Every CVE Search/ Get API key

CVE-2026-74580

vhost: reset the vring metadata cache on vring reconfiguration

8.8 HighPublic exploitFix available

In the Linux kernel, the following vulnerability has been resolved:

vhost: reset the vring metadata cache on vring reconfiguration

vq->meta_iotlb[] caches the vhost_iotlb_map that backs each vring metadata region, and iotlb_access_ok() returns early on a cache hit, taking the hit as proof that the region has already been validated:

if (vhost_vq_meta_fetch(vq, addr, len, type))
	return true;

The cache is reset on VHOST_IOTLB_UPDATE and VHOST_IOTLB_INVALIDATE, on device IOTLB (re)initialisation and on vq reset, but not when VHOST_SET_VRING_ADDR replaces vq->desc, vq->avail and vq->used, nor when VHOST_SET_VRING_NUM changes the region sizes.

With a device IOTLB attached both ioctls are accepted while the vq is live, and neither validates the addresses at ioctl time: vq_access_ok() and vq_log_used_access_ok() return true early because the addresses are GIOVAs, deferring validation to prefetch time. Once the cache has been populated that deferred validation no longer runs -- vq_meta_prefetch() hits the stale entry and returns true -- and vhost_vq_meta_fetch() keeps translating through the old mapping as

map->addr + addr - map->start

for an address the mapping no longer covers. vhost_copy_to_user() and vhost_copy_from_user() consume the result with __copy_to_user() and __copy_from_user(), which do not check it either, so a subsequent used ring update or descriptor fetch accesses memory outside the region the IOTLB actually maps.

Reset the metadata cache whenever the vring is reconfigured, so the new addresses are pushed back through iotlb_access_ok()'s slow path.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.41%Up 0.2 points since Aug 22, 2026
90%50%10%1%

What each source reports

CVE List Score used 8.8

vhost: reset the vring metadata cache on vring reconfiguration

In the Linux kernel, the following vulnerability has been resolved:

vhost: reset the vring metadata cache on vring reconfiguration

vq->meta_iotlb[] caches the vhost_iotlb_map that backs each vring metadata region, and iotlb_access_ok() returns early on a cache hit, taking the hit as proof that the region has already been validated:

if (vhost_vq_meta_fetch(vq, addr, len, type))
	return true;

The cache is reset on VHOST_IOTLB_UPDATE and VHOST_IOTLB_INVALIDATE, on device IOTLB (re)initialisation and on vq reset, but not when VHOST_SET_VRING_ADDR replaces vq->desc, vq->avail and vq->used, nor when VHOST_SET_VRING_NUM changes the region sizes.

With a device IOTLB attached both ioctls are accepted while the vq is live, and neither validates the addresses at ioctl time: vq_access_ok() and vq_log_used_access_ok() return true early because the addresses are GIOVAs, deferring validation to prefetch time. Once the cache has been populated that deferred validation no longer runs -- vq_meta_prefetch() hits the stale entry and returns true -- and vhost_vq_meta_fetch() keeps translating through the old mapping as

map->addr + addr - map->start

for an address the mapping no longer covers. vhost_copy_to_user() and vhost_copy_from_user() consume the result with __copy_to_user() and __copy_from_user(), which do not check it either, so a subsequent used ring update or descriptor fetch accesses memory outside the region the IOTLB actually maps.

Reset the metadata cache whenever the vring is reconfigured, so the new addresses are pushed back through iotlb_access_ok()'s slow path.

Record
CVE-2026-74580
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
EUVDEUVD-2026-64002 8.8

In the Linux kernel, the following vulnerability has been resolved:

vhost: reset the vring metadata cache on vring reconfiguration

vq->meta_iotlb[] caches the vhost_iotlb_map that backs each vring metadata region, and iotlb_access_ok() returns early on a cache hit, taking the hit as proof that the region has already been validated:

if (vhost_vq_meta_fetch(vq, addr, len, type))
	return true;

The cache is reset on VHOST_IOTLB_UPDATE and VHOST_IOTLB_INVALIDATE, on device IOTLB (re)initialisation and on vq reset, but not when VHOST_SET_VRING_ADDR replaces vq->desc, vq->avail and vq->used, nor when VHOST_SET_VRING_NUM changes the region sizes.

With a device IOTLB attached both ioctls are accepted while the vq is live, and neither validates the addresses at ioctl time: vq_access_ok() and vq_log_used_access_ok() return true early because the addresses are GIOVAs, deferring validation to prefetch time. Once the cache has been populated that deferred validation no longer runs -- vq_meta_prefetch() hits the stale entry and returns true -- and vhost_vq_meta_fetch() keeps translating through the old mapping as

map->addr + addr - map->start

for an address the mapping no longer covers. vhost_copy_to_user() and vhost_copy_from_user() consume the result with __copy_to_user() and __copy_from_user(), which do not check it either, so a subsequent used ring update or descriptor fetch accesses memory outside the region the IOTLB actually maps.

Reset the metadata cache whenever the vring is reconfigured, so the new addresses are pushed back through iotlb_access_ok()'s slow path.

Record
EUVD-2026-64002
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-mr6w-hqp3-cg59 8.8

In the Linux kernel, the following vulnerability has been resolved: vhost: reset the vring...

In the Linux kernel, the following vulnerability has been resolved:

vhost: reset the vring metadata cache on vring reconfiguration

vq->meta_iotlb[] caches the vhost_iotlb_map that backs each vring metadata region, and iotlb_access_ok() returns early on a cache hit, taking the hit as proof that the region has already been validated:

if (vhost_vq_meta_fetch(vq, addr, len, type))
	return true;

The cache is reset on VHOST_IOTLB_UPDATE and VHOST_IOTLB_INVALIDATE, on device IOTLB (re)initialisation and on vq reset, but not when VHOST_SET_VRING_ADDR replaces vq->desc, vq->avail and vq->used, nor when VHOST_SET_VRING_NUM changes the region sizes.

With a device IOTLB attached both ioctls are accepted while the vq is live, and neither validates the addresses at ioctl time: vq_access_ok() and vq_log_used_access_ok() return true early because the addresses are GIOVAs, deferring validation to prefetch time. Once the cache has been populated that deferred validation no longer runs -- vq_meta_prefetch() hits the stale entry and returns true -- and vhost_vq_meta_fetch() keeps translating through the old mapping as

map->addr + addr - map->start

for an address the mapping no longer covers. vhost_copy_to_user() and vhost_copy_from_user() consume the result with __copy_to_user() and __copy_from_user(), which do not check it either, so a subsequent used ring update or descriptor fetch accesses memory outside the region the IOTLB actually maps.

Reset the metadata cache whenever the vring is reconfigured, so the new addresses are pushed back through iotlb_access_ok()'s slow path.

Record
GHSA-mr6w-hqp3-cg59
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
NVD 8.8

In the Linux kernel, the following vulnerability has been resolved:

vhost: reset the vring metadata cache on vring reconfiguration

vq->meta_iotlb[] caches the vhost_iotlb_map that backs each vring metadata region, and iotlb_access_ok() returns early on a cache hit, taking the hit as proof that the region has already been validated:

if (vhost_vq_meta_fetch(vq, addr, len, type))
	return true;

The cache is reset on VHOST_IOTLB_UPDATE and VHOST_IOTLB_INVALIDATE, on device IOTLB (re)initialisation and on vq reset, but not when VHOST_SET_VRING_ADDR replaces vq->desc, vq->avail and vq->used, nor when VHOST_SET_VRING_NUM changes the region sizes.

With a device IOTLB attached both ioctls are accepted while the vq is live, and neither validates the addresses at ioctl time: vq_access_ok() and vq_log_used_access_ok() return true early because the addresses are GIOVAs, deferring validation to prefetch time. Once the cache has been populated that deferred validation no longer runs -- vq_meta_prefetch() hits the stale entry and returns true -- and vhost_vq_meta_fetch() keeps translating through the old mapping as

map->addr + addr - map->start

for an address the mapping no longer covers. vhost_copy_to_user() and vhost_copy_from_user() consume the result with __copy_to_user() and __copy_from_user(), which do not check it either, so a subsequent used ring update or descriptor fetch accesses memory outside the region the IOTLB actually maps.

Reset the metadata cache whenever the vring is reconfigured, so the new addresses are pushed back through iotlb_access_ok()'s slow path.

Record
CVE-2026-74580
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVBELL-CVE-2026-74580 8.8
Record
BELL-CVE-2026-74580
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSV 8.8

vhost: reset the vring metadata cache on vring reconfiguration

In the Linux kernel, the following vulnerability has been resolved:

vhost: reset the vring metadata cache on vring reconfiguration

vq->meta_iotlb[] caches the vhost_iotlb_map that backs each vring metadata region, and iotlb_access_ok() returns early on a cache hit, taking the hit as proof that the region has already been validated:

if (vhost_vq_meta_fetch(vq, addr, len, type))
	return true;

The cache is reset on VHOST_IOTLB_UPDATE and VHOST_IOTLB_INVALIDATE, on device IOTLB (re)initialisation and on vq reset, but not when VHOST_SET_VRING_ADDR replaces vq->desc, vq->avail and vq->used, nor when VHOST_SET_VRING_NUM changes the region sizes.

With a device IOTLB attached both ioctls are accepted while the vq is live, and neither validates the addresses at ioctl time: vq_access_ok() and vq_log_used_access_ok() return true early because the addresses are GIOVAs, deferring validation to prefetch time. Once the cache has been populated that deferred validation no longer runs -- vq_meta_prefetch() hits the stale entry and returns true -- and vhost_vq_meta_fetch() keeps translating through the old mapping as

map->addr + addr - map->start

for an address the mapping no longer covers. vhost_copy_to_user() and vhost_copy_from_user() consume the result with __copy_to_user() and __copy_from_user(), which do not check it either, so a subsequent used ring update or descriptor fetch accesses memory outside the region the IOTLB actually maps.

Reset the metadata cache whenever the vring is reconfigured, so the new addresses are pushed back through iotlb_access_ok()'s slow path.

Record
CVE-2026-74580
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
Show 48 moreShow less
OSVDEBIAN-CVE-2026-74580 8.8

In the Linux kernel, the following vulnerability has been resolved: vhost: reset the vring metadata cache on vring reconfiguration vq->meta_iotlb[] caches the vhost_iotlb_map that backs each vring metadata region, and iotlb_access_ok() returns early on a cache hit, taking the hit as proof that the region has already been validated: if (vhost_vq_meta_fetch(vq, addr, len, type)) return true; The cache is reset on VHOST_IOTLB_UPDATE and VHOST_IOTLB_INVALIDATE, on device IOTLB (re)initialisation and on vq reset, but not when VHOST_SET_VRING_ADDR replaces vq->desc, vq->avail and vq->used, nor when VHOST_SET_VRING_NUM changes the region sizes. With a device IOTLB attached both ioctls are accepted while the vq is live, and neither validates the addresses at ioctl time: vq_access_ok() and vq_log_used_access_ok() return true early because the addresses are GIOVAs, deferring validation to prefetch time. Once the cache has been populated that deferred validation no longer runs -- vq_meta_prefetch() hits the stale entry and returns true -- and vhost_vq_meta_fetch() keeps translating through the old mapping as map->addr + addr - map->start for an address the mapping no longer covers. vhost_copy_to_user() and vhost_copy_from_user() consume the result with __copy_to_user() and __copy_from_user(), which do not check it either, so a subsequent used ring update or descriptor fetch accesses memory outside the region the IOTLB actually maps. Reset the metadata cache whenever the vring is reconfigured, so the new addresses are pushed back through iotlb_access_ok()'s slow path.

Record
DEBIAN-CVE-2026-74580
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-3706 9.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:net: af_can: do not leave a dangling sk pointer in can_create()On error can_create() frees the allocated sk object, but sock_init_data()has already attached it to the provided sock object. This will leave adangling sk pointer in the sock object and may cause use-after-free later.(CVE-2024-56603)

In the Linux kernel, the following vulnerability has been resolved:

hdlc_ppp: sync per-proto timers before freeing hdlc state

Each PPP control protocol (LCP/IPCP/IPV6CP) embedded in struct ppp registers a timer via timer_setup(). That struct ppp is the hdlc->state allocation, which detach_hdlc_protocol() frees with kfree() in both teardown paths: unregister_hdlc_device() and the re-attach inside attach_hdlc_protocol().

The ppp proto never registered a .detach callback, so detach_hdlc_protocol() performs no timer synchronization before the kfree(). The only cancel, timer_delete(&proto->timer) in ppp_cp_event(), is partial (it does not wait for a running callback) and only runs on the ->CLOSED transition; ppp_stop()/ppp_close() do not sync either. A ppp_timer callback already executing (blocked on ppp->lock) survives the kfree and then dereferences proto->state / ppp->lock in freed memory, leading to a use-after-free.

Fix this by adding a .detach helper that calls timer_shutdown_sync() on every per-proto timer. detach_hdlc_protocol() invokes proto->detach(dev) before kfree(hdlc->state), so timer_shutdown_sync() now runs on both free paths. timer_shutdown_sync() is used instead of timer_delete_sync() because the keepalive path re-arms the timer through add_timer()/mod_timer() and shutdown blocks any re-activation during teardown.

Initialize the per-protocol timers in ppp_ioctl() when the protocol is attached, and remove the now-redundant timer_setup() from ppp_start(), so that the timers are initialized exactly once at attach time and ppp_timer_release() never operates on uninitialized timer_list structures. attach_hdlc_protocol() uses kmalloc() (not kzalloc), so struct ppp's protos[i].timer is uninitialized garbage until the first timer_setup(); without this init-at-attach, attaching the PPP protocol without ever bringing the device up would leave timer_shutdown_sync() operating on uninitialized memory in .detach. Moving the init out of ppp_start() (which only runs on NETDEV_UP) into the attach path makes the initialization unconditional and avoids initializing the same timer_list twice.

This bug was found by static analysis.(CVE-2026-63803)

In the Linux kernel, the following vulnerability has been resolved:

parport: Fix race between port and client registration

The parport subsystem registers port devices before they are fully initialised, resulting in a race condition where client drivers such as lp can attach to ports that are not completely initialised or even being torn down.

When the port and client drivers are built as modules and loaded around the same time during boot, this occasionally results in a crash. I was able to make this happen reliably in a VM with a PC-style parallel port by patching parport_pc to fail probing:

> --- a/drivers/parport/parport_pc.c > +++ b/drivers/parport/parport_pc.c > @@ -2069,7 +2069,7 @@ static struct parport *__parport_pc_probe_port(unsigned long int base, > if (!p) > goto out3; > > - base_res = request_region(base, 3, p->name); > + base_res = NULL; > if (!base_res) > goto out4; >

and then running:

while true; do
    modprobe lp & modprobe parport_pc
wait
rmmod lp parport_pc
done

for a few seconds.

In the long term I think port registration should be changed to put the call to device_add() inside parport_announce_port(), but since the latter currently cannot fail this will require changing all port drivers.

For now, add a flag to indicate…

Record
OESA-2026-3706
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:55764 8.7

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:55764
CVSS 3.1
8.7 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:H
Updated
2026-11-02
OSVRHSA-2026:55765 8.7

Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Record
RHSA-2026:55765
CVSS 3.1
8.7 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:H
Updated
2026-11-02
OSVRHSA-2026:57251 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:57251
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:57252 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:57252
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:59473 8.7

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:59473
CVSS 3.1
8.7 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:H
Updated
2026-11-02
OSVRHSA-2026:59544 8.7

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:59544
CVSS 3.1
8.7 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:H
Updated
2026-11-02
OSVRHSA-2026:59662 8.7

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:59662
CVSS 3.1
8.7 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:H
Updated
2026-11-02
OSVRHSA-2026:59663 8.7

Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Record
RHSA-2026:59663
CVSS 3.1
8.7 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:H
Updated
2026-11-02
OSVRHSA-2026:61256 8.7

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:61256
CVSS 3.1
8.7 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:H
Updated
2026-11-02
OSVRHSA-2026:61351 8.7

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:61351
CVSS 3.1
8.7 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:H
Updated
2026-11-02
OSVRHSA-2026:62568 8.7

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:62568
CVSS 3.1
8.7 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:H
Updated
2026-11-02
OSVRHSA-2026:65710 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:65710
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:81349 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:81349
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:81371 8.8

Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Record
RHSA-2026:81371
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-74580 8.8

In the Linux kernel, the following vulnerability has been resolved: vhost: reset the vring metadata cache on vring reconfiguration vq->meta_iotlb[] caches the vhost_iotlb_map that backs each vring metadata region, and iotlb_access_ok() returns early on a cache hit, taking the hit as proof that the region has already been validated: if (vhost_vq_meta_fetch(vq, addr, len, type)) return true; The cache is reset on VHOST_IOTLB_UPDATE and VHOST_IOTLB_INVALIDATE, on device IOTLB (re)initialisation and on vq reset, but not when VHOST_SET_VRING_ADDR replaces vq->desc, vq->avail and vq->used, nor when VHOST_SET_VRING_NUM changes the region sizes. With a device IOTLB attached both ioctls are accepted while the vq is live, and neither validates the addresses at ioctl time: vq_access_ok() and vq_log_used_access_ok() return true early because the addresses are GIOVAs, deferring validation to prefetch time. Once the cache has been populated that deferred validation no longer runs -- vq_meta_prefetch() hits the stale entry and returns true -- and vhost_vq_meta_fetch() keeps translating through the old mapping as map->addr + addr - map->start for an address the mapping no longer covers. vhost_copy_to_user() and vhost_copy_from_user() consume the result with __copy_to_user() and __copy_from_user(), which do not check it either, so a subsequent used ring update or descriptor fetch accesses memory outside the region the IOTLB actually maps. Reset the metadata cache whenever the vring is reconfigured, so the new addresses are pushed back through iotlb_access_ok()'s slow path.

Record
UBUNTU-CVE-2026-74580
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-06
OSVALSA-2026:55764 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (CVE-2025-39902)
  • kernel: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CVE-2026-43206)
  • kernel: crypto: ccp - copy IV using skcipher ivsize (CVE-2026-53016)
  • kernel: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CVE-2026-53136)
  • kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CVE-2026-53329)
  • kernel: drm/amdgpu: zero-initialize GART table on allocation (CVE-2026-53374)
  • kernel: drm/i915: Fix potential UAF in TTM object purge (CVE-2026-63884)
  • kernel: drm/amdgpu: fix amdgpu_hmm_range_get_pages (CVE-2026-63879)
  • kernel: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CVE-2026-64219)
  • kernel: can:bcm: arbitrary kernel code execution leading to escalate privileges (CVE-2026-17523)

Bug Fix(es) and Enhancement(s):

  • Backport "sched/deadline: Fix bandwidth reclaim equation in GRUB" to AlmaLinux 8.10 (JIRA:AlmaLinux-189997)
  • vhost: reset the vring metadata cache on vring reconfiguration [almalinux-8.10.z] (JIRA:AlmaLinux-224556)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:55764
Updated
2026-11-02
OSVALSA-2026:55765 No score

Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (CVE-2025-39902)
  • kernel: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CVE-2026-43206)
  • kernel: crypto: ccp - copy IV using skcipher ivsize (CVE-2026-53016)
  • kernel: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CVE-2026-53136)
  • kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CVE-2026-53329)
  • kernel: drm/amdgpu: zero-initialize GART table on allocation (CVE-2026-53374)
  • kernel: drm/i915: Fix potential UAF in TTM object purge (CVE-2026-63884)
  • kernel: drm/amdgpu: fix amdgpu_hmm_range_get_pages (CVE-2026-63879)
  • kernel: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CVE-2026-64219)
  • kernel: can:bcm: arbitrary kernel code execution leading to escalate privileges (CVE-2026-17523)

Bug Fix(es) and Enhancement(s):

  • Backport "sched/deadline: Fix bandwidth reclaim equation in GRUB" to AlmaLinux 8.10 (JIRA:AlmaLinux-189997)
  • vhost: reset the vring metadata cache on vring reconfiguration [almalinux-8.10.z] (JIRA:AlmaLinux-224556)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:55765
Updated
2026-11-02
OSVALSA-2026:57251 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CVE-2026-43206)
  • kernel: drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CVE-2026-43237)
  • kernel: crypto: pcrypt - Fix handling of MAY_BACKLOG requests (CVE-2026-43493)
  • kernel: udf: fix partition descriptor append bookkeeping (CVE-2026-45991)
  • kernel: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CVE-2026-45878)
  • kernel: smb/client: fix out-of-bounds read in symlink_data() (CVE-2026-46185)
  • kernel: sched/psi: fix race between file release and pressure write (CVE-2026-52991)
  • kernel: drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CVE-2026-53143)
  • kernel: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CVE-2026-53136)
  • kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CVE-2026-53329)
  • kernel: drm/i915/gem: Fix phys BO pread/pwrite with offset (CVE-2026-53356)
  • kernel: drm/amdgpu: zero-initialize GART table on allocation (CVE-2026-53374)
  • kernel: drm/i915: Fix potential UAF in TTM object purge (CVE-2026-63884)
  • kernel: scsi: target: iscsi: Validate CHAP_R length before base64 decode (CVE-2026-63886)
  • kernel: memfd: deny writeable mappings when implying SEAL_WRITE (CVE-2026-63952)
  • kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (CVE-2026-63888)
  • kernel: blk-mq: pop cached request if it is usable (CVE-2026-64017)
  • kernel: drm/amdgpu: fix amdgpu_hmm_range_get_pages (CVE-2026-63879)
  • kernel: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CVE-2026-64219)
  • kernel: smb: client: fix double-free in SMB2_open() replay (CVE-2026-64382)
  • kernel: smb: client: mask server-provided mode to 07777 in modefromsid (CVE-2026-64379)
  • kernel: smb: client: fix query_info() replay double-free (CVE-2026-64386)
  • kernel: posix-cpu-timers: Prevent UAF caused by non-leader exec() race (CVE-2026-64560)
  • kernel: smb/client: handle overlapping allocated ranges in fallocate (CVE-2026-68388)

Bug Fix(es) and Enhancement(s):

  • CLONE - AlmaLinux 10.2.z xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (JIRA:AlmaLinux-223954)
  • vhost: reset the vring metadata cache on vring reconfiguration [almalinux-10.2.z] (JIRA:AlmaLinux-224545)
  • cifs: periodic IO errors when rename races with lease break [almalinux-10.2.z] (JIRA:AlmaLinux-235459)
  • cifs: smb1 directory listings from xp server returning EINVAL and EIO [almalinux-10.2.z] (JIRA:AlmaLinux-235812)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:57251
Updated
2026-11-02
OSVALSA-2026:57252 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CVE-2026-43233)
  • kernel: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CVE-2026-43206)
  • kernel: drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CVE-2026-43237)
  • kernel: udf: fix partition descriptor append bookkeeping (CVE-2026-45991)
  • kernel: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CVE-2026-45878)
  • kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() (CVE-2026-46120)
  • kernel: sched/psi: fix race between file release and pressure write (CVE-2026-52991)
  • kernel: drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CVE-2026-53143)
  • kernel: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CVE-2026-53136)
  • kernel: mm/huge_memory: update file PMD counter before folio_put() (CVE-2026-53189)
  • kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CVE-2026-53329)
  • kernel: drm/i915/gem: Fix phys BO pread/pwrite with offset (CVE-2026-53356)
  • kernel: drm/amdgpu: zero-initialize GART table on allocation (CVE-2026-53374)
  • kernel: drm/i915: Fix potential UAF in TTM object purge (CVE-2026-63884)
  • kernel: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CVE-2026-64007)
  • kernel: memfd: deny writeable mappings when implying SEAL_WRITE (CVE-2026-63952)
  • kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (CVE-2026-63888)
  • kernel: drm/amdgpu: fix amdgpu_hmm_range_get_pages (CVE-2026-63879)
  • kernel: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CVE-2026-64048)
  • kernel: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CVE-2026-64219)
  • kernel: smb: client: fix double-free in SMB2_open() replay (CVE-2026-64382)
  • kernel: smb: client: mask server-provided mode to 07777 in modefromsid (CVE-2026-64379)
  • kernel: smb: client: fix query_info() replay double-free (CVE-2026-64386)
  • kernel: posix-cpu-timers: Prevent UAF caused by non-leader exec() race (CVE-2026-64560)
  • kernel: smb: client: validate DFS referral PathConsumed (CVE-2026-68343)
  • kernel: smb/client: handle overlapping allocated ranges in fallocate (CVE-2026-68388)

Bug Fix(es) and Enhancement(s):

  • kernel 5.14.0-687.5.1.el9_8 breaks wifi when using FIPS (JIRA:AlmaLinux-181065)
  • vhost: reset the vring metadata cache on vring reconfiguration [almalinux-9.8.z] (JIRA:AlmaLinux-224549)
  • cifs: smb1 directory listings from xp server returning EINVAL and EIO [almalinux-9.8.z] (JIRA:AlmaLinux-235811)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:57252
Updated
2026-11-02
OSVAZL-96992 No score

CVE-2026-74580 affecting package kernel for versions less than 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved:

vhost: reset the vring metadata cache on vring reconfiguration

vq->meta_iotlb[] caches the vhost_iotlb_map that backs each vring metadata region, and iotlb_access_ok() returns early on a cache hit, taking the hit as proof that the region has already been validated:

if (vhost_vq_meta_fetch(vq, addr, len, type))
	return true;

The cache is reset on VHOST_IOTLB_UPDATE and VHOST_IOTLB_INVALIDATE, on device IOTLB (re)initialisation and on vq reset, but not when VHOST_SET_VRING_ADDR replaces vq->desc, vq->avail and vq->used, nor when VHOST_SET_VRING_NUM changes the region sizes.

With a device IOTLB attached both ioctls are accepted while the vq is live, and neither validates the addresses at ioctl time: vq_access_ok() and vq_log_used_access_ok() return true early because the addresses are GIOVAs, deferring validation to prefetch time. Once the cache has been populated that deferred validation no longer runs -- vq_meta_prefetch() hits the stale entry and returns true -- and vhost_vq_meta_fetch() keeps translating through the old mapping as

map->addr + addr - map->start

for an address the mapping no longer covers. vhost_copy_to_user() and vhost_copy_from_user() consume the result with __copy_to_user() and __copy_from_user(), which do not check it either, so a subsequent used ring update or descriptor fetch accesses memory outside the region the IOTLB actually maps.

Reset the metadata cache whenever the vring is reconfigured, so the new addresses are pushed back through iotlb_access_ok()'s slow path.

Record
AZL-96992
Updated
2026-11-02
OSVCLSA-2026-1789037015 No score

kernel: Fix of 51 CVEs

  • net: openvswitch: fix skb leak on flow key update failure during ct {CVE-2026-74464}
  • can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error {CVE-2026-74456}
  • wifi: mwifiex: fix permanently busy scans after multiple roam iterations {CVE-2026-68469}
  • drm/amdgpu/gfx8: drop unecessary BUG_ON() {CVE-2026-68430}
  • sctp: auth: verify auth requirement when auth_chunk is NULL {CVE-2026-68300}
  • cdrom: fix stack out-of-bounds read in CDROMVOLCTRL {CVE-2026-68184}
  • wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read {CVE-2026-68351}
  • wifi: carl9170: fix buffer overflow in rx_stream failover path {CVE-2026-68349}
  • wifi: carl9170: fix OOB read from off-by-two in TX status handler {CVE-2026-68350}
  • net: sit: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72061}
  • net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72055}
  • net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72054}
  • net: ipip: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72053}
  • net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72051}
  • net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-63829}
  • usb: free iso schedules on failed submit {CVE-2026-64348}
  • smb: client: restrict implied bcc[0] exemption to responses without data area {CVE-2026-64448}
  • net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422}
  • netfilter: ebtables: terminate table name before find_table_lock() {CVE-2026-64411}
  • netfilter: ebtables: zero chainstack array {CVE-2026-64413}
  • USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}
  • USB: iowarrior: fix use-after-free on disconnect race {CVE-2026-64341}
  • udf: validate VAT header length against the VAT inode size {CVE-2026-64323}
  • udf: validate sparing table length as an entry count, not a byte count {CVE-2026-64322}
  • can: bcm: track a single source interface for ANYDEV timeout/throttle ops {CVE-2026-72115}
  • can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler() {CVE-2026-72117}
  • can: bcm: fix stale rx/tx ops after device removal {CVE-2026-72116}
  • can: bcm: add missing device refcount for CAN filter removal {CVE-2026-72113}
  • scsi: libiscsi: Move ehwait initialization to iscsi_session_setup() {CVE-2021-47328}
  • sctp: validate cookie AUTH state before use {CVE-2026-74752}
  • drm/amdgpu: reject oversized IBs with per-ring packet limits {CVE-2026-80576}
  • libceph: Avoid using invalid osd indices from primary_temp {CVE-2026-80558}
  • can: bcm: restore op->flags assignment lost in the bcm_tx_lock backport {CVE-2025-38004}
  • can: bcm: fix CAN frame rx/tx statistics {CVE-2026-72118}
  • can: bcm: add locking when updating filter and timer values {CVE-2026-72121}
  • can: bcm: fix out-of-bounds frame read introduced by the bcm_tx_lock backport {CVE-2025-38004}
  • mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() {CVE-2026-72308}
  • can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure {CVE-2026-72122}
  • can: bcm: fix warning in bcm_connect/proc_register {CVE-2026-72113}
  • ipv4: fix use-after-free in fib_nhc_update_mtu() {CVE-2026-74656}
  • perf/core: Fix group leader use-after-free after sibling detach {CVE-2026-74637}
  • sctp: fix use-after-free of cached ASCONF chunk {CVE-2026-74587}
  • sctp: clear control chunk transport if it is being removed {CVE-2026-74688}
  • ALSA: usb-audio: fix OOB write on Type II inbound URBs {CVE-2026-74682}
  • ALSA: usx2y: bound the hwdep mmap fault offset {CVE-2026-74641}
  • enic: fix tx_hang_reset use-after-free on device removal {CVE-2026-74725}
  • udp: fix potential use-after-free in tunnel segmentation {CVE-2026-74705}
  • ip6_tunnel: clear skb2->cb[] in ip6ip6_err() {CVE-2026-74597}
  • ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}
  • vhost: reset the vring metadata cache on vring reconfiguration {CVE-2026-74580} -…
Record
CLSA-2026-1789037015
Updated
2026-11-02
OSVCLSA-2026-1789039259 No score

kernel: Fix of 51 CVEs

  • net: openvswitch: fix skb leak on flow key update failure during ct {CVE-2026-74464}
  • can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error {CVE-2026-74456}
  • wifi: mwifiex: fix permanently busy scans after multiple roam iterations {CVE-2026-68469}
  • drm/amdgpu/gfx8: drop unecessary BUG_ON() {CVE-2026-68430}
  • sctp: auth: verify auth requirement when auth_chunk is NULL {CVE-2026-68300}
  • cdrom: fix stack out-of-bounds read in CDROMVOLCTRL {CVE-2026-68184}
  • wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read {CVE-2026-68351}
  • wifi: carl9170: fix buffer overflow in rx_stream failover path {CVE-2026-68349}
  • wifi: carl9170: fix OOB read from off-by-two in TX status handler {CVE-2026-68350}
  • net: sit: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72061}
  • net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72055}
  • net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72054}
  • net: ipip: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72053}
  • net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72051}
  • net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-63829}
  • usb: free iso schedules on failed submit {CVE-2026-64348}
  • smb: client: restrict implied bcc[0] exemption to responses without data area {CVE-2026-64448}
  • net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422}
  • netfilter: ebtables: terminate table name before find_table_lock() {CVE-2026-64411}
  • netfilter: ebtables: zero chainstack array {CVE-2026-64413}
  • USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}
  • USB: iowarrior: fix use-after-free on disconnect race {CVE-2026-64341}
  • udf: validate VAT header length against the VAT inode size {CVE-2026-64323}
  • udf: validate sparing table length as an entry count, not a byte count {CVE-2026-64322}
  • can: bcm: track a single source interface for ANYDEV timeout/throttle ops {CVE-2026-72115}
  • can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler() {CVE-2026-72117}
  • can: bcm: fix stale rx/tx ops after device removal {CVE-2026-72116}
  • can: bcm: add missing device refcount for CAN filter removal {CVE-2026-72113}
  • scsi: libiscsi: Move ehwait initialization to iscsi_session_setup() {CVE-2021-47328}
  • sctp: validate cookie AUTH state before use {CVE-2026-74752}
  • drm/amdgpu: reject oversized IBs with per-ring packet limits {CVE-2026-80576}
  • libceph: Avoid using invalid osd indices from primary_temp {CVE-2026-80558}
  • can: bcm: restore op->flags assignment lost in the bcm_tx_lock backport {CVE-2025-38004}
  • can: bcm: fix CAN frame rx/tx statistics {CVE-2026-72118}
  • can: bcm: add locking when updating filter and timer values {CVE-2026-72121}
  • can: bcm: fix out-of-bounds frame read introduced by the bcm_tx_lock backport {CVE-2025-38004}
  • mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() {CVE-2026-72308}
  • can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure {CVE-2026-72122}
  • can: bcm: fix warning in bcm_connect/proc_register {CVE-2026-72113}
  • ipv4: fix use-after-free in fib_nhc_update_mtu() {CVE-2026-74656}
  • perf/core: Fix group leader use-after-free after sibling detach {CVE-2026-74637}
  • sctp: fix use-after-free of cached ASCONF chunk {CVE-2026-74587}
  • sctp: clear control chunk transport if it is being removed {CVE-2026-74688}
  • ALSA: usb-audio: fix OOB write on Type II inbound URBs {CVE-2026-74682}
  • ALSA: usx2y: bound the hwdep mmap fault offset {CVE-2026-74641}
  • enic: fix tx_hang_reset use-after-free on device removal {CVE-2026-74725}
  • udp: fix potential use-after-free in tunnel segmentation {CVE-2026-74705}
  • ip6_tunnel: clear skb2->cb[] in ip6ip6_err() {CVE-2026-74597}
  • ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}
  • vhost: reset the vring metadata cache on vring reconfiguration {CVE-2026-74580} -…
Record
CLSA-2026-1789039259
Updated
2026-11-02
OSVCLSA-2026-1789039867 No score

kernel: Fix of 51 CVEs

  • net: openvswitch: fix skb leak on flow key update failure during ct {CVE-2026-74464}
  • can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error {CVE-2026-74456}
  • wifi: mwifiex: fix permanently busy scans after multiple roam iterations {CVE-2026-68469}
  • drm/amdgpu/gfx8: drop unecessary BUG_ON() {CVE-2026-68430}
  • sctp: auth: verify auth requirement when auth_chunk is NULL {CVE-2026-68300}
  • cdrom: fix stack out-of-bounds read in CDROMVOLCTRL {CVE-2026-68184}
  • wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read {CVE-2026-68351}
  • wifi: carl9170: fix buffer overflow in rx_stream failover path {CVE-2026-68349}
  • wifi: carl9170: fix OOB read from off-by-two in TX status handler {CVE-2026-68350}
  • net: sit: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72061}
  • net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72055}
  • net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72054}
  • net: ipip: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72053}
  • net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72051}
  • net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-63829}
  • usb: free iso schedules on failed submit {CVE-2026-64348}
  • smb: client: restrict implied bcc[0] exemption to responses without data area {CVE-2026-64448}
  • net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422}
  • netfilter: ebtables: terminate table name before find_table_lock() {CVE-2026-64411}
  • netfilter: ebtables: zero chainstack array {CVE-2026-64413}
  • USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}
  • USB: iowarrior: fix use-after-free on disconnect race {CVE-2026-64341}
  • udf: validate VAT header length against the VAT inode size {CVE-2026-64323}
  • udf: validate sparing table length as an entry count, not a byte count {CVE-2026-64322}
  • can: bcm: track a single source interface for ANYDEV timeout/throttle ops {CVE-2026-72115}
  • can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler() {CVE-2026-72117}
  • can: bcm: fix stale rx/tx ops after device removal {CVE-2026-72116}
  • can: bcm: add missing device refcount for CAN filter removal {CVE-2026-72113}
  • scsi: libiscsi: Move ehwait initialization to iscsi_session_setup() {CVE-2021-47328}
  • sctp: validate cookie AUTH state before use {CVE-2026-74752}
  • drm/amdgpu: reject oversized IBs with per-ring packet limits {CVE-2026-80576}
  • libceph: Avoid using invalid osd indices from primary_temp {CVE-2026-80558}
  • can: bcm: restore op->flags assignment lost in the bcm_tx_lock backport {CVE-2025-38004}
  • can: bcm: fix CAN frame rx/tx statistics {CVE-2026-72118}
  • can: bcm: add locking when updating filter and timer values {CVE-2026-72121}
  • can: bcm: fix out-of-bounds frame read introduced by the bcm_tx_lock backport {CVE-2025-38004}
  • mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() {CVE-2026-72308}
  • can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure {CVE-2026-72122}
  • can: bcm: fix warning in bcm_connect/proc_register {CVE-2026-72113}
  • ipv4: fix use-after-free in fib_nhc_update_mtu() {CVE-2026-74656}
  • perf/core: Fix group leader use-after-free after sibling detach {CVE-2026-74637}
  • sctp: fix use-after-free of cached ASCONF chunk {CVE-2026-74587}
  • sctp: clear control chunk transport if it is being removed {CVE-2026-74688}
  • ALSA: usb-audio: fix OOB write on Type II inbound URBs {CVE-2026-74682}
  • ALSA: usx2y: bound the hwdep mmap fault offset {CVE-2026-74641}
  • enic: fix tx_hang_reset use-after-free on device removal {CVE-2026-74725}
  • udp: fix potential use-after-free in tunnel segmentation {CVE-2026-74705}
  • ip6_tunnel: clear skb2->cb[] in ip6ip6_err() {CVE-2026-74597}
  • ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}
  • vhost: reset the vring metadata cache on vring reconfiguration {CVE-2026-74580} -…
Record
CLSA-2026-1789039867
Updated
2026-11-02
OSVCLSA-2026-1789898700 No score

kernel: Fix of 163 CVEs

  • drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON() {CVE-2026-68251}
  • amd/amdkfd: sync all devices to wait all processes being evicted {CVE-2024-36949}
  • Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted {CVE-2024-36909}
  • Drivers: hv: vmbus: Track decrypted status in vmbus_gpadl {CVE-2024-36912}
  • xfs: save ailp before dropping the AIL lock in push callbacks {CVE-2026-31454}
  • net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak {CVE-2026-43041}
  • netfilter: nf_conntrack: destroy stale expectfn expectations on unregister {CVE-2026-53349}
  • cifs: avoid NULL pointer dereference in dbg call {CVE-2025-37844}
  • fs/notify: call exportfs_encode_fid with s_umount {CVE-2025-40237}
  • cifs: fix potential oops in cifs_oplock_break {CVE-2023-54258}
  • pstore/ram: fix buffer overflow in persistent_ram_save_old() {CVE-2026-46253}
  • Bluetooth: ISO: fix iso_conn related locking and validity issues {CVE-2023-54164}
  • netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets {CVE-2026-45873}
  • ext4: always drain queued discard work in ext4_mb_release() {CVE-2026-43065}
  • ipvs: Defer ip_vs_ftp unregister during netns cleanup {CVE-2025-40018}
  • Bluetooth: MGMT: Fix memory leak in set_ssp_complete {CVE-2026-23151}
  • sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto {CVE-2025-40281}
  • fscache: Use wait_on_bit() to wait for the freeing of relinquished volume {CVE-2023-52982}
  • libceph: prevent potential out-of-bounds reads in process_message_header() {CVE-2026-43406}
  • netfilter: nf_tables: reject immediate NF_QUEUE verdict {CVE-2026-43024}
  • ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() {CVE-2025-68261}
  • bpf, sockmap: Fix af_unix iter deadlock {CVE-2026-53035}
  • sctp: stream: fully roll back denied add-stream state {CVE-2026-52929}
  • netfilter: xt_CT: drop pending enqueued packets on template removal {CVE-2026-23391}
  • netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() {CVE-2026-23457}
  • libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() {CVE-2026-43407}
  • af_unix: read UNIX_DIAG_VFS data under unix_state_lock {CVE-2026-31673}
  • jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted {CVE-2025-68337}
  • Bluetooth: Fix NULL pointer deference on eir_get_service_data {CVE-2025-38304}
  • net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption {CVE-2026-31533}
  • fsnotify: do not generate ACCESS/MODIFY events on child for special files {CVE-2025-68788}
  • isofs: validate Rock Ridge CE continuation extent against volume size {CVE-2026-46303}
  • net: strparser: fix skb_head leak in strp_abort_strp() {CVE-2026-46102}
  • sctp: fix uninit-value in __sctp_rcv_asconf_lookup() {CVE-2026-53225}
  • xfs: don't swallow dquot recovery verification errors {CVE-2026-80529}
  • xfs: dquot recovery does not validate the recovered dquot {CVE-2026-80529}
  • bpf: tcp: fix double sock release on batch realloc {CVE-2026-64575}
  • bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch() {CVE-2026-74714}
  • bpf: tcp: Avoid socket skips and repeats during iteration {CVE-2026-74714}
  • bpf: tcp: Use bpf_tcp_iter_batch_item for bpf_tcp_iter_state batch items {CVE-2026-74714}
  • bpf: tcp: Get rid of st_bucket_done {CVE-2026-74714}
  • bpf: tcp: Make sure iter->batch always contains a full bucket snapshot {CVE-2026-64575}
  • bpf: tcp: Make mem flags configurable through bpf_iter_tcp_realloc_batch {CVE-2026-74714}
  • USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343}
  • NFS: Decrement refcounts if allocating nfs_free_stateid_data fails {CVE-2026-74730}
  • NFS: Pin the 'struct nfs_server' during a FREE_STATEID call {CVE-2026-74730}
  • net/atm: fix slab-out-of-bounds read in vcc_setsockopt() {CVE-2026-74689}
  • net: Make copy_safe_from_sockptr() match documentation {CVE-2026-74689}
  • net: add copy_safe_from_sockptr() helper {CVE-2026-74689}
  • xfs: close crash window in attr dabtree…
Record
CLSA-2026-1789898700
Updated
2026-11-02
OSVCLSA-2026-1789958474 No score

Fix of 167 CVEs

  • CVE-2025-39826
    • net: rose: convert 'use' field to refcount_t {CVE-2025-39826}
  • CVE-2025-40146
    • blk-mq: fix potential deadlock while nr_requests grown {CVE-2025-40146}
  • CVE-2024-53216
    • nfsd: release svc_expkey/svc_export with rcu_work {CVE-2024-53216}
  • CVE-2026-89778
    • isofs: fix out-of-bounds page array access on empty zisofs block {CVE-2026-89778}
  • CVE-2026-23050
    • pNFS: Fix a deadlock when returning a delegation during open() {CVE-2026-23050}
  • CVE-2025-68796
    • f2fs: fix to avoid updating zero-sized extent in extent cache {CVE-2025-68796}
  • CVE-2025-68330
    • iio: accel: bmc150: Fix irq assumption regression {CVE-2025-68330}
  • CVE-2025-40333
    • f2fs: fix infinite loop in __insert_extent_tree() {CVE-2025-40333}
  • CVE-2025-40160
    • xen/events: Return -EEXIST for bound VIRQs {CVE-2025-40160}
  • CVE-2023-54047
    • drm/rockchip: dw_hdmi: cleanup drm encoder during unbind {CVE-2023-54047}
  • CVE-2025-68190
    • drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() {CVE-2025-68190}
  • CVE-2025-68188
    • tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() {CVE-2025-68188}
  • CVE-2026-89786
    • ext4: fix out-of-bounds read in ext4_read_inline_dir() {CVE-2026-89786}
  • CVE-2022-50764
    • ipv6/sit: use DEV_STATS_INC() to avoid data-races {CVE-2022-50764}
  • CVE-2026-80785
    • fbdev: serialize mode sysfs access with lock_fb_info() {CVE-2026-80785}
  • CVE-2026-80788
    • nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations {CVE-2026-80788}
  • CVE-2026-80747
    • drm/amdkfd: Add bounds check for CRAT subtype length {CVE-2026-80747}
  • CVE-2026-80907
    • drm/amdgpu: Fix UVD dpb min size calculation for H264 {CVE-2026-80907}
  • CVE-2026-80908
    • drm/amdgpu: Reject UVD message with dimensions above 4096 {CVE-2026-80908}
  • CVE-2026-80812
    • ALSA: dummy: Check card index validity at probe {CVE-2026-80812}
  • CVE-2026-80948
    • wifi: iwlwifi: dvm: fix memory leak in iwl_op_mode_dvm_start() {CVE-2026-80948}
  • CVE-2025-40137
    • f2fs: fix to truncate first page in error path of f2fs_truncate() {CVE-2025-40137}
  • CVE-2023-54150
    • drm/amd: Fix an out of bounds error in BIOS parser {CVE-2023-54150}
  • CVE-2026-89784
    • SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 {CVE-2026-89784}
  • CVE-2026-89783
    • xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full {CVE-2026-89783}
  • CVE-2026-89780
    • net: qualcomm: rmnet: restore skb->dev on deaggregated frames {CVE-2026-89780}
  • CVE-2026-89777
    • vfio/pci: clear vdev->msi_perm after freeing it on init failure {CVE-2026-89777}
  • CVE-2026-89789
    • gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free {CVE-2026-89789}
  • CVE-2025-68797
    • char: applicom: fix NULL pointer dereference in ac_ioctl {CVE-2025-68797}
  • CVE-2025-68767
    • hfsplus: Verify inode mode when loading from disk {CVE-2025-68767}
  • CVE-2026-63961
    • usb: typec: altmodes/displayport: validate count before reading Status Update VDO {CVE-2026-63961}
  • CVE-2026-63904
    • usb: usbtmc: check URB actual_length for interrupt-IN notifications {CVE-2026-63904}
  • CVE-2022-50864
    • nilfs2: fix shift-out-of-bounds due to too large exponent of block size {CVE-2022-50864}
  • CVE-2025-68771
    • ocfs2: fix kernel BUG in ocfs2_find_victim_chain {CVE-2025-68771}
  • CVE-2025-68750
    • usb: potential integer overflow in usbg_make_tpg() {CVE-2025-68750}
  • CVE-2026-80909
    • drm/amdgpu: Reject UVD message with invalid number of h265 refs {CVE-2026-80909}
  • CVE-2026-74402
    • crypto: atmel-sha204a - fix blocking and non-blocking rng logic {CVE-2026-74402} *…
Record
CLSA-2026-1789958474
Updated
2026-11-02
OSVCLSA-2026-1791780738 No score

kernel: Fix of 72 CVEs

  • drm/amd/pm: bound pp_dpm_set_pp_table() memcpy {CVE-2026-97427}
  • Bluetooth: L2CAP: validate connectionless PSM length {CVE-2026-97408}
  • ipv6: sr: restore network header before routing and forwarding {CVE-2026-98096}
  • ipv6: fix fib6 walker UAF on seq stop {CVE-2026-97940}
  • net: mpls: clear inner_protocol when the last label is popped {CVE-2026-97612}
  • netfilter: nf_log: unregister loggers before per-net teardown {CVE-2026-97608}
  • usb: xusbatm: don't rely on id table pointer arithmetic {CVE-2026-97539}
  • ALSA: 6fire: Fix UAF at error handling during probe {CVE-2026-74505}
  • drm/vmwgfx: validate DRAW_PRIMITIVES header size before division {CVE-2026-74444}
  • ALSA: firewire: isight: bound the sample count to the packet payload {CVE-2026-64483}
  • Bluetooth: btusb: fix use-after-free on registration failure {CVE-2026-64471}
  • thunderbolt: Keep XDomain reference during the lifetime of a service {CVE-2026-97509}
  • ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() {CVE-2026-97455}
  • ACPICA: Add validation for node in acpi_ns_build_normalized_path() {CVE-2026-97448}
  • inet: frags: strip GSO state from fragments before reassembly {CVE-2026-80590}
  • libnvdimm/labels: Prevent integer overflow in __nd_label_validate() {CVE-2026-89559}
  • SUNRPC: always drain cache_cleaner before destroying a cache_detail {CVE-2026-89548}
  • SUNRPC: harden gss_krb5_unwrap_v2 against short tokens {CVE-2026-89542}
  • openvswitch: only skb_tx_error() a packet we are about to drop {CVE-2026-89487}
  • nvme-tcp: fix host memory disclosure on R2T for a read command {CVE-2026-89481}
  • sctp: fix NULL deref on untransmitted RECONF completion {CVE-2026-89477}
  • net: openvswitch: fix flow mask use-after-free on flow deletion {CVE-2026-80994}
  • ALSA: bcd2000: clear the URB pointers on disconnect {CVE-2026-80971}
  • netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() {CVE-2026-74569}
  • Bluetooth: mgmt: fix UAF in pair command cancellation {CVE-2026-74510}
  • cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname {CVE-2023-53751}
  • RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem {CVE-2025-38022}
  • drivers: base: Free devm resources when unregistering a device {CVE-2023-53596}
  • scsi: qla2xxx: Fix bsg_done() causing double free {CVE-2025-71238}
  • netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
  • xfrm: ah6: validate routing header segments_left {CVE-2026-80844}
  • drm/amd/display: set new_stream to NULL after release {CVE-2026-68236}
  • RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters {CVE-2026-100075}
  • nvmet-rdma: handle inline data with a nonzero offset {CVE-2026-72129}
  • ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control {CVE-2026-72261}
  • crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
  • crypto: algif_aead - fix uninitialized ctx->init {CVE-2025-39964}
  • netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() {CVE-2026-97417}
  • tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream() {CVE-2026-68289}
  • sctp: fix race between sctp_wait_for_connect and peeloff {CVE-2026-63971}
  • bridge: stp: Fix a potential use-after-free when deleting a bridge {CVE-2026-72389}
  • scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer {CVE-2026-74556}
  • rhashtable: clear stale iter->p on table restart {CVE-2026-64563}
  • mpls: reload header after pskb_may_pull() {CVE-2026-89555}
  • net: tun: bound receive headroom {CVE-2026-81000}
  • netfilter: flowtable: publish GC-visible tuple last {CVE-2026-74746}
  • netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() {CVE-2026-98077}
  • net: atlantic: eliminate double free in error handling logic {CVE-2023-52664}
  • firewire: net: fix use after free in fwnet_finish_incoming_packet() {CVE-2023-53432}
  • firewire: net: remove unused variable 'guid' {CVE-2023-53432}
  • gfs2: Fix slab-use-after-free in gfs2_qd_dealloc {CVE-2023-52760}
  • gfs2: fix kernel…
Record
CLSA-2026-1791780738
Updated
2026-11-02
OSVCLSA-2026-1791800936 No score

kernel: Fix of 191 CVEs

  • drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check {CVE-2026-89818}
  • drm/amdgpu/vcn4: Avoid overflow on msg bound check {CVE-2026-46199}
  • drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg {CVE-2026-46199}
  • drm/amdgpu/vcn3: Avoid overflow on msg bound check {CVE-2026-46230}
  • drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg {CVE-2026-46230}
  • openvswitch: vport: fix self-deadlock on release of tunnel ports {CVE-2026-46165}
  • openvswitch: defer tunnel netdev_put to RCU release {CVE-2026-31678}
  • ALSA: usb: Fix UAF at delayed release of MIDI2 EPs {CVE-2026-74642}
  • ALSA: usb-audio: fix use-after-free in ump_to_endpoint() {CVE-2026-74501}
  • NFS: Decrement refcounts if allocating nfs_free_stateid_data fails {CVE-2026-74730}
  • NFS: Pin the 'struct nfs_server' during a FREE_STATEID call {CVE-2026-74730}
  • exec: do_close_on_exec() before taking exec_update_lock {CVE-2026-64371}
  • proc: Fix broken error paths for namespace links {CVE-2026-64371}
  • proc: protect ptrace_may_access() with exec_update_lock (part 1) {CVE-2026-64371}
  • ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes {CVE-2026-74503}
  • ALSA: timer: Forcibly close timer instances at closing {CVE-2026-53193}
  • usb: typec: ucsi: Fix race condition and ordering in port unregistration {CVE-2026-74441}
  • arp: do not assume dev_hard_header() does not change skb->head {CVE-2026-22988}
  • netfilter: nft_ct: fix use-after-free in timeout object destroy {CVE-2026-31665}
  • md/raid10: fix writes_pending and barrier reference leaks on discard failures {CVE-2026-72438}
  • md/raid10: fix deadlock with check operation and nowait requests {CVE-2026-46050}
  • mm: introduce and use {pgd,p4d}_populate_kernel() {CVE-2025-39844}
  • vsock/virtio: fix zerocopy completion for multi-skb sends {CVE-2026-53365}
  • vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting {CVE-2026-52994}
  • mm: do file ownership checks with the proper mount idmap {CVE-2026-64294}
  • udf: validate VAT header length against the VAT inode size {CVE-2026-64323}
  • SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths {CVE-2026-45870}
  • Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig {CVE-2026-53208}
  • slip: bound decode() reads against the compressed packet length {CVE-2026-45843}
  • net: tls: fix strparser anchor skb leak on offload RX setup failure {CVE-2026-52974}
  • netfilter: nf_tables: unconditionally bump set->nelems before insertion {CVE-2026-23272}
  • rbd: Reset positive result codes to zero in object map update path {CVE-2026-68131}
  • netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() {CVE-2026-23458}
  • mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr {CVE-2025-21938}
  • bpf: Fix NULL deref in map_kptr_match_type for scalar regs {CVE-2026-53032}
  • bpf: Explicitly check accesses to bpf_sock_addr {CVE-2025-40078}
  • nexthop: Forbid FDB status change while nexthop is in a group {CVE-2025-39980}
  • bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN {CVE-2026-31525}
  • x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() {CVE-2025-21913}
  • ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple() {CVE-2024-57994}
  • drm/i915/vrr: require valid min/max vfreq for VRR {CVE-2026-68254}
  • libceph: handle rbtree insertion error in decode_choose_args() {CVE-2026-52954}
  • gfs2: prevent NULL pointer dereference during unmount {CVE-2026-53048}
  • smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path {CVE-2026-31708}
  • ext4: reject mount if bigalloc with s_first_data_block != 0 {CVE-2026-31447}
  • NFSD: Fix crash in nfsd4_read_release() {CVE-2025-40324}
  • netfilter: x_tables: guard option walkers against 1-byte tail reads {CVE-2026-43452}
  • smb: client: Fix refcount leak for cifs_sb_tlink {CVE-2025-40103}
  • smb: client: harden POSIX SID length parsing {CVE-2026-64380}
  • crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() {CVE-2026-64438}
  • bpf: Allow LPM map access from sleepable…
Record
CLSA-2026-1791800936
Updated
2026-11-02
OSVCLSA-2026-1791852988 No score

kernel: Fix of 107 CVEs

  • netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
  • IB/isert: reject PDUs declaring more data than was received {CVE-2026-90414}
  • RDMA/mlx5: Fix integer overflow of user QP buffer size {CVE-2026-90435}
  • sctp: validate embedded address parameter length {CVE-2026-74287}
  • IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413}
  • xfrm: ah6: validate routing header segments_left {CVE-2026-80844}
  • drm/amd/display: set new_stream to NULL after release {CVE-2026-68236}
  • RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters {CVE-2026-100075}
  • nvmet-rdma: handle inline data with a nonzero offset {CVE-2026-72129}
  • netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() {CVE-2026-97417}
  • sctp: validate cookie AUTH state before use {CVE-2026-74752}
  • ipvlan: inherit needed_headroom and needed_tailroom from phy_dev {CVE-2026-74744}
  • enic: fix tx_hang_reset use-after-free on device removal {CVE-2026-74725}
  • net/atm: fix slab-out-of-bounds read in vcc_setsockopt() {CVE-2026-74689}
  • drm/amdgpu: reject oversized IBs with per-ring packet limits {CVE-2026-80576}
  • xfs: bounds-check buffer log item's dirty bitmap {CVE-2026-80536}
  • nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page {CVE-2026-64320}
  • smb: client: reject overlapping data areas in SMB2 responses {CVE-2026-64257}
  • smb: client: restrict implied bcc[0] exemption to responses without data area {CVE-2026-64448}
  • crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() {CVE-2026-64438}
  • crypto: qat - protect interrupt mask CSRs with a spinlock {CVE-2026-64438}
  • crypto: qat - remove intermediate tasklet for vf2pf {CVE-2026-64438}
  • usb: free iso schedules on failed submit {CVE-2026-64348}
  • USB: iowarrior: fix use-after-free on disconnect race {CVE-2026-64341}
  • crypto: qat - protect service table iterations with service_lock {CVE-2026-64305}
  • crypto: qat - validate RSA CRT component lengths {CVE-2026-64304}
  • net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422}
  • udf: validate VAT header length against the VAT inode size {CVE-2026-64323}
  • crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
  • crypto: algif_aead - fix uninitialized ctx->init {CVE-2025-39964}
  • sctp: fix race between sctp_wait_for_connect and peeloff {CVE-2026-63971}
  • mpls: reload header after pskb_may_pull() {CVE-2026-89555}
  • net: tun: bound receive headroom {CVE-2026-81000}
  • bridge: stp: Fix a potential use-after-free when deleting a bridge {CVE-2026-72389}
  • scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer {CVE-2026-74556}
  • rhashtable: clear stale iter->p on table restart {CVE-2026-64563}
  • vhost: reset the vring metadata cache on vring reconfiguration {CVE-2026-74580}
  • net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
  • sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
  • USB: legousbtower: fix use-after-free on disconnect race {CVE-2026-64340}
  • USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343}
  • udf: validate sparing table length as an entry count, not a byte count {CVE-2026-64322}
  • ipv4: igmp: remove multicast group from hash table on device destruction {CVE-2026-64423}
  • USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}
  • sctp: fix use-after-free of cached ASCONF chunk {CVE-2026-74587}
  • RDMA/siw: bound Read Response placement to the RREAD length {CVE-2026-64268}
  • ip6_tunnel: clear skb2->cb[] in ip6ip6_err() {CVE-2026-74597}
  • ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}
  • netfilter: ebt_nflog: pin the NFLOG backend {CVE-2026-74660}
  • libceph: Avoid using invalid osd indices from primary_temp {CVE-2026-80558}
  • udp: fix potential use-after-free in tunnel segmentation {CVE-2026-74705}
  • Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}
  • wifi: ath9k: hif_usb: don't dereference hif_dev after…
Record
CLSA-2026-1791852988
Updated
2026-11-02
OSVCLSA-2026-1791858083 No score

kernel: Fix of 94 CVEs

  • netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
  • IB/isert: reject PDUs declaring more data than was received {CVE-2026-90414}
  • RDMA/mlx5: Fix integer overflow of user QP buffer size {CVE-2026-90435}
  • IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413}
  • xfrm: ah6: validate routing header segments_left {CVE-2026-80844}
  • drm/amd/display: set new_stream to NULL after release {CVE-2026-68236}
  • RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters {CVE-2026-100075}
  • nvmet-rdma: handle inline data with a nonzero offset {CVE-2026-72129}
  • netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() {CVE-2026-97417}
  • smb: client: restrict implied bcc[0] exemption to responses without data area {CVE-2026-64448}
  • usb: free iso schedules on failed submit {CVE-2026-64348}
  • USB: iowarrior: fix use-after-free on disconnect race {CVE-2026-64341}
  • USB: legousbtower: fix use-after-free on disconnect race {CVE-2026-64340}
  • crypto: qat - protect service table iterations with service_lock {CVE-2026-64305}
  • crypto: qat - validate RSA CRT component lengths {CVE-2026-64304}
  • net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422}
  • udf: validate VAT header length against the VAT inode size {CVE-2026-64323}
  • crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
  • net: tun: bound receive headroom {CVE-2026-81000}
  • bridge: stp: Fix a potential use-after-free when deleting a bridge {CVE-2026-72389}
  • scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer {CVE-2026-74556}
  • rhashtable: clear stale iter->p on table restart {CVE-2026-64563}
  • mpls: reload header after pskb_may_pull() {CVE-2026-89555}
  • vhost: reset the vring metadata cache on vring reconfiguration {CVE-2026-74580}
  • net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
  • sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
  • USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343}
  • udf: validate sparing table length as an entry count, not a byte count {CVE-2026-64322}
  • ipv4: igmp: remove multicast group from hash table on device destruction {CVE-2026-64423}
  • USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}
  • RDMA/siw: bound Read Response placement to the RREAD length {CVE-2026-64268}
  • sctp: fix use-after-free of cached ASCONF chunk {CVE-2026-74587}
  • ip6_tunnel: clear skb2->cb[] in ip6ip6_err() {CVE-2026-74597}
  • ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}
  • netfilter: ebt_nflog: pin the NFLOG backend {CVE-2026-74660}
  • netfilter: flowtable: publish GC-visible tuple last {CVE-2026-74746}
  • libceph: Avoid using invalid osd indices from primary_temp {CVE-2026-80558}
  • udp: fix potential use-after-free in tunnel segmentation {CVE-2026-74705}
  • Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}
  • wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request {CVE-2026-68363}
  • ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() {CVE-2026-68160}
  • libceph: Reject monmaps advertising zero monitors {CVE-2026-68155}
  • sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}
  • net: slip: serialize receive against buffer reallocation {CVE-2026-68143}
  • libceph: remove debugfs files before client teardown {CVE-2026-68153}
  • libceph: refresh auth->authorizer_buf{,_len} after authorizer update {CVE-2026-68156}
  • media: rtl2832: fix use-after-free in rtl2832_remove() {CVE-2026-68214}
  • sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}
  • pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}
  • libceph: Fix multiplication overflow in decode_new_up_state_weight() {CVE-2026-68158}
  • ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() {CVE-2026-74499}
  • can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet…
Record
CLSA-2026-1791858083
Updated
2026-11-02
OSVCLSA-2026-1791876326 No score

Fix of 274 CVEs

  • CVE-2026-53091
    • xfrm: Don't clobber inner headers when already set {CVE-2026-53091}
    • net: account for encap headers in qdisc pkt len {CVE-2026-53091}
  • CVE-2026-93803
    • wifi: libipw: fix key index receive bound checks {CVE-2026-93803}
  • CVE-2026-93286
    • net: appletalk: fix NULL pointer dereference in aarp_send_ddp() {CVE-2026-93286}
  • CVE-2026-93280
    • greybus: audio: bound the topology section sizes against the fetched size {CVE-2026-93280}
  • CVE-2026-93213
    • of: fix out-of-bounds read in of_alias_scan() stem parser {CVE-2026-93213}
  • CVE-2026-93802
    • wifi: rsi: validate beacon length before fixed buffer copy {CVE-2026-93802}
  • CVE-2026-93206
    • PCI/proc: Use file_ns_capable() when checking config space read access {CVE-2026-93206}
  • CVE-2026-97448
    • ACPICA: Add validation for node in acpi_ns_build_normalized_path() {CVE-2026-97448}
  • CVE-2026-97408
    • Bluetooth: L2CAP: validate connectionless PSM length {CVE-2026-97408}
  • CVE-2026-93268
    • ext4: skip extra isize expansion during mount to prevent deadlock {CVE-2026-93268}
  • CVE-2026-93782
    • vhost-scsi: flush backend after device ioctls {CVE-2026-93782}
  • CVE-2026-93783
    • Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame {CVE-2026-93783}
  • CVE-2026-97455
    • ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() {CVE-2026-97455}
  • CVE-2026-93807
    • wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers {CVE-2026-93807}
  • CVE-2026-93808
    • ALSA: usb-audio: caiaq: validate EP1 reply lengths {CVE-2026-93808}
  • CVE-2026-89938
    • iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF {CVE-2026-89938}
  • CVE-2026-89927
    • KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock {CVE-2026-89927}
  • CVE-2026-89949
    • batman-adv: dat: avoid unaligned fault in IP extraction {CVE-2026-89949}
  • CVE-2026-89912
    • KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save {CVE-2026-89912}
  • CVE-2026-89932
    • KVM: nVMX: Always flush vpid02 on first use {CVE-2026-89932}
  • CVE-2026-89833
    • f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages() {CVE-2026-89833}
  • CVE-2026-90045
    • USB: gadget: ffs: fix mm lifetime handling {CVE-2026-90045}
  • CVE-2026-89854
    • scsi: qla2xxx: Fix cs84xx use-after-free on host teardown {CVE-2026-89854}
  • CVE-2026-90015
    • xhci: fix lost bounce buffers on TDs spanning several ring segments {CVE-2026-90015}
  • CVE-2026-89979
    • ALSA: pcm: Fix race between non-atomic ops and trigger-start {CVE-2026-89979}
  • CVE-2026-89852
    • scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state() {CVE-2026-89852}
  • CVE-2026-89861
    • scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition() {CVE-2026-89861}
  • CVE-2026-89859
    • scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak {CVE-2026-89859}
  • CVE-2026-90036
    • NFSD: Prevent client use-after-free during blocked-lock reaping {CVE-2026-90036}
  • CVE-2026-89987
    • mm/huge_memory: transfer the pmd dirty bit to the folio on zap {CVE-2026-89987}
  • CVE-2026-89799
    • bpf: Disable preemption in bpf_get_stackid {CVE-2026-89799}
  • CVE-2026-90032
    • media: usbtv: keep device alive while ALSA card exists {CVE-2026-90032}
  • CVE-2026-89822
    • drm/i915: Guard against NULL driver_data in i915_pci_probe() {CVE-2026-89822}
  • CVE-2026-89929
    • KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU {CVE-2026-89929}
  • CVE-2026-89840
    • f2fs: validate MOVE_RANGE destination size {CVE-2026-89840}
  • CVE-2026-89913
    • KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables {CVE-2026-89913} *…
Record
CLSA-2026-1791876326
Updated
2026-11-02
OSVCLSA-2026-1791878869 No score

Fix of 274 CVEs

  • CVE-2026-53091
    • xfrm: Don't clobber inner headers when already set {CVE-2026-53091}
    • net: account for encap headers in qdisc pkt len {CVE-2026-53091}
  • CVE-2026-93803
    • wifi: libipw: fix key index receive bound checks {CVE-2026-93803}
  • CVE-2026-93286
    • net: appletalk: fix NULL pointer dereference in aarp_send_ddp() {CVE-2026-93286}
  • CVE-2026-93280
    • greybus: audio: bound the topology section sizes against the fetched size {CVE-2026-93280}
  • CVE-2026-93213
    • of: fix out-of-bounds read in of_alias_scan() stem parser {CVE-2026-93213}
  • CVE-2026-93802
    • wifi: rsi: validate beacon length before fixed buffer copy {CVE-2026-93802}
  • CVE-2026-93206
    • PCI/proc: Use file_ns_capable() when checking config space read access {CVE-2026-93206}
  • CVE-2026-97448
    • ACPICA: Add validation for node in acpi_ns_build_normalized_path() {CVE-2026-97448}
  • CVE-2026-97408
    • Bluetooth: L2CAP: validate connectionless PSM length {CVE-2026-97408}
  • CVE-2026-93268
    • ext4: skip extra isize expansion during mount to prevent deadlock {CVE-2026-93268}
  • CVE-2026-93782
    • vhost-scsi: flush backend after device ioctls {CVE-2026-93782}
  • CVE-2026-93783
    • Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame {CVE-2026-93783}
  • CVE-2026-97455
    • ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() {CVE-2026-97455}
  • CVE-2026-93807
    • wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers {CVE-2026-93807}
  • CVE-2026-93808
    • ALSA: usb-audio: caiaq: validate EP1 reply lengths {CVE-2026-93808}
  • CVE-2026-89938
    • iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF {CVE-2026-89938}
  • CVE-2026-89927
    • KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock {CVE-2026-89927}
  • CVE-2026-89949
    • batman-adv: dat: avoid unaligned fault in IP extraction {CVE-2026-89949}
  • CVE-2026-89912
    • KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save {CVE-2026-89912}
  • CVE-2026-89932
    • KVM: nVMX: Always flush vpid02 on first use {CVE-2026-89932}
  • CVE-2026-89833
    • f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages() {CVE-2026-89833}
  • CVE-2026-90045
    • USB: gadget: ffs: fix mm lifetime handling {CVE-2026-90045}
  • CVE-2026-89854
    • scsi: qla2xxx: Fix cs84xx use-after-free on host teardown {CVE-2026-89854}
  • CVE-2026-90015
    • xhci: fix lost bounce buffers on TDs spanning several ring segments {CVE-2026-90015}
  • CVE-2026-89979
    • ALSA: pcm: Fix race between non-atomic ops and trigger-start {CVE-2026-89979}
  • CVE-2026-89852
    • scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state() {CVE-2026-89852}
  • CVE-2026-89861
    • scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition() {CVE-2026-89861}
  • CVE-2026-89859
    • scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak {CVE-2026-89859}
  • CVE-2026-90036
    • NFSD: Prevent client use-after-free during blocked-lock reaping {CVE-2026-90036}
  • CVE-2026-89987
    • mm/huge_memory: transfer the pmd dirty bit to the folio on zap {CVE-2026-89987}
  • CVE-2026-89799
    • bpf: Disable preemption in bpf_get_stackid {CVE-2026-89799}
  • CVE-2026-90032
    • media: usbtv: keep device alive while ALSA card exists {CVE-2026-90032}
  • CVE-2026-89822
    • drm/i915: Guard against NULL driver_data in i915_pci_probe() {CVE-2026-89822}
  • CVE-2026-89929
    • KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU {CVE-2026-89929}
  • CVE-2026-89840
    • f2fs: validate MOVE_RANGE destination size {CVE-2026-89840}
  • CVE-2026-89913
    • KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables {CVE-2026-89913} *…
Record
CLSA-2026-1791878869
Updated
2026-11-02
OSVMGASA-2026-0506 No score

Updated kernel, drakx-installer-images, kmod-nvidia-current-wopengpu, kmod-xtables-addons & kmod-virtualbox packages fix Security Vulnerabilities

Upstream kernel 6.18.55 version fixes bugs and vulnerabilities. The kmod-xtables-addons, kmod-virtualbox, kmod-nvidia-current-wopengpu & drakx-installer-images packages have been updated to work with this new kernel.

Record
MGASA-2026-0506
Updated
2026-11-02
OSVMGASA-2026-0542 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.18.55 fixes vulnerabilities. For information about the vulnerabilities see the links.

Record
MGASA-2026-0542
Updated
2026-11-02
OSVopenSUSE-SU-2026:22091-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340).
  • CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock (bsc#1258335).
  • CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
  • CVE-2026-43210: tracing: ring-buffer: Fix to check event length before using (bsc#1264330).
  • CVE-2026-43272: ring-buffer: Fix possible dereference of uninitialized pointer (bsc#1264607).
  • CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
  • CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
  • CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
  • CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
  • CVE-2026-46272: coresight: tmc-etr: Fix race condition between sysfs and perf mode (bsc#1267672).
  • CVE-2026-53377: drm/msm: always recover the gpu (bsc#1271901).
  • CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
  • CVE-2026-63838: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] (bsc#1272388).
  • CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).
  • CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
  • CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
  • CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
  • CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
  • CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
  • CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
  • CVE-2026-64132: ipv6: ioam: refresh hdr pointer before ioam6_event() (bsc#1272347).
  • CVE-2026-64154: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() (bsc#1271950).
  • CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
  • CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
  • CVE-2026-64216: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (bsc#1272802).
  • CVE-2026-64235: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines (bsc#1272803).
  • CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
  • CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
  • CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970).
  • CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).
  • CVE-2026-64377: cpufreq: qcom-cpufreq-hw: Fix possible double free (bsc#1273297).
  • CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).
  • CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).
  • CVE-2026-64405: Bluetooth: separate CIS_LINK and BIS_LINK link types (bsc#1273512).
  • CVE-2026-64414: netfilter: handle unreadable frags (bsc#1273275).
  • CVE-2026-64418: mm: shrinker: fix shrinker_info teardown race with expansion (bsc#1273784).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).
  • CVE-2026-64457: virtio_pci: fix vq info pointer lookup via wrong index (bsc#1273491).
  • CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320).
  • CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).
  • CVE-2026-64475: vfio/pci: Release the…
Record
openSUSE-SU-2026:22091-1
Updated
2026-11-02
OSVSUSE-SU-2026:24179-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340).
  • CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock (bsc#1258335).
  • CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
  • CVE-2026-43210: tracing: ring-buffer: Fix to check event length before using (bsc#1264330).
  • CVE-2026-43272: ring-buffer: Fix possible dereference of uninitialized pointer (bsc#1264607).
  • CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
  • CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
  • CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
  • CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
  • CVE-2026-46272: coresight: tmc-etr: Fix race condition between sysfs and perf mode (bsc#1267672).
  • CVE-2026-53377: drm/msm: always recover the gpu (bsc#1271901).
  • CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
  • CVE-2026-63838: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] (bsc#1272388).
  • CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).
  • CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
  • CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
  • CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
  • CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
  • CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
  • CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
  • CVE-2026-64132: ipv6: ioam: refresh hdr pointer before ioam6_event() (bsc#1272347).
  • CVE-2026-64154: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() (bsc#1271950).
  • CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
  • CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
  • CVE-2026-64216: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (bsc#1272802).
  • CVE-2026-64235: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines (bsc#1272803).
  • CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
  • CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
  • CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970).
  • CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).
  • CVE-2026-64377: cpufreq: qcom-cpufreq-hw: Fix possible double free (bsc#1273297).
  • CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).
  • CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).
  • CVE-2026-64405: Bluetooth: separate CIS_LINK and BIS_LINK link types (bsc#1273512).
  • CVE-2026-64414: netfilter: handle unreadable frags (bsc#1273275).
  • CVE-2026-64418: mm: shrinker: fix shrinker_info teardown race with expansion (bsc#1273784).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).
  • CVE-2026-64457: virtio_pci: fix vq info pointer lookup via wrong index (bsc#1273491).
  • CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320).
  • CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).
  • CVE-2026-64475: vfio/pci: Release the…
Record
SUSE-SU-2026:24179-1
Updated
2026-11-02
OSVSUSE-SU-2026:24181-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
  • CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
  • CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298).
  • CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
  • CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017).
  • CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
  • CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
  • CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
  • CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
  • CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
  • CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
  • CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
  • CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
  • CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
  • CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
  • CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
  • CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
  • CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
  • CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
  • CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
  • CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
  • CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
  • CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
  • CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
  • CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
  • CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
  • CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
  • CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
  • CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
  • CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
  • CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870).
  • CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
  • CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
  • CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).
  • CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420). -…
Record
SUSE-SU-2026:24181-1
Updated
2026-11-02
OSVSUSE-SU-2026:24182-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
  • CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
  • CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298).
  • CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
  • CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017).
  • CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
  • CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
  • CVE-2026-53090: bpf: Fix ld_{abs,ind} failure path analysis in subprogs (bsc#1269532).
  • CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1271955).
  • CVE-2026-68162: sctp: avoid auth_enable sysctl UAF during netns teardown (bsc#1274920).
  • CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277).
  • CVE-2026-72084: scsi: target: Bound PR-OUT TransportID parsing to the received buffer (bsc#1275540).
  • CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
  • CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
  • CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
  • CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
  • CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
  • CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
  • CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
  • CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
  • CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
  • CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
  • CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
  • CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
  • CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
  • CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
  • CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
  • CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
  • CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
  • CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
  • CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
  • CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
  • CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
  • CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
  • CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
  • CVE-2026-64279: i2c:…
Record
SUSE-SU-2026:24182-1
Updated
2026-11-02
OSVSUSE-SU-2026:24184-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340).
  • CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock (bsc#1258335).
  • CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
  • CVE-2026-43210: tracing: ring-buffer: Fix to check event length before using (bsc#1264330).
  • CVE-2026-43272: ring-buffer: Fix possible dereference of uninitialized pointer (bsc#1264607).
  • CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
  • CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
  • CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
  • CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
  • CVE-2026-46272: coresight: tmc-etr: Fix race condition between sysfs and perf mode (bsc#1267672).
  • CVE-2026-53377: drm/msm: always recover the gpu (bsc#1271901).
  • CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
  • CVE-2026-63838: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] (bsc#1272388).
  • CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).
  • CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
  • CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
  • CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
  • CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
  • CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
  • CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
  • CVE-2026-64132: ipv6: ioam: refresh hdr pointer before ioam6_event() (bsc#1272347).
  • CVE-2026-64154: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() (bsc#1271950).
  • CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
  • CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
  • CVE-2026-64216: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (bsc#1272802).
  • CVE-2026-64235: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines (bsc#1272803).
  • CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
  • CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
  • CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970).
  • CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).
  • CVE-2026-64377: cpufreq: qcom-cpufreq-hw: Fix possible double free (bsc#1273297).
  • CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).
  • CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).
  • CVE-2026-64405: Bluetooth: separate CIS_LINK and BIS_LINK link types (bsc#1273512).
  • CVE-2026-64414: netfilter: handle unreadable frags (bsc#1273275).
  • CVE-2026-64418: mm: shrinker: fix shrinker_info teardown race with expansion (bsc#1273784).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).
  • CVE-2026-64457: virtio_pci: fix vq info pointer lookup via wrong index (bsc#1273491).
  • CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320).
  • CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).
  • CVE-2026-64475: vfio/pci: Release the…
Record
SUSE-SU-2026:24184-1
Updated
2026-11-02
OSVSUSE-SU-2026:24197-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340).
  • CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock (bsc#1258335).
  • CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
  • CVE-2026-43210: tracing: ring-buffer: Fix to check event length before using (bsc#1264330).
  • CVE-2026-43272: ring-buffer: Fix possible dereference of uninitialized pointer (bsc#1264607).
  • CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
  • CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
  • CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
  • CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
  • CVE-2026-46272: coresight: tmc-etr: Fix race condition between sysfs and perf mode (bsc#1267672).
  • CVE-2026-53377: drm/msm: always recover the gpu (bsc#1271901).
  • CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
  • CVE-2026-63838: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] (bsc#1272388).
  • CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).
  • CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
  • CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
  • CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
  • CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
  • CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
  • CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
  • CVE-2026-64132: ipv6: ioam: refresh hdr pointer before ioam6_event() (bsc#1272347).
  • CVE-2026-64154: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() (bsc#1271950).
  • CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
  • CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
  • CVE-2026-64216: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (bsc#1272802).
  • CVE-2026-64235: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines (bsc#1272803).
  • CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
  • CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
  • CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970).
  • CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).
  • CVE-2026-64377: cpufreq: qcom-cpufreq-hw: Fix possible double free (bsc#1273297).
  • CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).
  • CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).
  • CVE-2026-64405: Bluetooth: separate CIS_LINK and BIS_LINK link types (bsc#1273512).
  • CVE-2026-64414: netfilter: handle unreadable frags (bsc#1273275).
  • CVE-2026-64418: mm: shrinker: fix shrinker_info teardown race with expansion (bsc#1273784).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).
  • CVE-2026-64457: virtio_pci: fix vq info pointer lookup via wrong index (bsc#1273491).
  • CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320).
  • CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).
  • CVE-2026-64475: vfio/pci: Release the…
Record
SUSE-SU-2026:24197-1
Updated
2026-11-02
OSVSUSE-SU-2026:24235-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340).
  • CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock (bsc#1258335).
  • CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
  • CVE-2026-43210: tracing: ring-buffer: Fix to check event length before using (bsc#1264330).
  • CVE-2026-43272: ring-buffer: Fix possible dereference of uninitialized pointer (bsc#1264607).
  • CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
  • CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
  • CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
  • CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
  • CVE-2026-46272: coresight: tmc-etr: Fix race condition between sysfs and perf mode (bsc#1267672).
  • CVE-2026-53377: drm/msm: always recover the gpu (bsc#1271901).
  • CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
  • CVE-2026-63838: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] (bsc#1272388).
  • CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).
  • CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
  • CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
  • CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
  • CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
  • CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
  • CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
  • CVE-2026-64132: ipv6: ioam: refresh hdr pointer before ioam6_event() (bsc#1272347).
  • CVE-2026-64154: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() (bsc#1271950).
  • CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
  • CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
  • CVE-2026-64216: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (bsc#1272802).
  • CVE-2026-64235: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines (bsc#1272803).
  • CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
  • CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
  • CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970).
  • CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).
  • CVE-2026-64377: cpufreq: qcom-cpufreq-hw: Fix possible double free (bsc#1273297).
  • CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).
  • CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).
  • CVE-2026-64405: Bluetooth: separate CIS_LINK and BIS_LINK link types (bsc#1273512).
  • CVE-2026-64414: netfilter: handle unreadable frags (bsc#1273275).
  • CVE-2026-64418: mm: shrinker: fix shrinker_info teardown race with expansion (bsc#1273784).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).
  • CVE-2026-64457: virtio_pci: fix vq info pointer lookup via wrong index (bsc#1273491).
  • CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320).
  • CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).
  • CVE-2026-64475: vfio/pci: Release the…
Record
SUSE-SU-2026:24235-1
Updated
2026-11-02
OSVSUSE-SU-2026:24315-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
  • CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
  • CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298).
  • CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
  • CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017).
  • CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
  • CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
  • CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
  • CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
  • CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
  • CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
  • CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
  • CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
  • CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
  • CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
  • CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
  • CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
  • CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
  • CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
  • CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
  • CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
  • CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
  • CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
  • CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
  • CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
  • CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
  • CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
  • CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
  • CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
  • CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
  • CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870).
  • CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
  • CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
  • CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).
  • CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420). -…
Record
SUSE-SU-2026:24315-1
Updated
2026-11-02
OSVSUSE-SU-2026:24316-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
  • CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
  • CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298).
  • CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
  • CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017).
  • CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
  • CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
  • CVE-2026-53090: bpf: Fix ld_{abs,ind} failure path analysis in subprogs (bsc#1269532).
  • CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1271955).
  • CVE-2026-68162: sctp: avoid auth_enable sysctl UAF during netns teardown (bsc#1274920).
  • CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277).
  • CVE-2026-72084: scsi: target: Bound PR-OUT TransportID parsing to the received buffer (bsc#1275540).
  • CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
  • CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
  • CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
  • CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
  • CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
  • CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
  • CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
  • CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
  • CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
  • CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
  • CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
  • CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
  • CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
  • CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
  • CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
  • CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
  • CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
  • CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
  • CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
  • CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
  • CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
  • CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
  • CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
  • CVE-2026-64279: i2c:…
Record
SUSE-SU-2026:24316-1
Updated
2026-11-02
OSVSUSE-SU-2026:4640-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
  • CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
  • CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
  • CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
  • CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
  • CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
  • CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
  • CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
  • CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
  • CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
  • CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
  • CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
  • CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
  • CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
  • CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
  • CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
  • CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
  • CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
  • CVE-2026-63987: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES (bsc#1272971).
  • CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
  • CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
  • CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
  • CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
  • CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
  • CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
  • CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
  • CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
  • CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
  • CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
  • CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
  • CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870).
  • CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
  • CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
  • CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).
  • CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420).
  • CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).
  • CVE-2026-64373: cpufreq: Fix hotplug-suspend race during…
Record
SUSE-SU-2026:4640-1
Updated
2026-11-02
OSVSUSE-SU-2026:4706-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
  • CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
  • CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
  • CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
  • CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
  • CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
  • CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
  • CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
  • CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
  • CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
  • CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
  • CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
  • CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
  • CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
  • CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
  • CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
  • CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
  • CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
  • CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
  • CVE-2026-63987: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES (bsc#1272971).
  • CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
  • CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
  • CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
  • CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
  • CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
  • CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
  • CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
  • CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
  • CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
  • CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
  • CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
  • CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870).
  • CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
  • CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
  • CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).
  • CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420).
  • CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).
  • CVE-2026-64373: cpufreq: Fix hotplug-suspend race during…
Record
SUSE-SU-2026:4706-1
Updated
2026-11-02
OSVUSN-8875-1 No score

linux, linux-aws, linux-aws-5.15, linux-aws-fips, linux-azure, linux-azure-5.15, linux-azure-fde-5.15, linux-azure-fips, linux-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iot-realtime, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-oracle, linux-realtime, linux-xilinx-zynqmp vulnerabilities

It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • User-space API (UAPI);
  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • Hardware random number generator core;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DAX dirext access to differentiated memory framework;
  • DMA engine subsystem;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Generic PM domains;
  • System reset/shutdown drivers;
  • Power supply drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Reset controller framework;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • USB DSL drivers;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • DesignWare USB2 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C support driver;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • HFS file system;
  • HFS+ file system;
  • Journaling layer for block devices (JBD2); …
Record
USN-8875-1
Updated
2026-11-07
OSVUSN-8875-2 No score

linux-nvidia vulnerabilities

It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • User-space API (UAPI);
  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • Hardware random number generator core;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DAX dirext access to differentiated memory framework;
  • DMA engine subsystem;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Generic PM domains;
  • System reset/shutdown drivers;
  • Power supply drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Reset controller framework;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • USB DSL drivers;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • DesignWare USB2 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C support driver;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • HFS file system;
  • HFS+ file system;
  • Journaling layer for block devices (JBD2); …
Record
USN-8875-2
Updated
2026-11-07

Affected products

Affected packages

Affected packages
PackageAffectedFixed
bpftool
AlmaLinux:8
From an advisory covering 11 CVEs
 before 4.18.0-553.156.1.el8_10
4.18.0-553.156.1.el8_10
kernel
AlmaLinux:8
From an advisory covering 11 CVEs
 before 4.18.0-553.156.1.el8_10
4.18.0-553.156.1.el8_10
kernel-abi-stablelists
AlmaLinux:8
From an advisory covering 11 CVEs
 before 4.18.0-553.156.1.el8_10
4.18.0-553.156.1.el8_10
kernel-core
AlmaLinux:8
From an advisory covering 11 CVEs
 before 4.18.0-553.156.1.el8_10
4.18.0-553.156.1.el8_10
kernel-cross-headers
AlmaLinux:8
From an advisory covering 11 CVEs
 before 4.18.0-553.156.1.el8_10
4.18.0-553.156.1.el8_10
kernel-debug
AlmaLinux:8
From an advisory covering 11 CVEs
 before 4.18.0-553.156.1.el8_10
4.18.0-553.156.1.el8_10
kernel-debug-core
AlmaLinux:8
From an advisory covering 11 CVEs
 before 4.18.0-553.156.1.el8_10
4.18.0-553.156.1.el8_10
kernel-debug-devel
AlmaLinux:8
From an advisory covering 11 CVEs
 before 4.18.0-553.156.1.el8_10
4.18.0-553.156.1.el8_10
kernel-debug-modules
AlmaLinux:8
From an advisory covering 11 CVEs
 before 4.18.0-553.156.1.el8_10
4.18.0-553.156.1.el8_10
kernel-debug-modules-extra
AlmaLinux:8
From an advisory covering 11 CVEs
 before 4.18.0-553.156.1.el8_10
4.18.0-553.156.1.el8_10
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-devel
AlmaLinux:8
From an advisory covering 11 CVEs
 before 4.18.0-553.156.1.el8_10
4.18.0-553.156.1.el8_10
kernel-doc
AlmaLinux:8
From an advisory covering 11 CVEs
 before 4.18.0-553.156.1.el8_10
4.18.0-553.156.1.el8_10
kernel-headers
AlmaLinux:8
From an advisory covering 11 CVEs
 before 4.18.0-553.156.1.el8_10
4.18.0-553.156.1.el8_10
kernel-modules
AlmaLinux:8
From an advisory covering 11 CVEs
 before 4.18.0-553.156.1.el8_10
4.18.0-553.156.1.el8_10
kernel-modules-extra
AlmaLinux:8
From an advisory covering 11 CVEs
 before 4.18.0-553.156.1.el8_10
4.18.0-553.156.1.el8_10
kernel-tools
AlmaLinux:8
From an advisory covering 11 CVEs
 before 4.18.0-553.156.1.el8_10
4.18.0-553.156.1.el8_10
kernel-tools-libs
AlmaLinux:8
From an advisory covering 11 CVEs
 before 4.18.0-553.156.1.el8_10
4.18.0-553.156.1.el8_10
kernel-tools-libs-devel
AlmaLinux:8
From an advisory covering 11 CVEs
 before 4.18.0-553.156.1.el8_10
4.18.0-553.156.1.el8_10
kernel-zfcpdump
AlmaLinux:8
From an advisory covering 11 CVEs
 before 4.18.0-553.156.1.el8_10
4.18.0-553.156.1.el8_10
kernel-zfcpdump-core
AlmaLinux:8
From an advisory covering 11 CVEs
 before 4.18.0-553.156.1.el8_10
4.18.0-553.156.1.el8_10
kernel-zfcpdump-devel
AlmaLinux:8
From an advisory covering 11 CVEs
 before 4.18.0-553.156.1.el8_10
4.18.0-553.156.1.el8_10
kernel-zfcpdump-modules
AlmaLinux:8
From an advisory covering 11 CVEs
 before 4.18.0-553.156.1.el8_10
4.18.0-553.156.1.el8_10
kernel-zfcpdump-modules-extra
AlmaLinux:8
From an advisory covering 11 CVEs
 before 4.18.0-553.156.1.el8_10
4.18.0-553.156.1.el8_10
perf
AlmaLinux:8
From an advisory covering 11 CVEs
 before 4.18.0-553.156.1.el8_10
4.18.0-553.156.1.el8_10
python3-perf
AlmaLinux:8
From an advisory covering 11 CVEs
 before 4.18.0-553.156.1.el8_10
4.18.0-553.156.1.el8_10
kernel-rt
AlmaLinux:8
From an advisory covering 11 CVEs
 before 4.18.0-553.156.1.rt7.497.el8_10
4.18.0-553.156.1.rt7.497.el8_10
kernel-rt-core
AlmaLinux:8
From an advisory covering 11 CVEs
 before 4.18.0-553.156.1.rt7.497.el8_10
4.18.0-553.156.1.rt7.497.el8_10
kernel-rt-debug
AlmaLinux:8
From an advisory covering 11 CVEs
 before 4.18.0-553.156.1.rt7.497.el8_10
4.18.0-553.156.1.rt7.497.el8_10
kernel-rt-debug-core
AlmaLinux:8
From an advisory covering 11 CVEs
 before 4.18.0-553.156.1.rt7.497.el8_10
4.18.0-553.156.1.rt7.497.el8_10
kernel-rt-debug-devel
AlmaLinux:8
From an advisory covering 11 CVEs
 before 4.18.0-553.156.1.rt7.497.el8_10
4.18.0-553.156.1.rt7.497.el8_10
kernel-rt-debug-modules
AlmaLinux:8
From an advisory covering 11 CVEs
 before 4.18.0-553.156.1.rt7.497.el8_10
4.18.0-553.156.1.rt7.497.el8_10
kernel-rt-debug-modules-extra
AlmaLinux:8
From an advisory covering 11 CVEs
 before 4.18.0-553.156.1.rt7.497.el8_10
4.18.0-553.156.1.rt7.497.el8_10
kernel-rt-devel
AlmaLinux:8
From an advisory covering 11 CVEs
 before 4.18.0-553.156.1.rt7.497.el8_10
4.18.0-553.156.1.rt7.497.el8_10
kernel-rt-modules
AlmaLinux:8
From an advisory covering 11 CVEs
 before 4.18.0-553.156.1.rt7.497.el8_10
4.18.0-553.156.1.rt7.497.el8_10
kernel-rt-modules-extra
AlmaLinux:8
From an advisory covering 11 CVEs
 before 4.18.0-553.156.1.rt7.497.el8_10
4.18.0-553.156.1.rt7.497.el8_10
kernel
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-64k
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-64k-core
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-64k-debug
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-64k-debug-core
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-64k-debug-devel
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-64k-debug-devel-matched
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-64k-debug-modules
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-64k-debug-modules-core
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-64k-debug-modules-extra
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-64k-devel
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-64k-devel-matched
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-64k-modules
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-64k-modules-core
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-64k-modules-extra
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-abi-stablelists
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-core
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-cross-headers
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-debug
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel
Azure Linux:3
 before 6.6.152.1-1
6.6.152.1-1
linux-lts
Alpaquita:23
 6.1.182-r0 up to 6.1.189-r0
6.1.189-r0
linux-lts
Alpaquita:25
 6.12.103-r0 up to 6.12.111-r0
6.12.111-r0
linux-lts
Alpaquita:stream
 6.18.43-r0 up to 6.18.46-r0
6.18.46-r0
bpftool
TuxCare:CentOS:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel
TuxCare:CentOS:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-debug
TuxCare:CentOS:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-debug-devel
TuxCare:CentOS:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-devel
TuxCare:CentOS:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-doc
TuxCare:CentOS:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-headers
TuxCare:CentOS:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-tools
TuxCare:CentOS:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-tools-libs
TuxCare:CentOS:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-tools-libs-devel
TuxCare:CentOS:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
perf
TuxCare:CentOS:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
python-perf
TuxCare:CentOS:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
bpftool
TuxCare:OracleLinux:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel
TuxCare:OracleLinux:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-debug
TuxCare:OracleLinux:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-debug-devel
TuxCare:OracleLinux:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-devel
TuxCare:OracleLinux:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-doc
TuxCare:OracleLinux:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-headers
TuxCare:OracleLinux:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-tools
TuxCare:OracleLinux:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-tools-libs
TuxCare:OracleLinux:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-tools-libs-devel
TuxCare:OracleLinux:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
perf
TuxCare:OracleLinux:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
python-perf
TuxCare:OracleLinux:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
bpftool
TuxCare:RHEL:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel
TuxCare:RHEL:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-debug
TuxCare:RHEL:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-debug-devel
TuxCare:RHEL:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-devel
TuxCare:RHEL:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-doc
TuxCare:RHEL:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-headers
TuxCare:RHEL:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-tools
TuxCare:RHEL:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-tools-libs
TuxCare:RHEL:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
kernel-tools-libs-devel
TuxCare:RHEL:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
perf
TuxCare:RHEL:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
python-perf
TuxCare:RHEL:7
From an advisory covering 53 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els4
3.10.0-1160.156.1.el7.tuxcare.els4
bpftool
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 7.0.0-284.1101.el9_2.tuxcare.11.els14
7.0.0-284.1101.el9_2.tuxcare.11.els14
kernel
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-abi-stablelists
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-core
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-cross-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-debug-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-debug-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-debug-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-debug-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-debug-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
kernel-doc
TuxCare:AlmaLinux:9.2
From an advisory covering 170 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els14
5.14.0-284.1101.el9_2.tuxcare.11.els14
Kernel
Linux
 4.11.0 up to 5.10.265, 5.11.0 up to 5.15.216, 5.16.0 up to 6.1.183, 6.2.0 up to 6.6.152, 6.7.0 up to 6.12.104, 6.13.0 up to 6.18.45, 6.19.0 up to 7.1.9
5.10.2655.15.2166.1.1836.6.1526.12.1046.18.457.1.9
linux
Debian:12
 before 6.1.187-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 45 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.170-16.1.170-26.1.170-36.1.172-16.1.174-16.1.176-16.1.177-16.1.180-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-1
6.1.187-1
linux
Debian:13
 before 6.12.105-1, plus listed versions
6.12.100-16.12.101-16.12.38-16.12.41-16.12.43-1
Show 28 moreShow less
6.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-1
6.12.105-1
linux
Debian:14
 before 7.1.9-1, plus listed versions
6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1
Show 45 moreShow less
6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1
7.1.9-1
linux-6.12
Debian:12
 before 6.12.107-1~deb12u1, plus listed versions
6.12.100-1~deb12u16.12.101-1~deb12u1
6.12.107-1~deb12u1
kernel
Mageia:10
From an advisory covering 1146 CVEs
 before 6.18.55-1.mga10
6.18.55-1.mga10
kmod-xtables-addons
Mageia:10
From an advisory covering 1146 CVEs
 before 3.30-5.mga10
3.30-5.mga10
kmod-virtualbox
Mageia:10
From an advisory covering 1146 CVEs
 before 7.2.14-31.mga10
7.2.14-31.mga10
drakx-installer-images
Mageia:10
From an advisory covering 1146 CVEs
 before 2.94-56.mga10
2.94-56.mga10
drakx-installer-images
Mageia:10
From an advisory covering 1146 CVEs
 before 2.94-56.mga10.nonfree
2.94-56.mga10.nonfree
kmod-nvidia-current-wopengpu
Mageia:10
From an advisory covering 1146 CVEs
 before 580.173.02-40.mga10.nonfree
580.173.02-40.mga10.nonfree
kernel-linus
Mageia:10
From an advisory covering 1146 CVEs
 before 6.18.55-1.mga10
6.18.55-1.mga10
kernel
openEuler:22.03-LTS-SP4
From an advisory covering 35 CVEs
 before 5.10.0-332.0.0.233.oe2203sp4
5.10.0-332.0.0.233.oe2203sp4
bpftool
Red Hat:enterprise_linux:8::baseos
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
bpftool-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
kernel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
kernel-abi-stablelists
Red Hat:enterprise_linux:8::baseos
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
kernel-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
kernel-debug
Red Hat:enterprise_linux:8::baseos
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
kernel-debug-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
kernel-debug-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
kernel-debug-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
kernel-debug-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
kernel-debug-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
kernel-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:8::baseos
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:8::baseos
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:8::baseos
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::baseos
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
kernel-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
kernel-doc
Red Hat:enterprise_linux:8::baseos
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
kernel-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
kernel-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
kernel-tools
Red Hat:enterprise_linux:8::baseos
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
kernel-tools-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
kernel-tools-libs
Red Hat:enterprise_linux:8::baseos
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
kernel-zfcpdump
Red Hat:enterprise_linux:8::baseos
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
kernel-zfcpdump-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
kernel-zfcpdump-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
kernel-zfcpdump-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
kernel-zfcpdump-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
perf
Red Hat:enterprise_linux:8::baseos
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
perf-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
python3-perf
Red Hat:enterprise_linux:8::baseos
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
python3-perf-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
bpftool-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
kernel-debug-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
kernel-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:8::crb
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:8::crb
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::crb
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
kernel-tools-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
kernel-tools-libs-devel
Red Hat:enterprise_linux:8::crb
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
perf-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
python3-perf-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.el8_10
0:4.18.0-553.156.1.el8_10
kernel-rt
Red Hat:enterprise_linux:8::nfv
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.rt7.497.el8_10
0:4.18.0-553.156.1.rt7.497.el8_10
kernel-rt-core
Red Hat:enterprise_linux:8::nfv
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.rt7.497.el8_10
0:4.18.0-553.156.1.rt7.497.el8_10
kernel-rt-debug
Red Hat:enterprise_linux:8::nfv
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.rt7.497.el8_10
0:4.18.0-553.156.1.rt7.497.el8_10
kernel-rt-debug-core
Red Hat:enterprise_linux:8::nfv
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.rt7.497.el8_10
0:4.18.0-553.156.1.rt7.497.el8_10
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:8::nfv
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.rt7.497.el8_10
0:4.18.0-553.156.1.rt7.497.el8_10
kernel-rt-debug-devel
Red Hat:enterprise_linux:8::nfv
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.rt7.497.el8_10
0:4.18.0-553.156.1.rt7.497.el8_10
kernel-rt-debug-kvm
Red Hat:enterprise_linux:8::nfv
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.rt7.497.el8_10
0:4.18.0-553.156.1.rt7.497.el8_10
kernel-rt-debug-modules
Red Hat:enterprise_linux:8::nfv
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.rt7.497.el8_10
0:4.18.0-553.156.1.rt7.497.el8_10
kernel-rt-debug-modules-extra
Red Hat:enterprise_linux:8::nfv
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.rt7.497.el8_10
0:4.18.0-553.156.1.rt7.497.el8_10
kernel-rt-debuginfo
Red Hat:enterprise_linux:8::nfv
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.rt7.497.el8_10
0:4.18.0-553.156.1.rt7.497.el8_10
kernel-rt-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::nfv
From an advisory covering 11 CVEs
 before 0:4.18.0-553.156.1.rt7.497.el8_10
0:4.18.0-553.156.1.rt7.497.el8_10
kernel-obs-build
SUSE:Linux Micro Extras 6.2
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-syms
SUSE:Linux Micro Extras 6.2
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-default
SUSE:Linux Micro 6.1
From an advisory covering 473 CVEs
 before 6.4.0-159998.53.1
6.4.0-159998.53.1
kernel-default-base
SUSE:Linux Micro 6.1
From an advisory covering 473 CVEs
 before 6.4.0-159998.53.1.159998.21.38
6.4.0-159998.53.1.159998.21.38
kernel-kvmsmall
SUSE:Linux Micro 6.1
From an advisory covering 473 CVEs
 before 6.4.0-159998.53.1
6.4.0-159998.53.1
kernel-source
SUSE:Linux Micro 6.1
From an advisory covering 473 CVEs
 before 6.4.0-159998.53.1
6.4.0-159998.53.1
podman
SUSE:Linux Micro 6.2
From an advisory covering 479 CVEs
 before 5.4.2-160000.6.1
5.4.2-160000.6.1
kernel-rt
SUSE:Linux Micro 6.1
From an advisory covering 479 CVEs
 before 6.4.0-159998.53.1
6.4.0-159998.53.1
kernel-source-rt
SUSE:Linux Micro 6.1
From an advisory covering 479 CVEs
 before 6.4.0-159998.53.1
6.4.0-159998.53.1
kernel-64kb
SUSE:Linux Micro 6.2
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-default
SUSE:Linux Micro 6.2
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-default-base
SUSE:Linux Micro 6.2
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1.160000.2.26
6.12.0-160000.39.1.160000.2.26
kernel-rt
SUSE:Linux Micro 6.2
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-source
SUSE:Linux Micro 6.2
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-64kb
SUSE:Linux Enterprise Server 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-azure
SUSE:Linux Enterprise Server 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-default
SUSE:Linux Enterprise Server 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-default-base
SUSE:Linux Enterprise Server 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1.160000.2.26
6.12.0-160000.39.1.160000.2.26
kernel-docs
SUSE:Linux Enterprise Server 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-kvmsmall
SUSE:Linux Enterprise Server 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-obs-qa
SUSE:Linux Enterprise Server 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-source
SUSE:Linux Enterprise Server 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-syms
SUSE:Linux Enterprise Server 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-64kb
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-azure
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-default
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1.160000.2.26
6.12.0-160000.39.1.160000.2.26
kernel-docs
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-kvmsmall
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-obs-qa
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-source
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-syms
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-zfcpdump
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-default
SUSE:Linux Micro 6.0
From an advisory covering 473 CVEs
 before 6.4.0-159998.53.1
6.4.0-159998.53.1
kernel-default-base
SUSE:Linux Micro 6.0
From an advisory covering 473 CVEs
 before 6.4.0-159998.53.1.159998.21.38
6.4.0-159998.53.1.159998.21.38
kernel-kvmsmall
SUSE:Linux Micro 6.0
From an advisory covering 473 CVEs
 before 6.4.0-159998.53.1
6.4.0-159998.53.1
kernel-source
SUSE:Linux Micro 6.0
From an advisory covering 473 CVEs
 before 6.4.0-159998.53.1
6.4.0-159998.53.1
kernel-rt
SUSE:Linux Micro 6.0
From an advisory covering 479 CVEs
 before 6.4.0-159998.53.1
6.4.0-159998.53.1
kernel-source-rt
SUSE:Linux Micro 6.0
From an advisory covering 479 CVEs
 before 6.4.0-159998.53.1
6.4.0-159998.53.1
kernel-livepatch-SLE15-SP7-RT_Update_21
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 508 CVEs
 before 1-150700.1.3.1
1-150700.1.3.1
kernel-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 508 CVEs
 before 6.4.0-150700.7.78.1
6.4.0-150700.7.78.1
kernel-source-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 508 CVEs
 before 6.4.0-150700.7.78.1
6.4.0-150700.7.78.1
kernel-syms-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 508 CVEs
 before 6.4.0-150700.7.78.1
6.4.0-150700.7.78.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 508 CVEs
 before 6.4.0-150700.53.84.1
6.4.0-150700.53.84.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 508 CVEs
 before 6.4.0-150700.53.84.1
6.4.0-150700.53.84.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 508 CVEs
 before 6.4.0-150700.53.84.1.150700.17.47.1
6.4.0-150700.53.84.1.150700.17.47.1
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 508 CVEs
 before 6.4.0-150700.53.84.1
6.4.0-150700.53.84.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 508 CVEs
 before 6.4.0-150700.53.84.1
6.4.0-150700.53.84.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 508 CVEs
 before 6.4.0-150700.53.84.1
6.4.0-150700.53.84.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 508 CVEs
 before 6.4.0-150700.53.84.1
6.4.0-150700.53.84.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 508 CVEs
 before 6.4.0-150700.53.84.1
6.4.0-150700.53.84.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 508 CVEs
 before 6.4.0-150700.53.84.1
6.4.0-150700.53.84.1
linux-azure
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2
Show 45 moreShow less
4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1
 None known
linux-aws-hwe
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1
Show 45 moreShow less
4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1
 None known
linux-azure
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 45 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71
 None known
linux-gcp
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
Show 45 moreShow less
4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1
 None known
linux-hwe
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 45 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1
 None known
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-oracle
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1
Show 45 moreShow less
4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1
 None known
linux
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 45 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107
 None known
linux-aws
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 45 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-aws-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-4.15
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102
Show 45 moreShow less
4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1
Show 45 moreShow less
5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-4.15
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92
Show 45 moreShow less
4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gcp-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 45 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-ibm-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1
Show 45 moreShow less
5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1
 None known
linux-kvm
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8
Show 45 moreShow less
4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13
Show 45 moreShow less
4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-oracle-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1
 None known
linux-raspi-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1
Show 45 moreShow less
5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1
 None known
linux-aws-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24
Show 45 moreShow less
4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93
 None known
linux-azure-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10
Show 45 moreShow less
4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80
 None known
linux-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42
Show 45 moreShow less
4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21
Show 45 moreShow less
4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.794.15.0-2075.804.15.0-2076.814.15.0-2077.83
 None known
linux-aws-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.4
 None known
linux-azure-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.2
 None known
linux-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1011.12
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.1
 None known
linux
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 45 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110
 None known
linux-aws
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5
Show 45 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1117.124~20.04.1, plus listed versions
5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1
Show 45 moreShow less
5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1
5.15.0-1117.124~20.04.1
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8
Show 45 moreShow less
5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
linux-azure-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
 None known
linux-azure-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1123.132~20.04.1, plus listed versions
5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1
Show 45 moreShow less
5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1
5.15.0-1123.132~20.04.1
linux-azure-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
 None known
dtb-aarch64
openSUSE:Leap 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-64kb
openSUSE:Leap 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-azure
openSUSE:Leap 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-default
openSUSE:Leap 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-default-base
openSUSE:Leap 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1.160000.2.25
6.12.0-160000.39.1.160000.2.25
kernel-docs
openSUSE:Leap 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-kvmsmall
openSUSE:Leap 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-obs-build
openSUSE:Leap 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-obs-qa
openSUSE:Leap 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-rt
openSUSE:Leap 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-source
openSUSE:Leap 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-syms
openSUSE:Leap 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1
kernel-zfcpdump
openSUSE:Leap 16.0
From an advisory covering 401 CVEs
 before 6.12.0-160000.39.1
6.12.0-160000.39.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubABC00012345/CVE-2026-745802026-10-14
PoC in GitHubtechupdate24/linux-kernel-cve-2026-74580-vghost2026-10-14
PoC in GitHubV01DL1NG/vghost-watch2026-10-17
PoC in GitHubYounesHfa/CVE-2026-745802026-10-25

History

History
RecordedChangedSources
affectedOSV
affectedOSV
affected, aliases, referencesOSV
affected, aliases, referencesOSV
affected, aliases, referencesOSV
affected, facts, referencesOSV
exploitsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-74580 is a high vulnerability (CVSS 8.8) in Linux, published August 17, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.41%, the 35th percentile. Fixed in kernel 6.6.152.1-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 1,536 package rows, 1,946 versions, 6,323 references and the rest of 25 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 7 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open