Every CVE Search/ Get API key

CVE-2026-74583

net/sched: cls_route: fix fastmap use-after-free on filter

7.8 HighPublic exploitFix available

In the Linux kernel, the following vulnerability has been resolved:

net/sched: cls_route: fix fastmap use-after-free on filter

The route4 classifier maintains a 16-slot fastmap cache that stores raw struct route4_filter pointers indexed by (id, iif). The reader (route4_classify) populates this cache via route4_set_fastmap() for every classified packet that hits a filter. The writer (route4_delete, route4_change) clears the cache via route4_reset_fastmap() before RCU-deferred kfree of the filter.

This creates a UAF race:

  1. Reader walks the RCU-protected bucket chain, finds filter f
  2. Writer unlinks f, calls route4_reset_fastmap(), then tcf_queue_work()
  3. Reader calls route4_set_fastmap() and writes f into the cache after the writer's reset, caching a pointer about to be freed
  4. After the RCU grace period, kfree(f) executes
  5. Next classified packet on the same (id, iif) tuple hits the stale fastmap entry and reads f->res from freed memory

Reproduced with an mdelay(100) accelerator in route4_set_fastmap() and a concurrent add/delete stress test (provided by both zdi and Santosh). Both triggered KASAN slab-use-after-free reports in the route4 fastmap paths.

Fix: Introduce a per-filter boolean dying flag to suppress stale fastmap republishing by in-flight readers.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.12%Unchanged since Aug 22, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.8

net/sched: cls_route: fix fastmap use-after-free on filter

In the Linux kernel, the following vulnerability has been resolved:

net/sched: cls_route: fix fastmap use-after-free on filter

The route4 classifier maintains a 16-slot fastmap cache that stores raw struct route4_filter pointers indexed by (id, iif). The reader (route4_classify) populates this cache via route4_set_fastmap() for every classified packet that hits a filter. The writer (route4_delete, route4_change) clears the cache via route4_reset_fastmap() before RCU-deferred kfree of the filter.

This creates a UAF race:

  1. Reader walks the RCU-protected bucket chain, finds filter f
  2. Writer unlinks f, calls route4_reset_fastmap(), then tcf_queue_work()
  3. Reader calls route4_set_fastmap() and writes f into the cache after the writer's reset, caching a pointer about to be freed
  4. After the RCU grace period, kfree(f) executes
  5. Next classified packet on the same (id, iif) tuple hits the stale fastmap entry and reads f->res from freed memory

Reproduced with an mdelay(100) accelerator in route4_set_fastmap() and a concurrent add/delete stress test (provided by both zdi and Santosh). Both triggered KASAN slab-use-after-free reports in the route4 fastmap paths.

Fix: Introduce a per-filter boolean dying flag to suppress stale fastmap republishing by in-flight readers.

Record
CVE-2026-74583
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
EUVDEUVD-2026-64005 7.8

In the Linux kernel, the following vulnerability has been resolved:

net/sched: cls_route: fix fastmap use-after-free on filter

The route4 classifier maintains a 16-slot fastmap cache that stores raw struct route4_filter pointers indexed by (id, iif). The reader (route4_classify) populates this cache via route4_set_fastmap() for every classified packet that hits a filter. The writer (route4_delete, route4_change) clears the cache via route4_reset_fastmap() before RCU-deferred kfree of the filter.

This creates a UAF race:

  1. Reader walks the RCU-protected bucket chain, finds filter f
  2. Writer unlinks f, calls route4_reset_fastmap(), then tcf_queue_work()
  3. Reader calls route4_set_fastmap() and writes f into the cache after the writer's reset, caching a pointer about to be freed
  4. After the RCU grace period, kfree(f) executes
  5. Next classified packet on the same (id, iif) tuple hits the stale fastmap entry and reads f->res from freed memory

Reproduced with an mdelay(100) accelerator in route4_set_fastmap() and a concurrent add/delete stress test (provided by both zdi and Santosh). Both triggered KASAN slab-use-after-free reports in the route4 fastmap paths.

Fix: Introduce a per-filter boolean dying flag to suppress stale fastmap republishing by in-flight readers.

Record
EUVD-2026-64005
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-qm4p-6qr9-f3w6 7.8

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_route: fix...

In the Linux kernel, the following vulnerability has been resolved:

net/sched: cls_route: fix fastmap use-after-free on filter

The route4 classifier maintains a 16-slot fastmap cache that stores raw struct route4_filter pointers indexed by (id, iif). The reader (route4_classify) populates this cache via route4_set_fastmap() for every classified packet that hits a filter. The writer (route4_delete, route4_change) clears the cache via route4_reset_fastmap() before RCU-deferred kfree of the filter.

This creates a UAF race:

  1. Reader walks the RCU-protected bucket chain, finds filter f
  2. Writer unlinks f, calls route4_reset_fastmap(), then tcf_queue_work()
  3. Reader calls route4_set_fastmap() and writes f into the cache after the writer's reset, caching a pointer about to be freed
  4. After the RCU grace period, kfree(f) executes
  5. Next classified packet on the same (id, iif) tuple hits the stale fastmap entry and reads f->res from freed memory

Reproduced with an mdelay(100) accelerator in route4_set_fastmap() and a concurrent add/delete stress test (provided by both zdi and Santosh). Both triggered KASAN slab-use-after-free reports in the route4 fastmap paths.

Fix: Introduce a per-filter boolean dying flag to suppress stale fastmap republishing by in-flight readers.

Record
GHSA-qm4p-6qr9-f3w6
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

net/sched: cls_route: fix fastmap use-after-free on filter

The route4 classifier maintains a 16-slot fastmap cache that stores raw struct route4_filter pointers indexed by (id, iif). The reader (route4_classify) populates this cache via route4_set_fastmap() for every classified packet that hits a filter. The writer (route4_delete, route4_change) clears the cache via route4_reset_fastmap() before RCU-deferred kfree of the filter.

This creates a UAF race:

  1. Reader walks the RCU-protected bucket chain, finds filter f
  2. Writer unlinks f, calls route4_reset_fastmap(), then tcf_queue_work()
  3. Reader calls route4_set_fastmap() and writes f into the cache after the writer's reset, caching a pointer about to be freed
  4. After the RCU grace period, kfree(f) executes
  5. Next classified packet on the same (id, iif) tuple hits the stale fastmap entry and reads f->res from freed memory

Reproduced with an mdelay(100) accelerator in route4_set_fastmap() and a concurrent add/delete stress test (provided by both zdi and Santosh). Both triggered KASAN slab-use-after-free reports in the route4 fastmap paths.

Fix: Introduce a per-filter boolean dying flag to suppress stale fastmap republishing by in-flight readers.

Record
CVE-2026-74583
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVBELL-CVE-2026-74583 7.8
Record
BELL-CVE-2026-74583
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 7.8

net/sched: cls_route: fix fastmap use-after-free on filter

In the Linux kernel, the following vulnerability has been resolved:

net/sched: cls_route: fix fastmap use-after-free on filter

The route4 classifier maintains a 16-slot fastmap cache that stores raw struct route4_filter pointers indexed by (id, iif). The reader (route4_classify) populates this cache via route4_set_fastmap() for every classified packet that hits a filter. The writer (route4_delete, route4_change) clears the cache via route4_reset_fastmap() before RCU-deferred kfree of the filter.

This creates a UAF race:

  1. Reader walks the RCU-protected bucket chain, finds filter f
  2. Writer unlinks f, calls route4_reset_fastmap(), then tcf_queue_work()
  3. Reader calls route4_set_fastmap() and writes f into the cache after the writer's reset, caching a pointer about to be freed
  4. After the RCU grace period, kfree(f) executes
  5. Next classified packet on the same (id, iif) tuple hits the stale fastmap entry and reads f->res from freed memory

Reproduced with an mdelay(100) accelerator in route4_set_fastmap() and a concurrent add/delete stress test (provided by both zdi and Santosh). Both triggered KASAN slab-use-after-free reports in the route4 fastmap paths.

Fix: Introduce a per-filter boolean dying flag to suppress stale fastmap republishing by in-flight readers.

Record
CVE-2026-74583
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-04
Show 42 moreShow less
OSVDEBIAN-CVE-2026-74583 7.8

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_route: fix fastmap use-after-free on filter The route4 classifier maintains a 16-slot fastmap cache that stores raw struct route4_filter pointers indexed by (id, iif). The reader (route4_classify) populates this cache via route4_set_fastmap() for every classified packet that hits a filter. The writer (route4_delete, route4_change) clears the cache via route4_reset_fastmap() before RCU-deferred kfree of the filter. This creates a UAF race: 1. Reader walks the RCU-protected bucket chain, finds filter f 2. Writer unlinks f, calls route4_reset_fastmap(), then tcf_queue_work() 3. Reader calls route4_set_fastmap() and writes f into the cache after the writer's reset, caching a pointer about to be freed 4. After the RCU grace period, kfree(f) executes 5. Next classified packet on the same (id, iif) tuple hits the stale fastmap entry and reads f->res from freed memory Reproduced with an mdelay(100) accelerator in route4_set_fastmap() and a concurrent add/delete stress test (provided by both zdi and Santosh). Both triggered KASAN slab-use-after-free reports in the route4 fastmap paths. Fix: Introduce a per-filter boolean dying flag to suppress stale fastmap republishing by in-flight readers.

Record
DEBIAN-CVE-2026-74583
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-4591 9.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

ocfs2: clear extent cache after moving/defragmenting extents

The extent map cache can become stale when extents are moved or defragmented, causing subsequent operations to see outdated extent flags. This triggers a BUG_ON in ocfs2_refcount_cal_cow_clusters().

The problem occurs when:

  1. copy_file_range() creates a reflinked extent with OCFS2_EXT_REFCOUNTED
  2. ioctl(FITRIM) triggers ocfs2_move_extents()
  3. __ocfs2_move_extents_range() reads and caches the extent (flags=0x2)
  4. ocfs2_move_extent()/ocfs2_defrag_extent() calls __ocfs2_move_extent() which clears OCFS2_EXT_REFCOUNTED flag on disk (flags=0x0)
  5. The extent map cache is not invalidated after the move
  6. Later write() operations read stale cached flags (0x2) but disk has updated flags (0x0), causing a mismatch
  7. BUG_ON(!(rec->e_flags & OCFS2_EXT_REFCOUNTED)) triggers

Fix by clearing the extent map cache after each extent move/defrag operation in __ocfs2_move_extents_range(). This ensures subsequent operations read fresh extent data from disk.(CVE-2025-40233)

In the Linux kernel, the following vulnerability has been resolved:

net: dsa: properly keep track of conduit reference

Problem description

DSA has a mumbo-jumbo of reference handling of the conduit net device and its kobject which, sadly, is just wrong and doesn't make sense.

There are two distinct problems.

  1. The OF path, which uses of_find_net_device_by_node(), never releases the elevated refcount on the conduit's kobject. Nominally, the OF and non-OF paths should result in objects having identical reference counts taken, and it is already suspicious that dsa_dev_to_net_device() has a put_device() call which is missing in dsa_port_parse_of(), but we can actually even verify that an issue exists. With CONFIG_DEBUG_KOBJECT_RELEASE=y, if we run this command "before" and "after" applying this patch:

(unbind the conduit driver for net device eno2) echo 0000:00:00.2 > /sys/bus/pci/drivers/fsl_enetc/unbind

we see these lines in the output diff which appear only with the patch applied:

kobject: 'eno2' (ffff002009a3a6b8): kobject_release, parent 0000000000000000 (delayed 1000) kobject: '109' (ffff0020099d59a0): kobject_release, parent 0000000000000000 (delayed 1000)

  1. After we find the conduit interface one way (OF) or another (non-OF), it can get unregistered at any time, and DSA remains with a long-lived, but in this case stale, cpu_dp->conduit pointer. Holding the net device's underlying kobject isn't actually of much help, it just prevents it from being freed (but we never need that kobject directly). What helps us to prevent the net device from being unregistered is the parallel netdev reference mechanism (dev_hold() and dev_put()).

Actually we actually use that netdev tracker mechanism implicitly on user ports since commit 2f1e8ea726e9 ("net: dsa: link interfaces with the DSA master to get rid of lockdep warnings"), via netdev_upper_dev_link(). But time still passes at DSA switch probe time between the initial of_find_net_device_by_node() code and the user port creation time, time during which the conduit could unregister itself and DSA wouldn't know about it.

So we have to run of_find_net_device_by_node() under rtnl_lock() to prevent that from happening, and release the lock only with the netdev tracker having acquired the reference.

Do we need to keep the reference until dsa_unregister_switch() / dsa_switch_shutdown()? 1: Maybe yes. A switch device will still be registered even if all user ports failed to probe, see commit 86f8b1c01a0a ("net: dsa: Do not make user port errors fatal"), and the cpu_dp->conduit pointers remain valid. I haven't audited all call paths to see…

Record
OESA-2026-4591
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:83157 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:83157
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:83159 8.8

Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Record
RHSA-2026:83159
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:83157 8.8

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: Linux kernel: Denial of Service due to use-after-free in act_tunnel_key (CVE-2026-68377)

  • kernel: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CVE-2026-72262)

  • kernel: net/sched: cls_route: fix fastmap use-after-free on filter (CVE-2026-74583)

  • kernel: ALSA: usx2y: bound the hwdep mmap fault offset (CVE-2026-74641)

  • kernel: udp: fix potential use-after-free in tunnel segmentation (CVE-2026-74705)

  • kernel: svcrdma: Validate Read chunk positions before reconstruction (CVE-2026-89526)

  • kernel: NFSD: Prevent client use-after-free during blocked-lock reaping (CVE-2026-90036)

  • kernel: svcrdma: Reject Write/Reply chunks with segcount 0 (CVE-2026-93228)

  • kernel: md/raid5-ppl: fix use-after-free in ppl_do_flush() (CVE-2026-93262)

Bug Fix(es) and Enhancement(s):

  • powerpc/pseries: pci - logic bug in SR-IOV enable (JIRA:Rocky Linux-240146)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:83157
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:83159 8.8

Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: Linux kernel: Denial of Service due to use-after-free in act_tunnel_key (CVE-2026-68377)

  • kernel: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CVE-2026-72262)

  • kernel: net/sched: cls_route: fix fastmap use-after-free on filter (CVE-2026-74583)

  • kernel: ALSA: usx2y: bound the hwdep mmap fault offset (CVE-2026-74641)

  • kernel: udp: fix potential use-after-free in tunnel segmentation (CVE-2026-74705)

  • kernel: svcrdma: Validate Read chunk positions before reconstruction (CVE-2026-89526)

  • kernel: NFSD: Prevent client use-after-free during blocked-lock reaping (CVE-2026-90036)

  • kernel: svcrdma: Reject Write/Reply chunks with segcount 0 (CVE-2026-93228)

  • kernel: md/raid5-ppl: fix use-after-free in ppl_do_flush() (CVE-2026-93262)

Bug Fix(es) and Enhancement(s):

  • powerpc/pseries: pci - logic bug in SR-IOV enable (JIRA:Rocky Linux-240146)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:83159
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-74583 7.8

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_route: fix fastmap use-after-free on filter The route4 classifier maintains a 16-slot fastmap cache that stores raw struct route4_filter pointers indexed by (id, iif). The reader (route4_classify) populates this cache via route4_set_fastmap() for every classified packet that hits a filter. The writer (route4_delete, route4_change) clears the cache via route4_reset_fastmap() before RCU-deferred kfree of the filter. This creates a UAF race: 1. Reader walks the RCU-protected bucket chain, finds filter f 2. Writer unlinks f, calls route4_reset_fastmap(), then tcf_queue_work() 3. Reader calls route4_set_fastmap() and writes f into the cache after the writer's reset, caching a pointer about to be freed 4. After the RCU grace period, kfree(f) executes 5. Next classified packet on the same (id, iif) tuple hits the stale fastmap entry and reads f->res from freed memory Reproduced with an mdelay(100) accelerator in route4_set_fastmap() and a concurrent add/delete stress test (provided by both zdi and Santosh). Both triggered KASAN slab-use-after-free reports in the route4 fastmap paths. Fix: Introduce a per-filter boolean dying flag to suppress stale fastmap republishing by in-flight readers.

Record
UBUNTU-CVE-2026-74583
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVALSA-2026:83157 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: Linux kernel: Denial of Service due to use-after-free in act_tunnel_key (CVE-2026-68377)
  • kernel: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CVE-2026-72262)
  • kernel: net/sched: cls_route: fix fastmap use-after-free on filter (CVE-2026-74583)
  • kernel: ALSA: usx2y: bound the hwdep mmap fault offset (CVE-2026-74641)
  • kernel: udp: fix potential use-after-free in tunnel segmentation (CVE-2026-74705)
  • kernel: svcrdma: Validate Read chunk positions before reconstruction (CVE-2026-89526)
  • kernel: NFSD: Prevent client use-after-free during blocked-lock reaping (CVE-2026-90036)
  • kernel: svcrdma: Reject Write/Reply chunks with segcount 0 (CVE-2026-93228)
  • kernel: md/raid5-ppl: fix use-after-free in ppl_do_flush() (CVE-2026-93262)

Bug Fix(es) and Enhancement(s):

  • powerpc/pseries: pci - logic bug in SR-IOV enable (JIRA:AlmaLinux-240146)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:83157
Updated
2026-11-02
OSVALSA-2026:83159 No score

Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: Linux kernel: Denial of Service due to use-after-free in act_tunnel_key (CVE-2026-68377)
  • kernel: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CVE-2026-72262)
  • kernel: net/sched: cls_route: fix fastmap use-after-free on filter (CVE-2026-74583)
  • kernel: ALSA: usx2y: bound the hwdep mmap fault offset (CVE-2026-74641)
  • kernel: udp: fix potential use-after-free in tunnel segmentation (CVE-2026-74705)
  • kernel: svcrdma: Validate Read chunk positions before reconstruction (CVE-2026-89526)
  • kernel: NFSD: Prevent client use-after-free during blocked-lock reaping (CVE-2026-90036)
  • kernel: svcrdma: Reject Write/Reply chunks with segcount 0 (CVE-2026-93228)
  • kernel: md/raid5-ppl: fix use-after-free in ppl_do_flush() (CVE-2026-93262)

Bug Fix(es) and Enhancement(s):

  • powerpc/pseries: pci - logic bug in SR-IOV enable (JIRA:AlmaLinux-240146)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:83159
Updated
2026-11-02
OSVAZL-96998 No score

CVE-2026-74583 affecting package kernel for versions less than 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved:

net/sched: cls_route: fix fastmap use-after-free on filter

The route4 classifier maintains a 16-slot fastmap cache that stores raw struct route4_filter pointers indexed by (id, iif). The reader (route4_classify) populates this cache via route4_set_fastmap() for every classified packet that hits a filter. The writer (route4_delete, route4_change) clears the cache via route4_reset_fastmap() before RCU-deferred kfree of the filter.

This creates a UAF race:

  1. Reader walks the RCU-protected bucket chain, finds filter f
  2. Writer unlinks f, calls route4_reset_fastmap(), then tcf_queue_work()
  3. Reader calls route4_set_fastmap() and writes f into the cache after the writer's reset, caching a pointer about to be freed
  4. After the RCU grace period, kfree(f) executes
  5. Next classified packet on the same (id, iif) tuple hits the stale fastmap entry and reads f->res from freed memory

Reproduced with an mdelay(100) accelerator in route4_set_fastmap() and a concurrent add/delete stress test (provided by both zdi and Santosh). Both triggered KASAN slab-use-after-free reports in the route4 fastmap paths.

Fix: Introduce a per-filter boolean dying flag to suppress stale fastmap republishing by in-flight readers.

Record
AZL-96998
Updated
2026-11-02
OSVCLSA-2026-1788170774 No score

kernel: Fix of 132 CVEs

  • sctp: fix potential deadlock on &net->sctp.addr_wq_lock {CVE-2024-0639}
  • sctp: delay auto_asconf init until binding the first addr {CVE-2021-23133}
  • netfilter: nf_log: validate MAC header was set before dumping it {CVE-2026-52942}
  • netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check {CVE-2026-52998}
  • drm/nouveau: fix u32 overflow in pushbuf reloc bounds check {CVE-2026-46006}
  • btrfs: fix use-after-free when attempting to join an aborted transaction {CVE-2025-21753}
  • btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
  • team: fix header_ops type confusion with non-Ethernet ports {CVE-2026-31502}
  • xfrm: Fix dev use-after-free in xfrm async resumption {CVE-2026-72463}
  • xfrm: hold dev ref until after transport_finish NF_HOOK {CVE-2026-31663}
  • xen/privcmd: restrict usage in unprivileged domU {CVE-2026-31788}
  • xen/privcmd: add IOCTL_PRIVCMD_RESTRICT {CVE-2026-31788}
  • Bluetooth: L2CAP: make l2cap_connect() return void {CVE-2024-36013}
  • btrfs: fix incorrect splitting in btrfs_drop_extent_map_range {CVE-2023-54121}
  • netfilter: nf_conntrack: defer invalid log until after unlock {CVE-2026-74624}
  • NFS: Pin the 'struct nfs_server' during a FREE_STATEID call {CVE-2026-74730}
  • dm cache: fix flushing uninitialized delayed_work on cache_ctr error {CVE-2024-50280}
  • audit: fix recursive locking deadlock in audit_dupe_exe() {CVE-2026-68096}
  • RDMA/rxe: Reject unknown opcodes before ICRC processing {CVE-2026-46133}
  • Bluetooth: bnep: reject short frames before parsing {CVE-2026-53253}
  • net: pull headers in qdisc_pkt_len_segs_init() {CVE-2026-53091}
  • inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266}
  • Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
  • sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed {CVE-2022-50103}
  • btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
  • fanotify: fix false positive on permission events {CVE-2026-46150}
  • HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103}
  • ext4: fix e4b bitmap inconsistency reports {CVE-2026-45942}
  • Bluetooth: serialize accept_q access {CVE-2026-52918}
  • ALSA: usb-audio: Add sanity check for OOB writes at silencing {CVE-2026-43279}
  • RDMA/bnxt_re: zero shared page before exposing to userspace {CVE-2026-74584}
  • sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
  • ipvs: clear IPv4 options after rebasing tunnel ICMP errors {CVE-2026-74669}
  • wifi: cfg80211: Partial revert "wifi: cfg80211: Fix use after free for wext" {CVE-2023-53153}
  • net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
  • nfs: use nfsi->rwsem to protect traversal of the file lock list {CVE-2026-72472}
  • Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}
  • drm/amdgpu/vce: fix integer overflow in image size {CVE-2026-68108}
  • ALSA: seq: close a re-opened queue timer in the destructor {CVE-2026-68202}
  • ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() {CVE-2026-74499}
  • USB: serial: io_edgeport: cap received transmit credits {CVE-2026-68365}
  • net: slip: serialize receive against buffer reallocation {CVE-2026-68143}
  • wifi: cfg80211: cancel sched scan results work on unregister {CVE-2026-68414}
  • sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}
  • sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}
  • pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}
  • ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() {CVE-2026-68160}
  • libceph: refresh auth->authorizer_buf{,_len} after authorizer update {CVE-2026-68156}
  • libceph: remove debugfs files before client teardown {CVE-2026-68153}
  • libceph: Fix multiplication overflow in decode_new_up_state_weight() {CVE-2026-68158}
  • libceph: reject zero bucket types in crush_decode {CVE-2026-68154}
  • libceph: bound…
Record
CLSA-2026-1788170774
Updated
2026-11-02
OSVCLSA-2026-1788257079 No score

kernel: Fix of 131 CVEs

  • sctp: fix potential deadlock on &net->sctp.addr_wq_lock {CVE-2024-0639}
  • sctp: delay auto_asconf init until binding the first addr {CVE-2021-23133}
  • netfilter: nf_log: validate MAC header was set before dumping it {CVE-2026-52942}
  • netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check {CVE-2026-52998}
  • drm/nouveau: fix u32 overflow in pushbuf reloc bounds check {CVE-2026-46006}
  • btrfs: fix use-after-free when attempting to join an aborted transaction {CVE-2025-21753}
  • btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
  • team: fix header_ops type confusion with non-Ethernet ports {CVE-2026-31502}
  • xfrm: Fix dev use-after-free in xfrm async resumption {CVE-2026-72463}
  • xfrm: hold dev ref until after transport_finish NF_HOOK {CVE-2026-31663}
  • xen/privcmd: restrict usage in unprivileged domU {CVE-2026-31788}
  • xen/privcmd: add IOCTL_PRIVCMD_RESTRICT {CVE-2026-31788}
  • Bluetooth: L2CAP: make l2cap_connect() return void {CVE-2024-36013}
  • btrfs: fix incorrect splitting in btrfs_drop_extent_map_range {CVE-2023-54121}
  • netfilter: nf_conntrack: defer invalid log until after unlock {CVE-2026-74624}
  • NFS: Pin the 'struct nfs_server' during a FREE_STATEID call {CVE-2026-74730}
  • dm cache: fix flushing uninitialized delayed_work on cache_ctr error {CVE-2024-50280}
  • audit: fix recursive locking deadlock in audit_dupe_exe() {CVE-2026-68096}
  • RDMA/rxe: Reject unknown opcodes before ICRC processing {CVE-2026-46133}
  • Bluetooth: bnep: reject short frames before parsing {CVE-2026-53253}
  • net: pull headers in qdisc_pkt_len_segs_init() {CVE-2026-53091}
  • inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266}
  • Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
  • sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed {CVE-2022-50103}
  • btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
  • fanotify: fix false positive on permission events {CVE-2026-46150}
  • HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103}
  • ext4: fix e4b bitmap inconsistency reports {CVE-2026-45942}
  • Bluetooth: serialize accept_q access {CVE-2026-52918}
  • ALSA: usb-audio: Add sanity check for OOB writes at silencing {CVE-2026-43279}
  • RDMA/bnxt_re: zero shared page before exposing to userspace {CVE-2026-74584}
  • sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
  • ipvs: clear IPv4 options after rebasing tunnel ICMP errors {CVE-2026-74669}
  • wifi: cfg80211: Partial revert "wifi: cfg80211: Fix use after free for wext" {CVE-2023-53153}
  • net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
  • nfs: use nfsi->rwsem to protect traversal of the file lock list {CVE-2026-72472}
  • Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}
  • drm/amdgpu/vce: fix integer overflow in image size {CVE-2026-68108}
  • ALSA: seq: close a re-opened queue timer in the destructor {CVE-2026-68202}
  • ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() {CVE-2026-74499}
  • USB: serial: io_edgeport: cap received transmit credits {CVE-2026-68365}
  • net: slip: serialize receive against buffer reallocation {CVE-2026-68143}
  • wifi: cfg80211: cancel sched scan results work on unregister {CVE-2026-68414}
  • sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}
  • sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}
  • pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}
  • ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() {CVE-2026-68160}
  • libceph: refresh auth->authorizer_buf{,_len} after authorizer update {CVE-2026-68156}
  • libceph: remove debugfs files before client teardown {CVE-2026-68153}
  • libceph: Fix multiplication overflow in decode_new_up_state_weight() {CVE-2026-68158}
  • libceph: reject zero bucket types in crush_decode {CVE-2026-68154}
  • libceph: bound…
Record
CLSA-2026-1788257079
Updated
2026-11-02
OSVCLSA-2026-1788259625 No score

kernel: Fix of 132 CVEs

  • sctp: fix potential deadlock on &net->sctp.addr_wq_lock {CVE-2024-0639}
  • sctp: delay auto_asconf init until binding the first addr {CVE-2021-23133}
  • netfilter: nf_log: validate MAC header was set before dumping it {CVE-2026-52942}
  • netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check {CVE-2026-52998}
  • drm/nouveau: fix u32 overflow in pushbuf reloc bounds check {CVE-2026-46006}
  • btrfs: fix use-after-free when attempting to join an aborted transaction {CVE-2025-21753}
  • btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
  • team: fix header_ops type confusion with non-Ethernet ports {CVE-2026-31502}
  • xfrm: Fix dev use-after-free in xfrm async resumption {CVE-2026-72463}
  • xfrm: hold dev ref until after transport_finish NF_HOOK {CVE-2026-31663}
  • xen/privcmd: restrict usage in unprivileged domU {CVE-2026-31788}
  • xen/privcmd: add IOCTL_PRIVCMD_RESTRICT {CVE-2026-31788}
  • Bluetooth: L2CAP: make l2cap_connect() return void {CVE-2024-36013}
  • btrfs: fix incorrect splitting in btrfs_drop_extent_map_range {CVE-2023-54121}
  • netfilter: nf_conntrack: defer invalid log until after unlock {CVE-2026-74624}
  • NFS: Pin the 'struct nfs_server' during a FREE_STATEID call {CVE-2026-74730}
  • dm cache: fix flushing uninitialized delayed_work on cache_ctr error {CVE-2024-50280}
  • audit: fix recursive locking deadlock in audit_dupe_exe() {CVE-2026-68096}
  • RDMA/rxe: Reject unknown opcodes before ICRC processing {CVE-2026-46133}
  • Bluetooth: bnep: reject short frames before parsing {CVE-2026-53253}
  • net: pull headers in qdisc_pkt_len_segs_init() {CVE-2026-53091}
  • inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266}
  • Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
  • sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed {CVE-2022-50103}
  • btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
  • fanotify: fix false positive on permission events {CVE-2026-46150}
  • HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103}
  • ext4: fix e4b bitmap inconsistency reports {CVE-2026-45942}
  • Bluetooth: serialize accept_q access {CVE-2026-52918}
  • ALSA: usb-audio: Add sanity check for OOB writes at silencing {CVE-2026-43279}
  • RDMA/bnxt_re: zero shared page before exposing to userspace {CVE-2026-74584}
  • sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
  • ipvs: clear IPv4 options after rebasing tunnel ICMP errors {CVE-2026-74669}
  • wifi: cfg80211: Partial revert "wifi: cfg80211: Fix use after free for wext" {CVE-2023-53153}
  • net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
  • nfs: use nfsi->rwsem to protect traversal of the file lock list {CVE-2026-72472}
  • Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}
  • drm/amdgpu/vce: fix integer overflow in image size {CVE-2026-68108}
  • ALSA: seq: close a re-opened queue timer in the destructor {CVE-2026-68202}
  • ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() {CVE-2026-74499}
  • USB: serial: io_edgeport: cap received transmit credits {CVE-2026-68365}
  • net: slip: serialize receive against buffer reallocation {CVE-2026-68143}
  • wifi: cfg80211: cancel sched scan results work on unregister {CVE-2026-68414}
  • sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}
  • sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}
  • pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}
  • ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() {CVE-2026-68160}
  • libceph: refresh auth->authorizer_buf{,_len} after authorizer update {CVE-2026-68156}
  • libceph: remove debugfs files before client teardown {CVE-2026-68153}
  • libceph: Fix multiplication overflow in decode_new_up_state_weight() {CVE-2026-68158}
  • libceph: reject zero bucket types in crush_decode {CVE-2026-68154}
  • libceph: bound…
Record
CLSA-2026-1788259625
Updated
2026-11-02
OSVCLSA-2026-1789958474 No score

Fix of 167 CVEs

  • CVE-2025-39826
    • net: rose: convert 'use' field to refcount_t {CVE-2025-39826}
  • CVE-2025-40146
    • blk-mq: fix potential deadlock while nr_requests grown {CVE-2025-40146}
  • CVE-2024-53216
    • nfsd: release svc_expkey/svc_export with rcu_work {CVE-2024-53216}
  • CVE-2026-89778
    • isofs: fix out-of-bounds page array access on empty zisofs block {CVE-2026-89778}
  • CVE-2026-23050
    • pNFS: Fix a deadlock when returning a delegation during open() {CVE-2026-23050}
  • CVE-2025-68796
    • f2fs: fix to avoid updating zero-sized extent in extent cache {CVE-2025-68796}
  • CVE-2025-68330
    • iio: accel: bmc150: Fix irq assumption regression {CVE-2025-68330}
  • CVE-2025-40333
    • f2fs: fix infinite loop in __insert_extent_tree() {CVE-2025-40333}
  • CVE-2025-40160
    • xen/events: Return -EEXIST for bound VIRQs {CVE-2025-40160}
  • CVE-2023-54047
    • drm/rockchip: dw_hdmi: cleanup drm encoder during unbind {CVE-2023-54047}
  • CVE-2025-68190
    • drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() {CVE-2025-68190}
  • CVE-2025-68188
    • tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() {CVE-2025-68188}
  • CVE-2026-89786
    • ext4: fix out-of-bounds read in ext4_read_inline_dir() {CVE-2026-89786}
  • CVE-2022-50764
    • ipv6/sit: use DEV_STATS_INC() to avoid data-races {CVE-2022-50764}
  • CVE-2026-80785
    • fbdev: serialize mode sysfs access with lock_fb_info() {CVE-2026-80785}
  • CVE-2026-80788
    • nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations {CVE-2026-80788}
  • CVE-2026-80747
    • drm/amdkfd: Add bounds check for CRAT subtype length {CVE-2026-80747}
  • CVE-2026-80907
    • drm/amdgpu: Fix UVD dpb min size calculation for H264 {CVE-2026-80907}
  • CVE-2026-80908
    • drm/amdgpu: Reject UVD message with dimensions above 4096 {CVE-2026-80908}
  • CVE-2026-80812
    • ALSA: dummy: Check card index validity at probe {CVE-2026-80812}
  • CVE-2026-80948
    • wifi: iwlwifi: dvm: fix memory leak in iwl_op_mode_dvm_start() {CVE-2026-80948}
  • CVE-2025-40137
    • f2fs: fix to truncate first page in error path of f2fs_truncate() {CVE-2025-40137}
  • CVE-2023-54150
    • drm/amd: Fix an out of bounds error in BIOS parser {CVE-2023-54150}
  • CVE-2026-89784
    • SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 {CVE-2026-89784}
  • CVE-2026-89783
    • xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full {CVE-2026-89783}
  • CVE-2026-89780
    • net: qualcomm: rmnet: restore skb->dev on deaggregated frames {CVE-2026-89780}
  • CVE-2026-89777
    • vfio/pci: clear vdev->msi_perm after freeing it on init failure {CVE-2026-89777}
  • CVE-2026-89789
    • gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free {CVE-2026-89789}
  • CVE-2025-68797
    • char: applicom: fix NULL pointer dereference in ac_ioctl {CVE-2025-68797}
  • CVE-2025-68767
    • hfsplus: Verify inode mode when loading from disk {CVE-2025-68767}
  • CVE-2026-63961
    • usb: typec: altmodes/displayport: validate count before reading Status Update VDO {CVE-2026-63961}
  • CVE-2026-63904
    • usb: usbtmc: check URB actual_length for interrupt-IN notifications {CVE-2026-63904}
  • CVE-2022-50864
    • nilfs2: fix shift-out-of-bounds due to too large exponent of block size {CVE-2022-50864}
  • CVE-2025-68771
    • ocfs2: fix kernel BUG in ocfs2_find_victim_chain {CVE-2025-68771}
  • CVE-2025-68750
    • usb: potential integer overflow in usbg_make_tpg() {CVE-2025-68750}
  • CVE-2026-80909
    • drm/amdgpu: Reject UVD message with invalid number of h265 refs {CVE-2026-80909}
  • CVE-2026-74402
    • crypto: atmel-sha204a - fix blocking and non-blocking rng logic {CVE-2026-74402} *…
Record
CLSA-2026-1789958474
Updated
2026-11-02
OSVCLSA-2026-1791132071 No score

Fix of 159 CVEs

  • CVE-2026-64375
    • proc: protect ptrace_may_access() with exec_update_lock (FD links) {CVE-2026-64375}
    • exec: Add exec_update_mutex to replace cred_guard_mutex {CVE-2026-64375}
  • CVE-2026-53266
    • netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
  • CVE-2025-39964
    • crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
  • CVE-2026-90413
    • IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413}
  • CVE-2026-53062
    • dm cache policy smq: test e->allocated under the policy lock {CVE-2026-53062}
    • dm cache policy smq: fix missing locks in invalidating cache blocks {CVE-2026-53062}
  • CVE-2026-64237
    • Input: elan_i2c - release the firmware on the short-file path {CVE-2026-64237}
    • Input: elan_i2c - validate firmware size before use {CVE-2026-64237}
  • CVE-2026-64109
    • af_unix: fix the UAF read of tail->len without losing the wakeup condition {CVE-2026-64109}
    • af_unix: Fix UAF read of tail->len in unix_stream_data_wait() {CVE-2026-64109}
  • CVE-2025-38512
    • wifi: prevent A-MSDU attacks in mesh networks {CVE-2025-38512}
  • CVE-2025-38117
    • Bluetooth: MGMT: Protect mgmt_pending list with its own lock {CVE-2025-38117}
  • CVE-2026-22980
    • nfsd: provide locking for v4_end_grace {CVE-2026-22980}
  • CVE-2023-53254
    • cacheinfo: Fix shared_cpu_map to handle shared caches at different levels {CVE-2023-53254}
  • CVE-2025-37885
    • KVM: x86: Reset IRTE to host control if new route isn't postable {CVE-2025-37885}
  • CVE-2026-23191
    • ALSA: aloop: Fix racy access at PCM trigger {CVE-2026-23191}
  • CVE-2025-37879
    • 9p/net: fix improper handling of bogus negative read/write replies {CVE-2025-37879}
  • CVE-2023-53039
    • HID: intel-ish-hid: ipc: Fix potential use-after-free in work function {CVE-2023-53039}
  • CVE-2019-12456
    • scsi: mpt3sas_ctl: fix double-fetch bug in _ctl_ioctl_main() {CVE-2019-12456}
  • CVE-2024-46812
    • drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration {CVE-2024-46812}
  • CVE-2026-31761
    • iio: gyro: mpu3050: Move iio_device_register() to correct location {CVE-2026-31761}
  • CVE-2026-53120
    • PCI: RCU-protect driver_override against pci_match_device() UAF {CVE-2026-53120}
  • CVE-2026-31598
    • ocfs2: fix possible deadlock between unlink and dio_end_io_write {CVE-2026-31598}
  • CVE-2026-43075
    • ocfs2: fix out-of-bounds write in ocfs2_write_end_inline {CVE-2026-43075}
  • CVE-2024-41013
    • xfs: don't walk off the end of a directory data block {CVE-2024-41013}
  • CVE-2026-31527
    • driver core: platform: RCU-protect driver_override against match() UAF {CVE-2026-31527}
  • CVE-2022-48744
    • net/mlx5e: Avoid field-overflowing memcpy() {CVE-2022-48744}
  • CVE-2023-53510
    • scsi: ufs: core: Fix handling of lrbp->cmd {CVE-2023-53510}
  • CVE-2026-23268
    • apparmor: fix unprivileged local user can do privileged policy management {CVE-2026-23268}
  • CVE-2026-23269
    • apparmor: validate DFA start states are in bounds in unpack_pdb {CVE-2026-23269}
  • CVE-2025-21812
    • ax25: rcu protect dev->ax25_ptr {CVE-2025-21812}
  • CVE-2026-46266
    • inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266}
  • CVE-2026-53228
    • ipv6: sit: reload inner IPv6 header after GSO offloads {CVE-2026-53228}
  • CVE-2026-53355
    • net: rds: clear i_sends on setup unwind {CVE-2026-53355}
  • CVE-2026-45970
    • bonding: alb: fix UAF in rlb_arp_recv during bond up/down {CVE-2026-45970}
  • CVE-2023-52922
    • can: bcm: Fix UAF in bcm_proc_show() {CVE-2023-52922}
  • CVE-2026-52920
    • netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920} *…
Record
CLSA-2026-1791132071
Updated
2026-11-02
OSVCLSA-2026-1791132078 No score

Fix of 160 CVEs

  • CVE-2026-64375
    • proc: protect ptrace_may_access() with exec_update_lock (FD links) {CVE-2026-64375}
    • exec: Add exec_update_mutex to replace cred_guard_mutex {CVE-2026-64375}
  • CVE-2026-53266
    • netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
  • CVE-2025-39964
    • crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
  • CVE-2026-90413
    • IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413}
  • CVE-2026-53062
    • dm cache policy smq: test e->allocated under the policy lock {CVE-2026-53062}
    • dm cache policy smq: fix missing locks in invalidating cache blocks {CVE-2026-53062}
  • CVE-2026-64237
    • Input: elan_i2c - release the firmware on the short-file path {CVE-2026-64237}
    • Input: elan_i2c - validate firmware size before use {CVE-2026-64237}
  • CVE-2026-64109
    • af_unix: fix the UAF read of tail->len without losing the wakeup condition {CVE-2026-64109}
    • af_unix: Fix UAF read of tail->len in unix_stream_data_wait() {CVE-2026-64109}
  • CVE-2025-38512
    • wifi: prevent A-MSDU attacks in mesh networks {CVE-2025-38512}
  • CVE-2025-38117
    • Bluetooth: MGMT: Protect mgmt_pending list with its own lock {CVE-2025-38117}
  • CVE-2026-22980
    • nfsd: provide locking for v4_end_grace {CVE-2026-22980}
  • CVE-2023-53254
    • cacheinfo: Fix shared_cpu_map to handle shared caches at different levels {CVE-2023-53254}
  • CVE-2025-37885
    • KVM: x86: Reset IRTE to host control if new route isn't postable {CVE-2025-37885}
  • CVE-2026-23191
    • ALSA: aloop: Fix racy access at PCM trigger {CVE-2026-23191}
  • CVE-2025-37879
    • 9p/net: fix improper handling of bogus negative read/write replies {CVE-2025-37879}
  • CVE-2023-53039
    • HID: intel-ish-hid: ipc: Fix potential use-after-free in work function {CVE-2023-53039}
  • CVE-2019-12456
    • scsi: mpt3sas_ctl: fix double-fetch bug in _ctl_ioctl_main() {CVE-2019-12456}
  • CVE-2024-46812
    • drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration {CVE-2024-46812}
  • CVE-2026-31761
    • iio: gyro: mpu3050: Move iio_device_register() to correct location {CVE-2026-31761}
  • CVE-2026-53120
    • PCI: RCU-protect driver_override against pci_match_device() UAF {CVE-2026-53120}
  • CVE-2026-31598
    • ocfs2: fix possible deadlock between unlink and dio_end_io_write {CVE-2026-31598}
  • CVE-2026-43075
    • ocfs2: fix out-of-bounds write in ocfs2_write_end_inline {CVE-2026-43075}
  • CVE-2024-41013
    • xfs: don't walk off the end of a directory data block {CVE-2024-41013}
  • CVE-2026-31527
    • driver core: platform: RCU-protect driver_override against match() UAF {CVE-2026-31527}
  • CVE-2022-48744
    • net/mlx5e: Avoid field-overflowing memcpy() {CVE-2022-48744}
  • CVE-2023-53510
    • scsi: ufs: core: Fix handling of lrbp->cmd {CVE-2023-53510}
  • CVE-2026-23268
    • apparmor: fix unprivileged local user can do privileged policy management {CVE-2026-23268}
  • CVE-2026-23269
    • apparmor: validate DFA start states are in bounds in unpack_pdb {CVE-2026-23269}
  • CVE-2025-21812
    • ax25: rcu protect dev->ax25_ptr {CVE-2025-21812}
  • CVE-2026-46266
    • inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266}
  • CVE-2026-53228
    • ipv6: sit: reload inner IPv6 header after GSO offloads {CVE-2026-53228}
  • CVE-2026-53355
    • net: rds: clear i_sends on setup unwind {CVE-2026-53355}
  • CVE-2026-45970
    • bonding: alb: fix UAF in rlb_arp_recv during bond up/down {CVE-2026-45970}
  • CVE-2023-52922
    • can: bcm: Fix UAF in bcm_proc_show() {CVE-2023-52922}
  • CVE-2026-52920
    • netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920} *…
Record
CLSA-2026-1791132078
Updated
2026-11-02
OSVCLSA-2026-1791780738 No score

kernel: Fix of 72 CVEs

  • drm/amd/pm: bound pp_dpm_set_pp_table() memcpy {CVE-2026-97427}
  • Bluetooth: L2CAP: validate connectionless PSM length {CVE-2026-97408}
  • ipv6: sr: restore network header before routing and forwarding {CVE-2026-98096}
  • ipv6: fix fib6 walker UAF on seq stop {CVE-2026-97940}
  • net: mpls: clear inner_protocol when the last label is popped {CVE-2026-97612}
  • netfilter: nf_log: unregister loggers before per-net teardown {CVE-2026-97608}
  • usb: xusbatm: don't rely on id table pointer arithmetic {CVE-2026-97539}
  • ALSA: 6fire: Fix UAF at error handling during probe {CVE-2026-74505}
  • drm/vmwgfx: validate DRAW_PRIMITIVES header size before division {CVE-2026-74444}
  • ALSA: firewire: isight: bound the sample count to the packet payload {CVE-2026-64483}
  • Bluetooth: btusb: fix use-after-free on registration failure {CVE-2026-64471}
  • thunderbolt: Keep XDomain reference during the lifetime of a service {CVE-2026-97509}
  • ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() {CVE-2026-97455}
  • ACPICA: Add validation for node in acpi_ns_build_normalized_path() {CVE-2026-97448}
  • inet: frags: strip GSO state from fragments before reassembly {CVE-2026-80590}
  • libnvdimm/labels: Prevent integer overflow in __nd_label_validate() {CVE-2026-89559}
  • SUNRPC: always drain cache_cleaner before destroying a cache_detail {CVE-2026-89548}
  • SUNRPC: harden gss_krb5_unwrap_v2 against short tokens {CVE-2026-89542}
  • openvswitch: only skb_tx_error() a packet we are about to drop {CVE-2026-89487}
  • nvme-tcp: fix host memory disclosure on R2T for a read command {CVE-2026-89481}
  • sctp: fix NULL deref on untransmitted RECONF completion {CVE-2026-89477}
  • net: openvswitch: fix flow mask use-after-free on flow deletion {CVE-2026-80994}
  • ALSA: bcd2000: clear the URB pointers on disconnect {CVE-2026-80971}
  • netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() {CVE-2026-74569}
  • Bluetooth: mgmt: fix UAF in pair command cancellation {CVE-2026-74510}
  • cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname {CVE-2023-53751}
  • RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem {CVE-2025-38022}
  • drivers: base: Free devm resources when unregistering a device {CVE-2023-53596}
  • scsi: qla2xxx: Fix bsg_done() causing double free {CVE-2025-71238}
  • netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
  • xfrm: ah6: validate routing header segments_left {CVE-2026-80844}
  • drm/amd/display: set new_stream to NULL after release {CVE-2026-68236}
  • RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters {CVE-2026-100075}
  • nvmet-rdma: handle inline data with a nonzero offset {CVE-2026-72129}
  • ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control {CVE-2026-72261}
  • crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
  • crypto: algif_aead - fix uninitialized ctx->init {CVE-2025-39964}
  • netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() {CVE-2026-97417}
  • tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream() {CVE-2026-68289}
  • sctp: fix race between sctp_wait_for_connect and peeloff {CVE-2026-63971}
  • bridge: stp: Fix a potential use-after-free when deleting a bridge {CVE-2026-72389}
  • scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer {CVE-2026-74556}
  • rhashtable: clear stale iter->p on table restart {CVE-2026-64563}
  • mpls: reload header after pskb_may_pull() {CVE-2026-89555}
  • net: tun: bound receive headroom {CVE-2026-81000}
  • netfilter: flowtable: publish GC-visible tuple last {CVE-2026-74746}
  • netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() {CVE-2026-98077}
  • net: atlantic: eliminate double free in error handling logic {CVE-2023-52664}
  • firewire: net: fix use after free in fwnet_finish_incoming_packet() {CVE-2023-53432}
  • firewire: net: remove unused variable 'guid' {CVE-2023-53432}
  • gfs2: Fix slab-use-after-free in gfs2_qd_dealloc {CVE-2023-52760}
  • gfs2: fix kernel…
Record
CLSA-2026-1791780738
Updated
2026-11-02
OSVCLSA-2026-1791852988 No score

kernel: Fix of 107 CVEs

  • netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
  • IB/isert: reject PDUs declaring more data than was received {CVE-2026-90414}
  • RDMA/mlx5: Fix integer overflow of user QP buffer size {CVE-2026-90435}
  • sctp: validate embedded address parameter length {CVE-2026-74287}
  • IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413}
  • xfrm: ah6: validate routing header segments_left {CVE-2026-80844}
  • drm/amd/display: set new_stream to NULL after release {CVE-2026-68236}
  • RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters {CVE-2026-100075}
  • nvmet-rdma: handle inline data with a nonzero offset {CVE-2026-72129}
  • netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() {CVE-2026-97417}
  • sctp: validate cookie AUTH state before use {CVE-2026-74752}
  • ipvlan: inherit needed_headroom and needed_tailroom from phy_dev {CVE-2026-74744}
  • enic: fix tx_hang_reset use-after-free on device removal {CVE-2026-74725}
  • net/atm: fix slab-out-of-bounds read in vcc_setsockopt() {CVE-2026-74689}
  • drm/amdgpu: reject oversized IBs with per-ring packet limits {CVE-2026-80576}
  • xfs: bounds-check buffer log item's dirty bitmap {CVE-2026-80536}
  • nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page {CVE-2026-64320}
  • smb: client: reject overlapping data areas in SMB2 responses {CVE-2026-64257}
  • smb: client: restrict implied bcc[0] exemption to responses without data area {CVE-2026-64448}
  • crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() {CVE-2026-64438}
  • crypto: qat - protect interrupt mask CSRs with a spinlock {CVE-2026-64438}
  • crypto: qat - remove intermediate tasklet for vf2pf {CVE-2026-64438}
  • usb: free iso schedules on failed submit {CVE-2026-64348}
  • USB: iowarrior: fix use-after-free on disconnect race {CVE-2026-64341}
  • crypto: qat - protect service table iterations with service_lock {CVE-2026-64305}
  • crypto: qat - validate RSA CRT component lengths {CVE-2026-64304}
  • net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422}
  • udf: validate VAT header length against the VAT inode size {CVE-2026-64323}
  • crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
  • crypto: algif_aead - fix uninitialized ctx->init {CVE-2025-39964}
  • sctp: fix race between sctp_wait_for_connect and peeloff {CVE-2026-63971}
  • mpls: reload header after pskb_may_pull() {CVE-2026-89555}
  • net: tun: bound receive headroom {CVE-2026-81000}
  • bridge: stp: Fix a potential use-after-free when deleting a bridge {CVE-2026-72389}
  • scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer {CVE-2026-74556}
  • rhashtable: clear stale iter->p on table restart {CVE-2026-64563}
  • vhost: reset the vring metadata cache on vring reconfiguration {CVE-2026-74580}
  • net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
  • sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
  • USB: legousbtower: fix use-after-free on disconnect race {CVE-2026-64340}
  • USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343}
  • udf: validate sparing table length as an entry count, not a byte count {CVE-2026-64322}
  • ipv4: igmp: remove multicast group from hash table on device destruction {CVE-2026-64423}
  • USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}
  • sctp: fix use-after-free of cached ASCONF chunk {CVE-2026-74587}
  • RDMA/siw: bound Read Response placement to the RREAD length {CVE-2026-64268}
  • ip6_tunnel: clear skb2->cb[] in ip6ip6_err() {CVE-2026-74597}
  • ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}
  • netfilter: ebt_nflog: pin the NFLOG backend {CVE-2026-74660}
  • libceph: Avoid using invalid osd indices from primary_temp {CVE-2026-80558}
  • udp: fix potential use-after-free in tunnel segmentation {CVE-2026-74705}
  • Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}
  • wifi: ath9k: hif_usb: don't dereference hif_dev after…
Record
CLSA-2026-1791852988
Updated
2026-11-02
OSVCLSA-2026-1791858083 No score

kernel: Fix of 94 CVEs

  • netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
  • IB/isert: reject PDUs declaring more data than was received {CVE-2026-90414}
  • RDMA/mlx5: Fix integer overflow of user QP buffer size {CVE-2026-90435}
  • IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413}
  • xfrm: ah6: validate routing header segments_left {CVE-2026-80844}
  • drm/amd/display: set new_stream to NULL after release {CVE-2026-68236}
  • RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters {CVE-2026-100075}
  • nvmet-rdma: handle inline data with a nonzero offset {CVE-2026-72129}
  • netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() {CVE-2026-97417}
  • smb: client: restrict implied bcc[0] exemption to responses without data area {CVE-2026-64448}
  • usb: free iso schedules on failed submit {CVE-2026-64348}
  • USB: iowarrior: fix use-after-free on disconnect race {CVE-2026-64341}
  • USB: legousbtower: fix use-after-free on disconnect race {CVE-2026-64340}
  • crypto: qat - protect service table iterations with service_lock {CVE-2026-64305}
  • crypto: qat - validate RSA CRT component lengths {CVE-2026-64304}
  • net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422}
  • udf: validate VAT header length against the VAT inode size {CVE-2026-64323}
  • crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
  • net: tun: bound receive headroom {CVE-2026-81000}
  • bridge: stp: Fix a potential use-after-free when deleting a bridge {CVE-2026-72389}
  • scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer {CVE-2026-74556}
  • rhashtable: clear stale iter->p on table restart {CVE-2026-64563}
  • mpls: reload header after pskb_may_pull() {CVE-2026-89555}
  • vhost: reset the vring metadata cache on vring reconfiguration {CVE-2026-74580}
  • net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
  • sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
  • USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343}
  • udf: validate sparing table length as an entry count, not a byte count {CVE-2026-64322}
  • ipv4: igmp: remove multicast group from hash table on device destruction {CVE-2026-64423}
  • USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}
  • RDMA/siw: bound Read Response placement to the RREAD length {CVE-2026-64268}
  • sctp: fix use-after-free of cached ASCONF chunk {CVE-2026-74587}
  • ip6_tunnel: clear skb2->cb[] in ip6ip6_err() {CVE-2026-74597}
  • ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}
  • netfilter: ebt_nflog: pin the NFLOG backend {CVE-2026-74660}
  • netfilter: flowtable: publish GC-visible tuple last {CVE-2026-74746}
  • libceph: Avoid using invalid osd indices from primary_temp {CVE-2026-80558}
  • udp: fix potential use-after-free in tunnel segmentation {CVE-2026-74705}
  • Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}
  • wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request {CVE-2026-68363}
  • ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() {CVE-2026-68160}
  • libceph: Reject monmaps advertising zero monitors {CVE-2026-68155}
  • sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}
  • net: slip: serialize receive against buffer reallocation {CVE-2026-68143}
  • libceph: remove debugfs files before client teardown {CVE-2026-68153}
  • libceph: refresh auth->authorizer_buf{,_len} after authorizer update {CVE-2026-68156}
  • media: rtl2832: fix use-after-free in rtl2832_remove() {CVE-2026-68214}
  • sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}
  • pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}
  • libceph: Fix multiplication overflow in decode_new_up_state_weight() {CVE-2026-68158}
  • ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() {CVE-2026-74499}
  • can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet…
Record
CLSA-2026-1791858083
Updated
2026-11-02
OSVCLSA-2026-1791946572 No score

Fix of 198 CVEs

  • CVE-2024-36894
    • usb: gadget: f_fs: drop the duplicate usb_ep_free_request() in ffs_user_copy_worker() {CVE-2024-36894}
  • CVE-2026-97447
    • ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() {CVE-2026-97447}
  • CVE-2026-93822
    • PCI: iproc: Protect root bus removal with rescan lock {CVE-2026-93822}
  • CVE-2026-93826
    • HID: hidpp: fix potential UAF in hidpp_connect_event() {CVE-2026-93826}
  • CVE-2026-97954
    • net/rds: fix tcp stream corruption with large pages {CVE-2026-97954}
  • CVE-2026-97949
    • configfs: unhash the dentry before dropping the item in rmdir {CVE-2026-97949}
  • CVE-2026-97931
    • ALSA: us122l: Prevent write upgrades for read mappings {CVE-2026-97931}
  • CVE-2026-97940
    • ipv6: fix fib6 walker UAF on seq stop {CVE-2026-97940}
  • CVE-2026-97539
    • usb: xusbatm: don't rely on id table pointer arithmetic {CVE-2026-97539}
  • CVE-2026-74510
    • Bluetooth: mgmt: fix UAF in pair command cancellation {CVE-2026-74510}
  • CVE-2026-72084
    • scsi: target: Bound PR-OUT TransportID parsing to the received buffer {CVE-2026-72084}
  • CVE-2026-90302
    • ocfs2: synchronize heartbeat callbacks with o2net teardown {CVE-2026-90302}
  • CVE-2026-90320
    • ocfs2: validate external xattr entries when reading metadata {CVE-2026-90320}
  • CVE-2026-90321
    • ocfs2: validate inline xattrs during inode block validation {CVE-2026-90321}
  • CVE-2026-90431
    • remoteproc: Prevent crash handling to race with rproc_del() {CVE-2026-90431}
  • CVE-2026-74637
    • perf/core: Fix group leader use-after-free after sibling detach {CVE-2026-74637}
  • CVE-2026-74752
    • sctp: validate cookie AUTH state before use {CVE-2026-74752}
  • CVE-2026-74387
    • ALSA: seq: midi: Serialize output teardown with event_input {CVE-2026-74387}
  • CVE-2026-80536
    • xfs: bounds-check buffer log item's dirty bitmap {CVE-2026-80536}
  • CVE-2026-89659
    • NFSD: Prevent client use-after-free during delegation revoke {CVE-2026-89659}
  • CVE-2026-80576
    • drm/amdgpu: reject oversized IBs with per-ring packet limits {CVE-2026-80576}
  • CVE-2026-90223
    • nfc: llcp: bound SNL TLV parsing to the skb and add length checks {CVE-2026-90223}
  • CVE-2026-80994
    • net: openvswitch: fix flow mask use-after-free on flow deletion {CVE-2026-80994}
  • CVE-2026-72398
    • sctp: add INIT verification after cookie unpacking {CVE-2026-72398}
  • CVE-2026-74583
    • net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
  • CVE-2026-72322
    • ipv6: mcast: Fix potential UAF in MLD delayed work {CVE-2026-72322}
  • CVE-2026-93095
    • hfsplus: validate thread record before delete key rebuild {CVE-2026-93095}
  • CVE-2026-72472
    • nfs: use nfsi->rwsem to protect traversal of the file lock list {CVE-2026-72472}
  • CVE-2026-90045
    • USB: gadget: ffs: fix mm lifetime handling {CVE-2026-90045}
  • CVE-2026-90421
    • PCI: Fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-90421}
  • CVE-2026-64583
    • usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown {CVE-2026-64583}
  • CVE-2026-68329
    • iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() {CVE-2026-68329}
  • CVE-2026-89448
    • iommu/vt-d: Force requesting ACS when tboot is enabled {CVE-2026-89448}
  • CVE-2026-64001
    • ALSA: pcm: oss: Fix setup list UAF on proc write error {CVE-2026-64001}
  • CVE-2026-64305
    • crypto: qat - protect service table iterations with service_lock {CVE-2026-64305}
  • CVE-2026-64348
    • usb: free iso schedules on failed submit {CVE-2026-64348}
  • CVE-2026-64422
    • net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422}
  • CVE-2026-90180
    • block:…
Record
CLSA-2026-1791946572
Updated
2026-11-02
OSVMGASA-2026-0506 No score

Updated kernel, drakx-installer-images, kmod-nvidia-current-wopengpu, kmod-xtables-addons & kmod-virtualbox packages fix Security Vulnerabilities

Upstream kernel 6.18.55 version fixes bugs and vulnerabilities. The kmod-xtables-addons, kmod-virtualbox, kmod-nvidia-current-wopengpu & drakx-installer-images packages have been updated to work with this new kernel.

Record
MGASA-2026-0506
Updated
2026-11-02
OSVMGASA-2026-0542 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.18.55 fixes vulnerabilities. For information about the vulnerabilities see the links.

Record
MGASA-2026-0542
Updated
2026-11-02
OSVopenSUSE-SU-2026:22167-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2026-31731: thermal: core: Address thermal zone removal races with resume (bsc#1264042).
  • CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).
  • CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
  • CVE-2026-63830: net: skmsg: preserve sg.copy across SG transforms (bsc#1272178).
  • CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
  • CVE-2026-64058: netfs: Fix netfs_read_folio() to wait on writeback (bsc#1272898).
  • CVE-2026-64060: netfs: Fix leak of request in netfs_write_begin() error handling (bsc#1272901).
  • CVE-2026-64062: netfs: Fix potential deadlock in write-through mode (bsc#1272952).
  • CVE-2026-64063: netfs: Fix streaming write being overwritten (bsc#1272955).
  • CVE-2026-64064: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (bsc#1272956).
  • CVE-2026-64068: netfs: Fix missing locking around retry adding new subreqs (bsc#1272509).
  • CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
  • CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
  • CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
  • CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039).
  • CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080).
  • CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
  • CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
  • CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
  • CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
  • CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
  • CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
  • CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
  • CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
  • CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
  • CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
  • CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
  • CVE-2026-72174: fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole() (bsc#1277695).
  • CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602).
  • CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
  • CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
  • CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663).
  • CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665).
  • CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
  • CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
  • CVE-2026-72355: netfs: Fix barriering when walking subrequest list (bsc#1276330).
  • CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033).
  • CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
  • CVE-2026-74306: vfio/qat: fix f_pos race in qat_vf_resume_write() (bsc#1276907).
  • CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
  • CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103).
  • CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal…
Record
openSUSE-SU-2026:22167-1
Updated
2026-11-02
OSVSUSE-SU-2026:24371-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
  • CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
  • CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
  • CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178).
  • CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
  • CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
  • CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
  • CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
  • CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
  • CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
  • CVE-2026-64568: wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure (bsc#1274008).
  • CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
  • CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
  • CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
  • CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
  • CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
  • CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
  • CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
  • CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
  • CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
  • CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
  • CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
  • CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
  • CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
  • CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
  • CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
  • CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
  • CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232).
  • CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894).
  • CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
  • CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889).
  • CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
  • CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804).
  • CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931).
  • CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310).
  • CVE-2026-74723: btrfs: lzo: reject inline extents without valid headers (bsc#1276562).
  • CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode…
Record
SUSE-SU-2026:24371-1
Updated
2026-11-02
OSVSUSE-SU-2026:24379-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
  • CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
  • CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
  • CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178).
  • CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
  • CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
  • CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
  • CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
  • CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
  • CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
  • CVE-2026-64568: wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure (bsc#1274008).
  • CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
  • CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
  • CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
  • CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
  • CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
  • CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
  • CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
  • CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
  • CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
  • CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
  • CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
  • CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
  • CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
  • CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
  • CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
  • CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
  • CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232).
  • CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894).
  • CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
  • CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889).
  • CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
  • CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804).
  • CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931).
  • CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310).
  • CVE-2026-74723: btrfs: lzo: reject inline extents without valid headers (bsc#1276562).
  • CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode…
Record
SUSE-SU-2026:24379-1
Updated
2026-11-02
OSVSUSE-SU-2026:24386-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2026-31731: thermal: core: Address thermal zone removal races with resume (bsc#1264042).
  • CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).
  • CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
  • CVE-2026-63830: net: skmsg: preserve sg.copy across SG transforms (bsc#1272178).
  • CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
  • CVE-2026-64058: netfs: Fix netfs_read_folio() to wait on writeback (bsc#1272898).
  • CVE-2026-64060: netfs: Fix leak of request in netfs_write_begin() error handling (bsc#1272901).
  • CVE-2026-64062: netfs: Fix potential deadlock in write-through mode (bsc#1272952).
  • CVE-2026-64063: netfs: Fix streaming write being overwritten (bsc#1272955).
  • CVE-2026-64064: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (bsc#1272956).
  • CVE-2026-64068: netfs: Fix missing locking around retry adding new subreqs (bsc#1272509).
  • CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
  • CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
  • CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
  • CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039).
  • CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080).
  • CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
  • CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
  • CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
  • CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
  • CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
  • CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
  • CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
  • CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
  • CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
  • CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
  • CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
  • CVE-2026-72174: fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole() (bsc#1277695).
  • CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602).
  • CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
  • CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
  • CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663).
  • CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665).
  • CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
  • CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
  • CVE-2026-72355: netfs: Fix barriering when walking subrequest list (bsc#1276330).
  • CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033).
  • CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
  • CVE-2026-74306: vfio/qat: fix f_pos race in qat_vf_resume_write() (bsc#1276907).
  • CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
  • CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103).
  • CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal…
Record
SUSE-SU-2026:24386-1
Updated
2026-11-02
OSVSUSE-SU-2026:24422-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2026-31731: thermal: core: Address thermal zone removal races with resume (bsc#1264042).
  • CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).
  • CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
  • CVE-2026-63830: net: skmsg: preserve sg.copy across SG transforms (bsc#1272178).
  • CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
  • CVE-2026-64058: netfs: Fix netfs_read_folio() to wait on writeback (bsc#1272898).
  • CVE-2026-64060: netfs: Fix leak of request in netfs_write_begin() error handling (bsc#1272901).
  • CVE-2026-64062: netfs: Fix potential deadlock in write-through mode (bsc#1272952).
  • CVE-2026-64063: netfs: Fix streaming write being overwritten (bsc#1272955).
  • CVE-2026-64064: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (bsc#1272956).
  • CVE-2026-64068: netfs: Fix missing locking around retry adding new subreqs (bsc#1272509).
  • CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
  • CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
  • CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
  • CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039).
  • CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080).
  • CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
  • CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
  • CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
  • CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
  • CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
  • CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
  • CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
  • CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
  • CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
  • CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
  • CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
  • CVE-2026-72174: fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole() (bsc#1277695).
  • CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602).
  • CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
  • CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
  • CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663).
  • CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665).
  • CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
  • CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
  • CVE-2026-72355: netfs: Fix barriering when walking subrequest list (bsc#1276330).
  • CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033).
  • CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
  • CVE-2026-74306: vfio/qat: fix f_pos race in qat_vf_resume_write() (bsc#1276907).
  • CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
  • CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103).
  • CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal…
Record
SUSE-SU-2026:24422-1
Updated
2026-11-02
OSVSUSE-SU-2026:24437-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2026-31731: thermal: core: Address thermal zone removal races with resume (bsc#1264042).
  • CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).
  • CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
  • CVE-2026-63830: net: skmsg: preserve sg.copy across SG transforms (bsc#1272178).
  • CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
  • CVE-2026-64058: netfs: Fix netfs_read_folio() to wait on writeback (bsc#1272898).
  • CVE-2026-64060: netfs: Fix leak of request in netfs_write_begin() error handling (bsc#1272901).
  • CVE-2026-64062: netfs: Fix potential deadlock in write-through mode (bsc#1272952).
  • CVE-2026-64063: netfs: Fix streaming write being overwritten (bsc#1272955).
  • CVE-2026-64064: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (bsc#1272956).
  • CVE-2026-64068: netfs: Fix missing locking around retry adding new subreqs (bsc#1272509).
  • CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
  • CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
  • CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
  • CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039).
  • CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080).
  • CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
  • CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
  • CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
  • CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
  • CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
  • CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
  • CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
  • CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
  • CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
  • CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
  • CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
  • CVE-2026-72174: fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole() (bsc#1277695).
  • CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602).
  • CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
  • CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
  • CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663).
  • CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665).
  • CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
  • CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
  • CVE-2026-72355: netfs: Fix barriering when walking subrequest list (bsc#1276330).
  • CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033).
  • CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
  • CVE-2026-74306: vfio/qat: fix f_pos race in qat_vf_resume_write() (bsc#1276907).
  • CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
  • CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103).
  • CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal…
Record
SUSE-SU-2026:24437-1
Updated
2026-11-02
OSVSUSE-SU-2026:24446-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2026-31731: thermal: core: Address thermal zone removal races with resume (bsc#1264042).
  • CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).
  • CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
  • CVE-2026-63830: net: skmsg: preserve sg.copy across SG transforms (bsc#1272178).
  • CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
  • CVE-2026-64058: netfs: Fix netfs_read_folio() to wait on writeback (bsc#1272898).
  • CVE-2026-64060: netfs: Fix leak of request in netfs_write_begin() error handling (bsc#1272901).
  • CVE-2026-64062: netfs: Fix potential deadlock in write-through mode (bsc#1272952).
  • CVE-2026-64063: netfs: Fix streaming write being overwritten (bsc#1272955).
  • CVE-2026-64064: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (bsc#1272956).
  • CVE-2026-64068: netfs: Fix missing locking around retry adding new subreqs (bsc#1272509).
  • CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
  • CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
  • CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
  • CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039).
  • CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080).
  • CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
  • CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
  • CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
  • CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
  • CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
  • CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
  • CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
  • CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
  • CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
  • CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
  • CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
  • CVE-2026-72174: fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole() (bsc#1277695).
  • CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602).
  • CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
  • CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
  • CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663).
  • CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665).
  • CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
  • CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
  • CVE-2026-72355: netfs: Fix barriering when walking subrequest list (bsc#1276330).
  • CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033).
  • CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
  • CVE-2026-74306: vfio/qat: fix f_pos race in qat_vf_resume_write() (bsc#1276907).
  • CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
  • CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103).
  • CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal…
Record
SUSE-SU-2026:24446-1
Updated
2026-11-02
OSVSUSE-SU-2026:24473-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
  • CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
  • CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
  • CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178).
  • CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
  • CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
  • CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
  • CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
  • CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
  • CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
  • CVE-2026-64568: wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure (bsc#1274008).
  • CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
  • CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
  • CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
  • CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
  • CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
  • CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
  • CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
  • CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
  • CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
  • CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
  • CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
  • CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
  • CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
  • CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
  • CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
  • CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
  • CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232).
  • CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894).
  • CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
  • CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889).
  • CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
  • CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804).
  • CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931).
  • CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310).
  • CVE-2026-74723: btrfs: lzo: reject inline extents without valid headers (bsc#1276562).
  • CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode…
Record
SUSE-SU-2026:24473-1
Updated
2026-11-04
OSVSUSE-SU-2026:4892-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2023-54158: btrfs: don't free qgroup space unless specified (bsc#1256076).
  • CVE-2023-54180: btrfs: handle case when repair happens with dev-replace (bsc#1255995).
  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-63948: Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn (bsc#1272670).
  • CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
  • CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
  • CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64456: hwrng: virtio: clamp device-reported used.len at copy_data() (bsc#1273288).
  • CVE-2026-64593: btrfs: do not trim a device which is not writeable (bsc#1274497).
  • CVE-2026-68106: drm/amdgpu: fix division by zero with invalid uvd dimensions (bsc#1274853).
  • CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
  • CVE-2026-68236: drm/amd/display: set new_stream to NULL after release (bsc#1275659).
  • CVE-2026-68303: drm/vc4: hvs/v3d: Fix null dereference in unbind (bsc#1275080).
  • CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
  • CVE-2026-68430: drm/amdgpu/gfx8: drop unecessary BUG_ON() (bsc#1276273).
  • CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
  • CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
  • CVE-2026-72319: ipvs: ensure inner headers in ICMP errors are in headroom (bsc#1275964).
  • CVE-2026-72476: dmaengine: Fix possible use after free (bsc#1276844).
  • CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
  • CVE-2026-74408: wifi: ath9k: fix OOB access from firmware tx status queue ID (bsc#1276387).
  • CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894).
  • CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
  • CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889).
  • CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
  • CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310).
  • CVE-2026-74675: vt: stabilize tty reference in kbd_keycode with tty_port_tty_get (bsc#1278313).
  • CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259).
  • CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).
  • CVE-2026-89726: lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen() (bsc#1281058).
  • CVE-2026-89778: isofs: fix out-of-bounds page array access on empty zisofs block (bsc#1280966).
  • CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819).
  • CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280).
  • CVE-2026-90283: hugetlbfs: release subpool on fill_super failure (bsc#1281771).
  • CVE-2026-93252: ocfs2: make ocfs2_set_acl() static (bsc#1282784).
  • CVE-2026-93287: i2c: smbus: reject oversized block transfers in the common path (bsc#1282744).
  • CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808).
  • CVE-2026-93820: PCI: rockchip: Protect root bus removal with rescan lock (bsc#1282755).
  • CVE-2026-93822: PCI: iproc: Protect root bus removal with rescan lock (bsc#1282762).
  • CVE-2026-97416: btrfs: balance: fix potential…
Record
SUSE-SU-2026:4892-1
Updated
2026-11-02
OSVSUSE-SU-2026:4935-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
  • CVE-2026-43132: dm-verity: correctly handle dm_bufio_client_create() failure (bsc#1264614).
  • CVE-2026-43184: rnbd-srv: Zero the rsp buffer before using it (bsc#1264622).
  • CVE-2026-43283: net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle (bsc#1264295).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-43457: mctp: i2c: fix skb memory leak in receive path (bsc#1265000).
  • CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
  • CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
  • CVE-2026-46034: vfio/cdx: Fix NULL pointer dereference in interrupt trigger path (bsc#1266757).
  • CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
  • CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178).
  • CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
  • CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
  • CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
  • CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
  • CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
  • CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039).
  • CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
  • CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
  • CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
  • CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
  • CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
  • CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
  • CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
  • CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
  • CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
  • CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
  • CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602).
  • CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
  • CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
  • CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
  • CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
  • CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
  • CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
  • CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
  • CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232).
  • CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894).
  • CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
  • CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889).
  • CVE-2026-74587:…
Record
SUSE-SU-2026:4935-1
Updated
2026-11-02
OSVSUSE-SU-2026:4940-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
  • CVE-2026-43132: dm-verity: correctly handle dm_bufio_client_create() failure (bsc#1264614).
  • CVE-2026-43184: rnbd-srv: Zero the rsp buffer before using it (bsc#1264622).
  • CVE-2026-43283: net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle (bsc#1264295).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-43457: mctp: i2c: fix skb memory leak in receive path (bsc#1265000).
  • CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
  • CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
  • CVE-2026-46034: vfio/cdx: Fix NULL pointer dereference in interrupt trigger path (bsc#1266757).
  • CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
  • CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178).
  • CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
  • CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
  • CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
  • CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
  • CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
  • CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039).
  • CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
  • CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
  • CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
  • CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
  • CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
  • CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
  • CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
  • CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
  • CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
  • CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
  • CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602).
  • CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
  • CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
  • CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
  • CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
  • CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
  • CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
  • CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
  • CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232).
  • CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894).
  • CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
  • CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889). -…
Record
SUSE-SU-2026:4940-1
Updated
2026-11-02
OSVUSN-8875-1 No score

linux, linux-aws, linux-aws-5.15, linux-aws-fips, linux-azure, linux-azure-5.15, linux-azure-fde-5.15, linux-azure-fips, linux-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iot-realtime, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-oracle, linux-realtime, linux-xilinx-zynqmp vulnerabilities

It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • User-space API (UAPI);
  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • Hardware random number generator core;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DAX dirext access to differentiated memory framework;
  • DMA engine subsystem;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Generic PM domains;
  • System reset/shutdown drivers;
  • Power supply drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Reset controller framework;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • USB DSL drivers;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • DesignWare USB2 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C support driver;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • HFS file system;
  • HFS+ file system;
  • Journaling layer for block devices (JBD2); …
Record
USN-8875-1
Updated
2026-11-07
OSVUSN-8875-2 No score

linux-nvidia vulnerabilities

It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • User-space API (UAPI);
  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • Hardware random number generator core;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DAX dirext access to differentiated memory framework;
  • DMA engine subsystem;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Generic PM domains;
  • System reset/shutdown drivers;
  • Power supply drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Reset controller framework;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • USB DSL drivers;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • DesignWare USB2 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C support driver;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • HFS file system;
  • HFS+ file system;
  • Journaling layer for block devices (JBD2); …
Record
USN-8875-2
Updated
2026-11-07
OSVUSN-8877-1 No score

linux-gcp, linux-gcp-fips vulnerabilities

It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • User-space API (UAPI);
  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • Hardware random number generator core;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DAX dirext access to differentiated memory framework;
  • DMA engine subsystem;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Generic PM domains;
  • System reset/shutdown drivers;
  • Power supply drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Reset controller framework;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • USB DSL drivers;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • DesignWare USB2 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C support driver;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • HFS file system;
  • HFS+ file system;
  • Journaling layer for block devices (JBD2); …
Record
USN-8877-1
Updated
2026-11-07
OSVUSN-8878-1 No score

linux-gcp-5.15 vulnerabilities

It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114)

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • User-space API (UAPI);
  • ARM32 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • Hardware random number generator core;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DAX dirext access to differentiated memory framework;
  • DMA engine subsystem;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Generic PM domains;
  • System reset/shutdown drivers;
  • Power supply drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Reset controller framework;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • USB DSL drivers;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • DesignWare USB2 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C support driver;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer…
Record
USN-8878-1
Updated
2026-11-07
OSVUSN-8879-1 No score

linux-oracle-5.15 vulnerabilities

It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114)

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • User-space API (UAPI);
  • ARM32 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • Hardware random number generator core;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DAX dirext access to differentiated memory framework;
  • DMA engine subsystem;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Generic PM domains;
  • System reset/shutdown drivers;
  • Power supply drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Reset controller framework;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • USB DSL drivers;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • DesignWare USB2 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C support driver;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer…
Record
USN-8879-1
Updated
2026-11-07
OSVUSN-8886-1 No score

linux-nvidia-tegra vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • NVDIMM (Non-Volatile Memory Device) drivers;
  • Handshake API;
  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • OpenRISC architecture;
  • PowerPC architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Intel NPU Driver;
  • Android drivers;
  • Rados block device (RBD) driver;
  • Bluetooth drivers;
  • Hardware random number generator core;
  • TPM device driver;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DMA engine subsystem;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • Amazon Nitro Secure Module driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • Texas Instruments network drivers;
  • NTB driver;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • Parport drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • i.MX PM domains;
  • System reset/shutdown drivers;
  • PTP clock framework;
  • Voltage and Current Regulator drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • SPI subsystem;
  • Realtek RTL8723BS SDIO drivers;
  • VME bus staging drivers;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • DesignWare USB2 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • vDPA drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Watchdog drivers;
  • 9P distributed file system;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • exFAT file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • Journaling layer for block devices (JBD2);
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NTFS3 file system;
  • OCFS2 file system;
  • Proc file system;
  • SMB network file system;
  • Tracing file system;
  • UDF file system;
  • XFS file system;
  • Key management;
  • BPF subsystem;
  • Control group (cgroup);
  • Glob pattern matching library;
  • MAC80211 subsystem;
  • Mellanox drivers;
  • Networking core;
  • Network sockets;
  • IPv6 networking;
  • Bluetooth subsystem;
  • Wireless networking;
  • IPv4 networking;
  • Netfilter;
  • Network traffic control;
  • SCTP protocol;
  • TCP network protocol;
  • XFRM subsystem;
  • RDMA verbs API;
  • io_uring subsystem;
  • IPC subsystem;
  • Audit subsystem;
  • Kernel CPU control infrastructure;
  • Perf events;
  • Kernel exit() syscall;
  • Kernel fork() syscall;
  • Scheduler infrastructure;
  • Signal handling mechanism;
  • Timer subsystem;
  • Tracing infrastructure;
  • Resizable hashtable library;
  • Memory management;
  • 6LoWPAN network protocol;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • B.A.T.M.A.N. meshing protocol;
  • Ethernet bridge;
  • CAN network layer;
  • Ceph Core library;
  • Ethtool driver;
  • HSR network protocol;
  • IEEE802154.4 network protocol;
  • IUCV driver;
  • KCM (Kernel Connection Multiplexor) sockets driver;
  • IEEE 802.15.4 subsystem;
  • Multipath TCP;
  • Open vSwitch;
  • Packet sockets;
  • Phonet protocol;
  • Qualcomm IPC Router (QRTR);
  • RDS protocol;
  • RxRPC session sockets;
  • SMC…
Record
USN-8886-1
Updated
2026-11-06
OSVUSN-8959-1 No score

linux, linux-aws, linux-gcp, linux-hwe-7.0, linux-ibm, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • USB Gadget drivers;
  • Memory management;
  • Multiple devices driver;
  • ARM64 architecture;
  • EROFS file system;
  • Networking core;
  • eXpress Data Path;
  • ARM32 architecture;
  • M68K architecture;
  • MIPS architecture;
  • OpenRISC architecture;
  • PA-RISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • Speakup Console Speech Driver;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • Auxiliary display drivers;
  • Drivers core;
  • Micron PCIe SSD driver;
  • Null block device driver;
  • Ublk userspace block driver;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • AMD CDX bus driver;
  • Hardware random number generator core;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Clocksource drivers;
  • CPU frequency scaling framework;
  • CPU idle management framework;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • DAX dirext access to differentiated memory framework;
  • DIBS (Direct Internal Buffer Sharing) drivers;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • EDAC drivers;
  • FireWire subsystem;
  • ARM SCMI message protocol;
  • ARM SCPI message protocol;
  • Google firmware drivers;
  • Qualcomm firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • HSI subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Mouse) drivers;
  • On-Chip Interconnect management framework;
  • IOMMU subsystem;
  • Industry Pack bus drivers;
  • IRQ chip drivers;
  • Mailbox framework;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Analog Devices digital potentiometer driver;
  • Broadcom VK accelerator driver;
  • Fastrpc Driver;
  • Amazon Nitro Secure Module driver;
  • SGI GRU driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • Near Field Communication (NFC) drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • Operating Performance Points (OPP) driver;
  • PA-RISC drivers;
  • PCI subsystem;
  • Performance monitor drivers;
  • PHY drivers;
  • Pin controllers subsystem;
  • Chrome hardware platform drivers;
  • Mellanox platform drivers;
  • Microsoft Surface platform drivers;
  • x86 platform drivers;
  • MediaTek PM domains;
  • Power sequencing drivers;
  • Power supply drivers;
  • Powercap sysfs driver;
  • PTP clock framework;
  • PWM drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • MPAM driver;
  • RPMSG subsystem;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • ASPEED SoC drivers;
  • Samsung SoC drivers;
  • SPI subsystem;
  • small TFT LCD display modules;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • Userspace I/O drivers;
  • USB DSL drivers;
  • Cypress C67X00 USB…
Record
USN-8959-1
Updated
2026-11-05
OSVUSN-8960-1 No score

linux-oem-7.0 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • USB Gadget drivers;
  • Memory management;
  • Multiple devices driver;
  • ARM64 architecture;
  • EROFS file system;
  • Networking core;
  • eXpress Data Path;
  • ARM32 architecture;
  • M68K architecture;
  • MIPS architecture;
  • OpenRISC architecture;
  • PA-RISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • Speakup Console Speech Driver;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • Auxiliary display drivers;
  • Drivers core;
  • Micron PCIe SSD driver;
  • Null block device driver;
  • Ublk userspace block driver;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • AMD CDX bus driver;
  • Hardware random number generator core;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Clocksource drivers;
  • CPU frequency scaling framework;
  • CPU idle management framework;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • DAX dirext access to differentiated memory framework;
  • DIBS (Direct Internal Buffer Sharing) drivers;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • EDAC drivers;
  • FireWire subsystem;
  • ARM SCMI message protocol;
  • ARM SCPI message protocol;
  • Google firmware drivers;
  • Qualcomm firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • HSI subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Mouse) drivers;
  • On-Chip Interconnect management framework;
  • IOMMU subsystem;
  • Industry Pack bus drivers;
  • IRQ chip drivers;
  • Mailbox framework;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Analog Devices digital potentiometer driver;
  • Broadcom VK accelerator driver;
  • Fastrpc Driver;
  • Amazon Nitro Secure Module driver;
  • SGI GRU driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • Near Field Communication (NFC) drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • Operating Performance Points (OPP) driver;
  • PA-RISC drivers;
  • PCI subsystem;
  • Performance monitor drivers;
  • PHY drivers;
  • Pin controllers subsystem;
  • Chrome hardware platform drivers;
  • Mellanox platform drivers;
  • Microsoft Surface platform drivers;
  • x86 platform drivers;
  • MediaTek PM domains;
  • Power sequencing drivers;
  • Power supply drivers;
  • Powercap sysfs driver;
  • PTP clock framework;
  • PWM drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • MPAM driver;
  • RPMSG subsystem;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • ASPEED SoC drivers;
  • Samsung SoC drivers;
  • SPI subsystem;
  • small TFT LCD display modules;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • Userspace I/O drivers;
  • USB DSL drivers;
  • Cypress C67X00 USB…
Record
USN-8960-1
Updated
2026-11-05
OSVUSN-8963-1 No score

linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-nvidia-tegra-igx vulnerabilities

Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol implementation in the Linux kernel, leading to use-after-free vulnerabilities. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-1205)

It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • USB Gadget drivers;
  • Networking core;
  • User-space API (UAPI);
  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • OpenRISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Speakup Console Speech Driver;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Auxiliary display drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • Hardware random number generator core;
  • TPM device driver;
  • Clock framework and drivers;
  • Clocksource drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DAX dirext access to differentiated memory framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • EDAC drivers;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • ARM SCPI message protocol;
  • Google firmware drivers;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • HSI subsystem;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Mouse) drivers;
  • On-Chip Interconnect management framework;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Analog Devices digital potentiometer driver;
  • Broadcom VK accelerator driver;
  • Fastrpc Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • Near Field Communication (NFC) drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • PA-RISC drivers;
  • Parport drivers;
  • PCI subsystem;
  • PHY drivers;
  • Pin controllers subsystem;
  • Chrome hardware platform drivers;
  • Mellanox platform drivers;
  • Microsoft Surface platform drivers;
  • x86 platform drivers;
  • Generic PM domains;
  • System reset/shutdown drivers;
  • Power supply drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • Reset controller framework;
  • RPMSG subsystem;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • small TFT LCD display modules;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC)…
Record
USN-8963-1
Updated
2026-11-07

Affected products

Affected packages

Affected packages
PackageAffectedFixed
bpftool
AlmaLinux:8
From an advisory covering 9 CVEs
 before 4.18.0-553.174.1.el8_10
4.18.0-553.174.1.el8_10
kernel
AlmaLinux:8
From an advisory covering 9 CVEs
 before 4.18.0-553.174.1.el8_10
4.18.0-553.174.1.el8_10
kernel-abi-stablelists
AlmaLinux:8
From an advisory covering 9 CVEs
 before 4.18.0-553.174.1.el8_10
4.18.0-553.174.1.el8_10
kernel-core
AlmaLinux:8
From an advisory covering 9 CVEs
 before 4.18.0-553.174.1.el8_10
4.18.0-553.174.1.el8_10
kernel-cross-headers
AlmaLinux:8
From an advisory covering 9 CVEs
 before 4.18.0-553.174.1.el8_10
4.18.0-553.174.1.el8_10
kernel-debug
AlmaLinux:8
From an advisory covering 9 CVEs
 before 4.18.0-553.174.1.el8_10
4.18.0-553.174.1.el8_10
kernel-debug-core
AlmaLinux:8
From an advisory covering 9 CVEs
 before 4.18.0-553.174.1.el8_10
4.18.0-553.174.1.el8_10
kernel-debug-devel
AlmaLinux:8
From an advisory covering 9 CVEs
 before 4.18.0-553.174.1.el8_10
4.18.0-553.174.1.el8_10
kernel-debug-modules
AlmaLinux:8
From an advisory covering 9 CVEs
 before 4.18.0-553.174.1.el8_10
4.18.0-553.174.1.el8_10
kernel-debug-modules-extra
AlmaLinux:8
From an advisory covering 9 CVEs
 before 4.18.0-553.174.1.el8_10
4.18.0-553.174.1.el8_10
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-devel
AlmaLinux:8
From an advisory covering 9 CVEs
 before 4.18.0-553.174.1.el8_10
4.18.0-553.174.1.el8_10
kernel-doc
AlmaLinux:8
From an advisory covering 9 CVEs
 before 4.18.0-553.174.1.el8_10
4.18.0-553.174.1.el8_10
kernel-headers
AlmaLinux:8
From an advisory covering 9 CVEs
 before 4.18.0-553.174.1.el8_10
4.18.0-553.174.1.el8_10
kernel-modules
AlmaLinux:8
From an advisory covering 9 CVEs
 before 4.18.0-553.174.1.el8_10
4.18.0-553.174.1.el8_10
kernel-modules-extra
AlmaLinux:8
From an advisory covering 9 CVEs
 before 4.18.0-553.174.1.el8_10
4.18.0-553.174.1.el8_10
kernel-tools
AlmaLinux:8
From an advisory covering 9 CVEs
 before 4.18.0-553.174.1.el8_10
4.18.0-553.174.1.el8_10
kernel-tools-libs
AlmaLinux:8
From an advisory covering 9 CVEs
 before 4.18.0-553.174.1.el8_10
4.18.0-553.174.1.el8_10
kernel-tools-libs-devel
AlmaLinux:8
From an advisory covering 9 CVEs
 before 4.18.0-553.174.1.el8_10
4.18.0-553.174.1.el8_10
kernel-zfcpdump
AlmaLinux:8
From an advisory covering 9 CVEs
 before 4.18.0-553.174.1.el8_10
4.18.0-553.174.1.el8_10
kernel-zfcpdump-core
AlmaLinux:8
From an advisory covering 9 CVEs
 before 4.18.0-553.174.1.el8_10
4.18.0-553.174.1.el8_10
kernel-zfcpdump-devel
AlmaLinux:8
From an advisory covering 9 CVEs
 before 4.18.0-553.174.1.el8_10
4.18.0-553.174.1.el8_10
kernel-zfcpdump-modules
AlmaLinux:8
From an advisory covering 9 CVEs
 before 4.18.0-553.174.1.el8_10
4.18.0-553.174.1.el8_10
kernel-zfcpdump-modules-extra
AlmaLinux:8
From an advisory covering 9 CVEs
 before 4.18.0-553.174.1.el8_10
4.18.0-553.174.1.el8_10
perf
AlmaLinux:8
From an advisory covering 9 CVEs
 before 4.18.0-553.174.1.el8_10
4.18.0-553.174.1.el8_10
python3-perf
AlmaLinux:8
From an advisory covering 9 CVEs
 before 4.18.0-553.174.1.el8_10
4.18.0-553.174.1.el8_10
kernel-rt
AlmaLinux:8
From an advisory covering 9 CVEs
 before 4.18.0-553.174.1.rt7.515.el8_10
4.18.0-553.174.1.rt7.515.el8_10
kernel-rt-core
AlmaLinux:8
From an advisory covering 9 CVEs
 before 4.18.0-553.174.1.rt7.515.el8_10
4.18.0-553.174.1.rt7.515.el8_10
kernel-rt-debug
AlmaLinux:8
From an advisory covering 9 CVEs
 before 4.18.0-553.174.1.rt7.515.el8_10
4.18.0-553.174.1.rt7.515.el8_10
kernel-rt-debug-core
AlmaLinux:8
From an advisory covering 9 CVEs
 before 4.18.0-553.174.1.rt7.515.el8_10
4.18.0-553.174.1.rt7.515.el8_10
kernel-rt-debug-devel
AlmaLinux:8
From an advisory covering 9 CVEs
 before 4.18.0-553.174.1.rt7.515.el8_10
4.18.0-553.174.1.rt7.515.el8_10
kernel-rt-debug-modules
AlmaLinux:8
From an advisory covering 9 CVEs
 before 4.18.0-553.174.1.rt7.515.el8_10
4.18.0-553.174.1.rt7.515.el8_10
kernel-rt-debug-modules-extra
AlmaLinux:8
From an advisory covering 9 CVEs
 before 4.18.0-553.174.1.rt7.515.el8_10
4.18.0-553.174.1.rt7.515.el8_10
kernel-rt-devel
AlmaLinux:8
From an advisory covering 9 CVEs
 before 4.18.0-553.174.1.rt7.515.el8_10
4.18.0-553.174.1.rt7.515.el8_10
kernel-rt-modules
AlmaLinux:8
From an advisory covering 9 CVEs
 before 4.18.0-553.174.1.rt7.515.el8_10
4.18.0-553.174.1.rt7.515.el8_10
kernel-rt-modules-extra
AlmaLinux:8
From an advisory covering 9 CVEs
 before 4.18.0-553.174.1.rt7.515.el8_10
4.18.0-553.174.1.rt7.515.el8_10
kernel
Azure Linux:3
 before 6.6.152.1-1
6.6.152.1-1
linux-lts
Alpaquita:23
 6.1.182-r0 up to 6.1.189-r0
6.1.189-r0
linux-lts
Alpaquita:25
 6.12.103-r0 up to 6.12.111-r0
6.12.111-r0
linux-lts
Alpaquita:stream
 6.18.43-r0 up to 6.18.46-r0
6.18.46-r0
bpftool
TuxCare:CentOS:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel
TuxCare:CentOS:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-debug
TuxCare:CentOS:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-debug-devel
TuxCare:CentOS:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-devel
TuxCare:CentOS:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-doc
TuxCare:CentOS:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-headers
TuxCare:CentOS:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-tools
TuxCare:CentOS:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-tools-libs
TuxCare:CentOS:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-tools-libs-devel
TuxCare:CentOS:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
perf
TuxCare:CentOS:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
python-perf
TuxCare:CentOS:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
bpftool
TuxCare:OracleLinux:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel
TuxCare:OracleLinux:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-debug
TuxCare:OracleLinux:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-debug-devel
TuxCare:OracleLinux:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-devel
TuxCare:OracleLinux:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-doc
TuxCare:OracleLinux:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-headers
TuxCare:OracleLinux:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-tools
TuxCare:OracleLinux:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-tools-libs
TuxCare:OracleLinux:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-tools-libs-devel
TuxCare:OracleLinux:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
perf
TuxCare:OracleLinux:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
python-perf
TuxCare:OracleLinux:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
bpftool
TuxCare:RHEL:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel
TuxCare:RHEL:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-debug
TuxCare:RHEL:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-debug-devel
TuxCare:RHEL:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-devel
TuxCare:RHEL:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-doc
TuxCare:RHEL:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-headers
TuxCare:RHEL:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-tools
TuxCare:RHEL:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-tools-libs
TuxCare:RHEL:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
kernel-tools-libs-devel
TuxCare:RHEL:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
perf
TuxCare:RHEL:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
python-perf
TuxCare:RHEL:7
From an advisory covering 135 CVEs
 before 3.10.0-1160.156.1.el7.tuxcare.els3
3.10.0-1160.156.1.el7.tuxcare.els3
linux-buildinfo-5.4.0-238-generic
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-buildinfo-5.4.0-238-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-cloud-tools-5.4.0-238
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-cloud-tools-5.4.0-238-generic
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-cloud-tools-5.4.0-238-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-cloud-tools-common
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-doc
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-headers-5.4.0-238
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-headers-5.4.0-238-generic
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-headers-5.4.0-238-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-image-unsigned-5.4.0-238-generic
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-image-unsigned-5.4.0-238-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-libc-dev
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-modules-5.4.0-238-generic
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-modules-5.4.0-238-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-modules-extra-5.4.0-238-generic
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-source-5.4.0
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-tools-5.4.0-238
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-tools-5.4.0-238-generic
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-tools-5.4.0-238-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-tools-common
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-tools-host
TuxCare:Ubuntu:20.04
From an advisory covering 165 CVEs
 before 5.4.0-238.258+tuxcare.els1
5.4.0-238.258+tuxcare.els1
linux-buildinfo-4.15.0-265-generic
TuxCare:Ubuntu:18.04
From an advisory covering 160 CVEs
 before 4.15.0-265.276+tuxcare.els1
4.15.0-265.276+tuxcare.els1
Kernel
Linux
 3.18.0 up to 5.10.265, 5.11.0 up to 5.15.216, 5.16.0 up to 6.1.183, 6.2.0 up to 6.6.152, 6.7.0 up to 6.12.104, 6.13.0 up to 6.18.45, 6.19.0 up to 7.1.9
5.10.2655.15.2166.1.1836.6.1526.12.1046.18.457.1.9
linux
Debian:12
 before 6.1.187-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 45 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.170-16.1.170-26.1.170-36.1.172-16.1.174-16.1.176-16.1.177-16.1.180-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-1
6.1.187-1
linux
Debian:13
 before 6.12.105-1, plus listed versions
6.12.100-16.12.101-16.12.38-16.12.41-16.12.43-1
Show 28 moreShow less
6.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-1
6.12.105-1
linux
Debian:14
 before 7.1.9-1, plus listed versions
6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1
Show 45 moreShow less
6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1
7.1.9-1
linux-6.12
Debian:12
 before 6.12.107-1~deb12u1, plus listed versions
6.12.100-1~deb12u16.12.101-1~deb12u1
6.12.107-1~deb12u1
kernel
Mageia:10
From an advisory covering 1146 CVEs
 before 6.18.55-1.mga10
6.18.55-1.mga10
kmod-xtables-addons
Mageia:10
From an advisory covering 1146 CVEs
 before 3.30-5.mga10
3.30-5.mga10
kmod-virtualbox
Mageia:10
From an advisory covering 1146 CVEs
 before 7.2.14-31.mga10
7.2.14-31.mga10
drakx-installer-images
Mageia:10
From an advisory covering 1146 CVEs
 before 2.94-56.mga10
2.94-56.mga10
drakx-installer-images
Mageia:10
From an advisory covering 1146 CVEs
 before 2.94-56.mga10.nonfree
2.94-56.mga10.nonfree
kmod-nvidia-current-wopengpu
Mageia:10
From an advisory covering 1146 CVEs
 before 580.173.02-40.mga10.nonfree
580.173.02-40.mga10.nonfree
kernel-linus
Mageia:10
From an advisory covering 1146 CVEs
 before 6.18.55-1.mga10
6.18.55-1.mga10
kernel
openEuler:22.03-LTS-SP4
From an advisory covering 77 CVEs
 before 5.10.0-339.0.0.240.oe2203sp4
5.10.0-339.0.0.240.oe2203sp4
bpftool
Red Hat:enterprise_linux:8::baseos
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
bpftool-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
kernel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
kernel-abi-stablelists
Red Hat:enterprise_linux:8::baseos
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
kernel-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
kernel-debug
Red Hat:enterprise_linux:8::baseos
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
kernel-debug-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
kernel-debug-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
kernel-debug-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
kernel-debug-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
kernel-debug-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
kernel-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:8::baseos
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:8::baseos
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:8::baseos
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::baseos
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
kernel-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
kernel-doc
Red Hat:enterprise_linux:8::baseos
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
kernel-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
kernel-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
kernel-tools
Red Hat:enterprise_linux:8::baseos
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
kernel-tools-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
kernel-tools-libs
Red Hat:enterprise_linux:8::baseos
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
kernel-zfcpdump
Red Hat:enterprise_linux:8::baseos
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
kernel-zfcpdump-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
kernel-zfcpdump-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
kernel-zfcpdump-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
kernel-zfcpdump-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
perf
Red Hat:enterprise_linux:8::baseos
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
perf-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
python3-perf
Red Hat:enterprise_linux:8::baseos
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
python3-perf-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
bpftool-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
kernel-debug-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
kernel-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:8::crb
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:8::crb
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::crb
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
kernel-tools-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
kernel-tools-libs-devel
Red Hat:enterprise_linux:8::crb
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
perf-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
python3-perf-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
kernel-rt
Red Hat:enterprise_linux:8::nfv
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.rt7.515.el8_10
0:4.18.0-553.174.1.rt7.515.el8_10
kernel-rt-core
Red Hat:enterprise_linux:8::nfv
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.rt7.515.el8_10
0:4.18.0-553.174.1.rt7.515.el8_10
kernel-rt-debug
Red Hat:enterprise_linux:8::nfv
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.rt7.515.el8_10
0:4.18.0-553.174.1.rt7.515.el8_10
kernel-rt-debug-core
Red Hat:enterprise_linux:8::nfv
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.rt7.515.el8_10
0:4.18.0-553.174.1.rt7.515.el8_10
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:8::nfv
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.rt7.515.el8_10
0:4.18.0-553.174.1.rt7.515.el8_10
kernel-rt-debug-devel
Red Hat:enterprise_linux:8::nfv
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.rt7.515.el8_10
0:4.18.0-553.174.1.rt7.515.el8_10
kernel-rt-debug-kvm
Red Hat:enterprise_linux:8::nfv
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.rt7.515.el8_10
0:4.18.0-553.174.1.rt7.515.el8_10
kernel-rt-debug-modules
Red Hat:enterprise_linux:8::nfv
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.rt7.515.el8_10
0:4.18.0-553.174.1.rt7.515.el8_10
kernel-rt-debug-modules-extra
Red Hat:enterprise_linux:8::nfv
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.rt7.515.el8_10
0:4.18.0-553.174.1.rt7.515.el8_10
kernel-rt-debuginfo
Red Hat:enterprise_linux:8::nfv
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.rt7.515.el8_10
0:4.18.0-553.174.1.rt7.515.el8_10
kernel-rt-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::nfv
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.rt7.515.el8_10
0:4.18.0-553.174.1.rt7.515.el8_10
kernel-rt-devel
Red Hat:enterprise_linux:8::nfv
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.rt7.515.el8_10
0:4.18.0-553.174.1.rt7.515.el8_10
kernel-rt-kvm
Red Hat:enterprise_linux:8::nfv
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.rt7.515.el8_10
0:4.18.0-553.174.1.rt7.515.el8_10
kernel-rt-modules
Red Hat:enterprise_linux:8::nfv
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.rt7.515.el8_10
0:4.18.0-553.174.1.rt7.515.el8_10
kernel-rt-modules-extra
Red Hat:enterprise_linux:8::nfv
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.rt7.515.el8_10
0:4.18.0-553.174.1.rt7.515.el8_10
kernel
Rocky Linux:8
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.el8_10
0:4.18.0-553.174.1.el8_10
kernel-rt
Rocky Linux:8
From an advisory covering 9 CVEs
 before 0:4.18.0-553.174.1.rt7.515.el8_10
0:4.18.0-553.174.1.rt7.515.el8_10
kernel-default
SUSE:Linux Micro 6.0
From an advisory covering 98 CVEs
 before 6.4.0-159998.54.1
6.4.0-159998.54.1
kernel-default-base
SUSE:Linux Micro 6.0
From an advisory covering 98 CVEs
 before 6.4.0-159998.54.1.159998.21.40
6.4.0-159998.54.1.159998.21.40
kernel-kvmsmall
SUSE:Linux Micro 6.0
From an advisory covering 98 CVEs
 before 6.4.0-159998.54.1
6.4.0-159998.54.1
kernel-source
SUSE:Linux Micro 6.0
From an advisory covering 98 CVEs
 before 6.4.0-159998.54.1
6.4.0-159998.54.1
kernel-default
SUSE:Linux Micro 6.1
From an advisory covering 98 CVEs
 before 6.4.0-159998.54.1
6.4.0-159998.54.1
kernel-default-base
SUSE:Linux Micro 6.1
From an advisory covering 98 CVEs
 before 6.4.0-159998.54.1.159998.21.39
6.4.0-159998.54.1.159998.21.39
kernel-kvmsmall
SUSE:Linux Micro 6.1
From an advisory covering 98 CVEs
 before 6.4.0-159998.54.1
6.4.0-159998.54.1
kernel-source
SUSE:Linux Micro 6.1
From an advisory covering 98 CVEs
 before 6.4.0-159998.54.1
6.4.0-159998.54.1
kernel-obs-build
SUSE:Linux Micro Extras 6.2
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-syms
SUSE:Linux Micro Extras 6.2
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-64kb
SUSE:Linux Micro 6.2
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-default
SUSE:Linux Micro 6.2
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-default-base
SUSE:Linux Micro 6.2
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1.160000.2.29
6.12.0-160000.40.1.160000.2.29
kernel-rt
SUSE:Linux Micro 6.2
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-source
SUSE:Linux Micro 6.2
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-64kb
SUSE:Linux Enterprise Server 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-azure
SUSE:Linux Enterprise Server 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-default
SUSE:Linux Enterprise Server 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-default-base
SUSE:Linux Enterprise Server 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1.160000.2.29
6.12.0-160000.40.1.160000.2.29
kernel-docs
SUSE:Linux Enterprise Server 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-kvmsmall
SUSE:Linux Enterprise Server 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-obs-qa
SUSE:Linux Enterprise Server 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-source
SUSE:Linux Enterprise Server 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-syms
SUSE:Linux Enterprise Server 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-64kb
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-azure
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-default
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1.160000.2.29
6.12.0-160000.40.1.160000.2.29
kernel-docs
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-kvmsmall
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-obs-qa
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-source
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-syms
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-zfcpdump
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-rt
SUSE:Linux Micro 6.0
From an advisory covering 98 CVEs
 before 6.4.0-159998.54.1
6.4.0-159998.54.1
kernel-source-rt
SUSE:Linux Micro 6.0
From an advisory covering 98 CVEs
 before 6.4.0-159998.54.1
6.4.0-159998.54.1
kernel-default
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 56 CVEs
 before 4.12.14-122.336.1
4.12.14-122.336.1
kgraft-patch-SLE12-SP5_Update_89
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 56 CVEs
 before 1-8.3.1
1-8.3.1
kernel-default
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 56 CVEs
 before 4.12.14-122.336.1
4.12.14-122.336.1
kernel-source
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 56 CVEs
 before 4.12.14-122.336.1
4.12.14-122.336.1
kernel-syms
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 56 CVEs
 before 4.12.14-122.336.1
4.12.14-122.336.1
kernel-default
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 56 CVEs
 before 4.12.14-122.336.1
4.12.14-122.336.1
kernel-source
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 56 CVEs
 before 4.12.14-122.336.1
4.12.14-122.336.1
kernel-syms
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 56 CVEs
 before 4.12.14-122.336.1
4.12.14-122.336.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 108 CVEs
 before 6.4.0-150700.53.87.3
6.4.0-150700.53.87.3
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 108 CVEs
 before 6.4.0-150700.53.87.3
6.4.0-150700.53.87.3
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 108 CVEs
 before 6.4.0-150700.53.87.3.150700.17.49.2
6.4.0-150700.53.87.3.150700.17.49.2
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 108 CVEs
 before 6.4.0-150700.53.87.3
6.4.0-150700.53.87.3
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 108 CVEs
 before 6.4.0-150700.53.87.3
6.4.0-150700.53.87.3
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 108 CVEs
 before 6.4.0-150700.53.87.3
6.4.0-150700.53.87.3
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 108 CVEs
 before 6.4.0-150700.53.87.2
6.4.0-150700.53.87.2
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 108 CVEs
 before 6.4.0-150700.53.87.3
6.4.0-150700.53.87.3
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 108 CVEs
 before 6.4.0-150700.53.87.1
6.4.0-150700.53.87.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP7
From an advisory covering 108 CVEs
 before 6.4.0-150700.53.87.3
6.4.0-150700.53.87.3
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 108 CVEs
 before 6.4.0-150700.53.87.3
6.4.0-150700.53.87.3
kernel-livepatch-SLE15-SP7_Update_23
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 108 CVEs
 before 1-150700.15.3.2
1-150700.15.3.2
linux-aws
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9
Show 45 moreShow less
4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80
 None known
linux-azure
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2
Show 45 moreShow less
4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1
 None known
linux-lts-xenial
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1
Show 45 moreShow less
4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1
 None known
linux
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11
Show 45 moreShow less
4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96
 None known
linux-aws
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18
Show 45 moreShow less
4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93
 None known
linux-aws-hwe
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1
Show 45 moreShow less
4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1
 None known
linux-azure
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 45 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71
 None known
linux-gcp
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
Show 45 moreShow less
4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1
 None known
linux-hwe
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 45 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1
 None known
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-kvm
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15
Show 45 moreShow less
4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.674.4.0-1062.694.4.0-1063.704.4.0-1064.714.4.0-1065.724.4.0-1066.734.4.0-1068.754.4.0-1069.764.4.0-1070.774.4.0-1071.784.4.0-1075.824.4.0-1076.834.4.0-1077.84
 None known
linux-oracle
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1
Show 45 moreShow less
4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1
 None known
linux-fips
Ubuntu:Pro:FIPS-updates:16.04:LTS
 All versions, plus listed versions
4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13
Show 45 moreShow less
4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78
 None known
linux-fips
Ubuntu:Pro:FIPS:16.04:LTS
 All versions, plus listed versions
4.4.0-1001.14.4.0-1002.2
 None known
linux
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 45 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107
 None known
linux-aws
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 45 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-aws-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-4.15
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102
Show 45 moreShow less
4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1
Show 45 moreShow less
5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-4.15
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92
Show 45 moreShow less
4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gcp-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 45 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-ibm-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1
Show 45 moreShow less
5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1
 None known
linux-kvm
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8
Show 45 moreShow less
4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13
Show 45 moreShow less
4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-oracle-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1
 None known
linux-raspi-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1
Show 45 moreShow less
5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1
 None known
linux-aws-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24
Show 45 moreShow less
4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93
 None known
linux-azure-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10
Show 45 moreShow less
4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80
 None known
linux-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42
Show 45 moreShow less
4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21
Show 45 moreShow less
4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.794.15.0-2075.804.15.0-2076.814.15.0-2077.83
 None known
linux-aws-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.4
 None known
linux-azure-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.2
 None known
linux-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1011.12
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.1
 None known
linux
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 45 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110
 None known
linux-aws
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5
Show 45 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1117.124~20.04.1, plus listed versions
5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1
Show 45 moreShow less
5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1
5.15.0-1117.124~20.04.1
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8
Show 45 moreShow less
5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
dtb-aarch64
openSUSE:Leap 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-64kb
openSUSE:Leap 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-azure
openSUSE:Leap 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-default
openSUSE:Leap 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-default-base
openSUSE:Leap 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1.160000.2.29
6.12.0-160000.40.1.160000.2.29
kernel-docs
openSUSE:Leap 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-kvmsmall
openSUSE:Leap 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-obs-build
openSUSE:Leap 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-obs-qa
openSUSE:Leap 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-rt
openSUSE:Leap 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-source
openSUSE:Leap 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-syms
openSUSE:Leap 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-zfcpdump
openSUSE:Leap 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubsantoshkalluri/CVE-2026-745832026-11-02

History

History
RecordedChangedSources
affectedOSV
affectedOSV
affected, aliases, referencesOSV
affected, aliases, referencesOSV
affected, aliases, referencesOSV
affected, aliases, referencesOSV
affected, facts, referencesOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-74583 is a high vulnerability (CVSS 7.8) in Linux, published August 21, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.12%, the 1st percentile. Fixed in kernel 6.6.152.1-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 384 package rows, 2,492 versions, 4,973 references and the rest of 31 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open