CVE-2026-64507

x86/bugs: Enable IBPB flush on BPF JIT allocation

5.7 MediumPublic exploitFix available

What does this mean?

: 5.7v4.0, from OSV
: 0.23%14th percentile
Fixed in: 6.6.145.2-1kernel
Published: July 25, 2026
Modified: November 6, 2026
Also known as: ALSA-2026:81406ALSA-2026:81552AZL-93809BELL-CVE-2026-64507DEBIAN-CVE-2026-64507EUVD-2026-48851GHSA-mfjh-rff8-525vRHSA-2026:81406
Show 32 moreShow less
RHSA-2026:81552RLSA-2026:81406RLSA-2026:81552ROOT-OS-UBUNTU-2204-CVE-2026-64507SUSE-SU-2026:23881-1SUSE-SU-2026:23887-1SUSE-SU-2026:23897-1SUSE-SU-2026:23902-1SUSE-SU-2026:24181-1SUSE-SU-2026:24182-1SUSE-SU-2026:24315-1SUSE-SU-2026:24316-1SUSE-SU-2026:24550-1SUSE-SU-2026:4640-1SUSE-SU-2026:4706-1SUSE-SU-2026:5091-1UBUNTU-CVE-2026-64507USN-8726-1USN-8726-2USN-8726-3USN-8726-4USN-8727-1USN-8728-1USN-8728-2USN-8728-3USN-8760-1USN-8760-2USN-8800-1USN-8917-1USN-8918-1openSUSE-SU-2026:11476-1openSUSE-SU-2026:21910-1

In the Linux kernel, the following vulnerability has been resolved:

x86/bugs: Enable IBPB flush on BPF JIT allocation

Enable hardening against JIT spraying when Spectre-v2 mitigations are in use. Specifically, issue an IBPB flush on BPF JIT memory reuse. Skip enabling the IBPB flush if the BPF dispatcher is already using a retpoline sequence.

This hardening applies only when BPF-JIT is in use. Guard the enabling under CONFIG_BPF_JIT so that bugs.c still builds with CONFIG_BPF_JIT=n.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: High
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: None
Availability: None

Exploit likelihood

0.23%Unchanged since Jul 25, 2026

What each source reports

OSV Score usedUBUNTU-CVE-2026-64507 5.7

In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Enable IBPB flush on BPF JIT allocation Enable hardening against JIT spraying when Spectre-v2 mitigations are in use. Specifically, issue an IBPB flush on BPF JIT memory reuse. Skip enabling the IBPB flush if the BPF dispatcher is already using a retpoline sequence. This hardening applies only when BPF-JIT is in use. Guard the enabling under CONFIG_BPF_JIT so that bugs.c still builds with CONFIG_BPF_JIT=n.

Record: UBUNTU-CVE-2026-64507
CVSS 4.0: 5.7 MediumCVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Updated: 2026-11-06

CVE List No score

x86/bugs: Enable IBPB flush on BPF JIT allocation

In the Linux kernel, the following vulnerability has been resolved:

x86/bugs: Enable IBPB flush on BPF JIT allocation

This hardening applies only when BPF-JIT is in use. Guard the enabling under CONFIG_BPF_JIT so that bugs.c still builds with CONFIG_BPF_JIT=n.

Record: CVE-2026-64507
Updated: 2026-11-06

EUVDEUVD-2026-48851 No score

In the Linux kernel, the following vulnerability has been resolved:

x86/bugs: Enable IBPB flush on BPF JIT allocation

This hardening applies only when BPF-JIT is in use. Guard the enabling under CONFIG_BPF_JIT so that bugs.c still builds with CONFIG_BPF_JIT=n.

Record: EUVD-2026-48851
Updated: 2026-11-06

GitHub AdvisoriesGHSA-mfjh-rff8-525v No score

In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Enable IBPB flush...

In the Linux kernel, the following vulnerability has been resolved:

x86/bugs: Enable IBPB flush on BPF JIT allocation

This hardening applies only when BPF-JIT is in use. Guard the enabling under CONFIG_BPF_JIT so that bugs.c still builds with CONFIG_BPF_JIT=n.

Record: GHSA-mfjh-rff8-525v
Updated: 2026-11-02

NVD No score

In the Linux kernel, the following vulnerability has been resolved:

x86/bugs: Enable IBPB flush on BPF JIT allocation

This hardening applies only when BPF-JIT is in use. Guard the enabling under CONFIG_BPF_JIT so that bugs.c still builds with CONFIG_BPF_JIT=n.

Record: CVE-2026-64507
Updated: 2026-11-06

OSVRHSA-2026:81406 8.1

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record: RHSA-2026:81406
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

Show 36 moreShow less

OSVRHSA-2026:81552 8.1

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:81552
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVRLSA-2026:81406 7.8

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: thermal: core: Fix thermal zone device registration error path (CVE-2026-43332)
kernel: macsec: fix replay protection at XPN lower-PN wrap (CVE-2026-63925)
kernel: i2c: stub: Reject I2C block transfers with invalid length (CVE-2026-64191)
kernel: Kernel SMB client: Double-free vulnerability allows remote denial of service or privilege escalation (CVE-2026-64385)
kernel: bpf: Support for hardening against JIT spraying (CVE-2026-64508)
kernel: x86/bugs: Enable IBPB flush on BPF JIT allocation (CVE-2026-64507)
kernel: openvswitch: fix GSO userspace truncation underflow (CVE-2026-68123)
kernel: cifs: validate DFS referral string offsets (CVE-2026-72318)
kernel: KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CVE-2026-72289)
kernel: af_unix: Unlink scc_entry in unix_del_edge() (CVE-2026-80521)
kernel: nvmet-auth: Synchronize timeout work during SQ teardown (CVE-2026-89970)

Bug Fix(es) and Enhancement(s):

net/tls backports for 10.2 (JIRA:Rocky Linux-275027)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:81406
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:81552 7.8

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (CVE-2026-46309)
kernel: macsec: fix replay protection at XPN lower-PN wrap (CVE-2026-63925)
kernel: bpf: Support for hardening against JIT spraying (CVE-2026-64508)
kernel: x86/bugs: Enable IBPB flush on BPF JIT allocation (CVE-2026-64507)
kernel: drm/amd/display: set new_stream to NULL after release (CVE-2026-68236)
kernel: drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CVE-2026-68278)
kernel: drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CVE-2026-68245)
kernel: openvswitch: fix GSO userspace truncation underflow (CVE-2026-68123)
kernel: cifs: validate DFS referral string offsets (CVE-2026-72318)
kernel: drm/vmwgfx: use check_add_overflow for shader size+offset bound (CVE-2026-80887)
kernel: nvmet-auth: Synchronize timeout work during SQ teardown (CVE-2026-89970)
kernel: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (CVE-2026-89811)
kernel: media: cx231xx: reject geometry changes while the VBI queue is busy (CVE-2026-89894)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:81552
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVALSA-2026:81406 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: thermal: core: Fix thermal zone device registration error path (CVE-2026-43332)
kernel: macsec: fix replay protection at XPN lower-PN wrap (CVE-2026-63925)
kernel: i2c: stub: Reject I2C block transfers with invalid length (CVE-2026-64191)
kernel: Kernel SMB client: Double-free vulnerability allows remote denial of service or privilege escalation (CVE-2026-64385)
kernel: bpf: Support for hardening against JIT spraying (CVE-2026-64508)
kernel: x86/bugs: Enable IBPB flush on BPF JIT allocation (CVE-2026-64507)
kernel: openvswitch: fix GSO userspace truncation underflow (CVE-2026-68123)
kernel: cifs: validate DFS referral string offsets (CVE-2026-72318)
kernel: KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CVE-2026-72289)
kernel: af_unix: Unlink scc_entry in unix_del_edge() (CVE-2026-80521)
kernel: nvmet-auth: Synchronize timeout work during SQ teardown (CVE-2026-89970)

Bug Fix(es) and Enhancement(s):

net/tls backports for 10.2 (JIRA:AlmaLinux-275027)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:81406
Updated: 2026-11-02

OSVALSA-2026:81552 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (CVE-2026-46309)
kernel: macsec: fix replay protection at XPN lower-PN wrap (CVE-2026-63925)
kernel: bpf: Support for hardening against JIT spraying (CVE-2026-64508)
kernel: x86/bugs: Enable IBPB flush on BPF JIT allocation (CVE-2026-64507)
kernel: drm/amd/display: set new_stream to NULL after release (CVE-2026-68236)
kernel: drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CVE-2026-68278)
kernel: drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CVE-2026-68245)
kernel: openvswitch: fix GSO userspace truncation underflow (CVE-2026-68123)
kernel: cifs: validate DFS referral string offsets (CVE-2026-72318)
kernel: drm/vmwgfx: use check_add_overflow for shader size+offset bound (CVE-2026-80887)
kernel: nvmet-auth: Synchronize timeout work during SQ teardown (CVE-2026-89970)
kernel: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (CVE-2026-89811)
kernel: media: cx231xx: reject geometry changes while the VBI queue is busy (CVE-2026-89894)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:81552
Updated: 2026-11-02

OSVAZL-93809 No score

CVE-2026-64507 affecting package kernel for versions less than 6.6.145.2-1

In the Linux kernel, the following vulnerability has been resolved:

x86/bugs: Enable IBPB flush on BPF JIT allocation

This hardening applies only when BPF-JIT is in use. Guard the enabling under CONFIG_BPF_JIT so that bugs.c still builds with CONFIG_BPF_JIT=n.

Record: AZL-93809
Updated: 2026-11-02

OSV No score

x86/bugs: Enable IBPB flush on BPF JIT allocation

In the Linux kernel, the following vulnerability has been resolved:

x86/bugs: Enable IBPB flush on BPF JIT allocation

This hardening applies only when BPF-JIT is in use. Guard the enabling under CONFIG_BPF_JIT so that bugs.c still builds with CONFIG_BPF_JIT=n.

Record: CVE-2026-64507
Updated: 2026-11-07

OSVDEBIAN-CVE-2026-64507 No score

Record: DEBIAN-CVE-2026-64507
Updated: 2026-11-07

OSVopenSUSE-SU-2026:11476-1 No score

kernel-devel-7.1.7-1.1 on GA media

These are all security issues fixed in the kernel-devel-7.1.7-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:11476-1
Updated: 2026-11-02

OSVopenSUSE-SU-2026:21910-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (bsc#1256671).
CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
CVE-2026-23113: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).
CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
CVE-2026-23348: cxl/mem: Clarify @host for devm_cxl_add_nvdimm() (bsc#1260577).
CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
CVE-2026-31530: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (bsc#1262756).
CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444).
CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132).
CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036).
CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897).
CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586).
CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
CVE-2026-46135: nvmet-tcp: remove redundant calls to nvmet_tcp_fatal_error() (bsc#1267373).
CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010).
CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). -…

Record: openSUSE-SU-2026:21910-1
Updated: 2026-11-02

OSVROOT-OS-UBUNTU-2204-CVE-2026-64507 No score

CVE-2026-64507 in linux - Patched by Root

Root has patched CVE-2026-64507 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record: ROOT-OS-UBUNTU-2204-CVE-2026-64507
Updated: 2026-11-06

OSVSUSE-SU-2026:23881-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (bsc#1256671).
CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
CVE-2026-23113: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).
CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
CVE-2026-23348: cxl/mem: Clarify @host for devm_cxl_add_nvdimm() (bsc#1260577).
CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
CVE-2026-31530: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (bsc#1262756).
CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444).
CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132).
CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036).
CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897).
CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586).
CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
CVE-2026-46135: nvmet-tcp: remove redundant calls to nvmet_tcp_fatal_error() (bsc#1267373).
CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010).
CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). -…

Record: SUSE-SU-2026:23881-1
Updated: 2026-11-02

OSVSUSE-SU-2026:23887-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (bsc#1256671).
CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
CVE-2026-23113: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).
CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
CVE-2026-23348: cxl/mem: Clarify @host for devm_cxl_add_nvdimm() (bsc#1260577).
CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
CVE-2026-31530: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (bsc#1262756).
CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444).
CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132).
CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036).
CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897).
CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586).
CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
CVE-2026-46135: nvmet-tcp: remove redundant calls to nvmet_tcp_fatal_error() (bsc#1267373).
CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010).
CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). -…

Record: SUSE-SU-2026:23887-1
Updated: 2026-11-02

OSVSUSE-SU-2026:23897-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (bsc#1256671).
CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
CVE-2026-23113: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).
CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
CVE-2026-23348: cxl/mem: Clarify @host for devm_cxl_add_nvdimm() (bsc#1260577).
CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
CVE-2026-31530: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (bsc#1262756).
CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444).
CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132).
CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036).
CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897).
CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586).
CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
CVE-2026-46135: nvmet-tcp: remove redundant calls to nvmet_tcp_fatal_error() (bsc#1267373).
CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010).
CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). -…

Record: SUSE-SU-2026:23897-1
Updated: 2026-11-02

OSVSUSE-SU-2026:23902-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (bsc#1256671).
CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
CVE-2026-23113: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).
CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
CVE-2026-23348: cxl/mem: Clarify @host for devm_cxl_add_nvdimm() (bsc#1260577).
CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
CVE-2026-31530: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (bsc#1262756).
CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444).
CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132).
CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036).
CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897).
CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586).
CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
CVE-2026-46135: nvmet-tcp: remove redundant calls to nvmet_tcp_fatal_error() (bsc#1267373).
CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010).
CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). -…

Record: SUSE-SU-2026:23902-1
Updated: 2026-11-02

OSVSUSE-SU-2026:24181-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298).
CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017).
CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870).
CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).
CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420). -…

Record: SUSE-SU-2026:24181-1
Updated: 2026-11-02

OSVSUSE-SU-2026:24182-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298).
CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017).
CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
CVE-2026-53090: bpf: Fix ld_{abs,ind} failure path analysis in subprogs (bsc#1269532).
CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1271955).
CVE-2026-68162: sctp: avoid auth_enable sysctl UAF during netns teardown (bsc#1274920).
CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277).
CVE-2026-72084: scsi: target: Bound PR-OUT TransportID parsing to the received buffer (bsc#1275540).
CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
CVE-2026-64279: i2c:…

Record: SUSE-SU-2026:24182-1
Updated: 2026-11-02

OSVSUSE-SU-2026:24315-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298).
CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017).
CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870).
CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).
CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420). -…

Record: SUSE-SU-2026:24315-1
Updated: 2026-11-02

OSVSUSE-SU-2026:24316-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298).
CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017).
CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
CVE-2026-53090: bpf: Fix ld_{abs,ind} failure path analysis in subprogs (bsc#1269532).
CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1271955).
CVE-2026-68162: sctp: avoid auth_enable sysctl UAF during netns teardown (bsc#1274920).
CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277).
CVE-2026-72084: scsi: target: Bound PR-OUT TransportID parsing to the received buffer (bsc#1275540).
CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
CVE-2026-64279: i2c:…

Record: SUSE-SU-2026:24316-1
Updated: 2026-11-02

OSVSUSE-SU-2026:24550-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2025-68219: cifs: fix memory leak in smb3_fs_context_parse_param error path (bsc#1255222).
CVE-2026-31708: smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path (bsc#1264022).
CVE-2026-31709: smb: client: validate the whole DACL before rewriting it in cifsacl (bsc#1264024).
CVE-2026-43350: smb: client: require a full NFS mode SID before reading mode bits (bsc#1264985).
CVE-2026-46155: smb/client: fix out-of-bounds read in smb2_compound_op() (bsc#1267720).
CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970).
CVE-2026-64370: posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (bsc#1273805).
CVE-2026-64380: smb: client: harden POSIX SID length parsing (bsc#1273557).
CVE-2026-64413: netfilter: ebtables: zero chainstack array (bsc#1274082).
CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080).
CVE-2026-68186: binfmt_misc: set have_execfd only once the interpreter is opened (bsc#1274949).
CVE-2026-68447: drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size (bsc#1276280).
CVE-2026-72010: cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed (bsc#1276776).
CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
CVE-2026-72111: bpf: Reset register bounds before narrowing retval range in check_mem_access() (bsc#1277389).
CVE-2026-72127: netdev-genl: report NAPI thread PID in the caller's pid namespace (bsc#1277542).
CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663).
CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665).
CVE-2026-72318: cifs: validate DFS referral string offsets (bsc#1275939).
CVE-2026-72400: seg6: validate SRH length before reading fixed fields (bsc#1278030).
CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033).
CVE-2026-72416: netfilter: nft_compat: ebtables emulation must reject non-bridge targets (bsc#1278041).
CVE-2026-72428: bpf: Fix stack slot index in nospec checks (bsc#1278050).
CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103).
CVE-2026-74399: evm: terminate and bound the evm_xattrs read buffer (bsc#1278319).
CVE-2026-74565: netfilter: nf_tables: make nft_object rhltable per table (bsc#1275568).
CVE-2026-74613: vsock/virtio: avoid refilling the RX queue after teardown (bsc#1277903).
CVE-2026-74620: net/sched: act_gact, act_police: range check the fallback control action (bsc#1277044).
CVE-2026-74624: netfilter: nf_conntrack: defer invalid log until after unlock (bsc#1277599).
CVE-2026-74715: net: netfilter: Make ct zone opts configurable for bpf ct helpers (bsc#1277890).
CVE-2026-74720: bpf: Preserve pointer state for commuted arithmetic (bsc#1276574).
CVE-2026-74746: netfilter: flowtable: publish GC-visible tuple last (bsc#1278101).
CVE-2026-74748: netfilter: ipset: fix refcount race between list:set GC and swap (bsc#1277578).
CVE-2026-80572: Input: byd - synchronize timer deletion before freeing private data (bsc#1277338).
CVE-2026-80602: perf/x86/amd/lbr: Fix kernel address leakage (bsc#1278123).
CVE-2026-80637: netfilter: synproxy: fix unaligned memory access in timestamp adjustment (bsc#1278343).
CVE-2026-80684: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure (bsc#1277467).
CVE-2026-80709: s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs (bsc#1278202).
CVE-2026-80717: sctp: validate Adaptation Indication parameter length (bsc#1277836).
CVE-2026-80755: selinux: reject a permission value exceeding the class permission count (bsc#1278415).
CVE-2026-80757: selinux: reject a…

Record: SUSE-SU-2026:24550-1
Updated: 2026-11-06

OSVSUSE-SU-2026:4640-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
CVE-2026-63987: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES (bsc#1272971).
CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870).
CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).
CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420).
CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).
CVE-2026-64373: cpufreq: Fix hotplug-suspend race during…

Record: SUSE-SU-2026:4640-1
Updated: 2026-11-02

OSVSUSE-SU-2026:4706-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).
CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).
CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).
CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).
CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).
CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).
CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).
CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).
CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).
CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).
CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).
CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).
CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).
CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).
CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890).
CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).
CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).
CVE-2026-63987: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES (bsc#1272971).
CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).
CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).
CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).
CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).
CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).
CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145).
CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).
CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).
CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).
CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).
CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870).
CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).
CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).
CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).
CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420).
CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).
CVE-2026-64373: cpufreq: Fix hotplug-suspend race during…

Record: SUSE-SU-2026:4706-1
Updated: 2026-11-02

OSVSUSE-SU-2026:5091-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2025-68219: cifs: fix memory leak in smb3_fs_context_parse_param error path (bsc#1255222).
CVE-2026-31708: smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path (bsc#1264022).
CVE-2026-31709: smb: client: validate the whole DACL before rewriting it in cifsacl (bsc#1264024).
CVE-2026-43350: smb: client: require a full NFS mode SID before reading mode bits (bsc#1264985).
CVE-2026-46155: smb/client: fix out-of-bounds read in smb2_compound_op() (bsc#1267720).
CVE-2026-64370: posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (bsc#1273805).
CVE-2026-64380: smb: client: harden POSIX SID length parsing (bsc#1273557).
CVE-2026-64430: NTB: epf: Avoid calling pci_irq_vector() from hardirq context (bsc#1274257).
CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080).
CVE-2026-68186: binfmt_misc: set have_execfd only once the interpreter is opened (bsc#1274949).
CVE-2026-68436: drm/amd/display: use kvzalloc to allocate struct dc (bsc#1276275).
CVE-2026-68447: drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size (bsc#1276280).
CVE-2026-68460: f2fs: fix potential deadlock in f2fs_balance_fs() (bsc#1276774).
CVE-2026-72010: cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed (bsc#1276776).
CVE-2026-72073: mmc: vub300: fix use-after-free on probe failure (bsc#1277157).
CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
CVE-2026-72111: bpf: Reset register bounds before narrowing retval range in check_mem_access() (bsc#1277389).
CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663).
CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665).
CVE-2026-72318: cifs: validate DFS referral string offsets (bsc#1275939).
CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033).
CVE-2026-72416: netfilter: nft_compat: ebtables emulation must reject non-bridge targets (bsc#1278041).
CVE-2026-72428: bpf: Fix stack slot index in nospec checks (bsc#1278050).
CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103).
CVE-2026-74472: ublk: reset kernel-owned dev_info fields in ublk_ctrl_add_dev() (bsc#1277785).
CVE-2026-74613: vsock/virtio: avoid refilling the RX queue after teardown (bsc#1277903).
CVE-2026-74620: net/sched: act_gact, act_police: range check the fallback control action (bsc#1277044).
CVE-2026-74624: netfilter: nf_conntrack: defer invalid log until after unlock (bsc#1277599).
CVE-2026-74715: net: netfilter: Make ct zone opts configurable for bpf ct helpers (bsc#1277890).
CVE-2026-74746: netfilter: flowtable: publish GC-visible tuple last (bsc#1278101).
CVE-2026-74748: netfilter: ipset: fix refcount race between list:set GC and swap (bsc#1277578).
CVE-2026-80572: Input: byd - synchronize timer deletion before freeing private data (bsc#1277338).
CVE-2026-80602: perf/x86/amd/lbr: Fix kernel address leakage (bsc#1278123).
CVE-2026-80637: netfilter: synproxy: fix unaligned memory access in timestamp adjustment (bsc#1278343).
CVE-2026-80717: sctp: validate Adaptation Indication parameter length (bsc#1277836).
CVE-2026-80755: selinux: reject a permission value exceeding the class permission count (bsc#1278415).
CVE-2026-80757: selinux: reject a class permission count below its inherited common (bsc#1278711).
CVE-2026-80808: ext4: stop retrying saturated xattr cache entries (bsc#1279795).
CVE-2026-80809: ocfs2: fix missing metadata reservation for large xattrs (bsc#1279606).
CVE-2026-80855: fuse: fix invalidate lock leak on open O_TRUNC DAX failure (bsc#1279564).
CVE-2026-80879: ocfs2: fix circular locking dependency…

Record: SUSE-SU-2026:5091-1
Updated: 2026-11-04

OSVUSN-8726-1 No score

linux, linux-aws, linux-aws-7.0, linux-gcp, linux-gke, linux-hwe-7.0, linux-realtime vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
User-space API (UAPI);
Kernel build system;
ARM32 architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
Intel NPU Driver;
ACPI drivers;
Android drivers;
Drivers core;
Compressed RAM block device driver;
Bluetooth drivers;
Character device driver;
Hardware random number generator core;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
Intel Stratix 10 firmware drivers;
FPGA Framework;
GPIO subsystem;
GPU drivers;
HID subsystem;
CoreSight HW tracing drivers;
I2C subsystem;
IIO subsystem;
IIO ADC drivers;
InfiniBand drivers;
Input Device core drivers;
Input Device (Mouse) drivers;
IOMMU subsystem;
IRQ chip drivers;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Fastrpc Driver;
MMC subsystem;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
MediaTek network drivers;
NTB driver;
NVME drivers;
NVMEM (Non Volatile Memory) drivers;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
System reset/shutdown drivers;
Power sequencing drivers;
PTP clock framework;
Voltage and Current Regulator drivers;
RPMSG subsystem;
SLIMbus drivers;
SPI subsystem;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
VME bus staging drivers;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
Cadence USB3 driver;
ULPI bus;
DesignWare USB3 driver;
Faraday FOTG210 USB2 dual-role controller driver;
USB Gadget drivers;
USB Host Controller drivers;
USB ChaosKey driver;
Siemens ID Mouse USB driver;
IOWarrior USB driver;
LD Didactic USB driver;
LEGO USB Tower driver;
Intel USBIO USB I/O expander driver;
USS720 USB parallel port adapter driver;
MediaTek USB3 DRD driver;
USB Serial drivers;
USB Type-C Port Controller Manager driver;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
VFIO drivers;
Framebuffer layer;
Virtio drivers;
BTRFS file system;
EROFS file system;
exFAT file system;
F2FS file system;
File systems infrastructure;
FUSE (File system in Userspace);
GFS2 file system;
HFS file system;
HFS+ file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
OCFS2 file system;
Proc file system;
SMB network file system;
UDF file system;
XFS file system;
Key management;
BPF subsystem;
Memory management;
Software nodes and device properties;
Glob pattern matching library;
Memory Management;
KVM subsystem;
Mellanox drivers;
Restartable sequences system call mechanism;
Socket messages infrastructure;
Network traffic control;
Bluetooth subsystem;
Netfilter;
Networking core;
Network sockets;
TCP network protocol;
io_uring subsystem;
IPC subsystem;
Audit subsystem;
Perf events;
Kernel fork() syscall;
Locking primitives;
Kernel module support;
Scheduler infrastructure; -…

Record: USN-8726-1
Updated: 2026-11-06

OSVUSN-8726-2 No score

linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
User-space API (UAPI);
Kernel build system;
ARM32 architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
Intel NPU Driver;
ACPI drivers;
Android drivers;
Drivers core;
Compressed RAM block device driver;
Bluetooth drivers;
Character device driver;
Hardware random number generator core;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
Intel Stratix 10 firmware drivers;
FPGA Framework;
GPIO subsystem;
GPU drivers;
HID subsystem;
CoreSight HW tracing drivers;
I2C subsystem;
IIO subsystem;
IIO ADC drivers;
InfiniBand drivers;
Input Device core drivers;
Input Device (Mouse) drivers;
IOMMU subsystem;
IRQ chip drivers;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Fastrpc Driver;
MMC subsystem;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
MediaTek network drivers;
NTB driver;
NVME drivers;
NVMEM (Non Volatile Memory) drivers;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
System reset/shutdown drivers;
Power sequencing drivers;
PTP clock framework;
Voltage and Current Regulator drivers;
RPMSG subsystem;
SLIMbus drivers;
SPI subsystem;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
VME bus staging drivers;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
Cadence USB3 driver;
ULPI bus;
DesignWare USB3 driver;
Faraday FOTG210 USB2 dual-role controller driver;
USB Gadget drivers;
USB Host Controller drivers;
USB ChaosKey driver;
Siemens ID Mouse USB driver;
IOWarrior USB driver;
LD Didactic USB driver;
LEGO USB Tower driver;
Intel USBIO USB I/O expander driver;
USS720 USB parallel port adapter driver;
MediaTek USB3 DRD driver;
USB Serial drivers;
USB Type-C Port Controller Manager driver;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
VFIO drivers;
Framebuffer layer;
Virtio drivers;
BTRFS file system;
EROFS file system;
exFAT file system;
F2FS file system;
File systems infrastructure;
FUSE (File system in Userspace);
GFS2 file system;
HFS file system;
HFS+ file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
OCFS2 file system;
Proc file system;
SMB network file system;
UDF file system;
XFS file system;
Key management;
BPF subsystem;
Memory management;
Software nodes and device properties;
Glob pattern matching library;
Memory Management;
KVM subsystem;
Mellanox drivers;
Restartable sequences system call mechanism;
Socket messages infrastructure;
Network traffic control;
Bluetooth subsystem;
Netfilter;
Networking core;
Network sockets;
TCP network protocol;
io_uring subsystem;
IPC subsystem;
Audit subsystem;
Perf events;
Kernel fork() syscall;
Locking primitives;
Kernel module support;
Scheduler infrastructure; -…

Record: USN-8726-2
Updated: 2026-11-06

OSVUSN-8726-3 No score

linux-ibm vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
User-space API (UAPI);
Kernel build system;
ARM32 architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
Intel NPU Driver;
ACPI drivers;
Android drivers;
Drivers core;
Compressed RAM block device driver;
Bluetooth drivers;
Character device driver;
Hardware random number generator core;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
Intel Stratix 10 firmware drivers;
FPGA Framework;
GPIO subsystem;
GPU drivers;
HID subsystem;
CoreSight HW tracing drivers;
I2C subsystem;
IIO subsystem;
IIO ADC drivers;
InfiniBand drivers;
Input Device core drivers;
Input Device (Mouse) drivers;
IOMMU subsystem;
IRQ chip drivers;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Fastrpc Driver;
MMC subsystem;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
MediaTek network drivers;
NTB driver;
NVME drivers;
NVMEM (Non Volatile Memory) drivers;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
System reset/shutdown drivers;
Power sequencing drivers;
PTP clock framework;
Voltage and Current Regulator drivers;
RPMSG subsystem;
SLIMbus drivers;
SPI subsystem;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
VME bus staging drivers;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
Cadence USB3 driver;
ULPI bus;
DesignWare USB3 driver;
Faraday FOTG210 USB2 dual-role controller driver;
USB Gadget drivers;
USB Host Controller drivers;
USB ChaosKey driver;
Siemens ID Mouse USB driver;
IOWarrior USB driver;
LD Didactic USB driver;
LEGO USB Tower driver;
Intel USBIO USB I/O expander driver;
USS720 USB parallel port adapter driver;
MediaTek USB3 DRD driver;
USB Serial drivers;
USB Type-C Port Controller Manager driver;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
VFIO drivers;
Framebuffer layer;
Virtio drivers;
BTRFS file system;
EROFS file system;
exFAT file system;
F2FS file system;
File systems infrastructure;
FUSE (File system in Userspace);
GFS2 file system;
HFS file system;
HFS+ file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
OCFS2 file system;
Proc file system;
SMB network file system;
UDF file system;
XFS file system;
Key management;
BPF subsystem;
Memory management;
Software nodes and device properties;
Glob pattern matching library;
Memory Management;
KVM subsystem;
Mellanox drivers;
Restartable sequences system call mechanism;
Socket messages infrastructure;
Network traffic control;
Bluetooth subsystem;
Netfilter;
Networking core;
Network sockets;
TCP network protocol;
io_uring subsystem;
IPC subsystem;
Audit subsystem;
Perf events;
Kernel fork() syscall;
Locking primitives;
Kernel module support;
Scheduler infrastructure; -…

Record: USN-8726-3
Updated: 2026-11-06

OSVUSN-8726-4 No score

linux-azure, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
User-space API (UAPI);
Kernel build system;
ARM32 architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
Intel NPU Driver;
ACPI drivers;
Android drivers;
Drivers core;
Compressed RAM block device driver;
Bluetooth drivers;
Character device driver;
Hardware random number generator core;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
Intel Stratix 10 firmware drivers;
FPGA Framework;
GPIO subsystem;
GPU drivers;
HID subsystem;
CoreSight HW tracing drivers;
I2C subsystem;
IIO subsystem;
IIO ADC drivers;
InfiniBand drivers;
Input Device core drivers;
Input Device (Mouse) drivers;
IOMMU subsystem;
IRQ chip drivers;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Fastrpc Driver;
MMC subsystem;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
MediaTek network drivers;
NTB driver;
NVME drivers;
NVMEM (Non Volatile Memory) drivers;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
System reset/shutdown drivers;
Power sequencing drivers;
PTP clock framework;
Voltage and Current Regulator drivers;
RPMSG subsystem;
SLIMbus drivers;
SPI subsystem;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
VME bus staging drivers;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
Cadence USB3 driver;
ULPI bus;
DesignWare USB3 driver;
Faraday FOTG210 USB2 dual-role controller driver;
USB Gadget drivers;
USB Host Controller drivers;
USB ChaosKey driver;
Siemens ID Mouse USB driver;
IOWarrior USB driver;
LD Didactic USB driver;
LEGO USB Tower driver;
Intel USBIO USB I/O expander driver;
USS720 USB parallel port adapter driver;
MediaTek USB3 DRD driver;
USB Serial drivers;
USB Type-C Port Controller Manager driver;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
VFIO drivers;
Framebuffer layer;
Virtio drivers;
BTRFS file system;
EROFS file system;
exFAT file system;
F2FS file system;
File systems infrastructure;
FUSE (File system in Userspace);
GFS2 file system;
HFS file system;
HFS+ file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
OCFS2 file system;
Proc file system;
SMB network file system;
UDF file system;
XFS file system;
Key management;
BPF subsystem;
Memory management;
Software nodes and device properties;
Glob pattern matching library;
Memory Management;
KVM subsystem;
Mellanox drivers;
Restartable sequences system call mechanism;
Socket messages infrastructure;
Network traffic control;
Bluetooth subsystem;
Netfilter;
Networking core;
Network sockets;
TCP network protocol;
io_uring subsystem;
IPC subsystem;
Audit subsystem;
Perf events;
Kernel fork() syscall;
Locking primitives;
Kernel module support;
Scheduler infrastructure; -…

Record: USN-8726-4
Updated: 2026-11-06

OSVUSN-8727-1 No score

linux-oem-7.0 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
User-space API (UAPI);
Kernel build system;
ARM32 architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
Intel NPU Driver;
ACPI drivers;
Android drivers;
Drivers core;
Compressed RAM block device driver;
Bluetooth drivers;
Character device driver;
Hardware random number generator core;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
Intel Stratix 10 firmware drivers;
FPGA Framework;
GPIO subsystem;
GPU drivers;
HID subsystem;
CoreSight HW tracing drivers;
I2C subsystem;
IIO subsystem;
IIO ADC drivers;
InfiniBand drivers;
Input Device core drivers;
Input Device (Mouse) drivers;
IOMMU subsystem;
IRQ chip drivers;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Fastrpc Driver;
MMC subsystem;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
MediaTek network drivers;
NTB driver;
NVME drivers;
NVMEM (Non Volatile Memory) drivers;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
System reset/shutdown drivers;
Power sequencing drivers;
PTP clock framework;
Voltage and Current Regulator drivers;
RPMSG subsystem;
SLIMbus drivers;
SPI subsystem;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
VME bus staging drivers;
Trusted Execution Environment drivers;
TTY drivers;
Cadence USB3 driver;
ULPI bus;
USB core drivers;
DesignWare USB3 driver;
Faraday FOTG210 USB2 dual-role controller driver;
USB Gadget drivers;
USB Host Controller drivers;
USB ChaosKey driver;
Siemens ID Mouse USB driver;
IOWarrior USB driver;
LD Didactic USB driver;
LEGO USB Tower driver;
Intel USBIO USB I/O expander driver;
USS720 USB parallel port adapter driver;
MediaTek USB3 DRD driver;
USB Serial drivers;
USB Type-C Port Controller Manager driver;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
VFIO drivers;
Framebuffer layer;
Virtio drivers;
BTRFS file system;
EROFS file system;
exFAT file system;
F2FS file system;
File systems infrastructure;
FUSE (File system in Userspace);
GFS2 file system;
HFS file system;
HFS+ file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
OCFS2 file system;
Proc file system;
SMB network file system;
UDF file system;
XFS file system;
Key management;
BPF subsystem;
Memory management;
Software nodes and device properties;
Glob pattern matching library;
Memory Management;
KVM subsystem;
Mellanox drivers;
Restartable sequences system call mechanism;
Socket messages infrastructure;
Network traffic control;
Bluetooth subsystem;
Netfilter;
Networking core;
Network sockets;
TCP network protocol;
io_uring subsystem;
IPC subsystem;
Audit subsystem;
Perf events;
Kernel fork() syscall;
Locking primitives;
Kernel module support;
Scheduler infrastructure;
Signal handling…

Record: USN-8727-1
Updated: 2026-11-06

OSVUSN-8728-1 No score

linux-gcp-7.0 vulnerabilities

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

x86 platform drivers;
ARM64 architecture;
Cryptographic API;
PSP security protocol;
User-space API (UAPI);
Kernel build system;
ARM32 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Compute Acceleration Framework;
Intel NPU Driver;
ACPI drivers;
Android drivers;
Auxiliary display drivers;
Drivers core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
Character device driver;
Hardware random number generator core;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
DPLL subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
EFI core;
Intel Stratix 10 firmware drivers;
FPGA Framework;
FWCTL subsystem;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
CoreSight HW tracing drivers;
I2C subsystem;
I3C subsystem;
IIO subsystem;
IIO ADC drivers;
InfiniBand drivers;
Input Device core drivers;
Input Device (Mouse) drivers;
IOMMU subsystem;
IRQ chip drivers;
Mailbox framework;
Multiple devices driver;
Media drivers;
NVIDIA Tegra memory controller driver;
Multifunction device drivers;
Fastrpc Driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Texas Instruments network drivers;
MediaTek network drivers;
NTB driver;
NVME drivers;
NVMEM (Non Volatile Memory) drivers;
Parport drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
Chrome hardware platform drivers;
ACPI WMI driver;
Generic PM domains;
MediaTek PM domains;
System reset/shutdown drivers;
Power sequencing drivers;
Power supply drivers;
PTP clock framework;
Voltage and Current Regulator drivers;
MPAM driver;
Amlogic Meson reset controller drivers;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
SLIMbus drivers;
NVIDIA Tegra Control Backbone (CBB) driver;
SPI subsystem;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
VME bus staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
Userspace I/O drivers;
Cadence USB3 driver;
USB Device Class drivers;
ULPI bus;
DesignWare USB2 driver;
DesignWare USB3 driver;
Faraday FOTG210 USB2 dual-role controller driver;
USB Gadget drivers;
USB Host Controller drivers;
USB ChaosKey driver;
Siemens ID Mouse USB driver;
IOWarrior USB driver;
LD Didactic USB driver;
LEGO USB…

Record: USN-8728-1
Updated: 2026-11-07

OSVUSN-8728-2 No score

linux-azure-7.0 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

x86 platform drivers;
ARM64 architecture;
Cryptographic API;
PSP security protocol;
User-space API (UAPI);
Kernel build system;
ARM32 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Compute Acceleration Framework;
Intel NPU Driver;
ACPI drivers;
Android drivers;
Auxiliary display drivers;
Drivers core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
Character device driver;
Hardware random number generator core;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
DPLL subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
EFI core;
Intel Stratix 10 firmware drivers;
FPGA Framework;
FWCTL subsystem;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
CoreSight HW tracing drivers;
I2C subsystem;
I3C subsystem;
IIO subsystem;
IIO ADC drivers;
InfiniBand drivers;
Input Device core drivers;
Input Device (Mouse) drivers;
IOMMU subsystem;
IRQ chip drivers;
Mailbox framework;
Multiple devices driver;
Media drivers;
NVIDIA Tegra memory controller driver;
Multifunction device drivers;
Fastrpc Driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Texas Instruments network drivers;
MediaTek network drivers;
NTB driver;
NVME drivers;
NVMEM (Non Volatile Memory) drivers;
Parport drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
Chrome hardware platform drivers;
ACPI WMI driver;
Generic PM domains;
MediaTek PM domains;
System reset/shutdown drivers;
Power sequencing drivers;
Power supply drivers;
PTP clock framework;
Voltage and Current Regulator drivers;
MPAM driver;
Amlogic Meson reset controller drivers;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
SLIMbus drivers;
NVIDIA Tegra Control Backbone (CBB) driver;
SPI subsystem;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
VME bus staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
Userspace I/O drivers;
Cadence USB3 driver;
USB Device Class drivers;
ULPI bus;
DesignWare USB2 driver;
DesignWare USB3 driver;
Faraday FOTG210 USB2 dual-role controller driver;
USB Gadget drivers;
USB Host Controller drivers;
USB ChaosKey driver;
Siemens ID Mouse USB driver;
IOWarrior USB driver;
LD Didactic USB driver;
LEGO USB…

Record: USN-8728-2
Updated: 2026-11-07

OSVUSN-8728-3 No score

linux-oracle-7.0 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

x86 platform drivers;
ARM64 architecture;
Cryptographic API;
PSP security protocol;
User-space API (UAPI);
Kernel build system;
ARM32 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Compute Acceleration Framework;
Intel NPU Driver;
ACPI drivers;
Android drivers;
Auxiliary display drivers;
Drivers core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
Character device driver;
Hardware random number generator core;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
DPLL subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
EFI core;
Intel Stratix 10 firmware drivers;
FPGA Framework;
FWCTL subsystem;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
CoreSight HW tracing drivers;
I2C subsystem;
I3C subsystem;
IIO subsystem;
IIO ADC drivers;
InfiniBand drivers;
Input Device core drivers;
Input Device (Mouse) drivers;
IOMMU subsystem;
IRQ chip drivers;
Mailbox framework;
Multiple devices driver;
Media drivers;
NVIDIA Tegra memory controller driver;
Multifunction device drivers;
Fastrpc Driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Texas Instruments network drivers;
MediaTek network drivers;
NTB driver;
NVME drivers;
NVMEM (Non Volatile Memory) drivers;
Parport drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
Chrome hardware platform drivers;
ACPI WMI driver;
Generic PM domains;
MediaTek PM domains;
System reset/shutdown drivers;
Power sequencing drivers;
Power supply drivers;
PTP clock framework;
Voltage and Current Regulator drivers;
MPAM driver;
Amlogic Meson reset controller drivers;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
SLIMbus drivers;
NVIDIA Tegra Control Backbone (CBB) driver;
SPI subsystem;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
VME bus staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
Userspace I/O drivers;
Cadence USB3 driver;
USB Device Class drivers;
ULPI bus;
DesignWare USB2 driver;
DesignWare USB3 driver;
Faraday FOTG210 USB2 dual-role controller driver;
USB Gadget drivers;
USB Host Controller drivers;
USB ChaosKey driver;
Siemens ID Mouse USB driver;
IOWarrior USB driver;
LD Didactic USB driver;
LEGO USB…

Record: USN-8728-3
Updated: 2026-11-07

OSVUSN-8760-1 No score

linux-nvidia-7.0 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

User-space API (UAPI);
Kernel build system;
ARM32 architecture;
ARM64 architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
Intel NPU Driver;
ACPI drivers;
Android drivers;
Drivers core;
Compressed RAM block device driver;
Bluetooth drivers;
Character device driver;
Hardware random number generator core;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
Intel Stratix 10 firmware drivers;
FPGA Framework;
GPIO subsystem;
GPU drivers;
HID subsystem;
CoreSight HW tracing drivers;
I2C subsystem;
IIO subsystem;
IIO ADC drivers;
InfiniBand drivers;
Input Device core drivers;
Input Device (Mouse) drivers;
IOMMU subsystem;
IRQ chip drivers;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Fastrpc Driver;
MMC subsystem;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
MediaTek network drivers;
NTB driver;
NVME drivers;
NVMEM (Non Volatile Memory) drivers;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
System reset/shutdown drivers;
Power sequencing drivers;
PTP clock framework;
Voltage and Current Regulator drivers;
RPMSG subsystem;
SLIMbus drivers;
SPI subsystem;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
VME bus staging drivers;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
Cadence USB3 driver;
ULPI bus;
DesignWare USB3 driver;
Faraday FOTG210 USB2 dual-role controller driver;
USB Gadget drivers;
USB Host Controller drivers;
USB ChaosKey driver;
Siemens ID Mouse USB driver;
IOWarrior USB driver;
LD Didactic USB driver;
LEGO USB Tower driver;
Intel USBIO USB I/O expander driver;
USS720 USB parallel port adapter driver;
MediaTek USB3 DRD driver;
USB Serial drivers;
USB Type-C Port Controller Manager driver;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
VFIO drivers;
Framebuffer layer;
Virtio drivers;
BTRFS file system;
EROFS file system;
exFAT file system;
F2FS file system;
File systems infrastructure;
FUSE (File system in Userspace);
GFS2 file system;
HFS file system;
HFS+ file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
OCFS2 file system;
Proc file system;
SMB network file system;
UDF file system;
XFS file system;
Key management;
BPF subsystem;
Memory management;
Software nodes and device properties;
Glob pattern matching library;
Memory Management;
KVM subsystem;
Mellanox drivers;
Restartable sequences system call mechanism;
Socket messages infrastructure;
Network traffic control;
Bluetooth subsystem;
Netfilter;
Networking core;
Network sockets;
TCP network protocol;
io_uring subsystem;
IPC subsystem;
Audit subsystem;
Perf events;
Kernel fork() syscall;
Locking primitives;
Kernel module support;
Scheduler infrastructure;
Signal handling mechanism;
Timer subsystem;
Tracing infrastructure;
Debug objects infrastructure;
6LoWPAN network protocol;
IEEE 802 network protocols;
9P file system network protocol;
B.A.T.M.A.N. meshing protocol;
Ethernet bridge;
Devlink API;
HSR network protocol;
IEEE802154.4 network protocol;
IPv4 networking;
IPv6 networking; …

Record: USN-8760-1
Updated: 2026-11-06

OSVUSN-8760-2 No score

linux-nvidia vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

User-space API (UAPI);
Kernel build system;
ARM32 architecture;
ARM64 architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
Intel NPU Driver;
ACPI drivers;
Android drivers;
Drivers core;
Compressed RAM block device driver;
Bluetooth drivers;
Character device driver;
Hardware random number generator core;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
Intel Stratix 10 firmware drivers;
FPGA Framework;
GPIO subsystem;
GPU drivers;
HID subsystem;
CoreSight HW tracing drivers;
I2C subsystem;
IIO subsystem;
IIO ADC drivers;
InfiniBand drivers;
Input Device core drivers;
Input Device (Mouse) drivers;
IOMMU subsystem;
IRQ chip drivers;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Fastrpc Driver;
MMC subsystem;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
MediaTek network drivers;
NTB driver;
NVME drivers;
NVMEM (Non Volatile Memory) drivers;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
System reset/shutdown drivers;
Power sequencing drivers;
PTP clock framework;
Voltage and Current Regulator drivers;
RPMSG subsystem;
SLIMbus drivers;
SPI subsystem;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
VME bus staging drivers;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
Cadence USB3 driver;
ULPI bus;
DesignWare USB3 driver;
Faraday FOTG210 USB2 dual-role controller driver;
USB Gadget drivers;
USB Host Controller drivers;
USB ChaosKey driver;
Siemens ID Mouse USB driver;
IOWarrior USB driver;
LD Didactic USB driver;
LEGO USB Tower driver;
Intel USBIO USB I/O expander driver;
USS720 USB parallel port adapter driver;
MediaTek USB3 DRD driver;
USB Serial drivers;
USB Type-C Port Controller Manager driver;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
VFIO drivers;
Framebuffer layer;
Virtio drivers;
BTRFS file system;
EROFS file system;
exFAT file system;
F2FS file system;
File systems infrastructure;
FUSE (File system in Userspace);
GFS2 file system;
HFS file system;
HFS+ file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
OCFS2 file system;
Proc file system;
SMB network file system;
UDF file system;
XFS file system;
Key management;
BPF subsystem;
Memory management;
Software nodes and device properties;
Glob pattern matching library;
Memory Management;
KVM subsystem;
Mellanox drivers;
Restartable sequences system call mechanism;
Socket messages infrastructure;
Network traffic control;
Bluetooth subsystem;
Netfilter;
Networking core;
Network sockets;
TCP network protocol;
io_uring subsystem;
IPC subsystem;
Audit subsystem;
Perf events;
Kernel fork() syscall;
Locking primitives;
Kernel module support;
Scheduler infrastructure;
Signal handling mechanism;
Timer subsystem;
Tracing infrastructure;
Debug objects infrastructure;
6LoWPAN network protocol;
IEEE 802 network protocols;
9P file system network protocol;
B.A.T.M.A.N. meshing protocol;
Ethernet bridge;
Devlink API;
HSR network protocol;
IEEE802154.4 network protocol;
IPv4 networking;
IPv6 networking; …

Record: USN-8760-2
Updated: 2026-11-06

OSVUSN-8800-1 No score

linux-nvidia-bos vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

User-space API (UAPI);
Kernel build system;
ARM32 architecture;
ARM64 architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
Intel NPU Driver;
ACPI drivers;
Android drivers;
Drivers core;
Compressed RAM block device driver;
Bluetooth drivers;
Character device driver;
Hardware random number generator core;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
Intel Stratix 10 firmware drivers;
FPGA Framework;
GPIO subsystem;
GPU drivers;
HID subsystem;
CoreSight HW tracing drivers;
I2C subsystem;
I3C subsystem;
IIO subsystem;
IIO ADC drivers;
InfiniBand drivers;
Input Device core drivers;
Input Device (Mouse) drivers;
IOMMU subsystem;
IRQ chip drivers;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Fastrpc Driver;
MMC subsystem;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
MediaTek network drivers;
NTB driver;
NVME drivers;
NVMEM (Non Volatile Memory) drivers;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
System reset/shutdown drivers;
Power sequencing drivers;
PTP clock framework;
Voltage and Current Regulator drivers;
RPMSG subsystem;
SLIMbus drivers;
SPI subsystem;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
VME bus staging drivers;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
Cadence USB3 driver;
ULPI bus;
DesignWare USB3 driver;
Faraday FOTG210 USB2 dual-role controller driver;
USB Gadget drivers;
USB Host Controller drivers;
USB ChaosKey driver;
Siemens ID Mouse USB driver;
IOWarrior USB driver;
LD Didactic USB driver;
LEGO USB Tower driver;
Intel USBIO USB I/O expander driver;
USS720 USB parallel port adapter driver;
MediaTek USB3 DRD driver;
USB Serial drivers;
USB Type-C Port Controller Manager driver;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
VFIO drivers;
Framebuffer layer;
Virtio drivers;
BTRFS file system;
EROFS file system;
exFAT file system;
F2FS file system;
File systems infrastructure;
FUSE (File system in Userspace);
GFS2 file system;
HFS file system;
HFS+ file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
OCFS2 file system;
Proc file system;
SMB network file system;
UDF file system;
XFS file system;
Key management;
BPF subsystem;
Memory management;
Software nodes and device properties;
Glob pattern matching library;
Memory Management;
KVM subsystem;
Mellanox drivers;
Restartable sequences system call mechanism;
Socket messages infrastructure;
Network traffic control;
Bluetooth subsystem;
Netfilter;
Networking core;
Network sockets;
TCP network protocol;
io_uring subsystem;
IPC subsystem;
Audit subsystem;
Perf events;
Kernel fork() syscall;
Locking primitives;
Kernel module support;
Scheduler infrastructure;
Signal handling mechanism;
Timer subsystem;
Tracing infrastructure;
Debug objects infrastructure;
6LoWPAN network protocol;
IEEE 802 network protocols;
9P file system network protocol;
B.A.T.M.A.N. meshing protocol;
Ethernet bridge;
Devlink API;
HSR network protocol;
IEEE802154.4 network protocol;
IPv4 networking; -…

Record: USN-8800-1
Updated: 2026-11-06

OSVUSN-8917-1 No score

linux, linux-aws, linux-aws-fips, linux-fips, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-ibm, linux-lowlatency, linux-oracle, linux-realtime vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

NVDIMM (Non-Volatile Memory Device) drivers;
Handshake API;
ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Intel NPU Driver;
ACPI drivers;
Android drivers;
Serial ATA and Parallel ATA drivers;
Drivers core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
Bluetooth drivers;
Cdrom driver;
Character device driver;
Hardware random number generator core;
TPM device driver;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
DAX dirext access to differentiated memory framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
FireWire subsystem;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
Intel Stratix 10 firmware drivers;
FPGA Framework;
GPIO subsystem;
GPU drivers;
HID subsystem;
Microsoft Hyper-V drivers;
Hardware monitoring drivers;
CoreSight HW tracing drivers;
Intel Trace Hub HW tracing drivers;
I2C subsystem;
IIO subsystem;
IIO ADC drivers;
IIO Magnetometer sensors drivers;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
Input Device (Mouse) drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
MemoryStick subsystem;
Multifunction device drivers;
Intel Management Engine Interface driver;
Amazon Nitro Secure Module driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
MediaTek network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
x86 platform drivers;
i.MX PM domains;
System reset/shutdown drivers;
Power supply drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
Reset controller framework;
RPMSG subsystem;
Real Time Clock drivers;
S/390 drivers;
SCSI subsystem;
Xilinx SoC drivers;
SPI subsystem;
Media staging drivers;
Media Oriented Systems Transport (MOST) driver;
NVIDIA Tegra embedded controller (NVEC) staging driver;
Realtek RTL8723BS SDIO drivers;
VME bus staging drivers;
TCM subsystem;
TTY drivers;
USB DSL drivers;
Cadence USB3 driver;
ULPI bus;
USB core drivers;
DesignWare USB3 driver;
Faraday FOTG210 USB2 dual-role controller driver;
USB Gadget drivers;
USB Host Controller drivers;
USB ChaosKey driver;
Siemens ID Mouse USB driver;
IOWarrior USB driver;
LD Didactic USB driver;
LEGO USB Tower driver;
USS720 USB parallel port adapter driver;
MediaTek USB3 DRD driver;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C Port Controller Manager driver;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
vDPA drivers;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
Watchdog drivers;
Xen hypervisor drivers;
9P distributed file system;
AFS file system;
File systems infrastructure;
BTRFS file…

Record: USN-8917-1
Updated: 2026-11-06

OSVUSN-8918-1 No score

linux-azure, linux-azure-fde, linux-azure-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

NVDIMM (Non-Volatile Memory Device) drivers;
Handshake API;
ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Intel NPU Driver;
ACPI drivers;
Android drivers;
Serial ATA and Parallel ATA drivers;
Drivers core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
Bluetooth drivers;
Cdrom driver;
Character device driver;
Hardware random number generator core;
TPM device driver;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
DAX dirext access to differentiated memory framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
FireWire subsystem;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
Intel Stratix 10 firmware drivers;
FPGA Framework;
GPIO subsystem;
GPU drivers;
HID subsystem;
Microsoft Hyper-V drivers;
Hardware monitoring drivers;
CoreSight HW tracing drivers;
Intel Trace Hub HW tracing drivers;
I2C subsystem;
IIO subsystem;
IIO ADC drivers;
IIO Magnetometer sensors drivers;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
Input Device (Mouse) drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
MemoryStick subsystem;
Multifunction device drivers;
Intel Management Engine Interface driver;
Amazon Nitro Secure Module driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
MediaTek network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
x86 platform drivers;
i.MX PM domains;
System reset/shutdown drivers;
Power supply drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
Reset controller framework;
RPMSG subsystem;
Real Time Clock drivers;
S/390 drivers;
SCSI subsystem;
Xilinx SoC drivers;
SPI subsystem;
Media staging drivers;
Media Oriented Systems Transport (MOST) driver;
NVIDIA Tegra embedded controller (NVEC) staging driver;
Realtek RTL8723BS SDIO drivers;
VME bus staging drivers;
TCM subsystem;
TTY drivers;
USB DSL drivers;
Cadence USB3 driver;
ULPI bus;
USB core drivers;
DesignWare USB3 driver;
Faraday FOTG210 USB2 dual-role controller driver;
USB Gadget drivers;
USB Host Controller drivers;
USB ChaosKey driver;
Siemens ID Mouse USB driver;
IOWarrior USB driver;
LD Didactic USB driver;
LEGO USB Tower driver;
USS720 USB parallel port adapter driver;
MediaTek USB3 DRD driver;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C Port Controller Manager driver;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
vDPA drivers;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
Watchdog drivers;
Xen hypervisor drivers;
9P distributed file system;
AFS file system;
File systems infrastructure;
BTRFS file…

Record: USN-8918-1
Updated: 2026-11-06

Affected products

linux

Affected packages

Affected packages
Package	Affected	Fixed
`kernel` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-64k` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-64k-core` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-64k-debug` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-64k-debug-core` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-64k-debug-devel` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-64k-debug-devel-matched` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-64k-debug-modules` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-64k-debug-modules-core` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-64k-debug-modules-extra` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-64k-devel` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-64k-devel-matched` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-64k-modules` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-64k-modules-core` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-64k-modules-extra` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-abi-stablelists` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-core` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-cross-headers` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-debug` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-debug-core` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-debug-devel` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-debug-devel-matched` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-debug-modules` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-debug-modules-core` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-debug-modules-extra` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-debug-uki-virt` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-devel` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-devel-matched` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-doc` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-headers` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-modules` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-modules-core` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-modules-extra` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-modules-extra-matched` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-rt` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-rt-64k` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-rt-64k-core` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-rt-64k-debug` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-rt-64k-debug-core` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-rt-64k-debug-devel` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-rt-64k-debug-modules` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-rt-64k-debug-modules-core` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-rt-64k-debug-modules-extra` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-rt-64k-devel` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-rt-64k-modules` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-rt-64k-modules-core` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-rt-64k-modules-extra` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-rt-core` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-rt-debug` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-rt-debug-core` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-rt-debug-devel` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-rt-debug-modules` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-rt-debug-modules-core` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-rt-debug-modules-extra` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-rt-devel` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-rt-modules` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-rt-modules-core` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-rt-modules-extra` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-tools` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-tools-libs` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-tools-libs-devel` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-uki-virt` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-uki-virt-addons` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-zfcpdump` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-zfcpdump-core` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-zfcpdump-devel` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-zfcpdump-devel-matched` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-zfcpdump-modules` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel-zfcpdump-modules-core` AlmaLinux:10 From an advisory covering 11 CVEs	before 6.12.0-211.65.1.el10_2	6.12.0-211.65.1.el10_2
`kernel` Azure Linux:3	before 6.6.145.2-1	6.6.145.2-1
`linux-lts` Alpaquita:23	6.1.182-r0 up to 6.1.189-r0	6.1.189-r0
`linux-lts` Alpaquita:25	6.12.95-r0 up to 6.12.103-r0	6.12.103-r0
`linux-lts` Alpaquita:stream	6.18.38-r0 up to 6.18.43-r0	6.18.43-r0
`Kernel` Linux	5.18.0 up to 6.1.183, 6.2.0 up to 6.6.145, 6.7.0 up to 6.12.97, 6.13.0 up to 6.18.39, 6.19.0 up to 7.1.4	6.1.1836.6.1456.12.976.18.397.1.4
`linux` Debian:12	before 6.1.187-1, plus listed versions 6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1 Show 45 moreShow less 6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.170-16.1.170-26.1.170-36.1.172-16.1.174-16.1.176-16.1.177-16.1.180-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-1	6.1.187-1
`linux` Debian:13	before 6.12.100-1, plus listed versions 6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-1 Show 26 moreShow less 6.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-1	6.12.100-1
`linux` Debian:14	before 7.1.4-1, plus listed versions 6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1 Show 45 moreShow less 6.12.113-16.12.115-16.12.115-26.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp1	7.1.4-1
`linux-6.12` Debian:12	before 6.12.100-1~deb12u1	6.12.100-1~deb12u1
`kernel-modules-internal` Red Hat:shadow_migration_toolkit:10::el10 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-64k-debug-devel` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-64k-debug-devel-matched` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-64k-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-64k-devel` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-64k-devel-matched` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-debug-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-debug-devel` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-debug-devel-matched` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-devel` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-devel-matched` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-doc` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-rt-64k-debug-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-rt-64k-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-rt-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-tools-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-zfcpdump-devel-matched` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`libperf-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`perf` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`perf-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`python3-perf` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`python3-perf-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`rtla` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`rv` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-64k` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-64k-core` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-64k-debug` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-64k-debug-core` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-64k-debug-modules` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-64k-debug-modules-core` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-64k-debug-modules-extra` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-64k-modules` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-64k-modules-core` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-64k-modules-extra` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-abi-stablelists` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-core` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-debug` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-debug-core` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-debug-modules` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-debug-modules-core` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-debug-modules-extra` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-debug-uki-virt` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-modules` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-modules-core` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-modules-extra` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-modules-extra-matched` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-tools` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-tools-libs` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-uki-virt` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-uki-virt-addons` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-zfcpdump` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-zfcpdump-core` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-zfcpdump-modules` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-zfcpdump-modules-core` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-zfcpdump-modules-extra` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-tools-libs-devel` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`libperf` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel-modules-internal` Red Hat:enterprise_linux:10.2 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel` Rocky Linux:10 From an advisory covering 11 CVEs	before 0:6.12.0-211.65.1.el10_2	0:6.12.0-211.65.1.el10_2
`kernel` Rocky Linux:9 From an advisory covering 13 CVEs	before 0:5.14.0-687.57.1.el9_8	0:5.14.0-687.57.1.el9_8
`linux` Root:Ubuntu:22.04	before 5.15.0-203.213.aikido.119	5.15.0-203.213.aikido.119
`rootio-linux` Root:Ubuntu:22.04	before 5.15.0-203.213.aikido.119	5.15.0-203.213.aikido.119
`kernel-obs-build` SUSE:Linux Micro Extras 6.2 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-syms` SUSE:Linux Micro Extras 6.2 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-64kb` SUSE:Linux Micro 6.2 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-default` SUSE:Linux Micro 6.2 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-default-base` SUSE:Linux Micro 6.2 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1.160000.2.23	6.12.0-160000.38.1.160000.2.23
`kernel-rt` SUSE:Linux Micro 6.2 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-source` SUSE:Linux Micro 6.2 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-64kb` SUSE:Linux Enterprise Server 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-azure` SUSE:Linux Enterprise Server 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-default` SUSE:Linux Enterprise Server 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-default-base` SUSE:Linux Enterprise Server 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1.160000.2.23	6.12.0-160000.38.1.160000.2.23
`kernel-docs` SUSE:Linux Enterprise Server 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-kvmsmall` SUSE:Linux Enterprise Server 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-obs-qa` SUSE:Linux Enterprise Server 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-source` SUSE:Linux Enterprise Server 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-syms` SUSE:Linux Enterprise Server 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-64kb` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-azure` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-default` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-default-base` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1.160000.2.23	6.12.0-160000.38.1.160000.2.23
`kernel-docs` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-kvmsmall` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-obs-qa` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-source` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-default` SUSE:Linux Micro 6.1 From an advisory covering 473 CVEs	before 6.4.0-159998.53.1	6.4.0-159998.53.1
`kernel-default-base` SUSE:Linux Micro 6.1 From an advisory covering 473 CVEs	before 6.4.0-159998.53.1.159998.21.38	6.4.0-159998.53.1.159998.21.38
`kernel-kvmsmall` SUSE:Linux Micro 6.1 From an advisory covering 473 CVEs	before 6.4.0-159998.53.1	6.4.0-159998.53.1
`kernel-source` SUSE:Linux Micro 6.1 From an advisory covering 473 CVEs	before 6.4.0-159998.53.1	6.4.0-159998.53.1
`podman` SUSE:Linux Micro 6.2 From an advisory covering 479 CVEs	before 5.4.2-160000.6.1	5.4.2-160000.6.1
`kernel-rt` SUSE:Linux Micro 6.1 From an advisory covering 479 CVEs	before 6.4.0-159998.53.1	6.4.0-159998.53.1
`kernel-source-rt` SUSE:Linux Micro 6.1 From an advisory covering 479 CVEs	before 6.4.0-159998.53.1	6.4.0-159998.53.1
`kernel-default` SUSE:Linux Micro 6.0 From an advisory covering 473 CVEs	before 6.4.0-159998.53.1	6.4.0-159998.53.1
`kernel-default-base` SUSE:Linux Micro 6.0 From an advisory covering 473 CVEs	before 6.4.0-159998.53.1.159998.21.38	6.4.0-159998.53.1.159998.21.38
`kernel-kvmsmall` SUSE:Linux Micro 6.0 From an advisory covering 473 CVEs	before 6.4.0-159998.53.1	6.4.0-159998.53.1
`kernel-source` SUSE:Linux Micro 6.0 From an advisory covering 473 CVEs	before 6.4.0-159998.53.1	6.4.0-159998.53.1
`kernel-rt` SUSE:Linux Micro 6.0 From an advisory covering 479 CVEs	before 6.4.0-159998.53.1	6.4.0-159998.53.1
`kernel-source-rt` SUSE:Linux Micro 6.0 From an advisory covering 479 CVEs	before 6.4.0-159998.53.1	6.4.0-159998.53.1
`kernel-default` SUSE:Linux Micro 6.0 From an advisory covering 1056 CVEs	before 6.4.0-159998.55.1	6.4.0-159998.55.1
`kernel-default-base` SUSE:Linux Micro 6.0 From an advisory covering 1056 CVEs	before 6.4.0-159998.55.1.159998.21.42	6.4.0-159998.55.1.159998.21.42
`kernel-kvmsmall` SUSE:Linux Micro 6.0 From an advisory covering 1056 CVEs	before 6.4.0-159998.55.1	6.4.0-159998.55.1
`kernel-source` SUSE:Linux Micro 6.0 From an advisory covering 1056 CVEs	before 6.4.0-159998.55.1	6.4.0-159998.55.1
`kernel-livepatch-SLE15-SP7-RT_Update_21` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 508 CVEs	before 1-150700.1.3.1	1-150700.1.3.1
`kernel-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 508 CVEs	before 6.4.0-150700.7.78.1	6.4.0-150700.7.78.1
`kernel-source-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 508 CVEs	before 6.4.0-150700.7.78.1	6.4.0-150700.7.78.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 508 CVEs	before 6.4.0-150700.7.78.1	6.4.0-150700.7.78.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 508 CVEs	before 6.4.0-150700.53.84.1	6.4.0-150700.53.84.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 508 CVEs	before 6.4.0-150700.53.84.1	6.4.0-150700.53.84.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 508 CVEs	before 6.4.0-150700.53.84.1.150700.17.47.1	6.4.0-150700.53.84.1.150700.17.47.1
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 508 CVEs	before 6.4.0-150700.53.84.1	6.4.0-150700.53.84.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 508 CVEs	before 6.4.0-150700.53.84.1	6.4.0-150700.53.84.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 508 CVEs	before 6.4.0-150700.53.84.1	6.4.0-150700.53.84.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 508 CVEs	before 6.4.0-150700.53.84.1	6.4.0-150700.53.84.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 508 CVEs	before 6.4.0-150700.53.84.1	6.4.0-150700.53.84.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 508 CVEs	before 6.4.0-150700.53.84.1	6.4.0-150700.53.84.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP7 From an advisory covering 508 CVEs	before 6.4.0-150700.53.84.1	6.4.0-150700.53.84.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 508 CVEs	before 6.4.0-150700.53.84.1	6.4.0-150700.53.84.1
`kernel-livepatch-SLE15-SP7_Update_22` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 508 CVEs	before 1-150700.15.3.1	1-150700.15.3.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7 From an advisory covering 508 CVEs	before 6.4.0-150700.53.84.1	6.4.0-150700.53.84.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP7 From an advisory covering 508 CVEs	before 6.4.0-150700.53.84.1	6.4.0-150700.53.84.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP7 From an advisory covering 508 CVEs	before 6.4.0-150700.53.84.1	6.4.0-150700.53.84.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 1077 CVEs	before 6.4.0-150700.53.90.1	6.4.0-150700.53.90.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 1077 CVEs	before 6.4.0-150700.53.90.1	6.4.0-150700.53.90.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 1077 CVEs	before 6.4.0-150700.53.90.1.150700.17.51.1	6.4.0-150700.53.90.1.150700.17.51.1
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 1077 CVEs	before 6.4.0-150700.53.90.1	6.4.0-150700.53.90.1
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-aws-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-aws-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less 5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1	None known
`linux-aws-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1	None known
`linux-azure-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less 5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2	None known
`linux-azure-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less 5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1	None known
`linux-azure-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1	None known
`linux-azure-fde` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less 5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1	None known
`linux-gcp-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less 5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3	None known
`linux-gcp-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less 5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1	None known
`linux-gcp-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41	None known
`linux-gke` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less 5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111	None known
`linux-gke-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less 5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1	None known
`linux-gkeop` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less 5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77	None known
`linux-gkeop-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 40 moreShow less 5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1	None known
`linux-hwe-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less 5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1	None known
`linux-hwe-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less 5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1	None known
`linux-hwe-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less 5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1	None known
`linux-intel-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19	None known
`linux-oem-5.10` Ubuntu:20.04:LTS	All versions, plus listed versions 5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17 Show 21 moreShow less 5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61	None known
`linux-oem-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21 Show 7 moreShow less 5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36	None known
`linux-oem-5.14` Ubuntu:20.04:LTS	All versions, plus listed versions 5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10 Show 30 moreShow less 5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67	None known
`linux-oem-5.6` Ubuntu:20.04:LTS	All versions, plus listed versions 5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13 Show 24 moreShow less 5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60	None known
`linux-oracle-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-oracle-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1 Show 7 moreShow less 5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1	None known
`linux-oracle-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1	None known
`linux-raspi2` Ubuntu:20.04:LTS	All versions, plus listed versions 5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6	None known
`linux-riscv` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34 Show 7 moreShow less 5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45	None known
`linux-riscv-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1 Show 8 moreShow less 5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35	None known
`linux-riscv-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1 Show 5 moreShow less 5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1	None known
`linux-allwinner-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1	None known
`linux-aws-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1 Show 5 moreShow less 5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1	None known
`linux-aws-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 9 moreShow less 6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1	None known
`linux-aws-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1 Show 9 moreShow less 6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1	None known
`linux-aws-6.8` Ubuntu:22.04:LTS	All versions, plus listed versions 6.8.0-1009.9~22.04.26.8.0-1010.10~22.04.26.8.0-1011.12~22.04.16.8.0-1013.14~22.04.16.8.0-1014.15~22.04.1 Show 41 moreShow less 6.8.0-1015.16~22.04.16.8.0-1016.17~22.04.26.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1023.25~22.04.16.8.0-1024.26~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1035.37~22.04.16.8.0-1036.38~22.04.16.8.0-1039.41~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.44~22.04.16.8.0-1043.45~22.04.16.8.0-1044.46~22.04.16.8.0-1045.47~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.16.8.0-1050.53~22.04.16.8.0-1051.54~22.04.16.8.0-1052.55~22.04.16.8.0-1053.56~22.04.16.8.0-1055.58~22.04.16.8.0-1057.60~22.04.16.8.0-1060.63~22.04.16.8.0-1061.64~22.04.16.8.0-1062.65~22.04.26.8.0-1063.66~22.04.16.8.0-1064.67~22.04.16.8.0-1065.68~22.04.16.8.0-1066.69~22.04.16.8.0-1069.74~22.04.1	None known
`linux-azure-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2	None known
`linux-azure-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 8 moreShow less 6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1	None known
`linux-azure-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1 Show 9 moreShow less 6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1	None known
`linux-azure-6.8` Ubuntu:22.04:LTS	All versions, plus listed versions 6.8.0-1008.8~22.04.16.8.0-1009.9~22.04.16.8.0-1010.10~22.04.16.8.0-1012.14~22.04.16.8.0-1013.15~22.04.1 Show 28 moreShow less 6.8.0-1014.16~22.04.16.8.0-1015.17~22.04.26.8.0-1017.20~22.04.16.8.0-1018.21~22.04.16.8.0-1020.23~22.04.16.8.0-1021.25~22.04.16.8.0-1025.30~22.04.16.8.0-1026.31~22.04.16.8.0-1027.32~22.04.16.8.0-1028.33~22.04.16.8.0-1029.34~22.04.16.8.0-1030.35~22.04.16.8.0-1031.36~22.04.16.8.0-1034.39~22.04.16.8.0-1036.42~22.04.16.8.0-1040.46~22.04.16.8.0-1041.47~22.04.16.8.0-1044.50~22.04.16.8.0-1051.57~22.04.16.8.0-1052.58~22.04.16.8.0-1059.65~22.04.16.8.0-1062.69~22.04.16.8.0-1063.71~22.04.16.8.0-1064.72~22.04.16.8.0-1065.73~22.04.16.8.0-1067.75~22.04.16.8.0-1068.76~22.04.16.8.0-1070.78~22.04.1	None known
`linux-azure-fde-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1	None known
`linux-azure-fde-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1 Show 5 moreShow less 6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1	None known
`linux-azure-fde-6.8` Ubuntu:22.04:LTS	All versions, plus listed versions 6.8.0-1041.48~22.04.16.8.0-1042.49~22.04.16.8.0-1044.51~22.04.16.8.0-1046.53~22.04.16.8.0-1053.60~22.04.1 Show 8 moreShow less 6.8.0-1058.65~22.04.16.8.0-1061.68~22.04.16.8.0-1062.69~22.04.16.8.0-1063.70~22.04.16.8.0-1064.71~22.04.16.8.0-1065.72~22.04.16.8.0-1066.73~22.04.16.8.0-1068.75~22.04.1	None known
`linux-gcp-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1020.22~22.04.25.19.0-1021.23~22.04.15.19.0-1022.24~22.04.15.19.0-1024.26~22.04.15.19.0-1025.27~22.04.15.19.0-1026.28~22.04.15.19.0-1027.29~22.04.15.19.0-1030.32~22.04.1	None known
`linux-gcp-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1009.9~22.04.36.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1011.11~22.04.36.2.0-1012.12~22.04.1 Show 7 moreShow less 6.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1016.18~22.04.16.2.0-1017.19~22.04.16.2.0-1018.20~22.04.16.2.0-1019.21~22.04.16.2.0-1021.23~22.04.1	None known
`linux-gcp-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1010.10~22.04.36.5.0-1011.11~22.04.16.5.0-1013.13~22.04.16.5.0-1014.14~22.04.16.5.0-1015.15~22.04.1 Show 8 moreShow less 6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1022.24~22.04.16.5.0-1023.25~22.04.16.5.0-1024.26~22.04.16.5.0-1025.27~22.04.1	None known
`linux-gcp-6.8` Ubuntu:22.04:LTS	All versions, plus listed versions 6.8.0-1010.11~22.04.16.8.0-1011.12~22.04.16.8.0-1012.13~22.04.16.8.0-1013.14~22.04.16.8.0-1014.16~22.04.1 Show 42 moreShow less 6.8.0-1015.17~22.04.16.8.0-1016.18~22.04.16.8.0-1017.19~22.04.16.8.0-1018.20~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1024.26~22.04.16.8.0-1025.27~22.04.16.8.0-1026.28~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1034.36~22.04.26.8.0-1036.38~22.04.16.8.0-1037.39~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.45~22.04.16.8.0-1043.46~22.04.16.8.0-1044.47~22.04.16.8.0-1045.48~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.26.8.0-1048.51~22.04.16.8.0-1052.55~22.04.16.8.0-1053.56~22.04.16.8.0-1054.57~22.04.16.8.0-1058.61~22.04.16.8.0-1060.63~22.04.16.8.0-1063.69~22.04.16.8.0-1064.72~22.04.16.8.0-1065.73~22.04.16.8.0-1066.74~22.04.16.8.0-1067.75~22.04.16.8.0-1069.77~22.04.16.8.0-1070.78~22.04.16.8.0-1073.81~22.04.1	None known
`linux-hwe-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-28.29~22.04.15.19.0-32.33~22.04.15.19.0-35.36~22.04.15.19.0-38.39~22.04.15.19.0-40.41~22.04.1 Show 6 moreShow less 5.19.0-41.42~22.04.15.19.0-42.43~22.04.15.19.0-43.44~22.04.15.19.0-45.46~22.04.15.19.0-46.47~22.04.15.19.0-50.50	None known
`linux-hwe-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-25.25~22.04.26.2.0-26.26~22.04.16.2.0-31.31~22.04.16.2.0-32.32~22.04.16.2.0-33.33~22.04.1 Show 5 moreShow less 6.2.0-34.34~22.04.16.2.0-35.35~22.04.16.2.0-36.37~22.04.16.2.0-37.38~22.04.16.2.0-39.40~22.04.1	None known
`linux-hwe-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-14.14~22.04.16.5.0-15.15~22.04.16.5.0-17.17~22.04.16.5.0-18.18~22.04.16.5.0-21.21~22.04.1 Show 8 moreShow less 6.5.0-25.25~22.04.16.5.0-26.26~22.04.16.5.0-27.28~22.04.16.5.0-28.29~22.04.16.5.0-35.35~22.04.16.5.0-41.41~22.04.26.5.0-44.44~22.04.16.5.0-45.45~22.04.1	None known
`linux-hwe-6.8` Ubuntu:22.04:LTS	All versions, plus listed versions 6.8.0-38.38~22.04.16.8.0-39.39~22.04.16.8.0-40.40~22.04.36.8.0-45.45~22.04.16.8.0-47.47~22.04.1 Show 32 moreShow less 6.8.0-48.48~22.04.16.8.0-49.49~22.04.16.8.0-50.51~22.04.16.8.0-51.52~22.04.16.8.0-52.53~22.04.16.8.0-57.59~22.04.16.8.0-58.60~22.04.16.8.0-59.61~22.04.16.8.0-60.63~22.04.16.8.0-64.67~22.04.16.8.0-65.68~22.04.16.8.0-78.78~22.04.16.8.0-79.79~22.04.16.8.0-83.83~22.04.16.8.0-84.84~22.04.16.8.0-85.85~22.04.16.8.0-86.87~22.04.16.8.0-87.88~22.04.16.8.0-88.89~22.04.26.8.0-90.91~22.04.16.8.0-94.96~22.04.16.8.0-100.100~22.04.16.8.0-101.101~22.04.16.8.0-106.106~22.04.16.8.0-107.107~22.04.16.8.0-110.110~22.04.16.8.0-111.111~22.04.16.8.0-117.117~22.04.16.8.0-124.124~22.04.16.8.0-134.134~22.04.16.8.0-136.136~22.04.16.8.0-138.138~22.04.1	None known
`linux-ibm-6.8` Ubuntu:22.04:LTS	All versions, plus listed versions 6.8.0-1008.8~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.16.8.0-1013.13~22.04.1 Show 37 moreShow less 6.8.0-1014.14~22.04.16.8.0-1015.15~22.04.16.8.0-1016.16~22.04.16.8.0-1017.17~22.04.16.8.0-1018.18~22.04.16.8.0-1019.19~22.04.16.8.0-1023.23~22.04.16.8.0-1024.24~22.04.16.8.0-1025.25~22.04.16.8.0-1026.26~22.04.16.8.0-1027.27~22.04.16.8.0-1028.28~22.04.16.8.0-1029.29~22.04.16.8.0-1030.30~22.04.16.8.0-1033.33~22.04.16.8.0-1036.36~22.04.16.8.0-1037.37~22.04.16.8.0-1038.38~22.04.16.8.0-1039.39~22.04.16.8.0-1040.40~22.04.16.8.0-1041.41~22.04.16.8.0-1042.42~22.04.16.8.0-1043.43~22.04.16.8.0-1044.44~22.04.16.8.0-1045.45~22.04.16.8.0-1049.49~22.04.16.8.0-1050.50~22.04.16.8.0-1051.51~22.04.16.8.0-1052.52~22.04.16.8.0-1055.56~22.04.16.8.0-1057.58~22.04.16.8.0-1060.61~22.04.16.8.0-1061.62~22.04.16.8.0-1062.63~22.04.16.8.0-1063.64~22.04.16.8.0-1066.67~22.04.16.8.0-1069.70~22.04.1	None known
`linux-intel-iot-realtime` Ubuntu:22.04:LTS	All versions, plus listed versions 5.15.0-1073.75	None known
`linux-lowlatency-hwe-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.1 Show 5 moreShow less 5.19.0-1024.25~22.04.15.19.0-1025.26~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1030.30	None known
`kernel-source` openSUSE:Tumbleweed From an advisory covering 351 CVEs	before 7.1.7-1.1	7.1.7-1.1
`dtb-aarch64` openSUSE:Leap 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-64kb` openSUSE:Leap 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-azure` openSUSE:Leap 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-default` openSUSE:Leap 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-default-base` openSUSE:Leap 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1.160000.2.22	6.12.0-160000.38.1.160000.2.22
`kernel-docs` openSUSE:Leap 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-kvmsmall` openSUSE:Leap 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-obs-build` openSUSE:Leap 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-obs-qa` openSUSE:Leap 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-rt` openSUSE:Leap 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-source` openSUSE:Leap 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-syms` openSUSE:Leap 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1
`kernel-zfcpdump` openSUSE:Leap 16.0 From an advisory covering 885 CVEs	before 6.12.0-160000.38.1	6.12.0-160000.38.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
PoC in GitHub	manalejandro/CVE-2026-64507	2026-10-15

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, aliases, references	CVE List, EUVD, OSV
Nov 6, 2026	affected	OSV
Nov 6, 2026	affected	OSV
Nov 4, 2026	affected, aliases, references	OSV
Nov 4, 2026	affected	OSV
Nov 3, 2026	facts	NVD, OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-64507 is a medium vulnerability (CVSS 5.7) in Linux, published July 25, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.23%, the 14th percentile. Fixed in kernel 6.6.145.2-1.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 347 package rows, 147 versions, 7,146 references and the rest of 26 source descriptions. The JSON record has them.