Every CVE Search/ Get API key

CVE-2026-74283

tipc: require net admin for TIPCv2 netlink mutators

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

tipc: require net admin for TIPCv2 netlink mutators

TIPCv2 registers mutating generic-netlink operations without admin permission flags. Generic netlink only checks CAP_NET_ADMIN when an operation sets GENL_ADMIN_PERM or GENL_UNS_ADMIN_PERM, so a local unprivileged process can currently change TIPC state through commands such as TIPC_NL_NET_SET, TIPC_NL_KEY_SET, TIPC_NL_KEY_FLUSH, and bearer enable/disable.

The legacy TIPC netlink API already checks netlink_net_capable(..., CAP_NET_ADMIN) for administrative commands. Give the TIPCv2 mutators the equivalent generic-netlink gate. Use GENL_UNS_ADMIN_PERM, which maps to the same namespace-aware CAP_NET_ADMIN check that netlink_net_capable() performs, so the behaviour matches the legacy path and keeps working for CAP_NET_ADMIN holders in a non-initial user namespace (containers).

A QEMU/KASAN repro run as uid/gid 65534 with zero effective capabilities previously succeeded in changing the network id and node identity, setting and flushing key material, and enabling/disabling a UDP bearer. With this patch applied the same operations fail with -EPERM.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.17%Unchanged since Aug 15, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.8

tipc: require net admin for TIPCv2 netlink mutators

In the Linux kernel, the following vulnerability has been resolved:

tipc: require net admin for TIPCv2 netlink mutators

TIPCv2 registers mutating generic-netlink operations without admin permission flags. Generic netlink only checks CAP_NET_ADMIN when an operation sets GENL_ADMIN_PERM or GENL_UNS_ADMIN_PERM, so a local unprivileged process can currently change TIPC state through commands such as TIPC_NL_NET_SET, TIPC_NL_KEY_SET, TIPC_NL_KEY_FLUSH, and bearer enable/disable.

The legacy TIPC netlink API already checks netlink_net_capable(..., CAP_NET_ADMIN) for administrative commands. Give the TIPCv2 mutators the equivalent generic-netlink gate. Use GENL_UNS_ADMIN_PERM, which maps to the same namespace-aware CAP_NET_ADMIN check that netlink_net_capable() performs, so the behaviour matches the legacy path and keeps working for CAP_NET_ADMIN holders in a non-initial user namespace (containers).

A QEMU/KASAN repro run as uid/gid 65534 with zero effective capabilities previously succeeded in changing the network id and node identity, setting and flushing key material, and enabling/disabling a UDP bearer. With this patch applied the same operations fail with -EPERM.

Record
CVE-2026-74283
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
EUVDEUVD-2026-59430 7.8

In the Linux kernel, the following vulnerability has been resolved:

tipc: require net admin for TIPCv2 netlink mutators

TIPCv2 registers mutating generic-netlink operations without admin permission flags. Generic netlink only checks CAP_NET_ADMIN when an operation sets GENL_ADMIN_PERM or GENL_UNS_ADMIN_PERM, so a local unprivileged process can currently change TIPC state through commands such as TIPC_NL_NET_SET, TIPC_NL_KEY_SET, TIPC_NL_KEY_FLUSH, and bearer enable/disable.

The legacy TIPC netlink API already checks netlink_net_capable(..., CAP_NET_ADMIN) for administrative commands. Give the TIPCv2 mutators the equivalent generic-netlink gate. Use GENL_UNS_ADMIN_PERM, which maps to the same namespace-aware CAP_NET_ADMIN check that netlink_net_capable() performs, so the behaviour matches the legacy path and keeps working for CAP_NET_ADMIN holders in a non-initial user namespace (containers).

A QEMU/KASAN repro run as uid/gid 65534 with zero effective capabilities previously succeeded in changing the network id and node identity, setting and flushing key material, and enabling/disabling a UDP bearer. With this patch applied the same operations fail with -EPERM.

Record
EUVD-2026-59430
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-5jpm-p694-hhf9 7.8

In the Linux kernel, the following vulnerability has been resolved: tipc: require net admin for...

In the Linux kernel, the following vulnerability has been resolved:

tipc: require net admin for TIPCv2 netlink mutators

TIPCv2 registers mutating generic-netlink operations without admin permission flags. Generic netlink only checks CAP_NET_ADMIN when an operation sets GENL_ADMIN_PERM or GENL_UNS_ADMIN_PERM, so a local unprivileged process can currently change TIPC state through commands such as TIPC_NL_NET_SET, TIPC_NL_KEY_SET, TIPC_NL_KEY_FLUSH, and bearer enable/disable.

The legacy TIPC netlink API already checks netlink_net_capable(..., CAP_NET_ADMIN) for administrative commands. Give the TIPCv2 mutators the equivalent generic-netlink gate. Use GENL_UNS_ADMIN_PERM, which maps to the same namespace-aware CAP_NET_ADMIN check that netlink_net_capable() performs, so the behaviour matches the legacy path and keeps working for CAP_NET_ADMIN holders in a non-initial user namespace (containers).

A QEMU/KASAN repro run as uid/gid 65534 with zero effective capabilities previously succeeded in changing the network id and node identity, setting and flushing key material, and enabling/disabling a UDP bearer. With this patch applied the same operations fail with -EPERM.

Record
GHSA-5jpm-p694-hhf9
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

tipc: require net admin for TIPCv2 netlink mutators

TIPCv2 registers mutating generic-netlink operations without admin permission flags. Generic netlink only checks CAP_NET_ADMIN when an operation sets GENL_ADMIN_PERM or GENL_UNS_ADMIN_PERM, so a local unprivileged process can currently change TIPC state through commands such as TIPC_NL_NET_SET, TIPC_NL_KEY_SET, TIPC_NL_KEY_FLUSH, and bearer enable/disable.

The legacy TIPC netlink API already checks netlink_net_capable(..., CAP_NET_ADMIN) for administrative commands. Give the TIPCv2 mutators the equivalent generic-netlink gate. Use GENL_UNS_ADMIN_PERM, which maps to the same namespace-aware CAP_NET_ADMIN check that netlink_net_capable() performs, so the behaviour matches the legacy path and keeps working for CAP_NET_ADMIN holders in a non-initial user namespace (containers).

A QEMU/KASAN repro run as uid/gid 65534 with zero effective capabilities previously succeeded in changing the network id and node identity, setting and flushing key material, and enabling/disabling a UDP bearer. With this patch applied the same operations fail with -EPERM.

Record
CVE-2026-74283
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVBELL-CVE-2026-74283 7.8
Record
BELL-CVE-2026-74283
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 7.8

tipc: require net admin for TIPCv2 netlink mutators

In the Linux kernel, the following vulnerability has been resolved:

tipc: require net admin for TIPCv2 netlink mutators

TIPCv2 registers mutating generic-netlink operations without admin permission flags. Generic netlink only checks CAP_NET_ADMIN when an operation sets GENL_ADMIN_PERM or GENL_UNS_ADMIN_PERM, so a local unprivileged process can currently change TIPC state through commands such as TIPC_NL_NET_SET, TIPC_NL_KEY_SET, TIPC_NL_KEY_FLUSH, and bearer enable/disable.

The legacy TIPC netlink API already checks netlink_net_capable(..., CAP_NET_ADMIN) for administrative commands. Give the TIPCv2 mutators the equivalent generic-netlink gate. Use GENL_UNS_ADMIN_PERM, which maps to the same namespace-aware CAP_NET_ADMIN check that netlink_net_capable() performs, so the behaviour matches the legacy path and keeps working for CAP_NET_ADMIN holders in a non-initial user namespace (containers).

A QEMU/KASAN repro run as uid/gid 65534 with zero effective capabilities previously succeeded in changing the network id and node identity, setting and flushing key material, and enabling/disabling a UDP bearer. With this patch applied the same operations fail with -EPERM.

Record
CVE-2026-74283
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
Show 48 moreShow less
OSVDEBIAN-CVE-2026-74283 7.8

In the Linux kernel, the following vulnerability has been resolved: tipc: require net admin for TIPCv2 netlink mutators TIPCv2 registers mutating generic-netlink operations without admin permission flags. Generic netlink only checks CAP_NET_ADMIN when an operation sets GENL_ADMIN_PERM or GENL_UNS_ADMIN_PERM, so a local unprivileged process can currently change TIPC state through commands such as TIPC_NL_NET_SET, TIPC_NL_KEY_SET, TIPC_NL_KEY_FLUSH, and bearer enable/disable. The legacy TIPC netlink API already checks netlink_net_capable(..., CAP_NET_ADMIN) for administrative commands. Give the TIPCv2 mutators the equivalent generic-netlink gate. Use GENL_UNS_ADMIN_PERM, which maps to the same namespace-aware CAP_NET_ADMIN check that netlink_net_capable() performs, so the behaviour matches the legacy path and keeps working for CAP_NET_ADMIN holders in a non-initial user namespace (containers). A QEMU/KASAN repro run as uid/gid 65534 with zero effective capabilities previously succeeded in changing the network id and node identity, setting and flushing key material, and enabling/disabling a UDP bearer. With this patch applied the same operations fail with -EPERM.

Record
DEBIAN-CVE-2026-74283
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-3703 9.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

ASoC: qcom: Fix sc7280 lpass potential buffer overflow

Case values introduced in commit 5f78e1fb7a3e ("ASoC: qcom: Add driver support for audioreach solution") cause out of bounds access in arrays of sc7280 driver data (e.g. in case of RX_CODEC_DMA_RX_0 in sc7280_snd_hw_params()).

Redefine LPASS_MAX_PORTS to consider the maximum possible port id for q6dsp as sc7280 driver utilizes some of those values.

Found by Linux Verification Center (linuxtesting.org) with SVACE.(CVE-2025-37979)

In the Linux kernel, the following vulnerability has been resolved:

net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization

Syzbot reported shift-out-of-bounds exception on MDIO bus initialization.

The PHY address should be masked to 5 bits (0-31). Without this mask, invalid PHY addresses could be used, potentially causing issues with MDIO bus operations.

Fix this by masking the PHY address with 0x1f (31 decimal) to ensure it stays within the valid range.(CVE-2025-38736)

In the Linux kernel, the following vulnerability has been resolved:

crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl

When page reassignment was added to af_alg_pull_tsgl the original loop wasn't updated so it may try to reassign one more page than necessary.

Add the check to the reassignment so that this does not happen.

Also update the comment which still refers to the obsolete offset argument.(CVE-2026-43078)

In the Linux kernel, the following vulnerability has been resolved:

crypto: algif_aead - snapshot IV for async AEAD requests

AF_ALG AEAD AIO requests currently use the socket-wide IV buffer during request processing. For async requests, later socket activity can update that shared state before the original request has fully completed, which can lead to inconsistent IV handling.

Snapshot the IV into per-request storage when preparing the AEAD request, so in-flight operations no longer depend on mutable socket state.(CVE-2026-46028)

In the Linux kernel, the following vulnerability has been resolved:

xfrm: esp: restore combined single-frag length gate

The ESP out-of-place fast path appends the trailer in esp_output_head() before esp_output_tail() allocates the destination page frag. The head-side gate currently checks skb->data_len and tailen separately, but the tail code allocates a single destination frag from the combined post-trailer skb->data_len.

Reject the page-frag fast path when the combined aligned length exceeds a page. Otherwise skb_page_frag_refill() may fall back to a single page while the destination sg still spans the combined skb->data_len.

Restore this combined-length page gate for both IPv4 and IPv6.(CVE-2026-63912)

In the Linux kernel, the following vulnerability has been resolved: ipvs: reload ip header after head reallocation. __ip_vs_get_out_rt() calls skb_ensure_writable() which may reallocate skb->head, causing the previously obtained IP header pointer to become a dangling pointer, leading to a use-after-free vulnerability.(CVE-2026-68476)

In the Linux kernel, the following vulnerability has been resolved:

ipvs: fix more places with wrong ipv6 transport offsets

Sashiko reports for more incorrect IPv6 transport offsets.

The app code for TCP was assuming IPv4 network header even after the ipvsh argument was provided. This can cause problems with apps over IPv6. As for the only official app in the kernel tree (FTP) this problem is harmless because we use Netfilter to mangle the FTP ports and we do not adjust the TCP seq numbers.

Also, provide correct offset of the ICMPV6 header in ip_vs_out_icmp_v6() for correct checksum checks when the IPv6 packet has extension headers.(CVE-2026-68477)

In the Linux kernel, the following vulnerability has been resolved:

ipvs: use parsed transport offset in SCTP state lookup …

Record
OESA-2026-3703
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-3704 9.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

net: hns3: add VLAN id validation before using

Currently, the VLAN id may be used without validation when receive a VLAN configuration mailbox from VF. The length of vlan_del_fail_bmap is BITS_TO_LONGS(VLAN_N_VID). It may cause out-of-bounds memory access once the VLAN id is bigger than or equal to VLAN_N_VID.

Therefore, VLAN id needs to be checked to ensure it is within the range of VLAN_N_VID.(CVE-2025-71112)

In the Linux kernel, the following vulnerability has been resolved:

ext4: fix string copying in parse_apply_sb_mount_options()

strscpy_pad() can't be used to copy a non-NUL-term string into a NUL-term string of possibly bigger size. Commit 0efc5990bca5 ("string.h: Introduce memtostr() and memtostr_pad()") provides additional information in that regard. So if this happens, the following warning is observed:

strnlen: detected buffer overflow: 65 byte read of buffer size 64 WARNING: CPU: 0 PID: 28655 at lib/string_helpers.c:1032 __fortify_report+0x96/0xc0 lib/string_helpers.c:1032 Modules linked in: CPU: 0 UID: 0 PID: 28655 Comm: syz-executor.3 Not tainted 6.12.54-syzkaller-00144-g5f0270f1ba00 #0 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:__fortify_report+0x96/0xc0 lib/string_helpers.c:1032 Call Trace: <TASK> __fortify_panic+0x1f/0x30 lib/string_helpers.c:1039 strnlen include/linux/fortify-string.h:235 [inline] sized_strscpy include/linux/fortify-string.h:309 [inline] parse_apply_sb_mount_options fs/ext4/super.c:2504 [inline] __ext4_fill_super fs/ext4/super.c:5261 [inline] ext4_fill_super+0x3c35/0xad00 fs/ext4/super.c:5706 get_tree_bdev_flags+0x387/0x620 fs/super.c:1636 vfs_get_tree+0x93/0x380 fs/super.c:1814 do_new_mount fs/namespace.c:3553 [inline] path_mount+0x6ae/0x1f70 fs/namespace.c:3880 do_mount fs/namespace.c:3893 [inline] __do_sys_mount fs/namespace.c:4103 [inline] __se_sys_mount fs/namespace.c:4080 [inline] __x64_sys_mount+0x280/0x300 fs/namespace.c:4080 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x64/0x140 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x76/0x7e

Since userspace is expected to provide s_mount_opts field to be at most 63 characters long with the ending byte being NUL-term, use a 64-byte buffer which matches the size of s_mount_opts, so that strscpy_pad() does its job properly. Return with error if the user still managed to provide a non-NUL-term string here.

Found by Linux Verification Center (linuxtesting.org) with Syzkaller.(CVE-2025-71123)

In the Linux kernel, the following vulnerability has been resolved:

RDMA/umad: Reject negative data_len in ib_umad_write

ib_umad_write computes data_len from user-controlled count and the MAD header sizes. With a mismatched user MAD header size and RMPP header length, data_len can become negative and reach ib_create_send_mad(). This can make the padding calculation exceed the segment size and trigger an out-of-bounds memset in alloc_send_rmpp_list().

Add an explicit check to reject negative data_len before creating the send buffer.

KASAN splat: [ 211.363464] BUG: KASAN: slab-out-of-bounds in ib_create_send_mad+0xa01/0x11b0 [ 211.364077] Write of size 220 at addr ffff88800c3fa1f8 by task spray_thread/102 [ 211.365867] ib_create_send_mad+0xa01/0x11b0 [ 211.365887] ib_umad_write+0x853/0x1c80(CVE-2026-23243)

In the Linux kernel, the following vulnerability has been resolved:

nvme: fix memory allocation in nvme_pr_read_keys()

nvme_pr_read_keys() takes num_keys from userspace and uses it to calculate the allocation size for rse via struct_size(). The upper limit is PR_KEYS_MAX (64K).

A malicious or buggy userspace can pass a large num_keys value that results in a 4MB allocation attempt at most, causing a warning in the page allocator when the order exceeds…

Record
OESA-2026-3704
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:93412 9.8

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: sctp: stream: fully roll back denied add-stream state (CVE-2026-52929)

  • kernel: ipv6: sit: reload inner IPv6 header after GSO offloads (CVE-2026-53228)

  • kernel: ipvs: clear the svc scheduler ptr early on edit (CVE-2026-53270)

  • kernel: spi: fsl-lpspi: terminate the RX channel on TX prepare failure path (CVE-2026-64303)

  • kernel: mptcp: pm: userspace: fix use-after-free in get_local_id (CVE-2026-68169)

  • kernel: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (CVE-2026-72083)

  • kernel: tipc: require net admin for TIPCv2 netlink mutators (CVE-2026-74283)

  • kernel: Bluetooth: mgmt: fix UAF in pair command cancellation (CVE-2026-74510)

  • kernel: packet: use consistent hard_header_len in non-ring send paths (CVE-2026-74582)

  • kernel: mptcp: options: reset DSS fields in case of unexpected size (CVE-2026-80586)

  • kernel: entry: Fix seccomp bypass after ptrace with TSYNC (CVE-2026-89603)

  • kernel: scsi: target: iscsi: Reserve a terminator byte for the login payload (CVE-2026-90011)

  • kernel: virtio-fs: avoid double-free on failed queue setup (CVE-2026-93827)

  • kernel: smb: client: bound dirent name against end of SMB response in cifs_filldir (CVE-2026-93787)

  • kernel: xfrm: hold net_device reference under RCU in bundle creation (CVE-2026-98364)

  • kernel: ipv4: free inet_opt and ireq_opt after an RCU grace period (CVE-2026-98432)

  • kernel: KVM: arm64: Transfer the hyp stack pages out of the host stage-2 (CVE-2026-98466)

  • kernel: nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge() (CVE-2026-98725)

  • kernel: ZDI-CAN-33367: Linux Kernel skbuff skb_zerocopy Improper Ownership Management Local Privilege Escalation Vulnerability ()

Bug Fix(es) and Enhancement(s):

  • kernel panic in percpu_counter_add_batch() via submit_bio_noacct() due to NULL pointer (JIRA:Rocky Linux-250378)

  • ipv4: ip_gre: make ipgre_header() robust (rhel-9.8.z) (JIRA:Rocky Linux-271127)

  • ip6_gre: make ip6gre_header() robust (rhel-9.8.z) (JIRA:Rocky Linux-271130)

  • Backport "sched: The newidle balance regression" series to rhel 9.8 [rhel-9.8.z] (JIRA:Rocky Linux-288067)

  • Rocky Linux is missing support for conntrack zone filtering in dump/delete requests (9.10) [rhel-9.8.z] (JIRA:Rocky Linux-291352)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:93412
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVRLSA-2026:93413 9.8

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: Kernel: Denial of Service in network socket error handling (CVE-2026-22977)

  • kernel: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (CVE-2026-46174)

  • kernel: i2c: stub: Reject I2C block transfers with invalid length (CVE-2026-64191)

  • kernel: Linux kernel: PPP over L2TP Use-After-Free vulnerability (CVE-2026-68398)

  • kernel: mptcp: pm: userspace: fix use-after-free in get_local_id (CVE-2026-68169)

  • kernel: tipc: require net admin for TIPCv2 netlink mutators (CVE-2026-74283)

  • kernel: mptcp: options: reset DSS fields in case of unexpected size (CVE-2026-80586)

  • kernel: entry: Fix seccomp bypass after ptrace with TSYNC (CVE-2026-89603)

  • kernel: KVM: nVMX: Always flush vpid02 on first use (CVE-2026-89932)

  • kernel: scsi: target: iscsi: Reserve a terminator byte for the login payload (CVE-2026-90011)

  • kernel: virtio-fs: avoid double-free on failed queue setup (CVE-2026-93827)

  • kernel: smb: client: bound dirent name against end of SMB response in cifs_filldir (CVE-2026-93787)

  • kernel: KEYS: encrypted: fix integer overflow of datablob_len (CVE-2026-98222)

  • kernel: xfrm: hold net_device reference under RCU in bundle creation (CVE-2026-98364)

  • kernel: ipv4: free inet_opt and ireq_opt after an RCU grace period (CVE-2026-98432)

  • kernel: nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge() (CVE-2026-98725)

Bug Fix(es) and Enhancement(s):

  • ipv4: ip_gre: make ipgre_header() robust (rhel-10.2.z) (JIRA:Rocky Linux-270702)

  • ip6_gre: make ip6gre_header() robust (rhel-10.2.z) (JIRA:Rocky Linux-270721)

  • Rocky Linux is missing support for conntrack zone filtering in dump/delete requests (10.4) [rhel-10.2.z] (JIRA:Rocky Linux-291348)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:93413
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVUBUNTU-CVE-2026-74283 6.9

In the Linux kernel, the following vulnerability has been resolved: tipc: require net admin for TIPCv2 netlink mutators TIPCv2 registers mutating generic-netlink operations without admin permission flags. Generic netlink only checks CAP_NET_ADMIN when an operation sets GENL_ADMIN_PERM or GENL_UNS_ADMIN_PERM, so a local unprivileged process can currently change TIPC state through commands such as TIPC_NL_NET_SET, TIPC_NL_KEY_SET, TIPC_NL_KEY_FLUSH, and bearer enable/disable. The legacy TIPC netlink API already checks netlink_net_capable(..., CAP_NET_ADMIN) for administrative commands. Give the TIPCv2 mutators the equivalent generic-netlink gate. Use GENL_UNS_ADMIN_PERM, which maps to the same namespace-aware CAP_NET_ADMIN check that netlink_net_capable() performs, so the behaviour matches the legacy path and keeps working for CAP_NET_ADMIN holders in a non-initial user namespace (containers). A QEMU/KASAN repro run as uid/gid 65534 with zero effective capabilities previously succeeded in changing the network id and node identity, setting and flushing key material, and enabling/disabling a UDP bearer. With this patch applied the same operations fail with -EPERM.

Record
UBUNTU-CVE-2026-74283
CVSS 4.0
6.9 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVALSA-2026:93436 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (CVE-2026-63924)
  • kernel: ipv6: exthdrs: refresh nh after handling HAO option (CVE-2026-63922)
  • kernel: af_unix: Fix UAF read of tail->len in unix_stream_data_wait() (CVE-2026-64109)
  • kernel: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (CVE-2026-72083)
  • kernel: tipc: require net admin for TIPCv2 netlink mutators (CVE-2026-74283)
  • kernel: smb: client: bound dirent name against end of SMB response in cifs_filldir (CVE-2026-93787)
  • kernel: ZDI-CAN-33367: Linux Kernel skbuff skb_zerocopy Improper Ownership Management Local Privilege Escalation Vulnerability ()

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:93436
Updated
2026-11-03
OSVALSA-2026:93437 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (CVE-2026-63924)
  • kernel: ipv6: exthdrs: refresh nh after handling HAO option (CVE-2026-63922)
  • kernel: af_unix: Fix UAF read of tail->len in unix_stream_data_wait() (CVE-2026-64109)
  • kernel: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (CVE-2026-72083)
  • kernel: tipc: require net admin for TIPCv2 netlink mutators (CVE-2026-74283)
  • kernel: smb: client: bound dirent name against end of SMB response in cifs_filldir (CVE-2026-93787)
  • kernel: ZDI-CAN-33367: Linux Kernel skbuff skb_zerocopy Improper Ownership Management Local Privilege Escalation Vulnerability ()

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:93437
Updated
2026-11-02
OSVCLSA-2026-1791132991 No score

Fix of 400 CVEs

  • CVE-2026-53266
    • netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
  • CVE-2025-39964
    • crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
  • CVE-2025-39827
    • net: rose: include node references in rose_neigh refcount {CVE-2025-39827}
  • CVE-2026-93140
    • udf: Mark LVID buffer as uptodate before marking it dirty {CVE-2026-93140}
  • CVE-2026-90112
    • net: qlcnic: validate unified ROM sections before loading {CVE-2026-90112}
  • CVE-2026-90237
    • netfilter: nft_ct: move custom expectation support to helper {CVE-2026-90237}
  • CVE-2026-93051
    • misc: ad525x_dpot: use driver core groups for sysfs files {CVE-2026-93051}
  • CVE-2026-90379
    • wifi: mt76: mt7921: Add PCIe AER handler support to prevent system crash {CVE-2026-90379}
  • CVE-2026-90302
    • ocfs2: synchronize heartbeat callbacks with o2net teardown {CVE-2026-90302}
  • CVE-2026-90383
    • misc: sgi-gru: remove interrupt-context page-table walks {CVE-2026-90383}
  • CVE-2026-90320
    • ocfs2: validate external xattr entries when reading metadata {CVE-2026-90320}
  • CVE-2026-93047
    • drm/v3d: Associate BOs with every job that accesses them {CVE-2026-93047}
  • CVE-2026-93192
    • drm/v3d: Clear queue->active_job when v3d_fence_create() fails {CVE-2026-93192}
  • CVE-2026-93050
    • ipack: ipoctal: fix UAF, null-ptr-deref, and use-after-free in cleanup on remove {CVE-2026-93050}
  • CVE-2026-90311
    • thermal: hwmon: Remove hwmon class device along with its parent {CVE-2026-90311}
  • CVE-2026-93191
    • smack: fix incorrect task context in smack_msg_queue_msgrcv {CVE-2026-93191}
  • CVE-2026-93042
    • dmaengine: dw-edma: Terminate all descriptors without callbacks {CVE-2026-93042}
  • CVE-2026-93056
    • usb: gadget: f_uac1_legacy: remove broken string configfs attributes {CVE-2026-93056}
  • CVE-2026-93203
    • batman-adv: bla: avoid CRC corruption due to parallel claim add {CVE-2026-93203}
  • CVE-2026-93204
    • batman-adv: dat: atomically update mac addresses {CVE-2026-93204}
  • CVE-2026-90000
    • HID: rmi: fix OOB access with undersized RMI reports {CVE-2026-90000}
  • CVE-2026-90431
    • remoteproc: Prevent crash handling to race with rproc_del() {CVE-2026-90431}
  • CVE-2026-93202
    • i3c: master: Fix recursive locking during device registration {CVE-2026-93202}
  • CVE-2026-90347
    • arm64: ptrace: Keep 'orig_x0' in-sync with x0 on syscall entry {CVE-2026-90347}
  • CVE-2026-90267
    • scsi: sd: Fix special_vec mempool leak when scsi_alloc_sgtables() fails {CVE-2026-90267}
  • CVE-2026-92500
    • ext4: use fsdata to track inline data write state and fix race {CVE-2026-92500}
  • CVE-2026-93196
    • nvdimm: virtio_pmem: refcount requests for token lifetime {CVE-2026-93196}
  • CVE-2026-90207
    • ALSA: seq: midi: Serialize input teardown with event_input {CVE-2026-90207}
  • CVE-2026-90307
    • RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ {CVE-2026-90307}
  • CVE-2026-90110
    • inetpeer: randomize RB-tree node comparison using SipHash {CVE-2026-90110}
  • CVE-2026-90293
    • IB/isert: post the full-feature receive buffers after session registration {CVE-2026-90293}
  • CVE-2026-89838
    • f2fs: limit recovery filename logging to stored length {CVE-2026-89838}
  • CVE-2026-93177
    • drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup {CVE-2026-93177}
  • CVE-2026-89823
    • drm: fix race between partial drm_dev_register() failure and ioctl {CVE-2026-89823}
  • CVE-2026-90041
    • HID: sony: clean up device list on probe failure {CVE-2026-90041}
  • CVE-2026-90015
    • xhci: fix lost bounce buffers on TDs spanning several ring segments {CVE-2026-90015}
  • CVE-2026-93095 -…
Record
CLSA-2026-1791132991
Updated
2026-11-02
OSVCLSA-2026-1791876326 No score

Fix of 274 CVEs

  • CVE-2026-53091
    • xfrm: Don't clobber inner headers when already set {CVE-2026-53091}
    • net: account for encap headers in qdisc pkt len {CVE-2026-53091}
  • CVE-2026-93803
    • wifi: libipw: fix key index receive bound checks {CVE-2026-93803}
  • CVE-2026-93286
    • net: appletalk: fix NULL pointer dereference in aarp_send_ddp() {CVE-2026-93286}
  • CVE-2026-93280
    • greybus: audio: bound the topology section sizes against the fetched size {CVE-2026-93280}
  • CVE-2026-93213
    • of: fix out-of-bounds read in of_alias_scan() stem parser {CVE-2026-93213}
  • CVE-2026-93802
    • wifi: rsi: validate beacon length before fixed buffer copy {CVE-2026-93802}
  • CVE-2026-93206
    • PCI/proc: Use file_ns_capable() when checking config space read access {CVE-2026-93206}
  • CVE-2026-97448
    • ACPICA: Add validation for node in acpi_ns_build_normalized_path() {CVE-2026-97448}
  • CVE-2026-97408
    • Bluetooth: L2CAP: validate connectionless PSM length {CVE-2026-97408}
  • CVE-2026-93268
    • ext4: skip extra isize expansion during mount to prevent deadlock {CVE-2026-93268}
  • CVE-2026-93782
    • vhost-scsi: flush backend after device ioctls {CVE-2026-93782}
  • CVE-2026-93783
    • Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame {CVE-2026-93783}
  • CVE-2026-97455
    • ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() {CVE-2026-97455}
  • CVE-2026-93807
    • wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers {CVE-2026-93807}
  • CVE-2026-93808
    • ALSA: usb-audio: caiaq: validate EP1 reply lengths {CVE-2026-93808}
  • CVE-2026-89938
    • iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF {CVE-2026-89938}
  • CVE-2026-89927
    • KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock {CVE-2026-89927}
  • CVE-2026-89949
    • batman-adv: dat: avoid unaligned fault in IP extraction {CVE-2026-89949}
  • CVE-2026-89912
    • KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save {CVE-2026-89912}
  • CVE-2026-89932
    • KVM: nVMX: Always flush vpid02 on first use {CVE-2026-89932}
  • CVE-2026-89833
    • f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages() {CVE-2026-89833}
  • CVE-2026-90045
    • USB: gadget: ffs: fix mm lifetime handling {CVE-2026-90045}
  • CVE-2026-89854
    • scsi: qla2xxx: Fix cs84xx use-after-free on host teardown {CVE-2026-89854}
  • CVE-2026-90015
    • xhci: fix lost bounce buffers on TDs spanning several ring segments {CVE-2026-90015}
  • CVE-2026-89979
    • ALSA: pcm: Fix race between non-atomic ops and trigger-start {CVE-2026-89979}
  • CVE-2026-89852
    • scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state() {CVE-2026-89852}
  • CVE-2026-89861
    • scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition() {CVE-2026-89861}
  • CVE-2026-89859
    • scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak {CVE-2026-89859}
  • CVE-2026-90036
    • NFSD: Prevent client use-after-free during blocked-lock reaping {CVE-2026-90036}
  • CVE-2026-89987
    • mm/huge_memory: transfer the pmd dirty bit to the folio on zap {CVE-2026-89987}
  • CVE-2026-89799
    • bpf: Disable preemption in bpf_get_stackid {CVE-2026-89799}
  • CVE-2026-90032
    • media: usbtv: keep device alive while ALSA card exists {CVE-2026-90032}
  • CVE-2026-89822
    • drm/i915: Guard against NULL driver_data in i915_pci_probe() {CVE-2026-89822}
  • CVE-2026-89929
    • KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU {CVE-2026-89929}
  • CVE-2026-89840
    • f2fs: validate MOVE_RANGE destination size {CVE-2026-89840}
  • CVE-2026-89913
    • KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables {CVE-2026-89913} *…
Record
CLSA-2026-1791876326
Updated
2026-11-02
OSVCLSA-2026-1791878869 No score

Fix of 274 CVEs

  • CVE-2026-53091
    • xfrm: Don't clobber inner headers when already set {CVE-2026-53091}
    • net: account for encap headers in qdisc pkt len {CVE-2026-53091}
  • CVE-2026-93803
    • wifi: libipw: fix key index receive bound checks {CVE-2026-93803}
  • CVE-2026-93286
    • net: appletalk: fix NULL pointer dereference in aarp_send_ddp() {CVE-2026-93286}
  • CVE-2026-93280
    • greybus: audio: bound the topology section sizes against the fetched size {CVE-2026-93280}
  • CVE-2026-93213
    • of: fix out-of-bounds read in of_alias_scan() stem parser {CVE-2026-93213}
  • CVE-2026-93802
    • wifi: rsi: validate beacon length before fixed buffer copy {CVE-2026-93802}
  • CVE-2026-93206
    • PCI/proc: Use file_ns_capable() when checking config space read access {CVE-2026-93206}
  • CVE-2026-97448
    • ACPICA: Add validation for node in acpi_ns_build_normalized_path() {CVE-2026-97448}
  • CVE-2026-97408
    • Bluetooth: L2CAP: validate connectionless PSM length {CVE-2026-97408}
  • CVE-2026-93268
    • ext4: skip extra isize expansion during mount to prevent deadlock {CVE-2026-93268}
  • CVE-2026-93782
    • vhost-scsi: flush backend after device ioctls {CVE-2026-93782}
  • CVE-2026-93783
    • Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame {CVE-2026-93783}
  • CVE-2026-97455
    • ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() {CVE-2026-97455}
  • CVE-2026-93807
    • wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers {CVE-2026-93807}
  • CVE-2026-93808
    • ALSA: usb-audio: caiaq: validate EP1 reply lengths {CVE-2026-93808}
  • CVE-2026-89938
    • iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF {CVE-2026-89938}
  • CVE-2026-89927
    • KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock {CVE-2026-89927}
  • CVE-2026-89949
    • batman-adv: dat: avoid unaligned fault in IP extraction {CVE-2026-89949}
  • CVE-2026-89912
    • KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save {CVE-2026-89912}
  • CVE-2026-89932
    • KVM: nVMX: Always flush vpid02 on first use {CVE-2026-89932}
  • CVE-2026-89833
    • f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages() {CVE-2026-89833}
  • CVE-2026-90045
    • USB: gadget: ffs: fix mm lifetime handling {CVE-2026-90045}
  • CVE-2026-89854
    • scsi: qla2xxx: Fix cs84xx use-after-free on host teardown {CVE-2026-89854}
  • CVE-2026-90015
    • xhci: fix lost bounce buffers on TDs spanning several ring segments {CVE-2026-90015}
  • CVE-2026-89979
    • ALSA: pcm: Fix race between non-atomic ops and trigger-start {CVE-2026-89979}
  • CVE-2026-89852
    • scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state() {CVE-2026-89852}
  • CVE-2026-89861
    • scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition() {CVE-2026-89861}
  • CVE-2026-89859
    • scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak {CVE-2026-89859}
  • CVE-2026-90036
    • NFSD: Prevent client use-after-free during blocked-lock reaping {CVE-2026-90036}
  • CVE-2026-89987
    • mm/huge_memory: transfer the pmd dirty bit to the folio on zap {CVE-2026-89987}
  • CVE-2026-89799
    • bpf: Disable preemption in bpf_get_stackid {CVE-2026-89799}
  • CVE-2026-90032
    • media: usbtv: keep device alive while ALSA card exists {CVE-2026-90032}
  • CVE-2026-89822
    • drm/i915: Guard against NULL driver_data in i915_pci_probe() {CVE-2026-89822}
  • CVE-2026-89929
    • KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU {CVE-2026-89929}
  • CVE-2026-89840
    • f2fs: validate MOVE_RANGE destination size {CVE-2026-89840}
  • CVE-2026-89913
    • KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables {CVE-2026-89913} *…
Record
CLSA-2026-1791878869
Updated
2026-11-02
OSVCLSA-2026-1791946572 No score

Fix of 198 CVEs

  • CVE-2024-36894
    • usb: gadget: f_fs: drop the duplicate usb_ep_free_request() in ffs_user_copy_worker() {CVE-2024-36894}
  • CVE-2026-97447
    • ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() {CVE-2026-97447}
  • CVE-2026-93822
    • PCI: iproc: Protect root bus removal with rescan lock {CVE-2026-93822}
  • CVE-2026-93826
    • HID: hidpp: fix potential UAF in hidpp_connect_event() {CVE-2026-93826}
  • CVE-2026-97954
    • net/rds: fix tcp stream corruption with large pages {CVE-2026-97954}
  • CVE-2026-97949
    • configfs: unhash the dentry before dropping the item in rmdir {CVE-2026-97949}
  • CVE-2026-97931
    • ALSA: us122l: Prevent write upgrades for read mappings {CVE-2026-97931}
  • CVE-2026-97940
    • ipv6: fix fib6 walker UAF on seq stop {CVE-2026-97940}
  • CVE-2026-97539
    • usb: xusbatm: don't rely on id table pointer arithmetic {CVE-2026-97539}
  • CVE-2026-74510
    • Bluetooth: mgmt: fix UAF in pair command cancellation {CVE-2026-74510}
  • CVE-2026-72084
    • scsi: target: Bound PR-OUT TransportID parsing to the received buffer {CVE-2026-72084}
  • CVE-2026-90302
    • ocfs2: synchronize heartbeat callbacks with o2net teardown {CVE-2026-90302}
  • CVE-2026-90320
    • ocfs2: validate external xattr entries when reading metadata {CVE-2026-90320}
  • CVE-2026-90321
    • ocfs2: validate inline xattrs during inode block validation {CVE-2026-90321}
  • CVE-2026-90431
    • remoteproc: Prevent crash handling to race with rproc_del() {CVE-2026-90431}
  • CVE-2026-74637
    • perf/core: Fix group leader use-after-free after sibling detach {CVE-2026-74637}
  • CVE-2026-74752
    • sctp: validate cookie AUTH state before use {CVE-2026-74752}
  • CVE-2026-74387
    • ALSA: seq: midi: Serialize output teardown with event_input {CVE-2026-74387}
  • CVE-2026-80536
    • xfs: bounds-check buffer log item's dirty bitmap {CVE-2026-80536}
  • CVE-2026-89659
    • NFSD: Prevent client use-after-free during delegation revoke {CVE-2026-89659}
  • CVE-2026-80576
    • drm/amdgpu: reject oversized IBs with per-ring packet limits {CVE-2026-80576}
  • CVE-2026-90223
    • nfc: llcp: bound SNL TLV parsing to the skb and add length checks {CVE-2026-90223}
  • CVE-2026-80994
    • net: openvswitch: fix flow mask use-after-free on flow deletion {CVE-2026-80994}
  • CVE-2026-72398
    • sctp: add INIT verification after cookie unpacking {CVE-2026-72398}
  • CVE-2026-74583
    • net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
  • CVE-2026-72322
    • ipv6: mcast: Fix potential UAF in MLD delayed work {CVE-2026-72322}
  • CVE-2026-93095
    • hfsplus: validate thread record before delete key rebuild {CVE-2026-93095}
  • CVE-2026-72472
    • nfs: use nfsi->rwsem to protect traversal of the file lock list {CVE-2026-72472}
  • CVE-2026-90045
    • USB: gadget: ffs: fix mm lifetime handling {CVE-2026-90045}
  • CVE-2026-90421
    • PCI: Fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-90421}
  • CVE-2026-64583
    • usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown {CVE-2026-64583}
  • CVE-2026-68329
    • iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() {CVE-2026-68329}
  • CVE-2026-89448
    • iommu/vt-d: Force requesting ACS when tboot is enabled {CVE-2026-89448}
  • CVE-2026-64001
    • ALSA: pcm: oss: Fix setup list UAF on proc write error {CVE-2026-64001}
  • CVE-2026-64305
    • crypto: qat - protect service table iterations with service_lock {CVE-2026-64305}
  • CVE-2026-64348
    • usb: free iso schedules on failed submit {CVE-2026-64348}
  • CVE-2026-64422
    • net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422}
  • CVE-2026-90180
    • block:…
Record
CLSA-2026-1791946572
Updated
2026-11-02
OSVCLSA-2026-1792137027 No score

kernel-uek: Fix of 161 CVEs

  • net: usb: pegasus: don't rely on id table pointer arithmetic {CVE-2026-97540}
  • ocfs2: validate directory-index entry counts when reading metadata {CVE-2026-89492}
  • ocfs2: validate dx_root extent list fields during block read {CVE-2026-89492}
  • nvme-tcp: reject a read that transferred too few bytes {CVE-2026-89480}
  • sctp: add INIT verification after cookie unpacking {CVE-2026-72398}
  • sctp: validate embedded INIT chunk and address list lengths in cookie {CVE-2026-53224}
  • sctp: fix NULL deref on untransmitted RECONF completion {CVE-2026-89477}
  • net/packet: defer vmalloc TX_RING free until skbs finish {CVE-2026-80841}
  • netfilter: nf_log: unregister loggers before per-net teardown {CVE-2026-97608}
  • netfilter: nf_tables: make nft_object rhltable per table {CVE-2026-74565}
  • packet: use consistent hard_header_len in non-ring send paths {CVE-2026-74582}
  • net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header {CVE-2026-80731}
  • net/atm: fix slab-out-of-bounds read in vcc_setsockopt() {CVE-2026-74689}
  • net: do not send ICMP/NDISC Redirects when peer allocation fails {CVE-2026-74550}
  • tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() {CVE-2026-72404}
  • net/sched: sch_teql: move rcu_read_lock()/spin_lock() from _bh variants {CVE-2026-72390}
  • net/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF {CVE-2026-72390}
  • Drivers: hv: vmbus: use generic driver_override infrastructure {CVE-2026-80676}
  • NFSD: Prevent client use-after-free during delegation revoke {CVE-2026-89659}
  • sunrpc: route to a populated pool in svc_pool_for_cpu() {CVE-2026-89549}
  • sctp: fix stream->outcnt underflow on duplicate RECONF responses {CVE-2026-89476}
  • sctp: distinguish sequence zero from wildcard in reconf lookup {CVE-2026-89476}
  • ipv6: mcast: Fix potential UAF in MLD delayed work {CVE-2026-72322}
  • net/sched: fix packet loop on netem when duplicate is on {CVE-2026-63983}
  • net: Introduce skb tc depth field to track packet loops {CVE-2026-63983}
  • netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst {CVE-2026-72255}
  • sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing {CVE-2026-53246}
  • ipv6: mcast: Fix use-after-free when processing MLD queries {CVE-2026-53275}
  • scsi: xen: scsiback: Free unsubmitted command instead of double-putting it {CVE-2026-72085}
  • ipv4: fib: Don't dump dying fib_info in fib_leaf_notify(). {CVE-2026-74289}
  • sctp: fix err_chunk memory leaks in INIT handling {CVE-2026-72413}
  • net/sched: defer qdisc freeing after failed creation {CVE-2026-98017}
  • IB/isert: wait for deferred control PDU completions before releasing the connection {CVE-2026-98357}
  • RDMA/mad: Fix receive buffer leak when PKey enforcement fails {CVE-2026-98354}
  • sctp: validate embedded address parameter length {CVE-2026-74287}
  • nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget {CVE-2026-89674}
  • IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413}
  • drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() {CVE-2026-46209}
  • RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() {CVE-2026-46181}
  • nvmet-tcp: fix race between ICReq handling and queue teardown {CVE-2026-46135}
  • ALSA: aloop: Fix peer runtime UAF during format-change stop {CVE-2026-46090}
  • ALSA: aloop: Fix racy access at PCM trigger {CVE-2026-23191}
  • drm/nouveau: fix u32 overflow in pushbuf reloc bounds check {CVE-2026-46006}
  • gfs2: Fix use-after-free in iomap inline data write path {CVE-2026-45984}
  • bonding: alb: fix UAF in rlb_arp_recv during bond up/down {CVE-2026-45970}
  • Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold {CVE-2026-31408}
  • Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect() {CVE-2024-36013}
  • mt76: fix use-after-free by removing a non-RCU wcid pointer {CVE-2022-49328}
  • mt76: fix per-driver wcid range checks after wcid array size bump {CVE-2022-49328}
  • af_unix: Fix UAF read of…
Record
CLSA-2026-1792137027
Updated
2026-11-02
OSVCLSA-2026-1792239979 No score

kernel: Fix of 73 CVEs

  • ipv4: validate checksum_start before completing checksum {CVE-2026-99999}
  • net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72055}
  • ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). {CVE-2026-63921}
  • ip6: vti: Use ip6_tnl.net in vti6_changelink(). {CVE-2026-63917}
  • bpf: Mask pseudo pointer values in verifier logs {CVE-2026-72402}
  • drop_monitor: perform u64_stats updates under IRQ-disabled section {CVE-2026-68286}
  • wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin {CVE-2026-68362}
  • gve: fix Rx queue stall on alloc failure {CVE-2026-68129}
  • vxlan: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-68432}
  • net: qrtr: restrict socket creation to the initial network namespace {CVE-2026-68294}
  • nbd: restrict sockets to TCP and UDP {CVE-2025-40080}
  • audit: fix recursive locking deadlock in audit_dupe_exe() {CVE-2026-68096}
  • scsi: smartpqi: Fix device resources accessed after device removal {CVE-2025-68371}
  • cifs: fix oops during encryption {CVE-2022-50341}
  • net: qrtr: ns: Limit the maximum server registration per node {CVE-2026-43491}
  • mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING {CVE-2022-50430}
  • ipvlan: inherit needed_headroom and needed_tailroom from phy_dev {CVE-2026-74744}
  • xfs: don't swallow dquot recovery verification errors {CVE-2026-80529}
  • xfs: dquot recovery does not validate the recovered dquot {CVE-2026-80529}
  • xfs: clean up dqblk extraction {CVE-2026-80529}
  • Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}
  • bpf: Fix accesses to uninit stack slots {CVE-2023-52452}
  • bpf: Allow reads from uninit stack {CVE-2023-52452}
  • fbdev: Fix incorrect page mapping clearance at fb_deferred_io_release() {CVE-2023-52731}
  • iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() {CVE-2026-68324}
  • nfsd: make sure exp active before svc_export_show {CVE-2024-56558}
  • Input: elan_i2c - validate firmware size before use {CVE-2026-64237}
  • net/sched: ets: use old 'nbands' while purging unused classes {CVE-2025-38684}
  • net_sched: ets: fix a race in ets_qdisc_change() {CVE-2025-38107}
  • fbcon: Fix OOB access in font allocation {CVE-2025-39967}
  • fbcon: fix integer overflow in fbcon_do_set_font {CVE-2025-39967}
  • kyber: fix out of bounds access when preempted {CVE-2021-46984}
  • padata: Reset next CPU when reorder sequence wraps around {CVE-2025-38584}
  • padata: Fix pd UAF once and for all {CVE-2025-38584}
  • padata: Fix refcnt handling in padata_free_shell() {CVE-2023-52854}
  • xen/privcmd: unregister xenstore notifier on module exit {CVE-2026-31788}
  • xen/privcmd: restrict usage in unprivileged domU {CVE-2026-31788}
  • Bluetooth: MGMT: Fix memory leak in set_ssp_complete {CVE-2026-23151}
  • Bluetooth: MGMT: Fix possible UAFs {CVE-2025-39981}
  • xfrm: Fix dev use-after-free in xfrm async resumption {CVE-2026-72463}
  • xfrm: hold dev ref until after transport_finish NF_HOOK {CVE-2026-31663}
  • netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one {CVE-2023-53333}
  • nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec {CVE-2026-22998}
  • bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() {CVE-2022-49840}
  • ALSA: firewire-motu: add bounds check in put_user loop for DSP events {CVE-2025-68753}
  • ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events {CVE-2025-68347}
  • HID: multitouch: Add NULL check in mt_input_configured {CVE-2024-58020}
  • HID: multitouch: Correct devm device reference for hidinput input_dev name {CVE-2023-53454}
  • RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction {CVE-2025-38161}
  • RDMA/mlx5: Return the firmware result upon destroying QP/RQ {CVE-2023-53286}
  • cifs: Fix warning and UAF when destroy the MR list {CVE-2023-53427}
  • cifs: Fix lost destroy smbd connection when MR allocate failed {CVE-2023-54260}
  • cifs: Fix oops due to uncleared server->smbd_conn in reconnect {CVE-2023-53006}
  • PCI/ASPM:…
Record
CLSA-2026-1792239979
Updated
2026-11-02
OSVCLSA-2026-1792749577 No score

kernel: Fix of 97 CVEs

  • net: skbuff: propagate shared-frag marker in skb_zerocopy()
  • net: bridge: stop fast-leave after deleting a port group {CVE-2026-74480}
  • net: ipv6: clear suppressed fib6 rule result {CVE-2026-74581}
  • net/sched: fix pedit partial COW leading to page cache corruption {CVE-2026-46331}
  • ipvs: do not propagate one-packet flag to synced conns {CVE-2026-80714}
  • net: skbuff: propagate shared-frag marker through frag-transfer helpers {CVE-2026-43503}
  • sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START {CVE-2026-98130}
  • tipc: require net admin for TIPCv2 netlink mutators {CVE-2026-74283}
  • sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks {CVE-2026-53004}
  • usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() {CVE-2026-63962}
  • ice: fix double-free of tx_buf skb {CVE-2026-53009}
  • configfs: unhash the dentry before dropping the item in rmdir {CVE-2026-97949}
  • configfs_lookup(): don't leave ->s_dentry dangling on failure {CVE-2026-74359}
  • xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() {CVE-2026-53239}
  • bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops {CVE-2026-53078}
  • crypto: authencesn - reject short ahash digests during instance creation {CVE-2026-46033}
  • smb: client: reject userspace cifs.idmap descriptions {CVE-2026-97564}
  • HID: lg-g15: cancel pending work on remove to fix a use-after-free {CVE-2026-64362}
  • HID: hidpp: fix potential UAF in hidpp_connect_event() {CVE-2026-93826}
  • hid: hid-logitech-hidpp: avoid unnecessary assignments in hidpp_connect_event {CVE-2026-93826}
  • KEYS: encrypted: fix integer overflow of datablob_len {CVE-2026-98222}
  • scsi: qla2xxx: Skip vport under deletion in report ID acquisition {CVE-2026-97531}
  • dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() {CVE-2026-98343}
  • tipc: prevent snt_unacked underflow on CONN_ACK {CVE-2026-74282}
  • libceph: Fix potential null-ptr-deref in decode_choose_args() {CVE-2026-52957}
  • libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() {CVE-2026-52956}
  • sctp: prevent peer transport count overflow {CVE-2026-74469}
  • sctp: fix addr_wq_timer race in sctp_free_addr_wq() {CVE-2026-72383}
  • sctp: fix err_chunk memory leaks in INIT handling {CVE-2026-72413}
  • nvme: add missing SRCU grace period in error path {CVE-2026-89972}
  • nvme-tcp: fix host memory disclosure on R2T for a read command {CVE-2026-89481}
  • drm/vmwgfx: validate DRAW_PRIMITIVES header size before division {CVE-2026-74444}
  • drm/amd/display: Fix dangling pointer in CRTC reset function {CVE-2026-93175}
  • nouveau/gem: reserve the bo in the info ioctl around the vma lookup {CVE-2026-89553}
  • usb: fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-93117}
  • usb: xusbatm: don't rely on id table pointer arithmetic {CVE-2026-97539}
  • USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() {CVE-2026-53195}
  • wifi: brcmsmac: fix UAF in brcms_free_timer() {CVE-2026-98196}
  • slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() {CVE-2026-90057}
  • vxlan: re-fetch eth header after route_shortcircuit() {CVE-2026-80681}
  • net: thunderbolt: Fix frags[] overflow by bounding frame_count {CVE-2026-72157}
  • RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() {CVE-2026-46181}
  • wifi: ath9k: fix OOB access from firmware tx status queue ID {CVE-2026-74408}
  • ppp: require CAP_NET_ADMIN in target netns for unattached ioctls {CVE-2026-53075}
  • wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() {CVE-2026-46069}
  • Bluetooth: btusb: fix use-after-free on registration failure {CVE-2026-64471}
  • scsi: target: iscsi: Reserve a terminator byte for the login payload {CVE-2026-90011}
  • scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() {CVE-2026-46149}
  • pNFS: Fix use-after-free in pnfs_update_layout() {CVE-2026-63800}
  • NFSv4/flexfiles: reject zero filehandle version count {CVE-2026-53392}
  • fs/mbcache: cancel shrink work before destroying the…
Record
CLSA-2026-1792749577
Updated
2026-11-02
OSVCLSA-2026-1792751700 No score

kernel: Fix of 106 CVEs

  • net: skbuff: propagate shared-frag marker in skb_zerocopy()
  • net: ipv6: clear suppressed fib6 rule result {CVE-2026-74581}
  • net: skbuff: propagate shared-frag marker through frag-transfer helpers {CVE-2026-43503}
  • ALSA: virtio: reset device before deleting virtqueues {CVE-2026-98264}
  • ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() {CVE-2026-90033}
  • ALSA: 6fire: Fix UAF at error handling during probe {CVE-2026-74505}
  • net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring {CVE-2026-64047}
  • SUNRPC: Fix a server shutdown leak {CVE-2023-53131}
  • libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() {CVE-2026-52956}
  • usb: xusbatm: don't rely on id table pointer arithmetic {CVE-2026-97539}
  • thunderbolt: Keep XDomain reference during the lifetime of a service {CVE-2026-97509}
  • nvdimm/btt: reject an arena whose nfree is below the lane count {CVE-2026-89965}
  • libnvdimm/labels: Prevent integer overflow in __nd_label_validate() {CVE-2026-89559}
  • wifi: brcmsmac: fix UAF in brcms_free_timer() {CVE-2026-98196}
  • wifi: mwifiex: validate scan response extents {CVE-2026-98185}
  • net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow {CVE-2026-98025}
  • net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put {CVE-2026-98015}
  • qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info {CVE-2023-53066}
  • Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count {CVE-2026-64276}
  • Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count {CVE-2026-64277}
  • dmaengine: Fix possible use after free {CVE-2026-72476}
  • netfilter: nf_log: unregister loggers before per-net teardown {CVE-2026-97608}
  • netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state {CVE-2026-93288}
  • mpls: add seqcount to protect the platform_label{,s} pair {CVE-2026-43042}
  • Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp {CVE-2026-74540}
  • usb: dwc2: Fix use after free in debug code {CVE-2026-63927}
  • KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path {CVE-2026-63794}
  • KVM: nVMX: Always flush vpid02 on first use {CVE-2026-89932}
  • x86/mm/ident_map: Use gbpages only where full GB page should be mapped. {CVE-2024-50017}
  • crypto: authencesn - reject short ahash digests during instance creation {CVE-2026-46033}
  • ACPICA: Add validation for node in acpi_ns_build_normalized_path() {CVE-2026-97448}
  • drm/amd/pm: bound pp_dpm_set_pp_table() memcpy {CVE-2026-97427}
  • drm/vmwgfx: validate DRAW_PRIMITIVES header size before division {CVE-2026-74444}
  • HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature {CVE-2026-89729}
  • i2c: stub: Reject I2C block transfers with invalid length {CVE-2026-64191}
  • RDMA/ucma: Lock the handler in ucma_set_ib_path() {CVE-2026-89508}
  • RDMA/srpt: fix integer overflow in immediate data length check {CVE-2026-74394}
  • dm log: fix out-of-bounds write due to region_count overflow {CVE-2026-53059}
  • dm raid1: reserve space for NUL-terminator in build_constructor_string() {CVE-2026-89575}
  • veth: fix NAPI leak in XDP enable error path {CVE-2026-80613}
  • net: hns3: fix kernel crash when 1588 is received on HIP08 devices {CVE-2024-26881}
  • ixgbevf: fix use-after-free in VEPA multicast source pruning {CVE-2026-64113}
  • net: mana: validate rx_req_idx to prevent out-of-bounds array access {CVE-2026-64018}
  • net: stmmac: xgmac2: disable RBUE in default RX interrupt mask {CVE-2026-93830}
  • net: usb: kalmia: bound RX frame length in kalmia_rx_fixup() {CVE-2026-64351}
  • net: usb: pegasus: don't rely on id table pointer arithmetic {CVE-2026-97540}
  • vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() {CVE-2026-63993}
  • wifi: ath9k: fix OOB access from firmware tx status queue ID {CVE-2026-74408}
  • PCI: iproc: Protect root bus removal with rescan lock {CVE-2026-93822}
  • scsi: qla2xxx: Avoid double completion in async IOCB timeout {CVE-2026-89847}
  • fs/mbcache: cancel…
Record
CLSA-2026-1792751700
Updated
2026-11-02
OSVCLSA-2026-1792979985 No score

kernel: Fix of 154 CVEs

  • net: bridge: fix vlan tunnel dst refcnt when egressing {CVE-2021-47222}
  • net: bridge: fix vlan tunnel dst null pointer dereference {CVE-2021-47223}
  • writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() {CVE-2026-64378}
  • writeback, cgroup: increment isw_nr_in_flight before grabbing an inode {CVE-2026-64378}
  • writeback, cgroup: add smp_mb() to cgroup_writeback_umount() {CVE-2026-64378}
  • fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going into workqueue when umount {CVE-2026-64378}
  • libceph: validate banner payload length {CVE-2026-90067}
  • drm/virtio: release the GEM object on virtio_gpu_vram_create() errors {CVE-2026-98606}
  • procfs: fix missing RCU protection when reading real_parent in do_task_stat() {CVE-2026-46259}
  • NFSv4/flexfiles: reject zero filehandle version count {CVE-2026-53392}
  • smb: client: cancel reconnect work in clean_demultiplex_info() {CVE-2026-98175}
  • smb: client: reject userspace cifs.idmap descriptions {CVE-2026-97564}
  • smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 {CVE-2026-89637}
  • smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() {CVE-2026-89633}
  • net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow {CVE-2026-98025}
  • RDMA/siw: Fix endpoint/socket association handling {CVE-2026-74345}
  • RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs {CVE-2026-74390}
  • nfsd: fix clock domain mismatch in clients_still_reclaiming() {CVE-2026-89685}
  • vdpa_sim_blk: reject out-of-range sector starts {CVE-2026-97991}
  • Drivers: hv: vmbus: use generic driver_override infrastructure {CVE-2026-80676}
  • HID: wacom: Fix OOB write in wacom_hid_set_device_mode() {CVE-2026-63916}
  • nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone {CVE-2026-89482}
  • nvmet-tcp: fix page fragment cache leak in error path {CVE-2026-74386}
  • bpf: mark a NULL call argument precise {CVE-2026-98019}
  • bpf: Don't predict JMP32 pointer vs zero comparisons {CVE-2026-98041}
  • ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get {CVE-2026-72262}
  • ASoC: SOF: ipc3-topology: Move and correct size checks in sof_ipc3_control_load_bytes() {CVE-2026-72262}
  • Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan {CVE-2026-98108}
  • mm/page_reporting: use system_freezable_wq to fix UAF during suspend {CVE-2026-74481}
  • netfilter: synproxy: refresh tcphdr after skb_ensure_writable {CVE-2026-64007}
  • netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() {CVE-2026-74569}
  • reboot: fix cad_pid use-after-free race {CVE-2026-97938}
  • fs/resctrl: Fix UAF from worker threads when domains are removed {CVE-2026-93099}
  • ext4: fix out-of-bounds read in ext4_read_inline_dir() {CVE-2026-89786}
  • ext4: fix dirtyclusters double decrement on fs shutdown {CVE-2026-45920}
  • openvswitch: Fix CT limit teardown use-after-free {CVE-2026-89488}
  • sctp: fix NULL deref on untransmitted RECONF completion {CVE-2026-89477}
  • netfilter: conntrack: remove sprintf usage {CVE-2026-53002}
  • fuse: re-lock request before replacing page cache folio {CVE-2026-53388}
  • fanotify: fix false positive on permission events {CVE-2026-46150}
  • configfs_lookup(): don't leave ->s_dentry dangling on failure {CVE-2026-74359}
  • sctp: add INIT verification after cookie unpacking {CVE-2026-72398}
  • sctp: fix err_chunk memory leaks in INIT handling {CVE-2026-72413}
  • sctp: validate embedded INIT chunk and address list lengths in cookie {CVE-2026-53224}
  • sctp: stream: fully roll back denied add-stream state {CVE-2026-52929}
  • sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing {CVE-2026-53246}
  • sctp: diag: reject stale associations in dump_one path {CVE-2026-52917}
  • sctp: Hold sock lock while iterating over address list {CVE-2026-52917}
  • sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL {CVE-2026-46227}
  • nfsd: gate nfs3…
Record
CLSA-2026-1792979985
Updated
2026-11-02
OSVopenSUSE-SU-2026:22091-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340).
  • CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock (bsc#1258335).
  • CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
  • CVE-2026-43210: tracing: ring-buffer: Fix to check event length before using (bsc#1264330).
  • CVE-2026-43272: ring-buffer: Fix possible dereference of uninitialized pointer (bsc#1264607).
  • CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
  • CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
  • CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
  • CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
  • CVE-2026-46272: coresight: tmc-etr: Fix race condition between sysfs and perf mode (bsc#1267672).
  • CVE-2026-53377: drm/msm: always recover the gpu (bsc#1271901).
  • CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
  • CVE-2026-63838: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] (bsc#1272388).
  • CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).
  • CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
  • CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
  • CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
  • CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
  • CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
  • CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
  • CVE-2026-64132: ipv6: ioam: refresh hdr pointer before ioam6_event() (bsc#1272347).
  • CVE-2026-64154: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() (bsc#1271950).
  • CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
  • CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
  • CVE-2026-64216: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (bsc#1272802).
  • CVE-2026-64235: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines (bsc#1272803).
  • CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
  • CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
  • CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970).
  • CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).
  • CVE-2026-64377: cpufreq: qcom-cpufreq-hw: Fix possible double free (bsc#1273297).
  • CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).
  • CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).
  • CVE-2026-64405: Bluetooth: separate CIS_LINK and BIS_LINK link types (bsc#1273512).
  • CVE-2026-64414: netfilter: handle unreadable frags (bsc#1273275).
  • CVE-2026-64418: mm: shrinker: fix shrinker_info teardown race with expansion (bsc#1273784).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).
  • CVE-2026-64457: virtio_pci: fix vq info pointer lookup via wrong index (bsc#1273491).
  • CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320).
  • CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).
  • CVE-2026-64475: vfio/pci: Release the…
Record
openSUSE-SU-2026:22091-1
Updated
2026-11-02
OSVSUSE-SU-2026:24179-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340).
  • CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock (bsc#1258335).
  • CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
  • CVE-2026-43210: tracing: ring-buffer: Fix to check event length before using (bsc#1264330).
  • CVE-2026-43272: ring-buffer: Fix possible dereference of uninitialized pointer (bsc#1264607).
  • CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
  • CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
  • CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
  • CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
  • CVE-2026-46272: coresight: tmc-etr: Fix race condition between sysfs and perf mode (bsc#1267672).
  • CVE-2026-53377: drm/msm: always recover the gpu (bsc#1271901).
  • CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
  • CVE-2026-63838: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] (bsc#1272388).
  • CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).
  • CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
  • CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
  • CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
  • CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
  • CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
  • CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
  • CVE-2026-64132: ipv6: ioam: refresh hdr pointer before ioam6_event() (bsc#1272347).
  • CVE-2026-64154: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() (bsc#1271950).
  • CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
  • CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
  • CVE-2026-64216: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (bsc#1272802).
  • CVE-2026-64235: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines (bsc#1272803).
  • CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
  • CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
  • CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970).
  • CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).
  • CVE-2026-64377: cpufreq: qcom-cpufreq-hw: Fix possible double free (bsc#1273297).
  • CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).
  • CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).
  • CVE-2026-64405: Bluetooth: separate CIS_LINK and BIS_LINK link types (bsc#1273512).
  • CVE-2026-64414: netfilter: handle unreadable frags (bsc#1273275).
  • CVE-2026-64418: mm: shrinker: fix shrinker_info teardown race with expansion (bsc#1273784).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).
  • CVE-2026-64457: virtio_pci: fix vq info pointer lookup via wrong index (bsc#1273491).
  • CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320).
  • CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).
  • CVE-2026-64475: vfio/pci: Release the…
Record
SUSE-SU-2026:24179-1
Updated
2026-11-02
OSVSUSE-SU-2026:24181-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
  • CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
  • CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298).
  • CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
  • CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017).
  • CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
  • CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
  • CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
  • CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
  • CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
  • CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
  • CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
  • CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
  • CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
  • CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
  • CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
  • CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
  • CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
  • CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
  • CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
  • CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
  • CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
  • CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
  • CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
  • CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
  • CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
  • CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
  • CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
  • CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
  • CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
  • CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870).
  • CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
  • CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
  • CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).
  • CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420). -…
Record
SUSE-SU-2026:24181-1
Updated
2026-11-02
OSVSUSE-SU-2026:24182-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
  • CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
  • CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298).
  • CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
  • CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017).
  • CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
  • CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
  • CVE-2026-53090: bpf: Fix ld_{abs,ind} failure path analysis in subprogs (bsc#1269532).
  • CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1271955).
  • CVE-2026-68162: sctp: avoid auth_enable sysctl UAF during netns teardown (bsc#1274920).
  • CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277).
  • CVE-2026-72084: scsi: target: Bound PR-OUT TransportID parsing to the received buffer (bsc#1275540).
  • CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
  • CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
  • CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
  • CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
  • CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
  • CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
  • CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
  • CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
  • CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
  • CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
  • CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
  • CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
  • CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
  • CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
  • CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
  • CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
  • CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
  • CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
  • CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
  • CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
  • CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
  • CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
  • CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
  • CVE-2026-64279: i2c:…
Record
SUSE-SU-2026:24182-1
Updated
2026-11-02
OSVSUSE-SU-2026:24184-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340).
  • CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock (bsc#1258335).
  • CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
  • CVE-2026-43210: tracing: ring-buffer: Fix to check event length before using (bsc#1264330).
  • CVE-2026-43272: ring-buffer: Fix possible dereference of uninitialized pointer (bsc#1264607).
  • CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
  • CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
  • CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
  • CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
  • CVE-2026-46272: coresight: tmc-etr: Fix race condition between sysfs and perf mode (bsc#1267672).
  • CVE-2026-53377: drm/msm: always recover the gpu (bsc#1271901).
  • CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
  • CVE-2026-63838: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] (bsc#1272388).
  • CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).
  • CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
  • CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
  • CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
  • CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
  • CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
  • CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
  • CVE-2026-64132: ipv6: ioam: refresh hdr pointer before ioam6_event() (bsc#1272347).
  • CVE-2026-64154: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() (bsc#1271950).
  • CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
  • CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
  • CVE-2026-64216: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (bsc#1272802).
  • CVE-2026-64235: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines (bsc#1272803).
  • CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
  • CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
  • CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970).
  • CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).
  • CVE-2026-64377: cpufreq: qcom-cpufreq-hw: Fix possible double free (bsc#1273297).
  • CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).
  • CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).
  • CVE-2026-64405: Bluetooth: separate CIS_LINK and BIS_LINK link types (bsc#1273512).
  • CVE-2026-64414: netfilter: handle unreadable frags (bsc#1273275).
  • CVE-2026-64418: mm: shrinker: fix shrinker_info teardown race with expansion (bsc#1273784).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).
  • CVE-2026-64457: virtio_pci: fix vq info pointer lookup via wrong index (bsc#1273491).
  • CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320).
  • CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).
  • CVE-2026-64475: vfio/pci: Release the…
Record
SUSE-SU-2026:24184-1
Updated
2026-11-02
OSVSUSE-SU-2026:24197-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340).
  • CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock (bsc#1258335).
  • CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
  • CVE-2026-43210: tracing: ring-buffer: Fix to check event length before using (bsc#1264330).
  • CVE-2026-43272: ring-buffer: Fix possible dereference of uninitialized pointer (bsc#1264607).
  • CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
  • CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
  • CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
  • CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
  • CVE-2026-46272: coresight: tmc-etr: Fix race condition between sysfs and perf mode (bsc#1267672).
  • CVE-2026-53377: drm/msm: always recover the gpu (bsc#1271901).
  • CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
  • CVE-2026-63838: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] (bsc#1272388).
  • CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).
  • CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
  • CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
  • CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
  • CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
  • CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
  • CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
  • CVE-2026-64132: ipv6: ioam: refresh hdr pointer before ioam6_event() (bsc#1272347).
  • CVE-2026-64154: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() (bsc#1271950).
  • CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
  • CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
  • CVE-2026-64216: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (bsc#1272802).
  • CVE-2026-64235: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines (bsc#1272803).
  • CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
  • CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
  • CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970).
  • CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).
  • CVE-2026-64377: cpufreq: qcom-cpufreq-hw: Fix possible double free (bsc#1273297).
  • CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).
  • CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).
  • CVE-2026-64405: Bluetooth: separate CIS_LINK and BIS_LINK link types (bsc#1273512).
  • CVE-2026-64414: netfilter: handle unreadable frags (bsc#1273275).
  • CVE-2026-64418: mm: shrinker: fix shrinker_info teardown race with expansion (bsc#1273784).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).
  • CVE-2026-64457: virtio_pci: fix vq info pointer lookup via wrong index (bsc#1273491).
  • CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320).
  • CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).
  • CVE-2026-64475: vfio/pci: Release the…
Record
SUSE-SU-2026:24197-1
Updated
2026-11-02
OSVSUSE-SU-2026:24235-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340).
  • CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock (bsc#1258335).
  • CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
  • CVE-2026-43210: tracing: ring-buffer: Fix to check event length before using (bsc#1264330).
  • CVE-2026-43272: ring-buffer: Fix possible dereference of uninitialized pointer (bsc#1264607).
  • CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
  • CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
  • CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
  • CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
  • CVE-2026-46272: coresight: tmc-etr: Fix race condition between sysfs and perf mode (bsc#1267672).
  • CVE-2026-53377: drm/msm: always recover the gpu (bsc#1271901).
  • CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
  • CVE-2026-63838: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] (bsc#1272388).
  • CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).
  • CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
  • CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
  • CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
  • CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
  • CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
  • CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
  • CVE-2026-64132: ipv6: ioam: refresh hdr pointer before ioam6_event() (bsc#1272347).
  • CVE-2026-64154: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() (bsc#1271950).
  • CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
  • CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
  • CVE-2026-64216: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (bsc#1272802).
  • CVE-2026-64235: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines (bsc#1272803).
  • CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
  • CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
  • CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970).
  • CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).
  • CVE-2026-64377: cpufreq: qcom-cpufreq-hw: Fix possible double free (bsc#1273297).
  • CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).
  • CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).
  • CVE-2026-64405: Bluetooth: separate CIS_LINK and BIS_LINK link types (bsc#1273512).
  • CVE-2026-64414: netfilter: handle unreadable frags (bsc#1273275).
  • CVE-2026-64418: mm: shrinker: fix shrinker_info teardown race with expansion (bsc#1273784).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).
  • CVE-2026-64457: virtio_pci: fix vq info pointer lookup via wrong index (bsc#1273491).
  • CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320).
  • CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).
  • CVE-2026-64475: vfio/pci: Release the…
Record
SUSE-SU-2026:24235-1
Updated
2026-11-02
OSVSUSE-SU-2026:24315-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
  • CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
  • CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298).
  • CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
  • CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017).
  • CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
  • CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
  • CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
  • CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
  • CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
  • CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
  • CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
  • CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
  • CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
  • CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
  • CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
  • CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
  • CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
  • CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
  • CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
  • CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
  • CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
  • CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
  • CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
  • CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
  • CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
  • CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
  • CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
  • CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
  • CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
  • CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870).
  • CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
  • CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
  • CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).
  • CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420). -…
Record
SUSE-SU-2026:24315-1
Updated
2026-11-02
OSVSUSE-SU-2026:24316-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
  • CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
  • CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298).
  • CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
  • CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017).
  • CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
  • CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
  • CVE-2026-53090: bpf: Fix ld_{abs,ind} failure path analysis in subprogs (bsc#1269532).
  • CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1271955).
  • CVE-2026-68162: sctp: avoid auth_enable sysctl UAF during netns teardown (bsc#1274920).
  • CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277).
  • CVE-2026-72084: scsi: target: Bound PR-OUT TransportID parsing to the received buffer (bsc#1275540).
  • CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
  • CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
  • CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
  • CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
  • CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
  • CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
  • CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
  • CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
  • CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
  • CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
  • CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
  • CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
  • CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
  • CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
  • CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
  • CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
  • CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
  • CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
  • CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
  • CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
  • CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
  • CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
  • CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
  • CVE-2026-64279: i2c:…
Record
SUSE-SU-2026:24316-1
Updated
2026-11-02
OSVSUSE-SU-2026:4640-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
  • CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
  • CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
  • CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
  • CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
  • CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
  • CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
  • CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
  • CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
  • CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
  • CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
  • CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
  • CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
  • CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
  • CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
  • CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
  • CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
  • CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
  • CVE-2026-63987: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES (bsc#1272971).
  • CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
  • CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
  • CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
  • CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
  • CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
  • CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
  • CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
  • CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
  • CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
  • CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
  • CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
  • CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870).
  • CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
  • CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
  • CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).
  • CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420).
  • CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).
  • CVE-2026-64373: cpufreq: Fix hotplug-suspend race during…
Record
SUSE-SU-2026:4640-1
Updated
2026-11-02
OSVSUSE-SU-2026:4660-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
  • CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
  • CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
  • CVE-2026-53266: netfilter: bridge: make ebt_snat ARP rewrite writable (bsc#1269136).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
  • CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1271955).
  • CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
  • CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).
  • CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251).
  • CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).
  • CVE-2026-68162: sctp: avoid auth_enable sysctl UAF during netns teardown (bsc#1274920).
  • CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977).
  • CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).
  • CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277).
  • CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).
  • CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).
  • CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388).
  • CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801).
  • CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803).
  • CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814).
  • CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818).
  • CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821).
  • CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249).
  • CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).
  • CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).
  • CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).
  • CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574).
  • CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544).
  • CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553).
  • CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
  • CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).
  • CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985).
  • CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).
  • CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).
  • CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).
  • CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381).
  • CVE-2026-72399: net: enetc: check the number of BDs needed for xdp_frame (bsc#1276553).
  • CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).
  • CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108).
  • CVE-2026-74267: net/sched: sch_codel: Do not call…
Record
SUSE-SU-2026:4660-1
Updated
2026-11-02
OSVSUSE-SU-2026:4665-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633).
  • CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
  • CVE-2025-40022: crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (bsc#1252682).
  • CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
  • CVE-2026-53266: netfilter: bridge: make ebt_snat ARP rewrite writable (bsc#1269136).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
  • CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
  • CVE-2026-64319: nvmet-auth: fix return value check in auth send (bsc#1273339).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251).
  • CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).
  • CVE-2026-68155: libceph: Reject monmaps advertising zero monitors (bsc#1275304).
  • CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1275307).
  • CVE-2026-68159: libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (bsc#1275470).
  • CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).
  • CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277).
  • CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).
  • CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).
  • CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388).
  • CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801).
  • CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803).
  • CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814).
  • CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818).
  • CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821).
  • CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249).
  • CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).
  • CVE-2026-72083: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (bsc#1275535).
  • CVE-2026-72084: scsi: target: core: Generate correct identifiers for PR OUT transport IDs (bsc#1275540).
  • CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).
  • CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).
  • CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574).
  • CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544).
  • CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553).
  • CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).
  • CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985).
  • CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006).
  • CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).
  • CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).
  • CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).
  • CVE-2026-72398: sctp: fix association labeling in the duplicate COOKIE-ECHO case (bsc#1276381).
  • CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).
  • CVE-2026-72449: drm/amdkfd: fix list_del…
Record
SUSE-SU-2026:4665-1
Updated
2026-11-02
OSVSUSE-SU-2026:4666-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633).
  • CVE-2024-56644: net/ipv6: release expired exception dst cached in socket (bsc#1216813 bsc#1235133).
  • CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
  • CVE-2025-40022: crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (bsc#1252682).
  • CVE-2026-53266: netfilter: bridge: make ebt_snat ARP rewrite writable (bsc#1269136).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
  • CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
  • CVE-2026-64319: nvmet-auth: fix return value check in auth send (bsc#1273339).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).
  • CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).
  • CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277).
  • CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).
  • CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).
  • CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801).
  • CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803).
  • CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814).
  • CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818).
  • CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821).
  • CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249).
  • CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).
  • CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).
  • CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).
  • CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574).
  • CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544).
  • CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).
  • CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).
  • CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).
  • CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).
  • CVE-2026-72398: sctp: fix association labeling in the duplicate COOKIE-ECHO case (bsc#1276381).
  • CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).
  • CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519).
  • CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475).
  • CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129).
  • CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410).
  • CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210).
  • CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211).
  • CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178).
  • CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792).
  • CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340).
  • CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354).
  • CVE-2026-74480: net: bridge: stop fast-leave…
Record
SUSE-SU-2026:4666-1
Updated
2026-11-02
OSVSUSE-SU-2026:4667-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633).
  • CVE-2025-39964: kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
  • CVE-2025-40022: kernel: crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (bsc#1252682).
  • CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
  • CVE-2026-53266: netfilter: bridge: make ebt_snat ARP rewrite writable (bsc#1269136).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
  • CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
  • CVE-2026-64319: nvmet-auth: fix return value check in auth send (bsc#1273339).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251).
  • CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).
  • CVE-2026-68155: libceph: Reject monmaps advertising zero monitors (bsc#1275304).
  • CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1275307).
  • CVE-2026-68159: libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (bsc#1275470).
  • CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).
  • CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277).
  • CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).
  • CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).
  • CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388).
  • CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801).
  • CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803).
  • CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814).
  • CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818).
  • CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821).
  • CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249).
  • CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).
  • CVE-2026-72083: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (bsc#1275535).
  • CVE-2026-72084: scsi: target: core: Generate correct identifiers for PR OUT transport IDs (bsc#1275540).
  • CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).
  • CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).
  • CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574).
  • CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544).
  • CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553).
  • CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).
  • CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985).
  • CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006).
  • CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).
  • CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).
  • CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).
  • CVE-2026-72398: sctp: fix association labeling in the duplicate COOKIE-ECHO case (bsc#1276381).
  • CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).
  • CVE-2026-72449: drm/amdkfd:…
Record
SUSE-SU-2026:4667-1
Updated
2026-11-02
OSVSUSE-SU-2026:4668-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633).
  • CVE-2024-56644: net/ipv6: release expired exception dst cached in socket (bsc#1216813 bsc#1235133).
  • CVE-2025-39964: crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (bsc#1252682).
  • CVE-2025-40022: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
  • CVE-2026-53266: netfilter: bridge: make ebt_snat ARP rewrite writable (bsc#1269136).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
  • CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
  • CVE-2026-64319: nvmet-auth: fix return value check in auth send (bsc#1273339).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).
  • CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).
  • CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277).
  • CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).
  • CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).
  • CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801).
  • CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803).
  • CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814).
  • CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818).
  • CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821).
  • CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249).
  • CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).
  • CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).
  • CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).
  • CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574).
  • CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544).
  • CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).
  • CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).
  • CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).
  • CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).
  • CVE-2026-72398: sctp: fix association labeling in the duplicate COOKIE-ECHO case (bsc#1276381).
  • CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).
  • CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519).
  • CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475).
  • CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129).
  • CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410).
  • CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210).
  • CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211).
  • CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178).
  • CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792).
  • CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340).
  • CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354).
  • CVE-2026-74480: net: bridge: stop fast-leave after…
Record
SUSE-SU-2026:4668-1
Updated
2026-11-02
OSVSUSE-SU-2026:4687-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633).
  • CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
  • CVE-2026-43428: USB: core: Limit the length of unkillable synchronous timeouts (bsc#1265138).
  • CVE-2026-45834: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() (bsc#1266412).
  • CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
  • CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
  • CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-46312: media: videobuf2: Set vma_flags in vb2_dma_sg_mmap (bsc#1267990).
  • CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).
  • CVE-2026-53037: HID: usbhid: fix deadlock in hid_post_reset() (bsc#1269081).
  • CVE-2026-53237: gpio: mvebu: fix NULL pointer dereference in suspend/resume (bsc#1269131).
  • CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
  • CVE-2026-53385: vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write (bsc#1271834).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1273953).
  • CVE-2026-63897: USB: serial: mct_u232: fix missing interrupt-in transfer sanity check (bsc#1272642).
  • CVE-2026-63900: USB: serial: keyspan: fix missing indat transfer sanity check (bsc#1272499).
  • CVE-2026-63902: USB: serial: cypress_m8: validate interrupt packet headers (bsc#1272517).
  • CVE-2026-63903: USB: serial: belkin_sa: validate interrupt status length (bsc#1272522).
  • CVE-2026-63904: usb: usbtmc: check URB actual_length for interrupt-IN notifications (bsc#1272523).
  • CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
  • CVE-2026-63942: parport: Fix race between port and client registration (bsc#1273023).
  • CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
  • CVE-2026-63957: USB: serial: safe_serial: fix memory corruption with small endpoint (bsc#1272472).
  • CVE-2026-63961: usb: typec: altmodes/displayport: validate count before reading Status Update VDO (bsc#1272480).
  • CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
  • CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
  • CVE-2026-64014: Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer size (bsc#1273769).
  • CVE-2026-64097: drm/amd/display: Validate GPIO pin LUT table size before iterating (bsc#1273480).
  • CVE-2026-64191: i2c: stub: Reject I2C block transfers with invalid length (bsc#1272211).
  • CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
  • CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
  • CVE-2026-64320: nvmet: fix discover log page when offsets are used (bsc#1273420).
  • CVE-2026-64342: USB: iowarrior: fix use-after-free on disconnect (bsc#1274011).
  • CVE-2026-64348: usb: free iso schedules on failed submit (bsc#1274026).
  • CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).
  • CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776).
  • CVE-2026-64375: proc: protect ptrace_may_access() with exec_update_lock (FD links) (bsc#1273868).
  • CVE-2026-64378: writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() (bsc#1273603).
  • CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).
  • CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982). -…
Record
SUSE-SU-2026:4687-1
Updated
2026-11-02
OSVSUSE-SU-2026:4706-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
  • CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
  • CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
  • CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
  • CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
  • CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
  • CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
  • CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
  • CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
  • CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
  • CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
  • CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
  • CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
  • CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
  • CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
  • CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
  • CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
  • CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
  • CVE-2026-63987: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES (bsc#1272971).
  • CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
  • CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
  • CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
  • CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
  • CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
  • CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
  • CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
  • CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
  • CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
  • CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
  • CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
  • CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870).
  • CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
  • CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
  • CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).
  • CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420).
  • CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).
  • CVE-2026-64373: cpufreq: Fix hotplug-suspend race during…
Record
SUSE-SU-2026:4706-1
Updated
2026-11-02
OSVUSN-8875-1 No score

linux, linux-aws, linux-aws-5.15, linux-aws-fips, linux-azure, linux-azure-5.15, linux-azure-fde-5.15, linux-azure-fips, linux-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iot-realtime, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-oracle, linux-realtime, linux-xilinx-zynqmp vulnerabilities

It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • User-space API (UAPI);
  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • Hardware random number generator core;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DAX dirext access to differentiated memory framework;
  • DMA engine subsystem;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Generic PM domains;
  • System reset/shutdown drivers;
  • Power supply drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Reset controller framework;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • USB DSL drivers;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • DesignWare USB2 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C support driver;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • HFS file system;
  • HFS+ file system;
  • Journaling layer for block devices (JBD2); …
Record
USN-8875-1
Updated
2026-11-07
OSVUSN-8875-2 No score

linux-nvidia vulnerabilities

It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • User-space API (UAPI);
  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • Hardware random number generator core;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DAX dirext access to differentiated memory framework;
  • DMA engine subsystem;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Generic PM domains;
  • System reset/shutdown drivers;
  • Power supply drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Reset controller framework;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • USB DSL drivers;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • DesignWare USB2 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C support driver;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • HFS file system;
  • HFS+ file system;
  • Journaling layer for block devices (JBD2); …
Record
USN-8875-2
Updated
2026-11-07
OSVUSN-8876-1 No score

linux-azure-fde vulnerabilities

It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • Hardware random number generator core;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DAX dirext access to differentiated memory framework;
  • DMA engine subsystem;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • Intel Stratix 10 firmware drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Generic PM domains;
  • Power supply drivers;
  • Voltage and Current Regulator drivers;
  • Reset controller framework;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • USB DSL drivers;
  • Cadence USB3 driver;
  • ULPI bus;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • HFS file system;
  • HFS+ file system;
  • Journaling layer for block devices (JBD2);
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • OCFS2 file system;
  • OrangeFS file system;
  • Proc file system;
  • SMB network file system;
  • UDF file system;
  • XFS file system;
  • Software nodes and device…
Record
USN-8876-1
Updated
2026-11-07
OSVUSN-8877-1 No score

linux-gcp, linux-gcp-fips vulnerabilities

It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • User-space API (UAPI);
  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • Hardware random number generator core;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DAX dirext access to differentiated memory framework;
  • DMA engine subsystem;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Generic PM domains;
  • System reset/shutdown drivers;
  • Power supply drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Reset controller framework;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • USB DSL drivers;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • DesignWare USB2 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C support driver;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • HFS file system;
  • HFS+ file system;
  • Journaling layer for block devices (JBD2); …
Record
USN-8877-1
Updated
2026-11-07
OSVUSN-8878-1 No score

linux-gcp-5.15 vulnerabilities

It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114)

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • User-space API (UAPI);
  • ARM32 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • Hardware random number generator core;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DAX dirext access to differentiated memory framework;
  • DMA engine subsystem;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Generic PM domains;
  • System reset/shutdown drivers;
  • Power supply drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Reset controller framework;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • USB DSL drivers;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • DesignWare USB2 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C support driver;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer…
Record
USN-8878-1
Updated
2026-11-07
OSVUSN-8879-1 No score

linux-oracle-5.15 vulnerabilities

It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114)

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • User-space API (UAPI);
  • ARM32 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • Hardware random number generator core;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DAX dirext access to differentiated memory framework;
  • DMA engine subsystem;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Generic PM domains;
  • System reset/shutdown drivers;
  • Power supply drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Reset controller framework;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • USB DSL drivers;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • DesignWare USB2 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C support driver;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer…
Record
USN-8879-1
Updated
2026-11-07
OSVUSN-8886-1 No score

linux-nvidia-tegra vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • NVDIMM (Non-Volatile Memory Device) drivers;
  • Handshake API;
  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • OpenRISC architecture;
  • PowerPC architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Intel NPU Driver;
  • Android drivers;
  • Rados block device (RBD) driver;
  • Bluetooth drivers;
  • Hardware random number generator core;
  • TPM device driver;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DMA engine subsystem;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • Amazon Nitro Secure Module driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • Texas Instruments network drivers;
  • NTB driver;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • Parport drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • i.MX PM domains;
  • System reset/shutdown drivers;
  • PTP clock framework;
  • Voltage and Current Regulator drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • SPI subsystem;
  • Realtek RTL8723BS SDIO drivers;
  • VME bus staging drivers;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • DesignWare USB2 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • vDPA drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Watchdog drivers;
  • 9P distributed file system;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • exFAT file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • Journaling layer for block devices (JBD2);
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NTFS3 file system;
  • OCFS2 file system;
  • Proc file system;
  • SMB network file system;
  • Tracing file system;
  • UDF file system;
  • XFS file system;
  • Key management;
  • BPF subsystem;
  • Control group (cgroup);
  • Glob pattern matching library;
  • MAC80211 subsystem;
  • Mellanox drivers;
  • Networking core;
  • Network sockets;
  • IPv6 networking;
  • Bluetooth subsystem;
  • Wireless networking;
  • IPv4 networking;
  • Netfilter;
  • Network traffic control;
  • SCTP protocol;
  • TCP network protocol;
  • XFRM subsystem;
  • RDMA verbs API;
  • io_uring subsystem;
  • IPC subsystem;
  • Audit subsystem;
  • Kernel CPU control infrastructure;
  • Perf events;
  • Kernel exit() syscall;
  • Kernel fork() syscall;
  • Scheduler infrastructure;
  • Signal handling mechanism;
  • Timer subsystem;
  • Tracing infrastructure;
  • Resizable hashtable library;
  • Memory management;
  • 6LoWPAN network protocol;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • B.A.T.M.A.N. meshing protocol;
  • Ethernet bridge;
  • CAN network layer;
  • Ceph Core library;
  • Ethtool driver;
  • HSR network protocol;
  • IEEE802154.4 network protocol;
  • IUCV driver;
  • KCM (Kernel Connection Multiplexor) sockets driver;
  • IEEE 802.15.4 subsystem;
  • Multipath TCP;
  • Open vSwitch;
  • Packet sockets;
  • Phonet protocol;
  • Qualcomm IPC Router (QRTR);
  • RDS protocol;
  • RxRPC session sockets;
  • SMC…
Record
USN-8886-1
Updated
2026-11-06
OSVUSN-8887-1 No score

linux, linux-aws, linux-gcp, linux-gke, linux-ibm, linux-oracle, linux-realtime vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • Handshake API;
  • ARM32 architecture;
  • MIPS architecture;
  • OpenRISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • Rados block device (RBD) driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • DAX dirext access to differentiated memory framework;
  • DIBS (Direct Internal Buffer Sharing) drivers;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • DPLL subsystem;
  • EDAC drivers;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIB drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Intel Management Engine Interface driver;
  • Amazon Nitro Secure Module driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • Device tree and open firmware driver;
  • Operating Performance Points (OPP) driver;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • i.MX PM domains;
  • MediaTek PM domains;
  • Power supply drivers;
  • PTP clock framework;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • MPAM driver;
  • Reset controller framework;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Xilinx SoC drivers;
  • SoundWire subsystem;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TTY drivers;
  • UFS subsystem;
  • USB DSL drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Virtio drivers;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • 9P distributed file system;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • Journaling layer for block devices (JBD2);
  • Network file systems library;
  • Network…
Record
USN-8887-1
Updated
2026-11-02
OSVUSN-8887-2 No score

linux-aws-7.0 vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • Handshake API;
  • ARM32 architecture;
  • MIPS architecture;
  • OpenRISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • Rados block device (RBD) driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • DAX dirext access to differentiated memory framework;
  • DIBS (Direct Internal Buffer Sharing) drivers;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • DPLL subsystem;
  • EDAC drivers;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIB drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Intel Management Engine Interface driver;
  • Amazon Nitro Secure Module driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • Device tree and open firmware driver;
  • Operating Performance Points (OPP) driver;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • i.MX PM domains;
  • MediaTek PM domains;
  • Power supply drivers;
  • PTP clock framework;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • MPAM driver;
  • Reset controller framework;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Xilinx SoC drivers;
  • SoundWire subsystem;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TTY drivers;
  • UFS subsystem;
  • USB DSL drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Virtio drivers;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • 9P distributed file system;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • Journaling layer for block devices (JBD2);
  • Network file systems library;
  • Network…
Record
USN-8887-2
Updated
2026-11-02
OSVUSN-8887-3 No score

linux-gcp-7.0, linux-hwe-7.0, linux-oracle-7.0 vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • Handshake API;
  • ARM32 architecture;
  • MIPS architecture;
  • OpenRISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • Rados block device (RBD) driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • DAX dirext access to differentiated memory framework;
  • DIBS (Direct Internal Buffer Sharing) drivers;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • DPLL subsystem;
  • EDAC drivers;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIB drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Intel Management Engine Interface driver;
  • Amazon Nitro Secure Module driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • Device tree and open firmware driver;
  • Operating Performance Points (OPP) driver;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • i.MX PM domains;
  • MediaTek PM domains;
  • Power supply drivers;
  • PTP clock framework;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • MPAM driver;
  • Reset controller framework;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Xilinx SoC drivers;
  • SoundWire subsystem;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TTY drivers;
  • UFS subsystem;
  • USB DSL drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Virtio drivers;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • 9P distributed file system;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • Journaling layer for block devices (JBD2);
  • Network file systems library;
  • Network…
Record
USN-8887-3
Updated
2026-11-02
OSVUSN-8888-1 No score

linux-azure, linux-azure-fde vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • Handshake API;
  • ARM32 architecture;
  • MIPS architecture;
  • OpenRISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • DAX dirext access to differentiated memory framework;
  • DIBS (Direct Internal Buffer Sharing) drivers;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • DPLL subsystem;
  • EDAC drivers;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIB drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Intel Management Engine Interface driver;
  • Amazon Nitro Secure Module driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • Device tree and open firmware driver;
  • Operating Performance Points (OPP) driver;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • i.MX PM domains;
  • MediaTek PM domains;
  • Power supply drivers;
  • PTP clock framework;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • MPAM driver;
  • Reset controller framework;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Xilinx SoC drivers;
  • SoundWire subsystem;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • TTY drivers;
  • UFS subsystem;
  • USB DSL drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Virtio drivers;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • 9P distributed file system;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • Journaling layer…
Record
USN-8888-1
Updated
2026-11-02
OSVUSN-8888-2 No score

linux-azure-7.0, linux-azure-fde-7.0 vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • Handshake API;
  • ARM32 architecture;
  • MIPS architecture;
  • OpenRISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • DAX dirext access to differentiated memory framework;
  • DIBS (Direct Internal Buffer Sharing) drivers;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • DPLL subsystem;
  • EDAC drivers;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIB drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Intel Management Engine Interface driver;
  • Amazon Nitro Secure Module driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • Device tree and open firmware driver;
  • Operating Performance Points (OPP) driver;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • i.MX PM domains;
  • MediaTek PM domains;
  • Power supply drivers;
  • PTP clock framework;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • MPAM driver;
  • Reset controller framework;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Xilinx SoC drivers;
  • SoundWire subsystem;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • TTY drivers;
  • UFS subsystem;
  • USB DSL drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Virtio drivers;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • 9P distributed file system;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • Journaling layer…
Record
USN-8888-2
Updated
2026-11-02
OSVUSN-8889-1 No score

linux-oem-7.0 vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • Handshake API;
  • ARM32 architecture;
  • MIPS architecture;
  • OpenRISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • Rados block device (RBD) driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • DAX dirext access to differentiated memory framework;
  • DIBS (Direct Internal Buffer Sharing) drivers;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • DPLL subsystem;
  • EDAC drivers;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIB drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Intel Management Engine Interface driver;
  • Amazon Nitro Secure Module driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • Device tree and open firmware driver;
  • Operating Performance Points (OPP) driver;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • i.MX PM domains;
  • MediaTek PM domains;
  • Power supply drivers;
  • PTP clock framework;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • MPAM driver;
  • Reset controller framework;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Xilinx SoC drivers;
  • SoundWire subsystem;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TTY drivers;
  • UFS subsystem;
  • USB DSL drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Virtio drivers;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • 9P distributed file system;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • Journaling layer for block devices (JBD2);
  • Network file systems library;
  • Network…
Record
USN-8889-1
Updated
2026-11-02
OSVUSN-8917-1 No score

linux, linux-aws, linux-aws-fips, linux-fips, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-ibm, linux-lowlatency, linux-oracle, linux-realtime vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • NVDIMM (Non-Volatile Memory Device) drivers;
  • Handshake API;
  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • Hardware random number generator core;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DAX dirext access to differentiated memory framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Intel Management Engine Interface driver;
  • Amazon Nitro Secure Module driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • PCI subsystem;
  • x86 platform drivers;
  • i.MX PM domains;
  • System reset/shutdown drivers;
  • Power supply drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • Reset controller framework;
  • RPMSG subsystem;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Xilinx SoC drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • VME bus staging drivers;
  • TCM subsystem;
  • TTY drivers;
  • USB DSL drivers;
  • Cadence USB3 driver;
  • ULPI bus;
  • USB core drivers;
  • DesignWare USB3 driver;
  • Faraday FOTG210 USB2 dual-role controller driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • 9P distributed file system;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file…
Record
USN-8917-1
Updated
2026-11-06

Affected products

Affected packages

Affected packages
PackageAffectedFixed
bpftool
AlmaLinux:8
From an advisory covering 6 CVEs
 before 4.18.0-553.181.1.el8_10
4.18.0-553.181.1.el8_10
kernel
AlmaLinux:8
From an advisory covering 6 CVEs
 before 4.18.0-553.181.1.el8_10
4.18.0-553.181.1.el8_10
kernel-abi-stablelists
AlmaLinux:8
From an advisory covering 6 CVEs
 before 4.18.0-553.181.1.el8_10
4.18.0-553.181.1.el8_10
kernel-core
AlmaLinux:8
From an advisory covering 6 CVEs
 before 4.18.0-553.181.1.el8_10
4.18.0-553.181.1.el8_10
kernel-cross-headers
AlmaLinux:8
From an advisory covering 6 CVEs
 before 4.18.0-553.181.1.el8_10
4.18.0-553.181.1.el8_10
kernel-debug
AlmaLinux:8
From an advisory covering 6 CVEs
 before 4.18.0-553.181.1.el8_10
4.18.0-553.181.1.el8_10
kernel-debug-core
AlmaLinux:8
From an advisory covering 6 CVEs
 before 4.18.0-553.181.1.el8_10
4.18.0-553.181.1.el8_10
kernel-debug-devel
AlmaLinux:8
From an advisory covering 6 CVEs
 before 4.18.0-553.181.1.el8_10
4.18.0-553.181.1.el8_10
kernel-debug-modules
AlmaLinux:8
From an advisory covering 6 CVEs
 before 4.18.0-553.181.1.el8_10
4.18.0-553.181.1.el8_10
kernel-debug-modules-extra
AlmaLinux:8
From an advisory covering 6 CVEs
 before 4.18.0-553.181.1.el8_10
4.18.0-553.181.1.el8_10
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-devel
AlmaLinux:8
From an advisory covering 6 CVEs
 before 4.18.0-553.181.1.el8_10
4.18.0-553.181.1.el8_10
kernel-doc
AlmaLinux:8
From an advisory covering 6 CVEs
 before 4.18.0-553.181.1.el8_10
4.18.0-553.181.1.el8_10
kernel-headers
AlmaLinux:8
From an advisory covering 6 CVEs
 before 4.18.0-553.181.1.el8_10
4.18.0-553.181.1.el8_10
kernel-modules
AlmaLinux:8
From an advisory covering 6 CVEs
 before 4.18.0-553.181.1.el8_10
4.18.0-553.181.1.el8_10
kernel-modules-extra
AlmaLinux:8
From an advisory covering 6 CVEs
 before 4.18.0-553.181.1.el8_10
4.18.0-553.181.1.el8_10
kernel-tools
AlmaLinux:8
From an advisory covering 6 CVEs
 before 4.18.0-553.181.1.el8_10
4.18.0-553.181.1.el8_10
kernel-tools-libs
AlmaLinux:8
From an advisory covering 6 CVEs
 before 4.18.0-553.181.1.el8_10
4.18.0-553.181.1.el8_10
kernel-tools-libs-devel
AlmaLinux:8
From an advisory covering 6 CVEs
 before 4.18.0-553.181.1.el8_10
4.18.0-553.181.1.el8_10
kernel-zfcpdump
AlmaLinux:8
From an advisory covering 6 CVEs
 before 4.18.0-553.181.1.el8_10
4.18.0-553.181.1.el8_10
kernel-zfcpdump-core
AlmaLinux:8
From an advisory covering 6 CVEs
 before 4.18.0-553.181.1.el8_10
4.18.0-553.181.1.el8_10
kernel-zfcpdump-devel
AlmaLinux:8
From an advisory covering 6 CVEs
 before 4.18.0-553.181.1.el8_10
4.18.0-553.181.1.el8_10
kernel-zfcpdump-modules
AlmaLinux:8
From an advisory covering 6 CVEs
 before 4.18.0-553.181.1.el8_10
4.18.0-553.181.1.el8_10
kernel-zfcpdump-modules-extra
AlmaLinux:8
From an advisory covering 6 CVEs
 before 4.18.0-553.181.1.el8_10
4.18.0-553.181.1.el8_10
perf
AlmaLinux:8
From an advisory covering 6 CVEs
 before 4.18.0-553.181.1.el8_10
4.18.0-553.181.1.el8_10
python3-perf
AlmaLinux:8
From an advisory covering 6 CVEs
 before 4.18.0-553.181.1.el8_10
4.18.0-553.181.1.el8_10
kernel-rt
AlmaLinux:8
From an advisory covering 6 CVEs
 before 4.18.0-553.181.1.rt7.522.el8_10
4.18.0-553.181.1.rt7.522.el8_10
kernel-rt-core
AlmaLinux:8
From an advisory covering 6 CVEs
 before 4.18.0-553.181.1.rt7.522.el8_10
4.18.0-553.181.1.rt7.522.el8_10
kernel-rt-debug
AlmaLinux:8
From an advisory covering 6 CVEs
 before 4.18.0-553.181.1.rt7.522.el8_10
4.18.0-553.181.1.rt7.522.el8_10
kernel-rt-debug-core
AlmaLinux:8
From an advisory covering 6 CVEs
 before 4.18.0-553.181.1.rt7.522.el8_10
4.18.0-553.181.1.rt7.522.el8_10
kernel-rt-debug-devel
AlmaLinux:8
From an advisory covering 6 CVEs
 before 4.18.0-553.181.1.rt7.522.el8_10
4.18.0-553.181.1.rt7.522.el8_10
kernel-rt-debug-modules
AlmaLinux:8
From an advisory covering 6 CVEs
 before 4.18.0-553.181.1.rt7.522.el8_10
4.18.0-553.181.1.rt7.522.el8_10
kernel-rt-debug-modules-extra
AlmaLinux:8
From an advisory covering 6 CVEs
 before 4.18.0-553.181.1.rt7.522.el8_10
4.18.0-553.181.1.rt7.522.el8_10
kernel-rt-devel
AlmaLinux:8
From an advisory covering 6 CVEs
 before 4.18.0-553.181.1.rt7.522.el8_10
4.18.0-553.181.1.rt7.522.el8_10
kernel-rt-modules
AlmaLinux:8
From an advisory covering 6 CVEs
 before 4.18.0-553.181.1.rt7.522.el8_10
4.18.0-553.181.1.rt7.522.el8_10
kernel-rt-modules-extra
AlmaLinux:8
From an advisory covering 6 CVEs
 before 4.18.0-553.181.1.rt7.522.el8_10
4.18.0-553.181.1.rt7.522.el8_10
linux-lts
Alpaquita:23
 6.1.177-r0 up to 6.1.182-r0
6.1.182-r0
linux-lts
Alpaquita:25
 6.12.95-r0 up to 6.12.103-r0
6.12.103-r0
linux-lts
Alpaquita:stream
 6.18.38-r0 up to 6.18.43-r0
6.18.43-r0
linux-buildinfo-5.4.0-239-generic
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-buildinfo-5.4.0-239-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-cloud-tools-5.4.0-239
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-cloud-tools-5.4.0-239-generic
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-cloud-tools-5.4.0-239-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-cloud-tools-common
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-doc
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-headers-5.4.0-239
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-headers-5.4.0-239-generic
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-headers-5.4.0-239-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-image-unsigned-5.4.0-239-generic
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-image-unsigned-5.4.0-239-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-libc-dev
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-modules-5.4.0-239-generic
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-modules-5.4.0-239-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-modules-extra-5.4.0-239-generic
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-source-5.4.0
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-tools-5.4.0-239
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-tools-5.4.0-239-generic
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-tools-5.4.0-239-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-tools-common
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-tools-host
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-buildinfo-4.15.0-266-generic
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-buildinfo-4.15.0-266-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-cloud-tools-4.15.0-266
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-cloud-tools-4.15.0-266-generic
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-cloud-tools-4.15.0-266-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-cloud-tools-common
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-doc
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-headers-4.15.0-266
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-headers-4.15.0-266-generic
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-headers-4.15.0-266-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-image-unsigned-4.15.0-266-generic
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-image-unsigned-4.15.0-266-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-libc-dev
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-modules-4.15.0-266-generic
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-modules-4.15.0-266-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-modules-extra-4.15.0-266-generic
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-source-4.15.0
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-tools-4.15.0-266
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-tools-4.15.0-266-generic
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-tools-4.15.0-266-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-tools-common
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-tools-host
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-buildinfo-4.15.0-266-generic
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-buildinfo-4.15.0-266-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-cloud-tools-4.15.0-266-generic
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-cloud-tools-4.15.0-266-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-headers-4.15.0-266
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-headers-4.15.0-266-generic
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-headers-4.15.0-266-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-hwe-cloud-tools-4.15.0-266
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-hwe-tools-4.15.0-266
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-image-unsigned-4.15.0-266-generic
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-image-unsigned-4.15.0-266-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-modules-4.15.0-266-generic
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-modules-4.15.0-266-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-modules-extra-4.15.0-266-generic
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-source-4.15.0
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-tools-4.15.0-266-generic
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-tools-4.15.0-266-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-buildinfo-4.4.0-288-generic
TuxCare:Ubuntu:16.04
From an advisory covering 198 CVEs
 before 4.4.0-288.322+tuxcare.els1
4.4.0-288.322+tuxcare.els1
linux-buildinfo-4.4.0-288-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 198 CVEs
 before 4.4.0-288.322+tuxcare.els1
4.4.0-288.322+tuxcare.els1
linux-cloud-tools-4.4.0-288
TuxCare:Ubuntu:16.04
From an advisory covering 198 CVEs
 before 4.4.0-288.322+tuxcare.els1
4.4.0-288.322+tuxcare.els1
linux-cloud-tools-4.4.0-288-generic
TuxCare:Ubuntu:16.04
From an advisory covering 198 CVEs
 before 4.4.0-288.322+tuxcare.els1
4.4.0-288.322+tuxcare.els1
linux-cloud-tools-4.4.0-288-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 198 CVEs
 before 4.4.0-288.322+tuxcare.els1
4.4.0-288.322+tuxcare.els1
linux-cloud-tools-common
TuxCare:Ubuntu:16.04
From an advisory covering 198 CVEs
 before 4.4.0-288.322+tuxcare.els1
4.4.0-288.322+tuxcare.els1
linux-doc
TuxCare:Ubuntu:16.04
From an advisory covering 198 CVEs
 before 4.4.0-288.322+tuxcare.els1
4.4.0-288.322+tuxcare.els1
linux-headers-4.4.0-288
TuxCare:Ubuntu:16.04
From an advisory covering 198 CVEs
 before 4.4.0-288.322+tuxcare.els1
4.4.0-288.322+tuxcare.els1
linux-headers-4.4.0-288-generic
TuxCare:Ubuntu:16.04
From an advisory covering 198 CVEs
 before 4.4.0-288.322+tuxcare.els1
4.4.0-288.322+tuxcare.els1
linux-headers-4.4.0-288-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 198 CVEs
 before 4.4.0-288.322+tuxcare.els1
4.4.0-288.322+tuxcare.els1
linux-image-unsigned-4.4.0-288-generic
TuxCare:Ubuntu:16.04
From an advisory covering 198 CVEs
 before 4.4.0-288.322+tuxcare.els1
4.4.0-288.322+tuxcare.els1
linux-image-unsigned-4.4.0-288-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 198 CVEs
 before 4.4.0-288.322+tuxcare.els1
4.4.0-288.322+tuxcare.els1
linux-libc-dev
TuxCare:Ubuntu:16.04
From an advisory covering 198 CVEs
 before 4.4.0-288.322+tuxcare.els1
4.4.0-288.322+tuxcare.els1
linux-modules-4.4.0-288-generic
TuxCare:Ubuntu:16.04
From an advisory covering 198 CVEs
 before 4.4.0-288.322+tuxcare.els1
4.4.0-288.322+tuxcare.els1
linux-modules-4.4.0-288-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 198 CVEs
 before 4.4.0-288.322+tuxcare.els1
4.4.0-288.322+tuxcare.els1
linux-modules-extra-4.4.0-288-generic
TuxCare:Ubuntu:16.04
From an advisory covering 198 CVEs
 before 4.4.0-288.322+tuxcare.els1
4.4.0-288.322+tuxcare.els1
linux-source-4.4.0
TuxCare:Ubuntu:16.04
From an advisory covering 198 CVEs
 before 4.4.0-288.322+tuxcare.els1
4.4.0-288.322+tuxcare.els1
linux-tools-4.4.0-288
TuxCare:Ubuntu:16.04
From an advisory covering 198 CVEs
 before 4.4.0-288.322+tuxcare.els1
4.4.0-288.322+tuxcare.els1
linux-tools-4.4.0-288-generic
TuxCare:Ubuntu:16.04
From an advisory covering 198 CVEs
 before 4.4.0-288.322+tuxcare.els1
4.4.0-288.322+tuxcare.els1
linux-tools-4.4.0-288-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 198 CVEs
 before 4.4.0-288.322+tuxcare.els1
4.4.0-288.322+tuxcare.els1
Kernel
Linux
 3.19.0 up to 5.10.261, 5.11.0 up to 5.15.212, 5.16.0 up to 6.1.178, 6.2.0 up to 6.6.145, 6.7.0 up to 6.12.97, 6.13.0 up to 6.18.40, 6.19.0 up to 7.1.5
5.10.2615.15.2126.1.1786.6.1456.12.976.18.407.1.5
linux
Debian:12
 before 6.1.180-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 45 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.170-16.1.170-26.1.170-36.1.172-16.1.174-16.1.176-16.1.177-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-1
6.1.180-1
linux
Debian:13
 before 6.12.100-1, plus listed versions
6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-1
Show 26 moreShow less
6.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-1
6.12.100-1
linux
Debian:14
 before 7.1.5-1, plus listed versions
6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1
Show 45 moreShow less
6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1
7.1.5-1
kernel
openEuler:24.03-LTS-SP1
From an advisory covering 51 CVEs
 before 6.6.0-145.1.24.161.oe2403sp1
6.6.0-145.1.24.161.oe2403sp1
kernel
openEuler:24.03-LTS-SP3
From an advisory covering 165 CVEs
 before 6.6.0-145.3.29.160.oe2403sp3
6.6.0-145.3.29.160.oe2403sp3
kernel
Rocky Linux:9
From an advisory covering 18 CVEs
 before 0:5.14.0-687.64.1.el9_8
0:5.14.0-687.64.1.el9_8
kernel
Rocky Linux:10
From an advisory covering 16 CVEs
 before 0:6.12.0-211.72.1.el10_2
0:6.12.0-211.72.1.el10_2
kernel-obs-build
SUSE:Linux Micro Extras 6.2
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-syms
SUSE:Linux Micro Extras 6.2
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-default
SUSE:Linux Micro 6.1
From an advisory covering 473 CVEs
 before 6.4.0-159998.53.1
6.4.0-159998.53.1
kernel-default-base
SUSE:Linux Micro 6.1
From an advisory covering 473 CVEs
 before 6.4.0-159998.53.1.159998.21.38
6.4.0-159998.53.1.159998.21.38
kernel-kvmsmall
SUSE:Linux Micro 6.1
From an advisory covering 473 CVEs
 before 6.4.0-159998.53.1
6.4.0-159998.53.1
kernel-source
SUSE:Linux Micro 6.1
From an advisory covering 473 CVEs
 before 6.4.0-159998.53.1
6.4.0-159998.53.1
podman
SUSE:Linux Micro 6.2
From an advisory covering 479 CVEs
 before 5.4.2-160000.6.1
5.4.2-160000.6.1
kernel-rt
SUSE:Linux Micro 6.1
From an advisory covering 479 CVEs
 before 6.4.0-159998.53.1
6.4.0-159998.53.1
kernel-source-rt
SUSE:Linux Micro 6.1
From an advisory covering 479 CVEs
 before 6.4.0-159998.53.1
6.4.0-159998.53.1
kernel-64kb
SUSE:Linux Micro 6.2
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-default
SUSE:Linux Micro 6.2
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-default-base
SUSE:Linux Micro 6.2
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1.160000.2.26
6.12.0-160000.39.1.160000.2.26
kernel-rt
SUSE:Linux Micro 6.2
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-source
SUSE:Linux Micro 6.2
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-64kb
SUSE:Linux Enterprise Server 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-azure
SUSE:Linux Enterprise Server 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-default
SUSE:Linux Enterprise Server 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-default-base
SUSE:Linux Enterprise Server 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1.160000.2.26
6.12.0-160000.39.1.160000.2.26
kernel-docs
SUSE:Linux Enterprise Server 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-kvmsmall
SUSE:Linux Enterprise Server 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-obs-qa
SUSE:Linux Enterprise Server 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-source
SUSE:Linux Enterprise Server 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-syms
SUSE:Linux Enterprise Server 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-64kb
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-azure
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-default
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1.160000.2.26
6.12.0-160000.39.1.160000.2.26
kernel-docs
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-kvmsmall
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-obs-qa
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-source
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-syms
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-zfcpdump
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-default
SUSE:Linux Micro 6.0
From an advisory covering 473 CVEs
 before 6.4.0-159998.53.1
6.4.0-159998.53.1
kernel-default-base
SUSE:Linux Micro 6.0
From an advisory covering 473 CVEs
 before 6.4.0-159998.53.1.159998.21.38
6.4.0-159998.53.1.159998.21.38
kernel-kvmsmall
SUSE:Linux Micro 6.0
From an advisory covering 473 CVEs
 before 6.4.0-159998.53.1
6.4.0-159998.53.1
kernel-source
SUSE:Linux Micro 6.0
From an advisory covering 473 CVEs
 before 6.4.0-159998.53.1
6.4.0-159998.53.1
kernel-rt
SUSE:Linux Micro 6.0
From an advisory covering 479 CVEs
 before 6.4.0-159998.53.1
6.4.0-159998.53.1
kernel-source-rt
SUSE:Linux Micro 6.0
From an advisory covering 479 CVEs
 before 6.4.0-159998.53.1
6.4.0-159998.53.1
kernel-livepatch-SLE15-SP7-RT_Update_21
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 508 CVEs
 before 1-150700.1.3.1
1-150700.1.3.1
kernel-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 508 CVEs
 before 6.4.0-150700.7.78.1
6.4.0-150700.7.78.1
kernel-source-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 508 CVEs
 before 6.4.0-150700.7.78.1
6.4.0-150700.7.78.1
kernel-syms-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 508 CVEs
 before 6.4.0-150700.7.78.1
6.4.0-150700.7.78.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1
6.4.0-150600.23.138.1
kernel-livepatch-SLE15-SP6_Update_32
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 124 CVEs
 before 1-150600.13.3.1
1-150600.13.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP6
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1
6.4.0-150600.23.138.1
kernel-64kb
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1
6.4.0-150600.23.138.1
kernel-default
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1
6.4.0-150600.23.138.1
kernel-default-base
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1.150600.12.64.1
6.4.0-150600.23.138.1.150600.12.64.1
kernel-docs
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1
6.4.0-150600.23.138.1
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1
6.4.0-150600.23.138.1
kernel-source
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1
6.4.0-150600.23.138.1
kernel-syms
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1
6.4.0-150600.23.138.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1
6.4.0-150600.23.138.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1
6.4.0-150600.23.138.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1.150600.12.64.1
6.4.0-150600.23.138.1.150600.12.64.1
kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1
6.4.0-150600.23.138.1
kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1
6.4.0-150600.23.138.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1
6.4.0-150600.23.138.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 124 CVEs
 before 6.4.0-150600.23.138.1
6.4.0-150600.23.138.1
kernel-rt
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 110 CVEs
 before 5.14.21-150500.13.164.1
5.14.21-150500.13.164.1
kernel-source-rt
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 110 CVEs
 before 5.14.21-150500.13.164.1
5.14.21-150500.13.164.1
kernel-rt
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 86 CVEs
 before 5.14.21-150400.15.189.1
5.14.21-150400.15.189.1
kernel-source-rt
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 86 CVEs
 before 5.14.21-150400.15.189.1
5.14.21-150400.15.189.1
kernel-rt
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 86 CVEs
 before 5.14.21-150400.15.189.1
5.14.21-150400.15.189.1
kernel-source-rt
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 86 CVEs
 before 5.14.21-150400.15.189.1
5.14.21-150400.15.189.1
kernel-default
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 110 CVEs
 before 5.14.21-150500.55.192.2
5.14.21-150500.55.192.2
kernel-default-base
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 110 CVEs
 before 5.14.21-150500.55.192.2.150500.6.89.2
5.14.21-150500.55.192.2.150500.6.89.2
kernel-source
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 110 CVEs
 before 5.14.21-150500.55.192.2
5.14.21-150500.55.192.2
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP5
From an advisory covering 110 CVEs
 before 5.14.21-150500.55.192.2
5.14.21-150500.55.192.2
kernel-livepatch-SLE15-SP5_Update_46
SUSE:Linux Enterprise Live Patching 15 SP5
From an advisory covering 110 CVEs
 before 1-150500.11.3.2
1-150500.11.3.2
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 110 CVEs
 before 5.14.21-150500.55.192.2
5.14.21-150500.55.192.2
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 110 CVEs
 before 5.14.21-150500.55.192.2
5.14.21-150500.55.192.2
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 110 CVEs
 before 5.14.21-150500.55.192.2.150500.6.89.2
5.14.21-150500.55.192.2.150500.6.89.2
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 110 CVEs
 before 5.14.21-150500.55.192.1
5.14.21-150500.55.192.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 110 CVEs
 before 5.14.21-150500.55.192.2
5.14.21-150500.55.192.2
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 110 CVEs
 before 5.14.21-150500.55.192.2
5.14.21-150500.55.192.2
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 110 CVEs
 before 5.14.21-150500.55.192.1
5.14.21-150500.55.192.1
linux-aws
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9
Show 45 moreShow less
4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80
 None known
linux-azure
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2
Show 45 moreShow less
4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1
 None known
linux-lts-xenial
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1
Show 45 moreShow less
4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1
 None known
linux
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11
Show 45 moreShow less
4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96
 None known
linux-aws
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18
Show 45 moreShow less
4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93
 None known
linux-aws-hwe
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1
Show 45 moreShow less
4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1
 None known
linux-azure
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 45 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71
 None known
linux-gcp
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
Show 45 moreShow less
4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1
 None known
linux-hwe
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 45 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1
 None known
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-kvm
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15
Show 45 moreShow less
4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.674.4.0-1062.694.4.0-1063.704.4.0-1064.714.4.0-1065.724.4.0-1066.734.4.0-1068.754.4.0-1069.764.4.0-1070.774.4.0-1071.784.4.0-1075.824.4.0-1076.834.4.0-1077.84
 None known
linux-oracle
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1
Show 45 moreShow less
4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1
 None known
linux-fips
Ubuntu:Pro:FIPS-updates:16.04:LTS
 All versions, plus listed versions
4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13
Show 45 moreShow less
4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78
 None known
linux-fips
Ubuntu:Pro:FIPS:16.04:LTS
 All versions, plus listed versions
4.4.0-1001.14.4.0-1002.2
 None known
linux
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 45 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107
 None known
linux-aws
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 45 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-aws-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-4.15
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102
Show 45 moreShow less
4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1
Show 45 moreShow less
5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-4.15
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92
Show 45 moreShow less
4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gcp-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 45 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-ibm-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1
Show 45 moreShow less
5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1
 None known
linux-kvm
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8
Show 45 moreShow less
4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13
Show 45 moreShow less
4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-oracle-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1
 None known
linux-raspi-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1
Show 45 moreShow less
5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1
 None known
linux-aws-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24
Show 45 moreShow less
4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93
 None known
linux-azure-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10
Show 45 moreShow less
4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80
 None known
linux-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42
Show 45 moreShow less
4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21
Show 45 moreShow less
4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.794.15.0-2075.804.15.0-2076.814.15.0-2077.83
 None known
linux-aws-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.4
 None known
linux-azure-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.2
 None known
linux-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1011.12
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.1
 None known
linux
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 45 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110
 None known
linux-aws
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5
Show 45 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1117.124~20.04.1, plus listed versions
5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1
Show 45 moreShow less
5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1
5.15.0-1117.124~20.04.1
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8
Show 45 moreShow less
5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
linux-azure-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
 None known
linux-azure-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1123.132~20.04.1, plus listed versions
5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1
Show 45 moreShow less
5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1
5.15.0-1123.132~20.04.1
linux-azure-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
 None known
linux-azure-fde
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
 None known
linux-azure-fde-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1122.131~20.04.1, plus listed versions
5.15.0-1019.24~20.04.1.15.15.0-1020.25~20.04.1.15.15.0-1021.26~20.04.1.15.15.0-1029.36~20.04.1.15.15.0-1030.37~20.04.1.1
Show 45 moreShow less
5.15.0-1031.38~20.04.1.15.15.0-1033.40~20.04.1.15.15.0-1034.41~20.04.1.25.15.0-1035.42~20.04.1.15.15.0-1036.43~20.04.1.15.15.0-1037.44~20.04.1.15.15.0-1038.45~20.04.1.15.15.0-1039.46~20.04.1.15.15.0-1040.47~20.04.1.15.15.0-1041.48~20.04.1.15.15.0-1042.49~20.04.1.15.15.0-1043.50~20.04.1.15.15.0-1046.53~20.04.1.15.15.0-1047.54~20.04.1.15.15.0-1049.56~20.04.1.15.15.0-1050.57~20.04.1.15.15.0-1051.59~20.04.1.15.15.0-1052.60~20.04.1.15.15.0-1053.61~20.04.1.15.15.0-1054.62~20.04.1.15.15.0-1056.64~20.04.1.15.15.0-1057.65~20.04.1.15.15.0-1058.66~20.04.2.15.15.0-1059.67~20.04.1.15.15.0-1060.69~20.04.1.15.15.0-1061.70~20.04.1.15.15.0-1063.72~20.04.1.15.15.0-1064.73~20.04.1.15.15.0-1065.74~20.04.1.15.15.0-1067.76~20.04.1.15.15.0-1068.77~20.04.1.15.15.0-1070.79~20.04.1.15.15.0-1071.80~20.04.1.15.15.0-1072.81~20.04.1.15.15.0-1073.82~20.04.1.15.15.0-1074.83~20.04.1.15.15.0-1076.85~20.04.1.15.15.0-1078.87~20.04.1.15.15.0-1081.90~20.04.1.15.15.0-1082.91~20.04.1.15.15.0-1086.95~20.04.1.15.15.0-1087.96~20.04.1.15.15.0-1088.97~20.04.1.15.15.0-1089.98~20.04.1.15.15.0-1091.100~20.04.1.1
5.15.0-1122.131~20.04.1
linux-bluefield
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.4.0-1007.105.4.0-1011.145.4.0-1012.155.4.0-1013.165.4.0-1016.19
Show 45 moreShow less
5.4.0-1019.225.4.0-1020.235.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1030.335.4.0-1032.355.4.0-1035.385.4.0-1036.395.4.0-1040.445.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1049.555.4.0-1050.565.4.0-1054.605.4.0-1058.645.4.0-1059.655.4.0-1060.665.4.0-1062.685.4.0-1064.705.4.0-1065.715.4.0-1066.725.4.0-1068.745.4.0-1070.765.4.0-1071.775.4.0-1072.785.4.0-1073.795.4.0-1074.805.4.0-1075.815.4.0-1076.825.4.0-1077.835.4.0-1078.845.4.0-1079.855.4.0-1080.875.4.0-1081.885.4.0-1082.895.4.0-1083.905.4.0-1084.915.4.0-1085.92
 None known
linux-gcp
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7
Show 45 moreShow less
5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1033.355.4.0-1034.375.4.0-1036.395.4.0-1037.405.4.0-1038.415.4.0-1040.435.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1044.475.4.0-1046.495.4.0-1049.535.4.0-1051.555.4.0-1052.565.4.0-1053.575.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1060.645.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1065.695.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1072.775.4.0-1073.785.4.0-1075.80
 None known
linux-gcp-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1
Show 7 moreShow less
5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3
 None known
linux-gcp-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1
Show 8 moreShow less
5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1
 None known
linux-gcp-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1118.128~20.04.1, plus listed versions
5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2
Show 45 moreShow less
5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.15.15.0-1065.73~20.04.15.15.0-1066.74~20.04.15.15.0-1067.75~20.04.15.15.0-1068.76~20.04.15.15.0-1069.77~20.04.15.15.0-1070.78~20.04.15.15.0-1071.79~20.04.15.15.0-1072.80~20.04.15.15.0-1073.81~20.04.15.15.0-1074.83~20.04.1
5.15.0-1118.128~20.04.1
linux-gcp-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41
 None known
linux-gke
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
 None known
linux-gke-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1
Show 13 moreShow less
5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1
 None known
linux-gkeop
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13
Show 45 moreShow less
5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77
 None known
linux-gkeop-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2
Show 40 moreShow less
5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1
 None known
linux-hwe-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1
Show 7 moreShow less
5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1
 None known
linux-hwe-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1
Show 11 moreShow less
5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1
 None known
linux-hwe-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-198.208~20.04.1, plus listed versions
5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
Show 45 moreShow less
5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1
5.15.0-198.208~20.04.1
linux-hwe-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1
Show 16 moreShow less
5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1
 None known
linux-ibm
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.4.0-1003.45.4.0-1004.55.4.0-1005.65.4.0-1006.75.4.0-1007.8
Show 45 moreShow less
5.4.0-1008.95.4.0-1010.115.4.0-1012.135.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1017.195.4.0-1018.205.4.0-1019.215.4.0-1020.225.4.0-1021.235.4.0-1023.255.4.0-1026.295.4.0-1028.325.4.0-1029.335.4.0-1031.355.4.0-1032.365.4.0-1033.375.4.0-1034.385.4.0-1036.415.4.0-1037.425.4.0-1040.455.4.0-1041.465.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1048.535.4.0-1049.545.4.0-1050.555.4.0-1051.565.4.0-1052.575.4.0-1053.585.4.0-1054.595.4.0-1056.615.4.0-1057.625.4.0-1058.635.4.0-1059.645.4.0-1060.655.4.0-1061.665.4.0-1063.685.4.0-1064.695.4.0-1065.705.4.0-1066.71
 None known
linux-ibm-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1111.115~20.04.1, plus listed versions
5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1
Show 45 moreShow less
5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.15.15.0-1057.60~20.04.15.15.0-1058.61~20.04.15.15.0-1059.62~20.04.15.15.0-1060.63~20.04.15.15.0-1061.64~20.04.15.15.0-1062.65~20.04.15.15.0-1063.66~20.04.15.15.0-1064.67~20.04.15.15.0-1065.68~20.04.15.15.0-1066.69~20.04.15.15.0-1067.70~20.04.15.15.0-1068.71~20.04.15.15.0-1069.72~20.04.15.15.0-1074.77~20.04.15.15.0-1075.78~20.04.15.15.0-1076.79~20.04.15.15.0-1078.81~20.04.15.15.0-1079.82~20.04.15.15.0-1080.83~20.04.15.15.0-1081.84~20.04.15.15.0-1083.86~20.04.15.15.0-1085.88~20.04.15.15.0-1086.89~20.04.15.15.0-1087.90~20.04.15.15.0-1089.92~20.04.15.15.0-1090.93~20.04.15.15.0-1091.94~20.04.15.15.0-1092.95~20.04.15.15.0-1093.96~20.04.15.15.0-1094.97~20.04.1
5.15.0-1111.115~20.04.1
linux-intel-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19
 None known
dtb-aarch64
openSUSE:Leap 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-64kb
openSUSE:Leap 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-azure
openSUSE:Leap 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-default
openSUSE:Leap 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-default-base
openSUSE:Leap 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1.160000.2.25
6.12.0-160000.39.1.160000.2.25
kernel-docs
openSUSE:Leap 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-kvmsmall
openSUSE:Leap 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-obs-build
openSUSE:Leap 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-obs-qa
openSUSE:Leap 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-rt
openSUSE:Leap 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-source
openSUSE:Leap 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-syms
openSUSE:Leap 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-zfcpdump
openSUSE:Leap 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1

History

History
RecordedChangedSources
affected, aliases, referencesOSV
affectedOSV
affectedOSV
affected, aliases, referencesOSV
affected, facts, referencesOSV
affected, aliases, referencesOSV
affected, aliases, referencesOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-74283 is a high vulnerability (CVSS 7.8) in Linux, published August 15, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.17%, the 6th percentile. Fixed in linux-lts 6.1.182-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 457 package rows, 2,780 versions, 5,269 references and the rest of 42 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 3 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open