs |
before 5.14.21-150500.55.189.1.150500.6.87.4 | 5.14.21-150500.55.189.1.150500.6.87.4 |
kernel-sourceSUSE:Linux Enterprise Micro 5.5 From an advisory covering 84 CVEs |
before 5.14.21-150500.55.189.1 | 5.14.21-150500.55.189.1 |
kernel-defaultSUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 84 CVEs |
before 5.14.21-150500.55.189.1 | 5.14.21-150500.55.189.1 |
linuxUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 3.11.0-12.193.12.0-1.33.12.0-2.53.12.0-2.73.12.0-3.8 Show 45 moreShow less3.12.0-3.93.12.0-4.103.12.0-4.123.12.0-5.133.12.0-7.153.13.0-1.163.13.0-2.173.13.0-3.183.13.0-4.193.13.0-5.203.13.0-6.233.13.0-7.253.13.0-7.263.13.0-8.273.13.0-8.283.13.0-10.303.13.0-11.313.13.0-12.323.13.0-13.333.13.0-14.343.13.0-15.353.13.0-16.363.13.0-17.373.13.0-18.383.13.0-19.393.13.0-19.403.13.0-20.423.13.0-21.433.13.0-22.443.13.0-23.453.13.0-24.463.13.0-24.473.13.0-27.503.13.0-29.533.13.0-30.543.13.0-30.553.13.0-32.573.13.0-33.583.13.0-34.603.13.0-35.623.13.0-36.633.13.0-37.643.13.0-39.663.13.0-40.693.13.0-41.70 |
None known |
linux-awsUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9 Show 45 moreShow less4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80 |
None known |
linux-azureUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2 Show 45 moreShow less4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1 |
None known |
linux-lts-xenialUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1 Show 45 moreShow less4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1 |
None known |
linuxUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11 Show 45 moreShow less4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96 |
None known |
linux-awsUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18 Show 45 moreShow less4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93 |
None known |
linux-aws-hweUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1 Show 45 moreShow less4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1 |
None known |
linux-azureUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15 Show 45 moreShow less4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71 |
None known |
linux-gcpUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9 Show 45 moreShow less4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1 |
None known |
linux-hweUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1 Show 45 moreShow less4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1 |
None known |
linux-hwe-edgeUbuntu:16.04:LTS |
All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1 |
None known |
linux-kvmUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15 Show 45 moreShow less4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.674.4.0-1062.694.4.0-1063.704.4.0-1064.714.4.0-1065.724.4.0-1066.734.4.0-1068.754.4.0-1069.764.4.0-1070.774.4.0-1071.784.4.0-1075.824.4.0-1076.834.4.0-1077.84 |
None known |
linux-oracleUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1 Show 45 moreShow less4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1 |
None known |
linux-fipsUbuntu:Pro:FIPS-updates:16.04:LTS |
All versions, plus listed versions 4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13 Show 45 moreShow less4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78 |
None known |
linux-fipsUbuntu:Pro:FIPS:16.04:LTS |
All versions, plus listed versions 4.4.0-1001.14.4.0-1002.2 |
None known |
linuxUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11 Show 45 moreShow less4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107 |
None known |
linux-awsUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7 Show 45 moreShow less4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87 |
None known |
linux-aws-5.0Ubuntu:18.04:LTS |
All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30 |
None known |
linux-aws-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37 |
None known |
linux-aws-5.4Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2 |
None known |
linux-azureUbuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38 |
None known |
linux-azure-4.15Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102 Show 45 moreShow less4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176 |
None known |
linux-azure-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36 |
None known |
linux-azure-5.4Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1 Show 45 moreShow less5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1 |
None known |
linux-azure-edgeUbuntu:18.04:LTS |
All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2 |
None known |
linux-gcpUbuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35 |
None known |
linux-gcp-4.15Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92 Show 45 moreShow less4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161 |
None known |
linux-gcp-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1 |
None known |
linux-gcp-5.4Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2 |
None known |
linux-gke-4.15Ubuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84 |
None known |
linux-gke-5.4Ubuntu:18.04:LTS |
All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1 |
None known |
linux-gkeop-5.4Ubuntu:18.04:LTS |
All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1 |
None known |
linux-hweUbuntu:18.04:LTS |
All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72 |
None known |
linux-hwe-5.4Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2 Show 45 moreShow less5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1 |
None known |
linux-hwe-edgeUbuntu:18.04:LTS |
All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2 |
None known |
linux-ibm-5.4Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1 Show 45 moreShow less5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1 |
None known |
linux-kvmUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8 Show 45 moreShow less4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83 |
None known |
linux-oemUbuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114 |
None known |
linux-oracleUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13 Show 45 moreShow less4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88 |
None known |
linux-oracle-5.0Ubuntu:18.04:LTS |
All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19 |
None known |
linux-oracle-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1 |
None known |
linux-oracle-5.4Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1 |
None known |
linux-raspi-5.4Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1 Show 45 moreShow less5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1 |
None known |
linux-aws-fipsUbuntu:Pro:FIPS-updates:18.04:LTS |
All versions, plus listed versions 4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24 Show 45 moreShow less4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93 |
None known |
linux-azure-fipsUbuntu:Pro:FIPS-updates:18.04:LTS |
All versions, plus listed versions 4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10 Show 45 moreShow less4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80 |
None known |
linux-fipsUbuntu:Pro:FIPS-updates:18.04:LTS |
All versions, plus listed versions 4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42 Show 45 moreShow less4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110 |
None known |
linux-gcp-fipsUbuntu:Pro:FIPS-updates:18.04:LTS |
All versions, plus listed versions 4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21 Show 45 moreShow less4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.794.15.0-2075.804.15.0-2076.814.15.0-2077.83 |
None known |
linux-aws-fipsUbuntu:Pro:FIPS:18.04:LTS |
All versions, plus listed versions 4.15.0-2000.4 |
None known |
linux-azure-fipsUbuntu:Pro:FIPS:18.04:LTS |
All versions, plus listed versions 4.15.0-1002.2 |
None known |
linux-fipsUbuntu:Pro:FIPS:18.04:LTS |
All versions, plus listed versions 4.15.0-1011.12 |
None known |
linux-gcp-fipsUbuntu:Pro:FIPS:18.04:LTS |
All versions, plus listed versions 4.15.0-1001.1 |
None known |
linuxUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25 Show 45 moreShow less5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110 |
None known |
linux-awsUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5 Show 45 moreShow less5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78 |
None known |
linux-aws-5.11Ubuntu:20.04:LTS |
All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1 |
None known |
linux-aws-5.13Ubuntu:20.04:LTS |
All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1 |
None known |
linux-aws-5.15Ubuntu:Pro:20.04:LTS |
before 5.15.0-1117.124~20.04.1, plus listed versions 5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1 Show 45 moreShow less5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1 |
5.15.0-1117.124~20.04.1 |
linux-aws-5.8Ubuntu:20.04:LTS |
All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1 |
None known |
linux-azureUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8 Show 45 moreShow less5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87 |
None known |
linux-azure-5.11Ubuntu:20.04:LTS |
All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2 |
None known |
linux-azure-5.13Ubuntu:20.04:LTS |
All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1 |
None known |
linux-azure-5.15Ubuntu:Pro:20.04:LTS |
before 5.15.0-1123.132~20.04.1, plus listed versions 5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1 Show 45 moreShow less5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1 |
5.15.0-1123.132~20.04.1 |
linux-azure-5.8Ubuntu:20.04:LTS |
All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1 |
None known |
linux-azure-fdeUbuntu:20.04:LTS |
All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1 |
None known |
linux-azure-fde-5.15Ubuntu:Pro:20.04:LTS |
before 5.15.0-1122.131~20.04.1, plus listed versions 5.15.0-1019.24~20.04.1.15.15.0-1020.25~20.04.1.15.15.0-1021.26~20.04.1.15.15.0-1029.36~20.04.1.15.15.0-1030.37~20.04.1.1 Show 45 moreShow less5.15.0-1031.38~20.04.1.15.15.0-1033.40~20.04.1.15.15.0-1034.41~20.04.1.25.15.0-1035.42~20.04.1.15.15.0-1036.43~20.04.1.15.15.0-1037.44~20.04.1.15.15.0-1038.45~20.04.1.15.15.0-1039.46~20.04.1.15.15.0-1040.47~20.04.1.15.15.0-1041.48~20.04.1.15.15.0-1042.49~20.04.1.15.15.0-1043.50~20.04.1.15.15.0-1046.53~20.04.1.15.15.0-1047.54~20.04.1.15.15.0-1049.56~20.04.1.15.15.0-1050.57~20.04.1.15.15.0-1051.59~20.04.1.15.15.0-1052.60~20.04.1.15.15.0-1053.61~20.04.1.15.15.0-1054.62~20.04.1.15.15.0-1056.64~20.04.1.15.15.0-1057.65~20.04.1.15.15.0-1058.66~20.04.2.15.15.0-1059.67~20.04.1.15.15.0-1060.69~20.04.1.15.15.0-1061.70~20.04.1.15.15.0-1063.72~20.04.1.15.15.0-1064.73~20.04.1.15.15.0-1065.74~20.04.1.15.15.0-1067.76~20.04.1.15.15.0-1068.77~20.04.1.15.15.0-1070.79~20.04.1.15.15.0-1071.80~20.04.1.15.15.0-1072.81~20.04.1.15.15.0-1073.82~20.04.1.15.15.0-1074.83~20.04.1.15.15.0-1076.85~20.04.1.15.15.0-1078.87~20.04.1.15.15.0-1081.90~20.04.1.15.15.0-1082.91~20.04.1.15.15.0-1086.95~20.04.1.15.15.0-1087.96~20.04.1.15.15.0-1088.97~20.04.1.15.15.0-1089.98~20.04.1.15.15.0-1091.100~20.04.1.1 |
5.15.0-1122.131~20.04.1 |
linux-bluefieldUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 5.4.0-1007.105.4.0-1011.145.4.0-1012.155.4.0-1013.165.4.0-1016.19 Show 45 moreShow less5.4.0-1019.225.4.0-1020.235.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1030.335.4.0-1032.355.4.0-1035.385.4.0-1036.395.4.0-1040.445.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1049.555.4.0-1050.565.4.0-1054.605.4.0-1058.645.4.0-1059.655.4.0-1060.665.4.0-1062.685.4.0-1064.705.4.0-1065.715.4.0-1066.725.4.0-1068.745.4.0-1070.765.4.0-1071.775.4.0-1072.785.4.0-1073.795.4.0-1074.805.4.0-1075.815.4.0-1076.825.4.0-1077.835.4.0-1078.845.4.0-1079.855.4.0-1080.875.4.0-1081.885.4.0-1082.895.4.0-1083.905.4.0-1084.915.4.0-1085.92 |
None known |
linux-gcpUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7 Show 45 moreShow less5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1033.355.4.0-1034.375.4.0-1036.395.4.0-1037.405.4.0-1038.415.4.0-1040.435.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1044.475.4.0-1046.495.4.0-1049.535.4.0-1051.555.4.0-1052.565.4.0-1053.575.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1060.645.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1065.695.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1072.775.4.0-1073.785.4.0-1075.80 |
None known |
linux-gcp-5.11Ubuntu:20.04:LTS |
All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3 |
None known |
linux-gcp-5.13Ubuntu:20.04:LTS |
All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1 |
None known |
linux-gcp-5.15Ubuntu:Pro:20.04:LTS |
before 5.15.0-1118.128~20.04.1, plus listed versions 5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2 Show 45 moreShow less5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.15.15.0-1065.73~20.04.15.15.0-1066.74~20.04.15.15.0-1067.75~20.04.15.15.0-1068.76~20.04.15.15.0-1069.77~20.04.15.15.0-1070.78~20.04.15.15.0-1071.79~20.04.15.15.0-1072.80~20.04.15.15.0-1073.81~20.04.15.15.0-1074.83~20.04.1 |
5.15.0-1118.128~20.04.1 |
linux-gcp-5.8Ubuntu:20.04:LTS |
All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41 |
None known |
linux-gkeUbuntu:20.04:LTS |
All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111 |
None known |
linux-gke-5.15Ubuntu:20.04:LTS |
All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1 |
None known |
linux-gkeopUbuntu:20.04:LTS |
All versions, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77 |
None known |
linux-gkeop-5.15Ubuntu:20.04:LTS |
All versions, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 40 moreShow less5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1 |
None known |
linux-hwe-5.11Ubuntu:20.04:LTS |
All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1 |
None known |
linux-hwe-5.13Ubuntu:20.04:LTS |
All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1 |
None known |
linux-hwe-5.15Ubuntu:Pro:20.04:LTS |
before 5.15.0-198.208~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 45 moreShow less5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1 |
5.15.0-198.208~20.04.1 |
linux-hwe-5.8Ubuntu:20.04:LTS |
All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1 |
None known |
linux-ibmUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 5.4.0-1003.45.4.0-1004.55.4.0-1005.65.4.0-1006.75.4.0-1007.8 Show 45 moreShow less5.4.0-1008.95.4.0-1010.115.4.0-1012.135.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1017.195.4.0-1018.205.4.0-1019.215.4.0-1020.225.4.0-1021.235.4.0-1023.255.4.0-1026.295.4.0-1028.325.4.0-1029.335.4.0-1031.355.4.0-1032.365.4.0-1033.375.4.0-1034.385.4.0-1036.415.4.0-1037.425.4.0-1040.455.4.0-1041.465.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1048.535.4.0-1049.545.4.0-1050.555.4.0-1051.565.4.0-1052.575.4.0-1053.585.4.0-1054.595.4.0-1056.615.4.0-1057.625.4.0-1058.635.4.0-1059.645.4.0-1060.655.4.0-1061.665.4.0-1063.685.4.0-1064.695.4.0-1065.705.4.0-1066.71 |
None known |
linux-ibm-5.15Ubuntu:Pro:20.04:LTS |
before 5.15.0-1111.115~20.04.1, plus listed versions 5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1 Show 45 moreShow less5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.15.15.0-1057.60~20.04.15.15.0-1058.61~20.04.15.15.0-1059.62~20.04.15.15.0-1060.63~20.04.15.15.0-1061.64~20.04.15.15.0-1062.65~20.04.15.15.0-1063.66~20.04.15.15.0-1064.67~20.04.15.15.0-1065.68~20.04.15.15.0-1066.69~20.04.15.15.0-1067.70~20.04.15.15.0-1068.71~20.04.15.15.0-1069.72~20.04.15.15.0-1074.77~20.04.15.15.0-1075.78~20.04.15.15.0-1076.79~20.04.15.15.0-1078.81~20.04.15.15.0-1079.82~20.04.15.15.0-1080.83~20.04.15.15.0-1081.84~20.04.15.15.0-1083.86~20.04.15.15.0-1085.88~20.04.15.15.0-1086.89~20.04.15.15.0-1087.90~20.04.15.15.0-1089.92~20.04.15.15.0-1090.93~20.04.15.15.0-1091.94~20.04.15.15.0-1092.95~20.04.15.15.0-1093.96~20.04.15.15.0-1094.97~20.04.1 |
5.15.0-1111.115~20.04.1 |
linux-intel-5.13Ubuntu:20.04:LTS |
All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19 |
None known |
linux-intel-iotg-5.15Ubuntu:Pro:20.04:LTS |
before 5.15.0-1112.118~20.04.1, plus listed versions 5.15.0-1003.5~20.04.15.15.0-1008.11~20.04.15.15.0-1010.14~20.04.15.15.0-1015.20~20.04.25.15.0-1016.21~20.04.1 Show 45 moreShow less5.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1021.26~20.04.15.15.0-1023.28~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1030.35~20.04.15.15.0-1031.36~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1040.46~20.04.15.15.0-1043.49~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1060.66~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.25.15.0-1074.80~20.04.15.15.0-1077.83~20.04.15.15.0-1078.84~20.04.15.15.0-1079.85~20.04.15.15.0-1083.89~20.04.15.15.0-1084.90~20.04.15.15.0-1085.91~20.04.15.15.0-1086.92~20.04.1 |
5.15.0-1112.118~20.04.1 |
linux-iotUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 5.4.0-1001.35.4.0-1004.65.4.0-1005.75.4.0-1006.85.4.0-1009.11 Show 45 moreShow less5.4.0-1010.125.4.0-1011.135.4.0-1012.145.4.0-1013.155.4.0-1014.165.4.0-1017.185.4.0-1018.195.4.0-1019.205.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1035.365.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1041.425.4.0-1042.435.4.0-1043.445.4.0-1044.455.4.0-1045.465.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1060.635.4.0-1061.645.4.0-1062.65 |
None known |
linux-kvmUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1004.45.4.0-1006.6 Show 45 moreShow less5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1023.235.4.0-1024.245.4.0-1026.275.4.0-1028.295.4.0-1030.315.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1041.425.4.0-1044.465.4.0-1045.475.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1050.525.4.0-1051.535.4.0-1053.555.4.0-1054.565.4.0-1055.575.4.0-1056.585.4.0-1058.615.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1068.725.4.0-1070.755.4.0-1071.765.4.0-1073.78 |
None known |
linux-lowlatency-hwe-5.15Ubuntu:Pro:20.04:LTS |
before 5.15.0-195.205~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 45 moreShow less5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.88~20.04.15.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.95~20.04.15.15.0-87.96~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-110.120~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1 |
5.15.0-195.205~20.04.1 |
linux-nvidia-tegra-5.15Ubuntu:Pro:20.04:LTS |
before 5.15.0-1070.72~20.04.1, plus listed versions 5.15.0-1009.9~20.04.15.15.0-1010.10~20.04.15.15.0-1012.12~20.04.15.15.0-1014.14~20.04.15.15.0-1015.15~20.04.1 Show 36 moreShow less5.15.0-1016.16~20.04.15.15.0-1017.17~20.04.15.15.0-1018.18~20.04.15.15.0-1019.19~20.04.15.15.0-1020.20~20.04.15.15.0-1022.22~20.04.15.15.0-1025.25~20.04.15.15.0-1027.27~20.04.15.15.0-1030.30~20.04.15.15.0-1032.32~20.04.15.15.0-1039.39~20.04.15.15.0-1040.40~20.04.15.15.0-1041.41~20.04.15.15.0-1042.42~20.04.15.15.0-1043.43~20.04.15.15.0-1044.44~20.04.15.15.0-1045.45~20.04.15.15.0-1046.46~20.04.15.15.0-1047.47~20.04.15.15.0-1048.48~20.04.15.15.0-1049.49~20.04.15.15.0-1050.50~20.04.15.15.0-1051.51~20.04.15.15.0-1052.52~20.04.25.15.0-1053.53~20.04.15.15.0-1055.55~20.04.15.15.0-1057.57~20.04.15.15.0-1058.58~20.04.15.15.0-1060.60~20.04.15.15.0-1061.61~20.04.15.15.0-1063.63~20.04.15.15.0-1064.66~20.04.15.15.0-1065.67~20.04.15.15.0-1066.68~20.04.15.15.0-1067.69~20.04.15.15.0-1068.70~20.04.1 |
5.15.0-1070.72~20.04.1 |
linux-oem-5.10Ubuntu:20.04:LTS |
All versions, plus listed versions 5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17 Show 21 moreShow less5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61 |
None known |
linux-oem-5.13Ubuntu:20.04:LTS |
All versions, plus listed versions 5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21 Show 7 moreShow less5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36 |
None known |
linux-oem-5.14Ubuntu:20.04:LTS |
All versions, plus listed versions 5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10 Show 30 moreShow less5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67 |
None known |
linux-oem-5.6Ubuntu:20.04:LTS |
All versions, plus listed versions 5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13 Show 24 moreShow less5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60 |
None known |
linux-oracleUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 5.3.0-1002.25.3.0-1007.85.3.0-1008.95.4.0-1005.55.4.0-1007.7 Show 45 moreShow less5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1034.365.4.0-1035.385.4.0-1037.405.4.0-1038.415.4.0-1039.425.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1045.495.4.0-1046.505.4.0-1048.525.4.0-1049.535.4.0-1052.565.4.0-1053.575.4.0-1054.585.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1061.655.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1066.715.4.0-1067.725.4.0-1069.755.4.0-1070.765.4.0-1071.775.4.0-1073.795.4.0-1076.83 |
None known |
linux-oracle-5.11Ubuntu:20.04:LTS |
All versions, plus listed versions 5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1 |
None known |
linux-oracle-5.13Ubuntu:20.04:LTS |
All versions, plus listed versions 5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1 Show 7 moreShow less5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1 |
None known |
linux-oracle-5.15Ubuntu:Pro:20.04:LTS |
before 5.15.0-1114.120~20.04.1, plus listed versions 5.15.0-1007.9~20.04.15.15.0-1013.17~20.04.15.15.0-1016.20~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.1 Show 45 moreShow less5.15.0-1019.24~20.04.15.15.0-1021.27~20.04.15.15.0-1022.28~20.04.15.15.0-1025.31~20.04.25.15.0-1027.33~20.04.15.15.0-1029.35~20.04.15.15.0-1030.36~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1041.47~20.04.15.15.0-1042.48~20.04.15.15.0-1044.50~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1047.53~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1053.59~20.04.15.15.0-1054.60~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1074.80~20.04.1 |
5.15.0-1114.120~20.04.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, aliases, references | OSV | |
| affected | OSV | |
| affected | ||
| affected, aliases, references | OSV | |
| affected, aliases, references | OSV | |
| affected, facts, references | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-68160 is a critical vulnerability (CVSS 9.8) in Linux, published August 10, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.77%, the 55th percentile. Fixed in linux-lts 6.1.189-r0.
References
git.kernel.org/stable/c/f913192fc782288e060dafc329b2346934be34cc
Show 194 moreShow less
nvd.nist.gov/vuln/detail/CVE-2026-68160
github.com/advisories/GHSA-prf2-r76g-87fc
docs.bell-sw.com/security/cves/CVE-2026-68160
errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1787935638.html
security-tracker.debian.org/tracker/CVE-2026-68160
advisories.mageia.org/MGASA-2026-0336.html
bugs.mageia.org/show_bug.cgi?id=36083
cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.18.40
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2026-3531
suse.com/support/update/announcement/2026/suse-su-202623477-1
bugzilla.suse.com/1230238
ubuntu.com/security/CVE-2026-68160
cve.org/CVERecord?id=CVE-2026-68160
This page doesn't list everything
Left out here: 461 package rows, 3,174 versions, 5,283 references and the rest of 41 source descriptions. The JSON record has them.