Every CVE Search/ Get API key

CVE-2025-38110

net/mdiobus: Fix potential out-of-bounds clause 45 read/write access

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

net/mdiobus: Fix potential out-of-bounds clause 45 read/write access

When using publicly available tools like 'mdio-tools' to read/write data from/to network interface and its PHY via C45 (clause 45) mdiobus, there is no verification of parameters passed to the ioctl and it accepts any mdio address. Currently there is support for 32 addresses in kernel via PHY_MAX_ADDR define, but it is possible to pass higher value than that via ioctl. While read/write operation should generally fail in this case, mdiobus provides stats array, where wrong address may allow out-of-bounds read/write.

Fix that by adding address verification before C45 read/write operation. While this excludes this access from any statistics, it improves security of read/write operation.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.20%Up 0.2 points since Jul 3, 2025
90%50%10%1%

What each source reports

CVE List Score used 7.8

net/mdiobus: Fix potential out-of-bounds clause 45 read/write access

In the Linux kernel, the following vulnerability has been resolved:

net/mdiobus: Fix potential out-of-bounds clause 45 read/write access

When using publicly available tools like 'mdio-tools' to read/write data from/to network interface and its PHY via C45 (clause 45) mdiobus, there is no verification of parameters passed to the ioctl and it accepts any mdio address. Currently there is support for 32 addresses in kernel via PHY_MAX_ADDR define, but it is possible to pass higher value than that via ioctl. While read/write operation should generally fail in this case, mdiobus provides stats array, where wrong address may allow out-of-bounds read/write.

Fix that by adding address verification before C45 read/write operation. While this excludes this access from any statistics, it improves security of read/write operation.

Record
CVE-2025-38110
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
EUVDEUVD-2025-19833 7.8

In the Linux kernel, the following vulnerability has been resolved:

net/mdiobus: Fix potential out-of-bounds clause 45 read/write access

When using publicly available tools like 'mdio-tools' to read/write data from/to network interface and its PHY via C45 (clause 45) mdiobus, there is no verification of parameters passed to the ioctl and it accepts any mdio address. Currently there is support for 32 addresses in kernel via PHY_MAX_ADDR define, but it is possible to pass higher value than that via ioctl. While read/write operation should generally fail in this case, mdiobus provides stats array, where wrong address may allow out-of-bounds read/write.

Fix that by adding address verification before C45 read/write operation. While this excludes this access from any statistics, it improves security of read/write operation.

Record
EUVD-2025-19833
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-q3p7-pjx2-7hjq 7.1

In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fix potential...

In the Linux kernel, the following vulnerability has been resolved:

net/mdiobus: Fix potential out-of-bounds clause 45 read/write access

When using publicly available tools like 'mdio-tools' to read/write data from/to network interface and its PHY via C45 (clause 45) mdiobus, there is no verification of parameters passed to the ioctl and it accepts any mdio address. Currently there is support for 32 addresses in kernel via PHY_MAX_ADDR define, but it is possible to pass higher value than that via ioctl. While read/write operation should generally fail in this case, mdiobus provides stats array, where wrong address may allow out-of-bounds read/write.

Fix that by adding address verification before C45 read/write operation. While this excludes this access from any statistics, it improves security of read/write operation.

Record
GHSA-q3p7-pjx2-7hjq
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

net/mdiobus: Fix potential out-of-bounds clause 45 read/write access

When using publicly available tools like 'mdio-tools' to read/write data from/to network interface and its PHY via C45 (clause 45) mdiobus, there is no verification of parameters passed to the ioctl and it accepts any mdio address. Currently there is support for 32 addresses in kernel via PHY_MAX_ADDR define, but it is possible to pass higher value than that via ioctl. While read/write operation should generally fail in this case, mdiobus provides stats array, where wrong address may allow out-of-bounds read/write.

Fix that by adding address verification before C45 read/write operation. While this excludes this access from any statistics, it improves security of read/write operation.

Record
CVE-2025-38110
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
OSVBELL-CVE-2025-38110 7.1
Record
BELL-CVE-2025-38110
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSV 7.8

net/mdiobus: Fix potential out-of-bounds clause 45 read/write access

In the Linux kernel, the following vulnerability has been resolved:

net/mdiobus: Fix potential out-of-bounds clause 45 read/write access

When using publicly available tools like 'mdio-tools' to read/write data from/to network interface and its PHY via C45 (clause 45) mdiobus, there is no verification of parameters passed to the ioctl and it accepts any mdio address. Currently there is support for 32 addresses in kernel via PHY_MAX_ADDR define, but it is possible to pass higher value than that via ioctl. While read/write operation should generally fail in this case, mdiobus provides stats array, where wrong address may allow out-of-bounds read/write.

Fix that by adding address verification before C45 read/write operation. While this excludes this access from any statistics, it improves security of read/write operation.

Record
CVE-2025-38110
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 48 moreShow less
OSVDEBIAN-CVE-2025-38110 7.1

In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access When using publicly available tools like 'mdio-tools' to read/write data from/to network interface and its PHY via C45 (clause 45) mdiobus, there is no verification of parameters passed to the ioctl and it accepts any mdio address. Currently there is support for 32 addresses in kernel via PHY_MAX_ADDR define, but it is possible to pass higher value than that via ioctl. While read/write operation should generally fail in this case, mdiobus provides stats array, where wrong address may allow out-of-bounds read/write. Fix that by adding address verification before C45 read/write operation. While this excludes this access from any statistics, it improves security of read/write operation.

Record
DEBIAN-CVE-2025-38110
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-1303 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple()

Jakub added a lockdep_assert_no_hardirq() check in __page_pool_put_page() to increase test coverage.

syzbot found a splat caused by hard irq blocking in ptr_ring_resize_multiple() [1]

As current users of ptr_ring_resize_multiple() do not require hard irqs being masked, replace it to only block BH.

Rename helpers to better reflect they are safe against BH only.

  • ptr_ring_resize_multiple() to ptr_ring_resize_multiple_bh()
  • skb_array_resize_multiple() to skb_array_resize_multiple_bh()

[1]

WARNING: CPU: 1 PID: 9150 at net/core/page_pool.c:709 __page_pool_put_page net/core/page_pool.c:709 [inline] WARNING: CPU: 1 PID: 9150 at net/core/page_pool.c:709 page_pool_put_unrefed_netmem+0x157/0xa40 net/core/page_pool.c:780 Modules linked in: CPU: 1 UID: 0 PID: 9150 Comm: syz.1.1052 Not tainted 6.11.0-rc3-syzkaller-00202-gf8669d7b5f5d #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 RIP: 0010:__page_pool_put_page net/core/page_pool.c:709 [inline] RIP: 0010:page_pool_put_unrefed_netmem+0x157/0xa40 net/core/page_pool.c:780 Code: 74 0e e8 7c aa fb f7 eb 43 e8 75 aa fb f7 eb 3c 65 8b 1d 38 a8 6a 76 31 ff 89 de e8 a3 ae fb f7 85 db 74 0b e8 5a aa fb f7 90 <0f> 0b 90 eb 1d 65 8b 1d 15 a8 6a 76 31 ff 89 de e8 84 ae fb f7 85 RSP: 0018:ffffc9000bda6b58 EFLAGS: 00010083 RAX: ffffffff8997e523 RBX: 0000000000000000 RCX: 0000000000040000 RDX: ffffc9000fbd0000 RSI: 0000000000001842 RDI: 0000000000001843 RBP: 0000000000000000 R08: ffffffff8997df2c R09: 1ffffd40003a000d R10: dffffc0000000000 R11: fffff940003a000e R12: ffffea0001d00040 R13: ffff88802e8a4000 R14: dffffc0000000000 R15: 00000000ffffffff FS: 00007fb7aaf716c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fa15a0d4b72 CR3: 00000000561b0000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> tun_ptr_free drivers/net/tun.c:617 [inline] __ptr_ring_swap_queue include/linux/ptr_ring.h:571 [inline] ptr_ring_resize_multiple_noprof include/linux/ptr_ring.h:643 [inline] tun_queue_resize drivers/net/tun.c:3694 [inline] tun_device_event+0xaaf/0x1080 drivers/net/tun.c:3714 notifier_call_chain+0x19f/0x3e0 kernel/notifier.c:93 call_netdevice_notifiers_extack net/core/dev.c:2032 [inline] call_netdevice_notifiers net/core/dev.c:2046 [inline] dev_change_tx_queue_len+0x158/0x2a0 net/core/dev.c:9024 do_setlink+0xff6/0x41f0 net/core/rtnetlink.c:2923 rtnl_setlink+0x40d/0x5a0 net/core/rtnetlink.c:3201 rtnetlink_rcv_msg+0x73f/0xcf0 net/core/rtnetlink.c:6647 netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2550(CVE-2024-57994)

In the Linux kernel, the following vulnerability has been resolved:

ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params

Each cpu DAI should associate with a widget. However, the topology might not create the right number of DAI widgets for aggregated amps. And it will cause NULL pointer deference. Check that the DAI widget associated with the CPU DAI is valid to prevent NULL pointer deference due to missing DAI widgets in topologies with aggregated amps.(CVE-2024-58012)

In the Linux kernel, the following vulnerability has been resolved:

driver core: fix potential NULL pointer dereference in dev_uevent()

If userspace reads "uevent" device attribute at the same time as another threads unbinds the device from its driver, change to dev->driver from a valid pointer to NULL may result in crash. Fix this by using READ_ONCE() when fetching the pointer, and take bus' drivers klist lock to make sure driver instance will not disappear while we access it.

Use WRITE_ONCE() when setting the…

Record
OESA-2026-1303
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-1304 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple()

Jakub added a lockdep_assert_no_hardirq() check in __page_pool_put_page() to increase test coverage.

syzbot found a splat caused by hard irq blocking in ptr_ring_resize_multiple() [1]

As current users of ptr_ring_resize_multiple() do not require hard irqs being masked, replace it to only block BH.

Rename helpers to better reflect they are safe against BH only.

  • ptr_ring_resize_multiple() to ptr_ring_resize_multiple_bh()
  • skb_array_resize_multiple() to skb_array_resize_multiple_bh()

[1]

WARNING: CPU: 1 PID: 9150 at net/core/page_pool.c:709 __page_pool_put_page net/core/page_pool.c:709 [inline] WARNING: CPU: 1 PID: 9150 at net/core/page_pool.c:709 page_pool_put_unrefed_netmem+0x157/0xa40 net/core/page_pool.c:780 Modules linked in: CPU: 1 UID: 0 PID: 9150 Comm: syz.1.1052 Not tainted 6.11.0-rc3-syzkaller-00202-gf8669d7b5f5d #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 RIP: 0010:__page_pool_put_page net/core/page_pool.c:709 [inline] RIP: 0010:page_pool_put_unrefed_netmem+0x157/0xa40 net/core/page_pool.c:780 Code: 74 0e e8 7c aa fb f7 eb 43 e8 75 aa fb f7 eb 3c 65 8b 1d 38 a8 6a 76 31 ff 89 de e8 a3 ae fb f7 85 db 74 0b e8 5a aa fb f7 90 <0f> 0b 90 eb 1d 65 8b 1d 15 a8 6a 76 31 ff 89 de e8 84 ae fb f7 85 RSP: 0018:ffffc9000bda6b58 EFLAGS: 00010083 RAX: ffffffff8997e523 RBX: 0000000000000000 RCX: 0000000000040000 RDX: ffffc9000fbd0000 RSI: 0000000000001842 RDI: 0000000000001843 RBP: 0000000000000000 R08: ffffffff8997df2c R09: 1ffffd40003a000d R10: dffffc0000000000 R11: fffff940003a000e R12: ffffea0001d00040 R13: ffff88802e8a4000 R14: dffffc0000000000 R15: 00000000ffffffff FS: 00007fb7aaf716c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fa15a0d4b72 CR3: 00000000561b0000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> tun_ptr_free drivers/net/tun.c:617 [inline] __ptr_ring_swap_queue include/linux/ptr_ring.h:571 [inline] ptr_ring_resize_multiple_noprof include/linux/ptr_ring.h:643 [inline] tun_queue_resize drivers/net/tun.c:3694 [inline] tun_device_event+0xaaf/0x1080 drivers/net/tun.c:3714 notifier_call_chain+0x19f/0x3e0 kernel/notifier.c:93 call_netdevice_notifiers_extack net/core/dev.c:2032 [inline] call_netdevice_notifiers net/core/dev.c:2046 [inline] dev_change_tx_queue_len+0x158/0x2a0 net/core/dev.c:9024 do_setlink+0xff6/0x41f0 net/core/rtnetlink.c:2923 rtnl_setlink+0x40d/0x5a0 net/core/rtnetlink.c:3201 rtnetlink_rcv_msg+0x73f/0xcf0 net/core/rtnetlink.c:6647 netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2550(CVE-2024-57994)

In the Linux kernel, the following vulnerability has been resolved:

ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params

Each cpu DAI should associate with a widget. However, the topology might not create the right number of DAI widgets for aggregated amps. And it will cause NULL pointer deference. Check that the DAI widget associated with the CPU DAI is valid to prevent NULL pointer deference due to missing DAI widgets in topologies with aggregated amps.(CVE-2024-58012)

In the Linux kernel, the following vulnerability has been resolved:

driver core: fix potential NULL pointer dereference in dev_uevent()

If userspace reads "uevent" device attribute at the same time as another threads unbinds the device from its driver, change to dev->driver from a valid pointer to NULL may result in crash. Fix this by using READ_ONCE() when fetching the pointer, and take bus' drivers klist lock to make sure driver instance will not disappear while we access it.

Use WRITE_ONCE() when setting the…

Record
OESA-2026-1304
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-1305 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple()

Jakub added a lockdep_assert_no_hardirq() check in __page_pool_put_page() to increase test coverage.

syzbot found a splat caused by hard irq blocking in ptr_ring_resize_multiple() [1]

As current users of ptr_ring_resize_multiple() do not require hard irqs being masked, replace it to only block BH.

Rename helpers to better reflect they are safe against BH only.

  • ptr_ring_resize_multiple() to ptr_ring_resize_multiple_bh()
  • skb_array_resize_multiple() to skb_array_resize_multiple_bh()

[1]

WARNING: CPU: 1 PID: 9150 at net/core/page_pool.c:709 __page_pool_put_page net/core/page_pool.c:709 [inline] WARNING: CPU: 1 PID: 9150 at net/core/page_pool.c:709 page_pool_put_unrefed_netmem+0x157/0xa40 net/core/page_pool.c:780 Modules linked in: CPU: 1 UID: 0 PID: 9150 Comm: syz.1.1052 Not tainted 6.11.0-rc3-syzkaller-00202-gf8669d7b5f5d #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 RIP: 0010:__page_pool_put_page net/core/page_pool.c:709 [inline] RIP: 0010:page_pool_put_unrefed_netmem+0x157/0xa40 net/core/page_pool.c:780 Code: 74 0e e8 7c aa fb f7 eb 43 e8 75 aa fb f7 eb 3c 65 8b 1d 38 a8 6a 76 31 ff 89 de e8 a3 ae fb f7 85 db 74 0b e8 5a aa fb f7 90 <0f> 0b 90 eb 1d 65 8b 1d 15 a8 6a 76 31 ff 89 de e8 84 ae fb f7 85 RSP: 0018:ffffc9000bda6b58 EFLAGS: 00010083 RAX: ffffffff8997e523 RBX: 0000000000000000 RCX: 0000000000040000 RDX: ffffc9000fbd0000 RSI: 0000000000001842 RDI: 0000000000001843 RBP: 0000000000000000 R08: ffffffff8997df2c R09: 1ffffd40003a000d R10: dffffc0000000000 R11: fffff940003a000e R12: ffffea0001d00040 R13: ffff88802e8a4000 R14: dffffc0000000000 R15: 00000000ffffffff FS: 00007fb7aaf716c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fa15a0d4b72 CR3: 00000000561b0000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> tun_ptr_free drivers/net/tun.c:617 [inline] __ptr_ring_swap_queue include/linux/ptr_ring.h:571 [inline] ptr_ring_resize_multiple_noprof include/linux/ptr_ring.h:643 [inline] tun_queue_resize drivers/net/tun.c:3694 [inline] tun_device_event+0xaaf/0x1080 drivers/net/tun.c:3714 notifier_call_chain+0x19f/0x3e0 kernel/notifier.c:93 call_netdevice_notifiers_extack net/core/dev.c:2032 [inline] call_netdevice_notifiers net/core/dev.c:2046 [inline] dev_change_tx_queue_len+0x158/0x2a0 net/core/dev.c:9024 do_setlink+0xff6/0x41f0 net/core/rtnetlink.c:2923 rtnl_setlink+0x40d/0x5a0 net/core/rtnetlink.c:3201 rtnetlink_rcv_msg+0x73f/0xcf0 net/core/rtnetlink.c:6647 netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2550(CVE-2024-57994)

In the Linux kernel, the following vulnerability has been resolved:

ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params

Each cpu DAI should associate with a widget. However, the topology might not create the right number of DAI widgets for aggregated amps. And it will cause NULL pointer deference. Check that the DAI widget associated with the CPU DAI is valid to prevent NULL pointer deference due to missing DAI widgets in topologies with aggregated amps.(CVE-2024-58012)

In the Linux kernel, the following vulnerability has been resolved:

driver core: fix potential NULL pointer dereference in dev_uevent()

If userspace reads "uevent" device attribute at the same time as another threads unbinds the device from its driver, change to dev->driver from a valid pointer to NULL may result in crash. Fix this by using READ_ONCE() when fetching the pointer, and take bus' drivers klist lock to make sure driver instance will not disappear while we access it.

Use WRITE_ONCE() when setting the…

Record
OESA-2026-1305
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:11245 7.1

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:11245
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:11855 7.1

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:11855
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:11861 7.1

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:11861
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRLSA-2025:11855 7.1

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: RDMA/mlx5: Fix page_size variable overflow (CVE-2025-22091)

  • kernel: ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (CVE-2025-22121)

  • kernel: net_sched: hfsc: Fix a UAF vulnerability in class handling (CVE-2025-37797)

  • kernel: powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap (CVE-2025-38088)

  • kernel: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (CVE-2025-38110)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:11855
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRLSA-2025:11861 7.1

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: media: uvcvideo: Fix double free in error path (CVE-2024-57980)

  • kernel: wifi: iwlwifi: limit printed string from FW file (CVE-2025-21905)

  • kernel: RDMA/mlx5: Fix page_size variable overflow (CVE-2025-22091)

  • kernel: ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (CVE-2025-22121)

  • kernel: ext4: avoid journaling sb update on error if journal is destroying (CVE-2025-22113)

  • kernel: RDMA/core: Fix use-after-free when rename device name (CVE-2025-22085)

  • kernel: net_sched: hfsc: Fix a UAF vulnerability in class handling (CVE-2025-37797)

  • kernel: mm/huge_memory: fix dereferencing invalid pmd migration entry (CVE-2025-37958)

  • kernel: net: ch9200: fix uninitialised access during mii_nway_restart (CVE-2025-38086)

  • kernel: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (CVE-2025-38110)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:11861
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2025-38110 7.1

In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access When using publicly available tools like 'mdio-tools' to read/write data from/to network interface and its PHY via C45 (clause 45) mdiobus, there is no verification of parameters passed to the ioctl and it accepts any mdio address. Currently there is support for 32 addresses in kernel via PHY_MAX_ADDR define, but it is possible to pass higher value than that via ioctl. While read/write operation should generally fail in this case, mdiobus provides stats array, where wrong address may allow out-of-bounds read/write. Fix that by adding address verification before C45 read/write operation. While this excludes this access from any statistics, it improves security of read/write operation.

Record
UBUNTU-CVE-2025-38110
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVALSA-2025:11855 No score

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: RDMA/mlx5: Fix page_size variable overflow (CVE-2025-22091)
  • kernel: ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (CVE-2025-22121)
  • kernel: net_sched: hfsc: Fix a UAF vulnerability in class handling (CVE-2025-37797)
  • kernel: powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap (CVE-2025-38088)
  • kernel: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (CVE-2025-38110)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:11855
Updated
2026-11-02
OSVALSA-2025:11861 No score

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: media: uvcvideo: Fix double free in error path (CVE-2024-57980)
  • kernel: wifi: iwlwifi: limit printed string from FW file (CVE-2025-21905)
  • kernel: RDMA/mlx5: Fix page_size variable overflow (CVE-2025-22091)
  • kernel: ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (CVE-2025-22121)
  • kernel: ext4: avoid journaling sb update on error if journal is destroying (CVE-2025-22113)
  • kernel: RDMA/core: Fix use-after-free when rename device name (CVE-2025-22085)
  • kernel: net_sched: hfsc: Fix a UAF vulnerability in class handling (CVE-2025-37797)
  • kernel: mm/huge_memory: fix dereferencing invalid pmd migration entry (CVE-2025-37958)
  • kernel: net: ch9200: fix uninitialised access during mii_nway_restart (CVE-2025-38086)
  • kernel: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (CVE-2025-38110)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:11861
Updated
2026-11-02
OSVAZL-64586 No score

CVE-2025-38110 affecting package kernel for versions less than 6.6.96.1-1

In the Linux kernel, the following vulnerability has been resolved:

net/mdiobus: Fix potential out-of-bounds clause 45 read/write access

When using publicly available tools like 'mdio-tools' to read/write data from/to network interface and its PHY via C45 (clause 45) mdiobus, there is no verification of parameters passed to the ioctl and it accepts any mdio address. Currently there is support for 32 addresses in kernel via PHY_MAX_ADDR define, but it is possible to pass higher value than that via ioctl. While read/write operation should generally fail in this case, mdiobus provides stats array, where wrong address may allow out-of-bounds read/write.

Fix that by adding address verification before C45 read/write operation. While this excludes this access from any statistics, it improves security of read/write operation.

Record
AZL-64586
Updated
2026-11-02
OSVMGASA-2025-0218 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.101 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links.

Record
MGASA-2025-0218
Updated
2026-11-02
OSVMGASA-2025-0219 No score

Updated kernel, kmod-virtualbox, kmod-xtables-addons & wireless-regdb packages fix security vulnerabilities

Upstream kernel version 6.6.101 fixes bugs and vulnerabilities. The kmod-virtualbox, kmod-xtables-addons & wireless-regdb packages have been updated to work with this new kernel. For information about the vulnerabilities see the links.

Record
MGASA-2025-0219
Updated
2026-11-02
OSVopenSUSE-SU-2025:20081-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
  • CVE-2024-57891: sched_ext: Fix invalid irq restore in scx_ops_bypass() (bsc#1235953).
  • CVE-2024-57951: hrtimers: Handle CPU state correctly on hotplug (bsc#1237108).
  • CVE-2024-57952: Revert "libfs: fix infinite directory reads for offset dir" (bsc#1237131).
  • CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
  • CVE-2025-22034: mm/rmap: avoid -EBUSY from make_device_exclusive() (bsc#1241435).
  • CVE-2025-22077: Revert "smb: client: fix TCP timers deadlock after rmmod" (bsc#1241403).
  • CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
  • CVE-2025-37821: sched/eevdf: Fix se->slice being set to U64_MAX and resulting (bsc#1242864).
  • CVE-2025-37849: KVM: arm64: Tear down vGIC on failed vCPU creation (bsc#1243000).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-38006: net: mctp: Do not access ifa_index when missing (bsc#1244930).
  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38019: mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (bsc#1245000).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38038: cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (bsc#1244812).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection (bsc#1244734).
  • CVE-2025-38101: ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (bsc#1245659).
  • CVE-2025-38103: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (bsc#1245663).
  • CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
  • CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST (bsc#1245710).
  • CVE-2025-38146: net: openvswitch: Fix the dead loop of MPLS parse (bsc#1245767).
  • CVE-2025-38160: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (bsc#1245780).
  • CVE-2025-38168: perf: arm-ni: Unregister PMUs on probe failure (bsc#1245763).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
  • CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
  • CVE-2025-38185: atm: atmtcp: Free invalid length skb in atmtcp_c_send() (bsc#1246012).
  • CVE-2025-38190: atm: Revert atm_account_tx() if copy_from_iter_full() fails (bsc#1245973).
  • CVE-2025-38201: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (bsc#1245977).
  • CVE-2025-38205: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (bsc#1246005).
  • CVE-2025-38208: smb: client: add NULL check in automount_fullpath (bsc#1245815).
  • CVE-2025-38216: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963).
  • CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
  • CVE-2025-38222: ext4: inline: fix len overflow in ext4_prepare_inline_data (bsc#1245976).
  • CVE-2025-38242: mm: userfaultfd: fix race of userfaultfd_move and swap…
Record
openSUSE-SU-2025:20081-1
Updated
2026-11-02
OSVROOT-OS-UBUNTU-2404-CVE-2025-38110 No score

CVE-2025-38110 in linux - Patched by Root

Root has patched CVE-2025-38110 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2404-CVE-2025-38110
Updated
2026-11-06
OSVSUSE-SU-2025:02853-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
  • CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
  • CVE-2024-42134: virtio-pci: Check if is_avq is NULL (bsc#1228664 bsc#1247831).
  • CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
  • CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
  • CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
  • CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
  • CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
  • CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
  • CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
  • CVE-2025-38047: x86/fred: Fix system hang during S4 resume with FRED enabled (bsc#1245084).
  • CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
  • CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
  • CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
  • CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
  • CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
  • CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
  • CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
  • CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
  • CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
  • CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
  • CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
  • CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
  • CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
  • CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
  • CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
  • CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
  • CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
  • CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in…
Record
SUSE-SU-2025:02853-1
Updated
2026-11-02
OSVSUSE-SU-2025:02923-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2019-11135: TSX Asynchronous Abort condition (bsc#1139073).
  • CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
  • CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
  • CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
  • CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
  • CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (bsc#1235728).
  • CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
  • CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
  • CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
  • CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
  • CVE-2025-38244: smb: client: fix potential deadlock when reconnecting channels (bsc#1246183).
  • CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1246911).
  • CVE-2025-38371: drm/v3d: Disable interrupts before resetting the GPU (bsc#1247178).
  • CVE-2025-38392: idpf: convert control queue mutex to a spinlock (bsc#1247169).
  • CVE-2025-38399: scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() (bsc#1247097).
  • CVE-2025-38426: drm/amdgpu: Add basic validation for RAS header (bsc#1247252).
  • CVE-2025-38457: net/sched: Abort __tc_modify_qdisc if parent class does not exist (bsc#1247098).
  • CVE-2025-38460: atm: clip: Fix potential null-ptr-deref in to_atmarpd() (bsc#1247143).
  • CVE-2025-38465: netlink: make sure we allow at least one dump skb (bsc#1247118).
  • CVE-2025-38470: kABI fix for net: vlan: fix VLAN 0 refcount imbalance of toggling (bsc#1247288).
  • CVE-2025-38471: tls: always refresh the queue when reading sock (bsc#1247450).
  • CVE-2025-38490: net: libwx: remove duplicate page_pool_put_full_page() (bsc#1247243).
  • CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (bsc#1247374).
  • CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
  • CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
  • CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
  • CVE-2025-21868: kABI workaround for adding an header (bsc#1240180).
  • CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
  • CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
  • CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
  • CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
  • CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723).
  • CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
  • CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).
  • CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
  • CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
  • CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
  • CVE-2025-22113: ext4: define ext4_journal_destroy wrapper (bsc#1241617).
  • CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
  • CVE-2025-23163: net:…
Record
SUSE-SU-2025:02923-1
Updated
2026-11-02
OSVSUSE-SU-2025:02969-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
  • CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
  • CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
  • CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
  • CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
  • CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
  • CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
  • CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
  • CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
  • CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
  • CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
  • CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
  • CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
  • CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
  • CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
  • CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
  • CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
  • CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
  • CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
  • CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
  • CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
  • CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
  • CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
  • CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
  • CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
  • CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
  • CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
  • CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
  • CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in…
Record
SUSE-SU-2025:02969-1
Updated
2026-11-02
OSVSUSE-SU-2025:02996-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
  • CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
  • CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (1230216).
  • CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
  • CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
  • CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
  • CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
  • CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
  • CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
  • CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
  • CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
  • CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
  • CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
  • CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
  • CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
  • CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
  • CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
  • CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
  • CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
  • CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
  • CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
  • CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
  • CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
  • CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
  • CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
  • CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
  • CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
  • CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
  • CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in…
Record
SUSE-SU-2025:02996-1
Updated
2026-11-02
OSVSUSE-SU-2025:02997-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2019-11135: enabled CONFIG_X86_INTEL_TSX_MODE_AUTO (bsc#1139073, bsc#1246695)
  • CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
  • CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
  • CVE-2024-39298:mm/memory-failure: fix handling of dissolved but not taken off from buddy pages (bsc#1227082).
  • CVE-2024-42134: virtio-pci: Check if is_avq is NULL (bsc#1228664).
  • CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
  • CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
  • CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
  • CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
  • CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
  • CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
  • CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
  • CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
  • CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
  • CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
  • CVE-2025-38047: x86/fred: Fix system hang during S4 resume with FRED enabled (bsc#1245084).
  • CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
  • CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
  • CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
  • CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
  • CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
  • CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
  • CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
  • CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
  • CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
  • CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
  • CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
  • CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
  • CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
  • CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
  • CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma…
Record
SUSE-SU-2025:02997-1
Updated
2026-11-02
OSVSUSE-SU-2025:03011-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2019-11135: enabled CONFIG_X86_INTEL_TSX_MODE_AUTO (bsc#1139073, bsc#1246695).
  • CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
  • CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
  • CVE-2024-39298:mm/memory-failure: fix handling of dissolved but not taken off from buddy pages (bsc#1227082).
  • CVE-2024-42134: virtio-pci: Check if is_avq is NULL (bsc#1228664 bsc#1247831).
  • CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
  • CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
  • CVE-2024-49996: cifs: Fix buffer overflow when parsing NFS reparse points (bsc#1232089).
  • CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
  • CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
  • CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
  • CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
  • CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
  • CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
  • CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
  • CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
  • CVE-2025-38047: x86/fred: Fix system hang during S4 resume with FRED enabled (bsc#1245084).
  • CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
  • CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
  • CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
  • CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
  • CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
  • CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
  • CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
  • CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
  • CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
  • CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
  • CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
  • CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
  • CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
  • CVE-2025-38147:…
Record
SUSE-SU-2025:03011-1
Updated
2026-11-02
OSVSUSE-SU-2025:03023-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may (bsc#1139073)
  • CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
  • CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
  • CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
  • CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
  • CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
  • CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
  • CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
  • CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
  • CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
  • CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
  • CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
  • CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
  • CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
  • CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
  • CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
  • CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
  • CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
  • CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
  • CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
  • CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
  • CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
  • CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
  • CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
  • CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
  • CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
  • CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() (bsc#1246006).
  • CVE-2025-38187: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() (bsc#1245951).
  • CVE-2025-38188:…
Record
SUSE-SU-2025:03023-1
Updated
2026-11-02
OSVSUSE-SU-2025:03636-1 No score

Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-150600_10_11 fixes several issues.

The following security issues were fixed:

  • CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534).
  • CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (bsc#1248673).
  • CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158).
  • CVE-2025-38566: sunrpc: fix handling of server side tls alerts (bsc#1248376).
  • CVE-2024-49974: NFSD: Force all NFSv4.2 COPY requests to be synchronous (bsc#1232384).
  • CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1245794).
  • CVE-2025-38110: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (bsc#1249458).
  • CVE-2025-38644: wifi: mac80211: reject TDLS operations when station is not associated (bsc#1248749).
  • CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075).
  • CVE-2025-38471: tls: always refresh the queue when reading sock (bsc#1247452).
Record
SUSE-SU-2025:03636-1
Updated
2026-11-02
OSVSUSE-SU-2025:03638-1 No score

Security update for the Linux Kernel RT (Live Patch 5 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-150600_10_17 fixes several issues.

The following security issues were fixed:

  • CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534).
  • CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (bsc#1248673).
  • CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158).
  • CVE-2025-38566: sunrpc: fix handling of server side tls alerts (bsc#1248376).
  • CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1245794).
  • CVE-2025-38110: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (bsc#1249458).
  • CVE-2025-38644: wifi: mac80211: reject TDLS operations when station is not associated (bsc#1248749).
  • CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075).
  • CVE-2025-38471: tls: always refresh the queue when reading sock (bsc#1247452).
Record
SUSE-SU-2025:03638-1
Updated
2026-11-02
OSVSUSE-SU-2025:03650-1 No score

Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP7)

This update for the Linux Kernel 6.4.0-150700_5 fixes several issues.

The following security issues were fixed:

  • CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534).
  • CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (bsc#1248673).
  • CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158).
  • CVE-2025-38566: sunrpc: fix handling of server side tls alerts (bsc#1248376).
  • CVE-2025-38110: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (bsc#1249458).
  • CVE-2025-38644: wifi: mac80211: reject TDLS operations when station is not associated (bsc#1248749).
  • CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075).
  • CVE-2025-38471: tls: always refresh the queue when reading sock (bsc#1247452).
Record
SUSE-SU-2025:03650-1
Updated
2026-11-02
OSVSUSE-SU-2025:20577-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may
  • CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
  • CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
  • CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
  • CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
  • CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
  • CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
  • CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
  • CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
  • CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
  • CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
  • CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
  • CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
  • CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
  • CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
  • CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
  • CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
  • CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
  • CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
  • CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
  • CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
  • CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
  • CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
  • CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
  • CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
  • CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
  • CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() (bsc#1246006).
  • CVE-2025-38187: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() (bsc#1245951).
  • CVE-2025-38188:…
Record
SUSE-SU-2025:20577-1
Updated
2026-11-02
OSVSUSE-SU-2025:20586-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may
  • CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
  • CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
  • CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
  • CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
  • CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
  • CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
  • CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
  • CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
  • CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
  • CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
  • CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
  • CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
  • CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
  • CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
  • CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
  • CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
  • CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
  • CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
  • CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
  • CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
  • CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
  • CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
  • CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
  • CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
  • CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
  • CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() (bsc#1246006).
  • CVE-2025-38187: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() (bsc#1245951).
  • CVE-2025-38188:…
Record
SUSE-SU-2025:20586-1
Updated
2026-11-02
OSVSUSE-SU-2025:20601-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may
  • CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
  • CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
  • CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
  • CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
  • CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
  • CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
  • CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
  • CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
  • CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
  • CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
  • CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
  • CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
  • CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
  • CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
  • CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
  • CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
  • CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
  • CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
  • CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
  • CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
  • CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
  • CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
  • CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
  • CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
  • CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
  • CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() (bsc#1246006).
  • CVE-2025-38187: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() (bsc#1245951).
  • CVE-2025-38188:…
Record
SUSE-SU-2025:20601-1
Updated
2026-11-02
OSVSUSE-SU-2025:20602-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may
  • CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
  • CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
  • CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
  • CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
  • CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
  • CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
  • CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
  • CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
  • CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
  • CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
  • CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
  • CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
  • CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
  • CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
  • CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
  • CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
  • CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
  • CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
  • CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
  • CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
  • CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
  • CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
  • CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
  • CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
  • CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
  • CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() (bsc#1246006).
  • CVE-2025-38187: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() (bsc#1245951).
  • CVE-2025-38188:…
Record
SUSE-SU-2025:20602-1
Updated
2026-11-02
OSVSUSE-SU-2025:20873-1 No score

Security update for kernel-livepatch-MICRO-6-0-RT_Update_4

This update for kernel-livepatch-MICRO-6-0-RT_Update_4 fixes the following issues:

  • CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1245794)
  • CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075)
  • CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158)
  • CVE-2025-38471: kernel: tls: always refresh the queue when reading sock (bsc#1247452)
  • CVE-2025-38566: sunrpc: fix handling of server side tls alerts (bsc#1248376)
  • CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (bsc#1248673)
  • CVE-2025-38644: wifi: mac80211: reject TDLS operations when station is not associated (bsc#1248749)
  • CVE-2025-38110: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (bsc#1249458)
  • CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534)
Record
SUSE-SU-2025:20873-1
Updated
2026-11-02
OSVSUSE-SU-2025:20874-1 No score

Security update for kernel-livepatch-MICRO-6-0-RT_Update_5

This update for kernel-livepatch-MICRO-6-0-RT_Update_5 fixes the following issues:

  • CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1245794)
  • CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075)
  • CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158)
  • CVE-2025-38471: kernel: tls: always refresh the queue when reading sock (bsc#1247452)
  • CVE-2025-38566: sunrpc: fix handling of server side tls alerts (bsc#1248376)
  • CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (bsc#1248673)
  • CVE-2025-38644: wifi: mac80211: reject TDLS operations when station is not associated (bsc#1248749)
  • CVE-2025-38110: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (bsc#1249458)
  • CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534)
Record
SUSE-SU-2025:20874-1
Updated
2026-11-02
OSVSUSE-SU-2025:20875-1 No score

Security update for kernel-livepatch-MICRO-6-0-RT_Update_6

This update for kernel-livepatch-MICRO-6-0-RT_Update_6 fixes the following issues:

  • CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075)
  • CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158)
  • CVE-2025-38471: kernel: tls: always refresh the queue when reading sock (bsc#1247452)
  • CVE-2025-38566: sunrpc: fix handling of server side tls alerts (bsc#1248376)
  • CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (bsc#1248673)
  • CVE-2025-38644: wifi: mac80211: reject TDLS operations when station is not associated (bsc#1248749)
  • CVE-2025-38110: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (bsc#1249458)
  • CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534)
Record
SUSE-SU-2025:20875-1
Updated
2026-11-02
OSVSUSE-SU-2025:20876-1 No score

Security update for kernel-livepatch-MICRO-6-0-RT_Update_7

This update for kernel-livepatch-MICRO-6-0-RT_Update_7 fixes the following issues:

  • CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075)
  • CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158)
  • CVE-2025-38471: kernel: tls: always refresh the queue when reading sock (bsc#1247452)
  • CVE-2025-38566: sunrpc: fix handling of server side tls alerts (bsc#1248376)
  • CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (bsc#1248673)
  • CVE-2025-38644: wifi: mac80211: reject TDLS operations when station is not associated (bsc#1248749)
  • CVE-2025-38110: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (bsc#1249458)
  • CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534)
Record
SUSE-SU-2025:20876-1
Updated
2026-11-02
OSVSUSE-SU-2025:20877-1 No score

Security update for kernel-livepatch-MICRO-6-0-RT_Update_8

This update for kernel-livepatch-MICRO-6-0-RT_Update_8 fixes the following issues:

  • CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075)
  • CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158)
  • CVE-2025-38471: kernel: tls: always refresh the queue when reading sock (bsc#1247452)
  • CVE-2025-38566: sunrpc: fix handling of server side tls alerts (bsc#1248376)
  • CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (bsc#1248673)
  • CVE-2025-38644: wifi: mac80211: reject TDLS operations when station is not associated (bsc#1248749)
  • CVE-2025-38110: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (bsc#1249458)
  • CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534)
Record
SUSE-SU-2025:20877-1
Updated
2026-11-02
OSVSUSE-SU-2025:20878-1 No score

Security update for kernel-livepatch-MICRO-6-0-RT_Update_9

This update for kernel-livepatch-MICRO-6-0-RT_Update_9 fixes the following issues:

  • CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075)
  • CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158)
  • CVE-2025-38471: kernel: tls: always refresh the queue when reading sock (bsc#1247452)
  • CVE-2025-38566: sunrpc: fix handling of server side tls alerts (bsc#1248376)
  • CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (bsc#1248673)
  • CVE-2025-38644: wifi: mac80211: reject TDLS operations when station is not associated (bsc#1248749)
  • CVE-2025-38110: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (bsc#1249458)
  • CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534)
Record
SUSE-SU-2025:20878-1
Updated
2026-11-02
OSVSUSE-SU-2025:20881-1 No score

Security update for kernel-livepatch-MICRO-6-0_Update_5

This update for kernel-livepatch-MICRO-6-0_Update_5 fixes the following issues:

  • CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1245794)
  • CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075)
  • CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158)
  • CVE-2025-38471: kernel: tls: always refresh the queue when reading sock (bsc#1247452)
  • CVE-2025-38566: sunrpc: fix handling of server side tls alerts (bsc#1248376)
  • CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (bsc#1248673)
  • CVE-2025-38644: wifi: mac80211: reject TDLS operations when station is not associated (bsc#1248749)
  • CVE-2025-38110: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (bsc#1249458)
  • CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534)
Record
SUSE-SU-2025:20881-1
Updated
2026-11-02
OSVSUSE-SU-2025:20882-1 No score

Security update for kernel-livepatch-MICRO-6-0_Update_7

This update for kernel-livepatch-MICRO-6-0_Update_7 fixes the following issues:

  • CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075)
  • CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158)
  • CVE-2025-38471: kernel: tls: always refresh the queue when reading sock (bsc#1247452)
  • CVE-2025-38566: sunrpc: fix handling of server side tls alerts (bsc#1248376)
  • CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (bsc#1248673)
  • CVE-2025-38644: wifi: mac80211: reject TDLS operations when station is not associated (bsc#1248749)
  • CVE-2025-38110: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (bsc#1249458)
  • CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534)
Record
SUSE-SU-2025:20882-1
Updated
2026-11-02
OSVSUSE-SU-2025:20883-1 No score

Security update for kernel-livepatch-MICRO-6-0_Update_8

This update for kernel-livepatch-MICRO-6-0_Update_8 fixes the following issues:

  • CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075)
  • CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158)
  • CVE-2025-38471: kernel: tls: always refresh the queue when reading sock (bsc#1247452)
  • CVE-2025-38566: sunrpc: fix handling of server side tls alerts (bsc#1248376)
  • CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (bsc#1248673)
  • CVE-2025-38644: wifi: mac80211: reject TDLS operations when station is not associated (bsc#1248749)
  • CVE-2025-38110: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (bsc#1249458)
  • CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534)
Record
SUSE-SU-2025:20883-1
Updated
2026-11-02
OSVSUSE-SU-2025:20884-1 No score

Security update for kernel-livepatch-MICRO-6-0_Update_3

This update for kernel-livepatch-MICRO-6-0_Update_3 fixes the following issues:

  • CVE-2024-49974: NFSD: limit the number of concurrent async COPY operations (bsc#1232384)
  • CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1245794)
  • CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075)
  • CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158)
  • CVE-2025-38471: kernel: tls: always refresh the queue when reading sock (bsc#1247452)
  • CVE-2025-38566: sunrpc: fix handling of server side tls alerts (bsc#1248376)
  • CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (bsc#1248673)
  • CVE-2025-38644: wifi: mac80211: reject TDLS operations when station is not associated (bsc#1248749)
  • CVE-2025-38110: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (bsc#1249458)
  • CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534)
Record
SUSE-SU-2025:20884-1
Updated
2026-11-02
OSVSUSE-SU-2025:20885-1 No score

Security update for kernel-livepatch-MICRO-6-0_Update_4

This update for kernel-livepatch-MICRO-6-0_Update_4 fixes the following issues:

  • CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1245794)
  • CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075)
  • CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158)
  • CVE-2025-38471: kernel: tls: always refresh the queue when reading sock (bsc#1247452)
  • CVE-2025-38566: sunrpc: fix handling of server side tls alerts (bsc#1248376)
  • CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (bsc#1248673)
  • CVE-2025-38644: wifi: mac80211: reject TDLS operations when station is not associated (bsc#1248749)
  • CVE-2025-38110: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (bsc#1249458)
  • CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534)
Record
SUSE-SU-2025:20885-1
Updated
2026-11-02
OSVSUSE-SU-2025:20886-1 No score

Security update for kernel-livepatch-MICRO-6-0_Update_2

This update for kernel-livepatch-MICRO-6-0_Update_2 fixes the following issues:

  • CVE-2024-49974: NFSD: limit the number of concurrent async COPY operations (bsc#1232384)
  • CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1245794)
  • CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075)
  • CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158)
  • CVE-2025-38471: kernel: tls: always refresh the queue when reading sock (bsc#1247452)
  • CVE-2025-38566: sunrpc: fix handling of server side tls alerts (bsc#1248376)
  • CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (bsc#1248673)
  • CVE-2025-38644: wifi: mac80211: reject TDLS operations when station is not associated (bsc#1248749)
  • CVE-2025-38110: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (bsc#1249458)
  • CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534)
Record
SUSE-SU-2025:20886-1
Updated
2026-11-02
OSVSUSE-SU-2025:20887-1 No score

Security update for kernel-livepatch-MICRO-6-0_Update_6

This update for kernel-livepatch-MICRO-6-0_Update_6 fixes the following issues:

  • CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075)
  • CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158)
  • CVE-2025-38471: kernel: tls: always refresh the queue when reading sock (bsc#1247452)
  • CVE-2025-38566: sunrpc: fix handling of server side tls alerts (bsc#1248376)
  • CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (bsc#1248673)
  • CVE-2025-38644: wifi: mac80211: reject TDLS operations when station is not associated (bsc#1248749)
  • CVE-2025-38110: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (bsc#1249458)
  • CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534)
Record
SUSE-SU-2025:20887-1
Updated
2026-11-02
OSVSUSE-SU-2025:20890-1 No score

Security update for kernel-livepatch-MICRO-6-0-RT_Update_2

This update for kernel-livepatch-MICRO-6-0-RT_Update_2 fixes the following issues:

  • CVE-2024-49974: NFSD: limit the number of concurrent async COPY operations (bsc#1232384)
  • CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1245794)
  • CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075)
  • CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158)
  • CVE-2025-38471: kernel: tls: always refresh the queue when reading sock (bsc#1247452)
  • CVE-2025-38566: sunrpc: fix handling of server side tls alerts (bsc#1248376)
  • CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (bsc#1248673)
  • CVE-2025-38644: wifi: mac80211: reject TDLS operations when station is not associated (bsc#1248749)
  • CVE-2025-38110: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (bsc#1249458)
  • CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534)
Record
SUSE-SU-2025:20890-1
Updated
2026-11-02
OSVSUSE-SU-2025:20891-1 No score

Security update for kernel-livepatch-MICRO-6-0-RT_Update_3

This update for kernel-livepatch-MICRO-6-0-RT_Update_3 fixes the following issues:

  • CVE-2024-49974: NFSD: limit the number of concurrent async COPY operations (bsc#1232384)
  • CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1245794)
  • CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075)
  • CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158)
  • CVE-2025-38471: kernel: tls: always refresh the queue when reading sock (bsc#1247452)
  • CVE-2025-38566: sunrpc: fix handling of server side tls alerts (bsc#1248376)
  • CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (bsc#1248673)
  • CVE-2025-38644: wifi: mac80211: reject TDLS operations when station is not associated (bsc#1248749)
  • CVE-2025-38110: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (bsc#1249458)
  • CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534)
Record
SUSE-SU-2025:20891-1
Updated
2026-11-02
OSVSUSE-SU-2025:20902-1 No score

Security update for kernel-livepatch-MICRO-6-0_Update_7

This update for kernel-livepatch-MICRO-6-0_Update_7 fixes the following issues:

  • CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075)
  • CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158)
  • CVE-2025-38471: kernel: tls: always refresh the queue when reading sock (bsc#1247452)
  • CVE-2025-38566: sunrpc: fix handling of server side tls alerts (bsc#1248376)
  • CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (bsc#1248673)
  • CVE-2025-38644: wifi: mac80211: reject TDLS operations when station is not associated (bsc#1248749)
  • CVE-2025-38110: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (bsc#1249458)
  • CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534)
Record
SUSE-SU-2025:20902-1
Updated
2026-11-02
OSVSUSE-SU-2025:20903-1 No score

Security update for kernel-livepatch-MICRO-6-0_Update_5

This update for kernel-livepatch-MICRO-6-0_Update_5 fixes the following issues:

  • CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1245794)
  • CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075)
  • CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158)
  • CVE-2025-38471: kernel: tls: always refresh the queue when reading sock (bsc#1247452)
  • CVE-2025-38566: sunrpc: fix handling of server side tls alerts (bsc#1248376)
  • CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (bsc#1248673)
  • CVE-2025-38644: wifi: mac80211: reject TDLS operations when station is not associated (bsc#1248749)
  • CVE-2025-38110: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (bsc#1249458)
  • CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534)
Record
SUSE-SU-2025:20903-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel-abi-stablelists
AlmaLinux:10
From an advisory covering 5 CVEs
 before 6.12.0-55.24.1.el10_0
6.12.0-55.24.1.el10_0
kernel-doc
AlmaLinux:10
From an advisory covering 5 CVEs
 before 6.12.0-55.24.1.el10_0
6.12.0-55.24.1.el10_0
kernel
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-64k
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-64k-core
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-64k-debug
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-64k-debug-core
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-64k-debug-devel
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-64k-debug-devel-matched
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-64k-debug-modules
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-64k-debug-modules-core
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-64k-debug-modules-extra
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-64k-devel
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-64k-devel-matched
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-64k-modules
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-64k-modules-core
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-64k-modules-extra
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-abi-stablelists
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-core
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-cross-headers
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-debug
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-debug-core
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-debug-devel
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-debug-devel-matched
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-debug-modules
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-debug-modules-core
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-debug-modules-extra
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-debug-uki-virt
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-devel
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-devel-matched
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-doc
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-headers
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-modules
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-modules-core
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-modules-extra
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-rt
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-rt-64k
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-rt-64k-core
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-rt-64k-debug
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-rt-64k-debug-core
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-rt-64k-debug-devel
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-rt-64k-debug-modules
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-rt-64k-debug-modules-core
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-rt-64k-debug-modules-extra
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-rt-64k-devel
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-rt-64k-modules
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-rt-64k-modules-core
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-rt-64k-modules-extra
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-rt-core
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-rt-debug
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-rt-debug-core
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-rt-debug-devel
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-rt-debug-kvm
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-rt-debug-modules
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-rt-debug-modules-core
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-rt-debug-modules-extra
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-rt-devel
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-rt-kvm
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-rt-modules
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-rt-modules-core
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-rt-modules-extra
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-tools
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-tools-libs
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel
Azure Linux:3
 before 6.6.96.1-1
6.6.96.1-1
linux-lts
Alpaquita:25
 6.6.89-r0 up to 6.12.41-r0
6.12.41-r0
linux-lts
Alpaquita:stream
 6.12.92-r1 up to 6.18.35-r1
6.18.35-r1
Kernel
Linux
 6.3.0 up to 6.6.94, 6.7.0 up to 6.12.34, 6.13.0 up to 6.15.3
6.6.946.12.346.15.3
linux
Debian:13
 before 6.12.35-1
6.12.35-1
linux
Debian:14
 before 6.12.35-1
6.12.35-1
kernel-linus
Mageia:9
From an advisory covering 237 CVEs
 before 6.6.101-1.mga9
6.6.101-1.mga9
kernel
Mageia:9
From an advisory covering 237 CVEs
 before 6.6.101-1.mga9
6.6.101-1.mga9
kmod-virtualbox
Mageia:9
From an advisory covering 237 CVEs
 before 7.1.10-7.mga9
7.1.10-7.mga9
kmod-xtables-addons
Mageia:9
From an advisory covering 237 CVEs
 before 3.24-83.mga9
3.24-83.mga9
wireless-regdb
Mageia:9
From an advisory covering 237 CVEs
 before 20250710-1.mga9
20250710-1.mga9
kernel
openEuler:24.03-LTS
From an advisory covering 99 CVEs
 before 6.6.0-138.0.0.119.oe2403
6.6.0-138.0.0.119.oe2403
kernel
openEuler:24.03-LTS-SP1
From an advisory covering 99 CVEs
 before 6.6.0-138.0.0.132.oe2403sp1
6.6.0-138.0.0.132.oe2403sp1
kernel
openEuler:24.03-LTS-SP2
From an advisory covering 94 CVEs
 before 6.6.0-138.0.0.132.oe2403sp2
6.6.0-138.0.0.132.oe2403sp2
bpftool-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 7 CVEs
 before 0:7.3.0-427.77.1.el9_4
0:7.3.0-427.77.1.el9_4
kernel-64k-debug-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-64k-debug-devel
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-64k-debug-devel-matched
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-64k-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-64k-devel
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-64k-devel-matched
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-debug-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-debug-devel
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-debug-devel-matched
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-debuginfo-common-aarch64
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-debuginfo-common-ppc64le
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-debuginfo-common-s390x
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-debuginfo-common-x86_64
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-devel
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-devel-matched
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-doc
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-rt-debug-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-rt-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-tools-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-zfcpdump-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-zfcpdump-devel
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-zfcpdump-devel-matched
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
libperf-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
perf
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
perf-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
python3-perf-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
rtla
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
rv
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
bpftool
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 7 CVEs
 before 0:7.3.0-427.77.1.el9_4
0:7.3.0-427.77.1.el9_4
bpftool-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 7 CVEs
 before 0:7.3.0-427.77.1.el9_4
0:7.3.0-427.77.1.el9_4
kernel
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-64k
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-64k-core
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-64k-debug
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-64k-debug-core
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-64k-debug-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-64k-debug-modules
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-64k-debug-modules-core
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-64k-debug-modules-extra
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-64k-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-64k-modules
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-64k-modules-core
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-64k-modules-extra
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-abi-stablelists
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-core
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-debug
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-debug-core
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-debug-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-debug-modules
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-debug-modules-core
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-debug-modules-extra
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-debug-uki-virt
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-debuginfo-common-aarch64
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-debuginfo-common-ppc64le
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-debuginfo-common-s390x
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-debuginfo-common-x86_64
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-modules
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-modules-core
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-modules-extra
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel-rt-debug-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 7 CVEs
 before 0:5.14.0-427.77.1.el9_4
0:5.14.0-427.77.1.el9_4
kernel
Rocky Linux:10
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel
Rocky Linux:9
From an advisory covering 10 CVEs
 before 0:5.14.0-570.30.1.el9_6
0:5.14.0-570.30.1.el9_6
linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
rootio-linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
kernel-livepatch-SLE15-SP7-RT_Update_3
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 260 CVEs
 before 1-150700.1.5.1
1-150700.1.5.1
kernel-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 260 CVEs
 before 6.4.0-150700.7.13.1
6.4.0-150700.7.13.1
kernel-source-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 260 CVEs
 before 6.4.0-150700.7.13.1
6.4.0-150700.7.13.1
kernel-syms-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 260 CVEs
 before 6.4.0-150700.7.13.1
6.4.0-150700.7.13.1
kernel-coco
SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6
From an advisory covering 447 CVEs
 before 6.4.0-15061.28.coco15sp6.1
6.4.0-15061.28.coco15sp6.1
kernel-coco_debug
SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6
From an advisory covering 447 CVEs
 before 6.4.0-15061.28.coco15sp6.1
6.4.0-15061.28.coco15sp6.1
kernel-source-coco
SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6
From an advisory covering 447 CVEs
 before 6.4.0-15061.28.coco15sp6.1
6.4.0-15061.28.coco15sp6.1
kernel-syms-coco
SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6
From an advisory covering 447 CVEs
 before 6.4.0-15061.28.coco15sp6.1
6.4.0-15061.28.coco15sp6.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 238 CVEs
 before 6.4.0-150600.8.48.1
6.4.0-150600.8.48.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 238 CVEs
 before 6.4.0-150600.8.48.1
6.4.0-150600.8.48.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 238 CVEs
 before 6.4.0-150600.8.48.1
6.4.0-150600.8.48.1
kernel-azure
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.8.48.1
6.4.0-150600.8.48.1
kernel-source-azure
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.8.48.1
6.4.0-150600.8.48.1
kernel-syms-azure
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.8.48.1
6.4.0-150600.8.48.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1.150600.12.28.4
6.4.0-150600.23.65.1.150600.12.28.4
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-livepatch-SLE15-SP6_Update_14
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 238 CVEs
 before 1-150600.13.3.4
1-150600.13.3.4
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
dtb-aarch64
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-64kb
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-debug
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-default
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-default-base
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1.150600.12.28.4
6.4.0-150600.23.65.1.150600.12.28.4
kernel-docs
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-kvmsmall
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-obs-build
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-obs-qa
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-source
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-syms
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-zfcpdump
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 264 CVEs
 before 6.4.0-150700.53.11.1
6.4.0-150700.53.11.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 264 CVEs
 before 6.4.0-150700.53.11.1
6.4.0-150700.53.11.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 264 CVEs
 before 6.4.0-150700.53.11.1.150700.17.9.4
6.4.0-150700.53.11.1.150700.17.9.4
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 264 CVEs
 before 6.4.0-150700.53.11.1
6.4.0-150700.53.11.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 264 CVEs
 before 6.4.0-150700.53.11.1
6.4.0-150700.53.11.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 264 CVEs
 before 6.4.0-150700.53.11.3
6.4.0-150700.53.11.3
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 264 CVEs
 before 6.4.0-150700.53.11.1
6.4.0-150700.53.11.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 264 CVEs
 before 6.4.0-150700.53.11.1
6.4.0-150700.53.11.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 264 CVEs
 before 6.4.0-150700.53.11.1
6.4.0-150700.53.11.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP7
From an advisory covering 264 CVEs
 before 6.4.0-150700.53.11.1
6.4.0-150700.53.11.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 264 CVEs
 before 6.4.0-150700.53.11.1
6.4.0-150700.53.11.1
kernel-livepatch-SLE15-SP7_Update_3
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 264 CVEs
 before 1-150700.15.3.4
1-150700.15.3.4
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP7
From an advisory covering 264 CVEs
 before 6.4.0-150700.53.11.1
6.4.0-150700.53.11.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP7
From an advisory covering 264 CVEs
 before 6.4.0-150700.53.11.1
6.4.0-150700.53.11.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 265 CVEs
 before 6.4.0-150700.20.11.1
6.4.0-150700.20.11.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 265 CVEs
 before 6.4.0-150700.20.11.1
6.4.0-150700.20.11.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 265 CVEs
 before 6.4.0-150700.20.11.1
6.4.0-150700.20.11.1
kernel-livepatch-SLE15-SP6-RT_Update_14
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 235 CVEs
 before 1-150600.1.5.1
1-150600.1.5.1
kernel-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 235 CVEs
 before 6.4.0-150600.10.49.1
6.4.0-150600.10.49.1
kernel-rt_debug
SUSE:Real Time Module 15 SP6
From an advisory covering 235 CVEs
 before 6.4.0-150600.10.49.1
6.4.0-150600.10.49.1
kernel-source-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 235 CVEs
 before 6.4.0-150600.10.49.1
6.4.0-150600.10.49.1
kernel-syms-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 235 CVEs
 before 6.4.0-150600.10.49.1
6.4.0-150600.10.49.1
kernel-rt
openSUSE:Leap 15.6
From an advisory covering 235 CVEs
 before 6.4.0-150600.10.49.1
6.4.0-150600.10.49.1
kernel-rt_debug
openSUSE:Leap 15.6
From an advisory covering 235 CVEs
 before 6.4.0-150600.10.49.1
6.4.0-150600.10.49.1
kernel-source-rt
openSUSE:Leap 15.6
From an advisory covering 235 CVEs
 before 6.4.0-150600.10.49.1
6.4.0-150600.10.49.1
kernel-syms-rt
openSUSE:Leap 15.6
From an advisory covering 235 CVEs
 before 6.4.0-150600.10.49.1
6.4.0-150600.10.49.1
kernel-livepatch-SLE15-SP6-RT_Update_3
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 10 CVEs
 before 19-150600.2.1
19-150600.2.1
kernel-livepatch-SLE15-SP6-RT_Update_5
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 9 CVEs
 before 17-150600.2.1
17-150600.2.1
kernel-livepatch-SLE15-SP6-RT_Update_10
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 8 CVEs
 before 8-150600.2.1
8-150600.2.1
kernel-livepatch-SLE15-SP7-RT_Update_0
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 8 CVEs
 before 6-150700.3.1
6-150700.3.1
kernel-rt
SUSE:Linux Micro 6.0
From an advisory covering 235 CVEs
 before 6.4.0-35.1
6.4.0-35.1
kernel-source-rt
SUSE:Linux Micro 6.0
From an advisory covering 235 CVEs
 before 6.4.0-35.1
6.4.0-35.1
kernel-default
SUSE:Linux Micro 6.0
From an advisory covering 235 CVEs
 before 6.4.0-32.1
6.4.0-32.1
kernel-default-base
SUSE:Linux Micro 6.0
From an advisory covering 235 CVEs
 before 6.4.0-32.1.21.10
6.4.0-32.1.21.10
kernel-kvmsmall
SUSE:Linux Micro 6.0
From an advisory covering 235 CVEs
 before 6.4.0-32.1
6.4.0-32.1
kernel-source
SUSE:Linux Micro 6.0
From an advisory covering 235 CVEs
 before 6.4.0-32.1
6.4.0-32.1
kernel-rt
SUSE:Linux Micro 6.1
From an advisory covering 235 CVEs
 before 6.4.0-35.1
6.4.0-35.1
kernel-source-rt
SUSE:Linux Micro 6.1
From an advisory covering 235 CVEs
 before 6.4.0-35.1
6.4.0-35.1
kernel-default
SUSE:Linux Micro 6.1
From an advisory covering 235 CVEs
 before 6.4.0-32.1
6.4.0-32.1
kernel-default-base
SUSE:Linux Micro 6.1
From an advisory covering 235 CVEs
 before 6.4.0-32.1.21.10
6.4.0-32.1.21.10
kernel-kvmsmall
SUSE:Linux Micro 6.1
From an advisory covering 235 CVEs
 before 6.4.0-32.1
6.4.0-32.1
kernel-source
SUSE:Linux Micro 6.1
From an advisory covering 235 CVEs
 before 6.4.0-32.1
6.4.0-32.1
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
linux-azure-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
 None known
linux-azure-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
 None known
linux-azure-fde
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
 None known
linux-gcp-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1
Show 7 moreShow less
5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3
 None known
linux-gcp-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1
Show 8 moreShow less
5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1
 None known
linux-gcp-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41
 None known
linux-gke
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
 None known
linux-gke-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1
Show 13 moreShow less
5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1
 None known
linux-gkeop
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13
Show 45 moreShow less
5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77
 None known
linux-gkeop-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2
Show 40 moreShow less
5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1
 None known
linux-hwe-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1
Show 7 moreShow less
5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1
 None known
linux-hwe-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1
Show 11 moreShow less
5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1
 None known
linux-hwe-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1
Show 16 moreShow less
5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1
 None known
linux-intel-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19
 None known
linux-oem-5.10
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17
Show 21 moreShow less
5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61
 None known
linux-oem-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21
Show 7 moreShow less
5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36
 None known
linux-oem-5.14
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10
Show 30 moreShow less
5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67
 None known
linux-oem-5.6
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13
Show 24 moreShow less
5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60
 None known
linux-oracle-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-oracle-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1
Show 7 moreShow less
5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1
 None known
linux-oracle-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1
 None known
linux-raspi2
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
 None known
linux-riscv
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34
Show 7 moreShow less
5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45
 None known
linux-riscv-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1
Show 8 moreShow less
5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35
 None known
linux-riscv-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1
Show 5 moreShow less
5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1
 None known
linux-allwinner-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1
 None known
linux-aws-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1
Show 5 moreShow less
5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1
 None known
linux-aws-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 9 moreShow less
6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1
 None known
linux-aws-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1
Show 9 moreShow less
6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1
 None known
linux-aws-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1046.49~22.04.1, plus listed versions
6.8.0-1009.9~22.04.26.8.0-1010.10~22.04.26.8.0-1011.12~22.04.16.8.0-1013.14~22.04.16.8.0-1014.15~22.04.1
Show 25 moreShow less
6.8.0-1015.16~22.04.16.8.0-1016.17~22.04.26.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1023.25~22.04.16.8.0-1024.26~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1035.37~22.04.16.8.0-1036.38~22.04.16.8.0-1039.41~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.44~22.04.16.8.0-1043.45~22.04.16.8.0-1044.46~22.04.16.8.0-1045.47~22.04.1
6.8.0-1046.49~22.04.1
linux-azure-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2
 None known
linux-azure-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 8 moreShow less
6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1
 None known
linux-azure-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1
Show 9 moreShow less
6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1
 None known
linux-azure-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1051.57~22.04.1, plus listed versions
6.8.0-1008.8~22.04.16.8.0-1009.9~22.04.16.8.0-1010.10~22.04.16.8.0-1012.14~22.04.16.8.0-1013.15~22.04.1
Show 18 moreShow less
6.8.0-1014.16~22.04.16.8.0-1015.17~22.04.26.8.0-1017.20~22.04.16.8.0-1018.21~22.04.16.8.0-1020.23~22.04.16.8.0-1021.25~22.04.16.8.0-1025.30~22.04.16.8.0-1026.31~22.04.16.8.0-1027.32~22.04.16.8.0-1028.33~22.04.16.8.0-1029.34~22.04.16.8.0-1030.35~22.04.16.8.0-1031.36~22.04.16.8.0-1034.39~22.04.16.8.0-1036.42~22.04.16.8.0-1040.46~22.04.16.8.0-1041.47~22.04.16.8.0-1044.50~22.04.1
6.8.0-1051.57~22.04.1
linux-azure-fde-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1
 None known
linux-azure-fde-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1
Show 5 moreShow less
6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1
 None known
linux-azure-fde-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1046.53~22.04.1, plus listed versions
6.8.0-1041.48~22.04.16.8.0-1042.49~22.04.16.8.0-1044.51~22.04.1
6.8.0-1046.53~22.04.1
linux-gcp-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1020.22~22.04.25.19.0-1021.23~22.04.15.19.0-1022.24~22.04.15.19.0-1024.26~22.04.15.19.0-1025.27~22.04.15.19.0-1026.28~22.04.15.19.0-1027.29~22.04.15.19.0-1030.32~22.04.1
 None known
linux-gcp-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1009.9~22.04.36.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1011.11~22.04.36.2.0-1012.12~22.04.1
Show 7 moreShow less
6.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1016.18~22.04.16.2.0-1017.19~22.04.16.2.0-1018.20~22.04.16.2.0-1019.21~22.04.16.2.0-1021.23~22.04.1
 None known
linux-gcp-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1010.10~22.04.36.5.0-1011.11~22.04.16.5.0-1013.13~22.04.16.5.0-1014.14~22.04.16.5.0-1015.15~22.04.1
Show 8 moreShow less
6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1022.24~22.04.16.5.0-1023.25~22.04.16.5.0-1024.26~22.04.16.5.0-1025.27~22.04.1
 None known
linux-gcp-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1047.50~22.04.2, plus listed versions
6.8.0-1010.11~22.04.16.8.0-1011.12~22.04.16.8.0-1012.13~22.04.16.8.0-1013.14~22.04.16.8.0-1014.16~22.04.1
Show 27 moreShow less
6.8.0-1015.17~22.04.16.8.0-1016.18~22.04.16.8.0-1017.19~22.04.16.8.0-1018.20~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1024.26~22.04.16.8.0-1025.27~22.04.16.8.0-1026.28~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1034.36~22.04.26.8.0-1036.38~22.04.16.8.0-1037.39~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.45~22.04.16.8.0-1043.46~22.04.16.8.0-1044.47~22.04.16.8.0-1045.48~22.04.16.8.0-1046.49~22.04.1
6.8.0-1047.50~22.04.2
linux-hwe-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-28.29~22.04.15.19.0-32.33~22.04.15.19.0-35.36~22.04.15.19.0-38.39~22.04.15.19.0-40.41~22.04.1
Show 6 moreShow less
5.19.0-41.42~22.04.15.19.0-42.43~22.04.15.19.0-43.44~22.04.15.19.0-45.46~22.04.15.19.0-46.47~22.04.15.19.0-50.50
 None known
dtb-aarch64
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-64kb
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-default
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-default-base
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1.160000.2.4
6.12.0-160000.6.1.160000.2.4
kernel-docs
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-kvmsmall
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-obs-build
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-obs-qa
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-rt
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-source
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-syms
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-zfcpdump
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1

History

History
RecordedChangedSources
affectedOSV
affected
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-38110 is a high vulnerability (CVSS 7.8) in Linux, published July 3, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.20%, the 10th percentile. Fixed in kernel 6.6.96.1-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 511 package rows, 29 versions, 3,207 references and the rest of 15 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 45 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open