CVE-2026-98260

exec: Cleanup POSIX timers right after de_thread()

7.8 HighPublic exploitFix available

What does this mean?

: 7.8v3.1, from CVE List
: 0.18%8th percentile
Fixed in: 6.6.158.1-1kernel
Published: October 6, 2026
Modified: November 7, 2026
Also known as: ALSA-2026:85321ALSA-2026:86033AZL-106044BELL-CVE-2026-98260CLSA-2026-1792243434CLSA-2026-1792445930DEBIAN-CVE-2026-98260EUVD-2026-93188
Show 30 moreShow less
GHSA-pr95-77xq-3v99OESA-2026-4718RHSA-2026:83707RHSA-2026:83738RHSA-2026:83739RHSA-2026:83775RHSA-2026:83797RHSA-2026:85321RLSA-2026:85321RLSA-2026:86033SUSE-SU-2026:24371-1SUSE-SU-2026:24379-1SUSE-SU-2026:24386-1SUSE-SU-2026:24422-1SUSE-SU-2026:24437-1SUSE-SU-2026:24446-1SUSE-SU-2026:24473-1SUSE-SU-2026:24553-1SUSE-SU-2026:4934-1SUSE-SU-2026:4935-1SUSE-SU-2026:4936-1SUSE-SU-2026:4937-1SUSE-SU-2026:4938-1SUSE-SU-2026:4939-1SUSE-SU-2026:4940-1UBUNTU-CVE-2026-98260USN-8959-1USN-8960-1openSUSE-SU-2026:12131-1openSUSE-SU-2026:22167-1

In the Linux kernel, the following vulnerability has been resolved:

exec: Cleanup POSIX timers right after de_thread()

A per-thread CPU timer holds a reference to the PID of the thread it is attached to and, while it is armed, its node is queued in that thread's posix_cputimers. The task is looked up by that PID.

When a non-leader thread exec()s, de_thread() changes which task owns that PID. pid_task(timer->it.cpu.pid, PIDTYPE_PID) then returns NULL, but the node is still queued on tsk, which is alive. timer_lock_sighand() takes a failed lookup to mean that the node is already dequeued, so it has nothing to undo.

begin_new_exec() calls posix_cpu_timers_exit(me) right after exec_task_namespaces() and that removes the leftover node, so the state normally stays invisible. But bprm->point_of_no_return is set before de_thread(), so if unshare_files(), set_mm_exe_file(), exec_mmap() or exec_task_namespaces() fails, the task dies before it gets there. exit_itimers() then frees the k_itimer while its node is still queued, and reaping tsk later erases that freed node from the rbtree.

In short:

  the non-leader thread B           the parent

timer_create(CLOCK_THREAD_CPUTIME_ID) timer_settime() arm_timer() // the node is queued on B execve() de_thread(B) exchange_tids(B, leader) // B's PID now belongs to the leader release_task(leader) __exit_signal(leader) posix_cpu_timers_exit(leader) // cleans leader's queue, not B's __unhash_process(leader) // that PID has no task anymore exec_mmap() mmap_read_lock_killable(old_mm) kill(B, SIGKILL) // -EINTR get_signal() do_exit() exit_itimers() posix_timer_delete() posix_cpu_timer_del() posix_timer_unhash_and_free() // freed while still queued wait4() release_task(B) posix_cpu_timers_exit(B) cleanup_timerqueue() timerqueue_del() // use-after-free

Move the POSIX timer cleanup right after de_thread() before any of the later failure conditions brings the task into do_exit().

[ tglx: Move the cleanup right after de_thread() ]

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.18%Unchanged since Oct 6, 2026

What each source reports

CVE List Score used 7.8

exec: Cleanup POSIX timers right after de_thread()

In the Linux kernel, the following vulnerability has been resolved:

exec: Cleanup POSIX timers right after de_thread()

A per-thread CPU timer holds a reference to the PID of the thread it is attached to and, while it is armed, its node is queued in that thread's posix_cputimers. The task is looked up by that PID.

In short:

  the non-leader thread B           the parent

Move the POSIX timer cleanup right after de_thread() before any of the later failure conditions brings the task into do_exit().

[ tglx: Move the cleanup right after de_thread() ]

Record: CVE-2026-98260
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

EUVDEUVD-2026-93188 7.8

In the Linux kernel, the following vulnerability has been resolved:

exec: Cleanup POSIX timers right after de_thread()

A per-thread CPU timer holds a reference to the PID of the thread it is attached to and, while it is armed, its node is queued in that thread's posix_cputimers. The task is looked up by that PID.

In short:

  the non-leader thread B           the parent

Move the POSIX timer cleanup right after de_thread() before any of the later failure conditions brings the task into do_exit().

[ tglx: Move the cleanup right after de_thread() ]

Record: EUVD-2026-93188
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-pr95-77xq-3v99 7.8

In the Linux kernel, the following vulnerability has been resolved: exec: Cleanup POSIX timers...

In the Linux kernel, the following vulnerability has been resolved:

exec: Cleanup POSIX timers right after de_thread()

A per-thread CPU timer holds a reference to the PID of the thread it is attached to and, while it is armed, its node is queued in that thread's posix_cputimers. The task is looked up by that PID.

In short:

  the non-leader thread B           the parent

Move the POSIX timer cleanup right after de_thread() before any of the later failure conditions brings the task into do_exit().

[ tglx: Move the cleanup right after de_thread() ]

Record: GHSA-pr95-77xq-3v99
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

exec: Cleanup POSIX timers right after de_thread()

A per-thread CPU timer holds a reference to the PID of the thread it is attached to and, while it is armed, its node is queued in that thread's posix_cputimers. The task is looked up by that PID.

In short:

  the non-leader thread B           the parent

Move the POSIX timer cleanup right after de_thread() before any of the later failure conditions brings the task into do_exit().

[ tglx: Move the cleanup right after de_thread() ]

Record: CVE-2026-98260
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVBELL-CVE-2026-98260 7.8

Record: BELL-CVE-2026-98260
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-04

OSV 7.8

exec: Cleanup POSIX timers right after de_thread()

In the Linux kernel, the following vulnerability has been resolved:

exec: Cleanup POSIX timers right after de_thread()

A per-thread CPU timer holds a reference to the PID of the thread it is attached to and, while it is armed, its node is queued in that thread's posix_cputimers. The task is looked up by that PID.

In short:

  the non-leader thread B           the parent

Move the POSIX timer cleanup right after de_thread() before any of the later failure conditions brings the task into do_exit().

[ tglx: Move the cleanup right after de_thread() ]

Record: CVE-2026-98260
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-07

Show 35 moreShow less

OSVDEBIAN-CVE-2026-98260 7.8

In the Linux kernel, the following vulnerability has been resolved: exec: Cleanup POSIX timers right after de_thread() A per-thread CPU timer holds a reference to the PID of the thread it is attached to and, while it is armed, its node is queued in that thread's posix_cputimers. The task is looked up by that PID. When a non-leader thread exec()s, de_thread() changes which task owns that PID. pid_task(timer->it.cpu.pid, PIDTYPE_PID) then returns NULL, but the node is still queued on tsk, which is alive. timer_lock_sighand() takes a failed lookup to mean that the node is already dequeued, so it has nothing to undo. begin_new_exec() calls posix_cpu_timers_exit(me) right after exec_task_namespaces() and that removes the leftover node, so the state normally stays invisible. But bprm->point_of_no_return is set before de_thread(), so if unshare_files(), set_mm_exe_file(), exec_mmap() or exec_task_namespaces() fails, the task dies before it gets there. exit_itimers() then frees the k_itimer while its node is still queued, and reaping tsk later erases that freed node from the rbtree. In short: the non-leader thread B the parent timer_create(CLOCK_THREAD_CPUTIME_ID) timer_settime() arm_timer() // the node is queued on B execve() de_thread(B) exchange_tids(B, leader) // B's PID now belongs to the leader release_task(leader) __exit_signal(leader) posix_cpu_timers_exit(leader) // cleans leader's queue, not B's __unhash_process(leader) // that PID has no task anymore exec_mmap() mmap_read_lock_killable(old_mm) kill(B, SIGKILL) // -EINTR get_signal() do_exit() exit_itimers() posix_timer_delete() posix_cpu_timer_del() posix_timer_unhash_and_free() // freed while still queued wait4() release_task(B) posix_cpu_timers_exit(B) cleanup_timerqueue() timerqueue_del() // use-after-free Move the POSIX timer cleanup right after de_thread() before any of the later failure conditions brings the task into do_exit(). [ tglx: Move the cleanup right after de_thread() ]

Record: DEBIAN-CVE-2026-98260
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2026-4718 9.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

can: esd_usb: kill anchored URBs before freeing netdevs

esd_usb_disconnect() frees each CAN netdev with free_candev() inside its per-netdev loop and only calls unlink_all_urbs(dev) afterwards. The per-netdev private data (struct esd_usb_net_priv) is embedded in the net_device allocation returned by alloc_candev(), so once free_candev() has run, dev->nets[i] points to freed memory. unlink_all_urbs() then dereferences the freed dev->nets[i] to kill the per-netdev TX anchor (usb_kill_anchored_urbs(&priv->tx_submitted)), clear active_tx_jobs, and reset priv->tx_contexts[].

Reorder the teardown so the anchored URBs are killed before the netdevs are freed, matching other CAN/USB drivers in the same directory such as ems_usb, usb_8dev and mcba_usb, which unregister, then unlink, then free: unregister the netdevs first (which stops their TX queues), call unlink_all_urbs(dev) once, then free the netdevs.

This issue was found by an in-house static analysis tool.(CVE-2026-64585)

In the Linux kernel, the following vulnerability has been resolved:

ocfs2: avoid moving extents to occupied clusters

For non-auto OCFS2_IOC_MOVE_EXT operations, userspace supplies a physical me_goal. ocfs2_move_extent() initializes new_phys_cpos from that goal and expects ocfs2_probe_alloc_group() to replace it with a free run in the target block group.

The probe currently leaves *phys_cpos unchanged if the scan reaches the end of the group without finding a free run. An occupied goal at the last bit can therefore survive the probe and be passed to __ocfs2_move_extent(), which copies file data into a cluster still owned by another inode before the bitmap is updated.

When the probe does find a free run, it also subtracts move_len from the ending bit. The start of an N-bit run ending at i is i - N + 1, so the current calculation can report the bit immediately before the free run.

Clear *phys_cpos before scanning and use the correct free-run start. Callers already treat a zero result as -ENOSPC, so failed probes no longer continue with an occupied caller-controlled goal.(CVE-2026-72164)

In the Linux kernel, the following vulnerability has been resolved:

ntfs: fix off-by-one in mapping pairs decoding bounds checks

In ntfs_mapping_pairs_decompress(), attr_end points one byte past the end of the attribute record:

attr_end = (u8 *)attr + le32_to_cpu(attr-&gt;length);

The two bounds checks validating that mapping pair data bytes fit within the attribute use strict greater-than (>), which allows a one-byte out-of-bounds read when the data extends exactly to attr_end:

b = *buf & 0xf; if (b) { if (unlikely(buf + b > attr_end)) // off-by-one goto io_error; for (deltaxcn = (s8)buf[b--]; b; b--) deltaxcn = (deltaxcn << 8) + buf[b]; }

When buf + b == attr_end, the check evaluates to false and buf[b] reads one byte past the valid attribute boundary. The same pattern appears in the LCN delta bytes check.

Fix both checks to use >= so that buf[b] at exactly attr_end is correctly rejected as out of bounds.(CVE-2026-72210)

In the Linux kernel, the following vulnerability has been resolved:

ASoC: codecs: hdac_hdmi: Validate written enum value

hdac_hdmi_set_pin_port_mux() uses the written enum value to index the texts array before calling snd_soc_dapm_put_enum_double(), which validates that the value is within the enum item range.

An out-of-range value can therefore make the driver read past the texts array before the helper rejects the write. Move the lookup after the helper has accepted the value.(CVE-2026-74295)

In the Linux kernel, the following vulnerability has been resolved:

net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()

The SMC_LLC_CONFIRM_LINK / SMC_LLC_ADD_LINK_CONT branch in…

Record: OESA-2026-4718
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-04

OSVRHSA-2026:83707 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record: RHSA-2026:83707
CVSS 3.1: 8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:83738 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:83738
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:83739 7.8

Red Hat Security Advisory: kernel-rt security update

Record: RHSA-2026:83739
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:83775 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:83775
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:83797 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:83797
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:85321 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record: RHSA-2026:85321
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:85321 8.8

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: openvswitch: defer tunnel netdev_put to RCU release (CVE-2026-31678)
kernel: xfrm: espintcp: do not reuse an in-progress partial send (CVE-2026-52935)
kernel: sctp: diag: reject stale associations in dump_one path (CVE-2026-52917)
kernel: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (CVE-2026-63801)
kernel: sctp: fix race between sctp_wait_for_connect and peeloff (CVE-2026-63971)
kernel: usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (CVE-2026-63962)
kernel: sctp: avoid auth_enable sysctl UAF during netns teardown (CVE-2026-68162)
kernel: tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (CVE-2026-68117)
kernel: sctp: auth: verify auth requirement when auth_chunk is NULL (CVE-2026-68300)
kernel: sctp: validate stream count in sctp_process_strreset_inreq() (CVE-2026-68315)
kernel: Bluetooth: hci_sync: Fix advertising data UAFs (CVE-2026-74509)
kernel: sctp: keep chunk->transport in step with the list it is queued on (CVE-2026-74588)
kernel: sctp: validate cookie AUTH state before use (CVE-2026-74752)
kernel: smb: client: reject a tree connect response whose byte count is too small (CVE-2026-89631)
kernel: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (CVE-2026-89633)
kernel: signal: Prevent exec() race (CVE-2026-98256)
kernel: exec: Cleanup POSIX timers right after de_thread() (CVE-2026-98260)

Bug Fix(es) and Enhancement(s):

[10.2.z] kselftests: mm: hugepage-mremap: Bail out! mremap: Expected failure, but call succeeded (JIRA:Rocky Linux-181987)
[IBM 10.3 FEAT] zcrypt driver overwrite function - kernel part [rhel-10.2.z] (JIRA:Rocky Linux-245336)
Batch: z-stream xfrm - rhel-10.2.z (NST-Core-26W38) (JIRA:Rocky Linux-256678)
RHIVOS - [backport] S32G Driver Enablement - USB (JIRA:Rocky Linux-257228)
Fix pending kernel issues for L1VH GA - Kernel (JIRA:Rocky Linux-267038)
Backport 6785011f8b16 ("ipv4: validate checksum_start before completing checksum") [rhel-10.2.z] (JIRA:Rocky Linux-280590)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:85321
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:86033 8.8

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: openvswitch: defer tunnel netdev_put to RCU release (CVE-2026-31678)
kernel: xfrm: espintcp: do not reuse an in-progress partial send (CVE-2026-52935)
kernel: USB: serial: mxuport: fix memory corruption with small endpoint (CVE-2026-63899)
kernel: bridge: mcast: Fix a possible use-after-free when removing a bridge port (CVE-2026-64032)
kernel: tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (CVE-2026-64024)
kernel: usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (CVE-2026-63962)
kernel: Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CVE-2026-63974)
kernel: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (CVE-2026-64114)
kernel: ipv4: fib: free fib_alias with kfree_rcu() on insert error path (CVE-2026-64572)
kernel: Bluetooth: hci_sync: Fix advertising data UAFs (CVE-2026-74509)
kernel: Linux kernel: Denial of Service due to incorrect GSO state handling in network fragment reassembly (CVE-2026-80590)
kernel: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (CVE-2026-89633)
kernel: perf: Fix addr_filter_ranges lifetime (CVE-2026-93817)
kernel: kernel: strparser: use-after-free via msg_timer_work rearm after strp_done() cancellation ()
kernel: exec: Cleanup POSIX timers right after de_thread() (CVE-2026-98260)
kernel: ipv4: validate checksum_start before completing checksum (CVE-2026-99999)

Bug Fix(es) and Enhancement(s):

Batch: z-stream xfrm - rhel-9.8.z (NST-Core-26W38) (JIRA:Rocky Linux-256697)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:86033
CVSS 3.1: 8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2026-98260 7.3

Record: UBUNTU-CVE-2026-98260
CVSS 4.0: 7.3 HighCVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-06

OSVALSA-2026:85321 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: openvswitch: defer tunnel netdev_put to RCU release (CVE-2026-31678)
kernel: xfrm: espintcp: do not reuse an in-progress partial send (CVE-2026-52935)
kernel: sctp: diag: reject stale associations in dump_one path (CVE-2026-52917)
kernel: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (CVE-2026-63801)
kernel: sctp: fix race between sctp_wait_for_connect and peeloff (CVE-2026-63971)
kernel: usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (CVE-2026-63962)
kernel: sctp: avoid auth_enable sysctl UAF during netns teardown (CVE-2026-68162)
kernel: tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (CVE-2026-68117)
kernel: sctp: auth: verify auth requirement when auth_chunk is NULL (CVE-2026-68300)
kernel: sctp: validate stream count in sctp_process_strreset_inreq() (CVE-2026-68315)
kernel: Bluetooth: hci_sync: Fix advertising data UAFs (CVE-2026-74509)
kernel: sctp: keep chunk->transport in step with the list it is queued on (CVE-2026-74588)
kernel: sctp: validate cookie AUTH state before use (CVE-2026-74752)
kernel: smb: client: reject a tree connect response whose byte count is too small (CVE-2026-89631)
kernel: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (CVE-2026-89633)
kernel: signal: Prevent exec() race (CVE-2026-98256)
kernel: exec: Cleanup POSIX timers right after de_thread() (CVE-2026-98260)

Bug Fix(es) and Enhancement(s):

[10.2.z] kselftests: mm: hugepage-mremap: Bail out! mremap: Expected failure, but call succeeded (JIRA:AlmaLinux-181987)
[IBM 10.3 FEAT] zcrypt driver overwrite function - kernel part [almalinux-10.2.z] (JIRA:AlmaLinux-245336)
Batch: z-stream xfrm - rhel-10.2.z (NST-Core-26W38) (JIRA:AlmaLinux-256678)
RHIVOS - [backport] S32G Driver Enablement - USB (JIRA:AlmaLinux-257228)
Fix pending kernel issues for L1VH GA - Kernel (JIRA:AlmaLinux-267038)
Backport 6785011f8b16 ("ipv4: validate checksum_start before completing checksum") [almalinux-10.2.z] (JIRA:AlmaLinux-280590)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:85321
Updated: 2026-11-06

OSVALSA-2026:86033 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: openvswitch: defer tunnel netdev_put to RCU release (CVE-2026-31678)
kernel: xfrm: espintcp: do not reuse an in-progress partial send (CVE-2026-52935)
kernel: USB: serial: mxuport: fix memory corruption with small endpoint (CVE-2026-63899)
kernel: bridge: mcast: Fix a possible use-after-free when removing a bridge port (CVE-2026-64032)
kernel: tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (CVE-2026-64024)
kernel: usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (CVE-2026-63962)
kernel: Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CVE-2026-63974)
kernel: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (CVE-2026-64114)
kernel: ipv4: fib: free fib_alias with kfree_rcu() on insert error path (CVE-2026-64572)
kernel: Bluetooth: hci_sync: Fix advertising data UAFs (CVE-2026-74509)
kernel: Linux kernel: Denial of Service due to incorrect GSO state handling in network fragment reassembly (CVE-2026-80590)
kernel: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (CVE-2026-89633)
kernel: perf: Fix addr_filter_ranges lifetime (CVE-2026-93817)
kernel: kernel: strparser: use-after-free via msg_timer_work rearm after strp_done() cancellation ()
kernel: exec: Cleanup POSIX timers right after de_thread() (CVE-2026-98260)
kernel: ipv4: validate checksum_start before completing checksum (CVE-2026-99999)

Bug Fix(es) and Enhancement(s):

Batch: z-stream xfrm - almalinux-9.8.z (NST-Core-26W38) (JIRA:AlmaLinux-256697)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:86033
Updated: 2026-11-06

OSVAZL-106044 No score

CVE-2026-98260 affecting package kernel for versions less than 6.6.158.1-1

In the Linux kernel, the following vulnerability has been resolved:

exec: Cleanup POSIX timers right after de_thread()

A per-thread CPU timer holds a reference to the PID of the thread it is attached to and, while it is armed, its node is queued in that thread's posix_cputimers. The task is looked up by that PID.

In short:

  the non-leader thread B           the parent

Move the POSIX timer cleanup right after de_thread() before any of the later failure conditions brings the task into do_exit().

[ tglx: Move the cleanup right after de_thread() ]

Record: AZL-106044
Updated: 2026-11-02

OSVCLSA-2026-1792243434 No score

kernel: Fix of 123 CVEs

ipv4: validate checksum_start before completing checksum {CVE-2026-99999}
slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() {CVE-2026-90057}
mm/hugetlb: fix list corruption in allocate_file_region_entries() {CVE-2026-74518}
mm/page_reporting: use system_freezable_wq to fix UAF during suspend {CVE-2026-74481}
bpf: Fix UAF in sock clone early bailouts {CVE-2026-68399}
xen/netfront: drop RX packets with a short Ethernet header {CVE-2026-98375}
net/sched: fix packet loop on netem when duplicate is on {CVE-2026-63983}
net: Introduce skb tc depth field to track packet loops {CVE-2026-63983}
ALSA: seq: midi: Serialize output teardown with event_input {CVE-2026-74387}
netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst {CVE-2026-72255}
net: thunderbolt: Fix frags[] overflow by bounding frame_count {CVE-2026-72157}
SUNRPC: svcauth_gss: enforce krb5 token minimum length {CVE-2026-89550}
rxrpc: serialize kernel accept preallocation with socket teardown {CVE-2026-74436}
isofs: fix out-of-bounds page array access on empty zisofs block {CVE-2026-89778}
ata: libata-core: Reject an invalid concurrent positioning ranges count {CVE-2026-72030}
wifi: mac80211: validate extension-frame layout before RX {CVE-2026-68470}
wifi: mac80211: pass 'sta' to ieee80211_rx_data_set_sta() {CVE-2026-68470}
drm/amd/pm: fix pptable use-after-free {CVE-2026-74450}
smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 {CVE-2026-89637}
smb: client: clear ce->tgthint in free_tgts() {CVE-2026-89636}
smb: client: harden DFS cache against invalid target hints {CVE-2026-93210}
smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() {CVE-2026-89633}
nouveau/gem: reserve the bo in the info ioctl around the vma lookup {CVE-2026-89553}
HID: sony: clean up device list on probe failure {CVE-2026-90041}
drm/amd/display: Fix dangling pointer in CRTC reset function {CVE-2026-93175}
hwrng: core - fix rng list on registration error {CVE-2026-93163}
RDMA/rvt: Return NULL after port allocation failure {CVE-2026-93104}
fs/resctrl: Prevent use-after-free in rdtgroup_kn_put() {CVE-2026-93100}
bpf: Fix potential UAF when reading bpf link info {CVE-2026-90392}
HID: synchronize input before cleaning up a failed probe {CVE-2026-90329}
bpf: Don't predict JMP32 pointer vs zero comparisons {CVE-2026-98041}
smb: client: cancel reconnect work in clean_demultiplex_info() {CVE-2026-98175}
smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs {CVE-2026-98171}
netfilter: cttimeout: prevent UAF during module unload {CVE-2026-97609}
thunderbolt: Prevent XDomain delayed work use-after-free on disconnect {CVE-2026-74575}
NFSv4.2: fix LAYOUTSTATS send buffer exhaustion {CVE-2026-90103}
Squashfs: check block offset is not negative {CVE-2026-90203}
RDMA/siw: Fix endpoint/socket association handling {CVE-2026-74345}
HID: hidpp: fix potential UAF in hidpp_connect_event() {CVE-2026-93826}
hid: hid-logitech-hidpp: avoid unnecessary assignments in hidpp_connect_event {CVE-2026-93826}
configfs: unhash the dentry before dropping the item in rmdir {CVE-2026-97949}
ALSA: us122l: Prevent write upgrades for read mappings {CVE-2026-97931}
smb: client: reject userspace cifs.idmap descriptions {CVE-2026-97564}
scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown {CVE-2026-97536}
RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept {CVE-2026-98367}
ALSA: 6fire: fix OOB write from device-reported iso length {CVE-2026-98312}
scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf {CVE-2026-63887}
scsi: target: Fix hexadecimal CHAP_I handling {CVE-2026-63886}
scsi: target: iscsi: Validate CHAP_R length before base64 decode {CVE-2026-63886}
wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length {CVE-2026-90382}
nfsd: RCU-protect cl_cb_session to fix…

Record: CLSA-2026-1792243434
Updated: 2026-11-02

OSVCLSA-2026-1792445930 No score

kernel: Fix of 92 CVEs

ipv4: validate checksum_start before completing checksum {CVE-2026-99999}
smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 {CVE-2026-89637}
smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() {CVE-2026-89633}
sunrpc: defer rq_argp and rq_resp free until after RCU grace period {CVE-2026-89545}
seg6: reset IP6CB after IPv6 decapsulation {CVE-2026-80976}
ipv6: seg6: clear IPv4 control block on IPIP decapsulation {CVE-2026-80840}
i3c: master: svc: bound IBI payload to the requested max_payload_len {CVE-2026-80951}
i3c: master: svc: Use readsb helper for reading MDB {CVE-2026-80951}
configfs: unhash the dentry before dropping the item in rmdir {CVE-2026-97949}
ALSA: us122l: Prevent write upgrades for read mappings {CVE-2026-97931}
RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access {CVE-2026-98365}
ipv4: raw: reject IP_HDRINCL packets with ihl < 5 {CVE-2026-64114}
ixgbevf: fix use-after-free in VEPA multicast source pruning {CVE-2026-64113}
drm/virtio: use uninterruptible resv lock for plane updates {CVE-2026-64098}
keys: Pin request_key_auth payload in instantiate paths {CVE-2026-63823}
exfat: fix potential use-after-free in exfat_find_dir_entry() {CVE-2026-63808}
ethtool: cmis: require exact CDB reply length {CVE-2026-63996}
tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 {CVE-2026-63994}
ipv6: exthdrs: refresh nh after handling HAO option {CVE-2026-63922}
netpoll: fix a use-after-free on shutdown path {CVE-2026-64424}
HID: lg-g15: cancel pending work on remove to fix a use-after-free {CVE-2026-64362}
bpf: Validate BTF repeated field counts before expansion {CVE-2026-64354}
USB: iowarrior: fix use-after-free on disconnect {CVE-2026-64342}
ALSA: seq: Serialize UMP output teardown with event_input {CVE-2026-64029}
xfrm: Check for underflow in xfrm_state_mtu {CVE-2026-64009}
vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() {CVE-2026-63993}
tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() {CVE-2026-63992}
vsock/virtio: bind uarg before filling zerocopy skb {CVE-2026-63970}
KVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_handle_mops() {CVE-2026-64555}
drm/edid: fix OOB read in drm_parse_tiled_block() {CVE-2026-64546}
crypto: af_alg - zero initialize memory allocated via sock_kmalloc {CVE-2025-71113}
mailbox: mailbox-test: don't free the reused channel {CVE-2026-53294}
drm/amd/display: Bound VBIOS record-chain walk loops {CVE-2026-53138}
af_unix: Fix UAF read of tail->len in unix_stream_data_wait() {CVE-2026-64109}
nfsd: release layout stid on setlease failure {CVE-2026-53399}
fuse: re-lock request before replacing page cache folio {CVE-2026-53388}
blk-mq: pop cached request if it is usable {CVE-2026-64017}
scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() {CVE-2026-63888}
posix-cpu-timers: Prevent UAF caused by non-leader exec() race {CVE-2026-64560}
sctp: add INIT verification after cookie unpacking {CVE-2026-72398}
sctp: validate embedded INIT chunk and address list lengths in cookie {CVE-2026-53224}
sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing {CVE-2026-53246}
tcp: clear sock_ops cb flags before force-closing a child socket {CVE-2026-74268}
Bluetooth: btusb: fix use-after-free on marvell probe failure {CVE-2026-64470}
Bluetooth: btusb: fix use-after-free on registration failure {CVE-2026-64471}
sched/core: Make core-sched flips wait for in-flight selections {CVE-2026-89520}
net/packet: defer vmalloc TX_RING free until skbs finish {CVE-2026-80841}
reboot: fix cad_pid use-after-free race {CVE-2026-97938}
drm/amd/pm: fix pptable use-after-free {CVE-2026-74450}
tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() {CVE-2026-72404}
NFSD: Prevent client use-after-free during delegation revoke…

Record: CLSA-2026-1792445930
Updated: 2026-11-02

OSVopenSUSE-SU-2026:12131-1 No score

kernel-devel-7.2.10-1.1 on GA media

These are all security issues fixed in the kernel-devel-7.2.10-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:12131-1
Updated: 2026-11-02

OSVopenSUSE-SU-2026:22167-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2026-31731: thermal: core: Address thermal zone removal races with resume (bsc#1264042).
CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).
CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
CVE-2026-63830: net: skmsg: preserve sg.copy across SG transforms (bsc#1272178).
CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
CVE-2026-64058: netfs: Fix netfs_read_folio() to wait on writeback (bsc#1272898).
CVE-2026-64060: netfs: Fix leak of request in netfs_write_begin() error handling (bsc#1272901).
CVE-2026-64062: netfs: Fix potential deadlock in write-through mode (bsc#1272952).
CVE-2026-64063: netfs: Fix streaming write being overwritten (bsc#1272955).
CVE-2026-64064: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (bsc#1272956).
CVE-2026-64068: netfs: Fix missing locking around retry adding new subreqs (bsc#1272509).
CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039).
CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080).
CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
CVE-2026-72174: fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole() (bsc#1277695).
CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602).
CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663).
CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665).
CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
CVE-2026-72355: netfs: Fix barriering when walking subrequest list (bsc#1276330).
CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033).
CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
CVE-2026-74306: vfio/qat: fix f_pos race in qat_vf_resume_write() (bsc#1276907).
CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103).
CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal…

Record: openSUSE-SU-2026:22167-1
Updated: 2026-11-02

OSVSUSE-SU-2026:24371-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178).
CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
CVE-2026-64568: wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure (bsc#1274008).
CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232).
CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894).
CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889).
CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804).
CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931).
CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310).
CVE-2026-74723: btrfs: lzo: reject inline extents without valid headers (bsc#1276562).
CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode…

Record: SUSE-SU-2026:24371-1
Updated: 2026-11-02

OSVSUSE-SU-2026:24379-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178).
CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
CVE-2026-64568: wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure (bsc#1274008).
CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232).
CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894).
CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889).
CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804).
CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931).
CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310).
CVE-2026-74723: btrfs: lzo: reject inline extents without valid headers (bsc#1276562).
CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode…

Record: SUSE-SU-2026:24379-1
Updated: 2026-11-02

OSVSUSE-SU-2026:24386-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2026-31731: thermal: core: Address thermal zone removal races with resume (bsc#1264042).
CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).
CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
CVE-2026-63830: net: skmsg: preserve sg.copy across SG transforms (bsc#1272178).
CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
CVE-2026-64058: netfs: Fix netfs_read_folio() to wait on writeback (bsc#1272898).
CVE-2026-64060: netfs: Fix leak of request in netfs_write_begin() error handling (bsc#1272901).
CVE-2026-64062: netfs: Fix potential deadlock in write-through mode (bsc#1272952).
CVE-2026-64063: netfs: Fix streaming write being overwritten (bsc#1272955).
CVE-2026-64064: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (bsc#1272956).
CVE-2026-64068: netfs: Fix missing locking around retry adding new subreqs (bsc#1272509).
CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039).
CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080).
CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
CVE-2026-72174: fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole() (bsc#1277695).
CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602).
CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663).
CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665).
CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
CVE-2026-72355: netfs: Fix barriering when walking subrequest list (bsc#1276330).
CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033).
CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
CVE-2026-74306: vfio/qat: fix f_pos race in qat_vf_resume_write() (bsc#1276907).
CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103).
CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal…

Record: SUSE-SU-2026:24386-1
Updated: 2026-11-02

OSVSUSE-SU-2026:24422-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2026-31731: thermal: core: Address thermal zone removal races with resume (bsc#1264042).
CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).
CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
CVE-2026-63830: net: skmsg: preserve sg.copy across SG transforms (bsc#1272178).
CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
CVE-2026-64058: netfs: Fix netfs_read_folio() to wait on writeback (bsc#1272898).
CVE-2026-64060: netfs: Fix leak of request in netfs_write_begin() error handling (bsc#1272901).
CVE-2026-64062: netfs: Fix potential deadlock in write-through mode (bsc#1272952).
CVE-2026-64063: netfs: Fix streaming write being overwritten (bsc#1272955).
CVE-2026-64064: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (bsc#1272956).
CVE-2026-64068: netfs: Fix missing locking around retry adding new subreqs (bsc#1272509).
CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039).
CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080).
CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
CVE-2026-72174: fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole() (bsc#1277695).
CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602).
CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663).
CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665).
CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
CVE-2026-72355: netfs: Fix barriering when walking subrequest list (bsc#1276330).
CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033).
CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
CVE-2026-74306: vfio/qat: fix f_pos race in qat_vf_resume_write() (bsc#1276907).
CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103).
CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal…

Record: SUSE-SU-2026:24422-1
Updated: 2026-11-02

OSVSUSE-SU-2026:24437-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2026-31731: thermal: core: Address thermal zone removal races with resume (bsc#1264042).
CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).
CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
CVE-2026-63830: net: skmsg: preserve sg.copy across SG transforms (bsc#1272178).
CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
CVE-2026-64058: netfs: Fix netfs_read_folio() to wait on writeback (bsc#1272898).
CVE-2026-64060: netfs: Fix leak of request in netfs_write_begin() error handling (bsc#1272901).
CVE-2026-64062: netfs: Fix potential deadlock in write-through mode (bsc#1272952).
CVE-2026-64063: netfs: Fix streaming write being overwritten (bsc#1272955).
CVE-2026-64064: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (bsc#1272956).
CVE-2026-64068: netfs: Fix missing locking around retry adding new subreqs (bsc#1272509).
CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039).
CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080).
CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
CVE-2026-72174: fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole() (bsc#1277695).
CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602).
CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663).
CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665).
CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
CVE-2026-72355: netfs: Fix barriering when walking subrequest list (bsc#1276330).
CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033).
CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
CVE-2026-74306: vfio/qat: fix f_pos race in qat_vf_resume_write() (bsc#1276907).
CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103).
CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal…

Record: SUSE-SU-2026:24437-1
Updated: 2026-11-02

OSVSUSE-SU-2026:24446-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2026-31731: thermal: core: Address thermal zone removal races with resume (bsc#1264042).
CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).
CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
CVE-2026-63830: net: skmsg: preserve sg.copy across SG transforms (bsc#1272178).
CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
CVE-2026-64058: netfs: Fix netfs_read_folio() to wait on writeback (bsc#1272898).
CVE-2026-64060: netfs: Fix leak of request in netfs_write_begin() error handling (bsc#1272901).
CVE-2026-64062: netfs: Fix potential deadlock in write-through mode (bsc#1272952).
CVE-2026-64063: netfs: Fix streaming write being overwritten (bsc#1272955).
CVE-2026-64064: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (bsc#1272956).
CVE-2026-64068: netfs: Fix missing locking around retry adding new subreqs (bsc#1272509).
CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039).
CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080).
CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
CVE-2026-72174: fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole() (bsc#1277695).
CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602).
CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663).
CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665).
CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
CVE-2026-72355: netfs: Fix barriering when walking subrequest list (bsc#1276330).
CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033).
CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
CVE-2026-74306: vfio/qat: fix f_pos race in qat_vf_resume_write() (bsc#1276907).
CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103).
CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal…

Record: SUSE-SU-2026:24446-1
Updated: 2026-11-02

OSVSUSE-SU-2026:24473-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178).
CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
CVE-2026-64568: wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure (bsc#1274008).
CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232).
CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894).
CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889).
CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804).
CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931).
CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310).
CVE-2026-74723: btrfs: lzo: reject inline extents without valid headers (bsc#1276562).
CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode…

Record: SUSE-SU-2026:24473-1
Updated: 2026-11-04

OSVSUSE-SU-2026:24553-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178).
CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
CVE-2026-64568: wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure (bsc#1274008).
CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232).
CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894).
CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889).
CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804).
CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931).
CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310).
CVE-2026-74723: btrfs: lzo: reject inline extents without valid headers (bsc#1276562).
CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode…

Record: SUSE-SU-2026:24553-1
Updated: 2026-11-07

OSVSUSE-SU-2026:4934-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2025-71183: btrfs: always detect conflicting inodes when logging inode refs (bsc#1257631).
CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804).
CVE-2026-74624: netfilter: nf_conntrack: defer invalid log until after unlock (bsc#1277599).
CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259).
CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743).
CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251).
CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819).
CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280).
CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932).
CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851).
CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946).
CVE-2026-97945: replace with mainline version and update References (bsc#1283144).
CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963).
CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894).
CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835).
CVE-2026-98173: smb: client: fix use-after-free of iface in cifs_try_adding_channels() (bsc#1284415).
CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790).
CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408).
CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713).
CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791).
CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746).
CVE-2026-98366: RDMA/rxe: validate access flags before swapping the MR's PD (bsc#1284655).
CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685).
CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684).

The following non security issues were fixed:

Drivers: hv: Avoid infinite retry loop in init_vp_index() (git-fixes).
Drivers: hv: Don't reset VMBus connection state on error/exit paths (git-fixes).
Drivers: hv: vmbus: fix typo 'substract' in comment (git-fixes).
net: mana: reserve RX buffer headroom to fix forwarding performance (git-fixes).
netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684).
PCI: hv: Probe vPCI buses asynchronously (git-fixes).
PCI: hv: Warn when wait_for_response() waits indefinitely (git-fixes).
tools/hv: fix typo 'retrive' in comment (git-fixes).

Record: SUSE-SU-2026:4934-1
Updated: 2026-11-02

OSVSUSE-SU-2026:4935-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
CVE-2026-43132: dm-verity: correctly handle dm_bufio_client_create() failure (bsc#1264614).
CVE-2026-43184: rnbd-srv: Zero the rsp buffer before using it (bsc#1264622).
CVE-2026-43283: net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle (bsc#1264295).
CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
CVE-2026-43457: mctp: i2c: fix skb memory leak in receive path (bsc#1265000).
CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
CVE-2026-46034: vfio/cdx: Fix NULL pointer dereference in interrupt trigger path (bsc#1266757).
CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178).
CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039).
CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602).
CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232).
CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894).
CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889).
CVE-2026-74587:…

Record: SUSE-SU-2026:4935-1
Updated: 2026-11-02

OSVSUSE-SU-2026:4936-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
CVE-2026-74624: netfilter: conntrack: work around exceeded receive window (bsc#1277599).
CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259).
CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743).
CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).
CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251).
CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280).
CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397).
CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851).
CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946).
CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963).
CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894).
CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064).
CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835).
CVE-2026-98248: arm64: Use load LSE atomics for the non-return per-CPU atomic operations (bsc#1284518).
CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790).
CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408).
CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713).
CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791).
CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746).
CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685).
CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684).

The following non security issues were fixed:

kernel-binary.spec.in: Emulate kabi.pl error when suse-kabi-tools is used.
netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684).

Record: SUSE-SU-2026:4936-1
Updated: 2026-11-02

OSVSUSE-SU-2026:4937-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2024-39468: smb: client: fix deadlock in smb2_find_smb_tcon() (bsc#1227103 bsc#1280176).
CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
CVE-2026-74624: netfilter: conntrack: work around exceeded receive window (bsc#1277599).
CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259).
CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743).
CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).
CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251).
CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280).
CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397).
CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851).
CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946).
CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963).
CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894).
CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064).
CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835).
CVE-2026-98248: arm64: Use load LSE atomics for the non-return per-CPU atomic operations (bsc#1284518).
CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790).
CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408).
CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713).
CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791).
CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746).
CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685).
CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684).

Record: SUSE-SU-2026:4937-1
Updated: 2026-11-02

OSVSUSE-SU-2026:4938-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
CVE-2026-74624: netfilter: conntrack: work around exceeded receive window (bsc#1277599).
CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259).
CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743).
CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).
CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251).
CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280).
CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397).
CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851).
CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946).
CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963).
CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894).
CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064).
CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835).
CVE-2026-98248: arm64: Use load LSE atomics for the non-return per-CPU atomic operations (bsc#1284518).
CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790).
CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408).
CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713).
CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791).
CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746).
CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685).
CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684).

The following non security issue was fixed:

netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684).

Record: SUSE-SU-2026:4938-1
Updated: 2026-11-02

OSVSUSE-SU-2026:4939-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2024-39468: smb: client: fix deadlock in smb2_find_smb_tcon() (bsc#1227103, bsc#1280176).
CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
CVE-2026-74624: netfilter: conntrack: work around exceeded receive window (bsc#1277599).
CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259).
CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743).
CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).
CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251).
CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280).
CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397).
CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851).
CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946).
CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963).
CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894).
CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064).
CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835).
CVE-2026-98248: arm64: Use load LSE atomics for the non-return per-CPU atomic operations (bsc#1284518).
CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790).
CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408).
CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713).
CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791).
CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746).
CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685).
CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684).

The following non security issue was fixed:

netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684).

Record: SUSE-SU-2026:4939-1
Updated: 2026-11-02

OSVSUSE-SU-2026:4940-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
CVE-2026-43132: dm-verity: correctly handle dm_bufio_client_create() failure (bsc#1264614).
CVE-2026-43184: rnbd-srv: Zero the rsp buffer before using it (bsc#1264622).
CVE-2026-43283: net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle (bsc#1264295).
CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
CVE-2026-43457: mctp: i2c: fix skb memory leak in receive path (bsc#1265000).
CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
CVE-2026-46034: vfio/cdx: Fix NULL pointer dereference in interrupt trigger path (bsc#1266757).
CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178).
CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039).
CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602).
CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232).
CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894).
CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889). -…

Record: SUSE-SU-2026:4940-1
Updated: 2026-11-02

OSVUSN-8959-1 No score

linux, linux-aws, linux-gcp, linux-hwe-7.0, linux-ibm, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

USB Gadget drivers;
Memory management;
Multiple devices driver;
ARM64 architecture;
EROFS file system;
Networking core;
eXpress Data Path;
ARM32 architecture;
M68K architecture;
MIPS architecture;
OpenRISC architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
Intel NPU Driver;
Speakup Console Speech Driver;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
Auxiliary display drivers;
Drivers core;
Micron PCIe SSD driver;
Null block device driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
AMD CDX bus driver;
Hardware random number generator core;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
CPU frequency scaling framework;
CPU idle management framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
DAX dirext access to differentiated memory framework;
DIBS (Direct Internal Buffer Sharing) drivers;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
FireWire subsystem;
ARM SCMI message protocol;
ARM SCPI message protocol;
Google firmware drivers;
Qualcomm firmware drivers;
FPGA Framework;
GPIO subsystem;
GPU drivers;
HID subsystem;
HSI subsystem;
Microsoft Hyper-V drivers;
Hardware monitoring drivers;
CoreSight HW tracing drivers;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
Input Device (Mouse) drivers;
On-Chip Interconnect management framework;
IOMMU subsystem;
Industry Pack bus drivers;
IRQ chip drivers;
Mailbox framework;
Media drivers;
MemoryStick subsystem;
Multifunction device drivers;
Analog Devices digital potentiometer driver;
Broadcom VK accelerator driver;
Fastrpc Driver;
Amazon Nitro Secure Module driver;
SGI GRU driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Texas Instruments network drivers;
MediaTek network drivers;
Near Field Communication (NFC) drivers;
NTB driver;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
Device tree and open firmware driver;
Operating Performance Points (OPP) driver;
PA-RISC drivers;
PCI subsystem;
Performance monitor drivers;
PHY drivers;
Pin controllers subsystem;
Chrome hardware platform drivers;
Mellanox platform drivers;
Microsoft Surface platform drivers;
x86 platform drivers;
MediaTek PM domains;
Power sequencing drivers;
Power supply drivers;
Powercap sysfs driver;
PTP clock framework;
PWM drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
MPAM driver;
RPMSG subsystem;
Real Time Clock drivers;
S/390 drivers;
SCSI subsystem;
ASPEED SoC drivers;
Samsung SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thermal drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Userspace I/O drivers;
USB DSL drivers;
Cypress C67X00 USB…

Record: USN-8959-1
Updated: 2026-11-05

OSVUSN-8960-1 No score

linux-oem-7.0 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

USB Gadget drivers;
Memory management;
Multiple devices driver;
ARM64 architecture;
EROFS file system;
Networking core;
eXpress Data Path;
ARM32 architecture;
M68K architecture;
MIPS architecture;
OpenRISC architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
Intel NPU Driver;
Speakup Console Speech Driver;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
Auxiliary display drivers;
Drivers core;
Micron PCIe SSD driver;
Null block device driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
AMD CDX bus driver;
Hardware random number generator core;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
CPU frequency scaling framework;
CPU idle management framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
DAX dirext access to differentiated memory framework;
DIBS (Direct Internal Buffer Sharing) drivers;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
FireWire subsystem;
ARM SCMI message protocol;
ARM SCPI message protocol;
Google firmware drivers;
Qualcomm firmware drivers;
FPGA Framework;
GPIO subsystem;
GPU drivers;
HID subsystem;
HSI subsystem;
Microsoft Hyper-V drivers;
Hardware monitoring drivers;
CoreSight HW tracing drivers;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
Input Device (Mouse) drivers;
On-Chip Interconnect management framework;
IOMMU subsystem;
Industry Pack bus drivers;
IRQ chip drivers;
Mailbox framework;
Media drivers;
MemoryStick subsystem;
Multifunction device drivers;
Analog Devices digital potentiometer driver;
Broadcom VK accelerator driver;
Fastrpc Driver;
Amazon Nitro Secure Module driver;
SGI GRU driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Texas Instruments network drivers;
MediaTek network drivers;
Near Field Communication (NFC) drivers;
NTB driver;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
Device tree and open firmware driver;
Operating Performance Points (OPP) driver;
PA-RISC drivers;
PCI subsystem;
Performance monitor drivers;
PHY drivers;
Pin controllers subsystem;
Chrome hardware platform drivers;
Mellanox platform drivers;
Microsoft Surface platform drivers;
x86 platform drivers;
MediaTek PM domains;
Power sequencing drivers;
Power supply drivers;
Powercap sysfs driver;
PTP clock framework;
PWM drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
MPAM driver;
RPMSG subsystem;
Real Time Clock drivers;
S/390 drivers;
SCSI subsystem;
ASPEED SoC drivers;
Samsung SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thermal drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Userspace I/O drivers;
USB DSL drivers;
Cypress C67X00 USB…

Record: USN-8960-1
Updated: 2026-11-05

Affected products

linux

Affected packages

Affected packages
Package	Affected	Fixed
`kernel` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-64k` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-64k-core` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-64k-debug` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-64k-debug-core` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-64k-debug-devel` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-64k-debug-devel-matched` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-64k-debug-modules` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-64k-debug-modules-core` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-64k-debug-modules-extra` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-64k-devel` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-64k-devel-matched` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-64k-modules` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-64k-modules-core` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-64k-modules-extra` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-abi-stablelists` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-core` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-cross-headers` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-debug` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-debug-core` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-debug-devel` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-debug-devel-matched` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-debug-modules` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-debug-modules-core` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-debug-modules-extra` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-debug-uki-virt` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-devel` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-devel-matched` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-doc` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-headers` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-modules` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-modules-core` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-modules-extra` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-modules-extra-matched` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-rt` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-rt-64k` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-rt-64k-core` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-rt-64k-debug` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-rt-64k-debug-core` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-rt-64k-debug-devel` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-rt-64k-debug-modules` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-rt-64k-debug-modules-core` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-rt-64k-debug-modules-extra` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-rt-64k-devel` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-rt-64k-modules` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-rt-64k-modules-core` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-rt-64k-modules-extra` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-rt-core` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-rt-debug` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-rt-debug-core` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-rt-debug-devel` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-rt-debug-modules` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-rt-debug-modules-core` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-rt-debug-modules-extra` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel-rt-devel` AlmaLinux:10 From an advisory covering 18 CVEs	before 6.12.0-211.67.1.el10_2	6.12.0-211.67.1.el10_2
`kernel` Azure Linux:3	before 6.6.158.1-1	6.6.158.1-1
`linux-lts` Alpaquita:23	6.1.189-r0 up to 6.1.191-r0	6.1.191-r0
`linux-lts` Alpaquita:25	6.12.111-r1 up to 6.12.112-r0	6.12.112-r0
`linux-lts` Alpaquita:stream	6.18.53-r0 up to 6.18.55-r0	6.18.55-r0
`bpftool` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 7.0.0-284.1101.el9_2.tuxcare.11.els16	7.0.0-284.1101.el9_2.tuxcare.11.els16
`kernel` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-64k` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-64k-core` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-64k-debug` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-64k-debug-core` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-64k-debug-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-64k-debug-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-64k-debug-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-64k-debug-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-64k-debug-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-64k-debug-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-64k-debug-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-64k-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-64k-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-64k-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-64k-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-64k-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-64k-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-64k-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-abi-stablelists` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-core` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-cross-headers` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-debug` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-debug-core` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-debug-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-debug-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-debug-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-debug-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-debug-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-debug-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-debug-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-debug-uki-virt` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-doc` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-headers` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-ipaclones-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-selftests-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-tools` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-tools-libs` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-tools-libs-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-uki-virt` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`libbpf` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 2:1.0.0-2.el9_2.tuxcare.11.els16	2:1.0.0-2.el9_2.tuxcare.11.els16
`libbpf-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 2:1.0.0-2.el9_2.tuxcare.11.els16	2:1.0.0-2.el9_2.tuxcare.11.els16
`libbpf-static` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 2:1.0.0-2.el9_2.tuxcare.11.els16	2:1.0.0-2.el9_2.tuxcare.11.els16
`perf` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`python3-perf` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`rtla` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel` TuxCare:AlmaLinux:9.6 From an advisory covering 96 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els16	5.14.0-570.62.1.el9_6.tuxcare.5.els16
`Kernel` Linux	5.7.0 up to 6.1.191, 6.2.0 up to 6.6.158, 6.7.0 up to 6.12.112, 6.13.0 up to 6.18.54, 6.19.0 up to 7.2.8	6.1.1916.6.1586.12.1126.18.547.2.8
`linux` Debian:12	before 6.1.190-1, plus listed versions 6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1 Show 45 moreShow less 6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.170-16.1.170-26.1.170-36.1.172-16.1.174-16.1.176-16.1.177-16.1.180-16.1.187-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-1	6.1.190-1
`linux` Debian:13	before 6.12.113-1, plus listed versions 6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1 Show 31 moreShow less 6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-1	6.12.113-1
`linux` Debian:14	before 7.2.8-1, plus listed versions 6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1 Show 45 moreShow less 6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1	7.2.8-1
`linux-6.12` Debian:12	before 6.12.113-1~deb12u1, plus listed versions 6.12.100-1~deb12u16.12.101-1~deb12u16.12.107-1~deb12u16.12.111-1~deb12u1	6.12.113-1~deb12u1
`kernel` openEuler:22.03-LTS-SP4 From an advisory covering 33 CVEs	before 5.10.0-340.0.0.241.oe2203sp4	5.10.0-340.0.0.241.oe2203sp4
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-64k-debug-devel` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-64k-debug-devel-matched` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-64k-debuginfo` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-64k-devel` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-64k-devel-matched` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-debug-debuginfo` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-debug-devel` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-debug-devel-matched` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-debuginfo` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-devel` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-devel-matched` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-doc` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-rt-64k-debug-debuginfo` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-rt-64k-debuginfo` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-rt-debuginfo` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-tools-debuginfo` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-zfcpdump-devel` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-zfcpdump-devel-matched` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`libperf-debuginfo` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`perf` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`perf-debuginfo` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`python3-perf` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`python3-perf-debuginfo` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`rtla` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`rv` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-64k` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-64k-core` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-64k-debug` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-64k-debug-core` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-64k-debug-modules` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-64k-debug-modules-core` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-64k-debug-modules-extra` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-64k-modules` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-64k-modules-core` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-64k-modules-extra` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-abi-stablelists` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-core` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-debug` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-debug-core` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-debug-modules` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-debug-modules-core` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-debug-modules-extra` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-debug-uki-virt` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-modules` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-modules-core` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-modules-extra` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel-tools` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 16 CVEs	before 0:6.12.0-55.111.1.el10_0	0:6.12.0-55.111.1.el10_0
`kernel` Rocky Linux:10 From an advisory covering 17 CVEs	before 0:6.12.0-211.67.1.el10_2	0:6.12.0-211.67.1.el10_2
`kernel` Rocky Linux:9 From an advisory covering 15 CVEs	before 0:5.14.0-687.59.1.el9_8	0:5.14.0-687.59.1.el9_8
`kernel-default` SUSE:Linux Micro 6.0 From an advisory covering 98 CVEs	before 6.4.0-159998.54.1	6.4.0-159998.54.1
`kernel-default-base` SUSE:Linux Micro 6.0 From an advisory covering 98 CVEs	before 6.4.0-159998.54.1.159998.21.40	6.4.0-159998.54.1.159998.21.40
`kernel-kvmsmall` SUSE:Linux Micro 6.0 From an advisory covering 98 CVEs	before 6.4.0-159998.54.1	6.4.0-159998.54.1
`kernel-source` SUSE:Linux Micro 6.0 From an advisory covering 98 CVEs	before 6.4.0-159998.54.1	6.4.0-159998.54.1
`kernel-default` SUSE:Linux Micro 6.1 From an advisory covering 98 CVEs	before 6.4.0-159998.54.1	6.4.0-159998.54.1
`kernel-default-base` SUSE:Linux Micro 6.1 From an advisory covering 98 CVEs	before 6.4.0-159998.54.1.159998.21.39	6.4.0-159998.54.1.159998.21.39
`kernel-kvmsmall` SUSE:Linux Micro 6.1 From an advisory covering 98 CVEs	before 6.4.0-159998.54.1	6.4.0-159998.54.1
`kernel-source` SUSE:Linux Micro 6.1 From an advisory covering 98 CVEs	before 6.4.0-159998.54.1	6.4.0-159998.54.1
`kernel-obs-build` SUSE:Linux Micro Extras 6.2 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-syms` SUSE:Linux Micro Extras 6.2 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-64kb` SUSE:Linux Micro 6.2 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-default` SUSE:Linux Micro 6.2 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-default-base` SUSE:Linux Micro 6.2 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1.160000.2.29	6.12.0-160000.40.1.160000.2.29
`kernel-rt` SUSE:Linux Micro 6.2 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-source` SUSE:Linux Micro 6.2 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-64kb` SUSE:Linux Enterprise Server 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-azure` SUSE:Linux Enterprise Server 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-default` SUSE:Linux Enterprise Server 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-default-base` SUSE:Linux Enterprise Server 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1.160000.2.29	6.12.0-160000.40.1.160000.2.29
`kernel-docs` SUSE:Linux Enterprise Server 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-kvmsmall` SUSE:Linux Enterprise Server 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-obs-qa` SUSE:Linux Enterprise Server 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-source` SUSE:Linux Enterprise Server 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-syms` SUSE:Linux Enterprise Server 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-64kb` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-azure` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-default` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-default-base` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1.160000.2.29	6.12.0-160000.40.1.160000.2.29
`kernel-docs` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-kvmsmall` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-obs-qa` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-source` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-rt` SUSE:Linux Micro 6.0 From an advisory covering 98 CVEs	before 6.4.0-159998.54.1	6.4.0-159998.54.1
`kernel-source-rt` SUSE:Linux Micro 6.0 From an advisory covering 98 CVEs	before 6.4.0-159998.54.1	6.4.0-159998.54.1
`kernel-rt` SUSE:Linux Micro 6.1 From an advisory covering 98 CVEs	before 6.4.0-159998.54.1	6.4.0-159998.54.1
`kernel-source-rt` SUSE:Linux Micro 6.1 From an advisory covering 98 CVEs	before 6.4.0-159998.54.1	6.4.0-159998.54.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 29 CVEs	before 6.4.0-150600.23.143.1	6.4.0-150600.23.143.1
`kernel-livepatch-SLE15-SP6_Update_33` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 29 CVEs	before 1-150600.13.5.1	1-150600.13.5.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP6 From an advisory covering 29 CVEs	before 6.4.0-150600.23.143.1	6.4.0-150600.23.143.1
`kernel-64kb` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 29 CVEs	before 6.4.0-150600.23.143.1	6.4.0-150600.23.143.1
`kernel-default` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 29 CVEs	before 6.4.0-150600.23.143.1	6.4.0-150600.23.143.1
`kernel-default-base` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 29 CVEs	before 6.4.0-150600.23.143.1.150600.12.66.3	6.4.0-150600.23.143.1.150600.12.66.3
`kernel-docs` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 29 CVEs	before 6.4.0-150600.23.143.1	6.4.0-150600.23.143.1
`kernel-obs-build` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 29 CVEs	before 6.4.0-150600.23.143.1	6.4.0-150600.23.143.1
`kernel-source` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 29 CVEs	before 6.4.0-150600.23.143.1	6.4.0-150600.23.143.1
`kernel-syms` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 29 CVEs	before 6.4.0-150600.23.143.1	6.4.0-150600.23.143.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 29 CVEs	before 6.4.0-150600.23.143.1	6.4.0-150600.23.143.1
`kernel-default` SUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 29 CVEs	before 6.4.0-150600.23.143.1	6.4.0-150600.23.143.1
`kernel-default-base` SUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 29 CVEs	before 6.4.0-150600.23.143.1.150600.12.66.3	6.4.0-150600.23.143.1.150600.12.66.3
`kernel-docs` SUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 29 CVEs	before 6.4.0-150600.23.143.1	6.4.0-150600.23.143.1
`kernel-obs-build` SUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 29 CVEs	before 6.4.0-150600.23.143.1	6.4.0-150600.23.143.1
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-aws-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-aws-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less 5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1	None known
`linux-aws-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1 Show 45 moreShow less 5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1	None known
`linux-aws-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1	None known
`linux-azure-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less 5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2	None known
`linux-azure-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less 5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1	None known
`linux-azure-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1 Show 45 moreShow less 5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1	None known
`linux-azure-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1	None known
`linux-azure-fde` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less 5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1	None known
`linux-azure-fde-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-1019.24~20.04.1.15.15.0-1020.25~20.04.1.15.15.0-1021.26~20.04.1.15.15.0-1029.36~20.04.1.15.15.0-1030.37~20.04.1.1 Show 45 moreShow less 5.15.0-1031.38~20.04.1.15.15.0-1033.40~20.04.1.15.15.0-1034.41~20.04.1.25.15.0-1035.42~20.04.1.15.15.0-1036.43~20.04.1.15.15.0-1037.44~20.04.1.15.15.0-1038.45~20.04.1.15.15.0-1039.46~20.04.1.15.15.0-1040.47~20.04.1.15.15.0-1041.48~20.04.1.15.15.0-1042.49~20.04.1.15.15.0-1043.50~20.04.1.15.15.0-1046.53~20.04.1.15.15.0-1047.54~20.04.1.15.15.0-1049.56~20.04.1.15.15.0-1050.57~20.04.1.15.15.0-1051.59~20.04.1.15.15.0-1052.60~20.04.1.15.15.0-1053.61~20.04.1.15.15.0-1054.62~20.04.1.15.15.0-1056.64~20.04.1.15.15.0-1057.65~20.04.1.15.15.0-1058.66~20.04.2.15.15.0-1059.67~20.04.1.15.15.0-1060.69~20.04.1.15.15.0-1061.70~20.04.1.15.15.0-1063.72~20.04.1.15.15.0-1064.73~20.04.1.15.15.0-1065.74~20.04.1.15.15.0-1067.76~20.04.1.15.15.0-1068.77~20.04.1.15.15.0-1070.79~20.04.1.15.15.0-1071.80~20.04.1.15.15.0-1072.81~20.04.1.15.15.0-1073.82~20.04.1.15.15.0-1074.83~20.04.1.15.15.0-1076.85~20.04.1.15.15.0-1078.87~20.04.1.15.15.0-1081.90~20.04.1.15.15.0-1082.91~20.04.1.15.15.0-1086.95~20.04.1.15.15.0-1087.96~20.04.1.15.15.0-1088.97~20.04.1.15.15.0-1089.98~20.04.1.15.15.0-1091.100~20.04.1.1	None known
`linux-gcp-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less 5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3	None known
`linux-gcp-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less 5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1	None known
`linux-gcp-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2 Show 45 moreShow less 5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.15.15.0-1065.73~20.04.15.15.0-1066.74~20.04.15.15.0-1067.75~20.04.15.15.0-1068.76~20.04.15.15.0-1069.77~20.04.15.15.0-1070.78~20.04.15.15.0-1071.79~20.04.15.15.0-1072.80~20.04.15.15.0-1073.81~20.04.15.15.0-1074.83~20.04.1	None known
`linux-gcp-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41	None known
`linux-gke` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less 5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111	None known
`linux-gke-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less 5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1	None known
`linux-gkeop` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less 5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77	None known
`linux-gkeop-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 40 moreShow less 5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1	None known
`linux-hwe-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less 5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1	None known
`linux-hwe-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less 5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1	None known
`linux-hwe-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 45 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1	None known
`linux-hwe-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less 5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1	None known
`linux-ibm-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1 Show 45 moreShow less 5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.15.15.0-1057.60~20.04.15.15.0-1058.61~20.04.15.15.0-1059.62~20.04.15.15.0-1060.63~20.04.15.15.0-1061.64~20.04.15.15.0-1062.65~20.04.15.15.0-1063.66~20.04.15.15.0-1064.67~20.04.15.15.0-1065.68~20.04.15.15.0-1066.69~20.04.15.15.0-1067.70~20.04.15.15.0-1068.71~20.04.15.15.0-1069.72~20.04.15.15.0-1074.77~20.04.15.15.0-1075.78~20.04.15.15.0-1076.79~20.04.15.15.0-1078.81~20.04.15.15.0-1079.82~20.04.15.15.0-1080.83~20.04.15.15.0-1081.84~20.04.15.15.0-1083.86~20.04.15.15.0-1085.88~20.04.15.15.0-1086.89~20.04.15.15.0-1087.90~20.04.15.15.0-1089.92~20.04.15.15.0-1090.93~20.04.15.15.0-1091.94~20.04.15.15.0-1092.95~20.04.15.15.0-1093.96~20.04.15.15.0-1094.97~20.04.1	None known
`linux-intel-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19	None known
`linux-intel-iotg-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-1003.5~20.04.15.15.0-1008.11~20.04.15.15.0-1010.14~20.04.15.15.0-1015.20~20.04.25.15.0-1016.21~20.04.1 Show 45 moreShow less 5.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1021.26~20.04.15.15.0-1023.28~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1030.35~20.04.15.15.0-1031.36~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1040.46~20.04.15.15.0-1043.49~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1060.66~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.25.15.0-1074.80~20.04.15.15.0-1077.83~20.04.15.15.0-1078.84~20.04.15.15.0-1079.85~20.04.15.15.0-1083.89~20.04.15.15.0-1084.90~20.04.15.15.0-1085.91~20.04.15.15.0-1086.92~20.04.1	None known
`linux-lowlatency-hwe-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 45 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.88~20.04.15.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.95~20.04.15.15.0-87.96~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-110.120~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1	None known
`linux-nvidia-tegra-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-1009.9~20.04.15.15.0-1010.10~20.04.15.15.0-1012.12~20.04.15.15.0-1014.14~20.04.15.15.0-1015.15~20.04.1 Show 37 moreShow less 5.15.0-1016.16~20.04.15.15.0-1017.17~20.04.15.15.0-1018.18~20.04.15.15.0-1019.19~20.04.15.15.0-1020.20~20.04.15.15.0-1022.22~20.04.15.15.0-1025.25~20.04.15.15.0-1027.27~20.04.15.15.0-1030.30~20.04.15.15.0-1032.32~20.04.15.15.0-1039.39~20.04.15.15.0-1040.40~20.04.15.15.0-1041.41~20.04.15.15.0-1042.42~20.04.15.15.0-1043.43~20.04.15.15.0-1044.44~20.04.15.15.0-1045.45~20.04.15.15.0-1046.46~20.04.15.15.0-1047.47~20.04.15.15.0-1048.48~20.04.15.15.0-1049.49~20.04.15.15.0-1050.50~20.04.15.15.0-1051.51~20.04.15.15.0-1052.52~20.04.25.15.0-1053.53~20.04.15.15.0-1055.55~20.04.15.15.0-1057.57~20.04.15.15.0-1058.58~20.04.15.15.0-1060.60~20.04.15.15.0-1061.61~20.04.15.15.0-1063.63~20.04.15.15.0-1064.66~20.04.15.15.0-1065.67~20.04.15.15.0-1066.68~20.04.15.15.0-1067.69~20.04.15.15.0-1068.70~20.04.15.15.0-1070.72~20.04.1	None known
`linux-oem-5.10` Ubuntu:20.04:LTS	All versions, plus listed versions 5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17 Show 21 moreShow less 5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61	None known
`linux-oem-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21 Show 7 moreShow less 5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36	None known
`linux-oem-5.14` Ubuntu:20.04:LTS	All versions, plus listed versions 5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10 Show 30 moreShow less 5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67	None known
`linux-oem-5.6` Ubuntu:20.04:LTS	All versions, plus listed versions 5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13 Show 24 moreShow less 5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60	None known
`linux-oracle-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-oracle-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1 Show 7 moreShow less 5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1	None known
`linux-oracle-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-1007.9~20.04.15.15.0-1013.17~20.04.15.15.0-1016.20~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.1 Show 45 moreShow less 5.15.0-1019.24~20.04.15.15.0-1021.27~20.04.15.15.0-1022.28~20.04.15.15.0-1025.31~20.04.25.15.0-1027.33~20.04.15.15.0-1029.35~20.04.15.15.0-1030.36~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1041.47~20.04.15.15.0-1042.48~20.04.15.15.0-1044.50~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1047.53~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1053.59~20.04.15.15.0-1054.60~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1074.80~20.04.1	None known
`linux-oracle-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1	None known
`linux-raspi2` Ubuntu:20.04:LTS	All versions, plus listed versions 5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6	None known
`linux-riscv` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34 Show 7 moreShow less 5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45	None known
`linux-riscv-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1 Show 8 moreShow less 5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35	None known
`kernel-source` openSUSE:Tumbleweed From an advisory covering 220 CVEs	before 7.2.10-1.1	7.2.10-1.1
`dtb-aarch64` openSUSE:Leap 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-64kb` openSUSE:Leap 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-azure` openSUSE:Leap 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-default` openSUSE:Leap 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-default-base` openSUSE:Leap 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1.160000.2.29	6.12.0-160000.40.1.160000.2.29
`kernel-docs` openSUSE:Leap 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-kvmsmall` openSUSE:Leap 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-obs-build` openSUSE:Leap 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-obs-qa` openSUSE:Leap 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-rt` openSUSE:Leap 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-source` openSUSE:Leap 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-syms` openSUSE:Leap 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-zfcpdump` openSUSE:Leap 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
PoC in GitHub	jadedFella/lpe-study-notes	2026-10-18
PoC in GitHub	ylh440104/InfinityCore-Android-CVE-2026-98260	2026-10-18
PoC in GitHub	quyicheng03-boop/CVE-2026-98260-nezha-android	2026-10-23
PoC in GitHub	quyicheng03-boop/CVE-2026-98260-popsicle-android	2026-10-23
PoC in GitHub	sganggs/CVE-2026-98260-BRM-AN00	2026-10-24
PoC in GitHub	janewas/cve-2026-98260-vivo-gki-research	2026-10-25
PoC in GitHub	kzktor/ic-timer-lpe	2026-10-25
PoC in GitHub	zsw125/o3root	2026-10-25
PoC in GitHub	AzirX1337/CVE-2026-98260-OnePlus16-PYB110-Jailbreak	2026-10-26
PoC in GitHub	ChaYeWuu/prague-CVE-2026-98260-OS4.0	2026-10-26

Show 15 moreShow less

Public exploits
Source	Link	Date
PoC in GitHub	ChaYeWuu/xring-CVE-2026-98260-OS4.0	2026-10-26
PoC in GitHub	Lw5959/xring-cve-2026-98260	2026-10-26
PoC in GitHub	addxemmm/CVE-2026-98260-pudding-android	2026-10-26
PoC in GitHub	villager1314/CVE-2026-98260-Analysis	2026-10-26
PoC in GitHub	woshigenm/CVE-2026-98260	2026-10-26
PoC in GitHub	YuKongA/CVE-2026-98260	2026-10-27
PoC in GitHub	b1gmang0/CVE-2026-98260-pandora-lpe	2026-10-27
PoC in GitHub	zjns/CVE-2026-98260	2026-10-27
PoC in GitHub	4627488/cve-2026-98260-nezha	2026-10-28
PoC in GitHub	NanoTurtle1145/cve-2026-98260-uaf	2026-10-28
PoC in GitHub	colorgarden/CVE-2026-98260-y700-TB321FU-lpe	2026-10-28
PoC in GitHub	kpgc10kai/TimerRoot	2026-10-28
PoC in GitHub	AzirX1337/CVE-2026-98260-PMX110-Root618-Jailbreak	2026-10-29
PoC in GitHub	Feiman55/CVE-2026-98260-GhostKey	2026-10-29
PoC in GitHub	SecPhases/CVE-2026-98260-GhostKey	2026-10-29

History

History
Recorded	Changed	Sources
Nov 7, 2026	exploits, exploits_more	PoC in GitHub
Nov 7, 2026	affected, aliases, references	OSV
Nov 6, 2026	exploits, exploits_more	PoC in GitHub
Nov 6, 2026	affected	OSV
Nov 6, 2026	references	OSV
Nov 6, 2026	affected
Nov 5, 2026	exploits_more	PoC in GitHub
Nov 5, 2026	affected, aliases, references	OSV
Nov 4, 2026	references	OSV
Nov 4, 2026	affected, aliases, references	OSV

Show 8 moreShow less

History
Recorded	Changed	Sources
Nov 4, 2026	exploits, exploits_more	PoC in GitHub
Nov 4, 2026	affected, aliases, references	OSV
Nov 4, 2026	affected	OSV
Nov 3, 2026	affected, aliases, references	OSV
Nov 3, 2026	affected, references	OSV
Nov 3, 2026	exploits_more, facts	PoC in GitHub
Nov 3, 2026	exploits, exploits_more
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-98260 is a high vulnerability (CVSS 7.8) in Linux, published October 6, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.18%, the 8th percentile. Fixed in kernel 6.6.158.1-1.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 955 package rows, 421 versions, 3,682 references and the rest of 16 source descriptions. The JSON record has them. The full exploit list has 21 more links.