CVE-2026-89542

SUNRPC: harden gss_krb5_unwrap_v2 against short tokens

9.8 CriticalFix available

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: harden gss_krb5_unwrap_v2 against short tokens

gss_krb5_unwrap_v2() reads the EC and RRC header fields at ptr+4 and ptr+6 before validating that the token is at least GSS_KRB5_TOK_HDR_LEN (16) bytes long, and its rotate_left() helper passes buf->len - base to xdr_buf_subsegment() without verifying that base <= buf->len. When a caller hands in a sub-16-byte token, or a token whose declared len leaves base past the end of the buffer, three distinct failures follow:

gss_krb5_unwrap_v2(offset, len, buf)
  ptr = buf->head[0].iov_base + offset
  ec  = *(ptr + 4)              /* OOB read on short head */
  rrc = *(ptr + 6)              /* OOB read on short head */
  rotate_left(offset + 16, buf, rrc)
    xdr_buf_subsegment(buf, &subbuf,
                       base, buf->len - base)   /* u32 wrap when base > len */
    _rotate_left(&subbuf, shift)
      shift %= buf->len         /* divide-by-zero when base == len */

After decryption, the cleanup arithmetic has the same shape:

movelen = min_t(unsigned int, buf->head[0].iov_len, len);
movelen -= offset + GSS_KRB5_TOK_HDR_LEN + headskip;
BUG_ON(offset + GSS_KRB5_TOK_HDR_LEN + headskip + movelen >
                                        buf->head[0].iov_len);

The BUG_ON re-adds the value just subtracted, so it reduces to min(A, B) > A and is permanently false; it cannot catch the unsigned underflow of movelen, which then drives a ~UINT_MAX-byte memmove().

Add four defense-in-depth guards inside the unwrap core so it is safe regardless of what its callers validate:

reject tokens with len - offset < GSS_KRB5_TOK_HDR_LEN before touching ptr+4/ptr+6;
bail from rotate_left() when buf->len <= base, covering both the underflow and zero-length cases;
return early from _rotate_left() when buf->len is zero, so the shift %= buf->len modulo cannot fault;
replace the dead BUG_ON with a live check that returns GSS_S_DEFECTIVE_TOKEN before the movelen subtraction.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.51%Up 0.3 points since Sep 12, 2026

What each source reports

CVE List Score used 9.8

SUNRPC: harden gss_krb5_unwrap_v2 against short tokens

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: harden gss_krb5_unwrap_v2 against short tokens

gss_krb5_unwrap_v2(offset, len, buf)
  ptr = buf->head[0].iov_base + offset
  ec  = *(ptr + 4)              /* OOB read on short head */
  rrc = *(ptr + 6)              /* OOB read on short head */
  rotate_left(offset + 16, buf, rrc)
    xdr_buf_subsegment(buf, &subbuf,
                       base, buf->len - base)   /* u32 wrap when base > len */
    _rotate_left(&subbuf, shift)
      shift %= buf->len         /* divide-by-zero when base == len */

After decryption, the cleanup arithmetic has the same shape:

movelen = min_t(unsigned int, buf->head[0].iov_len, len);
movelen -= offset + GSS_KRB5_TOK_HDR_LEN + headskip;
BUG_ON(offset + GSS_KRB5_TOK_HDR_LEN + headskip + movelen >
                                        buf->head[0].iov_len);

The BUG_ON re-adds the value just subtracted, so it reduces to min(A, B) > A and is permanently false; it cannot catch the unsigned underflow of movelen, which then drives a ~UINT_MAX-byte memmove().

Add four defense-in-depth guards inside the unwrap core so it is safe regardless of what its callers validate:

reject tokens with len - offset < GSS_KRB5_TOK_HDR_LEN before touching ptr+4/ptr+6;
bail from rotate_left() when buf->len <= base, covering both the underflow and zero-length cases;
return early from _rotate_left() when buf->len is zero, so the shift %= buf->len modulo cannot fault;
replace the dead BUG_ON with a live check that returns GSS_S_DEFECTIVE_TOKEN before the movelen subtraction.

Record: CVE-2026-89542
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

EUVDEUVD-2026-76453 9.8

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: harden gss_krb5_unwrap_v2 against short tokens

gss_krb5_unwrap_v2(offset, len, buf)
  ptr = buf->head[0].iov_base + offset
  ec  = *(ptr + 4)              /* OOB read on short head */
  rrc = *(ptr + 6)              /* OOB read on short head */
  rotate_left(offset + 16, buf, rrc)
    xdr_buf_subsegment(buf, &subbuf,
                       base, buf->len - base)   /* u32 wrap when base > len */
    _rotate_left(&subbuf, shift)
      shift %= buf->len         /* divide-by-zero when base == len */

After decryption, the cleanup arithmetic has the same shape:

movelen = min_t(unsigned int, buf->head[0].iov_len, len);
movelen -= offset + GSS_KRB5_TOK_HDR_LEN + headskip;
BUG_ON(offset + GSS_KRB5_TOK_HDR_LEN + headskip + movelen >
                                        buf->head[0].iov_len);

The BUG_ON re-adds the value just subtracted, so it reduces to min(A, B) > A and is permanently false; it cannot catch the unsigned underflow of movelen, which then drives a ~UINT_MAX-byte memmove().

Add four defense-in-depth guards inside the unwrap core so it is safe regardless of what its callers validate:

reject tokens with len - offset < GSS_KRB5_TOK_HDR_LEN before touching ptr+4/ptr+6;
bail from rotate_left() when buf->len <= base, covering both the underflow and zero-length cases;
return early from _rotate_left() when buf->len is zero, so the shift %= buf->len modulo cannot fault;
replace the dead BUG_ON with a live check that returns GSS_S_DEFECTIVE_TOKEN before the movelen subtraction.

Record: EUVD-2026-76453
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-h928-qw5v-x6vj 9.8

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: harden...

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: harden gss_krb5_unwrap_v2 against short tokens

gss_krb5_unwrap_v2(offset, len, buf)
  ptr = buf->head[0].iov_base + offset
  ec  = *(ptr + 4)              /* OOB read on short head */
  rrc = *(ptr + 6)              /* OOB read on short head */
  rotate_left(offset + 16, buf, rrc)
    xdr_buf_subsegment(buf, &subbuf,
                       base, buf->len - base)   /* u32 wrap when base > len */
    _rotate_left(&subbuf, shift)
      shift %= buf->len         /* divide-by-zero when base == len */

After decryption, the cleanup arithmetic has the same shape:

movelen = min_t(unsigned int, buf->head[0].iov_len, len);
movelen -= offset + GSS_KRB5_TOK_HDR_LEN + headskip;
BUG_ON(offset + GSS_KRB5_TOK_HDR_LEN + headskip + movelen >
                                        buf->head[0].iov_len);

The BUG_ON re-adds the value just subtracted, so it reduces to min(A, B) > A and is permanently false; it cannot catch the unsigned underflow of movelen, which then drives a ~UINT_MAX-byte memmove().

Add four defense-in-depth guards inside the unwrap core so it is safe regardless of what its callers validate:

reject tokens with len - offset < GSS_KRB5_TOK_HDR_LEN before touching ptr+4/ptr+6;
bail from rotate_left() when buf->len <= base, covering both the underflow and zero-length cases;
return early from _rotate_left() when buf->len is zero, so the shift %= buf->len modulo cannot fault;
replace the dead BUG_ON with a live check that returns GSS_S_DEFECTIVE_TOKEN before the movelen subtraction.

Record: GHSA-h928-qw5v-x6vj
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

NVD 9.8

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: harden gss_krb5_unwrap_v2 against short tokens

gss_krb5_unwrap_v2(offset, len, buf)
  ptr = buf->head[0].iov_base + offset
  ec  = *(ptr + 4)              /* OOB read on short head */
  rrc = *(ptr + 6)              /* OOB read on short head */
  rotate_left(offset + 16, buf, rrc)
    xdr_buf_subsegment(buf, &subbuf,
                       base, buf->len - base)   /* u32 wrap when base > len */
    _rotate_left(&subbuf, shift)
      shift %= buf->len         /* divide-by-zero when base == len */

After decryption, the cleanup arithmetic has the same shape:

movelen = min_t(unsigned int, buf->head[0].iov_len, len);
movelen -= offset + GSS_KRB5_TOK_HDR_LEN + headskip;
BUG_ON(offset + GSS_KRB5_TOK_HDR_LEN + headskip + movelen >
                                        buf->head[0].iov_len);

The BUG_ON re-adds the value just subtracted, so it reduces to min(A, B) > A and is permanently false; it cannot catch the unsigned underflow of movelen, which then drives a ~UINT_MAX-byte memmove().

Add four defense-in-depth guards inside the unwrap core so it is safe regardless of what its callers validate:

reject tokens with len - offset < GSS_KRB5_TOK_HDR_LEN before touching ptr+4/ptr+6;
bail from rotate_left() when buf->len <= base, covering both the underflow and zero-length cases;
return early from _rotate_left() when buf->len is zero, so the shift %= buf->len modulo cannot fault;
replace the dead BUG_ON with a live check that returns GSS_S_DEFECTIVE_TOKEN before the movelen subtraction.

Record: CVE-2026-89542
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVBELL-CVE-2026-89542 9.8

Record: BELL-CVE-2026-89542
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSV 9.8

SUNRPC: harden gss_krb5_unwrap_v2 against short tokens

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: harden gss_krb5_unwrap_v2 against short tokens

gss_krb5_unwrap_v2(offset, len, buf)
  ptr = buf->head[0].iov_base + offset
  ec  = *(ptr + 4)              /* OOB read on short head */
  rrc = *(ptr + 6)              /* OOB read on short head */
  rotate_left(offset + 16, buf, rrc)
    xdr_buf_subsegment(buf, &subbuf,
                       base, buf->len - base)   /* u32 wrap when base > len */
    _rotate_left(&subbuf, shift)
      shift %= buf->len         /* divide-by-zero when base == len */

After decryption, the cleanup arithmetic has the same shape:

movelen = min_t(unsigned int, buf->head[0].iov_len, len);
movelen -= offset + GSS_KRB5_TOK_HDR_LEN + headskip;
BUG_ON(offset + GSS_KRB5_TOK_HDR_LEN + headskip + movelen >
                                        buf->head[0].iov_len);

The BUG_ON re-adds the value just subtracted, so it reduces to min(A, B) > A and is permanently false; it cannot catch the unsigned underflow of movelen, which then drives a ~UINT_MAX-byte memmove().

Add four defense-in-depth guards inside the unwrap core so it is safe regardless of what its callers validate:

reject tokens with len - offset < GSS_KRB5_TOK_HDR_LEN before touching ptr+4/ptr+6;
bail from rotate_left() when buf->len <= base, covering both the underflow and zero-length cases;
return early from _rotate_left() when buf->len is zero, so the shift %= buf->len modulo cannot fault;
replace the dead BUG_ON with a live check that returns GSS_S_DEFECTIVE_TOKEN before the movelen subtraction.

Record: CVE-2026-89542
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 39 moreShow less

OSVDEBIAN-CVE-2026-89542 9.8

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens gss_krb5_unwrap_v2() reads the EC and RRC header fields at ptr+4 and ptr+6 before validating that the token is at least GSS_KRB5_TOK_HDR_LEN (16) bytes long, and its rotate_left() helper passes buf->len - base to xdr_buf_subsegment() without verifying that base <= buf->len. When a caller hands in a sub-16-byte token, or a token whose declared len leaves base past the end of the buffer, three distinct failures follow: gss_krb5_unwrap_v2(offset, len, buf) ptr = buf->head[0].iov_base + offset ec = (ptr + 4) / OOB read on short head */ rrc = (ptr + 6) / OOB read on short head / rotate_left(offset + 16, buf, rrc) xdr_buf_subsegment(buf, &subbuf, base, buf->len - base) / u32 wrap when base > len / _rotate_left(&subbuf, shift) shift %= buf->len / divide-by-zero when base == len */ After decryption, the cleanup arithmetic has the same shape: movelen = min_t(unsigned int, buf->head[0].iov_len, len); movelen -= offset + GSS_KRB5_TOK_HDR_LEN + headskip; BUG_ON(offset + GSS_KRB5_TOK_HDR_LEN + headskip + movelen > buf->head[0].iov_len); The BUG_ON re-adds the value just subtracted, so it reduces to min(A, B) > A and is permanently false; it cannot catch the unsigned underflow of movelen, which then drives a ~UINT_MAX-byte memmove(). Add four defense-in-depth guards inside the unwrap core so it is safe regardless of what its callers validate: - reject tokens with len - offset < GSS_KRB5_TOK_HDR_LEN before touching ptr+4/ptr+6; - bail from rotate_left() when buf->len <= base, covering both the underflow and zero-length cases; - return early from _rotate_left() when buf->len is zero, so the shift %= buf->len modulo cannot fault; - replace the dead BUG_ON with a live check that returns GSS_S_DEFECTIVE_TOKEN before the movelen subtraction.

Record: DEBIAN-CVE-2026-89542
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2026-89542 9.8

Record: UBUNTU-CVE-2026-89542
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-06

OSVAZL-100515 No score

CVE-2026-89542 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: harden gss_krb5_unwrap_v2 against short tokens

gss_krb5_unwrap_v2(offset, len, buf)
  ptr = buf->head[0].iov_base + offset
  ec  = *(ptr + 4)              /* OOB read on short head */
  rrc = *(ptr + 6)              /* OOB read on short head */
  rotate_left(offset + 16, buf, rrc)
    xdr_buf_subsegment(buf, &subbuf,
                       base, buf->len - base)   /* u32 wrap when base > len */
    _rotate_left(&subbuf, shift)
      shift %= buf->len         /* divide-by-zero when base == len */

After decryption, the cleanup arithmetic has the same shape:

movelen = min_t(unsigned int, buf->head[0].iov_len, len);
movelen -= offset + GSS_KRB5_TOK_HDR_LEN + headskip;
BUG_ON(offset + GSS_KRB5_TOK_HDR_LEN + headskip + movelen >
                                        buf->head[0].iov_len);

The BUG_ON re-adds the value just subtracted, so it reduces to min(A, B) > A and is permanently false; it cannot catch the unsigned underflow of movelen, which then drives a ~UINT_MAX-byte memmove().

Add four defense-in-depth guards inside the unwrap core so it is safe regardless of what its callers validate:

reject tokens with len - offset < GSS_KRB5_TOK_HDR_LEN before touching ptr+4/ptr+6;
bail from rotate_left() when buf->len <= base, covering both the underflow and zero-length cases;
return early from _rotate_left() when buf->len is zero, so the shift %= buf->len modulo cannot fault;
replace the dead BUG_ON with a live check that returns GSS_S_DEFECTIVE_TOKEN before the movelen subtraction.

Record: AZL-100515
Updated: 2026-11-02

OSVCLSA-2026-1791780738 No score

kernel: Fix of 72 CVEs

drm/amd/pm: bound pp_dpm_set_pp_table() memcpy {CVE-2026-97427}
Bluetooth: L2CAP: validate connectionless PSM length {CVE-2026-97408}
ipv6: sr: restore network header before routing and forwarding {CVE-2026-98096}
ipv6: fix fib6 walker UAF on seq stop {CVE-2026-97940}
net: mpls: clear inner_protocol when the last label is popped {CVE-2026-97612}
netfilter: nf_log: unregister loggers before per-net teardown {CVE-2026-97608}
usb: xusbatm: don't rely on id table pointer arithmetic {CVE-2026-97539}
ALSA: 6fire: Fix UAF at error handling during probe {CVE-2026-74505}
drm/vmwgfx: validate DRAW_PRIMITIVES header size before division {CVE-2026-74444}
ALSA: firewire: isight: bound the sample count to the packet payload {CVE-2026-64483}
Bluetooth: btusb: fix use-after-free on registration failure {CVE-2026-64471}
thunderbolt: Keep XDomain reference during the lifetime of a service {CVE-2026-97509}
ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() {CVE-2026-97455}
ACPICA: Add validation for node in acpi_ns_build_normalized_path() {CVE-2026-97448}
inet: frags: strip GSO state from fragments before reassembly {CVE-2026-80590}
libnvdimm/labels: Prevent integer overflow in __nd_label_validate() {CVE-2026-89559}
SUNRPC: always drain cache_cleaner before destroying a cache_detail {CVE-2026-89548}
SUNRPC: harden gss_krb5_unwrap_v2 against short tokens {CVE-2026-89542}
openvswitch: only skb_tx_error() a packet we are about to drop {CVE-2026-89487}
nvme-tcp: fix host memory disclosure on R2T for a read command {CVE-2026-89481}
sctp: fix NULL deref on untransmitted RECONF completion {CVE-2026-89477}
net: openvswitch: fix flow mask use-after-free on flow deletion {CVE-2026-80994}
ALSA: bcd2000: clear the URB pointers on disconnect {CVE-2026-80971}
netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() {CVE-2026-74569}
Bluetooth: mgmt: fix UAF in pair command cancellation {CVE-2026-74510}
cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname {CVE-2023-53751}
RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem {CVE-2025-38022}
drivers: base: Free devm resources when unregistering a device {CVE-2023-53596}
scsi: qla2xxx: Fix bsg_done() causing double free {CVE-2025-71238}
netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
xfrm: ah6: validate routing header segments_left {CVE-2026-80844}
drm/amd/display: set new_stream to NULL after release {CVE-2026-68236}
RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters {CVE-2026-100075}
nvmet-rdma: handle inline data with a nonzero offset {CVE-2026-72129}
ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control {CVE-2026-72261}
crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
crypto: algif_aead - fix uninitialized ctx->init {CVE-2025-39964}
netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() {CVE-2026-97417}
tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream() {CVE-2026-68289}
sctp: fix race between sctp_wait_for_connect and peeloff {CVE-2026-63971}
bridge: stp: Fix a potential use-after-free when deleting a bridge {CVE-2026-72389}
scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer {CVE-2026-74556}
rhashtable: clear stale iter->p on table restart {CVE-2026-64563}
mpls: reload header after pskb_may_pull() {CVE-2026-89555}
net: tun: bound receive headroom {CVE-2026-81000}
netfilter: flowtable: publish GC-visible tuple last {CVE-2026-74746}
netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() {CVE-2026-98077}
net: atlantic: eliminate double free in error handling logic {CVE-2023-52664}
firewire: net: fix use after free in fwnet_finish_incoming_packet() {CVE-2023-53432}
firewire: net: remove unused variable 'guid' {CVE-2023-53432}
gfs2: Fix slab-use-after-free in gfs2_qd_dealloc {CVE-2023-52760}
gfs2: fix kernel…

Record: CLSA-2026-1791780738
Updated: 2026-11-02

OSVCLSA-2026-1791858923 No score

Fix of 174 CVEs

CVE-2026-90205
- ocfs2: validate orphan slot during inode read {CVE-2026-90205}
CVE-2026-93054
- uio: Fix stale info pointer in failed registration path {CVE-2026-93054}
CVE-2026-93103
- RDMA/hfi1: Preserve unit 0 on allocation failure {CVE-2026-93103}
CVE-2026-89833
- f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages() {CVE-2026-89833}
CVE-2026-89878
- media: s2255: check firmware size before reading trailing marker {CVE-2026-89878}
CVE-2026-90037
- NFSD: Prevent client use-after-free during close_lru reaping {CVE-2026-90037}
CVE-2026-90296
- cpufreq: imx6q: fix devres accumulation across driver rebind {CVE-2026-90296}
CVE-2026-90415
- RDMA/cxgb4: free STAG index when TPT entry write fails {CVE-2026-90415}
CVE-2026-90081
- net/rds: use wq_has_sleeper() in rds_cong_map_updated() {CVE-2026-90081}
CVE-2026-90420
- nilfs2: fix infinite loop in nilfs_clean_segments() {CVE-2026-90420}
CVE-2026-90116
- ALSA: mtpav: shut down output timer before card teardown {CVE-2026-90116}
CVE-2026-90070
- tpm: st33zp24: Return zero on status read failure {CVE-2026-90070}
CVE-2026-89845
- scsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry() {CVE-2026-89845}
CVE-2026-89944
- ASoC: hdac_hda: Fix hlink refcount leak on component registration failure {CVE-2026-89944}
CVE-2026-90018
- staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() {CVE-2026-90018}
CVE-2026-89860
- scsi: qla2xxx: Initialize NVMe abort_work once at submission {CVE-2026-89860}
CVE-2026-90007
- scsi: pm8001: Use rollback index when freeing MSI-X vectors {CVE-2026-90007}
CVE-2026-90044
- usb: gadget: f_fs: Fix Use-After-Free in AIO error path {CVE-2026-90044}
CVE-2026-68289
- tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream() {CVE-2026-68289}
CVE-2026-90143
- net: kcm: Hold RCU read lock while running BPF parser {CVE-2026-90143}
CVE-2026-90111
- ip6mr: do not clone dst in ip6mr_cache_report() {CVE-2026-90111}
CVE-2026-90283
- hugetlbfs: release subpool on fill_super failure {CVE-2026-90283}
CVE-2026-92521
- ACPI: PCI: Clear driver_data on all paths that free the acpi_pci_root {CVE-2026-92521}
CVE-2026-93048
- mtd: part: reject MTDPART_OFS_RETAIN in mtd_add_partition() {CVE-2026-93048}
CVE-2026-93160
- crypto: atmel-ecc - reject hardware ECDH without a public key {CVE-2026-93160}
CVE-2026-93199
- i3c: master: Do not treat master device as a duplicate target {CVE-2026-93199}
CVE-2026-89953
- mtd: mtdoops: free page bitmap when the backing MTD is removed {CVE-2026-89953}
CVE-2026-89822
- drm/i915: Guard against NULL driver_data in i915_pci_probe() {CVE-2026-89822}
CVE-2026-89937
- iio: chemical: sgp30: Handle IAQ thread creation failure {CVE-2026-89937}
CVE-2026-89993
- dmaengine: dw-edma: Initialize IRQ data before requesting IRQs {CVE-2026-89993}
CVE-2026-89972
- nvme: add missing SRCU grace period in error path {CVE-2026-89972}
CVE-2026-89892
- media: em28xx: defer audio-only extension registration {CVE-2026-89892}
CVE-2026-90023
- usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers() {CVE-2026-90023}
CVE-2026-90020
- USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() {CVE-2026-90020}
CVE-2026-90017
- staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() {CVE-2026-90017}
CVE-2026-90016
- staging: rtl8723bs: fix OOB read in rtw_restruct_wmm_ie() {CVE-2026-90016}
CVE-2026-90329
- HID: synchronize input before cleaning up a failed probe {CVE-2026-90329} *…

Record: CLSA-2026-1791858923
Updated: 2026-11-02

OSVCLSA-2026-1791876326 No score

Fix of 274 CVEs

CVE-2026-53091
- xfrm: Don't clobber inner headers when already set {CVE-2026-53091}
- net: account for encap headers in qdisc pkt len {CVE-2026-53091}
CVE-2026-93803
- wifi: libipw: fix key index receive bound checks {CVE-2026-93803}
CVE-2026-93286
- net: appletalk: fix NULL pointer dereference in aarp_send_ddp() {CVE-2026-93286}
CVE-2026-93280
- greybus: audio: bound the topology section sizes against the fetched size {CVE-2026-93280}
CVE-2026-93213
- of: fix out-of-bounds read in of_alias_scan() stem parser {CVE-2026-93213}
CVE-2026-93802
- wifi: rsi: validate beacon length before fixed buffer copy {CVE-2026-93802}
CVE-2026-93206
- PCI/proc: Use file_ns_capable() when checking config space read access {CVE-2026-93206}
CVE-2026-97448
- ACPICA: Add validation for node in acpi_ns_build_normalized_path() {CVE-2026-97448}
CVE-2026-97408
- Bluetooth: L2CAP: validate connectionless PSM length {CVE-2026-97408}
CVE-2026-93268
- ext4: skip extra isize expansion during mount to prevent deadlock {CVE-2026-93268}
CVE-2026-93782
- vhost-scsi: flush backend after device ioctls {CVE-2026-93782}
CVE-2026-93783
- Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame {CVE-2026-93783}
CVE-2026-97455
- ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() {CVE-2026-97455}
CVE-2026-93807
- wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers {CVE-2026-93807}
CVE-2026-93808
- ALSA: usb-audio: caiaq: validate EP1 reply lengths {CVE-2026-93808}
CVE-2026-89938
- iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF {CVE-2026-89938}
CVE-2026-89927
- KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock {CVE-2026-89927}
CVE-2026-89949
- batman-adv: dat: avoid unaligned fault in IP extraction {CVE-2026-89949}
CVE-2026-89912
- KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save {CVE-2026-89912}
CVE-2026-89932
- KVM: nVMX: Always flush vpid02 on first use {CVE-2026-89932}
CVE-2026-89833
- f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages() {CVE-2026-89833}
CVE-2026-90045
- USB: gadget: ffs: fix mm lifetime handling {CVE-2026-90045}
CVE-2026-89854
- scsi: qla2xxx: Fix cs84xx use-after-free on host teardown {CVE-2026-89854}
CVE-2026-90015
- xhci: fix lost bounce buffers on TDs spanning several ring segments {CVE-2026-90015}
CVE-2026-89979
- ALSA: pcm: Fix race between non-atomic ops and trigger-start {CVE-2026-89979}
CVE-2026-89852
- scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state() {CVE-2026-89852}
CVE-2026-89861
- scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition() {CVE-2026-89861}
CVE-2026-89859
- scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak {CVE-2026-89859}
CVE-2026-90036
- NFSD: Prevent client use-after-free during blocked-lock reaping {CVE-2026-90036}
CVE-2026-89987
- mm/huge_memory: transfer the pmd dirty bit to the folio on zap {CVE-2026-89987}
CVE-2026-89799
- bpf: Disable preemption in bpf_get_stackid {CVE-2026-89799}
CVE-2026-90032
- media: usbtv: keep device alive while ALSA card exists {CVE-2026-90032}
CVE-2026-89822
- drm/i915: Guard against NULL driver_data in i915_pci_probe() {CVE-2026-89822}
CVE-2026-89929
- KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU {CVE-2026-89929}
CVE-2026-89840
- f2fs: validate MOVE_RANGE destination size {CVE-2026-89840}
CVE-2026-89913
- KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables {CVE-2026-89913} *…

Record: CLSA-2026-1791876326
Updated: 2026-11-02

OSVCLSA-2026-1791878869 No score

Fix of 274 CVEs

CVE-2026-53091
- xfrm: Don't clobber inner headers when already set {CVE-2026-53091}
- net: account for encap headers in qdisc pkt len {CVE-2026-53091}
CVE-2026-93803
- wifi: libipw: fix key index receive bound checks {CVE-2026-93803}
CVE-2026-93286
- net: appletalk: fix NULL pointer dereference in aarp_send_ddp() {CVE-2026-93286}
CVE-2026-93280
- greybus: audio: bound the topology section sizes against the fetched size {CVE-2026-93280}
CVE-2026-93213
- of: fix out-of-bounds read in of_alias_scan() stem parser {CVE-2026-93213}
CVE-2026-93802
- wifi: rsi: validate beacon length before fixed buffer copy {CVE-2026-93802}
CVE-2026-93206
- PCI/proc: Use file_ns_capable() when checking config space read access {CVE-2026-93206}
CVE-2026-97448
- ACPICA: Add validation for node in acpi_ns_build_normalized_path() {CVE-2026-97448}
CVE-2026-97408
- Bluetooth: L2CAP: validate connectionless PSM length {CVE-2026-97408}
CVE-2026-93268
- ext4: skip extra isize expansion during mount to prevent deadlock {CVE-2026-93268}
CVE-2026-93782
- vhost-scsi: flush backend after device ioctls {CVE-2026-93782}
CVE-2026-93783
- Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame {CVE-2026-93783}
CVE-2026-97455
- ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() {CVE-2026-97455}
CVE-2026-93807
- wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers {CVE-2026-93807}
CVE-2026-93808
- ALSA: usb-audio: caiaq: validate EP1 reply lengths {CVE-2026-93808}
CVE-2026-89938
- iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF {CVE-2026-89938}
CVE-2026-89927
- KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock {CVE-2026-89927}
CVE-2026-89949
- batman-adv: dat: avoid unaligned fault in IP extraction {CVE-2026-89949}
CVE-2026-89912
- KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save {CVE-2026-89912}
CVE-2026-89932
- KVM: nVMX: Always flush vpid02 on first use {CVE-2026-89932}
CVE-2026-89833
- f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages() {CVE-2026-89833}
CVE-2026-90045
- USB: gadget: ffs: fix mm lifetime handling {CVE-2026-90045}
CVE-2026-89854
- scsi: qla2xxx: Fix cs84xx use-after-free on host teardown {CVE-2026-89854}
CVE-2026-90015
- xhci: fix lost bounce buffers on TDs spanning several ring segments {CVE-2026-90015}
CVE-2026-89979
- ALSA: pcm: Fix race between non-atomic ops and trigger-start {CVE-2026-89979}
CVE-2026-89852
- scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state() {CVE-2026-89852}
CVE-2026-89861
- scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition() {CVE-2026-89861}
CVE-2026-89859
- scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak {CVE-2026-89859}
CVE-2026-90036
- NFSD: Prevent client use-after-free during blocked-lock reaping {CVE-2026-90036}
CVE-2026-89987
- mm/huge_memory: transfer the pmd dirty bit to the folio on zap {CVE-2026-89987}
CVE-2026-89799
- bpf: Disable preemption in bpf_get_stackid {CVE-2026-89799}
CVE-2026-90032
- media: usbtv: keep device alive while ALSA card exists {CVE-2026-90032}
CVE-2026-89822
- drm/i915: Guard against NULL driver_data in i915_pci_probe() {CVE-2026-89822}
CVE-2026-89929
- KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU {CVE-2026-89929}
CVE-2026-89840
- f2fs: validate MOVE_RANGE destination size {CVE-2026-89840}
CVE-2026-89913
- KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables {CVE-2026-89913} *…

Record: CLSA-2026-1791878869
Updated: 2026-11-02

OSVCLSA-2026-1791946572 No score

Fix of 198 CVEs

CVE-2024-36894
- usb: gadget: f_fs: drop the duplicate usb_ep_free_request() in ffs_user_copy_worker() {CVE-2024-36894}
CVE-2026-97447
- ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() {CVE-2026-97447}
CVE-2026-93822
- PCI: iproc: Protect root bus removal with rescan lock {CVE-2026-93822}
CVE-2026-93826
- HID: hidpp: fix potential UAF in hidpp_connect_event() {CVE-2026-93826}
CVE-2026-97954
- net/rds: fix tcp stream corruption with large pages {CVE-2026-97954}
CVE-2026-97949
- configfs: unhash the dentry before dropping the item in rmdir {CVE-2026-97949}
CVE-2026-97931
- ALSA: us122l: Prevent write upgrades for read mappings {CVE-2026-97931}
CVE-2026-97940
- ipv6: fix fib6 walker UAF on seq stop {CVE-2026-97940}
CVE-2026-97539
- usb: xusbatm: don't rely on id table pointer arithmetic {CVE-2026-97539}
CVE-2026-74510
- Bluetooth: mgmt: fix UAF in pair command cancellation {CVE-2026-74510}
CVE-2026-72084
- scsi: target: Bound PR-OUT TransportID parsing to the received buffer {CVE-2026-72084}
CVE-2026-90302
- ocfs2: synchronize heartbeat callbacks with o2net teardown {CVE-2026-90302}
CVE-2026-90320
- ocfs2: validate external xattr entries when reading metadata {CVE-2026-90320}
CVE-2026-90321
- ocfs2: validate inline xattrs during inode block validation {CVE-2026-90321}
CVE-2026-90431
- remoteproc: Prevent crash handling to race with rproc_del() {CVE-2026-90431}
CVE-2026-74637
- perf/core: Fix group leader use-after-free after sibling detach {CVE-2026-74637}
CVE-2026-74752
- sctp: validate cookie AUTH state before use {CVE-2026-74752}
CVE-2026-74387
- ALSA: seq: midi: Serialize output teardown with event_input {CVE-2026-74387}
CVE-2026-80536
- xfs: bounds-check buffer log item's dirty bitmap {CVE-2026-80536}
CVE-2026-89659
- NFSD: Prevent client use-after-free during delegation revoke {CVE-2026-89659}
CVE-2026-80576
- drm/amdgpu: reject oversized IBs with per-ring packet limits {CVE-2026-80576}
CVE-2026-90223
- nfc: llcp: bound SNL TLV parsing to the skb and add length checks {CVE-2026-90223}
CVE-2026-80994
- net: openvswitch: fix flow mask use-after-free on flow deletion {CVE-2026-80994}
CVE-2026-72398
- sctp: add INIT verification after cookie unpacking {CVE-2026-72398}
CVE-2026-74583
- net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
CVE-2026-72322
- ipv6: mcast: Fix potential UAF in MLD delayed work {CVE-2026-72322}
CVE-2026-93095
- hfsplus: validate thread record before delete key rebuild {CVE-2026-93095}
CVE-2026-72472
- nfs: use nfsi->rwsem to protect traversal of the file lock list {CVE-2026-72472}
CVE-2026-90045
- USB: gadget: ffs: fix mm lifetime handling {CVE-2026-90045}
CVE-2026-90421
- PCI: Fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-90421}
CVE-2026-64583
- usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown {CVE-2026-64583}
CVE-2026-68329
- iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() {CVE-2026-68329}
CVE-2026-89448
- iommu/vt-d: Force requesting ACS when tboot is enabled {CVE-2026-89448}
CVE-2026-64001
- ALSA: pcm: oss: Fix setup list UAF on proc write error {CVE-2026-64001}
CVE-2026-64305
- crypto: qat - protect service table iterations with service_lock {CVE-2026-64305}
CVE-2026-64348
- usb: free iso schedules on failed submit {CVE-2026-64348}
CVE-2026-64422
- net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422}
CVE-2026-90180
- block:…

Record: CLSA-2026-1791946572
Updated: 2026-11-02

OSVCLSA-2026-1792234299 No score

kernel: Fix of 76 CVEs

ipv4: validate checksum_start before completing checksum {CVE-2026-99999}
smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 {CVE-2026-89637}
smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() {CVE-2026-89633}
xen/netfront: drop RX packets with a short Ethernet header {CVE-2026-98375}
IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413}
IB/isert: reject PDUs declaring more data than was received {CVE-2026-90414}
PCI: Fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-90421}
usb: fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-93117}
HID: synchronize input before cleaning up a failed probe {CVE-2026-90329}
HID: core: quiesce input in hid_hw_stop() to prevent use-after-free {CVE-2026-93189}
ALSA: mtpav: shut down output timer before card teardown {CVE-2026-90116}
slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() {CVE-2026-90057}
ext4: fix out-of-bounds read in ext4_read_inline_dir() {CVE-2026-89786}
media: cx23885: cancel NetUP CI work before teardown {CVE-2026-89893}
scsi: target: iscsi: Reserve a terminator byte for the login payload {CVE-2026-90011}
ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() {CVE-2026-90033}
Squashfs: check block offset is not negative {CVE-2026-90203}
RDMA/mad: Fix receive buffer leak when PKey enforcement fails {CVE-2026-98354}
nfsd: validate symlink target length in NFSv4 CREATE {CVE-2026-89699}
sunrpc: route to a populated pool in svc_pool_for_cpu() {CVE-2026-89549}
isofs: fix out-of-bounds page array access on empty zisofs block {CVE-2026-89778}
dm array: validate array block headers on read {CVE-2026-89574}
nouveau/gem: reserve the bo in the info ioctl around the vma lookup {CVE-2026-89553}
iommu/vt-d: Force requesting ACS when tboot is enabled {CVE-2026-89448}
SUNRPC: always drain cache_cleaner before destroying a cache_detail {CVE-2026-89548}
SUNRPC: svcauth_gss: enforce krb5 token minimum length {CVE-2026-89550}
SUNRPC: harden gss_krb5_unwrap_v2 against short tokens {CVE-2026-89542}
slip: fix use-after-free in sl_sync() {CVE-2026-81001}
dm raid1: reserve space for NUL-terminator in build_constructor_string() {CVE-2026-89575}
net/iucv: filter frames in afiucv_hs_rcv() by ingress device {CVE-2026-81003}
netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() {CVE-2026-74569}
net: do not send ICMP/NDISC Redirects when peer allocation fails {CVE-2026-74550}
drm/vmwgfx: validate DRAW_PRIMITIVES header size before division {CVE-2026-74444}
scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer {CVE-2026-74556}
ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set {CVE-2026-74498}
vxlan: re-fetch eth header after route_shortcircuit() {CVE-2026-80681}
net: pktgen: fix proc entry use-after-free {CVE-2026-74479}
char: tlclk: fix use-after-free in tlclk_cleanup() {CVE-2026-80622}
xfs: bounds-check buffer log item's dirty bitmap {CVE-2026-80536}
s390/qeth: validate user buffer length in SNMP and ARP query ioctls {CVE-2026-80584}
configfs_lookup(): don't leave ->s_dentry dangling on failure {CVE-2026-74359}
dmaengine: Fix possible use after free {CVE-2026-72476}
Bluetooth: btusb: fix use-after-free on registration failure {CVE-2026-64471}
sctp: fix addr_wq_timer race in sctp_free_addr_wq() {CVE-2026-72383}
ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() {CVE-2026-72323}
ALSA: 6fire: Fix UAF at error handling during probe {CVE-2026-74505}
wifi: ath9k: fix OOB access from firmware tx status queue ID {CVE-2026-74408}
ALSA: firewire: isight: bound the sample count to the packet payload {CVE-2026-64483}
sctp: validate embedded address parameter length {CVE-2026-74287}
netfilter: nf_queue: do not allow packet truncation below transport header offset {CVE-2022-36946}
nvmet-rdma: handle inline…

Record: CLSA-2026-1792234299
Updated: 2026-11-02

OSVCLSA-2026-1792236238 No score

kernel: Fix of 74 CVEs

ipv4: validate checksum_start before completing checksum {CVE-2026-99999}
smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 {CVE-2026-89637}
smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() {CVE-2026-89633}
xen/netfront: drop RX packets with a short Ethernet header {CVE-2026-98375}
IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413}
IB/isert: reject PDUs declaring more data than was received {CVE-2026-90414}
PCI: Fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-90421}
usb: fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-93117}
HID: synchronize input before cleaning up a failed probe {CVE-2026-90329}
HID: core: quiesce input in hid_hw_stop() to prevent use-after-free {CVE-2026-93189}
ALSA: mtpav: shut down output timer before card teardown {CVE-2026-90116}
slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() {CVE-2026-90057}
ext4: fix out-of-bounds read in ext4_read_inline_dir() {CVE-2026-89786}
media: cx23885: cancel NetUP CI work before teardown {CVE-2026-89893}
scsi: target: iscsi: Reserve a terminator byte for the login payload {CVE-2026-90011}
ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() {CVE-2026-90033}
Squashfs: check block offset is not negative {CVE-2026-90203}
RDMA/mad: Fix receive buffer leak when PKey enforcement fails {CVE-2026-98354}
nfsd: validate symlink target length in NFSv4 CREATE {CVE-2026-89699}
sunrpc: route to a populated pool in svc_pool_for_cpu() {CVE-2026-89549}
isofs: fix out-of-bounds page array access on empty zisofs block {CVE-2026-89778}
dm array: validate array block headers on read {CVE-2026-89574}
nouveau/gem: reserve the bo in the info ioctl around the vma lookup {CVE-2026-89553}
iommu/vt-d: Force requesting ACS when tboot is enabled {CVE-2026-89448}
SUNRPC: always drain cache_cleaner before destroying a cache_detail {CVE-2026-89548}
SUNRPC: svcauth_gss: enforce krb5 token minimum length {CVE-2026-89550}
SUNRPC: harden gss_krb5_unwrap_v2 against short tokens {CVE-2026-89542}
slip: fix use-after-free in sl_sync() {CVE-2026-81001}
dm raid1: reserve space for NUL-terminator in build_constructor_string() {CVE-2026-89575}
net/iucv: filter frames in afiucv_hs_rcv() by ingress device {CVE-2026-81003}
netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() {CVE-2026-74569}
net: do not send ICMP/NDISC Redirects when peer allocation fails {CVE-2026-74550}
drm/vmwgfx: validate DRAW_PRIMITIVES header size before division {CVE-2026-74444}
scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer {CVE-2026-74556}
ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set {CVE-2026-74498}
vxlan: re-fetch eth header after route_shortcircuit() {CVE-2026-80681}
net: pktgen: fix proc entry use-after-free {CVE-2026-74479}
char: tlclk: fix use-after-free in tlclk_cleanup() {CVE-2026-80622}
xfs: bounds-check buffer log item's dirty bitmap {CVE-2026-80536}
s390/qeth: validate user buffer length in SNMP and ARP query ioctls {CVE-2026-80584}
configfs_lookup(): don't leave ->s_dentry dangling on failure {CVE-2026-74359}
dmaengine: Fix possible use after free {CVE-2026-72476}
Bluetooth: btusb: fix use-after-free on registration failure {CVE-2026-64471}
sctp: fix addr_wq_timer race in sctp_free_addr_wq() {CVE-2026-72383}
ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() {CVE-2026-72323}
ALSA: 6fire: Fix UAF at error handling during probe {CVE-2026-74505}
wifi: ath9k: fix OOB access from firmware tx status queue ID {CVE-2026-74408}
ALSA: firewire: isight: bound the sample count to the packet payload {CVE-2026-64483}
sctp: validate embedded address parameter length {CVE-2026-74287}
netfilter: nf_queue: do not allow packet truncation below transport header offset {CVE-2022-36946}
nvmet-rdma: handle inline…

Record: CLSA-2026-1792236238
Updated: 2026-11-02

OSVCLSA-2026-1792236273 No score

kernel: Fix of 76 CVEs

ipv4: validate checksum_start before completing checksum {CVE-2026-99999}
smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 {CVE-2026-89637}
smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() {CVE-2026-89633}
xen/netfront: drop RX packets with a short Ethernet header {CVE-2026-98375}
IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413}
IB/isert: reject PDUs declaring more data than was received {CVE-2026-90414}
PCI: Fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-90421}
usb: fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-93117}
HID: synchronize input before cleaning up a failed probe {CVE-2026-90329}
HID: core: quiesce input in hid_hw_stop() to prevent use-after-free {CVE-2026-93189}
ALSA: mtpav: shut down output timer before card teardown {CVE-2026-90116}
slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() {CVE-2026-90057}
ext4: fix out-of-bounds read in ext4_read_inline_dir() {CVE-2026-89786}
media: cx23885: cancel NetUP CI work before teardown {CVE-2026-89893}
scsi: target: iscsi: Reserve a terminator byte for the login payload {CVE-2026-90011}
ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() {CVE-2026-90033}
Squashfs: check block offset is not negative {CVE-2026-90203}
RDMA/mad: Fix receive buffer leak when PKey enforcement fails {CVE-2026-98354}
nfsd: validate symlink target length in NFSv4 CREATE {CVE-2026-89699}
sunrpc: route to a populated pool in svc_pool_for_cpu() {CVE-2026-89549}
isofs: fix out-of-bounds page array access on empty zisofs block {CVE-2026-89778}
dm array: validate array block headers on read {CVE-2026-89574}
nouveau/gem: reserve the bo in the info ioctl around the vma lookup {CVE-2026-89553}
iommu/vt-d: Force requesting ACS when tboot is enabled {CVE-2026-89448}
SUNRPC: always drain cache_cleaner before destroying a cache_detail {CVE-2026-89548}
SUNRPC: svcauth_gss: enforce krb5 token minimum length {CVE-2026-89550}
SUNRPC: harden gss_krb5_unwrap_v2 against short tokens {CVE-2026-89542}
slip: fix use-after-free in sl_sync() {CVE-2026-81001}
dm raid1: reserve space for NUL-terminator in build_constructor_string() {CVE-2026-89575}
net/iucv: filter frames in afiucv_hs_rcv() by ingress device {CVE-2026-81003}
netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() {CVE-2026-74569}
net: do not send ICMP/NDISC Redirects when peer allocation fails {CVE-2026-74550}
drm/vmwgfx: validate DRAW_PRIMITIVES header size before division {CVE-2026-74444}
scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer {CVE-2026-74556}
ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set {CVE-2026-74498}
vxlan: re-fetch eth header after route_shortcircuit() {CVE-2026-80681}
net: pktgen: fix proc entry use-after-free {CVE-2026-74479}
char: tlclk: fix use-after-free in tlclk_cleanup() {CVE-2026-80622}
xfs: bounds-check buffer log item's dirty bitmap {CVE-2026-80536}
s390/qeth: validate user buffer length in SNMP and ARP query ioctls {CVE-2026-80584}
configfs_lookup(): don't leave ->s_dentry dangling on failure {CVE-2026-74359}
dmaengine: Fix possible use after free {CVE-2026-72476}
Bluetooth: btusb: fix use-after-free on registration failure {CVE-2026-64471}
sctp: fix addr_wq_timer race in sctp_free_addr_wq() {CVE-2026-72383}
ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() {CVE-2026-72323}
ALSA: 6fire: Fix UAF at error handling during probe {CVE-2026-74505}
wifi: ath9k: fix OOB access from firmware tx status queue ID {CVE-2026-74408}
ALSA: firewire: isight: bound the sample count to the packet payload {CVE-2026-64483}
sctp: validate embedded address parameter length {CVE-2026-74287}
netfilter: nf_queue: do not allow packet truncation below transport header offset {CVE-2022-36946}
nvmet-rdma: handle inline…

Record: CLSA-2026-1792236273
Updated: 2026-11-02

OSVCLSA-2026-1792750763 No score

kernel: Fix of 91 CVEs

net: skbuff: propagate shared-frag marker in skb_zerocopy()
net: bridge: stop fast-leave after deleting a port group {CVE-2026-74480}
net: ipv6: clear suppressed fib6 rule result {CVE-2026-74581}
net/sched: fix pedit partial COW leading to page cache corruption {CVE-2026-46331}
ipvs: do not propagate one-packet flag to synced conns {CVE-2026-80714}
net: skbuff: propagate shared-frag marker through frag-transfer helpers {CVE-2026-43503}
smb: client: harden POSIX SID length parsing {CVE-2026-64380}
RDMA: Fix use-after-free in rxe_queue_cleanup {CVE-2021-47616}
nfsd: validate symlink target length in NFSv4 CREATE {CVE-2026-89699}
sctp: fix addr_wq_timer race in sctp_free_addr_wq() {CVE-2026-72383}
isofs: fix out-of-bounds page array access on empty zisofs block {CVE-2026-89778}
configfs: unhash the dentry before dropping the item in rmdir {CVE-2026-97949}
netfilter: ipset: fix race between dump and ip_set_list resize {CVE-2026-64189}
netfilter: conntrack_irc: fix possible out-of-bounds read {CVE-2026-53268}
ipvs: clear the svc scheduler ptr early on edit {CVE-2026-53270}
netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920}
media: cx23885: cancel NetUP CI work before teardown {CVE-2026-89893}
dmaengine: Fix possible use after free {CVE-2026-72476}
net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring {CVE-2026-64047}
tipc: prevent snt_unacked underflow on CONN_ACK {CVE-2026-74282}
xfrm: hold net_device reference under RCU in bundle creation {CVE-2026-98364}
xfrm: Check for underflow in xfrm_state_mtu {CVE-2026-64009}
net: mpls: clear inner_protocol when the last label is popped {CVE-2026-97612}
net: guard timestamp cmsgs to real error queue skbs {CVE-2026-53223}
thunderbolt: Bound root directory content to block size {CVE-2026-53149}
SUNRPC: always drain cache_cleaner before destroying a cache_detail {CVE-2026-89548}
SUNRPC: harden gss_krb5_unwrap_v2 against short tokens {CVE-2026-89542}
SUNRPC: svcauth_gss: enforce krb5 token minimum length {CVE-2026-89550}
SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 {CVE-2026-89537}
SUNRPC: make sure cache entry active before cache_show {CVE-2024-53174}
ipv6: fix fib6 walker UAF on seq stop {CVE-2026-97940}
ipv6: sr: restore network header before routing and forwarding {CVE-2026-98096}
ipv6: sit: reload inner IPv6 header after GSO offloads {CVE-2026-53228}
ipv6: mcast: Fix use-after-free when processing MLD queries {CVE-2026-53275}
ipv6: exthdrs: refresh nh after handling HAO option {CVE-2026-63922}
ip6_gre: Use cached t->net in ip6erspan_changelink(). {CVE-2026-46120}
ipv6: fix possible UAF in icmpv6_rcv() {CVE-2026-53006}
ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() {CVE-2026-64002}
Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count {CVE-2026-64276}
ACPICA: Add validation for node in acpi_ns_build_normalized_path() {CVE-2026-97448}
scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() {CVE-2026-46149}
usb: xusbatm: don't rely on id table pointer arithmetic {CVE-2026-97539}
USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() {CVE-2026-53195}
mrp: introduce active flags to prevent UAF when applicant uninit {CVE-2022-50697}
HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature {CVE-2026-89729}
net/sched: defer qdisc freeing after failed creation {CVE-2026-98017}
Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp {CVE-2026-53071}
Bluetooth: L2CAP: Fix invalid access if ECRED Reconfigure fails {CVE-2026-53071}
scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation {CVE-2026-89856}
drm: fix race between partial drm_dev_register() failure and ioctl {CVE-2026-89823}
drm/amd/pm: bound pp_dpm_set_pp_table() memcpy {CVE-2026-97427}
dm log: fix out-of-bounds write due to region_count overflow {CVE-2026-53059} -…

Record: CLSA-2026-1792750763
Updated: 2026-11-02

OSVCLSA-2026-1792762308 No score

kernel: Fix of 128 CVEs

net: skbuff: propagate shared-frag marker in skb_zerocopy()
net: bridge: stop fast-leave after deleting a port group {CVE-2026-74480}
net: ipv6: clear suppressed fib6 rule result {CVE-2026-74581}
net: skbuff: propagate shared-frag marker through frag-transfer helpers {CVE-2026-43503}
ALSA: virtio: reset device before deleting virtqueues {CVE-2026-98264}
ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() {CVE-2026-90033}
ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set {CVE-2026-74498}
ALSA: caiaq: Fix potential double-free at error path {CVE-2026-98066}
ASoC: Intel: avs: Disable periods-elapsed work when closing PCM {CVE-2025-40344}
ALSA: timer: drain a slave's callback before its master detaches it {CVE-2026-68201}
ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams {CVE-2026-53242}
ALSA: seq: midi: Serialize output teardown with event_input {CVE-2026-74387}
security/keys: fix missed RCU read section on lookup {CVE-2026-64015}
SUNRPC: harden gss_krb5_unwrap_v2 against short tokens {CVE-2026-89542}
sctp: fix err_chunk memory leaks in INIT handling {CVE-2026-72413}
netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() {CVE-2026-98077}
netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() {CVE-2026-74569}
mm/hugetlb: fix list corruption in allocate_file_region_entries() {CVE-2026-74518}
rcu: Fix rcu_read_unlock() deadloop due to softirq {CVE-2026-45957}
bpf: Fix potential UAF in bpf_netns_link_update_prog {CVE-2026-90393}
bpf: Fix use-after-free in offloaded map/prog info fill {CVE-2026-53089}
NFSv4.2: fix LAYOUTSTATS send buffer exhaustion {CVE-2026-90103}
uio: Fix stale info pointer in failed registration path {CVE-2026-93054}
tty: clear cdev pointer after cdev_add() failure {CVE-2026-90334}
tty: skip cdev_del() when no cdev is registered {CVE-2026-90335}
scsi: qla2xxx: Avoid double completion in async IOCB timeout {CVE-2026-89847}
scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue {CVE-2025-37861}
scsi: csiostor: Fix dereference of null pointer rn {CVE-2026-45857}
scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write {CVE-2026-74470}
wifi: brcmsmac: fix UAF in brcms_free_timer() {CVE-2026-98196}
wifi: mwifiex: validate scan response extents {CVE-2026-98185}
wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length {CVE-2026-90382}
wifi: iwlwifi: mvm: add a check on the tid coming from the firmware {CVE-2026-93791}
wifi: ath9k: fix OOB access from firmware tx status queue ID {CVE-2026-74408}
net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow {CVE-2026-98025}
net: thunderbolt: Fix frags[] overflow by bounding frame_count {CVE-2026-72157}
net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put {CVE-2026-98015}
net: stmmac: xgmac2: disable RBUE in default RX interrupt mask {CVE-2026-93830}
net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list {CVE-2026-53230}
xen/netfront: drop RX packets with a short Ethernet header {CVE-2026-98375}
veth: fix NAPI leak in XDP enable error path {CVE-2026-80613}
RDMA/rxe: Fix double free in rxe_srq_from_init {CVE-2026-45852}
RDMA/iwcm: Fix workqueue list corruption by removing work_list {CVE-2026-45898}
ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control {CVE-2026-72261}
svcrdma: Fix offset arithmetic in read_chunk_range {CVE-2026-89533}
SUNRPC: svcauth_gss: enforce krb5 token minimum length {CVE-2026-89550}
xprtrdma: Fix ep kref imbalance on ADDR_CHANGE {CVE-2026-72469}
sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START {CVE-2026-98130}
sctp: drop a chunk if its transport was removed {CVE-2026-89478}
sctp: prevent peer transport count overflow {CVE-2026-74469}
sctp: validate embedded address parameter length {CVE-2026-74287}
sctp: revalidate list cursor after…

Record: CLSA-2026-1792762308
Updated: 2026-11-02

OSVMGASA-2026-0506 No score

Updated kernel, drakx-installer-images, kmod-nvidia-current-wopengpu, kmod-xtables-addons & kmod-virtualbox packages fix Security Vulnerabilities

Upstream kernel 6.18.55 version fixes bugs and vulnerabilities. The kmod-xtables-addons, kmod-virtualbox, kmod-nvidia-current-wopengpu & drakx-installer-images packages have been updated to work with this new kernel.

Record: MGASA-2026-0506
Updated: 2026-11-02

OSVMGASA-2026-0542 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.18.55 fixes vulnerabilities. For information about the vulnerabilities see the links.

Record: MGASA-2026-0542
Updated: 2026-11-02

OSVopenSUSE-SU-2026:11880-1 No score

kernel-devel-7.2.7-1.1 on GA media

These are all security issues fixed in the kernel-devel-7.2.7-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:11880-1
Updated: 2026-11-02

OSVopenSUSE-SU-2026:22091-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340).
CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock (bsc#1258335).
CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
CVE-2026-43210: tracing: ring-buffer: Fix to check event length before using (bsc#1264330).
CVE-2026-43272: ring-buffer: Fix possible dereference of uninitialized pointer (bsc#1264607).
CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
CVE-2026-46272: coresight: tmc-etr: Fix race condition between sysfs and perf mode (bsc#1267672).
CVE-2026-53377: drm/msm: always recover the gpu (bsc#1271901).
CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
CVE-2026-63838: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] (bsc#1272388).
CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).
CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
CVE-2026-64132: ipv6: ioam: refresh hdr pointer before ioam6_event() (bsc#1272347).
CVE-2026-64154: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() (bsc#1271950).
CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
CVE-2026-64216: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (bsc#1272802).
CVE-2026-64235: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines (bsc#1272803).
CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970).
CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).
CVE-2026-64377: cpufreq: qcom-cpufreq-hw: Fix possible double free (bsc#1273297).
CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).
CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).
CVE-2026-64405: Bluetooth: separate CIS_LINK and BIS_LINK link types (bsc#1273512).
CVE-2026-64414: netfilter: handle unreadable frags (bsc#1273275).
CVE-2026-64418: mm: shrinker: fix shrinker_info teardown race with expansion (bsc#1273784).
CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).
CVE-2026-64457: virtio_pci: fix vq info pointer lookup via wrong index (bsc#1273491).
CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320).
CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).
CVE-2026-64475: vfio/pci: Release the…

Record: openSUSE-SU-2026:22091-1
Updated: 2026-11-02

OSVSUSE-SU-2026:24179-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340).
CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock (bsc#1258335).
CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
CVE-2026-43210: tracing: ring-buffer: Fix to check event length before using (bsc#1264330).
CVE-2026-43272: ring-buffer: Fix possible dereference of uninitialized pointer (bsc#1264607).
CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
CVE-2026-46272: coresight: tmc-etr: Fix race condition between sysfs and perf mode (bsc#1267672).
CVE-2026-53377: drm/msm: always recover the gpu (bsc#1271901).
CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
CVE-2026-63838: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] (bsc#1272388).
CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).
CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
CVE-2026-64132: ipv6: ioam: refresh hdr pointer before ioam6_event() (bsc#1272347).
CVE-2026-64154: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() (bsc#1271950).
CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
CVE-2026-64216: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (bsc#1272802).
CVE-2026-64235: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines (bsc#1272803).
CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970).
CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).
CVE-2026-64377: cpufreq: qcom-cpufreq-hw: Fix possible double free (bsc#1273297).
CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).
CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).
CVE-2026-64405: Bluetooth: separate CIS_LINK and BIS_LINK link types (bsc#1273512).
CVE-2026-64414: netfilter: handle unreadable frags (bsc#1273275).
CVE-2026-64418: mm: shrinker: fix shrinker_info teardown race with expansion (bsc#1273784).
CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).
CVE-2026-64457: virtio_pci: fix vq info pointer lookup via wrong index (bsc#1273491).
CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320).
CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).
CVE-2026-64475: vfio/pci: Release the…

Record: SUSE-SU-2026:24179-1
Updated: 2026-11-02

OSVSUSE-SU-2026:24181-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298).
CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017).
CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870).
CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).
CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420). -…

Record: SUSE-SU-2026:24181-1
Updated: 2026-11-02

OSVSUSE-SU-2026:24182-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298).
CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017).
CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
CVE-2026-53090: bpf: Fix ld_{abs,ind} failure path analysis in subprogs (bsc#1269532).
CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1271955).
CVE-2026-68162: sctp: avoid auth_enable sysctl UAF during netns teardown (bsc#1274920).
CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277).
CVE-2026-72084: scsi: target: Bound PR-OUT TransportID parsing to the received buffer (bsc#1275540).
CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
CVE-2026-64279: i2c:…

Record: SUSE-SU-2026:24182-1
Updated: 2026-11-02

OSVSUSE-SU-2026:24184-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340).
CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock (bsc#1258335).
CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
CVE-2026-43210: tracing: ring-buffer: Fix to check event length before using (bsc#1264330).
CVE-2026-43272: ring-buffer: Fix possible dereference of uninitialized pointer (bsc#1264607).
CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
CVE-2026-46272: coresight: tmc-etr: Fix race condition between sysfs and perf mode (bsc#1267672).
CVE-2026-53377: drm/msm: always recover the gpu (bsc#1271901).
CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
CVE-2026-63838: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] (bsc#1272388).
CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).
CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
CVE-2026-64132: ipv6: ioam: refresh hdr pointer before ioam6_event() (bsc#1272347).
CVE-2026-64154: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() (bsc#1271950).
CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
CVE-2026-64216: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (bsc#1272802).
CVE-2026-64235: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines (bsc#1272803).
CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970).
CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).
CVE-2026-64377: cpufreq: qcom-cpufreq-hw: Fix possible double free (bsc#1273297).
CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).
CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).
CVE-2026-64405: Bluetooth: separate CIS_LINK and BIS_LINK link types (bsc#1273512).
CVE-2026-64414: netfilter: handle unreadable frags (bsc#1273275).
CVE-2026-64418: mm: shrinker: fix shrinker_info teardown race with expansion (bsc#1273784).
CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).
CVE-2026-64457: virtio_pci: fix vq info pointer lookup via wrong index (bsc#1273491).
CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320).
CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).
CVE-2026-64475: vfio/pci: Release the…

Record: SUSE-SU-2026:24184-1
Updated: 2026-11-02

OSVSUSE-SU-2026:24197-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340).
CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock (bsc#1258335).
CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
CVE-2026-43210: tracing: ring-buffer: Fix to check event length before using (bsc#1264330).
CVE-2026-43272: ring-buffer: Fix possible dereference of uninitialized pointer (bsc#1264607).
CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
CVE-2026-46272: coresight: tmc-etr: Fix race condition between sysfs and perf mode (bsc#1267672).
CVE-2026-53377: drm/msm: always recover the gpu (bsc#1271901).
CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
CVE-2026-63838: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] (bsc#1272388).
CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).
CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
CVE-2026-64132: ipv6: ioam: refresh hdr pointer before ioam6_event() (bsc#1272347).
CVE-2026-64154: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() (bsc#1271950).
CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
CVE-2026-64216: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (bsc#1272802).
CVE-2026-64235: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines (bsc#1272803).
CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970).
CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).
CVE-2026-64377: cpufreq: qcom-cpufreq-hw: Fix possible double free (bsc#1273297).
CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).
CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).
CVE-2026-64405: Bluetooth: separate CIS_LINK and BIS_LINK link types (bsc#1273512).
CVE-2026-64414: netfilter: handle unreadable frags (bsc#1273275).
CVE-2026-64418: mm: shrinker: fix shrinker_info teardown race with expansion (bsc#1273784).
CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).
CVE-2026-64457: virtio_pci: fix vq info pointer lookup via wrong index (bsc#1273491).
CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320).
CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).
CVE-2026-64475: vfio/pci: Release the…

Record: SUSE-SU-2026:24197-1
Updated: 2026-11-02

OSVSUSE-SU-2026:24235-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340).
CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock (bsc#1258335).
CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
CVE-2026-43210: tracing: ring-buffer: Fix to check event length before using (bsc#1264330).
CVE-2026-43272: ring-buffer: Fix possible dereference of uninitialized pointer (bsc#1264607).
CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
CVE-2026-46272: coresight: tmc-etr: Fix race condition between sysfs and perf mode (bsc#1267672).
CVE-2026-53377: drm/msm: always recover the gpu (bsc#1271901).
CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
CVE-2026-63838: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] (bsc#1272388).
CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).
CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
CVE-2026-64132: ipv6: ioam: refresh hdr pointer before ioam6_event() (bsc#1272347).
CVE-2026-64154: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() (bsc#1271950).
CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
CVE-2026-64216: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (bsc#1272802).
CVE-2026-64235: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines (bsc#1272803).
CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970).
CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).
CVE-2026-64377: cpufreq: qcom-cpufreq-hw: Fix possible double free (bsc#1273297).
CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).
CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).
CVE-2026-64405: Bluetooth: separate CIS_LINK and BIS_LINK link types (bsc#1273512).
CVE-2026-64414: netfilter: handle unreadable frags (bsc#1273275).
CVE-2026-64418: mm: shrinker: fix shrinker_info teardown race with expansion (bsc#1273784).
CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).
CVE-2026-64457: virtio_pci: fix vq info pointer lookup via wrong index (bsc#1273491).
CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320).
CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).
CVE-2026-64475: vfio/pci: Release the…

Record: SUSE-SU-2026:24235-1
Updated: 2026-11-02

OSVSUSE-SU-2026:24315-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298).
CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017).
CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870).
CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).
CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420). -…

Record: SUSE-SU-2026:24315-1
Updated: 2026-11-02

OSVSUSE-SU-2026:24316-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298).
CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017).
CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
CVE-2026-53090: bpf: Fix ld_{abs,ind} failure path analysis in subprogs (bsc#1269532).
CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1271955).
CVE-2026-68162: sctp: avoid auth_enable sysctl UAF during netns teardown (bsc#1274920).
CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277).
CVE-2026-72084: scsi: target: Bound PR-OUT TransportID parsing to the received buffer (bsc#1275540).
CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
CVE-2026-64279: i2c:…

Record: SUSE-SU-2026:24316-1
Updated: 2026-11-02

OSVSUSE-SU-2026:4640-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
CVE-2026-63987: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES (bsc#1272971).
CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870).
CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).
CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420).
CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).
CVE-2026-64373: cpufreq: Fix hotplug-suspend race during…

Record: SUSE-SU-2026:4640-1
Updated: 2026-11-02

OSVSUSE-SU-2026:4660-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
CVE-2026-53266: netfilter: bridge: make ebt_snat ARP rewrite writable (bsc#1269136).
CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1271955).
CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).
CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420).
CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251).
CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).
CVE-2026-68162: sctp: avoid auth_enable sysctl UAF during netns teardown (bsc#1274920).
CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977).
CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).
CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277).
CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).
CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).
CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388).
CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801).
CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803).
CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814).
CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818).
CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821).
CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249).
CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).
CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).
CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).
CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574).
CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544).
CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553).
CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).
CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985).
CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).
CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).
CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).
CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381).
CVE-2026-72399: net: enetc: check the number of BDs needed for xdp_frame (bsc#1276553).
CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).
CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108).
CVE-2026-74267: net/sched: sch_codel: Do not call…

Record: SUSE-SU-2026:4660-1
Updated: 2026-11-02

OSVSUSE-SU-2026:4706-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
CVE-2026-63987: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES (bsc#1272971).
CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870).
CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).
CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420).
CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).
CVE-2026-64373: cpufreq: Fix hotplug-suspend race during…

Record: SUSE-SU-2026:4706-1
Updated: 2026-11-02

OSVSUSE-SU-2026:4892-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2023-54158: btrfs: don't free qgroup space unless specified (bsc#1256076).
CVE-2023-54180: btrfs: handle case when repair happens with dev-replace (bsc#1255995).
CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
CVE-2026-63948: Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn (bsc#1272670).
CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
CVE-2026-64456: hwrng: virtio: clamp device-reported used.len at copy_data() (bsc#1273288).
CVE-2026-64593: btrfs: do not trim a device which is not writeable (bsc#1274497).
CVE-2026-68106: drm/amdgpu: fix division by zero with invalid uvd dimensions (bsc#1274853).
CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
CVE-2026-68236: drm/amd/display: set new_stream to NULL after release (bsc#1275659).
CVE-2026-68303: drm/vc4: hvs/v3d: Fix null dereference in unbind (bsc#1275080).
CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
CVE-2026-68430: drm/amdgpu/gfx8: drop unecessary BUG_ON() (bsc#1276273).
CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
CVE-2026-72319: ipvs: ensure inner headers in ICMP errors are in headroom (bsc#1275964).
CVE-2026-72476: dmaengine: Fix possible use after free (bsc#1276844).
CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
CVE-2026-74408: wifi: ath9k: fix OOB access from firmware tx status queue ID (bsc#1276387).
CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894).
CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889).
CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310).
CVE-2026-74675: vt: stabilize tty reference in kbd_keycode with tty_port_tty_get (bsc#1278313).
CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259).
CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).
CVE-2026-89726: lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen() (bsc#1281058).
CVE-2026-89778: isofs: fix out-of-bounds page array access on empty zisofs block (bsc#1280966).
CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819).
CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280).
CVE-2026-90283: hugetlbfs: release subpool on fill_super failure (bsc#1281771).
CVE-2026-93252: ocfs2: make ocfs2_set_acl() static (bsc#1282784).
CVE-2026-93287: i2c: smbus: reject oversized block transfers in the common path (bsc#1282744).
CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808).
CVE-2026-93820: PCI: rockchip: Protect root bus removal with rescan lock (bsc#1282755).
CVE-2026-93822: PCI: iproc: Protect root bus removal with rescan lock (bsc#1282762).
CVE-2026-97416: btrfs: balance: fix potential…

Record: SUSE-SU-2026:4892-1
Updated: 2026-11-02

OSVSUSE-SU-2026:4933-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).
CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280).
CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684).

The following non security issues were fixed:

ACPI, APEI, EINJ: Subtract any matching Register Region from Trigger resources (git-fixes).
ACPI: sysfs: Fix a buffer overrun problem with description_show() (git-fixes).
PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes).
PCI: PM: Fix pci_power_up() (git-fixes).

Record: SUSE-SU-2026:4933-1
Updated: 2026-11-02

OSVSUSE-SU-2026:4936-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
CVE-2026-74624: netfilter: conntrack: work around exceeded receive window (bsc#1277599).
CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259).
CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743).
CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).
CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251).
CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280).
CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397).
CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851).
CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946).
CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963).
CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894).
CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064).
CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835).
CVE-2026-98248: arm64: Use load LSE atomics for the non-return per-CPU atomic operations (bsc#1284518).
CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790).
CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408).
CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713).
CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791).
CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746).
CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685).
CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684).

The following non security issues were fixed:

kernel-binary.spec.in: Emulate kabi.pl error when suse-kabi-tools is used.
netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684).

Record: SUSE-SU-2026:4936-1
Updated: 2026-11-02

OSVSUSE-SU-2026:4937-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2024-39468: smb: client: fix deadlock in smb2_find_smb_tcon() (bsc#1227103 bsc#1280176).
CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
CVE-2026-74624: netfilter: conntrack: work around exceeded receive window (bsc#1277599).
CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259).
CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743).
CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).
CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251).
CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280).
CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397).
CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851).
CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946).
CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963).
CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894).
CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064).
CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835).
CVE-2026-98248: arm64: Use load LSE atomics for the non-return per-CPU atomic operations (bsc#1284518).
CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790).
CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408).
CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713).
CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791).
CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746).
CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685).
CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684).

Record: SUSE-SU-2026:4937-1
Updated: 2026-11-02

OSVSUSE-SU-2026:4938-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
CVE-2026-74624: netfilter: conntrack: work around exceeded receive window (bsc#1277599).
CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259).
CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743).
CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).
CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251).
CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280).
CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397).
CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851).
CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946).
CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963).
CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894).
CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064).
CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835).
CVE-2026-98248: arm64: Use load LSE atomics for the non-return per-CPU atomic operations (bsc#1284518).
CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790).
CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408).
CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713).
CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791).
CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746).
CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685).
CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684).

The following non security issue was fixed:

netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684).

Record: SUSE-SU-2026:4938-1
Updated: 2026-11-02

OSVSUSE-SU-2026:4939-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2024-39468: smb: client: fix deadlock in smb2_find_smb_tcon() (bsc#1227103, bsc#1280176).
CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
CVE-2026-74624: netfilter: conntrack: work around exceeded receive window (bsc#1277599).
CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259).
CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743).
CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).
CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251).
CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280).
CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397).
CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851).
CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946).
CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963).
CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894).
CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064).
CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835).
CVE-2026-98248: arm64: Use load LSE atomics for the non-return per-CPU atomic operations (bsc#1284518).
CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790).
CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408).
CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713).
CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791).
CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746).
CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685).
CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684).

The following non security issue was fixed:

netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684).

Record: SUSE-SU-2026:4939-1
Updated: 2026-11-02

OSVUSN-8959-1 No score

linux, linux-aws, linux-gcp, linux-hwe-7.0, linux-ibm, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

USB Gadget drivers;
Memory management;
Multiple devices driver;
ARM64 architecture;
EROFS file system;
Networking core;
eXpress Data Path;
ARM32 architecture;
M68K architecture;
MIPS architecture;
OpenRISC architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
Intel NPU Driver;
Speakup Console Speech Driver;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
Auxiliary display drivers;
Drivers core;
Micron PCIe SSD driver;
Null block device driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
AMD CDX bus driver;
Hardware random number generator core;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
CPU frequency scaling framework;
CPU idle management framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
DAX dirext access to differentiated memory framework;
DIBS (Direct Internal Buffer Sharing) drivers;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
FireWire subsystem;
ARM SCMI message protocol;
ARM SCPI message protocol;
Google firmware drivers;
Qualcomm firmware drivers;
FPGA Framework;
GPIO subsystem;
GPU drivers;
HID subsystem;
HSI subsystem;
Microsoft Hyper-V drivers;
Hardware monitoring drivers;
CoreSight HW tracing drivers;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
Input Device (Mouse) drivers;
On-Chip Interconnect management framework;
IOMMU subsystem;
Industry Pack bus drivers;
IRQ chip drivers;
Mailbox framework;
Media drivers;
MemoryStick subsystem;
Multifunction device drivers;
Analog Devices digital potentiometer driver;
Broadcom VK accelerator driver;
Fastrpc Driver;
Amazon Nitro Secure Module driver;
SGI GRU driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Texas Instruments network drivers;
MediaTek network drivers;
Near Field Communication (NFC) drivers;
NTB driver;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
Device tree and open firmware driver;
Operating Performance Points (OPP) driver;
PA-RISC drivers;
PCI subsystem;
Performance monitor drivers;
PHY drivers;
Pin controllers subsystem;
Chrome hardware platform drivers;
Mellanox platform drivers;
Microsoft Surface platform drivers;
x86 platform drivers;
MediaTek PM domains;
Power sequencing drivers;
Power supply drivers;
Powercap sysfs driver;
PTP clock framework;
PWM drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
MPAM driver;
RPMSG subsystem;
Real Time Clock drivers;
S/390 drivers;
SCSI subsystem;
ASPEED SoC drivers;
Samsung SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thermal drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Userspace I/O drivers;
USB DSL drivers;
Cypress C67X00 USB…

Record: USN-8959-1
Updated: 2026-11-05

OSVUSN-8960-1 No score

linux-oem-7.0 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

USB Gadget drivers;
Memory management;
Multiple devices driver;
ARM64 architecture;
EROFS file system;
Networking core;
eXpress Data Path;
ARM32 architecture;
M68K architecture;
MIPS architecture;
OpenRISC architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
Intel NPU Driver;
Speakup Console Speech Driver;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
Auxiliary display drivers;
Drivers core;
Micron PCIe SSD driver;
Null block device driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
AMD CDX bus driver;
Hardware random number generator core;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
CPU frequency scaling framework;
CPU idle management framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
DAX dirext access to differentiated memory framework;
DIBS (Direct Internal Buffer Sharing) drivers;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
FireWire subsystem;
ARM SCMI message protocol;
ARM SCPI message protocol;
Google firmware drivers;
Qualcomm firmware drivers;
FPGA Framework;
GPIO subsystem;
GPU drivers;
HID subsystem;
HSI subsystem;
Microsoft Hyper-V drivers;
Hardware monitoring drivers;
CoreSight HW tracing drivers;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
Input Device (Mouse) drivers;
On-Chip Interconnect management framework;
IOMMU subsystem;
Industry Pack bus drivers;
IRQ chip drivers;
Mailbox framework;
Media drivers;
MemoryStick subsystem;
Multifunction device drivers;
Analog Devices digital potentiometer driver;
Broadcom VK accelerator driver;
Fastrpc Driver;
Amazon Nitro Secure Module driver;
SGI GRU driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Texas Instruments network drivers;
MediaTek network drivers;
Near Field Communication (NFC) drivers;
NTB driver;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
Device tree and open firmware driver;
Operating Performance Points (OPP) driver;
PA-RISC drivers;
PCI subsystem;
Performance monitor drivers;
PHY drivers;
Pin controllers subsystem;
Chrome hardware platform drivers;
Mellanox platform drivers;
Microsoft Surface platform drivers;
x86 platform drivers;
MediaTek PM domains;
Power sequencing drivers;
Power supply drivers;
Powercap sysfs driver;
PTP clock framework;
PWM drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
MPAM driver;
RPMSG subsystem;
Real Time Clock drivers;
S/390 drivers;
SCSI subsystem;
ASPEED SoC drivers;
Samsung SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thermal drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Userspace I/O drivers;
USB DSL drivers;
Cypress C67X00 USB…

Record: USN-8960-1
Updated: 2026-11-05

OSVUSN-8961-1 No score

linux, linux-aws, linux-aws-5.15, linux-aws-fips, linux-azure, linux-azure-5.15, linux-azure-fde-5.15, linux-azure-fips, linux-fips, linux-gcp, linux-gcp-5.15, linux-gcp-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iot-realtime, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15, linux-realtime vulnerabilities

Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol implementation in the Linux kernel, leading to use-after-free vulnerabilities. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-1205)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

USB Gadget drivers;
Networking core;
ARM32 architecture;
ARM64 architecture;
OpenRISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Speakup Console Speech Driver;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
Auxiliary display drivers;
Drivers core;
Bluetooth drivers;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
ARM SCMI message protocol;
ARM SCPI message protocol;
Google firmware drivers;
FPGA Framework;
GPIO subsystem;
GPU drivers;
HID subsystem;
HSI subsystem;
Hardware monitoring drivers;
CoreSight HW tracing drivers;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
Input Device (Mouse) drivers;
On-Chip Interconnect management framework;
IOMMU subsystem;
IRQ chip drivers;
Multiple devices driver;
Media drivers;
Analog Devices digital potentiometer driver;
Broadcom VK accelerator driver;
Fastrpc Driver;
MMC subsystem;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Texas Instruments network drivers;
MediaTek network drivers;
Near Field Communication (NFC) drivers;
NTB driver;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
Device tree and open firmware driver;
PA-RISC drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
Chrome hardware platform drivers;
Mellanox platform drivers;
Microsoft Surface platform drivers;
x86 platform drivers;
Power supply drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
RPMSG subsystem;
Real Time Clock drivers;
S/390 drivers;
SCSI subsystem;
SPI subsystem;
small TFT LCD display modules;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
TCM subsystem;
Thermal drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
Userspace I/O drivers;
USB DSL drivers;
Cypress C67X00 USB driver;
USB core drivers;
USB Host Controller drivers;
Mustek MDC800 USB digital camera driver;
USB Serial drivers;
USB Mass Storage drivers;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
vDPA drivers;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
W1 Dallas's 1-wire bus driver;
Watchdog drivers;
Xen hypervisor drivers;
9P distributed file system;
File systems infrastructure;
BFS file system;
BTRFS file system;
Ceph distributed file system;
eCrypt file system;
EROFS file system;
Ext4 file system;
F2FS file system;
FAT file system;
FUSE (File system in Userspace);
HFS+ file system;
HugeTLB file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
File system notification infrastructure;
NTFS3 file system;
OCFS2 file system; …

Record: USN-8961-1
Updated: 2026-11-06

OSVUSN-8962-1 No score

linux-azure-fde vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

USB Gadget drivers;
ARM32 architecture;
ARM64 architecture;
OpenRISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Speakup Console Speech Driver;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
Auxiliary display drivers;
Drivers core;
Bluetooth drivers;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
DMA engine subsystem;
EDAC drivers;
Google firmware drivers;
FPGA Framework;
GPIO subsystem;
GPU drivers;
HID subsystem;
HSI subsystem;
Hardware monitoring drivers;
CoreSight HW tracing drivers;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
On-Chip Interconnect management framework;
IOMMU subsystem;
IRQ chip drivers;
Multiple devices driver;
Media drivers;
Analog Devices digital potentiometer driver;
Broadcom VK accelerator driver;
Fastrpc Driver;
MMC subsystem;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
MediaTek network drivers;
Near Field Communication (NFC) drivers;
NTB driver;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
Device tree and open firmware driver;
PA-RISC drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
Chrome hardware platform drivers;
Mellanox platform drivers;
Microsoft Surface platform drivers;
x86 platform drivers;
Power supply drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
RPMSG subsystem;
Real Time Clock drivers;
S/390 drivers;
SCSI subsystem;
SPI subsystem;
small TFT LCD display modules;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
TCM subsystem;
Thermal drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
Userspace I/O drivers;
USB DSL drivers;
Cypress C67X00 USB driver;
USB core drivers;
USB Host Controller drivers;
Mustek MDC800 USB digital camera driver;
USB Serial drivers;
USB Mass Storage drivers;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
vDPA drivers;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
W1 Dallas's 1-wire bus driver;
Watchdog drivers;
File systems infrastructure;
BFS file system;
BTRFS file system;
Ceph distributed file system;
eCrypt file system;
EROFS file system;
Ext4 file system;
F2FS file system;
FAT file system;
FUSE (File system in Userspace);
HFS+ file system;
HugeTLB file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
File system notification infrastructure;
NTFS3 file system;
OCFS2 file system;
OrangeFS file system;
SMB network file system;
SquashFS file system;
UBI file system;
UDF file system;
XFS file system;
BPF subsystem;
IPv4 networking;
Internal shared memory driver;
Networking core;
Scheduler infrastructure;
Sun RPC protocol;
Virtio network driver;
Amateur Radio drivers;
IP tunnels definitions;
Network…

Record: USN-8962-1
Updated: 2026-11-06

OSVUSN-8963-1 No score

linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-nvidia-tegra-igx vulnerabilities

It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

USB Gadget drivers;
Networking core;
User-space API (UAPI);
ARM32 architecture;
ARM64 architecture;
MIPS architecture;
OpenRISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Speakup Console Speech Driver;
ACPI drivers;
Android drivers;
Serial ATA and Parallel ATA drivers;
Auxiliary display drivers;
Drivers core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
Bluetooth drivers;
Cdrom driver;
Character device driver;
Hardware random number generator core;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
DAX dirext access to differentiated memory framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
FireWire subsystem;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
ARM SCPI message protocol;
Google firmware drivers;
Intel Stratix 10 firmware drivers;
FPGA Framework;
GPIO subsystem;
GPU drivers;
HID subsystem;
HSI subsystem;
Hardware monitoring drivers;
CoreSight HW tracing drivers;
Intel Trace Hub HW tracing drivers;
I2C subsystem;
I3C subsystem;
IIO subsystem;
IIO ADC drivers;
IIO Magnetometer sensors drivers;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
Input Device (Mouse) drivers;
On-Chip Interconnect management framework;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Multiple devices driver;
Media drivers;
MemoryStick subsystem;
Multifunction device drivers;
Analog Devices digital potentiometer driver;
Broadcom VK accelerator driver;
Fastrpc Driver;
MMC subsystem;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Texas Instruments network drivers;
MediaTek network drivers;
Near Field Communication (NFC) drivers;
NTB driver;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
Device tree and open firmware driver;
PA-RISC drivers;
Parport drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
Chrome hardware platform drivers;
Mellanox platform drivers;
Microsoft Surface platform drivers;
x86 platform drivers;
Generic PM domains;
System reset/shutdown drivers;
Power supply drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
Reset controller framework;
RPMSG subsystem;
Real Time Clock drivers;
S/390 drivers;
SCSI subsystem;
SLIMbus drivers;
SPI subsystem;
small TFT LCD display modules;
Greybus lights staging drivers;
Media staging drivers;
Media Oriented Systems Transport (MOST) driver;
NVIDIA Tegra embedded controller (NVEC)…

Record: USN-8963-1
Updated: 2026-11-06

Affected products

linux

Affected packages

Affected packages
Package	Affected	Fixed
`kernel` Azure Linux:3	before 6.6.157.1-1	6.6.157.1-1
`linux-lts` Alpaquita:23	6.1.182-r0 up to 6.1.189-r0	6.1.189-r0
`linux-lts` Alpaquita:25	6.12.103-r0 up to 6.12.111-r0	6.12.111-r0
`linux-lts` Alpaquita:stream	6.18.46-r0 up to 6.18.53-r0	6.18.53-r0
`bpftool` TuxCare:CentOS-Stream:8 From an advisory covering 72 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els31	4.18.0-553.6.1.el8_10.tuxcare.els31
`kernel` TuxCare:CentOS-Stream:8 From an advisory covering 72 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els31	4.18.0-553.6.1.el8_10.tuxcare.els31
`kernel-core` TuxCare:CentOS-Stream:8 From an advisory covering 72 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els31	4.18.0-553.6.1.el8_10.tuxcare.els31
`kernel-cross-headers` TuxCare:CentOS-Stream:8 From an advisory covering 72 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els31	4.18.0-553.6.1.el8_10.tuxcare.els31
`kernel-debug` TuxCare:CentOS-Stream:8 From an advisory covering 72 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els31	4.18.0-553.6.1.el8_10.tuxcare.els31
`kernel-debug-core` TuxCare:CentOS-Stream:8 From an advisory covering 72 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els31	4.18.0-553.6.1.el8_10.tuxcare.els31

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-debug-devel` TuxCare:CentOS-Stream:8 From an advisory covering 72 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els31	4.18.0-553.6.1.el8_10.tuxcare.els31
`kernel-debug-modules` TuxCare:CentOS-Stream:8 From an advisory covering 72 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els31	4.18.0-553.6.1.el8_10.tuxcare.els31
`kernel-debug-modules-extra` TuxCare:CentOS-Stream:8 From an advisory covering 72 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els31	4.18.0-553.6.1.el8_10.tuxcare.els31
`kernel-debug-modules-internal` TuxCare:CentOS-Stream:8 From an advisory covering 72 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els31	4.18.0-553.6.1.el8_10.tuxcare.els31
`kernel-devel` TuxCare:CentOS-Stream:8 From an advisory covering 72 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els31	4.18.0-553.6.1.el8_10.tuxcare.els31
`kernel-headers` TuxCare:CentOS-Stream:8 From an advisory covering 72 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els31	4.18.0-553.6.1.el8_10.tuxcare.els31
`kernel-ipaclones-internal` TuxCare:CentOS-Stream:8 From an advisory covering 72 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els31	4.18.0-553.6.1.el8_10.tuxcare.els31
`kernel-modules` TuxCare:CentOS-Stream:8 From an advisory covering 72 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els31	4.18.0-553.6.1.el8_10.tuxcare.els31
`kernel-modules-extra` TuxCare:CentOS-Stream:8 From an advisory covering 72 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els31	4.18.0-553.6.1.el8_10.tuxcare.els31
`kernel-modules-internal` TuxCare:CentOS-Stream:8 From an advisory covering 72 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els31	4.18.0-553.6.1.el8_10.tuxcare.els31
`kernel-selftests-internal` TuxCare:CentOS-Stream:8 From an advisory covering 72 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els31	4.18.0-553.6.1.el8_10.tuxcare.els31
`kernel-tools` TuxCare:CentOS-Stream:8 From an advisory covering 72 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els31	4.18.0-553.6.1.el8_10.tuxcare.els31
`kernel-tools-libs` TuxCare:CentOS-Stream:8 From an advisory covering 72 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els31	4.18.0-553.6.1.el8_10.tuxcare.els31
`kernel-tools-libs-devel` TuxCare:CentOS-Stream:8 From an advisory covering 72 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els31	4.18.0-553.6.1.el8_10.tuxcare.els31
`perf` TuxCare:CentOS-Stream:8 From an advisory covering 72 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els31	4.18.0-553.6.1.el8_10.tuxcare.els31
`python3-perf` TuxCare:CentOS-Stream:8 From an advisory covering 72 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els31	4.18.0-553.6.1.el8_10.tuxcare.els31
`linux-buildinfo-5.4.0-240-generic` TuxCare:Ubuntu:20.04 From an advisory covering 177 CVEs	before 5.4.0-240.260+tuxcare.els1	5.4.0-240.260+tuxcare.els1
`linux-buildinfo-5.4.0-240-lowlatency` TuxCare:Ubuntu:20.04 From an advisory covering 177 CVEs	before 5.4.0-240.260+tuxcare.els1	5.4.0-240.260+tuxcare.els1
`linux-cloud-tools-5.4.0-240` TuxCare:Ubuntu:20.04 From an advisory covering 177 CVEs	before 5.4.0-240.260+tuxcare.els1	5.4.0-240.260+tuxcare.els1
`linux-cloud-tools-5.4.0-240-generic` TuxCare:Ubuntu:20.04 From an advisory covering 177 CVEs	before 5.4.0-240.260+tuxcare.els1	5.4.0-240.260+tuxcare.els1
`linux-cloud-tools-5.4.0-240-lowlatency` TuxCare:Ubuntu:20.04 From an advisory covering 177 CVEs	before 5.4.0-240.260+tuxcare.els1	5.4.0-240.260+tuxcare.els1
`linux-cloud-tools-common` TuxCare:Ubuntu:20.04 From an advisory covering 177 CVEs	before 5.4.0-240.260+tuxcare.els1	5.4.0-240.260+tuxcare.els1
`linux-doc` TuxCare:Ubuntu:20.04 From an advisory covering 177 CVEs	before 5.4.0-240.260+tuxcare.els1	5.4.0-240.260+tuxcare.els1
`linux-headers-5.4.0-240` TuxCare:Ubuntu:20.04 From an advisory covering 177 CVEs	before 5.4.0-240.260+tuxcare.els1	5.4.0-240.260+tuxcare.els1
`linux-headers-5.4.0-240-generic` TuxCare:Ubuntu:20.04 From an advisory covering 177 CVEs	before 5.4.0-240.260+tuxcare.els1	5.4.0-240.260+tuxcare.els1
`linux-headers-5.4.0-240-lowlatency` TuxCare:Ubuntu:20.04 From an advisory covering 177 CVEs	before 5.4.0-240.260+tuxcare.els1	5.4.0-240.260+tuxcare.els1
`linux-image-unsigned-5.4.0-240-generic` TuxCare:Ubuntu:20.04 From an advisory covering 177 CVEs	before 5.4.0-240.260+tuxcare.els1	5.4.0-240.260+tuxcare.els1
`linux-image-unsigned-5.4.0-240-lowlatency` TuxCare:Ubuntu:20.04 From an advisory covering 177 CVEs	before 5.4.0-240.260+tuxcare.els1	5.4.0-240.260+tuxcare.els1
`linux-libc-dev` TuxCare:Ubuntu:20.04 From an advisory covering 177 CVEs	before 5.4.0-240.260+tuxcare.els1	5.4.0-240.260+tuxcare.els1
`linux-modules-5.4.0-240-generic` TuxCare:Ubuntu:20.04 From an advisory covering 177 CVEs	before 5.4.0-240.260+tuxcare.els1	5.4.0-240.260+tuxcare.els1
`linux-modules-5.4.0-240-lowlatency` TuxCare:Ubuntu:20.04 From an advisory covering 177 CVEs	before 5.4.0-240.260+tuxcare.els1	5.4.0-240.260+tuxcare.els1
`linux-modules-extra-5.4.0-240-generic` TuxCare:Ubuntu:20.04 From an advisory covering 177 CVEs	before 5.4.0-240.260+tuxcare.els1	5.4.0-240.260+tuxcare.els1
`linux-source-5.4.0` TuxCare:Ubuntu:20.04 From an advisory covering 177 CVEs	before 5.4.0-240.260+tuxcare.els1	5.4.0-240.260+tuxcare.els1
`linux-tools-5.4.0-240` TuxCare:Ubuntu:20.04 From an advisory covering 177 CVEs	before 5.4.0-240.260+tuxcare.els1	5.4.0-240.260+tuxcare.els1
`linux-tools-5.4.0-240-generic` TuxCare:Ubuntu:20.04 From an advisory covering 177 CVEs	before 5.4.0-240.260+tuxcare.els1	5.4.0-240.260+tuxcare.els1
`linux-tools-5.4.0-240-lowlatency` TuxCare:Ubuntu:20.04 From an advisory covering 177 CVEs	before 5.4.0-240.260+tuxcare.els1	5.4.0-240.260+tuxcare.els1
`linux-tools-common` TuxCare:Ubuntu:20.04 From an advisory covering 177 CVEs	before 5.4.0-240.260+tuxcare.els1	5.4.0-240.260+tuxcare.els1
`linux-tools-host` TuxCare:Ubuntu:20.04 From an advisory covering 177 CVEs	before 5.4.0-240.260+tuxcare.els1	5.4.0-240.260+tuxcare.els1
`linux-buildinfo-4.15.0-266-generic` TuxCare:Ubuntu:18.04 From an advisory covering 277 CVEs	before 4.15.0-266.277+tuxcare.els1	4.15.0-266.277+tuxcare.els1
`linux-buildinfo-4.15.0-266-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 277 CVEs	before 4.15.0-266.277+tuxcare.els1	4.15.0-266.277+tuxcare.els1
`linux-cloud-tools-4.15.0-266` TuxCare:Ubuntu:18.04 From an advisory covering 277 CVEs	before 4.15.0-266.277+tuxcare.els1	4.15.0-266.277+tuxcare.els1
`linux-cloud-tools-4.15.0-266-generic` TuxCare:Ubuntu:18.04 From an advisory covering 277 CVEs	before 4.15.0-266.277+tuxcare.els1	4.15.0-266.277+tuxcare.els1
`linux-cloud-tools-4.15.0-266-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 277 CVEs	before 4.15.0-266.277+tuxcare.els1	4.15.0-266.277+tuxcare.els1
`linux-cloud-tools-common` TuxCare:Ubuntu:18.04 From an advisory covering 277 CVEs	before 4.15.0-266.277+tuxcare.els1	4.15.0-266.277+tuxcare.els1
`linux-doc` TuxCare:Ubuntu:18.04 From an advisory covering 277 CVEs	before 4.15.0-266.277+tuxcare.els1	4.15.0-266.277+tuxcare.els1
`linux-headers-4.15.0-266` TuxCare:Ubuntu:18.04 From an advisory covering 277 CVEs	before 4.15.0-266.277+tuxcare.els1	4.15.0-266.277+tuxcare.els1
`linux-headers-4.15.0-266-generic` TuxCare:Ubuntu:18.04 From an advisory covering 277 CVEs	before 4.15.0-266.277+tuxcare.els1	4.15.0-266.277+tuxcare.els1
`linux-headers-4.15.0-266-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 277 CVEs	before 4.15.0-266.277+tuxcare.els1	4.15.0-266.277+tuxcare.els1
`linux-image-unsigned-4.15.0-266-generic` TuxCare:Ubuntu:18.04 From an advisory covering 277 CVEs	before 4.15.0-266.277+tuxcare.els1	4.15.0-266.277+tuxcare.els1
`linux-image-unsigned-4.15.0-266-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 277 CVEs	before 4.15.0-266.277+tuxcare.els1	4.15.0-266.277+tuxcare.els1
`linux-libc-dev` TuxCare:Ubuntu:18.04 From an advisory covering 277 CVEs	before 4.15.0-266.277+tuxcare.els1	4.15.0-266.277+tuxcare.els1
`linux-modules-4.15.0-266-generic` TuxCare:Ubuntu:18.04 From an advisory covering 277 CVEs	before 4.15.0-266.277+tuxcare.els1	4.15.0-266.277+tuxcare.els1
`linux-modules-4.15.0-266-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 277 CVEs	before 4.15.0-266.277+tuxcare.els1	4.15.0-266.277+tuxcare.els1
`linux-modules-extra-4.15.0-266-generic` TuxCare:Ubuntu:18.04 From an advisory covering 277 CVEs	before 4.15.0-266.277+tuxcare.els1	4.15.0-266.277+tuxcare.els1
`linux-source-4.15.0` TuxCare:Ubuntu:18.04 From an advisory covering 277 CVEs	before 4.15.0-266.277+tuxcare.els1	4.15.0-266.277+tuxcare.els1
`linux-tools-4.15.0-266` TuxCare:Ubuntu:18.04 From an advisory covering 277 CVEs	before 4.15.0-266.277+tuxcare.els1	4.15.0-266.277+tuxcare.els1
`linux-tools-4.15.0-266-generic` TuxCare:Ubuntu:18.04 From an advisory covering 277 CVEs	before 4.15.0-266.277+tuxcare.els1	4.15.0-266.277+tuxcare.els1
`linux-tools-4.15.0-266-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 277 CVEs	before 4.15.0-266.277+tuxcare.els1	4.15.0-266.277+tuxcare.els1
`linux-tools-common` TuxCare:Ubuntu:18.04 From an advisory covering 277 CVEs	before 4.15.0-266.277+tuxcare.els1	4.15.0-266.277+tuxcare.els1
`linux-tools-host` TuxCare:Ubuntu:18.04 From an advisory covering 277 CVEs	before 4.15.0-266.277+tuxcare.els1	4.15.0-266.277+tuxcare.els1
`linux-buildinfo-4.15.0-266-generic` TuxCare:Ubuntu:16.04 From an advisory covering 277 CVEs	before 4.15.0-266.277~16.04.1+tuxcare.els1	4.15.0-266.277~16.04.1+tuxcare.els1
`linux-buildinfo-4.15.0-266-lowlatency` TuxCare:Ubuntu:16.04 From an advisory covering 277 CVEs	before 4.15.0-266.277~16.04.1+tuxcare.els1	4.15.0-266.277~16.04.1+tuxcare.els1
`linux-cloud-tools-4.15.0-266-generic` TuxCare:Ubuntu:16.04 From an advisory covering 277 CVEs	before 4.15.0-266.277~16.04.1+tuxcare.els1	4.15.0-266.277~16.04.1+tuxcare.els1
`linux-cloud-tools-4.15.0-266-lowlatency` TuxCare:Ubuntu:16.04 From an advisory covering 277 CVEs	before 4.15.0-266.277~16.04.1+tuxcare.els1	4.15.0-266.277~16.04.1+tuxcare.els1
`linux-headers-4.15.0-266` TuxCare:Ubuntu:16.04 From an advisory covering 277 CVEs	before 4.15.0-266.277~16.04.1+tuxcare.els1	4.15.0-266.277~16.04.1+tuxcare.els1
`linux-headers-4.15.0-266-generic` TuxCare:Ubuntu:16.04 From an advisory covering 277 CVEs	before 4.15.0-266.277~16.04.1+tuxcare.els1	4.15.0-266.277~16.04.1+tuxcare.els1
`linux-headers-4.15.0-266-lowlatency` TuxCare:Ubuntu:16.04 From an advisory covering 277 CVEs	before 4.15.0-266.277~16.04.1+tuxcare.els1	4.15.0-266.277~16.04.1+tuxcare.els1
`linux-hwe-cloud-tools-4.15.0-266` TuxCare:Ubuntu:16.04 From an advisory covering 277 CVEs	before 4.15.0-266.277~16.04.1+tuxcare.els1	4.15.0-266.277~16.04.1+tuxcare.els1
`linux-hwe-tools-4.15.0-266` TuxCare:Ubuntu:16.04 From an advisory covering 277 CVEs	before 4.15.0-266.277~16.04.1+tuxcare.els1	4.15.0-266.277~16.04.1+tuxcare.els1
`linux-image-unsigned-4.15.0-266-generic` TuxCare:Ubuntu:16.04 From an advisory covering 277 CVEs	before 4.15.0-266.277~16.04.1+tuxcare.els1	4.15.0-266.277~16.04.1+tuxcare.els1
`linux-image-unsigned-4.15.0-266-lowlatency` TuxCare:Ubuntu:16.04 From an advisory covering 277 CVEs	before 4.15.0-266.277~16.04.1+tuxcare.els1	4.15.0-266.277~16.04.1+tuxcare.els1
`linux-modules-4.15.0-266-generic` TuxCare:Ubuntu:16.04 From an advisory covering 277 CVEs	before 4.15.0-266.277~16.04.1+tuxcare.els1	4.15.0-266.277~16.04.1+tuxcare.els1
`linux-modules-4.15.0-266-lowlatency` TuxCare:Ubuntu:16.04 From an advisory covering 277 CVEs	before 4.15.0-266.277~16.04.1+tuxcare.els1	4.15.0-266.277~16.04.1+tuxcare.els1
`linux-modules-extra-4.15.0-266-generic` TuxCare:Ubuntu:16.04 From an advisory covering 277 CVEs	before 4.15.0-266.277~16.04.1+tuxcare.els1	4.15.0-266.277~16.04.1+tuxcare.els1
`linux-source-4.15.0` TuxCare:Ubuntu:16.04 From an advisory covering 277 CVEs	before 4.15.0-266.277~16.04.1+tuxcare.els1	4.15.0-266.277~16.04.1+tuxcare.els1
`linux-tools-4.15.0-266-generic` TuxCare:Ubuntu:16.04 From an advisory covering 277 CVEs	before 4.15.0-266.277~16.04.1+tuxcare.els1	4.15.0-266.277~16.04.1+tuxcare.els1
`linux-tools-4.15.0-266-lowlatency` TuxCare:Ubuntu:16.04 From an advisory covering 277 CVEs	before 4.15.0-266.277~16.04.1+tuxcare.els1	4.15.0-266.277~16.04.1+tuxcare.els1
`linux-buildinfo-4.4.0-288-generic` TuxCare:Ubuntu:16.04 From an advisory covering 198 CVEs	before 4.4.0-288.322+tuxcare.els1	4.4.0-288.322+tuxcare.els1
`linux-buildinfo-4.4.0-288-lowlatency` TuxCare:Ubuntu:16.04 From an advisory covering 198 CVEs	before 4.4.0-288.322+tuxcare.els1	4.4.0-288.322+tuxcare.els1
`linux-cloud-tools-4.4.0-288` TuxCare:Ubuntu:16.04 From an advisory covering 198 CVEs	before 4.4.0-288.322+tuxcare.els1	4.4.0-288.322+tuxcare.els1
`linux-cloud-tools-4.4.0-288-generic` TuxCare:Ubuntu:16.04 From an advisory covering 198 CVEs	before 4.4.0-288.322+tuxcare.els1	4.4.0-288.322+tuxcare.els1
`linux-cloud-tools-4.4.0-288-lowlatency` TuxCare:Ubuntu:16.04 From an advisory covering 198 CVEs	before 4.4.0-288.322+tuxcare.els1	4.4.0-288.322+tuxcare.els1
`linux-cloud-tools-common` TuxCare:Ubuntu:16.04 From an advisory covering 198 CVEs	before 4.4.0-288.322+tuxcare.els1	4.4.0-288.322+tuxcare.els1
`linux-doc` TuxCare:Ubuntu:16.04 From an advisory covering 198 CVEs	before 4.4.0-288.322+tuxcare.els1	4.4.0-288.322+tuxcare.els1
`Kernel` Linux	2.6.35 up to 5.10.270, 5.11.0 up to 5.15.221, 5.16.0 up to 6.1.188, 6.2.0 up to 6.6.157, 6.7.0 up to 6.12.109, 6.13.0 up to 6.18.50, 6.19.0 up to 7.2.4	5.10.2705.15.2216.1.1886.6.1576.12.1096.18.507.2.4
`linux` Debian:12	before 6.1.190-1, plus listed versions 6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1 Show 45 moreShow less 6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.170-16.1.170-26.1.170-36.1.172-16.1.174-16.1.176-16.1.177-16.1.180-16.1.187-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-1	6.1.190-1
`linux` Debian:13	before 6.12.111-1, plus listed versions 6.12.100-16.12.101-16.12.105-16.12.107-16.12.38-1 Show 30 moreShow less 6.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-1	6.12.111-1
`linux` Debian:14	before 7.2.6-1, plus listed versions 6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1 Show 45 moreShow less 6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1	7.2.6-1
`linux-6.12` Debian:12	before 6.12.111-1~deb12u1, plus listed versions 6.12.100-1~deb12u16.12.101-1~deb12u16.12.107-1~deb12u1	6.12.111-1~deb12u1
`kernel` Mageia:10 From an advisory covering 1146 CVEs	before 6.18.55-1.mga10	6.18.55-1.mga10
`kmod-xtables-addons` Mageia:10 From an advisory covering 1146 CVEs	before 3.30-5.mga10	3.30-5.mga10
`kmod-virtualbox` Mageia:10 From an advisory covering 1146 CVEs	before 7.2.14-31.mga10	7.2.14-31.mga10
`drakx-installer-images` Mageia:10 From an advisory covering 1146 CVEs	before 2.94-56.mga10	2.94-56.mga10
`drakx-installer-images` Mageia:10 From an advisory covering 1146 CVEs	before 2.94-56.mga10.nonfree	2.94-56.mga10.nonfree
`kmod-nvidia-current-wopengpu` Mageia:10 From an advisory covering 1146 CVEs	before 580.173.02-40.mga10.nonfree	580.173.02-40.mga10.nonfree
`kernel-linus` Mageia:10 From an advisory covering 1146 CVEs	before 6.18.55-1.mga10	6.18.55-1.mga10
`kernel-obs-build` SUSE:Linux Micro Extras 6.2 From an advisory covering 401 CVEs	before 6.12.0-160000.39.1	6.12.0-160000.39.1
`kernel-syms` SUSE:Linux Micro Extras 6.2 From an advisory covering 401 CVEs	before 6.12.0-160000.39.1	6.12.0-160000.39.1
`kernel-default` SUSE:Linux Micro 6.1 From an advisory covering 473 CVEs	before 6.4.0-159998.53.1	6.4.0-159998.53.1
`kernel-default-base` SUSE:Linux Micro 6.1 From an advisory covering 473 CVEs	before 6.4.0-159998.53.1.159998.21.38	6.4.0-159998.53.1.159998.21.38
`kernel-kvmsmall` SUSE:Linux Micro 6.1 From an advisory covering 473 CVEs	before 6.4.0-159998.53.1	6.4.0-159998.53.1
`kernel-source` SUSE:Linux Micro 6.1 From an advisory covering 473 CVEs	before 6.4.0-159998.53.1	6.4.0-159998.53.1
`podman` SUSE:Linux Micro 6.2 From an advisory covering 479 CVEs	before 5.4.2-160000.6.1	5.4.2-160000.6.1
`kernel-rt` SUSE:Linux Micro 6.1 From an advisory covering 479 CVEs	before 6.4.0-159998.53.1	6.4.0-159998.53.1
`kernel-source-rt` SUSE:Linux Micro 6.1 From an advisory covering 479 CVEs	before 6.4.0-159998.53.1	6.4.0-159998.53.1
`kernel-64kb` SUSE:Linux Micro 6.2 From an advisory covering 401 CVEs	before 6.12.0-160000.39.1	6.12.0-160000.39.1
`kernel-default` SUSE:Linux Micro 6.2 From an advisory covering 401 CVEs	before 6.12.0-160000.39.1	6.12.0-160000.39.1
`kernel-default-base` SUSE:Linux Micro 6.2 From an advisory covering 401 CVEs	before 6.12.0-160000.39.1.160000.2.26	6.12.0-160000.39.1.160000.2.26
`kernel-rt` SUSE:Linux Micro 6.2 From an advisory covering 401 CVEs	before 6.12.0-160000.39.1	6.12.0-160000.39.1
`kernel-source` SUSE:Linux Micro 6.2 From an advisory covering 401 CVEs	before 6.12.0-160000.39.1	6.12.0-160000.39.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 16.0 From an advisory covering 401 CVEs	before 6.12.0-160000.39.1	6.12.0-160000.39.1
`kernel-64kb` SUSE:Linux Enterprise Server 16.0 From an advisory covering 401 CVEs	before 6.12.0-160000.39.1	6.12.0-160000.39.1
`kernel-azure` SUSE:Linux Enterprise Server 16.0 From an advisory covering 401 CVEs	before 6.12.0-160000.39.1	6.12.0-160000.39.1
`kernel-default` SUSE:Linux Enterprise Server 16.0 From an advisory covering 401 CVEs	before 6.12.0-160000.39.1	6.12.0-160000.39.1
`kernel-default-base` SUSE:Linux Enterprise Server 16.0 From an advisory covering 401 CVEs	before 6.12.0-160000.39.1.160000.2.26	6.12.0-160000.39.1.160000.2.26
`kernel-docs` SUSE:Linux Enterprise Server 16.0 From an advisory covering 401 CVEs	before 6.12.0-160000.39.1	6.12.0-160000.39.1
`kernel-kvmsmall` SUSE:Linux Enterprise Server 16.0 From an advisory covering 401 CVEs	before 6.12.0-160000.39.1	6.12.0-160000.39.1
`kernel-obs-qa` SUSE:Linux Enterprise Server 16.0 From an advisory covering 401 CVEs	before 6.12.0-160000.39.1	6.12.0-160000.39.1
`kernel-source` SUSE:Linux Enterprise Server 16.0 From an advisory covering 401 CVEs	before 6.12.0-160000.39.1	6.12.0-160000.39.1
`kernel-syms` SUSE:Linux Enterprise Server 16.0 From an advisory covering 401 CVEs	before 6.12.0-160000.39.1	6.12.0-160000.39.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server 16.0 From an advisory covering 401 CVEs	before 6.12.0-160000.39.1	6.12.0-160000.39.1
`kernel-64kb` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 401 CVEs	before 6.12.0-160000.39.1	6.12.0-160000.39.1
`kernel-azure` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 401 CVEs	before 6.12.0-160000.39.1	6.12.0-160000.39.1
`kernel-default` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 401 CVEs	before 6.12.0-160000.39.1	6.12.0-160000.39.1
`kernel-default-base` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 401 CVEs	before 6.12.0-160000.39.1.160000.2.26	6.12.0-160000.39.1.160000.2.26
`kernel-docs` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 401 CVEs	before 6.12.0-160000.39.1	6.12.0-160000.39.1
`kernel-kvmsmall` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 401 CVEs	before 6.12.0-160000.39.1	6.12.0-160000.39.1
`kernel-obs-qa` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 401 CVEs	before 6.12.0-160000.39.1	6.12.0-160000.39.1
`kernel-source` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 401 CVEs	before 6.12.0-160000.39.1	6.12.0-160000.39.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 401 CVEs	before 6.12.0-160000.39.1	6.12.0-160000.39.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 401 CVEs	before 6.12.0-160000.39.1	6.12.0-160000.39.1
`kernel-default` SUSE:Linux Micro 6.0 From an advisory covering 473 CVEs	before 6.4.0-159998.53.1	6.4.0-159998.53.1
`kernel-default-base` SUSE:Linux Micro 6.0 From an advisory covering 473 CVEs	before 6.4.0-159998.53.1.159998.21.38	6.4.0-159998.53.1.159998.21.38
`kernel-kvmsmall` SUSE:Linux Micro 6.0 From an advisory covering 473 CVEs	before 6.4.0-159998.53.1	6.4.0-159998.53.1
`kernel-source` SUSE:Linux Micro 6.0 From an advisory covering 473 CVEs	before 6.4.0-159998.53.1	6.4.0-159998.53.1
`kernel-rt` SUSE:Linux Micro 6.0 From an advisory covering 479 CVEs	before 6.4.0-159998.53.1	6.4.0-159998.53.1
`kernel-source-rt` SUSE:Linux Micro 6.0 From an advisory covering 479 CVEs	before 6.4.0-159998.53.1	6.4.0-159998.53.1
`kernel-livepatch-SLE15-SP7-RT_Update_21` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 508 CVEs	before 1-150700.1.3.1	1-150700.1.3.1
`kernel-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 508 CVEs	before 6.4.0-150700.7.78.1	6.4.0-150700.7.78.1
`kernel-source-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 508 CVEs	before 6.4.0-150700.7.78.1	6.4.0-150700.7.78.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 508 CVEs	before 6.4.0-150700.7.78.1	6.4.0-150700.7.78.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 124 CVEs	before 6.4.0-150600.23.138.1	6.4.0-150600.23.138.1
`kernel-livepatch-SLE15-SP6_Update_32` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 124 CVEs	before 1-150600.13.3.1	1-150600.13.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP6 From an advisory covering 124 CVEs	before 6.4.0-150600.23.138.1	6.4.0-150600.23.138.1
`kernel-64kb` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 124 CVEs	before 6.4.0-150600.23.138.1	6.4.0-150600.23.138.1
`kernel-default` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 124 CVEs	before 6.4.0-150600.23.138.1	6.4.0-150600.23.138.1
`kernel-default-base` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 124 CVEs	before 6.4.0-150600.23.138.1.150600.12.64.1	6.4.0-150600.23.138.1.150600.12.64.1
`kernel-docs` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 124 CVEs	before 6.4.0-150600.23.138.1	6.4.0-150600.23.138.1
`kernel-obs-build` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 124 CVEs	before 6.4.0-150600.23.138.1	6.4.0-150600.23.138.1
`kernel-source` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 124 CVEs	before 6.4.0-150600.23.138.1	6.4.0-150600.23.138.1
`kernel-syms` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 124 CVEs	before 6.4.0-150600.23.138.1	6.4.0-150600.23.138.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 124 CVEs	before 6.4.0-150600.23.138.1	6.4.0-150600.23.138.1
`kernel-default` SUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 124 CVEs	before 6.4.0-150600.23.138.1	6.4.0-150600.23.138.1
`kernel-default-base` SUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 124 CVEs	before 6.4.0-150600.23.138.1.150600.12.64.1	6.4.0-150600.23.138.1.150600.12.64.1
`kernel-docs` SUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 124 CVEs	before 6.4.0-150600.23.138.1	6.4.0-150600.23.138.1
`kernel-obs-build` SUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 124 CVEs	before 6.4.0-150600.23.138.1	6.4.0-150600.23.138.1
`kernel-source` SUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 124 CVEs	before 6.4.0-150600.23.138.1	6.4.0-150600.23.138.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 124 CVEs	before 6.4.0-150600.23.138.1	6.4.0-150600.23.138.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 508 CVEs	before 6.4.0-150700.53.84.1	6.4.0-150700.53.84.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 508 CVEs	before 6.4.0-150700.53.84.1	6.4.0-150700.53.84.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 508 CVEs	before 6.4.0-150700.53.84.1.150700.17.47.1	6.4.0-150700.53.84.1.150700.17.47.1
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 508 CVEs	before 6.4.0-150700.53.84.1	6.4.0-150700.53.84.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 508 CVEs	before 6.4.0-150700.53.84.1	6.4.0-150700.53.84.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 508 CVEs	before 6.4.0-150700.53.84.1	6.4.0-150700.53.84.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 508 CVEs	before 6.4.0-150700.53.84.1	6.4.0-150700.53.84.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 508 CVEs	before 6.4.0-150700.53.84.1	6.4.0-150700.53.84.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 508 CVEs	before 6.4.0-150700.53.84.1	6.4.0-150700.53.84.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP7 From an advisory covering 508 CVEs	before 6.4.0-150700.53.84.1	6.4.0-150700.53.84.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 508 CVEs	before 6.4.0-150700.53.84.1	6.4.0-150700.53.84.1
`kernel-livepatch-SLE15-SP7_Update_22` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 508 CVEs	before 1-150700.15.3.1	1-150700.15.3.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7 From an advisory covering 508 CVEs	before 6.4.0-150700.53.84.1	6.4.0-150700.53.84.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP7 From an advisory covering 508 CVEs	before 6.4.0-150700.53.84.1	6.4.0-150700.53.84.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP7 From an advisory covering 508 CVEs	before 6.4.0-150700.53.84.1	6.4.0-150700.53.84.1
`kernel-default` SUSE:Linux Enterprise Live Patching 12 SP5 From an advisory covering 56 CVEs	before 4.12.14-122.336.1	4.12.14-122.336.1
`kgraft-patch-SLE12-SP5_Update_89` SUSE:Linux Enterprise Live Patching 12 SP5 From an advisory covering 56 CVEs	before 1-8.3.1	1-8.3.1
`kernel-default` SUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 56 CVEs	before 4.12.14-122.336.1	4.12.14-122.336.1
`kernel-source` SUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 56 CVEs	before 4.12.14-122.336.1	4.12.14-122.336.1
`kernel-syms` SUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 56 CVEs	before 4.12.14-122.336.1	4.12.14-122.336.1
`kernel-default` SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 56 CVEs	before 4.12.14-122.336.1	4.12.14-122.336.1
`kernel-source` SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 56 CVEs	before 4.12.14-122.336.1	4.12.14-122.336.1
`kernel-syms` SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 56 CVEs	before 4.12.14-122.336.1	4.12.14-122.336.1
`kernel-default` SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE From an advisory covering 4 CVEs	before 3.0.101-108.226.1	3.0.101-108.226.1
`kernel-docs` SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE From an advisory covering 4 CVEs	before 3.0.101-108.226.1	3.0.101-108.226.1
`kernel-ec2` SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE From an advisory covering 4 CVEs	before 3.0.101-108.226.1	3.0.101-108.226.1
`kernel-source` SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE From an advisory covering 4 CVEs	before 3.0.101-108.226.1	3.0.101-108.226.1
`kernel-syms` SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE From an advisory covering 4 CVEs	before 3.0.101-108.226.1	3.0.101-108.226.1
`linux` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 3.11.0-12.193.12.0-1.33.12.0-2.53.12.0-2.73.12.0-3.8 Show 45 moreShow less 3.12.0-3.93.12.0-4.103.12.0-4.123.12.0-5.133.12.0-7.153.13.0-1.163.13.0-2.173.13.0-3.183.13.0-4.193.13.0-5.203.13.0-6.233.13.0-7.253.13.0-7.263.13.0-8.273.13.0-8.283.13.0-10.303.13.0-11.313.13.0-12.323.13.0-13.333.13.0-14.343.13.0-15.353.13.0-16.363.13.0-17.373.13.0-18.383.13.0-19.393.13.0-19.403.13.0-20.423.13.0-21.433.13.0-22.443.13.0-23.453.13.0-24.463.13.0-24.473.13.0-27.503.13.0-29.533.13.0-30.543.13.0-30.553.13.0-32.573.13.0-33.583.13.0-34.603.13.0-35.623.13.0-36.633.13.0-37.643.13.0-39.663.13.0-40.693.13.0-41.70	None known
`linux-aws` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9 Show 45 moreShow less 4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80	None known
`linux-azure` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2 Show 45 moreShow less 4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1	None known
`linux-lts-xenial` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1 Show 45 moreShow less 4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1	None known
`linux` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11 Show 45 moreShow less 4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96	None known
`linux-aws` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18 Show 45 moreShow less 4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93	None known
`linux-aws-hwe` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1 Show 45 moreShow less 4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1	None known
`linux-azure` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15 Show 45 moreShow less 4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71	None known
`linux-gcp` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9 Show 45 moreShow less 4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1	None known
`linux-hwe` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1 Show 45 moreShow less 4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1	None known
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-kvm` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15 Show 45 moreShow less 4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.674.4.0-1062.694.4.0-1063.704.4.0-1064.714.4.0-1065.724.4.0-1066.734.4.0-1068.754.4.0-1069.764.4.0-1070.774.4.0-1071.784.4.0-1075.824.4.0-1076.834.4.0-1077.84	None known
`linux-oracle` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1 Show 45 moreShow less 4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1	None known
`linux-fips` Ubuntu:Pro:FIPS-updates:16.04:LTS	All versions, plus listed versions 4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13 Show 45 moreShow less 4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78	None known
`linux-fips` Ubuntu:Pro:FIPS:16.04:LTS	All versions, plus listed versions 4.4.0-1001.14.4.0-1002.2	None known
`linux` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11 Show 45 moreShow less 4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107	None known
`linux-aws` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7 Show 45 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-aws-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2	None known
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-4.15` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102 Show 45 moreShow less 4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1 Show 45 moreShow less 5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1	None known
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-4.15` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92 Show 45 moreShow less 4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gcp-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2	None known
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2 Show 45 moreShow less 5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1	None known
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-ibm-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1 Show 45 moreShow less 5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1	None known
`linux-kvm` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8 Show 45 moreShow less 4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13 Show 45 moreShow less 4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-oracle-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1	None known
`linux-raspi-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1 Show 45 moreShow less 5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1	None known
`linux-aws-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24 Show 45 moreShow less 4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93	None known
`linux-azure-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10 Show 45 moreShow less 4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80	None known
`linux-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42 Show 45 moreShow less 4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110	None known
`linux-gcp-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21 Show 45 moreShow less 4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.794.15.0-2075.804.15.0-2076.814.15.0-2077.83	None known
`linux-aws-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-2000.4	None known
`linux-azure-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1002.2	None known
`linux-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1011.12	None known
`linux-gcp-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1001.1	None known
`linux` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25 Show 45 moreShow less 5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110	None known
`linux-aws` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5 Show 45 moreShow less 5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78	None known
`linux-aws-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-aws-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less 5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1	None known
`linux-aws-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1119.126~20.04.1, plus listed versions 5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1 Show 45 moreShow less 5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1	5.15.0-1119.126~20.04.1
`linux-aws-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1	None known
`linux-azure` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8 Show 45 moreShow less 5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87	None known
`linux-azure-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less 5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2	None known
`linux-azure-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less 5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1	None known
`linux-azure-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1125.134~20.04.1, plus listed versions 5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1 Show 45 moreShow less 5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1	5.15.0-1125.134~20.04.1
`linux-azure-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1	None known
`linux-azure-fde` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less 5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1	None known
`linux-azure-fde-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1124.133~20.04.1, plus listed versions 5.15.0-1019.24~20.04.1.15.15.0-1020.25~20.04.1.15.15.0-1021.26~20.04.1.15.15.0-1029.36~20.04.1.15.15.0-1030.37~20.04.1.1 Show 45 moreShow less 5.15.0-1031.38~20.04.1.15.15.0-1033.40~20.04.1.15.15.0-1034.41~20.04.1.25.15.0-1035.42~20.04.1.15.15.0-1036.43~20.04.1.15.15.0-1037.44~20.04.1.15.15.0-1038.45~20.04.1.15.15.0-1039.46~20.04.1.15.15.0-1040.47~20.04.1.15.15.0-1041.48~20.04.1.15.15.0-1042.49~20.04.1.15.15.0-1043.50~20.04.1.15.15.0-1046.53~20.04.1.15.15.0-1047.54~20.04.1.15.15.0-1049.56~20.04.1.15.15.0-1050.57~20.04.1.15.15.0-1051.59~20.04.1.15.15.0-1052.60~20.04.1.15.15.0-1053.61~20.04.1.15.15.0-1054.62~20.04.1.15.15.0-1056.64~20.04.1.15.15.0-1057.65~20.04.1.15.15.0-1058.66~20.04.2.15.15.0-1059.67~20.04.1.15.15.0-1060.69~20.04.1.15.15.0-1061.70~20.04.1.15.15.0-1063.72~20.04.1.15.15.0-1064.73~20.04.1.15.15.0-1065.74~20.04.1.15.15.0-1067.76~20.04.1.15.15.0-1068.77~20.04.1.15.15.0-1070.79~20.04.1.15.15.0-1071.80~20.04.1.15.15.0-1072.81~20.04.1.15.15.0-1073.82~20.04.1.15.15.0-1074.83~20.04.1.15.15.0-1076.85~20.04.1.15.15.0-1078.87~20.04.1.15.15.0-1081.90~20.04.1.15.15.0-1082.91~20.04.1.15.15.0-1086.95~20.04.1.15.15.0-1087.96~20.04.1.15.15.0-1088.97~20.04.1.15.15.0-1089.98~20.04.1.15.15.0-1091.100~20.04.1.1	5.15.0-1124.133~20.04.1
`linux-bluefield` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.4.0-1007.105.4.0-1011.145.4.0-1012.155.4.0-1013.165.4.0-1016.19 Show 45 moreShow less 5.4.0-1019.225.4.0-1020.235.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1030.335.4.0-1032.355.4.0-1035.385.4.0-1036.395.4.0-1040.445.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1049.555.4.0-1050.565.4.0-1054.605.4.0-1058.645.4.0-1059.655.4.0-1060.665.4.0-1062.685.4.0-1064.705.4.0-1065.715.4.0-1066.725.4.0-1068.745.4.0-1070.765.4.0-1071.775.4.0-1072.785.4.0-1073.795.4.0-1074.805.4.0-1075.815.4.0-1076.825.4.0-1077.835.4.0-1078.845.4.0-1079.855.4.0-1080.875.4.0-1081.885.4.0-1082.895.4.0-1083.905.4.0-1084.915.4.0-1085.92	None known
`linux-gcp` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7 Show 45 moreShow less 5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1033.355.4.0-1034.375.4.0-1036.395.4.0-1037.405.4.0-1038.415.4.0-1040.435.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1044.475.4.0-1046.495.4.0-1049.535.4.0-1051.555.4.0-1052.565.4.0-1053.575.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1060.645.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1065.695.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1072.775.4.0-1073.785.4.0-1075.80	None known
`linux-gcp-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less 5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3	None known
`linux-gcp-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less 5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1	None known
`linux-gcp-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1120.130~20.04.1, plus listed versions 5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2 Show 45 moreShow less 5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.15.15.0-1065.73~20.04.15.15.0-1066.74~20.04.15.15.0-1067.75~20.04.15.15.0-1068.76~20.04.15.15.0-1069.77~20.04.15.15.0-1070.78~20.04.15.15.0-1071.79~20.04.15.15.0-1072.80~20.04.15.15.0-1073.81~20.04.15.15.0-1074.83~20.04.1	5.15.0-1120.130~20.04.1
`linux-gcp-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41	None known
`linux-gke` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less 5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111	None known
`linux-gke-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less 5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1	None known
`linux-gkeop` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less 5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77	None known
`linux-gkeop-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 40 moreShow less 5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1	None known
`linux-hwe-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less 5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1	None known
`linux-hwe-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less 5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1	None known
`linux-hwe-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-202.212~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 45 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1	5.15.0-202.212~20.04.1
`linux-hwe-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less 5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1	None known
`linux-ibm` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.4.0-1003.45.4.0-1004.55.4.0-1005.65.4.0-1006.75.4.0-1007.8 Show 45 moreShow less 5.4.0-1008.95.4.0-1010.115.4.0-1012.135.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1017.195.4.0-1018.205.4.0-1019.215.4.0-1020.225.4.0-1021.235.4.0-1023.255.4.0-1026.295.4.0-1028.325.4.0-1029.335.4.0-1031.355.4.0-1032.365.4.0-1033.375.4.0-1034.385.4.0-1036.415.4.0-1037.425.4.0-1040.455.4.0-1041.465.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1048.535.4.0-1049.545.4.0-1050.555.4.0-1051.565.4.0-1052.575.4.0-1053.585.4.0-1054.595.4.0-1056.615.4.0-1057.625.4.0-1058.635.4.0-1059.645.4.0-1060.655.4.0-1061.665.4.0-1063.685.4.0-1064.695.4.0-1065.705.4.0-1066.71	None known
`linux-ibm-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1113.117~20.04.1, plus listed versions 5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1 Show 45 moreShow less 5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.15.15.0-1057.60~20.04.15.15.0-1058.61~20.04.15.15.0-1059.62~20.04.15.15.0-1060.63~20.04.15.15.0-1061.64~20.04.15.15.0-1062.65~20.04.15.15.0-1063.66~20.04.15.15.0-1064.67~20.04.15.15.0-1065.68~20.04.15.15.0-1066.69~20.04.15.15.0-1067.70~20.04.15.15.0-1068.71~20.04.15.15.0-1069.72~20.04.15.15.0-1074.77~20.04.15.15.0-1075.78~20.04.15.15.0-1076.79~20.04.15.15.0-1078.81~20.04.15.15.0-1079.82~20.04.15.15.0-1080.83~20.04.15.15.0-1081.84~20.04.15.15.0-1083.86~20.04.15.15.0-1085.88~20.04.15.15.0-1086.89~20.04.15.15.0-1087.90~20.04.15.15.0-1089.92~20.04.15.15.0-1090.93~20.04.15.15.0-1091.94~20.04.15.15.0-1092.95~20.04.15.15.0-1093.96~20.04.15.15.0-1094.97~20.04.1	5.15.0-1113.117~20.04.1
`linux-intel-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19	None known
`linux-intel-iotg-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1114.120~20.04.1, plus listed versions 5.15.0-1003.5~20.04.15.15.0-1008.11~20.04.15.15.0-1010.14~20.04.15.15.0-1015.20~20.04.25.15.0-1016.21~20.04.1 Show 45 moreShow less 5.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1021.26~20.04.15.15.0-1023.28~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1030.35~20.04.15.15.0-1031.36~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1040.46~20.04.15.15.0-1043.49~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1060.66~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.25.15.0-1074.80~20.04.15.15.0-1077.83~20.04.15.15.0-1078.84~20.04.15.15.0-1079.85~20.04.15.15.0-1083.89~20.04.15.15.0-1084.90~20.04.15.15.0-1085.91~20.04.15.15.0-1086.92~20.04.1	5.15.0-1114.120~20.04.1
`linux-iot` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.4.0-1001.35.4.0-1004.65.4.0-1005.75.4.0-1006.85.4.0-1009.11 Show 45 moreShow less 5.4.0-1010.125.4.0-1011.135.4.0-1012.145.4.0-1013.155.4.0-1014.165.4.0-1017.185.4.0-1018.195.4.0-1019.205.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1035.365.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1041.425.4.0-1042.435.4.0-1043.445.4.0-1044.455.4.0-1045.465.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1060.635.4.0-1061.645.4.0-1062.65	None known
`linux-kvm` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1004.45.4.0-1006.6 Show 45 moreShow less 5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1023.235.4.0-1024.245.4.0-1026.275.4.0-1028.295.4.0-1030.315.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1041.425.4.0-1044.465.4.0-1045.475.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1050.525.4.0-1051.535.4.0-1053.555.4.0-1054.565.4.0-1055.575.4.0-1056.585.4.0-1058.615.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1068.725.4.0-1070.755.4.0-1071.765.4.0-1073.78	None known
`linux-lowlatency-hwe-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-197.207~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 45 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.88~20.04.15.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.95~20.04.15.15.0-87.96~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-110.120~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1	5.15.0-197.207~20.04.1
`linux-nvidia-tegra-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1070.72~20.04.1, plus listed versions 5.15.0-1009.9~20.04.15.15.0-1010.10~20.04.15.15.0-1012.12~20.04.15.15.0-1014.14~20.04.15.15.0-1015.15~20.04.1 Show 36 moreShow less 5.15.0-1016.16~20.04.15.15.0-1017.17~20.04.15.15.0-1018.18~20.04.15.15.0-1019.19~20.04.15.15.0-1020.20~20.04.15.15.0-1022.22~20.04.15.15.0-1025.25~20.04.15.15.0-1027.27~20.04.15.15.0-1030.30~20.04.15.15.0-1032.32~20.04.15.15.0-1039.39~20.04.15.15.0-1040.40~20.04.15.15.0-1041.41~20.04.15.15.0-1042.42~20.04.15.15.0-1043.43~20.04.15.15.0-1044.44~20.04.15.15.0-1045.45~20.04.15.15.0-1046.46~20.04.15.15.0-1047.47~20.04.15.15.0-1048.48~20.04.15.15.0-1049.49~20.04.15.15.0-1050.50~20.04.15.15.0-1051.51~20.04.15.15.0-1052.52~20.04.25.15.0-1053.53~20.04.15.15.0-1055.55~20.04.15.15.0-1057.57~20.04.15.15.0-1058.58~20.04.15.15.0-1060.60~20.04.15.15.0-1061.61~20.04.15.15.0-1063.63~20.04.15.15.0-1064.66~20.04.15.15.0-1065.67~20.04.15.15.0-1066.68~20.04.15.15.0-1067.69~20.04.15.15.0-1068.70~20.04.1	5.15.0-1070.72~20.04.1
`linux-oem-5.10` Ubuntu:20.04:LTS	All versions, plus listed versions 5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17 Show 21 moreShow less 5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61	None known
`linux-oem-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21 Show 7 moreShow less 5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36	None known
`linux-oem-5.14` Ubuntu:20.04:LTS	All versions, plus listed versions 5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10 Show 30 moreShow less 5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67	None known
`linux-oem-5.6` Ubuntu:20.04:LTS	All versions, plus listed versions 5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13 Show 24 moreShow less 5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60	None known
`kernel-source` openSUSE:Tumbleweed From an advisory covering 904 CVEs	before 7.2.7-1.1	7.2.7-1.1
`dtb-aarch64` openSUSE:Leap 16.0 From an advisory covering 401 CVEs	before 6.12.0-160000.39.1	6.12.0-160000.39.1
`kernel-64kb` openSUSE:Leap 16.0 From an advisory covering 401 CVEs	before 6.12.0-160000.39.1	6.12.0-160000.39.1
`kernel-azure` openSUSE:Leap 16.0 From an advisory covering 401 CVEs	before 6.12.0-160000.39.1	6.12.0-160000.39.1
`kernel-default` openSUSE:Leap 16.0 From an advisory covering 401 CVEs	before 6.12.0-160000.39.1	6.12.0-160000.39.1
`kernel-default-base` openSUSE:Leap 16.0 From an advisory covering 401 CVEs	before 6.12.0-160000.39.1.160000.2.25	6.12.0-160000.39.1.160000.2.25
`kernel-docs` openSUSE:Leap 16.0 From an advisory covering 401 CVEs	before 6.12.0-160000.39.1	6.12.0-160000.39.1
`kernel-kvmsmall` openSUSE:Leap 16.0 From an advisory covering 401 CVEs	before 6.12.0-160000.39.1	6.12.0-160000.39.1
`kernel-obs-build` openSUSE:Leap 16.0 From an advisory covering 401 CVEs	before 6.12.0-160000.39.1	6.12.0-160000.39.1
`kernel-obs-qa` openSUSE:Leap 16.0 From an advisory covering 401 CVEs	before 6.12.0-160000.39.1	6.12.0-160000.39.1
`kernel-rt` openSUSE:Leap 16.0 From an advisory covering 401 CVEs	before 6.12.0-160000.39.1	6.12.0-160000.39.1
`kernel-source` openSUSE:Leap 16.0 From an advisory covering 401 CVEs	before 6.12.0-160000.39.1	6.12.0-160000.39.1
`kernel-syms` openSUSE:Leap 16.0 From an advisory covering 401 CVEs	before 6.12.0-160000.39.1	6.12.0-160000.39.1
`kernel-zfcpdump` openSUSE:Leap 16.0 From an advisory covering 401 CVEs	before 6.12.0-160000.39.1	6.12.0-160000.39.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected	OSV
Nov 6, 2026	affected	OSV
Nov 5, 2026	affected, aliases, references	OSV
Nov 4, 2026	affected, aliases, references	OSV
Nov 3, 2026	affected, aliases, references	OSV
Nov 3, 2026	affected, facts, references	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-89542 is a critical vulnerability (CVSS 9.8) in Linux, published September 11, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.51%, the 43rd percentile. Fixed in kernel 6.6.157.1-1.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 450 package rows, 3,094 versions, 6,600 references and the rest of 28 source descriptions. The JSON record has them.