Every CVE Search/ Get API key

CVE-2026-90011

scsi: target: iscsi: Reserve a terminator byte for the login payload

9.1 CriticalFix available

In the Linux kernel, the following vulnerability has been resolved:

scsi: target: iscsi: Reserve a terminator byte for the login payload

iscsi_target_check_login_request() rejects a login PDU whose DataSegmentLength exceeds MAX_KEY_VALUE_PAIRS, but the test is '>' and login->req_buf is allocated with exactly MAX_KEY_VALUE_PAIRS bytes. Since iscsit_get_login_rx() receives payload_length + padding bytes, where

padding = ((-payload_length) & 3);

any payload_length from 8189 to 8192 fills the whole 8192 byte buffer. The write stays in bounds, but no byte is left for a NUL terminator.

The buffer is subsequently consumed as a C string. In the CHAP path chap_check_algorithm() calls kstrdup(a_str), and extract_param() calls strstr(in_buf, pattern) followed by strlen_semi(), none of which take a length. convert_null_to_semi() additionally rewrites every embedded NUL to ';', so even a payload made of well formed NUL separated key=value records is left without a terminator. These walk past the end of the object into adjacent slab memory. It is reachable by an unauthenticated initiator against a portal configured for CHAP; when authentication is not required iscsi_login_zero_tsih_s2() rewrites AuthMethod to None and the CHAP path is never entered.

Allocate one extra byte. kzalloc() zeroes it and nothing ever writes to it, as every writer copies to offset 0 for at most MAX_KEY_VALUE_PAIRS bytes, so the buffer is always terminated.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
High

Exploit likelihood

0.84%Unchanged since Sep 17, 2026
90%50%10%1%

What each source reports

CVE List Score used 9.1

scsi: target: iscsi: Reserve a terminator byte for the login payload

In the Linux kernel, the following vulnerability has been resolved:

scsi: target: iscsi: Reserve a terminator byte for the login payload

iscsi_target_check_login_request() rejects a login PDU whose DataSegmentLength exceeds MAX_KEY_VALUE_PAIRS, but the test is '>' and login->req_buf is allocated with exactly MAX_KEY_VALUE_PAIRS bytes. Since iscsit_get_login_rx() receives payload_length + padding bytes, where

padding = ((-payload_length) & 3);

any payload_length from 8189 to 8192 fills the whole 8192 byte buffer. The write stays in bounds, but no byte is left for a NUL terminator.

The buffer is subsequently consumed as a C string. In the CHAP path chap_check_algorithm() calls kstrdup(a_str), and extract_param() calls strstr(in_buf, pattern) followed by strlen_semi(), none of which take a length. convert_null_to_semi() additionally rewrites every embedded NUL to ';', so even a payload made of well formed NUL separated key=value records is left without a terminator. These walk past the end of the object into adjacent slab memory. It is reachable by an unauthenticated initiator against a portal configured for CHAP; when authentication is not required iscsi_login_zero_tsih_s2() rewrites AuthMethod to None and the CHAP path is never entered.

Allocate one extra byte. kzalloc() zeroes it and nothing ever writes to it, as every writer copies to offset 0 for at most MAX_KEY_VALUE_PAIRS bytes, so the buffer is always terminated.

Record
CVE-2026-90011
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
EUVDEUVD-2026-80619 9.1

In the Linux kernel, the following vulnerability has been resolved:

scsi: target: iscsi: Reserve a terminator byte for the login payload

iscsi_target_check_login_request() rejects a login PDU whose DataSegmentLength exceeds MAX_KEY_VALUE_PAIRS, but the test is '>' and login->req_buf is allocated with exactly MAX_KEY_VALUE_PAIRS bytes. Since iscsit_get_login_rx() receives payload_length + padding bytes, where

padding = ((-payload_length) & 3);

any payload_length from 8189 to 8192 fills the whole 8192 byte buffer. The write stays in bounds, but no byte is left for a NUL terminator.

The buffer is subsequently consumed as a C string. In the CHAP path chap_check_algorithm() calls kstrdup(a_str), and extract_param() calls strstr(in_buf, pattern) followed by strlen_semi(), none of which take a length. convert_null_to_semi() additionally rewrites every embedded NUL to ';', so even a payload made of well formed NUL separated key=value records is left without a terminator. These walk past the end of the object into adjacent slab memory. It is reachable by an unauthenticated initiator against a portal configured for CHAP; when authentication is not required iscsi_login_zero_tsih_s2() rewrites AuthMethod to None and the CHAP path is never entered.

Allocate one extra byte. kzalloc() zeroes it and nothing ever writes to it, as every writer copies to offset 0 for at most MAX_KEY_VALUE_PAIRS bytes, so the buffer is always terminated.

Record
EUVD-2026-80619
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-m4f8-5753-34xg 9.1

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Reserve...

In the Linux kernel, the following vulnerability has been resolved:

scsi: target: iscsi: Reserve a terminator byte for the login payload

iscsi_target_check_login_request() rejects a login PDU whose DataSegmentLength exceeds MAX_KEY_VALUE_PAIRS, but the test is '>' and login->req_buf is allocated with exactly MAX_KEY_VALUE_PAIRS bytes. Since iscsit_get_login_rx() receives payload_length + padding bytes, where

padding = ((-payload_length) & 3);

any payload_length from 8189 to 8192 fills the whole 8192 byte buffer. The write stays in bounds, but no byte is left for a NUL terminator.

The buffer is subsequently consumed as a C string. In the CHAP path chap_check_algorithm() calls kstrdup(a_str), and extract_param() calls strstr(in_buf, pattern) followed by strlen_semi(), none of which take a length. convert_null_to_semi() additionally rewrites every embedded NUL to ';', so even a payload made of well formed NUL separated key=value records is left without a terminator. These walk past the end of the object into adjacent slab memory. It is reachable by an unauthenticated initiator against a portal configured for CHAP; when authentication is not required iscsi_login_zero_tsih_s2() rewrites AuthMethod to None and the CHAP path is never entered.

Allocate one extra byte. kzalloc() zeroes it and nothing ever writes to it, as every writer copies to offset 0 for at most MAX_KEY_VALUE_PAIRS bytes, so the buffer is always terminated.

Record
GHSA-m4f8-5753-34xg
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
NVD 9.1

In the Linux kernel, the following vulnerability has been resolved:

scsi: target: iscsi: Reserve a terminator byte for the login payload

iscsi_target_check_login_request() rejects a login PDU whose DataSegmentLength exceeds MAX_KEY_VALUE_PAIRS, but the test is '>' and login->req_buf is allocated with exactly MAX_KEY_VALUE_PAIRS bytes. Since iscsit_get_login_rx() receives payload_length + padding bytes, where

padding = ((-payload_length) & 3);

any payload_length from 8189 to 8192 fills the whole 8192 byte buffer. The write stays in bounds, but no byte is left for a NUL terminator.

The buffer is subsequently consumed as a C string. In the CHAP path chap_check_algorithm() calls kstrdup(a_str), and extract_param() calls strstr(in_buf, pattern) followed by strlen_semi(), none of which take a length. convert_null_to_semi() additionally rewrites every embedded NUL to ';', so even a payload made of well formed NUL separated key=value records is left without a terminator. These walk past the end of the object into adjacent slab memory. It is reachable by an unauthenticated initiator against a portal configured for CHAP; when authentication is not required iscsi_login_zero_tsih_s2() rewrites AuthMethod to None and the CHAP path is never entered.

Allocate one extra byte. kzalloc() zeroes it and nothing ever writes to it, as every writer copies to offset 0 for at most MAX_KEY_VALUE_PAIRS bytes, so the buffer is always terminated.

Record
CVE-2026-90011
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVBELL-CVE-2026-90011 9.1
Record
BELL-CVE-2026-90011
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSV 9.1

scsi: target: iscsi: Reserve a terminator byte for the login payload

In the Linux kernel, the following vulnerability has been resolved:

scsi: target: iscsi: Reserve a terminator byte for the login payload

iscsi_target_check_login_request() rejects a login PDU whose DataSegmentLength exceeds MAX_KEY_VALUE_PAIRS, but the test is '>' and login->req_buf is allocated with exactly MAX_KEY_VALUE_PAIRS bytes. Since iscsit_get_login_rx() receives payload_length + padding bytes, where

padding = ((-payload_length) & 3);

any payload_length from 8189 to 8192 fills the whole 8192 byte buffer. The write stays in bounds, but no byte is left for a NUL terminator.

The buffer is subsequently consumed as a C string. In the CHAP path chap_check_algorithm() calls kstrdup(a_str), and extract_param() calls strstr(in_buf, pattern) followed by strlen_semi(), none of which take a length. convert_null_to_semi() additionally rewrites every embedded NUL to ';', so even a payload made of well formed NUL separated key=value records is left without a terminator. These walk past the end of the object into adjacent slab memory. It is reachable by an unauthenticated initiator against a portal configured for CHAP; when authentication is not required iscsi_login_zero_tsih_s2() rewrites AuthMethod to None and the CHAP path is never entered.

Allocate one extra byte. kzalloc() zeroes it and nothing ever writes to it, as every writer copies to offset 0 for at most MAX_KEY_VALUE_PAIRS bytes, so the buffer is always terminated.

Record
CVE-2026-90011
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-07
Show 48 moreShow less
OSVDEBIAN-CVE-2026-90011 9.1

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Reserve a terminator byte for the login payload iscsi_target_check_login_request() rejects a login PDU whose DataSegmentLength exceeds MAX_KEY_VALUE_PAIRS, but the test is '>' and login->req_buf is allocated with exactly MAX_KEY_VALUE_PAIRS bytes. Since iscsit_get_login_rx() receives payload_length + padding bytes, where padding = ((-payload_length) & 3); any payload_length from 8189 to 8192 fills the whole 8192 byte buffer. The write stays in bounds, but no byte is left for a NUL terminator. The buffer is subsequently consumed as a C string. In the CHAP path chap_check_algorithm() calls kstrdup(a_str), and extract_param() calls strstr(in_buf, pattern) followed by strlen_semi(), none of which take a length. convert_null_to_semi() additionally rewrites every embedded NUL to ';', so even a payload made of well formed NUL separated key=value records is left without a terminator. These walk past the end of the object into adjacent slab memory. It is reachable by an unauthenticated initiator against a portal configured for CHAP; when authentication is not required iscsi_login_zero_tsih_s2() rewrites AuthMethod to None and the CHAP path is never entered. Allocate one extra byte. kzalloc() zeroes it and nothing ever writes to it, as every writer copies to offset 0 for at most MAX_KEY_VALUE_PAIRS bytes, so the buffer is always terminated.

Record
DEBIAN-CVE-2026-90011
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-4185 9.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

netfilter: ipset: fix race between dump and ip_set_list resize

The release path of ip_set_dump_do() and ip_set_dump_done() read inst->ip_set_list via ip_set_ref_netlink(), a plain rcu_dereference_raw() of the array pointer. These run from netlink_recvmsg() without the nfnl mutex and without an RCU read-side critical section.

A concurrent ip_set_create() can grow the array: it publishes the new array, calls synchronize_net() and then kvfree()s the old one. Since the dump paths read the array outside any RCU reader, synchronize_net() does not wait for them and the old array can be freed while they still index into it, causing a use-after-free.

The dumped set itself stays pinned via set->ref_netlink, so only the array load needs protecting. Take rcu_read_lock() around it, matching ip_set_get_byname() and __ip_set_put_byindex().

BUG: KASAN: slab-use-after-free in ip_set_dump_do (net/netfilter/ipset/ip_set_core.c:1697) Read of size 8 at addr ffff88800b5c4018 by task exploit/150 Call Trace: ... kasan_report (mm/kasan/report.c:595) ip_set_dump_do (net/netfilter/ipset/ip_set_core.c:1697) netlink_dump (net/netlink/af_netlink.c:2325) netlink_recvmsg (net/netlink/af_netlink.c:1976) sock_recvmsg (net/socket.c:1159) __sys_recvfrom (net/socket.c:2315) ... Oops: general protection fault, probably for non-canonical address ... KASAN NOPTI KASAN: maybe wild-memory-access in range [0x02d6...d0-0x02d6...d7] RIP: 0010:ip_set_dump_do (net/netfilter/ipset/ip_set_core.c:1698) Kernel panic - not syncing: Fatal exception(CVE-2026-64189)

In the Linux kernel, the following vulnerability has been resolved:

sctp: drop a chunk if its transport was removed

sctp_rcv() resolves the transport once per packet and leaves it in chunk->transport. The lookup reference, or the one sctp_add_backlog() takes if the socket is owned by userspace, keeps it around until the chunk has been processed.

An authenticated ASCONF DEL-IP can remove it in the meantime. sctp_assoc_rm_peer() takes the transport out of the association and calls sctp_transport_free(), which tags it dead and drops the reference the association held. There is a window on both paths: the packet can sit on the socket backlog, and on the direct path the lookup completes before bh_lock_sock().

The DATA chunk in that packet puts the removed transport back into asoc->peer.last_data_from. Once the packet is done that reference goes away and the transport is freed by RCU, so the next delayed SACK carries the pointer into the SACK chunk and sctp_outq_select_transport() reads the freed transport's state.

Drop the chunk in sctp_inq_push(), next to the existing rcvr->dead check. Both paths reach it with the association's socket lock held. The peer retransmits it.(CVE-2026-89478)

In the Linux kernel, the following vulnerability has been resolved:

sctp: stop processing a packet once its association is deleted

sctp_endpoint_bh_rcv() looks the association up only when chunk->asoc is NULL, and caches the result in chunk->asoc and chunk->transport without taking a reference.

A packet that matches no association is handed to the endpoint, so a peer can bundle COOKIE ECHO, SHUTDOWN and SHUTDOWN ACK in one packet. The COOKIE ECHO creates the association, the SHUTDOWN chunk caches it, and with the outqueue empty the SHUTDOWN ACK reaches sctp_sf_do_9_2_final(), so the association and its transports are freed.

The endpoint loop has no counterpart to the asoc->base.dead check in sctp_assoc_bh_rcv(). The next chunk writes to last_time_heard in the freed transport and is then passed to sctp_do_sm() with the freed association. The transport is freed through RCU, so this needs the packet to come off the socket backlog, where the loop runs in task context.

The endpoint loop cannot do the same check: it…

Record
OESA-2026-4185
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:92208 8.1

Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (CVE-2026-72288)

  • kernel: KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CVE-2026-72289)

  • kernel: scsi: target: iscsi: Reserve a terminator byte for the login payload (CVE-2026-90011)

  • kernel: KEYS: encrypted: fix integer overflow of datablob_len (CVE-2026-98222)

Bug Fix(es) and Enhancement(s):

  • ipv4: ip_gre: make ipgre_header() robust (rhel-8.10.z) (JIRA:Rocky Linux-271135)

  • ip6_gre: make ip6gre_header() robust (rhel-8.10.z) (JIRA:Rocky Linux-271136)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:92208
CVSS 3.1
8.1 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:92209 8.1

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (CVE-2026-72288)

  • kernel: KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CVE-2026-72289)

  • kernel: scsi: target: iscsi: Reserve a terminator byte for the login payload (CVE-2026-90011)

  • kernel: KEYS: encrypted: fix integer overflow of datablob_len (CVE-2026-98222)

Bug Fix(es) and Enhancement(s):

  • ipv4: ip_gre: make ipgre_header() robust (rhel-8.10.z) (JIRA:Rocky Linux-271135)

  • ip6_gre: make ip6gre_header() robust (rhel-8.10.z) (JIRA:Rocky Linux-271136)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:92209
CVSS 3.1
8.1 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:93412 9.8

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: sctp: stream: fully roll back denied add-stream state (CVE-2026-52929)

  • kernel: ipv6: sit: reload inner IPv6 header after GSO offloads (CVE-2026-53228)

  • kernel: ipvs: clear the svc scheduler ptr early on edit (CVE-2026-53270)

  • kernel: spi: fsl-lpspi: terminate the RX channel on TX prepare failure path (CVE-2026-64303)

  • kernel: mptcp: pm: userspace: fix use-after-free in get_local_id (CVE-2026-68169)

  • kernel: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (CVE-2026-72083)

  • kernel: tipc: require net admin for TIPCv2 netlink mutators (CVE-2026-74283)

  • kernel: Bluetooth: mgmt: fix UAF in pair command cancellation (CVE-2026-74510)

  • kernel: packet: use consistent hard_header_len in non-ring send paths (CVE-2026-74582)

  • kernel: mptcp: options: reset DSS fields in case of unexpected size (CVE-2026-80586)

  • kernel: entry: Fix seccomp bypass after ptrace with TSYNC (CVE-2026-89603)

  • kernel: scsi: target: iscsi: Reserve a terminator byte for the login payload (CVE-2026-90011)

  • kernel: virtio-fs: avoid double-free on failed queue setup (CVE-2026-93827)

  • kernel: smb: client: bound dirent name against end of SMB response in cifs_filldir (CVE-2026-93787)

  • kernel: xfrm: hold net_device reference under RCU in bundle creation (CVE-2026-98364)

  • kernel: ipv4: free inet_opt and ireq_opt after an RCU grace period (CVE-2026-98432)

  • kernel: KVM: arm64: Transfer the hyp stack pages out of the host stage-2 (CVE-2026-98466)

  • kernel: nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge() (CVE-2026-98725)

  • kernel: ZDI-CAN-33367: Linux Kernel skbuff skb_zerocopy Improper Ownership Management Local Privilege Escalation Vulnerability ()

Bug Fix(es) and Enhancement(s):

  • kernel panic in percpu_counter_add_batch() via submit_bio_noacct() due to NULL pointer (JIRA:Rocky Linux-250378)

  • ipv4: ip_gre: make ipgre_header() robust (rhel-9.8.z) (JIRA:Rocky Linux-271127)

  • ip6_gre: make ip6gre_header() robust (rhel-9.8.z) (JIRA:Rocky Linux-271130)

  • Backport "sched: The newidle balance regression" series to rhel 9.8 [rhel-9.8.z] (JIRA:Rocky Linux-288067)

  • Rocky Linux is missing support for conntrack zone filtering in dump/delete requests (9.10) [rhel-9.8.z] (JIRA:Rocky Linux-291352)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:93412
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVRLSA-2026:93413 9.8

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: Kernel: Denial of Service in network socket error handling (CVE-2026-22977)

  • kernel: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (CVE-2026-46174)

  • kernel: i2c: stub: Reject I2C block transfers with invalid length (CVE-2026-64191)

  • kernel: Linux kernel: PPP over L2TP Use-After-Free vulnerability (CVE-2026-68398)

  • kernel: mptcp: pm: userspace: fix use-after-free in get_local_id (CVE-2026-68169)

  • kernel: tipc: require net admin for TIPCv2 netlink mutators (CVE-2026-74283)

  • kernel: mptcp: options: reset DSS fields in case of unexpected size (CVE-2026-80586)

  • kernel: entry: Fix seccomp bypass after ptrace with TSYNC (CVE-2026-89603)

  • kernel: KVM: nVMX: Always flush vpid02 on first use (CVE-2026-89932)

  • kernel: scsi: target: iscsi: Reserve a terminator byte for the login payload (CVE-2026-90011)

  • kernel: virtio-fs: avoid double-free on failed queue setup (CVE-2026-93827)

  • kernel: smb: client: bound dirent name against end of SMB response in cifs_filldir (CVE-2026-93787)

  • kernel: KEYS: encrypted: fix integer overflow of datablob_len (CVE-2026-98222)

  • kernel: xfrm: hold net_device reference under RCU in bundle creation (CVE-2026-98364)

  • kernel: ipv4: free inet_opt and ireq_opt after an RCU grace period (CVE-2026-98432)

  • kernel: nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge() (CVE-2026-98725)

Bug Fix(es) and Enhancement(s):

  • ipv4: ip_gre: make ipgre_header() robust (rhel-10.2.z) (JIRA:Rocky Linux-270702)

  • ip6_gre: make ip6gre_header() robust (rhel-10.2.z) (JIRA:Rocky Linux-270721)

  • Rocky Linux is missing support for conntrack zone filtering in dump/delete requests (10.4) [rhel-10.2.z] (JIRA:Rocky Linux-291348)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:93413
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVRXSA-2026:92209 8.1

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (CVE-2026-72288)

  • kernel: KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CVE-2026-72289)

  • kernel: scsi: target: iscsi: Reserve a terminator byte for the login payload (CVE-2026-90011)

  • kernel: KEYS: encrypted: fix integer overflow of datablob_len (CVE-2026-98222)

Bug Fix(es) and Enhancement(s):

  • ipv4: ip_gre: make ipgre_header() robust (rhel-8.10.z) (JIRA:Rocky Linux SIG Cloud-271135)

  • ip6_gre: make ip6gre_header() robust (rhel-8.10.z) (JIRA:Rocky Linux SIG Cloud-271136)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RXSA-2026:92209
CVSS 3.1
8.1 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-90011 9.1

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Reserve a terminator byte for the login payload iscsi_target_check_login_request() rejects a login PDU whose DataSegmentLength exceeds MAX_KEY_VALUE_PAIRS, but the test is '>' and login->req_buf is allocated with exactly MAX_KEY_VALUE_PAIRS bytes. Since iscsit_get_login_rx() receives payload_length + padding bytes, where padding = ((-payload_length) & 3); any payload_length from 8189 to 8192 fills the whole 8192 byte buffer. The write stays in bounds, but no byte is left for a NUL terminator. The buffer is subsequently consumed as a C string. In the CHAP path chap_check_algorithm() calls kstrdup(a_str), and extract_param() calls strstr(in_buf, pattern) followed by strlen_semi(), none of which take a length. convert_null_to_semi() additionally rewrites every embedded NUL to ';', so even a payload made of well formed NUL separated key=value records is left without a terminator. These walk past the end of the object into adjacent slab memory. It is reachable by an unauthenticated initiator against a portal configured for CHAP; when authentication is not required iscsi_login_zero_tsih_s2() rewrites AuthMethod to None and the CHAP path is never entered. Allocate one extra byte. kzalloc() zeroes it and nothing ever writes to it, as every writer copies to offset 0 for at most MAX_KEY_VALUE_PAIRS bytes, so the buffer is always terminated.

Record
UBUNTU-CVE-2026-90011
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-06
OSVALSA-2026:92208 No score

Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (CVE-2026-72288)
  • kernel: KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CVE-2026-72289)
  • kernel: scsi: target: iscsi: Reserve a terminator byte for the login payload (CVE-2026-90011)
  • kernel: KEYS: encrypted: fix integer overflow of datablob_len (CVE-2026-98222)

Bug Fix(es) and Enhancement(s):

  • ipv4: ip_gre: make ipgre_header() robust (rhel-8.10.z) (JIRA:RHEL-271135)
  • ip6_gre: make ip6gre_header() robust (rhel-8.10.z) (JIRA:RHEL-271136)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:92208
Updated
2026-11-02
OSVALSA-2026:92209 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (CVE-2026-72288)
  • kernel: KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CVE-2026-72289)
  • kernel: scsi: target: iscsi: Reserve a terminator byte for the login payload (CVE-2026-90011)
  • kernel: KEYS: encrypted: fix integer overflow of datablob_len (CVE-2026-98222)

Bug Fix(es) and Enhancement(s):

  • ipv4: ip_gre: make ipgre_header() robust (rhel-8.10.z) (JIRA:RHEL-271135)
  • ip6_gre: make ip6gre_header() robust (rhel-8.10.z) (JIRA:RHEL-271136)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:92209
Updated
2026-11-02
OSVAZL-101213 No score

CVE-2026-90011 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved:

scsi: target: iscsi: Reserve a terminator byte for the login payload

iscsi_target_check_login_request() rejects a login PDU whose DataSegmentLength exceeds MAX_KEY_VALUE_PAIRS, but the test is '>' and login->req_buf is allocated with exactly MAX_KEY_VALUE_PAIRS bytes. Since iscsit_get_login_rx() receives payload_length + padding bytes, where

padding = ((-payload_length) & 3);

any payload_length from 8189 to 8192 fills the whole 8192 byte buffer. The write stays in bounds, but no byte is left for a NUL terminator.

The buffer is subsequently consumed as a C string. In the CHAP path chap_check_algorithm() calls kstrdup(a_str), and extract_param() calls strstr(in_buf, pattern) followed by strlen_semi(), none of which take a length. convert_null_to_semi() additionally rewrites every embedded NUL to ';', so even a payload made of well formed NUL separated key=value records is left without a terminator. These walk past the end of the object into adjacent slab memory. It is reachable by an unauthenticated initiator against a portal configured for CHAP; when authentication is not required iscsi_login_zero_tsih_s2() rewrites AuthMethod to None and the CHAP path is never entered.

Allocate one extra byte. kzalloc() zeroes it and nothing ever writes to it, as every writer copies to offset 0 for at most MAX_KEY_VALUE_PAIRS bytes, so the buffer is always terminated.

Record
AZL-101213
Updated
2026-11-02
OSVCLSA-2026-1791858923 No score

Fix of 174 CVEs

  • CVE-2026-90205
    • ocfs2: validate orphan slot during inode read {CVE-2026-90205}
  • CVE-2026-93054
    • uio: Fix stale info pointer in failed registration path {CVE-2026-93054}
  • CVE-2026-93103
    • RDMA/hfi1: Preserve unit 0 on allocation failure {CVE-2026-93103}
  • CVE-2026-89833
    • f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages() {CVE-2026-89833}
  • CVE-2026-89878
    • media: s2255: check firmware size before reading trailing marker {CVE-2026-89878}
  • CVE-2026-90037
    • NFSD: Prevent client use-after-free during close_lru reaping {CVE-2026-90037}
  • CVE-2026-90296
    • cpufreq: imx6q: fix devres accumulation across driver rebind {CVE-2026-90296}
  • CVE-2026-90415
    • RDMA/cxgb4: free STAG index when TPT entry write fails {CVE-2026-90415}
  • CVE-2026-90081
    • net/rds: use wq_has_sleeper() in rds_cong_map_updated() {CVE-2026-90081}
  • CVE-2026-90420
    • nilfs2: fix infinite loop in nilfs_clean_segments() {CVE-2026-90420}
  • CVE-2026-90116
    • ALSA: mtpav: shut down output timer before card teardown {CVE-2026-90116}
  • CVE-2026-90070
    • tpm: st33zp24: Return zero on status read failure {CVE-2026-90070}
  • CVE-2026-89845
    • scsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry() {CVE-2026-89845}
  • CVE-2026-89944
    • ASoC: hdac_hda: Fix hlink refcount leak on component registration failure {CVE-2026-89944}
  • CVE-2026-90018
    • staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() {CVE-2026-90018}
  • CVE-2026-89860
    • scsi: qla2xxx: Initialize NVMe abort_work once at submission {CVE-2026-89860}
  • CVE-2026-90007
    • scsi: pm8001: Use rollback index when freeing MSI-X vectors {CVE-2026-90007}
  • CVE-2026-90044
    • usb: gadget: f_fs: Fix Use-After-Free in AIO error path {CVE-2026-90044}
  • CVE-2026-68289
    • tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream() {CVE-2026-68289}
  • CVE-2026-90143
    • net: kcm: Hold RCU read lock while running BPF parser {CVE-2026-90143}
  • CVE-2026-90111
    • ip6mr: do not clone dst in ip6mr_cache_report() {CVE-2026-90111}
  • CVE-2026-90283
    • hugetlbfs: release subpool on fill_super failure {CVE-2026-90283}
  • CVE-2026-92521
    • ACPI: PCI: Clear driver_data on all paths that free the acpi_pci_root {CVE-2026-92521}
  • CVE-2026-93048
    • mtd: part: reject MTDPART_OFS_RETAIN in mtd_add_partition() {CVE-2026-93048}
  • CVE-2026-93160
    • crypto: atmel-ecc - reject hardware ECDH without a public key {CVE-2026-93160}
  • CVE-2026-93199
    • i3c: master: Do not treat master device as a duplicate target {CVE-2026-93199}
  • CVE-2026-89953
    • mtd: mtdoops: free page bitmap when the backing MTD is removed {CVE-2026-89953}
  • CVE-2026-89822
    • drm/i915: Guard against NULL driver_data in i915_pci_probe() {CVE-2026-89822}
  • CVE-2026-89937
    • iio: chemical: sgp30: Handle IAQ thread creation failure {CVE-2026-89937}
  • CVE-2026-89993
    • dmaengine: dw-edma: Initialize IRQ data before requesting IRQs {CVE-2026-89993}
  • CVE-2026-89972
    • nvme: add missing SRCU grace period in error path {CVE-2026-89972}
  • CVE-2026-89892
    • media: em28xx: defer audio-only extension registration {CVE-2026-89892}
  • CVE-2026-90023
    • usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers() {CVE-2026-90023}
  • CVE-2026-90020
    • USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() {CVE-2026-90020}
  • CVE-2026-90017
    • staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() {CVE-2026-90017}
  • CVE-2026-90016
    • staging: rtl8723bs: fix OOB read in rtw_restruct_wmm_ie() {CVE-2026-90016}
  • CVE-2026-90329
    • HID: synchronize input before cleaning up a failed probe {CVE-2026-90329} *…
Record
CLSA-2026-1791858923
Updated
2026-11-02
OSVCLSA-2026-1791876326 No score

Fix of 274 CVEs

  • CVE-2026-53091
    • xfrm: Don't clobber inner headers when already set {CVE-2026-53091}
    • net: account for encap headers in qdisc pkt len {CVE-2026-53091}
  • CVE-2026-93803
    • wifi: libipw: fix key index receive bound checks {CVE-2026-93803}
  • CVE-2026-93286
    • net: appletalk: fix NULL pointer dereference in aarp_send_ddp() {CVE-2026-93286}
  • CVE-2026-93280
    • greybus: audio: bound the topology section sizes against the fetched size {CVE-2026-93280}
  • CVE-2026-93213
    • of: fix out-of-bounds read in of_alias_scan() stem parser {CVE-2026-93213}
  • CVE-2026-93802
    • wifi: rsi: validate beacon length before fixed buffer copy {CVE-2026-93802}
  • CVE-2026-93206
    • PCI/proc: Use file_ns_capable() when checking config space read access {CVE-2026-93206}
  • CVE-2026-97448
    • ACPICA: Add validation for node in acpi_ns_build_normalized_path() {CVE-2026-97448}
  • CVE-2026-97408
    • Bluetooth: L2CAP: validate connectionless PSM length {CVE-2026-97408}
  • CVE-2026-93268
    • ext4: skip extra isize expansion during mount to prevent deadlock {CVE-2026-93268}
  • CVE-2026-93782
    • vhost-scsi: flush backend after device ioctls {CVE-2026-93782}
  • CVE-2026-93783
    • Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame {CVE-2026-93783}
  • CVE-2026-97455
    • ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() {CVE-2026-97455}
  • CVE-2026-93807
    • wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers {CVE-2026-93807}
  • CVE-2026-93808
    • ALSA: usb-audio: caiaq: validate EP1 reply lengths {CVE-2026-93808}
  • CVE-2026-89938
    • iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF {CVE-2026-89938}
  • CVE-2026-89927
    • KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock {CVE-2026-89927}
  • CVE-2026-89949
    • batman-adv: dat: avoid unaligned fault in IP extraction {CVE-2026-89949}
  • CVE-2026-89912
    • KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save {CVE-2026-89912}
  • CVE-2026-89932
    • KVM: nVMX: Always flush vpid02 on first use {CVE-2026-89932}
  • CVE-2026-89833
    • f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages() {CVE-2026-89833}
  • CVE-2026-90045
    • USB: gadget: ffs: fix mm lifetime handling {CVE-2026-90045}
  • CVE-2026-89854
    • scsi: qla2xxx: Fix cs84xx use-after-free on host teardown {CVE-2026-89854}
  • CVE-2026-90015
    • xhci: fix lost bounce buffers on TDs spanning several ring segments {CVE-2026-90015}
  • CVE-2026-89979
    • ALSA: pcm: Fix race between non-atomic ops and trigger-start {CVE-2026-89979}
  • CVE-2026-89852
    • scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state() {CVE-2026-89852}
  • CVE-2026-89861
    • scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition() {CVE-2026-89861}
  • CVE-2026-89859
    • scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak {CVE-2026-89859}
  • CVE-2026-90036
    • NFSD: Prevent client use-after-free during blocked-lock reaping {CVE-2026-90036}
  • CVE-2026-89987
    • mm/huge_memory: transfer the pmd dirty bit to the folio on zap {CVE-2026-89987}
  • CVE-2026-89799
    • bpf: Disable preemption in bpf_get_stackid {CVE-2026-89799}
  • CVE-2026-90032
    • media: usbtv: keep device alive while ALSA card exists {CVE-2026-90032}
  • CVE-2026-89822
    • drm/i915: Guard against NULL driver_data in i915_pci_probe() {CVE-2026-89822}
  • CVE-2026-89929
    • KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU {CVE-2026-89929}
  • CVE-2026-89840
    • f2fs: validate MOVE_RANGE destination size {CVE-2026-89840}
  • CVE-2026-89913
    • KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables {CVE-2026-89913} *…
Record
CLSA-2026-1791876326
Updated
2026-11-02
OSVCLSA-2026-1791878869 No score

Fix of 274 CVEs

  • CVE-2026-53091
    • xfrm: Don't clobber inner headers when already set {CVE-2026-53091}
    • net: account for encap headers in qdisc pkt len {CVE-2026-53091}
  • CVE-2026-93803
    • wifi: libipw: fix key index receive bound checks {CVE-2026-93803}
  • CVE-2026-93286
    • net: appletalk: fix NULL pointer dereference in aarp_send_ddp() {CVE-2026-93286}
  • CVE-2026-93280
    • greybus: audio: bound the topology section sizes against the fetched size {CVE-2026-93280}
  • CVE-2026-93213
    • of: fix out-of-bounds read in of_alias_scan() stem parser {CVE-2026-93213}
  • CVE-2026-93802
    • wifi: rsi: validate beacon length before fixed buffer copy {CVE-2026-93802}
  • CVE-2026-93206
    • PCI/proc: Use file_ns_capable() when checking config space read access {CVE-2026-93206}
  • CVE-2026-97448
    • ACPICA: Add validation for node in acpi_ns_build_normalized_path() {CVE-2026-97448}
  • CVE-2026-97408
    • Bluetooth: L2CAP: validate connectionless PSM length {CVE-2026-97408}
  • CVE-2026-93268
    • ext4: skip extra isize expansion during mount to prevent deadlock {CVE-2026-93268}
  • CVE-2026-93782
    • vhost-scsi: flush backend after device ioctls {CVE-2026-93782}
  • CVE-2026-93783
    • Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame {CVE-2026-93783}
  • CVE-2026-97455
    • ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() {CVE-2026-97455}
  • CVE-2026-93807
    • wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers {CVE-2026-93807}
  • CVE-2026-93808
    • ALSA: usb-audio: caiaq: validate EP1 reply lengths {CVE-2026-93808}
  • CVE-2026-89938
    • iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF {CVE-2026-89938}
  • CVE-2026-89927
    • KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock {CVE-2026-89927}
  • CVE-2026-89949
    • batman-adv: dat: avoid unaligned fault in IP extraction {CVE-2026-89949}
  • CVE-2026-89912
    • KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save {CVE-2026-89912}
  • CVE-2026-89932
    • KVM: nVMX: Always flush vpid02 on first use {CVE-2026-89932}
  • CVE-2026-89833
    • f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages() {CVE-2026-89833}
  • CVE-2026-90045
    • USB: gadget: ffs: fix mm lifetime handling {CVE-2026-90045}
  • CVE-2026-89854
    • scsi: qla2xxx: Fix cs84xx use-after-free on host teardown {CVE-2026-89854}
  • CVE-2026-90015
    • xhci: fix lost bounce buffers on TDs spanning several ring segments {CVE-2026-90015}
  • CVE-2026-89979
    • ALSA: pcm: Fix race between non-atomic ops and trigger-start {CVE-2026-89979}
  • CVE-2026-89852
    • scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state() {CVE-2026-89852}
  • CVE-2026-89861
    • scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition() {CVE-2026-89861}
  • CVE-2026-89859
    • scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak {CVE-2026-89859}
  • CVE-2026-90036
    • NFSD: Prevent client use-after-free during blocked-lock reaping {CVE-2026-90036}
  • CVE-2026-89987
    • mm/huge_memory: transfer the pmd dirty bit to the folio on zap {CVE-2026-89987}
  • CVE-2026-89799
    • bpf: Disable preemption in bpf_get_stackid {CVE-2026-89799}
  • CVE-2026-90032
    • media: usbtv: keep device alive while ALSA card exists {CVE-2026-90032}
  • CVE-2026-89822
    • drm/i915: Guard against NULL driver_data in i915_pci_probe() {CVE-2026-89822}
  • CVE-2026-89929
    • KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU {CVE-2026-89929}
  • CVE-2026-89840
    • f2fs: validate MOVE_RANGE destination size {CVE-2026-89840}
  • CVE-2026-89913
    • KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables {CVE-2026-89913} *…
Record
CLSA-2026-1791878869
Updated
2026-11-02
OSVCLSA-2026-1791946572 No score

Fix of 198 CVEs

  • CVE-2024-36894
    • usb: gadget: f_fs: drop the duplicate usb_ep_free_request() in ffs_user_copy_worker() {CVE-2024-36894}
  • CVE-2026-97447
    • ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() {CVE-2026-97447}
  • CVE-2026-93822
    • PCI: iproc: Protect root bus removal with rescan lock {CVE-2026-93822}
  • CVE-2026-93826
    • HID: hidpp: fix potential UAF in hidpp_connect_event() {CVE-2026-93826}
  • CVE-2026-97954
    • net/rds: fix tcp stream corruption with large pages {CVE-2026-97954}
  • CVE-2026-97949
    • configfs: unhash the dentry before dropping the item in rmdir {CVE-2026-97949}
  • CVE-2026-97931
    • ALSA: us122l: Prevent write upgrades for read mappings {CVE-2026-97931}
  • CVE-2026-97940
    • ipv6: fix fib6 walker UAF on seq stop {CVE-2026-97940}
  • CVE-2026-97539
    • usb: xusbatm: don't rely on id table pointer arithmetic {CVE-2026-97539}
  • CVE-2026-74510
    • Bluetooth: mgmt: fix UAF in pair command cancellation {CVE-2026-74510}
  • CVE-2026-72084
    • scsi: target: Bound PR-OUT TransportID parsing to the received buffer {CVE-2026-72084}
  • CVE-2026-90302
    • ocfs2: synchronize heartbeat callbacks with o2net teardown {CVE-2026-90302}
  • CVE-2026-90320
    • ocfs2: validate external xattr entries when reading metadata {CVE-2026-90320}
  • CVE-2026-90321
    • ocfs2: validate inline xattrs during inode block validation {CVE-2026-90321}
  • CVE-2026-90431
    • remoteproc: Prevent crash handling to race with rproc_del() {CVE-2026-90431}
  • CVE-2026-74637
    • perf/core: Fix group leader use-after-free after sibling detach {CVE-2026-74637}
  • CVE-2026-74752
    • sctp: validate cookie AUTH state before use {CVE-2026-74752}
  • CVE-2026-74387
    • ALSA: seq: midi: Serialize output teardown with event_input {CVE-2026-74387}
  • CVE-2026-80536
    • xfs: bounds-check buffer log item's dirty bitmap {CVE-2026-80536}
  • CVE-2026-89659
    • NFSD: Prevent client use-after-free during delegation revoke {CVE-2026-89659}
  • CVE-2026-80576
    • drm/amdgpu: reject oversized IBs with per-ring packet limits {CVE-2026-80576}
  • CVE-2026-90223
    • nfc: llcp: bound SNL TLV parsing to the skb and add length checks {CVE-2026-90223}
  • CVE-2026-80994
    • net: openvswitch: fix flow mask use-after-free on flow deletion {CVE-2026-80994}
  • CVE-2026-72398
    • sctp: add INIT verification after cookie unpacking {CVE-2026-72398}
  • CVE-2026-74583
    • net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
  • CVE-2026-72322
    • ipv6: mcast: Fix potential UAF in MLD delayed work {CVE-2026-72322}
  • CVE-2026-93095
    • hfsplus: validate thread record before delete key rebuild {CVE-2026-93095}
  • CVE-2026-72472
    • nfs: use nfsi->rwsem to protect traversal of the file lock list {CVE-2026-72472}
  • CVE-2026-90045
    • USB: gadget: ffs: fix mm lifetime handling {CVE-2026-90045}
  • CVE-2026-90421
    • PCI: Fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-90421}
  • CVE-2026-64583
    • usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown {CVE-2026-64583}
  • CVE-2026-68329
    • iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() {CVE-2026-68329}
  • CVE-2026-89448
    • iommu/vt-d: Force requesting ACS when tboot is enabled {CVE-2026-89448}
  • CVE-2026-64001
    • ALSA: pcm: oss: Fix setup list UAF on proc write error {CVE-2026-64001}
  • CVE-2026-64305
    • crypto: qat - protect service table iterations with service_lock {CVE-2026-64305}
  • CVE-2026-64348
    • usb: free iso schedules on failed submit {CVE-2026-64348}
  • CVE-2026-64422
    • net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422}
  • CVE-2026-90180
    • block:…
Record
CLSA-2026-1791946572
Updated
2026-11-02
OSVCLSA-2026-1792234299 No score

kernel: Fix of 76 CVEs

  • ipv4: validate checksum_start before completing checksum {CVE-2026-99999}
  • smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 {CVE-2026-89637}
  • smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() {CVE-2026-89633}
  • xen/netfront: drop RX packets with a short Ethernet header {CVE-2026-98375}
  • IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413}
  • IB/isert: reject PDUs declaring more data than was received {CVE-2026-90414}
  • PCI: Fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-90421}
  • usb: fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-93117}
  • HID: synchronize input before cleaning up a failed probe {CVE-2026-90329}
  • HID: core: quiesce input in hid_hw_stop() to prevent use-after-free {CVE-2026-93189}
  • ALSA: mtpav: shut down output timer before card teardown {CVE-2026-90116}
  • slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() {CVE-2026-90057}
  • ext4: fix out-of-bounds read in ext4_read_inline_dir() {CVE-2026-89786}
  • media: cx23885: cancel NetUP CI work before teardown {CVE-2026-89893}
  • scsi: target: iscsi: Reserve a terminator byte for the login payload {CVE-2026-90011}
  • ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() {CVE-2026-90033}
  • Squashfs: check block offset is not negative {CVE-2026-90203}
  • RDMA/mad: Fix receive buffer leak when PKey enforcement fails {CVE-2026-98354}
  • nfsd: validate symlink target length in NFSv4 CREATE {CVE-2026-89699}
  • sunrpc: route to a populated pool in svc_pool_for_cpu() {CVE-2026-89549}
  • isofs: fix out-of-bounds page array access on empty zisofs block {CVE-2026-89778}
  • dm array: validate array block headers on read {CVE-2026-89574}
  • nouveau/gem: reserve the bo in the info ioctl around the vma lookup {CVE-2026-89553}
  • iommu/vt-d: Force requesting ACS when tboot is enabled {CVE-2026-89448}
  • SUNRPC: always drain cache_cleaner before destroying a cache_detail {CVE-2026-89548}
  • SUNRPC: svcauth_gss: enforce krb5 token minimum length {CVE-2026-89550}
  • SUNRPC: harden gss_krb5_unwrap_v2 against short tokens {CVE-2026-89542}
  • slip: fix use-after-free in sl_sync() {CVE-2026-81001}
  • dm raid1: reserve space for NUL-terminator in build_constructor_string() {CVE-2026-89575}
  • net/iucv: filter frames in afiucv_hs_rcv() by ingress device {CVE-2026-81003}
  • netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() {CVE-2026-74569}
  • net: do not send ICMP/NDISC Redirects when peer allocation fails {CVE-2026-74550}
  • drm/vmwgfx: validate DRAW_PRIMITIVES header size before division {CVE-2026-74444}
  • scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer {CVE-2026-74556}
  • ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set {CVE-2026-74498}
  • vxlan: re-fetch eth header after route_shortcircuit() {CVE-2026-80681}
  • net: pktgen: fix proc entry use-after-free {CVE-2026-74479}
  • char: tlclk: fix use-after-free in tlclk_cleanup() {CVE-2026-80622}
  • xfs: bounds-check buffer log item's dirty bitmap {CVE-2026-80536}
  • s390/qeth: validate user buffer length in SNMP and ARP query ioctls {CVE-2026-80584}
  • configfs_lookup(): don't leave ->s_dentry dangling on failure {CVE-2026-74359}
  • dmaengine: Fix possible use after free {CVE-2026-72476}
  • Bluetooth: btusb: fix use-after-free on registration failure {CVE-2026-64471}
  • sctp: fix addr_wq_timer race in sctp_free_addr_wq() {CVE-2026-72383}
  • ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() {CVE-2026-72323}
  • ALSA: 6fire: Fix UAF at error handling during probe {CVE-2026-74505}
  • wifi: ath9k: fix OOB access from firmware tx status queue ID {CVE-2026-74408}
  • ALSA: firewire: isight: bound the sample count to the packet payload {CVE-2026-64483}
  • sctp: validate embedded address parameter length {CVE-2026-74287}
  • netfilter: nf_queue: do not allow packet truncation below transport header offset {CVE-2022-36946}
  • nvmet-rdma: handle inline…
Record
CLSA-2026-1792234299
Updated
2026-11-02
OSVCLSA-2026-1792236238 No score

kernel: Fix of 74 CVEs

  • ipv4: validate checksum_start before completing checksum {CVE-2026-99999}
  • smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 {CVE-2026-89637}
  • smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() {CVE-2026-89633}
  • xen/netfront: drop RX packets with a short Ethernet header {CVE-2026-98375}
  • IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413}
  • IB/isert: reject PDUs declaring more data than was received {CVE-2026-90414}
  • PCI: Fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-90421}
  • usb: fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-93117}
  • HID: synchronize input before cleaning up a failed probe {CVE-2026-90329}
  • HID: core: quiesce input in hid_hw_stop() to prevent use-after-free {CVE-2026-93189}
  • ALSA: mtpav: shut down output timer before card teardown {CVE-2026-90116}
  • slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() {CVE-2026-90057}
  • ext4: fix out-of-bounds read in ext4_read_inline_dir() {CVE-2026-89786}
  • media: cx23885: cancel NetUP CI work before teardown {CVE-2026-89893}
  • scsi: target: iscsi: Reserve a terminator byte for the login payload {CVE-2026-90011}
  • ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() {CVE-2026-90033}
  • Squashfs: check block offset is not negative {CVE-2026-90203}
  • RDMA/mad: Fix receive buffer leak when PKey enforcement fails {CVE-2026-98354}
  • nfsd: validate symlink target length in NFSv4 CREATE {CVE-2026-89699}
  • sunrpc: route to a populated pool in svc_pool_for_cpu() {CVE-2026-89549}
  • isofs: fix out-of-bounds page array access on empty zisofs block {CVE-2026-89778}
  • dm array: validate array block headers on read {CVE-2026-89574}
  • nouveau/gem: reserve the bo in the info ioctl around the vma lookup {CVE-2026-89553}
  • iommu/vt-d: Force requesting ACS when tboot is enabled {CVE-2026-89448}
  • SUNRPC: always drain cache_cleaner before destroying a cache_detail {CVE-2026-89548}
  • SUNRPC: svcauth_gss: enforce krb5 token minimum length {CVE-2026-89550}
  • SUNRPC: harden gss_krb5_unwrap_v2 against short tokens {CVE-2026-89542}
  • slip: fix use-after-free in sl_sync() {CVE-2026-81001}
  • dm raid1: reserve space for NUL-terminator in build_constructor_string() {CVE-2026-89575}
  • net/iucv: filter frames in afiucv_hs_rcv() by ingress device {CVE-2026-81003}
  • netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() {CVE-2026-74569}
  • net: do not send ICMP/NDISC Redirects when peer allocation fails {CVE-2026-74550}
  • drm/vmwgfx: validate DRAW_PRIMITIVES header size before division {CVE-2026-74444}
  • scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer {CVE-2026-74556}
  • ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set {CVE-2026-74498}
  • vxlan: re-fetch eth header after route_shortcircuit() {CVE-2026-80681}
  • net: pktgen: fix proc entry use-after-free {CVE-2026-74479}
  • char: tlclk: fix use-after-free in tlclk_cleanup() {CVE-2026-80622}
  • xfs: bounds-check buffer log item's dirty bitmap {CVE-2026-80536}
  • s390/qeth: validate user buffer length in SNMP and ARP query ioctls {CVE-2026-80584}
  • configfs_lookup(): don't leave ->s_dentry dangling on failure {CVE-2026-74359}
  • dmaengine: Fix possible use after free {CVE-2026-72476}
  • Bluetooth: btusb: fix use-after-free on registration failure {CVE-2026-64471}
  • sctp: fix addr_wq_timer race in sctp_free_addr_wq() {CVE-2026-72383}
  • ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() {CVE-2026-72323}
  • ALSA: 6fire: Fix UAF at error handling during probe {CVE-2026-74505}
  • wifi: ath9k: fix OOB access from firmware tx status queue ID {CVE-2026-74408}
  • ALSA: firewire: isight: bound the sample count to the packet payload {CVE-2026-64483}
  • sctp: validate embedded address parameter length {CVE-2026-74287}
  • netfilter: nf_queue: do not allow packet truncation below transport header offset {CVE-2022-36946}
  • nvmet-rdma: handle inline…
Record
CLSA-2026-1792236238
Updated
2026-11-02
OSVCLSA-2026-1792236273 No score

kernel: Fix of 76 CVEs

  • ipv4: validate checksum_start before completing checksum {CVE-2026-99999}
  • smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 {CVE-2026-89637}
  • smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() {CVE-2026-89633}
  • xen/netfront: drop RX packets with a short Ethernet header {CVE-2026-98375}
  • IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413}
  • IB/isert: reject PDUs declaring more data than was received {CVE-2026-90414}
  • PCI: Fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-90421}
  • usb: fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-93117}
  • HID: synchronize input before cleaning up a failed probe {CVE-2026-90329}
  • HID: core: quiesce input in hid_hw_stop() to prevent use-after-free {CVE-2026-93189}
  • ALSA: mtpav: shut down output timer before card teardown {CVE-2026-90116}
  • slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() {CVE-2026-90057}
  • ext4: fix out-of-bounds read in ext4_read_inline_dir() {CVE-2026-89786}
  • media: cx23885: cancel NetUP CI work before teardown {CVE-2026-89893}
  • scsi: target: iscsi: Reserve a terminator byte for the login payload {CVE-2026-90011}
  • ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() {CVE-2026-90033}
  • Squashfs: check block offset is not negative {CVE-2026-90203}
  • RDMA/mad: Fix receive buffer leak when PKey enforcement fails {CVE-2026-98354}
  • nfsd: validate symlink target length in NFSv4 CREATE {CVE-2026-89699}
  • sunrpc: route to a populated pool in svc_pool_for_cpu() {CVE-2026-89549}
  • isofs: fix out-of-bounds page array access on empty zisofs block {CVE-2026-89778}
  • dm array: validate array block headers on read {CVE-2026-89574}
  • nouveau/gem: reserve the bo in the info ioctl around the vma lookup {CVE-2026-89553}
  • iommu/vt-d: Force requesting ACS when tboot is enabled {CVE-2026-89448}
  • SUNRPC: always drain cache_cleaner before destroying a cache_detail {CVE-2026-89548}
  • SUNRPC: svcauth_gss: enforce krb5 token minimum length {CVE-2026-89550}
  • SUNRPC: harden gss_krb5_unwrap_v2 against short tokens {CVE-2026-89542}
  • slip: fix use-after-free in sl_sync() {CVE-2026-81001}
  • dm raid1: reserve space for NUL-terminator in build_constructor_string() {CVE-2026-89575}
  • net/iucv: filter frames in afiucv_hs_rcv() by ingress device {CVE-2026-81003}
  • netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() {CVE-2026-74569}
  • net: do not send ICMP/NDISC Redirects when peer allocation fails {CVE-2026-74550}
  • drm/vmwgfx: validate DRAW_PRIMITIVES header size before division {CVE-2026-74444}
  • scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer {CVE-2026-74556}
  • ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set {CVE-2026-74498}
  • vxlan: re-fetch eth header after route_shortcircuit() {CVE-2026-80681}
  • net: pktgen: fix proc entry use-after-free {CVE-2026-74479}
  • char: tlclk: fix use-after-free in tlclk_cleanup() {CVE-2026-80622}
  • xfs: bounds-check buffer log item's dirty bitmap {CVE-2026-80536}
  • s390/qeth: validate user buffer length in SNMP and ARP query ioctls {CVE-2026-80584}
  • configfs_lookup(): don't leave ->s_dentry dangling on failure {CVE-2026-74359}
  • dmaengine: Fix possible use after free {CVE-2026-72476}
  • Bluetooth: btusb: fix use-after-free on registration failure {CVE-2026-64471}
  • sctp: fix addr_wq_timer race in sctp_free_addr_wq() {CVE-2026-72383}
  • ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() {CVE-2026-72323}
  • ALSA: 6fire: Fix UAF at error handling during probe {CVE-2026-74505}
  • wifi: ath9k: fix OOB access from firmware tx status queue ID {CVE-2026-74408}
  • ALSA: firewire: isight: bound the sample count to the packet payload {CVE-2026-64483}
  • sctp: validate embedded address parameter length {CVE-2026-74287}
  • netfilter: nf_queue: do not allow packet truncation below transport header offset {CVE-2022-36946}
  • nvmet-rdma: handle inline…
Record
CLSA-2026-1792236273
Updated
2026-11-02
OSVCLSA-2026-1792749577 No score

kernel: Fix of 97 CVEs

  • net: skbuff: propagate shared-frag marker in skb_zerocopy()
  • net: bridge: stop fast-leave after deleting a port group {CVE-2026-74480}
  • net: ipv6: clear suppressed fib6 rule result {CVE-2026-74581}
  • net/sched: fix pedit partial COW leading to page cache corruption {CVE-2026-46331}
  • ipvs: do not propagate one-packet flag to synced conns {CVE-2026-80714}
  • net: skbuff: propagate shared-frag marker through frag-transfer helpers {CVE-2026-43503}
  • sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START {CVE-2026-98130}
  • tipc: require net admin for TIPCv2 netlink mutators {CVE-2026-74283}
  • sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks {CVE-2026-53004}
  • usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() {CVE-2026-63962}
  • ice: fix double-free of tx_buf skb {CVE-2026-53009}
  • configfs: unhash the dentry before dropping the item in rmdir {CVE-2026-97949}
  • configfs_lookup(): don't leave ->s_dentry dangling on failure {CVE-2026-74359}
  • xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() {CVE-2026-53239}
  • bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops {CVE-2026-53078}
  • crypto: authencesn - reject short ahash digests during instance creation {CVE-2026-46033}
  • smb: client: reject userspace cifs.idmap descriptions {CVE-2026-97564}
  • HID: lg-g15: cancel pending work on remove to fix a use-after-free {CVE-2026-64362}
  • HID: hidpp: fix potential UAF in hidpp_connect_event() {CVE-2026-93826}
  • hid: hid-logitech-hidpp: avoid unnecessary assignments in hidpp_connect_event {CVE-2026-93826}
  • KEYS: encrypted: fix integer overflow of datablob_len {CVE-2026-98222}
  • scsi: qla2xxx: Skip vport under deletion in report ID acquisition {CVE-2026-97531}
  • dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() {CVE-2026-98343}
  • tipc: prevent snt_unacked underflow on CONN_ACK {CVE-2026-74282}
  • libceph: Fix potential null-ptr-deref in decode_choose_args() {CVE-2026-52957}
  • libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() {CVE-2026-52956}
  • sctp: prevent peer transport count overflow {CVE-2026-74469}
  • sctp: fix addr_wq_timer race in sctp_free_addr_wq() {CVE-2026-72383}
  • sctp: fix err_chunk memory leaks in INIT handling {CVE-2026-72413}
  • nvme: add missing SRCU grace period in error path {CVE-2026-89972}
  • nvme-tcp: fix host memory disclosure on R2T for a read command {CVE-2026-89481}
  • drm/vmwgfx: validate DRAW_PRIMITIVES header size before division {CVE-2026-74444}
  • drm/amd/display: Fix dangling pointer in CRTC reset function {CVE-2026-93175}
  • nouveau/gem: reserve the bo in the info ioctl around the vma lookup {CVE-2026-89553}
  • usb: fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-93117}
  • usb: xusbatm: don't rely on id table pointer arithmetic {CVE-2026-97539}
  • USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() {CVE-2026-53195}
  • wifi: brcmsmac: fix UAF in brcms_free_timer() {CVE-2026-98196}
  • slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() {CVE-2026-90057}
  • vxlan: re-fetch eth header after route_shortcircuit() {CVE-2026-80681}
  • net: thunderbolt: Fix frags[] overflow by bounding frame_count {CVE-2026-72157}
  • RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() {CVE-2026-46181}
  • wifi: ath9k: fix OOB access from firmware tx status queue ID {CVE-2026-74408}
  • ppp: require CAP_NET_ADMIN in target netns for unattached ioctls {CVE-2026-53075}
  • wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() {CVE-2026-46069}
  • Bluetooth: btusb: fix use-after-free on registration failure {CVE-2026-64471}
  • scsi: target: iscsi: Reserve a terminator byte for the login payload {CVE-2026-90011}
  • scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() {CVE-2026-46149}
  • pNFS: Fix use-after-free in pnfs_update_layout() {CVE-2026-63800}
  • NFSv4/flexfiles: reject zero filehandle version count {CVE-2026-53392}
  • fs/mbcache: cancel shrink work before destroying the…
Record
CLSA-2026-1792749577
Updated
2026-11-02
OSVCLSA-2026-1792759740 No score

kernel: Fix of 134 CVEs

  • net: skbuff: propagate shared-frag marker in skb_zerocopy()
  • net: bridge: stop fast-leave after deleting a port group {CVE-2026-74480}
  • net: ipv6: clear suppressed fib6 rule result {CVE-2026-74581}
  • ipvs: do not propagate one-packet flag to synced conns {CVE-2026-80714}
  • net: skbuff: propagate shared-frag marker through frag-transfer helpers {CVE-2026-43503}
  • net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow {CVE-2026-98025}
  • ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF {CVE-2026-98116}
  • sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START {CVE-2026-98130}
  • dm cache policy smq: check allocation under invalidate lock {CVE-2026-53265}
  • RDMA/siw: Bound fragmented header copies by the remaining length {CVE-2026-98323}
  • tty: clear cdev pointer after cdev_add() failure {CVE-2026-90334}
  • tty: skip cdev_del() when no cdev is registered {CVE-2026-90335}
  • procfs: fix missing RCU protection when reading real_parent in do_task_stat() {CVE-2026-46259}
  • sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL {CVE-2026-46227}
  • drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() {CVE-2026-46209}
  • drm: Remove plane hsub/vsub alignment requirement for core helpers {CVE-2026-46209}
  • RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path {CVE-2026-46189}
  • RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() {CVE-2026-46181}
  • scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() {CVE-2026-46149}
  • RDMA/rxe: Reject unknown opcodes before ICRC processing {CVE-2026-46133}
  • ip6_gre: Use cached t->net in ip6erspan_changelink(). {CVE-2026-46120}
  • libceph: Fix slab-out-of-bounds access in auth message processing {CVE-2026-46119}
  • Bluetooth: hci_event: fix potential UAF in SSP passkey handlers {CVE-2026-46056}
  • net: qrtr: ns: Fix use-after-free in driver remove() {CVE-2026-46047}
  • RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv {CVE-2026-46043}
  • gfs2: Fix use-after-free in iomap inline data write path {CVE-2026-45984}
  • gfs2: Add metapath_dibh helper {CVE-2026-45984}
  • bonding: alb: fix UAF in rlb_arp_recv during bond up/down {CVE-2026-45970}
  • gfs2: Fix slab-use-after-free in qd_put {CVE-2026-45861}
  • RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send {CVE-2026-45856}
  • dm: fix a buffer overflow in ioctl processing {CVE-2026-46294}
  • wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task {CVE-2026-46180}
  • netfilter: nf_log: validate MAC header was set before dumping it {CVE-2026-52942}
  • xfrm: espintcp: do not reuse an in-progress partial send {CVE-2026-52935}
  • sctp: purge outqueue on stale COOKIE-ECHO handling {CVE-2026-52924}
  • ipc: limit next_id allocation to the valid ID range {CVE-2026-52923}
  • netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920}
  • netfilter: nf_queue: hold bridge skb->dev while queued {CVE-2026-52912}
  • ipvs: clear the svc scheduler ptr early on edit {CVE-2026-53270}
  • netfilter: conntrack_irc: fix possible out-of-bounds read {CVE-2026-53268}
  • net/sched: act_api: use RCU with deferred freeing for action lifecycle {CVE-2026-53264}
  • Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() {CVE-2026-53256}
  • Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
  • xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() {CVE-2026-53239}
  • ipv6: sit: reload inner IPv6 header after GSO offloads {CVE-2026-53228}
  • net: guard timestamp cmsgs to real error queue skbs {CVE-2026-53223}
  • USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() {CVE-2026-53195}
  • wifi: nl80211: reject oversized EMA RNR lists {CVE-2026-53182}
  • netfilter: require Ethernet MAC header before using eth_hdr() {CVE-2026-53131}
  • bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops {CVE-2026-53078}
  • ppp: require CAP_NET_ADMIN in target…
Record
CLSA-2026-1792759740
Updated
2026-11-02
OSVCLSA-2026-1792979985 No score

kernel: Fix of 154 CVEs

  • net: bridge: fix vlan tunnel dst refcnt when egressing {CVE-2021-47222}
  • net: bridge: fix vlan tunnel dst null pointer dereference {CVE-2021-47223}
  • writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() {CVE-2026-64378}
  • writeback, cgroup: increment isw_nr_in_flight before grabbing an inode {CVE-2026-64378}
  • writeback, cgroup: add smp_mb() to cgroup_writeback_umount() {CVE-2026-64378}
  • fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going into workqueue when umount {CVE-2026-64378}
  • libceph: validate banner payload length {CVE-2026-90067}
  • drm/virtio: release the GEM object on virtio_gpu_vram_create() errors {CVE-2026-98606}
  • procfs: fix missing RCU protection when reading real_parent in do_task_stat() {CVE-2026-46259}
  • NFSv4/flexfiles: reject zero filehandle version count {CVE-2026-53392}
  • smb: client: cancel reconnect work in clean_demultiplex_info() {CVE-2026-98175}
  • smb: client: reject userspace cifs.idmap descriptions {CVE-2026-97564}
  • smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 {CVE-2026-89637}
  • smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() {CVE-2026-89633}
  • net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow {CVE-2026-98025}
  • RDMA/siw: Fix endpoint/socket association handling {CVE-2026-74345}
  • RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs {CVE-2026-74390}
  • nfsd: fix clock domain mismatch in clients_still_reclaiming() {CVE-2026-89685}
  • vdpa_sim_blk: reject out-of-range sector starts {CVE-2026-97991}
  • Drivers: hv: vmbus: use generic driver_override infrastructure {CVE-2026-80676}
  • HID: wacom: Fix OOB write in wacom_hid_set_device_mode() {CVE-2026-63916}
  • nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone {CVE-2026-89482}
  • nvmet-tcp: fix page fragment cache leak in error path {CVE-2026-74386}
  • bpf: mark a NULL call argument precise {CVE-2026-98019}
  • bpf: Don't predict JMP32 pointer vs zero comparisons {CVE-2026-98041}
  • ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get {CVE-2026-72262}
  • ASoC: SOF: ipc3-topology: Move and correct size checks in sof_ipc3_control_load_bytes() {CVE-2026-72262}
  • Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan {CVE-2026-98108}
  • mm/page_reporting: use system_freezable_wq to fix UAF during suspend {CVE-2026-74481}
  • netfilter: synproxy: refresh tcphdr after skb_ensure_writable {CVE-2026-64007}
  • netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() {CVE-2026-74569}
  • reboot: fix cad_pid use-after-free race {CVE-2026-97938}
  • fs/resctrl: Fix UAF from worker threads when domains are removed {CVE-2026-93099}
  • ext4: fix out-of-bounds read in ext4_read_inline_dir() {CVE-2026-89786}
  • ext4: fix dirtyclusters double decrement on fs shutdown {CVE-2026-45920}
  • openvswitch: Fix CT limit teardown use-after-free {CVE-2026-89488}
  • sctp: fix NULL deref on untransmitted RECONF completion {CVE-2026-89477}
  • netfilter: conntrack: remove sprintf usage {CVE-2026-53002}
  • fuse: re-lock request before replacing page cache folio {CVE-2026-53388}
  • fanotify: fix false positive on permission events {CVE-2026-46150}
  • configfs_lookup(): don't leave ->s_dentry dangling on failure {CVE-2026-74359}
  • sctp: add INIT verification after cookie unpacking {CVE-2026-72398}
  • sctp: fix err_chunk memory leaks in INIT handling {CVE-2026-72413}
  • sctp: validate embedded INIT chunk and address list lengths in cookie {CVE-2026-53224}
  • sctp: stream: fully roll back denied add-stream state {CVE-2026-52929}
  • sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing {CVE-2026-53246}
  • sctp: diag: reject stale associations in dump_one path {CVE-2026-52917}
  • sctp: Hold sock lock while iterating over address list {CVE-2026-52917}
  • sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL {CVE-2026-46227}
  • nfsd: gate nfs3…
Record
CLSA-2026-1792979985
Updated
2026-11-02
OSVMGASA-2026-0506 No score

Updated kernel, drakx-installer-images, kmod-nvidia-current-wopengpu, kmod-xtables-addons & kmod-virtualbox packages fix Security Vulnerabilities

Upstream kernel 6.18.55 version fixes bugs and vulnerabilities. The kmod-xtables-addons, kmod-virtualbox, kmod-nvidia-current-wopengpu & drakx-installer-images packages have been updated to work with this new kernel.

Record
MGASA-2026-0506
Updated
2026-11-02
OSVMGASA-2026-0542 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.18.55 fixes vulnerabilities. For information about the vulnerabilities see the links.

Record
MGASA-2026-0542
Updated
2026-11-02
OSVopenSUSE-SU-2026:11880-1 No score

kernel-devel-7.2.7-1.1 on GA media

These are all security issues fixed in the kernel-devel-7.2.7-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11880-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:22167-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2026-31731: thermal: core: Address thermal zone removal races with resume (bsc#1264042).
  • CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).
  • CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
  • CVE-2026-63830: net: skmsg: preserve sg.copy across SG transforms (bsc#1272178).
  • CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
  • CVE-2026-64058: netfs: Fix netfs_read_folio() to wait on writeback (bsc#1272898).
  • CVE-2026-64060: netfs: Fix leak of request in netfs_write_begin() error handling (bsc#1272901).
  • CVE-2026-64062: netfs: Fix potential deadlock in write-through mode (bsc#1272952).
  • CVE-2026-64063: netfs: Fix streaming write being overwritten (bsc#1272955).
  • CVE-2026-64064: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (bsc#1272956).
  • CVE-2026-64068: netfs: Fix missing locking around retry adding new subreqs (bsc#1272509).
  • CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
  • CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
  • CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
  • CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039).
  • CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080).
  • CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
  • CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
  • CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
  • CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
  • CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
  • CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
  • CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
  • CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
  • CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
  • CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
  • CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
  • CVE-2026-72174: fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole() (bsc#1277695).
  • CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602).
  • CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
  • CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
  • CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663).
  • CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665).
  • CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
  • CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
  • CVE-2026-72355: netfs: Fix barriering when walking subrequest list (bsc#1276330).
  • CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033).
  • CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
  • CVE-2026-74306: vfio/qat: fix f_pos race in qat_vf_resume_write() (bsc#1276907).
  • CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
  • CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103).
  • CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal…
Record
openSUSE-SU-2026:22167-1
Updated
2026-11-02
OSVSUSE-SU-2026:24371-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
  • CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
  • CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
  • CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178).
  • CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
  • CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
  • CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
  • CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
  • CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
  • CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
  • CVE-2026-64568: wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure (bsc#1274008).
  • CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
  • CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
  • CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
  • CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
  • CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
  • CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
  • CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
  • CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
  • CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
  • CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
  • CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
  • CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
  • CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
  • CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
  • CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
  • CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
  • CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232).
  • CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894).
  • CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
  • CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889).
  • CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
  • CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804).
  • CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931).
  • CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310).
  • CVE-2026-74723: btrfs: lzo: reject inline extents without valid headers (bsc#1276562).
  • CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode…
Record
SUSE-SU-2026:24371-1
Updated
2026-11-02
OSVSUSE-SU-2026:24379-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
  • CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
  • CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
  • CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178).
  • CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
  • CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
  • CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
  • CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
  • CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
  • CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
  • CVE-2026-64568: wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure (bsc#1274008).
  • CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
  • CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
  • CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
  • CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
  • CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
  • CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
  • CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
  • CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
  • CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
  • CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
  • CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
  • CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
  • CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
  • CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
  • CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
  • CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
  • CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232).
  • CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894).
  • CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
  • CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889).
  • CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
  • CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804).
  • CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931).
  • CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310).
  • CVE-2026-74723: btrfs: lzo: reject inline extents without valid headers (bsc#1276562).
  • CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode…
Record
SUSE-SU-2026:24379-1
Updated
2026-11-02
OSVSUSE-SU-2026:24386-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2026-31731: thermal: core: Address thermal zone removal races with resume (bsc#1264042).
  • CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).
  • CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
  • CVE-2026-63830: net: skmsg: preserve sg.copy across SG transforms (bsc#1272178).
  • CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
  • CVE-2026-64058: netfs: Fix netfs_read_folio() to wait on writeback (bsc#1272898).
  • CVE-2026-64060: netfs: Fix leak of request in netfs_write_begin() error handling (bsc#1272901).
  • CVE-2026-64062: netfs: Fix potential deadlock in write-through mode (bsc#1272952).
  • CVE-2026-64063: netfs: Fix streaming write being overwritten (bsc#1272955).
  • CVE-2026-64064: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (bsc#1272956).
  • CVE-2026-64068: netfs: Fix missing locking around retry adding new subreqs (bsc#1272509).
  • CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
  • CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
  • CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
  • CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039).
  • CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080).
  • CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
  • CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
  • CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
  • CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
  • CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
  • CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
  • CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
  • CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
  • CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
  • CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
  • CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
  • CVE-2026-72174: fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole() (bsc#1277695).
  • CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602).
  • CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
  • CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
  • CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663).
  • CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665).
  • CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
  • CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
  • CVE-2026-72355: netfs: Fix barriering when walking subrequest list (bsc#1276330).
  • CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033).
  • CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
  • CVE-2026-74306: vfio/qat: fix f_pos race in qat_vf_resume_write() (bsc#1276907).
  • CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
  • CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103).
  • CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal…
Record
SUSE-SU-2026:24386-1
Updated
2026-11-02
OSVSUSE-SU-2026:24422-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2026-31731: thermal: core: Address thermal zone removal races with resume (bsc#1264042).
  • CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).
  • CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
  • CVE-2026-63830: net: skmsg: preserve sg.copy across SG transforms (bsc#1272178).
  • CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
  • CVE-2026-64058: netfs: Fix netfs_read_folio() to wait on writeback (bsc#1272898).
  • CVE-2026-64060: netfs: Fix leak of request in netfs_write_begin() error handling (bsc#1272901).
  • CVE-2026-64062: netfs: Fix potential deadlock in write-through mode (bsc#1272952).
  • CVE-2026-64063: netfs: Fix streaming write being overwritten (bsc#1272955).
  • CVE-2026-64064: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (bsc#1272956).
  • CVE-2026-64068: netfs: Fix missing locking around retry adding new subreqs (bsc#1272509).
  • CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
  • CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
  • CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
  • CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039).
  • CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080).
  • CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
  • CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
  • CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
  • CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
  • CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
  • CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
  • CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
  • CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
  • CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
  • CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
  • CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
  • CVE-2026-72174: fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole() (bsc#1277695).
  • CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602).
  • CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
  • CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
  • CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663).
  • CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665).
  • CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
  • CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
  • CVE-2026-72355: netfs: Fix barriering when walking subrequest list (bsc#1276330).
  • CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033).
  • CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
  • CVE-2026-74306: vfio/qat: fix f_pos race in qat_vf_resume_write() (bsc#1276907).
  • CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
  • CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103).
  • CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal…
Record
SUSE-SU-2026:24422-1
Updated
2026-11-02
OSVSUSE-SU-2026:24437-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2026-31731: thermal: core: Address thermal zone removal races with resume (bsc#1264042).
  • CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).
  • CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
  • CVE-2026-63830: net: skmsg: preserve sg.copy across SG transforms (bsc#1272178).
  • CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
  • CVE-2026-64058: netfs: Fix netfs_read_folio() to wait on writeback (bsc#1272898).
  • CVE-2026-64060: netfs: Fix leak of request in netfs_write_begin() error handling (bsc#1272901).
  • CVE-2026-64062: netfs: Fix potential deadlock in write-through mode (bsc#1272952).
  • CVE-2026-64063: netfs: Fix streaming write being overwritten (bsc#1272955).
  • CVE-2026-64064: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (bsc#1272956).
  • CVE-2026-64068: netfs: Fix missing locking around retry adding new subreqs (bsc#1272509).
  • CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
  • CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
  • CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
  • CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039).
  • CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080).
  • CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
  • CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
  • CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
  • CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
  • CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
  • CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
  • CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
  • CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
  • CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
  • CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
  • CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
  • CVE-2026-72174: fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole() (bsc#1277695).
  • CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602).
  • CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
  • CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
  • CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663).
  • CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665).
  • CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
  • CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
  • CVE-2026-72355: netfs: Fix barriering when walking subrequest list (bsc#1276330).
  • CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033).
  • CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
  • CVE-2026-74306: vfio/qat: fix f_pos race in qat_vf_resume_write() (bsc#1276907).
  • CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
  • CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103).
  • CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal…
Record
SUSE-SU-2026:24437-1
Updated
2026-11-02
OSVSUSE-SU-2026:24446-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2026-31731: thermal: core: Address thermal zone removal races with resume (bsc#1264042).
  • CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).
  • CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
  • CVE-2026-63830: net: skmsg: preserve sg.copy across SG transforms (bsc#1272178).
  • CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
  • CVE-2026-64058: netfs: Fix netfs_read_folio() to wait on writeback (bsc#1272898).
  • CVE-2026-64060: netfs: Fix leak of request in netfs_write_begin() error handling (bsc#1272901).
  • CVE-2026-64062: netfs: Fix potential deadlock in write-through mode (bsc#1272952).
  • CVE-2026-64063: netfs: Fix streaming write being overwritten (bsc#1272955).
  • CVE-2026-64064: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (bsc#1272956).
  • CVE-2026-64068: netfs: Fix missing locking around retry adding new subreqs (bsc#1272509).
  • CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
  • CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
  • CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
  • CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039).
  • CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080).
  • CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
  • CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
  • CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
  • CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
  • CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
  • CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
  • CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
  • CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
  • CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
  • CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
  • CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
  • CVE-2026-72174: fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole() (bsc#1277695).
  • CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602).
  • CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
  • CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
  • CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663).
  • CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665).
  • CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
  • CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
  • CVE-2026-72355: netfs: Fix barriering when walking subrequest list (bsc#1276330).
  • CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033).
  • CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
  • CVE-2026-74306: vfio/qat: fix f_pos race in qat_vf_resume_write() (bsc#1276907).
  • CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
  • CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103).
  • CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal…
Record
SUSE-SU-2026:24446-1
Updated
2026-11-02
OSVSUSE-SU-2026:24473-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
  • CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
  • CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
  • CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178).
  • CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
  • CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
  • CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
  • CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
  • CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
  • CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
  • CVE-2026-64568: wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure (bsc#1274008).
  • CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
  • CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
  • CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
  • CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
  • CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
  • CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
  • CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
  • CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
  • CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
  • CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
  • CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
  • CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
  • CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
  • CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
  • CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
  • CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
  • CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232).
  • CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894).
  • CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
  • CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889).
  • CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
  • CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804).
  • CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931).
  • CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310).
  • CVE-2026-74723: btrfs: lzo: reject inline extents without valid headers (bsc#1276562).
  • CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode…
Record
SUSE-SU-2026:24473-1
Updated
2026-11-04
OSVSUSE-SU-2026:24553-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
  • CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
  • CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
  • CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178).
  • CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
  • CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
  • CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
  • CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
  • CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
  • CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
  • CVE-2026-64568: wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure (bsc#1274008).
  • CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
  • CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
  • CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
  • CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
  • CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
  • CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
  • CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
  • CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
  • CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
  • CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
  • CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
  • CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
  • CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
  • CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
  • CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
  • CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
  • CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232).
  • CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894).
  • CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
  • CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889).
  • CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
  • CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804).
  • CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931).
  • CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310).
  • CVE-2026-74723: btrfs: lzo: reject inline extents without valid headers (bsc#1276562).
  • CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode…
Record
SUSE-SU-2026:24553-1
Updated
2026-11-07
OSVSUSE-SU-2026:4892-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2023-54158: btrfs: don't free qgroup space unless specified (bsc#1256076).
  • CVE-2023-54180: btrfs: handle case when repair happens with dev-replace (bsc#1255995).
  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-63948: Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn (bsc#1272670).
  • CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
  • CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
  • CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64456: hwrng: virtio: clamp device-reported used.len at copy_data() (bsc#1273288).
  • CVE-2026-64593: btrfs: do not trim a device which is not writeable (bsc#1274497).
  • CVE-2026-68106: drm/amdgpu: fix division by zero with invalid uvd dimensions (bsc#1274853).
  • CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
  • CVE-2026-68236: drm/amd/display: set new_stream to NULL after release (bsc#1275659).
  • CVE-2026-68303: drm/vc4: hvs/v3d: Fix null dereference in unbind (bsc#1275080).
  • CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
  • CVE-2026-68430: drm/amdgpu/gfx8: drop unecessary BUG_ON() (bsc#1276273).
  • CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
  • CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
  • CVE-2026-72319: ipvs: ensure inner headers in ICMP errors are in headroom (bsc#1275964).
  • CVE-2026-72476: dmaengine: Fix possible use after free (bsc#1276844).
  • CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
  • CVE-2026-74408: wifi: ath9k: fix OOB access from firmware tx status queue ID (bsc#1276387).
  • CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894).
  • CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
  • CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889).
  • CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
  • CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310).
  • CVE-2026-74675: vt: stabilize tty reference in kbd_keycode with tty_port_tty_get (bsc#1278313).
  • CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259).
  • CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).
  • CVE-2026-89726: lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen() (bsc#1281058).
  • CVE-2026-89778: isofs: fix out-of-bounds page array access on empty zisofs block (bsc#1280966).
  • CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819).
  • CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280).
  • CVE-2026-90283: hugetlbfs: release subpool on fill_super failure (bsc#1281771).
  • CVE-2026-93252: ocfs2: make ocfs2_set_acl() static (bsc#1282784).
  • CVE-2026-93287: i2c: smbus: reject oversized block transfers in the common path (bsc#1282744).
  • CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808).
  • CVE-2026-93820: PCI: rockchip: Protect root bus removal with rescan lock (bsc#1282755).
  • CVE-2026-93822: PCI: iproc: Protect root bus removal with rescan lock (bsc#1282762).
  • CVE-2026-97416: btrfs: balance: fix potential…
Record
SUSE-SU-2026:4892-1
Updated
2026-11-02
OSVSUSE-SU-2026:4933-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
  • CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).
  • CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280).
  • CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684).

The following non security issues were fixed:

  • ACPI, APEI, EINJ: Subtract any matching Register Region from Trigger resources (git-fixes).
  • ACPI: sysfs: Fix a buffer overrun problem with description_show() (git-fixes).
  • PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes).
  • PCI: PM: Fix pci_power_up() (git-fixes).
Record
SUSE-SU-2026:4933-1
Updated
2026-11-02
OSVSUSE-SU-2026:4934-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-71183: btrfs: always detect conflicting inodes when logging inode refs (bsc#1257631).
  • CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
  • CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
  • CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
  • CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
  • CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804).
  • CVE-2026-74624: netfilter: nf_conntrack: defer invalid log until after unlock (bsc#1277599).
  • CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259).
  • CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743).
  • CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251).
  • CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819).
  • CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280).
  • CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932).
  • CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851).
  • CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946).
  • CVE-2026-97945: replace with mainline version and update References (bsc#1283144).
  • CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963).
  • CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894).
  • CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835).
  • CVE-2026-98173: smb: client: fix use-after-free of iface in cifs_try_adding_channels() (bsc#1284415).
  • CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790).
  • CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408).
  • CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713).
  • CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791).
  • CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746).
  • CVE-2026-98366: RDMA/rxe: validate access flags before swapping the MR's PD (bsc#1284655).
  • CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685).
  • CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684).

The following non security issues were fixed:

  • Drivers: hv: Avoid infinite retry loop in init_vp_index() (git-fixes).
  • Drivers: hv: Don't reset VMBus connection state on error/exit paths (git-fixes).
  • Drivers: hv: vmbus: fix typo 'substract' in comment (git-fixes).
  • net: mana: reserve RX buffer headroom to fix forwarding performance (git-fixes).
  • netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684).
  • PCI: hv: Probe vPCI buses asynchronously (git-fixes).
  • PCI: hv: Warn when wait_for_response() waits indefinitely (git-fixes).
  • tools/hv: fix typo 'retrive' in comment (git-fixes).
Record
SUSE-SU-2026:4934-1
Updated
2026-11-02
OSVSUSE-SU-2026:4935-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
  • CVE-2026-43132: dm-verity: correctly handle dm_bufio_client_create() failure (bsc#1264614).
  • CVE-2026-43184: rnbd-srv: Zero the rsp buffer before using it (bsc#1264622).
  • CVE-2026-43283: net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle (bsc#1264295).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-43457: mctp: i2c: fix skb memory leak in receive path (bsc#1265000).
  • CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
  • CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
  • CVE-2026-46034: vfio/cdx: Fix NULL pointer dereference in interrupt trigger path (bsc#1266757).
  • CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
  • CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178).
  • CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
  • CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
  • CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
  • CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
  • CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
  • CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039).
  • CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
  • CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
  • CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
  • CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
  • CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
  • CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
  • CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
  • CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
  • CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
  • CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
  • CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602).
  • CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
  • CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
  • CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
  • CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
  • CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
  • CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
  • CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
  • CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232).
  • CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894).
  • CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
  • CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889).
  • CVE-2026-74587:…
Record
SUSE-SU-2026:4935-1
Updated
2026-11-02
OSVSUSE-SU-2026:4936-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
  • CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
  • CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
  • CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
  • CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
  • CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
  • CVE-2026-74624: netfilter: conntrack: work around exceeded receive window (bsc#1277599).
  • CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259).
  • CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743).
  • CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).
  • CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251).
  • CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280).
  • CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397).
  • CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851).
  • CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946).
  • CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963).
  • CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894).
  • CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064).
  • CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835).
  • CVE-2026-98248: arm64: Use load LSE atomics for the non-return per-CPU atomic operations (bsc#1284518).
  • CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790).
  • CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408).
  • CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713).
  • CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791).
  • CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746).
  • CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685).
  • CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684).

The following non security issues were fixed:

  • kernel-binary.spec.in: Emulate kabi.pl error when suse-kabi-tools is used.
  • netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684).
Record
SUSE-SU-2026:4936-1
Updated
2026-11-02
OSVSUSE-SU-2026:4937-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-39468: smb: client: fix deadlock in smb2_find_smb_tcon() (bsc#1227103 bsc#1280176).
  • CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
  • CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
  • CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
  • CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
  • CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
  • CVE-2026-74624: netfilter: conntrack: work around exceeded receive window (bsc#1277599).
  • CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259).
  • CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743).
  • CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).
  • CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251).
  • CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280).
  • CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397).
  • CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851).
  • CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946).
  • CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963).
  • CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894).
  • CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064).
  • CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835).
  • CVE-2026-98248: arm64: Use load LSE atomics for the non-return per-CPU atomic operations (bsc#1284518).
  • CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790).
  • CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408).
  • CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713).
  • CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791).
  • CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746).
  • CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685).
  • CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684).
Record
SUSE-SU-2026:4937-1
Updated
2026-11-02
OSVSUSE-SU-2026:4938-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
  • CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
  • CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
  • CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
  • CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
  • CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
  • CVE-2026-74624: netfilter: conntrack: work around exceeded receive window (bsc#1277599).
  • CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259).
  • CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743).
  • CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).
  • CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251).
  • CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280).
  • CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397).
  • CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851).
  • CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946).
  • CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963).
  • CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894).
  • CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064).
  • CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835).
  • CVE-2026-98248: arm64: Use load LSE atomics for the non-return per-CPU atomic operations (bsc#1284518).
  • CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790).
  • CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408).
  • CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713).
  • CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791).
  • CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746).
  • CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685).
  • CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684).

The following non security issue was fixed:

  • netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684).
Record
SUSE-SU-2026:4938-1
Updated
2026-11-02
OSVSUSE-SU-2026:4939-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2024-39468: smb: client: fix deadlock in smb2_find_smb_tcon() (bsc#1227103, bsc#1280176).
  • CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
  • CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
  • CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
  • CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
  • CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
  • CVE-2026-74624: netfilter: conntrack: work around exceeded receive window (bsc#1277599).
  • CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259).
  • CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743).
  • CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).
  • CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251).
  • CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280).
  • CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397).
  • CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851).
  • CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946).
  • CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963).
  • CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894).
  • CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064).
  • CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835).
  • CVE-2026-98248: arm64: Use load LSE atomics for the non-return per-CPU atomic operations (bsc#1284518).
  • CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790).
  • CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408).
  • CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713).
  • CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791).
  • CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746).
  • CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685).
  • CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684).

The following non security issue was fixed:

  • netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684).
Record
SUSE-SU-2026:4939-1
Updated
2026-11-02
OSVSUSE-SU-2026:4940-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
  • CVE-2026-43132: dm-verity: correctly handle dm_bufio_client_create() failure (bsc#1264614).
  • CVE-2026-43184: rnbd-srv: Zero the rsp buffer before using it (bsc#1264622).
  • CVE-2026-43283: net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle (bsc#1264295).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-43457: mctp: i2c: fix skb memory leak in receive path (bsc#1265000).
  • CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
  • CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
  • CVE-2026-46034: vfio/cdx: Fix NULL pointer dereference in interrupt trigger path (bsc#1266757).
  • CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
  • CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178).
  • CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
  • CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
  • CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
  • CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
  • CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
  • CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
  • CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
  • CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039).
  • CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
  • CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
  • CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
  • CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
  • CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
  • CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
  • CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
  • CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
  • CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
  • CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
  • CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602).
  • CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
  • CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
  • CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
  • CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
  • CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
  • CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
  • CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
  • CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232).
  • CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894).
  • CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
  • CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889). -…
Record
SUSE-SU-2026:4940-1
Updated
2026-11-02
OSVUSN-8959-1 No score

linux, linux-aws, linux-gcp, linux-hwe-7.0, linux-ibm, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • USB Gadget drivers;
  • Memory management;
  • Multiple devices driver;
  • ARM64 architecture;
  • EROFS file system;
  • Networking core;
  • eXpress Data Path;
  • ARM32 architecture;
  • M68K architecture;
  • MIPS architecture;
  • OpenRISC architecture;
  • PA-RISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • Speakup Console Speech Driver;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • Auxiliary display drivers;
  • Drivers core;
  • Micron PCIe SSD driver;
  • Null block device driver;
  • Ublk userspace block driver;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • AMD CDX bus driver;
  • Hardware random number generator core;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Clocksource drivers;
  • CPU frequency scaling framework;
  • CPU idle management framework;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • DAX dirext access to differentiated memory framework;
  • DIBS (Direct Internal Buffer Sharing) drivers;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • EDAC drivers;
  • FireWire subsystem;
  • ARM SCMI message protocol;
  • ARM SCPI message protocol;
  • Google firmware drivers;
  • Qualcomm firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • HSI subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Mouse) drivers;
  • On-Chip Interconnect management framework;
  • IOMMU subsystem;
  • Industry Pack bus drivers;
  • IRQ chip drivers;
  • Mailbox framework;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Analog Devices digital potentiometer driver;
  • Broadcom VK accelerator driver;
  • Fastrpc Driver;
  • Amazon Nitro Secure Module driver;
  • SGI GRU driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • Near Field Communication (NFC) drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • Operating Performance Points (OPP) driver;
  • PA-RISC drivers;
  • PCI subsystem;
  • Performance monitor drivers;
  • PHY drivers;
  • Pin controllers subsystem;
  • Chrome hardware platform drivers;
  • Mellanox platform drivers;
  • Microsoft Surface platform drivers;
  • x86 platform drivers;
  • MediaTek PM domains;
  • Power sequencing drivers;
  • Power supply drivers;
  • Powercap sysfs driver;
  • PTP clock framework;
  • PWM drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • MPAM driver;
  • RPMSG subsystem;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • ASPEED SoC drivers;
  • Samsung SoC drivers;
  • SPI subsystem;
  • small TFT LCD display modules;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • Userspace I/O drivers;
  • USB DSL drivers;
  • Cypress C67X00 USB…
Record
USN-8959-1
Updated
2026-11-05
OSVUSN-8960-1 No score

linux-oem-7.0 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • USB Gadget drivers;
  • Memory management;
  • Multiple devices driver;
  • ARM64 architecture;
  • EROFS file system;
  • Networking core;
  • eXpress Data Path;
  • ARM32 architecture;
  • M68K architecture;
  • MIPS architecture;
  • OpenRISC architecture;
  • PA-RISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • Speakup Console Speech Driver;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • Auxiliary display drivers;
  • Drivers core;
  • Micron PCIe SSD driver;
  • Null block device driver;
  • Ublk userspace block driver;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • AMD CDX bus driver;
  • Hardware random number generator core;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Clocksource drivers;
  • CPU frequency scaling framework;
  • CPU idle management framework;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • DAX dirext access to differentiated memory framework;
  • DIBS (Direct Internal Buffer Sharing) drivers;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • EDAC drivers;
  • FireWire subsystem;
  • ARM SCMI message protocol;
  • ARM SCPI message protocol;
  • Google firmware drivers;
  • Qualcomm firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • HSI subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Mouse) drivers;
  • On-Chip Interconnect management framework;
  • IOMMU subsystem;
  • Industry Pack bus drivers;
  • IRQ chip drivers;
  • Mailbox framework;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Analog Devices digital potentiometer driver;
  • Broadcom VK accelerator driver;
  • Fastrpc Driver;
  • Amazon Nitro Secure Module driver;
  • SGI GRU driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • Near Field Communication (NFC) drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • Operating Performance Points (OPP) driver;
  • PA-RISC drivers;
  • PCI subsystem;
  • Performance monitor drivers;
  • PHY drivers;
  • Pin controllers subsystem;
  • Chrome hardware platform drivers;
  • Mellanox platform drivers;
  • Microsoft Surface platform drivers;
  • x86 platform drivers;
  • MediaTek PM domains;
  • Power sequencing drivers;
  • Power supply drivers;
  • Powercap sysfs driver;
  • PTP clock framework;
  • PWM drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • MPAM driver;
  • RPMSG subsystem;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • ASPEED SoC drivers;
  • Samsung SoC drivers;
  • SPI subsystem;
  • small TFT LCD display modules;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • Userspace I/O drivers;
  • USB DSL drivers;
  • Cypress C67X00 USB…
Record
USN-8960-1
Updated
2026-11-05
OSVUSN-8961-1 No score

linux, linux-aws, linux-aws-5.15, linux-aws-fips, linux-azure, linux-azure-5.15, linux-azure-fde-5.15, linux-azure-fips, linux-fips, linux-gcp, linux-gcp-5.15, linux-gcp-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iot-realtime, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15, linux-realtime vulnerabilities

Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol implementation in the Linux kernel, leading to use-after-free vulnerabilities. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-1205)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • USB Gadget drivers;
  • Networking core;
  • ARM32 architecture;
  • ARM64 architecture;
  • OpenRISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Speakup Console Speech Driver;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • Auxiliary display drivers;
  • Drivers core;
  • Bluetooth drivers;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Clocksource drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • EDAC drivers;
  • ARM SCMI message protocol;
  • ARM SCPI message protocol;
  • Google firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • HSI subsystem;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Mouse) drivers;
  • On-Chip Interconnect management framework;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Multiple devices driver;
  • Media drivers;
  • Analog Devices digital potentiometer driver;
  • Broadcom VK accelerator driver;
  • Fastrpc Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • Near Field Communication (NFC) drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • PA-RISC drivers;
  • PCI subsystem;
  • PHY drivers;
  • Pin controllers subsystem;
  • Chrome hardware platform drivers;
  • Mellanox platform drivers;
  • Microsoft Surface platform drivers;
  • x86 platform drivers;
  • Power supply drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • RPMSG subsystem;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • SPI subsystem;
  • small TFT LCD display modules;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • USB DSL drivers;
  • Cypress C67X00 USB driver;
  • USB core drivers;
  • USB Host Controller drivers;
  • Mustek MDC800 USB digital camera driver;
  • USB Serial drivers;
  • USB Mass Storage drivers;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • W1 Dallas's 1-wire bus driver;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • 9P distributed file system;
  • File systems infrastructure;
  • BFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • eCrypt file system;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • FAT file system;
  • FUSE (File system in Userspace);
  • HFS+ file system;
  • HugeTLB file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system; …
Record
USN-8961-1
Updated
2026-11-06
OSVUSN-8962-1 No score

linux-azure-fde vulnerabilities

Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol implementation in the Linux kernel, leading to use-after-free vulnerabilities. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-1205)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • USB Gadget drivers;
  • ARM32 architecture;
  • ARM64 architecture;
  • OpenRISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Speakup Console Speech Driver;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • Auxiliary display drivers;
  • Drivers core;
  • Bluetooth drivers;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Clocksource drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DMA engine subsystem;
  • EDAC drivers;
  • Google firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • HSI subsystem;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • On-Chip Interconnect management framework;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Multiple devices driver;
  • Media drivers;
  • Analog Devices digital potentiometer driver;
  • Broadcom VK accelerator driver;
  • Fastrpc Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • MediaTek network drivers;
  • Near Field Communication (NFC) drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • PA-RISC drivers;
  • PCI subsystem;
  • PHY drivers;
  • Pin controllers subsystem;
  • Chrome hardware platform drivers;
  • Mellanox platform drivers;
  • Microsoft Surface platform drivers;
  • x86 platform drivers;
  • Power supply drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • RPMSG subsystem;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • SPI subsystem;
  • small TFT LCD display modules;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • USB DSL drivers;
  • Cypress C67X00 USB driver;
  • USB core drivers;
  • USB Host Controller drivers;
  • Mustek MDC800 USB digital camera driver;
  • USB Serial drivers;
  • USB Mass Storage drivers;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • W1 Dallas's 1-wire bus driver;
  • Watchdog drivers;
  • File systems infrastructure;
  • BFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • eCrypt file system;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • FAT file system;
  • FUSE (File system in Userspace);
  • HFS+ file system;
  • HugeTLB file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • OrangeFS file system;
  • SMB network file system;
  • SquashFS file system;
  • UBI file system;
  • UDF file system;
  • XFS file system;
  • BPF subsystem;
  • IPv4 networking;
  • Internal shared memory driver;
  • Networking core;
  • Scheduler infrastructure;
  • Sun RPC protocol;
  • Virtio network driver;
  • Amateur Radio drivers;
  • IP tunnels definitions;
  • Network…
Record
USN-8962-1
Updated
2026-11-06
OSVUSN-8963-1 No score

linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-nvidia-tegra-igx vulnerabilities

Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol implementation in the Linux kernel, leading to use-after-free vulnerabilities. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-1205)

It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • USB Gadget drivers;
  • Networking core;
  • User-space API (UAPI);
  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • OpenRISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Speakup Console Speech Driver;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Auxiliary display drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • Hardware random number generator core;
  • TPM device driver;
  • Clock framework and drivers;
  • Clocksource drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DAX dirext access to differentiated memory framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • EDAC drivers;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • ARM SCPI message protocol;
  • Google firmware drivers;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • HSI subsystem;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Mouse) drivers;
  • On-Chip Interconnect management framework;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Analog Devices digital potentiometer driver;
  • Broadcom VK accelerator driver;
  • Fastrpc Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • Near Field Communication (NFC) drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • PA-RISC drivers;
  • Parport drivers;
  • PCI subsystem;
  • PHY drivers;
  • Pin controllers subsystem;
  • Chrome hardware platform drivers;
  • Mellanox platform drivers;
  • Microsoft Surface platform drivers;
  • x86 platform drivers;
  • Generic PM domains;
  • System reset/shutdown drivers;
  • Power supply drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • Reset controller framework;
  • RPMSG subsystem;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • small TFT LCD display modules;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC)…
Record
USN-8963-1
Updated
2026-11-07
OSVUSN-9002-1 No score

linux-nvidia-tegra vulnerabilities

It was discovered that the io_uring subsystem in the Linux kernel did not properly handle canceled task work when processing certain wait operations, leading to the operation being performed in the wrong task context. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2026-81010)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • OpenRISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Intel NPU Driver;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • Auxiliary display drivers;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Character device driver;
  • CPU idle management framework;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • ARM SCMI message protocol;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • HSI subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • On-Chip Interconnect management framework;
  • IOMMU subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • Amazon Nitro Secure Module driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • PCI subsystem;
  • Chrome hardware platform drivers;
  • x86 platform drivers;
  • Power supply drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • NVIDIA Tegra SoC drivers;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • USB Device Class drivers;
  • Faraday FOTG210 USB2 dual-role controller driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • USB Serial drivers;
  • USB Type-C support driver;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • VFIO drivers;
  • Framebuffer layer;
  • W1 Dallas's 1-wire bus driver;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • eCrypt file system;
  • File systems infrastructure;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • OCFS2 file system;
  • OrangeFS file system;
  • SMB network file system;
  • UBI file system;
  • Drivers core;
  • Tracing infrastructure;
  • KProbes tracing;
  • Networking core;
  • Netfilter;
  • Sun RPC protocol;
  • IPv6 networking;
  • Bluetooth subsystem;
  • IPv4 networking;
  • IP tunnels definitions;
  • SCTP protocol;
  • User-space API (UAPI);
  • IPC subsystem;
  • Audit subsystem;
  • BPF subsystem;
  • DMA mapping infrastructure;
  • Kernel futex primitives;
  • Scheduler infrastructure;
  • Signal handling mechanism;
  • Memory management;
  • 6LoWPAN network protocol;
  • IEEE 802 network protocols;
  • B.A.T.M.A.N. meshing protocol;
  • Ethernet bridge;
  • CAN network layer;
  • Ceph Core library;
  • Devlink API;
  • HSR network protocol;
  • IEEE802154.4 network protocol;
  • IUCV driver;
  • MAC80211 subsystem;
  • Management Component Transport Protocol (MCTP);
  • MultiProtocol Label Switching driver;
  • Multipath TCP;
  • NetLabel subsystem; …
Record
USN-9002-1
Updated
2026-11-06

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel-rt
AlmaLinux:8
From an advisory covering 4 CVEs
 before 4.18.0-553.180.1.rt7.521.el8_10
4.18.0-553.180.1.rt7.521.el8_10
kernel-rt-core
AlmaLinux:8
From an advisory covering 4 CVEs
 before 4.18.0-553.180.1.rt7.521.el8_10
4.18.0-553.180.1.rt7.521.el8_10
kernel-rt-debug
AlmaLinux:8
From an advisory covering 4 CVEs
 before 4.18.0-553.180.1.rt7.521.el8_10
4.18.0-553.180.1.rt7.521.el8_10
kernel-rt-debug-core
AlmaLinux:8
From an advisory covering 4 CVEs
 before 4.18.0-553.180.1.rt7.521.el8_10
4.18.0-553.180.1.rt7.521.el8_10
kernel-rt-debug-devel
AlmaLinux:8
From an advisory covering 4 CVEs
 before 4.18.0-553.180.1.rt7.521.el8_10
4.18.0-553.180.1.rt7.521.el8_10
kernel-rt-debug-modules
AlmaLinux:8
From an advisory covering 4 CVEs
 before 4.18.0-553.180.1.rt7.521.el8_10
4.18.0-553.180.1.rt7.521.el8_10
kernel-rt-debug-modules-extra
AlmaLinux:8
From an advisory covering 4 CVEs
 before 4.18.0-553.180.1.rt7.521.el8_10
4.18.0-553.180.1.rt7.521.el8_10
kernel-rt-devel
AlmaLinux:8
From an advisory covering 4 CVEs
 before 4.18.0-553.180.1.rt7.521.el8_10
4.18.0-553.180.1.rt7.521.el8_10
kernel-rt-modules
AlmaLinux:8
From an advisory covering 4 CVEs
 before 4.18.0-553.180.1.rt7.521.el8_10
4.18.0-553.180.1.rt7.521.el8_10
kernel-rt-modules-extra
AlmaLinux:8
From an advisory covering 4 CVEs
 before 4.18.0-553.180.1.rt7.521.el8_10
4.18.0-553.180.1.rt7.521.el8_10
Show 290 moreShow less
Affected packages
PackageAffectedFixed
bpftool
AlmaLinux:8
From an advisory covering 4 CVEs
 before 4.18.0-553.180.1.el8_10
4.18.0-553.180.1.el8_10
kernel
AlmaLinux:8
From an advisory covering 4 CVEs
 before 4.18.0-553.180.1.el8_10
4.18.0-553.180.1.el8_10
kernel-abi-stablelists
AlmaLinux:8
From an advisory covering 4 CVEs
 before 4.18.0-553.180.1.el8_10
4.18.0-553.180.1.el8_10
kernel-core
AlmaLinux:8
From an advisory covering 4 CVEs
 before 4.18.0-553.180.1.el8_10
4.18.0-553.180.1.el8_10
kernel-cross-headers
AlmaLinux:8
From an advisory covering 4 CVEs
 before 4.18.0-553.180.1.el8_10
4.18.0-553.180.1.el8_10
kernel-debug
AlmaLinux:8
From an advisory covering 4 CVEs
 before 4.18.0-553.180.1.el8_10
4.18.0-553.180.1.el8_10
kernel-debug-core
AlmaLinux:8
From an advisory covering 4 CVEs
 before 4.18.0-553.180.1.el8_10
4.18.0-553.180.1.el8_10
kernel-debug-devel
AlmaLinux:8
From an advisory covering 4 CVEs
 before 4.18.0-553.180.1.el8_10
4.18.0-553.180.1.el8_10
kernel-debug-modules
AlmaLinux:8
From an advisory covering 4 CVEs
 before 4.18.0-553.180.1.el8_10
4.18.0-553.180.1.el8_10
kernel-debug-modules-extra
AlmaLinux:8
From an advisory covering 4 CVEs
 before 4.18.0-553.180.1.el8_10
4.18.0-553.180.1.el8_10
kernel-devel
AlmaLinux:8
From an advisory covering 4 CVEs
 before 4.18.0-553.180.1.el8_10
4.18.0-553.180.1.el8_10
kernel-doc
AlmaLinux:8
From an advisory covering 4 CVEs
 before 4.18.0-553.180.1.el8_10
4.18.0-553.180.1.el8_10
kernel-headers
AlmaLinux:8
From an advisory covering 4 CVEs
 before 4.18.0-553.180.1.el8_10
4.18.0-553.180.1.el8_10
kernel-modules
AlmaLinux:8
From an advisory covering 4 CVEs
 before 4.18.0-553.180.1.el8_10
4.18.0-553.180.1.el8_10
kernel-modules-extra
AlmaLinux:8
From an advisory covering 4 CVEs
 before 4.18.0-553.180.1.el8_10
4.18.0-553.180.1.el8_10
kernel-tools
AlmaLinux:8
From an advisory covering 4 CVEs
 before 4.18.0-553.180.1.el8_10
4.18.0-553.180.1.el8_10
kernel-tools-libs
AlmaLinux:8
From an advisory covering 4 CVEs
 before 4.18.0-553.180.1.el8_10
4.18.0-553.180.1.el8_10
kernel-tools-libs-devel
AlmaLinux:8
From an advisory covering 4 CVEs
 before 4.18.0-553.180.1.el8_10
4.18.0-553.180.1.el8_10
kernel-zfcpdump
AlmaLinux:8
From an advisory covering 4 CVEs
 before 4.18.0-553.180.1.el8_10
4.18.0-553.180.1.el8_10
kernel-zfcpdump-core
AlmaLinux:8
From an advisory covering 4 CVEs
 before 4.18.0-553.180.1.el8_10
4.18.0-553.180.1.el8_10
kernel-zfcpdump-devel
AlmaLinux:8
From an advisory covering 4 CVEs
 before 4.18.0-553.180.1.el8_10
4.18.0-553.180.1.el8_10
kernel-zfcpdump-modules
AlmaLinux:8
From an advisory covering 4 CVEs
 before 4.18.0-553.180.1.el8_10
4.18.0-553.180.1.el8_10
kernel-zfcpdump-modules-extra
AlmaLinux:8
From an advisory covering 4 CVEs
 before 4.18.0-553.180.1.el8_10
4.18.0-553.180.1.el8_10
perf
AlmaLinux:8
From an advisory covering 4 CVEs
 before 4.18.0-553.180.1.el8_10
4.18.0-553.180.1.el8_10
python3-perf
AlmaLinux:8
From an advisory covering 4 CVEs
 before 4.18.0-553.180.1.el8_10
4.18.0-553.180.1.el8_10
kernel
Azure Linux:3
 before 6.6.157.1-1
6.6.157.1-1
linux-lts
Alpaquita:23
 6.1.182-r0 up to 6.1.189-r0
6.1.189-r0
linux-lts
Alpaquita:25
 6.12.103-r0 up to 6.12.111-r0
6.12.111-r0
linux-lts
Alpaquita:stream
 6.18.46-r0 up to 6.18.53-r0
6.18.53-r0
linux-buildinfo-5.4.0-240-generic
TuxCare:Ubuntu:20.04
From an advisory covering 177 CVEs
 before 5.4.0-240.260+tuxcare.els1
5.4.0-240.260+tuxcare.els1
linux-buildinfo-5.4.0-240-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 177 CVEs
 before 5.4.0-240.260+tuxcare.els1
5.4.0-240.260+tuxcare.els1
linux-cloud-tools-5.4.0-240
TuxCare:Ubuntu:20.04
From an advisory covering 177 CVEs
 before 5.4.0-240.260+tuxcare.els1
5.4.0-240.260+tuxcare.els1
linux-cloud-tools-5.4.0-240-generic
TuxCare:Ubuntu:20.04
From an advisory covering 177 CVEs
 before 5.4.0-240.260+tuxcare.els1
5.4.0-240.260+tuxcare.els1
linux-cloud-tools-5.4.0-240-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 177 CVEs
 before 5.4.0-240.260+tuxcare.els1
5.4.0-240.260+tuxcare.els1
linux-cloud-tools-common
TuxCare:Ubuntu:20.04
From an advisory covering 177 CVEs
 before 5.4.0-240.260+tuxcare.els1
5.4.0-240.260+tuxcare.els1
linux-doc
TuxCare:Ubuntu:20.04
From an advisory covering 177 CVEs
 before 5.4.0-240.260+tuxcare.els1
5.4.0-240.260+tuxcare.els1
linux-headers-5.4.0-240
TuxCare:Ubuntu:20.04
From an advisory covering 177 CVEs
 before 5.4.0-240.260+tuxcare.els1
5.4.0-240.260+tuxcare.els1
linux-headers-5.4.0-240-generic
TuxCare:Ubuntu:20.04
From an advisory covering 177 CVEs
 before 5.4.0-240.260+tuxcare.els1
5.4.0-240.260+tuxcare.els1
linux-headers-5.4.0-240-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 177 CVEs
 before 5.4.0-240.260+tuxcare.els1
5.4.0-240.260+tuxcare.els1
linux-image-unsigned-5.4.0-240-generic
TuxCare:Ubuntu:20.04
From an advisory covering 177 CVEs
 before 5.4.0-240.260+tuxcare.els1
5.4.0-240.260+tuxcare.els1
linux-image-unsigned-5.4.0-240-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 177 CVEs
 before 5.4.0-240.260+tuxcare.els1
5.4.0-240.260+tuxcare.els1
linux-libc-dev
TuxCare:Ubuntu:20.04
From an advisory covering 177 CVEs
 before 5.4.0-240.260+tuxcare.els1
5.4.0-240.260+tuxcare.els1
linux-modules-5.4.0-240-generic
TuxCare:Ubuntu:20.04
From an advisory covering 177 CVEs
 before 5.4.0-240.260+tuxcare.els1
5.4.0-240.260+tuxcare.els1
linux-modules-5.4.0-240-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 177 CVEs
 before 5.4.0-240.260+tuxcare.els1
5.4.0-240.260+tuxcare.els1
linux-modules-extra-5.4.0-240-generic
TuxCare:Ubuntu:20.04
From an advisory covering 177 CVEs
 before 5.4.0-240.260+tuxcare.els1
5.4.0-240.260+tuxcare.els1
linux-source-5.4.0
TuxCare:Ubuntu:20.04
From an advisory covering 177 CVEs
 before 5.4.0-240.260+tuxcare.els1
5.4.0-240.260+tuxcare.els1
linux-tools-5.4.0-240
TuxCare:Ubuntu:20.04
From an advisory covering 177 CVEs
 before 5.4.0-240.260+tuxcare.els1
5.4.0-240.260+tuxcare.els1
linux-tools-5.4.0-240-generic
TuxCare:Ubuntu:20.04
From an advisory covering 177 CVEs
 before 5.4.0-240.260+tuxcare.els1
5.4.0-240.260+tuxcare.els1
linux-tools-5.4.0-240-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 177 CVEs
 before 5.4.0-240.260+tuxcare.els1
5.4.0-240.260+tuxcare.els1
linux-tools-common
TuxCare:Ubuntu:20.04
From an advisory covering 177 CVEs
 before 5.4.0-240.260+tuxcare.els1
5.4.0-240.260+tuxcare.els1
linux-tools-host
TuxCare:Ubuntu:20.04
From an advisory covering 177 CVEs
 before 5.4.0-240.260+tuxcare.els1
5.4.0-240.260+tuxcare.els1
linux-buildinfo-4.15.0-266-generic
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-buildinfo-4.15.0-266-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-cloud-tools-4.15.0-266
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-cloud-tools-4.15.0-266-generic
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-cloud-tools-4.15.0-266-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-cloud-tools-common
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-doc
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-headers-4.15.0-266
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-headers-4.15.0-266-generic
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-headers-4.15.0-266-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-image-unsigned-4.15.0-266-generic
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-image-unsigned-4.15.0-266-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-libc-dev
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-modules-4.15.0-266-generic
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-modules-4.15.0-266-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-modules-extra-4.15.0-266-generic
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-source-4.15.0
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-tools-4.15.0-266
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-tools-4.15.0-266-generic
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-tools-4.15.0-266-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-tools-common
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-tools-host
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-buildinfo-4.15.0-266-generic
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-buildinfo-4.15.0-266-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-cloud-tools-4.15.0-266-generic
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-cloud-tools-4.15.0-266-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-headers-4.15.0-266
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-headers-4.15.0-266-generic
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-headers-4.15.0-266-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-hwe-cloud-tools-4.15.0-266
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-hwe-tools-4.15.0-266
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-image-unsigned-4.15.0-266-generic
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-image-unsigned-4.15.0-266-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-modules-4.15.0-266-generic
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-modules-4.15.0-266-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-modules-extra-4.15.0-266-generic
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-source-4.15.0
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-tools-4.15.0-266-generic
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-tools-4.15.0-266-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-buildinfo-4.4.0-288-generic
TuxCare:Ubuntu:16.04
From an advisory covering 198 CVEs
 before 4.4.0-288.322+tuxcare.els1
4.4.0-288.322+tuxcare.els1
linux-buildinfo-4.4.0-288-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 198 CVEs
 before 4.4.0-288.322+tuxcare.els1
4.4.0-288.322+tuxcare.els1
linux-cloud-tools-4.4.0-288
TuxCare:Ubuntu:16.04
From an advisory covering 198 CVEs
 before 4.4.0-288.322+tuxcare.els1
4.4.0-288.322+tuxcare.els1
linux-cloud-tools-4.4.0-288-generic
TuxCare:Ubuntu:16.04
From an advisory covering 198 CVEs
 before 4.4.0-288.322+tuxcare.els1
4.4.0-288.322+tuxcare.els1
linux-cloud-tools-4.4.0-288-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 198 CVEs
 before 4.4.0-288.322+tuxcare.els1
4.4.0-288.322+tuxcare.els1
linux-cloud-tools-common
TuxCare:Ubuntu:16.04
From an advisory covering 198 CVEs
 before 4.4.0-288.322+tuxcare.els1
4.4.0-288.322+tuxcare.els1
linux-doc
TuxCare:Ubuntu:16.04
From an advisory covering 198 CVEs
 before 4.4.0-288.322+tuxcare.els1
4.4.0-288.322+tuxcare.els1
linux-headers-4.4.0-288
TuxCare:Ubuntu:16.04
From an advisory covering 198 CVEs
 before 4.4.0-288.322+tuxcare.els1
4.4.0-288.322+tuxcare.els1
linux-headers-4.4.0-288-generic
TuxCare:Ubuntu:16.04
From an advisory covering 198 CVEs
 before 4.4.0-288.322+tuxcare.els1
4.4.0-288.322+tuxcare.els1
linux-headers-4.4.0-288-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 198 CVEs
 before 4.4.0-288.322+tuxcare.els1
4.4.0-288.322+tuxcare.els1
linux-image-unsigned-4.4.0-288-generic
TuxCare:Ubuntu:16.04
From an advisory covering 198 CVEs
 before 4.4.0-288.322+tuxcare.els1
4.4.0-288.322+tuxcare.els1
linux-image-unsigned-4.4.0-288-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 198 CVEs
 before 4.4.0-288.322+tuxcare.els1
4.4.0-288.322+tuxcare.els1
linux-libc-dev
TuxCare:Ubuntu:16.04
From an advisory covering 198 CVEs
 before 4.4.0-288.322+tuxcare.els1
4.4.0-288.322+tuxcare.els1
linux-modules-4.4.0-288-generic
TuxCare:Ubuntu:16.04
From an advisory covering 198 CVEs
 before 4.4.0-288.322+tuxcare.els1
4.4.0-288.322+tuxcare.els1
linux-modules-4.4.0-288-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 198 CVEs
 before 4.4.0-288.322+tuxcare.els1
4.4.0-288.322+tuxcare.els1
linux-modules-extra-4.4.0-288-generic
TuxCare:Ubuntu:16.04
From an advisory covering 198 CVEs
 before 4.4.0-288.322+tuxcare.els1
4.4.0-288.322+tuxcare.els1
Kernel
Linux
 3.1.0 up to 5.10.270, 5.11.0 up to 5.15.221, 5.16.0 up to 6.1.188, 6.2.0 up to 6.6.157, 6.7.0 up to 6.12.110, 6.13.0 up to 6.18.51, 6.19.0 up to 7.2.5
5.10.2705.15.2216.1.1886.6.1576.12.1106.18.517.2.5
linux
Debian:12
 before 6.1.190-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 45 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.170-16.1.170-26.1.170-36.1.172-16.1.174-16.1.176-16.1.177-16.1.180-16.1.187-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-1
6.1.190-1
linux
Debian:13
 before 6.12.111-1, plus listed versions
6.12.100-16.12.101-16.12.105-16.12.107-16.12.38-1
Show 30 moreShow less
6.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-1
6.12.111-1
linux
Debian:14
 before 7.2.6-1, plus listed versions
6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1
Show 45 moreShow less
6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1
7.2.6-1
linux-6.12
Debian:12
 before 6.12.111-1~deb12u1, plus listed versions
6.12.100-1~deb12u16.12.101-1~deb12u16.12.107-1~deb12u1
6.12.111-1~deb12u1
kernel
Mageia:10
From an advisory covering 1146 CVEs
 before 6.18.55-1.mga10
6.18.55-1.mga10
kmod-xtables-addons
Mageia:10
From an advisory covering 1146 CVEs
 before 3.30-5.mga10
3.30-5.mga10
kmod-virtualbox
Mageia:10
From an advisory covering 1146 CVEs
 before 7.2.14-31.mga10
7.2.14-31.mga10
drakx-installer-images
Mageia:10
From an advisory covering 1146 CVEs
 before 2.94-56.mga10
2.94-56.mga10
drakx-installer-images
Mageia:10
From an advisory covering 1146 CVEs
 before 2.94-56.mga10.nonfree
2.94-56.mga10.nonfree
kmod-nvidia-current-wopengpu
Mageia:10
From an advisory covering 1146 CVEs
 before 580.173.02-40.mga10.nonfree
580.173.02-40.mga10.nonfree
kernel-linus
Mageia:10
From an advisory covering 1146 CVEs
 before 6.18.55-1.mga10
6.18.55-1.mga10
kernel
openEuler:22.03-LTS-SP4
From an advisory covering 39 CVEs
 before 5.10.0-335.0.0.236.oe2203sp4
5.10.0-335.0.0.236.oe2203sp4
kernel-rt
Rocky Linux:8
From an advisory covering 4 CVEs
 before 0:4.18.0-553.180.1.rt7.521.el8_10
0:4.18.0-553.180.1.rt7.521.el8_10
kernel
Rocky Linux:8
From an advisory covering 4 CVEs
 before 0:4.18.0-553.180.1.el8_10
0:4.18.0-553.180.1.el8_10
kernel
Rocky Linux:9
From an advisory covering 18 CVEs
 before 0:5.14.0-687.64.1.el9_8
0:5.14.0-687.64.1.el9_8
kernel
Rocky Linux:10
From an advisory covering 16 CVEs
 before 0:6.12.0-211.72.1.el10_2
0:6.12.0-211.72.1.el10_2
kernel
Rocky Linux:8
From an advisory covering 4 CVEs
 before 0:4.18.0-553.180.1.el8_10.cloud.0.1
0:4.18.0-553.180.1.el8_10.cloud.0.1
kernel-default
SUSE:Linux Micro 6.0
From an advisory covering 98 CVEs
 before 6.4.0-159998.54.1
6.4.0-159998.54.1
kernel-default-base
SUSE:Linux Micro 6.0
From an advisory covering 98 CVEs
 before 6.4.0-159998.54.1.159998.21.40
6.4.0-159998.54.1.159998.21.40
kernel-kvmsmall
SUSE:Linux Micro 6.0
From an advisory covering 98 CVEs
 before 6.4.0-159998.54.1
6.4.0-159998.54.1
kernel-source
SUSE:Linux Micro 6.0
From an advisory covering 98 CVEs
 before 6.4.0-159998.54.1
6.4.0-159998.54.1
kernel-default
SUSE:Linux Micro 6.1
From an advisory covering 98 CVEs
 before 6.4.0-159998.54.1
6.4.0-159998.54.1
kernel-default-base
SUSE:Linux Micro 6.1
From an advisory covering 98 CVEs
 before 6.4.0-159998.54.1.159998.21.39
6.4.0-159998.54.1.159998.21.39
kernel-kvmsmall
SUSE:Linux Micro 6.1
From an advisory covering 98 CVEs
 before 6.4.0-159998.54.1
6.4.0-159998.54.1
kernel-source
SUSE:Linux Micro 6.1
From an advisory covering 98 CVEs
 before 6.4.0-159998.54.1
6.4.0-159998.54.1
kernel-obs-build
SUSE:Linux Micro Extras 6.2
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-syms
SUSE:Linux Micro Extras 6.2
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-64kb
SUSE:Linux Micro 6.2
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-default
SUSE:Linux Micro 6.2
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-default-base
SUSE:Linux Micro 6.2
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1.160000.2.29
6.12.0-160000.40.1.160000.2.29
kernel-rt
SUSE:Linux Micro 6.2
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-source
SUSE:Linux Micro 6.2
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-64kb
SUSE:Linux Enterprise Server 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-azure
SUSE:Linux Enterprise Server 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-default
SUSE:Linux Enterprise Server 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-default-base
SUSE:Linux Enterprise Server 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1.160000.2.29
6.12.0-160000.40.1.160000.2.29
kernel-docs
SUSE:Linux Enterprise Server 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-kvmsmall
SUSE:Linux Enterprise Server 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-obs-qa
SUSE:Linux Enterprise Server 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-source
SUSE:Linux Enterprise Server 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-syms
SUSE:Linux Enterprise Server 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-64kb
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-azure
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-default
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1.160000.2.29
6.12.0-160000.40.1.160000.2.29
kernel-docs
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-kvmsmall
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-obs-qa
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-source
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-syms
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-zfcpdump
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-rt
SUSE:Linux Micro 6.0
From an advisory covering 98 CVEs
 before 6.4.0-159998.54.1
6.4.0-159998.54.1
kernel-source-rt
SUSE:Linux Micro 6.0
From an advisory covering 98 CVEs
 before 6.4.0-159998.54.1
6.4.0-159998.54.1
kernel-rt
SUSE:Linux Micro 6.1
From an advisory covering 98 CVEs
 before 6.4.0-159998.54.1
6.4.0-159998.54.1
kernel-source-rt
SUSE:Linux Micro 6.1
From an advisory covering 98 CVEs
 before 6.4.0-159998.54.1
6.4.0-159998.54.1
kernel-default
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 56 CVEs
 before 4.12.14-122.336.1
4.12.14-122.336.1
kgraft-patch-SLE12-SP5_Update_89
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 56 CVEs
 before 1-8.3.1
1-8.3.1
kernel-default
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 56 CVEs
 before 4.12.14-122.336.1
4.12.14-122.336.1
kernel-source
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 56 CVEs
 before 4.12.14-122.336.1
4.12.14-122.336.1
kernel-syms
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 56 CVEs
 before 4.12.14-122.336.1
4.12.14-122.336.1
kernel-default
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 56 CVEs
 before 4.12.14-122.336.1
4.12.14-122.336.1
kernel-source
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 56 CVEs
 before 4.12.14-122.336.1
4.12.14-122.336.1
kernel-syms
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 56 CVEs
 before 4.12.14-122.336.1
4.12.14-122.336.1
kernel-default
SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE
From an advisory covering 4 CVEs
 before 3.0.101-108.226.1
3.0.101-108.226.1
kernel-docs
SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE
From an advisory covering 4 CVEs
 before 3.0.101-108.226.1
3.0.101-108.226.1
kernel-ec2
SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE
From an advisory covering 4 CVEs
 before 3.0.101-108.226.1
3.0.101-108.226.1
kernel-source
SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE
From an advisory covering 4 CVEs
 before 3.0.101-108.226.1
3.0.101-108.226.1
kernel-syms
SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE
From an advisory covering 4 CVEs
 before 3.0.101-108.226.1
3.0.101-108.226.1
kernel-trace
SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE
From an advisory covering 4 CVEs
 before 3.0.101-108.226.1
3.0.101-108.226.1
kernel-xen
SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE
From an advisory covering 4 CVEs
 before 3.0.101-108.226.1
3.0.101-108.226.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 29 CVEs
 before 6.4.0-150600.23.143.1
6.4.0-150600.23.143.1
kernel-livepatch-SLE15-SP6_Update_33
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 29 CVEs
 before 1-150600.13.5.1
1-150600.13.5.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP6
From an advisory covering 29 CVEs
 before 6.4.0-150600.23.143.1
6.4.0-150600.23.143.1
kernel-64kb
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 29 CVEs
 before 6.4.0-150600.23.143.1
6.4.0-150600.23.143.1
kernel-default
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 29 CVEs
 before 6.4.0-150600.23.143.1
6.4.0-150600.23.143.1
kernel-default-base
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 29 CVEs
 before 6.4.0-150600.23.143.1.150600.12.66.3
6.4.0-150600.23.143.1.150600.12.66.3
kernel-docs
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 29 CVEs
 before 6.4.0-150600.23.143.1
6.4.0-150600.23.143.1
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 29 CVEs
 before 6.4.0-150600.23.143.1
6.4.0-150600.23.143.1
kernel-source
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 29 CVEs
 before 6.4.0-150600.23.143.1
6.4.0-150600.23.143.1
kernel-syms
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 29 CVEs
 before 6.4.0-150600.23.143.1
6.4.0-150600.23.143.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 29 CVEs
 before 6.4.0-150600.23.143.1
6.4.0-150600.23.143.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 29 CVEs
 before 6.4.0-150600.23.143.1
6.4.0-150600.23.143.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 29 CVEs
 before 6.4.0-150600.23.143.1.150600.12.66.3
6.4.0-150600.23.143.1.150600.12.66.3
kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 29 CVEs
 before 6.4.0-150600.23.143.1
6.4.0-150600.23.143.1
kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 29 CVEs
 before 6.4.0-150600.23.143.1
6.4.0-150600.23.143.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 29 CVEs
 before 6.4.0-150600.23.143.1
6.4.0-150600.23.143.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 29 CVEs
 before 6.4.0-150600.23.143.1
6.4.0-150600.23.143.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 108 CVEs
 before 6.4.0-150700.53.87.3
6.4.0-150700.53.87.3
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 108 CVEs
 before 6.4.0-150700.53.87.3
6.4.0-150700.53.87.3
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 108 CVEs
 before 6.4.0-150700.53.87.3.150700.17.49.2
6.4.0-150700.53.87.3.150700.17.49.2
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 108 CVEs
 before 6.4.0-150700.53.87.3
6.4.0-150700.53.87.3
linux
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
3.11.0-12.193.12.0-1.33.12.0-2.53.12.0-2.73.12.0-3.8
Show 45 moreShow less
3.12.0-3.93.12.0-4.103.12.0-4.123.12.0-5.133.12.0-7.153.13.0-1.163.13.0-2.173.13.0-3.183.13.0-4.193.13.0-5.203.13.0-6.233.13.0-7.253.13.0-7.263.13.0-8.273.13.0-8.283.13.0-10.303.13.0-11.313.13.0-12.323.13.0-13.333.13.0-14.343.13.0-15.353.13.0-16.363.13.0-17.373.13.0-18.383.13.0-19.393.13.0-19.403.13.0-20.423.13.0-21.433.13.0-22.443.13.0-23.453.13.0-24.463.13.0-24.473.13.0-27.503.13.0-29.533.13.0-30.543.13.0-30.553.13.0-32.573.13.0-33.583.13.0-34.603.13.0-35.623.13.0-36.633.13.0-37.643.13.0-39.663.13.0-40.693.13.0-41.70
 None known
linux-aws
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9
Show 45 moreShow less
4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80
 None known
linux-azure
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2
Show 45 moreShow less
4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1
 None known
linux-lts-xenial
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1
Show 45 moreShow less
4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1
 None known
linux
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11
Show 45 moreShow less
4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96
 None known
linux-aws
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18
Show 45 moreShow less
4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93
 None known
linux-aws-hwe
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1
Show 45 moreShow less
4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1
 None known
linux-azure
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 45 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71
 None known
linux-gcp
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
Show 45 moreShow less
4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1
 None known
linux-hwe
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 45 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1
 None known
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-kvm
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15
Show 45 moreShow less
4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.674.4.0-1062.694.4.0-1063.704.4.0-1064.714.4.0-1065.724.4.0-1066.734.4.0-1068.754.4.0-1069.764.4.0-1070.774.4.0-1071.784.4.0-1075.824.4.0-1076.834.4.0-1077.84
 None known
linux-oracle
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1
Show 45 moreShow less
4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1
 None known
linux-fips
Ubuntu:Pro:FIPS-updates:16.04:LTS
 All versions, plus listed versions
4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13
Show 45 moreShow less
4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78
 None known
linux-fips
Ubuntu:Pro:FIPS:16.04:LTS
 All versions, plus listed versions
4.4.0-1001.14.4.0-1002.2
 None known
linux
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 45 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107
 None known
linux-aws
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 45 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-aws-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-4.15
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102
Show 45 moreShow less
4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1
Show 45 moreShow less
5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-4.15
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92
Show 45 moreShow less
4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gcp-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 45 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-ibm-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1
Show 45 moreShow less
5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1
 None known
linux-kvm
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8
Show 45 moreShow less
4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13
Show 45 moreShow less
4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-oracle-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1
 None known
linux-raspi-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1
Show 45 moreShow less
5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1
 None known
linux-aws-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24
Show 45 moreShow less
4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93
 None known
linux-azure-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10
Show 45 moreShow less
4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80
 None known
linux-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42
Show 45 moreShow less
4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21
Show 45 moreShow less
4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.794.15.0-2075.804.15.0-2076.814.15.0-2077.83
 None known
linux-aws-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.4
 None known
linux-azure-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.2
 None known
linux-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1011.12
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.1
 None known
linux
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 45 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110
 None known
linux-aws
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5
Show 45 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1119.126~20.04.1, plus listed versions
5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1
Show 45 moreShow less
5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1
5.15.0-1119.126~20.04.1
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8
Show 45 moreShow less
5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
linux-azure-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
 None known
linux-azure-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1125.134~20.04.1, plus listed versions
5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1
Show 45 moreShow less
5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1
5.15.0-1125.134~20.04.1
linux-azure-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
 None known
linux-azure-fde
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
 None known
linux-azure-fde-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1124.133~20.04.1, plus listed versions
5.15.0-1019.24~20.04.1.15.15.0-1020.25~20.04.1.15.15.0-1021.26~20.04.1.15.15.0-1029.36~20.04.1.15.15.0-1030.37~20.04.1.1
Show 45 moreShow less
5.15.0-1031.38~20.04.1.15.15.0-1033.40~20.04.1.15.15.0-1034.41~20.04.1.25.15.0-1035.42~20.04.1.15.15.0-1036.43~20.04.1.15.15.0-1037.44~20.04.1.15.15.0-1038.45~20.04.1.15.15.0-1039.46~20.04.1.15.15.0-1040.47~20.04.1.15.15.0-1041.48~20.04.1.15.15.0-1042.49~20.04.1.15.15.0-1043.50~20.04.1.15.15.0-1046.53~20.04.1.15.15.0-1047.54~20.04.1.15.15.0-1049.56~20.04.1.15.15.0-1050.57~20.04.1.15.15.0-1051.59~20.04.1.15.15.0-1052.60~20.04.1.15.15.0-1053.61~20.04.1.15.15.0-1054.62~20.04.1.15.15.0-1056.64~20.04.1.15.15.0-1057.65~20.04.1.15.15.0-1058.66~20.04.2.15.15.0-1059.67~20.04.1.15.15.0-1060.69~20.04.1.15.15.0-1061.70~20.04.1.15.15.0-1063.72~20.04.1.15.15.0-1064.73~20.04.1.15.15.0-1065.74~20.04.1.15.15.0-1067.76~20.04.1.15.15.0-1068.77~20.04.1.15.15.0-1070.79~20.04.1.15.15.0-1071.80~20.04.1.15.15.0-1072.81~20.04.1.15.15.0-1073.82~20.04.1.15.15.0-1074.83~20.04.1.15.15.0-1076.85~20.04.1.15.15.0-1078.87~20.04.1.15.15.0-1081.90~20.04.1.15.15.0-1082.91~20.04.1.15.15.0-1086.95~20.04.1.15.15.0-1087.96~20.04.1.15.15.0-1088.97~20.04.1.15.15.0-1089.98~20.04.1.15.15.0-1091.100~20.04.1.1
5.15.0-1124.133~20.04.1
linux-bluefield
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.4.0-1007.105.4.0-1011.145.4.0-1012.155.4.0-1013.165.4.0-1016.19
Show 45 moreShow less
5.4.0-1019.225.4.0-1020.235.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1030.335.4.0-1032.355.4.0-1035.385.4.0-1036.395.4.0-1040.445.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1049.555.4.0-1050.565.4.0-1054.605.4.0-1058.645.4.0-1059.655.4.0-1060.665.4.0-1062.685.4.0-1064.705.4.0-1065.715.4.0-1066.725.4.0-1068.745.4.0-1070.765.4.0-1071.775.4.0-1072.785.4.0-1073.795.4.0-1074.805.4.0-1075.815.4.0-1076.825.4.0-1077.835.4.0-1078.845.4.0-1079.855.4.0-1080.875.4.0-1081.885.4.0-1082.895.4.0-1083.905.4.0-1084.915.4.0-1085.92
 None known
linux-gcp
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7
Show 45 moreShow less
5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1033.355.4.0-1034.375.4.0-1036.395.4.0-1037.405.4.0-1038.415.4.0-1040.435.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1044.475.4.0-1046.495.4.0-1049.535.4.0-1051.555.4.0-1052.565.4.0-1053.575.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1060.645.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1065.695.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1072.775.4.0-1073.785.4.0-1075.80
 None known
linux-gcp-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1
Show 7 moreShow less
5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3
 None known
linux-gcp-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1
Show 8 moreShow less
5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1
 None known
linux-gcp-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1120.130~20.04.1, plus listed versions
5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2
Show 45 moreShow less
5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.15.15.0-1065.73~20.04.15.15.0-1066.74~20.04.15.15.0-1067.75~20.04.15.15.0-1068.76~20.04.15.15.0-1069.77~20.04.15.15.0-1070.78~20.04.15.15.0-1071.79~20.04.15.15.0-1072.80~20.04.15.15.0-1073.81~20.04.15.15.0-1074.83~20.04.1
5.15.0-1120.130~20.04.1
linux-gcp-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41
 None known
linux-gke
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
 None known
linux-gke-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1
Show 13 moreShow less
5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1
 None known
linux-gkeop
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13
Show 45 moreShow less
5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77
 None known
linux-gkeop-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2
Show 40 moreShow less
5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1
 None known
linux-hwe-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1
Show 7 moreShow less
5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1
 None known
linux-hwe-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1
Show 11 moreShow less
5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1
 None known
kernel-source
openSUSE:Tumbleweed
From an advisory covering 904 CVEs
 before 7.2.7-1.1
7.2.7-1.1
dtb-aarch64
openSUSE:Leap 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-64kb
openSUSE:Leap 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-azure
openSUSE:Leap 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-default
openSUSE:Leap 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-default-base
openSUSE:Leap 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1.160000.2.29
6.12.0-160000.40.1.160000.2.29
kernel-docs
openSUSE:Leap 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-kvmsmall
openSUSE:Leap 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-obs-build
openSUSE:Leap 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-obs-qa
openSUSE:Leap 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-rt
openSUSE:Leap 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-source
openSUSE:Leap 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-syms
openSUSE:Leap 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1
kernel-zfcpdump
openSUSE:Leap 16.0
From an advisory covering 129 CVEs
 before 6.12.0-160000.40.1
6.12.0-160000.40.1

History

History
RecordedChangedSources
affected, aliases, referencesOSV
affected, aliases, referencesOSV
affectedOSV
affectedOSV
affected, aliases, referencesOSV
affected, aliases, referencesOSV
affected, aliases, referencesOSV
affected, aliases, referencesOSV
affected, facts, referencesOSV
affected, aliases, referencesOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-90011 is a critical vulnerability (CVSS 9.1) in Linux, published September 16, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.84%, the 58th percentile. Fixed in kernel 6.6.157.1-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 418 package rows, 2,861 versions, 5,823 references and the rest of 29 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open