CVE-2024-26944

btrfs: zoned: fix use-after-free in do_zone_finish()

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

btrfs: zoned: fix use-after-free in do_zone_finish()

Shinichiro reported the following use-after-free triggered by the device replace operation in fstests btrfs/070.

BTRFS info (device nullb1): scrub: finished on devid 1 with status: 0

BUG: KASAN: slab-use-after-free in do_zone_finish+0x91a/0xb90 [btrfs] Read of size 8 at addr ffff8881543c8060 by task btrfs-cleaner/3494007

CPU: 0 PID: 3494007 Comm: btrfs-cleaner Tainted: G W 6.8.0-rc5-kts #1 Hardware name: Supermicro Super Server/X11SPi-TF, BIOS 3.3 02/21/2020 Call Trace: <TASK> dump_stack_lvl+0x5b/0x90 print_report+0xcf/0x670 ? __virt_addr_valid+0x200/0x3e0 kasan_report+0xd8/0x110 ? do_zone_finish+0x91a/0xb90 [btrfs] ? do_zone_finish+0x91a/0xb90 [btrfs] do_zone_finish+0x91a/0xb90 [btrfs] btrfs_delete_unused_bgs+0x5e1/0x1750 [btrfs] ? __pfx_btrfs_delete_unused_bgs+0x10/0x10 [btrfs] ? btrfs_put_root+0x2d/0x220 [btrfs] ? btrfs_clean_one_deleted_snapshot+0x299/0x430 [btrfs] cleaner_kthread+0x21e/0x380 [btrfs] ? __pfx_cleaner_kthread+0x10/0x10 [btrfs] kthread+0x2e3/0x3c0 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x31/0x70 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1b/0x30 </TASK>

Allocated by task 3493983: kasan_save_stack+0x33/0x60 kasan_save_track+0x14/0x30 __kasan_kmalloc+0xaa/0xb0 btrfs_alloc_device+0xb3/0x4e0 [btrfs] device_list_add.constprop.0+0x993/0x1630 [btrfs] btrfs_scan_one_device+0x219/0x3d0 [btrfs] btrfs_control_ioctl+0x26e/0x310 [btrfs] __x64_sys_ioctl+0x134/0x1b0 do_syscall_64+0x99/0x190 entry_SYSCALL_64_after_hwframe+0x6e/0x76

Freed by task 3494056: kasan_save_stack+0x33/0x60 kasan_save_track+0x14/0x30 kasan_save_free_info+0x3f/0x60 poison_slab_object+0x102/0x170 __kasan_slab_free+0x32/0x70 kfree+0x11b/0x320 btrfs_rm_dev_replace_free_srcdev+0xca/0x280 [btrfs] btrfs_dev_replace_finishing+0xd7e/0x14f0 [btrfs] btrfs_dev_replace_by_ioctl+0x1286/0x25a0 [btrfs] btrfs_ioctl+0xb27/0x57d0 [btrfs] __x64_sys_ioctl+0x134/0x1b0 do_syscall_64+0x99/0x190 entry_SYSCALL_64_after_hwframe+0x6e/0x76

The buggy address belongs to the object at ffff8881543c8000 which belongs to the cache kmalloc-1k of size 1024 The buggy address is located 96 bytes inside of freed 1024-byte region [ffff8881543c8000, ffff8881543c8400)

The buggy address belongs to the physical page: page:00000000fe2c1285 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1543c8 head:00000000fe2c1285 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 flags: 0x17ffffc0000840(slab|head|node=0|zone=2|lastcpupid=0x1fffff) page_type: 0xffffffff() raw: 0017ffffc0000840 ffff888100042dc0 ffffea0019e8f200 dead000000000002 raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 page dumped because: kasan: bad access detected

Memory state around the buggy address: ffff8881543c7f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffff8881543c7f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

ffff8881543c8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff8881543c8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff8881543c8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb

This UAF happens because we're accessing stale zone information of a already removed btrfs_device in do_zone_finish().

The sequence of events is as follows:

btrfs_dev_replace_start btrfs_scrub_dev btrfs_dev_replace_finishing btrfs_dev_replace_update_device_in_mapping_tree <-- devices replaced btrfs_rm_dev_replace_free_srcdev btrfs_free_device <-- device freed

cleaner_kthread btrfs_delete_unused_bgs btrfs_zone_finish do_zone_finish <-- refers the freed device

The reason for this is that we're using a ---truncated---

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.24%Up 0.2 points since May 1, 2024

What each source reports

CVE List Score used 7.8

btrfs: zoned: fix use-after-free in do_zone_finish()

In the Linux kernel, the following vulnerability has been resolved:

btrfs: zoned: fix use-after-free in do_zone_finish()

Shinichiro reported the following use-after-free triggered by the device replace operation in fstests btrfs/070.

BTRFS info (device nullb1): scrub: finished on devid 1 with status: 0

BUG: KASAN: slab-use-after-free in do_zone_finish+0x91a/0xb90 [btrfs] Read of size 8 at addr ffff8881543c8060 by task btrfs-cleaner/3494007

Memory state around the buggy address: ffff8881543c7f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffff8881543c7f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

ffff8881543c8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff8881543c8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff8881543c8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb

This UAF happens because we're accessing stale zone information of a already removed btrfs_device in do_zone_finish().

The sequence of events is as follows:

cleaner_kthread btrfs_delete_unused_bgs btrfs_zone_finish do_zone_finish <-- refers the freed device

The reason for this is that we're using a ---truncated---

Record: CVE-2024-26944
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

EUVDEUVD-2024-24206 7.8

In the Linux kernel, the following vulnerability has been resolved:

btrfs: zoned: fix use-after-free in do_zone_finish()

Shinichiro reported the following use-after-free triggered by the device replace operation in fstests btrfs/070.

BTRFS info (device nullb1): scrub: finished on devid 1 with status: 0

BUG: KASAN: slab-use-after-free in do_zone_finish+0x91a/0xb90 [btrfs] Read of size 8 at addr ffff8881543c8060 by task btrfs-cleaner/3494007

Memory state around the buggy address: ffff8881543c7f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffff8881543c7f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

ffff8881543c8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff8881543c8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff8881543c8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb

This UAF happens because we're accessing stale zone information of a already removed btrfs_device in do_zone_finish().

The sequence of events is as follows:

cleaner_kthread btrfs_delete_unused_bgs btrfs_zone_finish do_zone_finish <-- refers the freed device

The reason for this is that we're using a ---truncated---

Record: EUVD-2024-24206
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-phc9-mf56-r5f6 7.8

In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix use-after...

In the Linux kernel, the following vulnerability has been resolved:

btrfs: zoned: fix use-after-free in do_zone_finish()

Shinichiro reported the following use-after-free triggered by the device replace operation in fstests btrfs/070.

BTRFS info (device nullb1): scrub: finished on devid 1 with status: 0

BUG: KASAN: slab-use-after-free in do_zone_finish+0x91a/0xb90 [btrfs] Read of size 8 at addr ffff8881543c8060 by task btrfs-cleaner/3494007

Memory state around the buggy address: ffff8881543c7f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffff8881543c7f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

ffff8881543c8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff8881543c8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff8881543c8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb

This UAF happens because we're accessing stale zone information of a already removed btrfs_device in do_zone_finish().

The sequence of events is as follows:

cleaner_kthread btrfs_delete_unused_bgs btrfs_zone_finish do_zone_finish <-- refers the freed device

The reason for this is that we're using a ---truncated---

Record: GHSA-phc9-mf56-r5f6
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-416
Updated: 2026-11-02

NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

btrfs: zoned: fix use-after-free in do_zone_finish()

Shinichiro reported the following use-after-free triggered by the device replace operation in fstests btrfs/070.

BTRFS info (device nullb1): scrub: finished on devid 1 with status: 0

BUG: KASAN: slab-use-after-free in do_zone_finish+0x91a/0xb90 [btrfs] Read of size 8 at addr ffff8881543c8060 by task btrfs-cleaner/3494007

Memory state around the buggy address: ffff8881543c7f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffff8881543c7f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

ffff8881543c8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff8881543c8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff8881543c8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb

This UAF happens because we're accessing stale zone information of a already removed btrfs_device in do_zone_finish().

The sequence of events is as follows:

cleaner_kthread btrfs_delete_unused_bgs btrfs_zone_finish do_zone_finish <-- refers the freed device

The reason for this is that we're using a ---truncated---

Record: CVE-2024-26944
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-416
Updated: 2026-11-02

OSVAZL-55497 7.8

CVE-2024-26944 affecting package kernel 6.6.161.1-1

In the Linux kernel, the following vulnerability has been resolved:

btrfs: zoned: fix use-after-free in do_zone_finish()

Shinichiro reported the following use-after-free triggered by the device replace operation in fstests btrfs/070.

BTRFS info (device nullb1): scrub: finished on devid 1 with status: 0

BUG: KASAN: slab-use-after-free in do_zone_finish+0x91a/0xb90 [btrfs] Read of size 8 at addr ffff8881543c8060 by task btrfs-cleaner/3494007

Memory state around the buggy address: ffff8881543c7f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffff8881543c7f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

ffff8881543c8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff8881543c8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff8881543c8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb

This UAF happens because we're accessing stale zone information of a already removed btrfs_device in do_zone_finish().

The sequence of events is as follows:

cleaner_kthread btrfs_delete_unused_bgs btrfs_zone_finish do_zone_finish <-- refers the freed device

The reason for this is that we're using a ---truncated---

Record: AZL-55497
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-05

OSVBELL-CVE-2024-26944 7.8

Record: BELL-CVE-2024-26944
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 25 moreShow less

OSV 7.8

btrfs: zoned: fix use-after-free in do_zone_finish()

In the Linux kernel, the following vulnerability has been resolved:

btrfs: zoned: fix use-after-free in do_zone_finish()

Shinichiro reported the following use-after-free triggered by the device replace operation in fstests btrfs/070.

BTRFS info (device nullb1): scrub: finished on devid 1 with status: 0

BUG: KASAN: slab-use-after-free in do_zone_finish+0x91a/0xb90 [btrfs] Read of size 8 at addr ffff8881543c8060 by task btrfs-cleaner/3494007

Memory state around the buggy address: ffff8881543c7f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffff8881543c7f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

ffff8881543c8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff8881543c8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff8881543c8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb

This UAF happens because we're accessing stale zone information of a already removed btrfs_device in do_zone_finish().

The sequence of events is as follows:

cleaner_kthread btrfs_delete_unused_bgs btrfs_zone_finish do_zone_finish <-- refers the freed device

The reason for this is that we're using a ---truncated---

Record: CVE-2024-26944
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2024-26944 7.8

In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix use-after-free in do_zone_finish() Shinichiro reported the following use-after-free triggered by the device replace operation in fstests btrfs/070. BTRFS info (device nullb1): scrub: finished on devid 1 with status: 0 ================================================================== BUG: KASAN: slab-use-after-free in do_zone_finish+0x91a/0xb90 [btrfs] Read of size 8 at addr ffff8881543c8060 by task btrfs-cleaner/3494007 CPU: 0 PID: 3494007 Comm: btrfs-cleaner Tainted: G W 6.8.0-rc5-kts #1 Hardware name: Supermicro Super Server/X11SPi-TF, BIOS 3.3 02/21/2020 Call Trace: <TASK> dump_stack_lvl+0x5b/0x90 print_report+0xcf/0x670 ? __virt_addr_valid+0x200/0x3e0 kasan_report+0xd8/0x110 ? do_zone_finish+0x91a/0xb90 [btrfs] ? do_zone_finish+0x91a/0xb90 [btrfs] do_zone_finish+0x91a/0xb90 [btrfs] btrfs_delete_unused_bgs+0x5e1/0x1750 [btrfs] ? __pfx_btrfs_delete_unused_bgs+0x10/0x10 [btrfs] ? btrfs_put_root+0x2d/0x220 [btrfs] ? btrfs_clean_one_deleted_snapshot+0x299/0x430 [btrfs] cleaner_kthread+0x21e/0x380 [btrfs] ? __pfx_cleaner_kthread+0x10/0x10 [btrfs] kthread+0x2e3/0x3c0 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x31/0x70 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1b/0x30 </TASK> Allocated by task 3493983: kasan_save_stack+0x33/0x60 kasan_save_track+0x14/0x30 __kasan_kmalloc+0xaa/0xb0 btrfs_alloc_device+0xb3/0x4e0 [btrfs] device_list_add.constprop.0+0x993/0x1630 [btrfs] btrfs_scan_one_device+0x219/0x3d0 [btrfs] btrfs_control_ioctl+0x26e/0x310 [btrfs] __x64_sys_ioctl+0x134/0x1b0 do_syscall_64+0x99/0x190 entry_SYSCALL_64_after_hwframe+0x6e/0x76 Freed by task 3494056: kasan_save_stack+0x33/0x60 kasan_save_track+0x14/0x30 kasan_save_free_info+0x3f/0x60 poison_slab_object+0x102/0x170 __kasan_slab_free+0x32/0x70 kfree+0x11b/0x320 btrfs_rm_dev_replace_free_srcdev+0xca/0x280 [btrfs] btrfs_dev_replace_finishing+0xd7e/0x14f0 [btrfs] btrfs_dev_replace_by_ioctl+0x1286/0x25a0 [btrfs] btrfs_ioctl+0xb27/0x57d0 [btrfs] __x64_sys_ioctl+0x134/0x1b0 do_syscall_64+0x99/0x190 entry_SYSCALL_64_after_hwframe+0x6e/0x76 The buggy address belongs to the object at ffff8881543c8000 which belongs to the cache kmalloc-1k of size 1024 The buggy address is located 96 bytes inside of freed 1024-byte region [ffff8881543c8000, ffff8881543c8400) The buggy address belongs to the physical page: page:00000000fe2c1285 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1543c8 head:00000000fe2c1285 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 flags: 0x17ffffc0000840(slab|head|node=0|zone=2|lastcpupid=0x1fffff) page_type: 0xffffffff() raw: 0017ffffc0000840 ffff888100042dc0 ffffea0019e8f200 dead000000000002 raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 page dumped because: kasan: bad access detected Memory state around the buggy address: ffff8881543c7f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffff8881543c7f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 >ffff8881543c8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff8881543c8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff8881543c8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb This UAF happens because we're accessing stale zone information of a already removed btrfs_device in do_zone_finish(). The sequence of events is as follows: btrfs_dev_replace_start btrfs_scrub_dev btrfs_dev_replace_finishing btrfs_dev_replace_update_device_in_mapping_tree <-- devices replaced btrfs_rm_dev_replace_free_srcdev btrfs_free_device <-- device freed cleaner_kthread btrfs_delete_unused_bgs btrfs_zone_finish do_zone_finish <-- refers the freed device The reason for this is that we're using a ---truncated---

Record: DEBIAN-CVE-2024-26944
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2024-2446 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

btrfs: zoned: fix use-after-free in do_zone_finish()

Shinichiro reported the following use-after-free triggered by the device replace operation in fstests btrfs/070.

BTRFS info (device nullb1): scrub: finished on devid 1 with status: 0

BUG: KASAN: slab-use-after-free in do_zone_finish+0x91a/0xb90 [btrfs] Read of size 8 at addr ffff8881543c8060 by task btrfs-cleaner/3494007

Memory state around the buggy address: ffff8881543c7f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffff8881543c7f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 >ffff8881543c8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff8881543c8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff8881543c8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb

This UAF happens because we're accessing stale zone information of a already removed btrfs_device in do_zone_finish().

The sequence of events is as follows:

cleaner_kthread btrfs_delete_unused_bgs …

Record: OESA-2024-2446
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVROOT-OS-DEBIAN-12-CVE-2024-26944 7.8

CVE-2024-26944 in linux - Patched by Root

Root has patched CVE-2024-26944 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record: ROOT-OS-DEBIAN-12-CVE-2024-26944
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2024-26944 7.8

Record: UBUNTU-CVE-2024-26944
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVSUSE-SU-2024:2802-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-47210: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225601, bsc#1225600).
CVE-2023-52435: net: prevent mss overflow in skb_segment() (bsc#1220138).
CVE-2023-52751: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489).
CVE-2023-52775: net/smc: avoid data corruption caused by decline (bsc#1225088).
CVE-2024-26615: net/smc: fix illegal rmb_desc access in SMC-D connection dump (bsc#1220942).
CVE-2024-26623: pds_core: Prevent race issues involving the adminq (bsc#1221057).
CVE-2024-26633: ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (bsc#1221647).
CVE-2024-26635: llc: Drop support for ETH_P_TR_802_2 (bsc#1221656).
CVE-2024-26636: llc: make llc_ui_sendmsg() more robust against bonding changes (bsc#1221659).
CVE-2024-26641: ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() (bsc#1221654).
CVE-2024-26663: tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() (bsc#1222326).
CVE-2024-26665: tunnels: fix out of bounds access when building IPv6 PMTU error (bsc#1222328).
CVE-2024-26691: KVM: arm64: Fix circular locking dependency (bsc#1222463).
CVE-2024-26734: devlink: fix possible use-after-free and memory leaks in devlink_init() (bsc#1222438).
CVE-2024-26785: iommufd: Fix protection fault in iommufd_test_syz_conv_iova (bsc#1222779).
CVE-2024-26826: mptcp: fix data re-injection from stale subflow (bsc#1223010).
CVE-2024-26863: hsr: Fix uninit-value access in hsr_get_node() (bsc#1223021).
CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
CVE-2024-27012: netfilter: nf_tables: restore set elements when delete set fails (bsc#1223804).
CVE-2024-27015: netfilter: flowtable: incorrect pppoe tuple (bsc#1223806).
CVE-2024-27016: netfilter: flowtable: validate pppoe header (bsc#1223807).
CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (bsc#1223813)
CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
CVE-2024-27025: nbd: null check for nla_nest_start (bsc#1223778)
CVE-2024-27064: netfilter: nf_tables: Fix a memory leak in nf_tables_updchain (bsc#1223740).
CVE-2024-27065: netfilter: nf_tables: do not compare internal table flags on updates (bsc#1223836).
CVE-2024-27402: phonet/pep: fix racy skb_queue_empty() use (bsc#1224414).
CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
CVE-2024-35805: dm snapshot: fix lockup in dm_exception_table_exit (bsc#1224743).
CVE-2024-35853: mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (bsc#1224604).
CVE-2024-35854: Fixed possible use-after-free during rehash (bsc#1224636).
CVE-2024-35890: gro: fix ownership transfer (bsc#1224516).
CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
CVE-2024-35942: pmdomain: imx8mp-blk-ctrl: imx8mp_blk: Add fdcc clock to hdmimix domain (bsc#1224589).
CVE-2024-36003: ice: fix LAG and VF lock dependency in ice_reset_vf() (bsc#1224544).
CVE-2024-36004: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (bsc#1224545)
CVE-2024-36901: ipv6: prevent NULL dereference in ip6_output() (bsc#1225711)
CVE-2024-36902: ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (bsc#1225719).
CVE-2024-36909: Drivers: hv: vmbus: Do not free ring buffers that couldn't be re-encrypted (bsc#1225744).
CVE-2024-36910: uio_hv_generic: Do not free decrypted memory (bsc#1225717).
CVE-2024-36911: hv_netvsc: Do not free decrypted memory…

Record: SUSE-SU-2024:2802-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2896-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (bsc#1223813)
CVE-2024-40948: mm/page_table_check: fix crash on ZONE_DEVICE (bsc#1227801). -…

Record: SUSE-SU-2024:2896-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2973-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
CVE-2023-38417: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225600).
CVE-2023-47210: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225601).
CVE-2023-52435: net: prevent mss overflow in skb_segment() (bsc#1220138).
CVE-2023-52458: Fixed check that partition length needs to be aligned with block size (bsc#1220428).
CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
CVE-2023-52631: Fixed an NULL dereference bug (bsc#1222264 CVE-2023-52631).
CVE-2023-52640: Fixed out-of-bounds in ntfs_listxattr (bsc#1222301).
CVE-2023-52641: Fixed NULL ptr dereference checking at the end of attr_allocate_frame() (bsc#1222303)
CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
CVE-2023-52659: Fixed to pfn_to_kaddr() not treated as a 64-bit type (bsc#1224442)
CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
CVE-2023-52699: sysv: don't call sb_bread() with pointers_lock held (bsc#1224659).
CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
CVE-2023-52751: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489).
CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
CVE-2023-52771: Fixed delete_endpoint() vs parent unregistration race (bsc#1225007).
CVE-2023-52772: Fixed use-after-free in unix_stream_read_actor() (bsc#1224989).
CVE-2023-52775: net/smc: avoid data corruption caused by decline (bsc#1225088).
CVE-2023-52786: ext4: fix racy may inline data check in dio write (bsc#1224939).
CVE-2023-52787: blk-mq: make sure active queue usage is held for bio_integrity_prep() (bsc#1225105).
CVE-2023-52837: nbd: fix uaf in nbd_open (bsc#1224935).
CVE-2023-52843: llc: verify mac len before reading mac header (bsc#1224951).
CVE-2023-52845: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (bsc#1225585).
CVE-2023-52855: usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency (bsc#1225583).
CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
CVE-2023-52875: Add check for mtk_alloc_clk_data (bsc#1225096).
CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
CVE-2023-6238: Fixed kcalloc() arguments order (bsc#1217384).
CVE-2024-21823: Fixed safety flag to struct ends (bsc#1223625).
CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
CVE-2024-26615: net/smc: fix illegal rmb_desc access in SMC-D connection dump (bsc#1220942).
CVE-2024-26623: pds_core: Prevent race issues involving the adminq (bsc#1221057).
CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086) -…

Record: SUSE-SU-2024:2973-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3194-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
CVE-2023-52489: Fix race in accessing memory_section->usage (bsc#1221326).
CVE-2024-43821: Fix a possible null pointer dereference (bsc#1229315).
CVE-2024-43911: Fix NULL dereference at band check in starting tx ba session (bsc#1229827).
CVE-2024-42277: Avoid NULL deref in sprd_iommu_hw_en (bsc#1229409).
CVE-2024-43880: Put back removed metod in struct objagg_ops (bsc#1229481).
CVE-2024-43899: Fix null pointer deref in dcn20_resource.c (bsc#1229754).
CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)
CVE-2024-43866: Always drain health in shutdown callback (bsc#1229495).
CVE-2024-26812: Struct virqfd kABI workaround (bsc#1222808).
CVE-2024-27010: Fix mirred deadlock on device recursion (bsc#1223720).
CVE-2024-36270: Fix reference in patches.suse/netfilter-tproxy-bail-out-if-IP-has-been-disabled-on.patch (bsc#1226798)
CVE-2024-36881: Reset ptes when close() for wr-protected ones (bsc#1225718).
CVE-2024-42316: Fix div-by-zero in vmpressure_calc_level() (bsc#1229353).
CVE-2024-43855: Fix deadlock between mddev_suspend and flush bio (bsc#1229342,).
CVE-2024-43864: Fix CT entry update leaks of modify header context (bsc#1229496)
CVE-2024-26631: Fix data-race in ipv6_mc_down / mld_ifc_work (bsc#1221630).
CVE-2024-42109: Unconditionally flush pending work before notifier (bsc#1228505)
CVE-2024-41084: Avoid null pointer dereference in region lookup (bsc#1228472)
CVE-2024-40905: Fix possible race in __fib6_drop_pcpu_from() (bsc#1227761)
CVE-2024-39489: Fix memleak in seg6_hmac_init_algo (bsc#1227623)
CVE-2024-36489: Fix missing memory barrier in tls_init (bsc#1226874)
CVE-2024-27079: Add kABI workaround patch (bsc#1223742).
CVE-2024-41020: Fix fcntl/close race recovery compat path (bsc#1228427).
CVE-2024-35897: Discard table flag update with pending basechain deletion (bsc#1224510).
CVE-2024-27403: Restore const specifier in flow_offload_route_init() (bsc#1224415).
CVE-2024-27011: Fix memleak in map from abort path (bsc#1223803).
CVE-2024-26668: Reject configurations that cause integer overflow (bsc#1222335).
CVE-2024-26835: Set dormant flag on hook register failure (bsc#1222967).
CVE-2024-26808: Handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
CVE-2024-26809: Release elements in clone only from destroy path (bsc#1222633).
CVE-2023-52581: Fix memleak when more than 255 elements expired (bsc#1220877).
CVE-2024-43837: Fix updating attached freplace prog in prog_array map (bsc#1229297).
CVE-2024-35939: Fixed leak pages on dma_set_decrypted() failure (bsc#1224535).
CVE-2024-42291: Add a per-VF limit on number of FDIR filters (bsc#1229374).
CVE-2024-42268: Fix missing lock on sync reset reload (bsc#1229391).
CVE-2024-43834: Fix invalid wait context of page_pool_destroy() (bsc#1229314)
CVE-2024-27433: Fix an error handling path in clk_mt8135_apmixed_probe() (bsc#1224711).
CVE-2024-36286: Acquire rcu_read_lock() in instance_destroy_rcu() (bsc#1226801)
CVE-2024-26851: Add protection for bmp length out of range (bsc#1223074)
CVE-2024-40920: Fix suspicious rcu usage in br_mst_set_state (bsc#1227781).
CVE-2024-40921: Pass vlan group directly to br_mst_vlan_set_state (bsc#1227784).
CVE-2024-36979: Fix vlan use-after-free (bsc#1226604).
CVE-2024-26590: Fix inconsistent per-file compression format (bsc#1220252,).
CVE-2023-52859: Fix use-after-free when register pmu fails (bsc#1225582).
CVE-2024-42270: Fix null-ptr-deref in iptable_nat_table_init() (bsc#1229404)
CVE-2024-42269: Fix potential null-ptr-deref in ip6table_nat_table_init() (bsc#1229402)
CVE-2024-42284: Return non-zero value from tipc_udp_addr2str() on error (bsc#1229382)
CVE-2024-42283: Initialize all fields in dumped nexthops (bsc#1229383) -…

Record: SUSE-SU-2024:3194-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3383-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-43911: wifi: mac80211: fix NULL dereference at band check in starting tx ba session (bsc#1229827).
CVE-2024-43899: drm/amd/display: Fix null pointer deref in dcn20_resource.c (bsc#1229754).
CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)
CVE-2024-43880: kabi: lib: objagg: Put back removed metod in struct objagg_ops (bsc#1229481).
CVE-2024-43866: net/mlx5: Always drain health in shutdown callback (bsc#1229495).
CVE-2024-43864: net/mlx5e: Fix CT entry update leaks of modify header context (bsc#1229496).
CVE-2024-43855: md: fix deadlock between mddev_suspend and flush bio (bsc#1229342).
CVE-2024-43854: block: initialize integrity buffer to zero before writing it to media (bsc#1229345)
CVE-2024-43850: soc: qcom: icc-bwmon: Fix refcount imbalance seen during bwmon_remove (bsc#1229316).
CVE-2024-43839: bna: adjust 'name' buf size of bna_tcb and bna_ccb structures (bsc#1229301).
CVE-2024-43837: bpf: Fix updating attached freplace prog in prog_array map (bsc#1229297).
CVE-2024-43834: xdp: fix invalid wait context of page_pool_destroy() (bsc#1229314)
CVE-2024-43831: media: mediatek: vcodec: Handle invalid decoder vsi (bsc#1229309).
CVE-2024-43821: scsi: lpfc: Fix a possible null pointer dereference (bsc#1229315).
CVE-2024-42322: ipvs: properly dereference pe in ip_vs_add_service (bsc#1229347)
CVE-2024-42318: landlock: Do not lose track of restrictions on cred_transfer (bsc#1229351).
CVE-2024-42316: mm/mglru: fix div-by-zero in vmpressure_calc_level() (bsc#1229353).
CVE-2024-42312: sysctl: always initialize i_uid/i_gid (bsc#1229357)
CVE-2024-42308: Update DRM patch reference (bsc#1229411)
CVE-2024-42301: dev/parport: fix the array out-of-bounds risk (bsc#1229407).
CVE-2024-42295: nilfs2: handle inconsistent state in nilfs_btnode_create_block() (bsc#1229370).
CVE-2024-42291: ice: Add a per-VF limit on number of FDIR filters (bsc#1229374).
CVE-2024-42290: irqchip/imx-irqsteer: Handle runtime power management correctly (bsc#1229379).
CVE-2024-42284: tipc: Return non-zero value from tipc_udp_addr2str() on error (bsc#1229382)
CVE-2024-42283: net: nexthop: Initialize all fields in dumped nexthops (bsc#1229383)
CVE-2024-42281: bpf: Fix a segment issue when downgrading gso_size (bsc#1229386).
CVE-2024-42277: iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en (bsc#1229409).
CVE-2024-42270: netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init() (bsc#1229404).
CVE-2024-42269: netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init() (bsc#1229402).
CVE-2024-42268: net/mlx5: Fix missing lock on sync reset reload (bsc#1229391).
CVE-2024-42247: wireguard: allowedips: avoid unaligned 64-bit memory accesses (bsc#1228988).
CVE-2024-42246: net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (bsc#1228989).
CVE-2024-42245: Revert 'sched/fair: Make sure to try to detach at least one movable task' (bsc#1228978).
CVE-2024-42241: mm/shmem: disable PMD-sized page cache if needed (bsc#1228986).
CVE-2024-42224: net: dsa: mv88e6xxx: Correct check for empty list (bsc#1228723).
CVE-2024-42162: gve: Account for stopped queues when reading NIC stats (bsc#1228706).
CVE-2024-42161: bpf: avoid uninitialized value in BPF_CORE_READ_BITFIELD (bsc#1228756).
CVE-2024-42159: scsi: mpi3mr: fix sanitise num_phys (bsc#1228754).
CVE-2024-42158: s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings (bsc#1228720).
CVE-2024-42157: s390/pkey: Wipe sensitive data on failure (bsc#1228727).
CVE-2024-42156: s390/pkey: Wipe copies of clear-key structures on failure (bsc#1228722).
CVE-2024-42155: s390/pkey: Wipe copies of protected- and secure-keys (bsc#1228733).
CVE-2024-42148: bnx2x: Fix multiple UBSAN array-index-out-of-bounds (bsc#1228487).
CVE-2024-42145:…

Record: SUSE-SU-2024:3383-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20008-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (bsc#1223813)
CVE-2024-40948: mm/page_table_check: fix crash on ZONE_DEVICE (bsc#1227801).
CVE-2024-35890:…

Record: SUSE-SU-2025:20008-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20028-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
CVE-2024-41011: drm/amdkfd: do not allow mapping the MMIO HDP page with large pages (bsc#1228114).
CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()…

Record: SUSE-SU-2025:20028-1
Updated: 2026-11-02

OSVSUSE-SU-2026:0278-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
CVE-2025-40134: dm: fix NULL pointer dereference in __dm_suspend() (bsc#1253386).
CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
CVE-2025-40187: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (bsc#1253647).
CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
CVE-2025-40215: kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959).
CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
CVE-2025-40240: sctp: avoid NULL dereference when chunk data buffer is missing (bsc#1254869).
CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
CVE-2025-40268: cifs: client: fix memory leak in smb3_fs_context_parse_param (bsc#1255082).
CVE-2025-40271: fs/proc: fix uaf in proc_readdir_de() (bsc#1255297).
CVE-2025-40274: KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying (bsc#1254830).
CVE-2025-40278: net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak (bsc#1254825).
CVE-2025-40279: net: sched: act_connmark: initialize struct tc_ife to fix kernel leak (bsc#1254846).
CVE-2025-40280: tipc: Fix use-after-free in tipc_mon_reinit_self() (bsc#1254847).
CVE-2025-40287: exfat: fix improper check of dentry.stream.valid_size (bsc#1255030).
CVE-2025-40289: drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM (bsc#1255042).
CVE-2025-40292: virtio-net: fix received length check in big packets (bsc#1255175).
CVE-2025-40293: iommufd: Don't overflow during division for dirty tracking (bsc#1255179).
CVE-2025-40297: net: bridge: fix use-after-free due to MST port state bypass (bsc#1255187). -…

Record: SUSE-SU-2026:0278-1
Updated: 2026-11-02

OSVSUSE-SU-2026:0281-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
CVE-2025-40134: dm: fix NULL pointer dereference in __dm_suspend() (bsc#1253386).
CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
CVE-2025-40187: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (bsc#1253647).
CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
CVE-2025-40215: kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959).
CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
CVE-2025-40240: sctp: avoid NULL dereference when chunk data buffer is missing (bsc#1254869).
CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
CVE-2025-40268: cifs: client: fix memory leak in smb3_fs_context_parse_param (bsc#1255082).
CVE-2025-40271: fs/proc: fix uaf in proc_readdir_de() (bsc#1255297).
CVE-2025-40274: KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying (bsc#1254830).
CVE-2025-40278: net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak (bsc#1254825).
CVE-2025-40279: net: sched: act_connmark: initialize struct tc_ife to fix kernel leak (bsc#1254846).
CVE-2025-40280: tipc: Fix use-after-free in tipc_mon_reinit_self() (bsc#1254847).
CVE-2025-40287: exfat: fix improper check of dentry.stream.valid_size (bsc#1255030).
CVE-2025-40289: drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM (bsc#1255042).
CVE-2025-40292: virtio-net: fix received length check in big packets (bsc#1255175).
CVE-2025-40293: iommufd: Don't overflow during division for dirty tracking (bsc#1255179).
CVE-2025-40297: net: bridge: fix use-after-free due to MST port state bypass (bsc#1255187). -…

Record: SUSE-SU-2026:0281-1
Updated: 2026-11-02

OSVSUSE-SU-2026:0293-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
CVE-2025-39890: wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event (bsc#1250334).
CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
CVE-2025-40134: dm: fix NULL pointer dereference in __dm_suspend() (bsc#1253386).
CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
CVE-2025-40187: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (bsc#1253647).
CVE-2025-40215: kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959).
CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
CVE-2025-40280: tipc: Fix use-after-free in tipc_mon_reinit_self() (bsc#1254847).
CVE-2025-40297: net: bridge: fix use-after-free due to MST port state bypass (bsc#1255187).
CVE-2025-40328: smb: client: fix potential UAF in smb2_close_cached_fid() (bsc#1254624).
CVE-2025-40331: sctp: Prevent TOCTOU out-of-bounds write (bsc#1254615).
CVE-2025-68259: KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced (bsc#1255199).

The following non security issues were fixed:

ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 (git-fixes).
ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() (git-fixes).
ALSA: dice: fix buffer overflow in detect_stream_formats() (git-fixes).
ALSA: firewire-motu: add bounds check in put_user loop for DSP events (git-fixes).
ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (git-fixes).
ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() (git-fixes).
ALSA: uapi: Fix typo in asound.h comment (git-fixes).
ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 (stable-fixes).
ASoC: Intel: catpt: Fix error path in hw_params() (git-fixes).
ASoC: ak4458: Disable regulator when error happens (git-fixes).
ASoC: ak5558: Disable regulator when error happens (git-fixes).
ASoC: codecs: wcd938x: fix OF node leaks on probe failure (git-fixes).
ASoC: fsl_xcvr: clear the channel status control memory (git-fixes).
ASoC: qcom: q6adm: the the copp device only during last instance (git-fixes).
ASoC: qcom: q6asm-dai: perform correct state check before closing (git-fixes).
ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment…

Record: SUSE-SU-2026:0293-1
Updated: 2026-11-02

OSVSUSE-SU-2026:0315-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
CVE-2025-40134: dm: fix NULL pointer dereference in __dm_suspend() (bsc#1253386).
CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
CVE-2025-40187: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (bsc#1253647).
CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
CVE-2025-40215: kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959).
CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
CVE-2025-40240: sctp: avoid NULL dereference when chunk data buffer is missing (bsc#1254869).
CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
CVE-2025-40268: cifs: client: fix memory leak in smb3_fs_context_parse_param (bsc#1255082).
CVE-2025-40271: fs/proc: fix uaf in proc_readdir_de() (bsc#1255297).
CVE-2025-40274: KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying (bsc#1254830).
CVE-2025-40278: net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak (bsc#1254825).
CVE-2025-40279: net: sched: act_connmark: initialize struct tc_ife to fix kernel leak (bsc#1254846).
CVE-2025-40280: tipc: Fix use-after-free in tipc_mon_reinit_self() (bsc#1254847).
CVE-2025-40287: exfat: fix improper check of dentry.stream.valid_size (bsc#1255030).
CVE-2025-40289: drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM (bsc#1255042).
CVE-2025-40292: virtio-net: fix received length check in big packets (bsc#1255175).
CVE-2025-40293: iommufd: Don't overflow during division for dirty tracking (bsc#1255179).
CVE-2025-40297: net: bridge: fix use-after-free due to MST port state bypass (bsc#1255187). -…

Record: SUSE-SU-2026:0315-1
Updated: 2026-11-02

OSVSUSE-SU-2026:20477-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2023-54013: interconnect: Fix locking for runpm vs reclaim (bsc#1256280).
CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
CVE-2025-39880: libceph: fix invalid accesses to ceph_connection_v1_info (bsc#1250388).
CVE-2025-39890: wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event (bsc#1250334).
CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
CVE-2025-40123: bpf: Enforce expected_attach_type for tailcall compatibility (bsc#1253365).
CVE-2025-40134: dm: fix NULL pointer dereference in __dm_suspend() (bsc#1253386).
CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
CVE-2025-40187: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (bsc#1253647).
CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
CVE-2025-40215: kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959).
CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
CVE-2025-40240: sctp: avoid NULL dereference when chunk data buffer is missing (bsc#1254869).
CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
CVE-2025-40259: scsi: sg: Do not sleep in atomic context (bsc#1254845).
CVE-2025-40261: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (bsc#1254839).
CVE-2025-40264: be2net: pass wrb_params in case of OS2BMC (bsc#1254835).
CVE-2025-40268: cifs: client: fix memory leak in smb3_fs_context_parse_param (bsc#1255082).
CVE-2025-40271: fs/proc: fix uaf in…

Record: SUSE-SU-2026:20477-1
Updated: 2026-11-02

OSVSUSE-SU-2026:20498-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2023-54013: interconnect: Fix locking for runpm vs reclaim (bsc#1256280).
CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
CVE-2025-39880: libceph: fix invalid accesses to ceph_connection_v1_info (bsc#1250388).
CVE-2025-39890: wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event (bsc#1250334).
CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
CVE-2025-40123: bpf: Enforce expected_attach_type for tailcall compatibility (bsc#1253365).
CVE-2025-40134: dm: fix NULL pointer dereference in __dm_suspend() (bsc#1253386).
CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
CVE-2025-40187: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (bsc#1253647).
CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
CVE-2025-40215: kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959).
CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
CVE-2025-40240: sctp: avoid NULL dereference when chunk data buffer is missing (bsc#1254869).
CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
CVE-2025-40259: scsi: sg: Do not sleep in atomic context (bsc#1254845).
CVE-2025-40261: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (bsc#1254839).
CVE-2025-40264: be2net: pass wrb_params in case of OS2BMC (bsc#1254835).
CVE-2025-40268: cifs: client: fix memory leak in smb3_fs_context_parse_param (bsc#1255082).
CVE-2025-40271: fs/proc: fix uaf in…

Record: SUSE-SU-2026:20498-1
Updated: 2026-11-02

OSVSUSE-SU-2026:20845-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (bsc#1254992).
CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
CVE-2025-39748: bpf: Forget ranges when refining tnum after JSET (bsc#1249587).
CVE-2025-39880: libceph: fix invalid accesses to ceph_connection_v1_info (bsc#1250388).
CVE-2025-39890: wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event (bsc#1250334).
CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
CVE-2025-40099: cifs: parse_dfs_referrals: prevent oob on malformed input (bsc#1252911).
CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
CVE-2025-40103: smb: client: Fix refcount leak for cifs_sb_tlink (bsc#1252924).
CVE-2025-40123: bpf: Enforce expected_attach_type for tailcall compatibility (bsc#1253365).
CVE-2025-40134: dm: fix NULL pointer dereference in __dm_suspend() (bsc#1253386).
CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
CVE-2025-40187: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (bsc#1253647).
CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
CVE-2025-40192: Revert "ipmi: fix msg stack when IPMI is disconnected" (bsc#1253622).
CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
CVE-2025-40240: sctp: avoid NULL dereference when chunk data buffer is missing (bsc#1254869).
CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer()…

Record: SUSE-SU-2026:20845-1
Updated: 2026-11-02

OSVSUSE-SU-2026:20876-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (bsc#1254992).
CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
CVE-2025-39748: bpf: Forget ranges when refining tnum after JSET (bsc#1249587).
CVE-2025-39880: libceph: fix invalid accesses to ceph_connection_v1_info (bsc#1250388).
CVE-2025-39890: wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event (bsc#1250334).
CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
CVE-2025-40099: cifs: parse_dfs_referrals: prevent oob on malformed input (bsc#1252911).
CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
CVE-2025-40103: smb: client: Fix refcount leak for cifs_sb_tlink (bsc#1252924).
CVE-2025-40123: bpf: Enforce expected_attach_type for tailcall compatibility (bsc#1253365).
CVE-2025-40134: dm: fix NULL pointer dereference in __dm_suspend() (bsc#1253386).
CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
CVE-2025-40187: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (bsc#1253647).
CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
CVE-2025-40192: Revert "ipmi: fix msg stack when IPMI is disconnected" (bsc#1253622).
CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
CVE-2025-40240: sctp: avoid NULL dereference when chunk data buffer is missing (bsc#1254869).
CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer()…

Record: SUSE-SU-2026:20876-1
Updated: 2026-11-02

OSVUSN-6816-1 No score

linux, linux-ibm, linux-lowlatency, linux-raspi vulnerabilities

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. (CVE-2022-38096)

Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux kernel contained a race condition during device removal, leading to a use- after-free vulnerability. A physically proximate attacker could possibly use this to cause a denial of service (system crash). (CVE-2023-47233)

It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2023-6270)

It was discovered that the Atheros 802.11ac wireless driver did not properly validate certain data structures, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service. (CVE-2023-7042)

It was discovered that the Intel Data Streaming and Intel Analytics Accelerator drivers in the Linux kernel allowed direct access to the devices for unprivileged users and virtual machines. A local attacker could use this to cause a denial of service. (CVE-2024-21823)

Gui-Dong Han discovered that the software RAID driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. A privileged attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-23307)

Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-24861)

Chenyuan Yang discovered that the Unsorted Block Images (UBI) flash device volume management subsystem did not properly validate logical eraseblock sizes in certain situations. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-25739)

It was discovered that the MediaTek SoC Gigabit Ethernet driver in the Linux kernel contained a race condition when stopping the device. A local attacker could possibly use this to cause a denial of service (device unavailability). (CVE-2024-27432)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
ACPI drivers;
Bluetooth drivers;
Clock framework and drivers;
CPU frequency scaling framework;
Cryptographic API;
DPLL subsystem;
ARM SCMI message protocol;
EFI core;
GPU drivers;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
MMC subsystem;
Network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Powercap sysfs driver;
SCSI drivers;
Freescale SoC drivers;
SPI subsystem;
Media staging drivers;
Thermal drivers;
TTY drivers;
USB subsystem;
DesignWare USB3 driver;
VFIO drivers;
Backlight driver;
Virtio drivers;
Xen hypervisor drivers;
AFS file system;
File systems infrastructure;
BTRFS file system;
debug file system;
Ext4 file system;
F2FS file system;
FAT file system;
Network file system client;
NILFS2 file system;
Overlay file system;
Pstore file system;
Diskquota system;
SMB network file system;
UBI file system;
io_uring subsystem;
BPF subsystem;
Core kernel;
Memory management;
Bluetooth subsystem;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
IEEE 802.15.4 subsystem;
Netfilter;
Packet sockets;
Network…

Record: USN-6816-1
Updated: 2026-11-02

OSVUSN-6817-1 No score

linux-aws, linux-gcp vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
ACPI drivers;
Bluetooth drivers;
Clock framework and drivers;
CPU frequency scaling framework;
Cryptographic API;
DPLL subsystem;
ARM SCMI message protocol;
EFI core;
GPU drivers;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
MMC subsystem;
Network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Powercap sysfs driver;
SCSI drivers;
Freescale SoC drivers;
SPI subsystem;
Media staging drivers;
Thermal drivers;
TTY drivers;
USB subsystem;
DesignWare USB3 driver;
VFIO drivers;
Backlight driver;
Virtio drivers;
Xen hypervisor drivers;
AFS file system;
File systems infrastructure;
BTRFS file system;
debug file system;
Ext4 file system;
F2FS file system;
FAT file system;
Network file system client;
NILFS2 file system;
Overlay file system;
Pstore file system;
Diskquota system;
SMB network file system;
UBI file system;
io_uring subsystem;
BPF subsystem;
Core kernel;
Memory management;
Bluetooth subsystem;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
IEEE 802.15.4 subsystem;
Netfilter;
Packet sockets;
Network traffic control;
Sun RPC protocol;
ALSA SH drivers;
SOF drivers;
USB sound devices;
KVM core; (CVE-2024-26859, CVE-2024-26944, CVE-2024-27049, CVE-2024-26868, CVE-2024-26932, CVE-2024-35843, CVE-2024-35814, CVE-2024-26866, CVE-2024-26941, CVE-2024-27080,…

Record: USN-6817-1
Updated: 2026-11-02

OSVUSN-6817-2 No score

linux-oem-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
ACPI drivers;
Bluetooth drivers;
Clock framework and drivers;
CPU frequency scaling framework;
Cryptographic API;
DPLL subsystem;
ARM SCMI message protocol;
EFI core;
GPU drivers;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
MMC subsystem;
Network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Powercap sysfs driver;
SCSI drivers;
Freescale SoC drivers;
SPI subsystem;
Media staging drivers;
Thermal drivers;
TTY drivers;
USB subsystem;
DesignWare USB3 driver;
VFIO drivers;
Backlight driver;
Virtio drivers;
Xen hypervisor drivers;
AFS file system;
File systems infrastructure;
BTRFS file system;
debug file system;
Ext4 file system;
F2FS file system;
FAT file system;
Network file system client;
NILFS2 file system;
Overlay file system;
Pstore file system;
Diskquota system;
SMB network file system;
UBI file system;
io_uring subsystem;
BPF subsystem;
Core kernel;
Memory management;
Bluetooth subsystem;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
IEEE 802.15.4 subsystem;
Netfilter;
Packet sockets;
Network traffic control;
Sun RPC protocol;
ALSA SH drivers;
SOF drivers;
USB sound devices;
KVM core; (CVE-2024-26859, CVE-2024-26944, CVE-2024-27049, CVE-2024-26868, CVE-2024-26932, CVE-2024-35843, CVE-2024-35814, CVE-2024-26866, CVE-2024-26941, CVE-2024-27080,…

Record: USN-6817-2
Updated: 2026-11-02

OSVUSN-6817-3 No score

linux-azure, linux-gke vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
ACPI drivers;
Bluetooth drivers;
Clock framework and drivers;
CPU frequency scaling framework;
Cryptographic API;
DPLL subsystem;
ARM SCMI message protocol;
EFI core;
GPU drivers;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
MMC subsystem;
Network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Powercap sysfs driver;
SCSI drivers;
Freescale SoC drivers;
SPI subsystem;
Media staging drivers;
Thermal drivers;
TTY drivers;
USB subsystem;
DesignWare USB3 driver;
VFIO drivers;
Backlight driver;
Virtio drivers;
Xen hypervisor drivers;
AFS file system;
File systems infrastructure;
BTRFS file system;
debug file system;
Ext4 file system;
F2FS file system;
FAT file system;
Network file system client;
NILFS2 file system;
Overlay file system;
Pstore file system;
Diskquota system;
SMB network file system;
UBI file system;
io_uring subsystem;
BPF subsystem;
Core kernel;
Memory management;
Bluetooth subsystem;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
IEEE 802.15.4 subsystem;
Netfilter;
Packet sockets;
Network traffic control;
Sun RPC protocol;
ALSA SH drivers;
SOF drivers;
USB sound devices;
KVM core; (CVE-2024-26859, CVE-2024-26944, CVE-2024-27049, CVE-2024-26868, CVE-2024-26932, CVE-2024-35843, CVE-2024-35814, CVE-2024-26866, CVE-2024-26941, CVE-2024-27080,…

Record: USN-6817-3
Updated: 2026-11-02

OSVUSN-6878-1 No score

linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
ACPI drivers;
Bluetooth drivers;
Clock framework and drivers;
CPU frequency scaling framework;
Cryptographic API;
DPLL subsystem;
ARM SCMI message protocol;
EFI core;
GPU drivers;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
MMC subsystem;
Network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Powercap sysfs driver;
SCSI drivers;
Freescale SoC drivers;
SPI subsystem;
Media staging drivers;
Thermal drivers;
TTY drivers;
USB subsystem;
DesignWare USB3 driver;
VFIO drivers;
Backlight driver;
Virtio drivers;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
debug file system;
Ext4 file system;
F2FS file system;
FAT file system;
Network file system client;
NILFS2 file system;
Overlay file system;
Pstore file system;
Diskquota system;
SMB network file system;
UBI file system;
io_uring subsystem;
BPF subsystem;
Core kernel;
PCI iomap interfaces;
Memory management;
Bluetooth subsystem;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
IEEE 802.15.4 subsystem;
Netfilter;
Packet sockets;
Network traffic control;
Sun RPC protocol;
ALSA SH drivers;
SOF drivers;
USB sound devices;
KVM core; (CVE-2024-27032, CVE-2024-26868, CVE-2024-26879, CVE-2024-27033, CVE-2024-26943, CVE-2024-27040, CVE-2024-26950, CVE-2023-52650,…

Record: USN-6878-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`kernel` Azure Linux:3	through 6.6.161.1-1	None known
`linux-lts` Alpaquita:23	6.1.134-r0 and later	None known
`linux-lts` Alpaquita:25	6.6.89-r0 up to 6.12.41-r0	6.12.41-r0
`linux-lts` Alpaquita:stream	6.6.100-r0 up to 6.12.41-r0	6.12.41-r0
`Kernel` Linux	5.18.0 up to 6.8.3	6.8.3
`linux` Debian:12	All versions, plus listed versions 6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1 Show 45 moreShow less 6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.170-16.1.170-26.1.170-36.1.172-16.1.174-16.1.176-16.1.177-16.1.180-16.1.187-16.1.190-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+1	None known
`linux` Debian:13	before 6.8.9-1	6.8.9-1
`linux` Debian:14	before 6.8.9-1	6.8.9-1
`kernel` openEuler:24.03-LTS From an advisory covering 37 CVEs	before 6.6.0-55.0.0.58.oe2403	6.6.0-55.0.0.58.oe2403
`linux` Root:Debian:12	before 6.1.190-1.aikido.167	6.1.190-1.aikido.167

Show 243 moreShow less

Affected packages
Package	Affected	Fixed
`rootio-linux` Root:Debian:12	before 6.1.190-1.aikido.167	6.1.190-1.aikido.167
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 118 CVEs	before 6.4.0-150600.23.17.1	6.4.0-150600.23.17.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 118 CVEs	before 6.4.0-150600.23.17.1	6.4.0-150600.23.17.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 118 CVEs	before 6.4.0-150600.23.17.1.150600.12.6.2	6.4.0-150600.23.17.1.150600.12.6.2
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 118 CVEs	before 6.4.0-150600.23.17.1	6.4.0-150600.23.17.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 118 CVEs	before 6.4.0-150600.23.17.1	6.4.0-150600.23.17.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 118 CVEs	before 6.4.0-150600.23.17.3	6.4.0-150600.23.17.3
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 118 CVEs	before 6.4.0-150600.23.17.1	6.4.0-150600.23.17.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 118 CVEs	before 6.4.0-150600.23.17.1	6.4.0-150600.23.17.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 118 CVEs	before 6.4.0-150600.23.17.1	6.4.0-150600.23.17.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP6 From an advisory covering 118 CVEs	before 6.4.0-150600.23.17.1	6.4.0-150600.23.17.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 118 CVEs	before 6.4.0-150600.23.17.1	6.4.0-150600.23.17.1
`kernel-livepatch-SLE15-SP6_Update_3` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 118 CVEs	before 1-150600.13.3.1	1-150600.13.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP6 From an advisory covering 118 CVEs	before 6.4.0-150600.23.17.1	6.4.0-150600.23.17.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP6 From an advisory covering 118 CVEs	before 6.4.0-150600.23.17.1	6.4.0-150600.23.17.1
`dtb-aarch64` openSUSE:Leap 15.6 From an advisory covering 118 CVEs	before 6.4.0-150600.23.17.1	6.4.0-150600.23.17.1
`kernel-64kb` openSUSE:Leap 15.6 From an advisory covering 118 CVEs	before 6.4.0-150600.23.17.1	6.4.0-150600.23.17.1
`kernel-debug` openSUSE:Leap 15.6 From an advisory covering 118 CVEs	before 6.4.0-150600.23.17.1	6.4.0-150600.23.17.1
`kernel-default` openSUSE:Leap 15.6 From an advisory covering 118 CVEs	before 6.4.0-150600.23.17.1	6.4.0-150600.23.17.1
`kernel-default-base` openSUSE:Leap 15.6 From an advisory covering 118 CVEs	before 6.4.0-150600.23.17.1.150600.12.6.2	6.4.0-150600.23.17.1.150600.12.6.2
`kernel-docs` openSUSE:Leap 15.6 From an advisory covering 118 CVEs	before 6.4.0-150600.23.17.3	6.4.0-150600.23.17.3
`kernel-kvmsmall` openSUSE:Leap 15.6 From an advisory covering 118 CVEs	before 6.4.0-150600.23.17.1	6.4.0-150600.23.17.1
`kernel-obs-build` openSUSE:Leap 15.6 From an advisory covering 118 CVEs	before 6.4.0-150600.23.17.1	6.4.0-150600.23.17.1
`kernel-obs-qa` openSUSE:Leap 15.6 From an advisory covering 118 CVEs	before 6.4.0-150600.23.17.1	6.4.0-150600.23.17.1
`kernel-source` openSUSE:Leap 15.6 From an advisory covering 118 CVEs	before 6.4.0-150600.23.17.1	6.4.0-150600.23.17.1
`kernel-syms` openSUSE:Leap 15.6 From an advisory covering 118 CVEs	before 6.4.0-150600.23.17.1	6.4.0-150600.23.17.1
`kernel-zfcpdump` openSUSE:Leap 15.6 From an advisory covering 118 CVEs	before 6.4.0-150600.23.17.1	6.4.0-150600.23.17.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 402 CVEs	before 6.4.0-150600.8.8.2	6.4.0-150600.8.8.2
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 402 CVEs	before 6.4.0-150600.8.8.2	6.4.0-150600.8.8.2
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 402 CVEs	before 6.4.0-150600.8.8.1	6.4.0-150600.8.8.1
`kernel-azure` openSUSE:Leap 15.6 From an advisory covering 402 CVEs	before 6.4.0-150600.8.8.2	6.4.0-150600.8.8.2
`kernel-source-azure` openSUSE:Leap 15.6 From an advisory covering 402 CVEs	before 6.4.0-150600.8.8.2	6.4.0-150600.8.8.2
`kernel-syms-azure` openSUSE:Leap 15.6 From an advisory covering 402 CVEs	before 6.4.0-150600.8.8.1	6.4.0-150600.8.8.1
`kernel-livepatch-SLE15-SP6-RT_Update_1` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 783 CVEs	before 1-150600.1.5.1	1-150600.1.5.1
`kernel-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-rt_debug` SUSE:Real Time Module 15 SP6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-source-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-rt` openSUSE:Leap 15.6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-rt_debug` openSUSE:Leap 15.6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-source-rt` openSUSE:Leap 15.6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-syms-rt` openSUSE:Leap 15.6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 394 CVEs	before 6.4.0-150600.8.11.1	6.4.0-150600.8.11.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 394 CVEs	before 6.4.0-150600.8.11.1	6.4.0-150600.8.11.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 394 CVEs	before 6.4.0-150600.8.11.1	6.4.0-150600.8.11.1
`kernel-azure` openSUSE:Leap 15.6 From an advisory covering 394 CVEs	before 6.4.0-150600.8.11.1	6.4.0-150600.8.11.1
`kernel-source-azure` openSUSE:Leap 15.6 From an advisory covering 394 CVEs	before 6.4.0-150600.8.11.1	6.4.0-150600.8.11.1
`kernel-syms-azure` openSUSE:Leap 15.6 From an advisory covering 394 CVEs	before 6.4.0-150600.8.11.1	6.4.0-150600.8.11.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1.150600.12.8.3	6.4.0-150600.23.22.1.150600.12.8.3
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`kernel-livepatch-SLE15-SP6_Update_4` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 394 CVEs	before 1-150600.13.3.3	1-150600.13.3.3
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`dtb-aarch64` openSUSE:Leap 15.6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`kernel-64kb` openSUSE:Leap 15.6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`kernel-debug` openSUSE:Leap 15.6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`kernel-default` openSUSE:Leap 15.6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`kernel-default-base` openSUSE:Leap 15.6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1.150600.12.8.3	6.4.0-150600.23.22.1.150600.12.8.3
`kernel-docs` openSUSE:Leap 15.6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`kernel-kvmsmall` openSUSE:Leap 15.6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`kernel-obs-build` openSUSE:Leap 15.6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`kernel-obs-qa` openSUSE:Leap 15.6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`kernel-source` openSUSE:Leap 15.6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`kernel-syms` openSUSE:Leap 15.6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`kernel-zfcpdump` openSUSE:Leap 15.6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`kernel-default` SUSE:Linux Micro 6.0 From an advisory covering 848 CVEs	before 6.4.0-18.1	6.4.0-18.1
`kernel-default-base` SUSE:Linux Micro 6.0 From an advisory covering 848 CVEs	before 6.4.0-17.1.1.51	6.4.0-17.1.1.51
`kernel-kvmsmall` SUSE:Linux Micro 6.0 From an advisory covering 848 CVEs	before 6.4.0-18.1	6.4.0-18.1
`kernel-source` SUSE:Linux Micro 6.0 From an advisory covering 848 CVEs	before 6.4.0-18.1	6.4.0-18.1
`kernel-rt` SUSE:Linux Micro 6.0 From an advisory covering 826 CVEs	before 6.4.0-9.1	6.4.0-9.1
`kernel-source-rt` SUSE:Linux Micro 6.0 From an advisory covering 826 CVEs	before 6.4.0-9.1	6.4.0-9.1
`kernel-livepatch-SLE15-SP7-RT_Update_8` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 395 CVEs	before 1-150700.1.3.1	1-150700.1.3.1
`kernel-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 395 CVEs	before 6.4.0-150700.7.28.1	6.4.0-150700.7.28.1
`kernel-source-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 395 CVEs	before 6.4.0-150700.7.28.1	6.4.0-150700.7.28.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 395 CVEs	before 6.4.0-150700.7.28.1	6.4.0-150700.7.28.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7 From an advisory covering 395 CVEs	before 6.4.0-150700.20.24.1	6.4.0-150700.20.24.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7 From an advisory covering 395 CVEs	before 6.4.0-150700.20.24.1	6.4.0-150700.20.24.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7 From an advisory covering 395 CVEs	before 6.4.0-150700.20.24.1	6.4.0-150700.20.24.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 334 CVEs	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-livepatch-SLE15-SP6_Update_19` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 334 CVEs	before 1-150600.13.3.1	1-150600.13.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP6 From an advisory covering 334 CVEs	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-64kb` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 334 CVEs	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-default` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 334 CVEs	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-default-base` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 334 CVEs	before 6.4.0-150600.23.84.1.150600.12.38.1	6.4.0-150600.23.84.1.150600.12.38.1
`kernel-docs` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 334 CVEs	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-obs-build` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 334 CVEs	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-source` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 334 CVEs	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-syms` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 334 CVEs	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 334 CVEs	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-default` SUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 334 CVEs	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-default-base` SUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 334 CVEs	before 6.4.0-150600.23.84.1.150600.12.38.1	6.4.0-150600.23.84.1.150600.12.38.1
`kernel-docs` SUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 334 CVEs	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-obs-build` SUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 334 CVEs	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-source` SUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 334 CVEs	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 334 CVEs	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`dtb-aarch64` openSUSE:Leap 15.6 From an advisory covering 334 CVEs	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-64kb` openSUSE:Leap 15.6 From an advisory covering 334 CVEs	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-debug` openSUSE:Leap 15.6 From an advisory covering 334 CVEs	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-default` openSUSE:Leap 15.6 From an advisory covering 334 CVEs	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-default-base` openSUSE:Leap 15.6 From an advisory covering 334 CVEs	before 6.4.0-150600.23.84.1.150600.12.38.1	6.4.0-150600.23.84.1.150600.12.38.1
`kernel-docs` openSUSE:Leap 15.6 From an advisory covering 334 CVEs	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-kvmsmall` openSUSE:Leap 15.6 From an advisory covering 334 CVEs	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-obs-build` openSUSE:Leap 15.6 From an advisory covering 334 CVEs	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-obs-qa` openSUSE:Leap 15.6 From an advisory covering 334 CVEs	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-source` openSUSE:Leap 15.6 From an advisory covering 334 CVEs	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-syms` openSUSE:Leap 15.6 From an advisory covering 334 CVEs	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-zfcpdump` openSUSE:Leap 15.6 From an advisory covering 334 CVEs	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 395 CVEs	before 6.4.0-150700.53.28.1	6.4.0-150700.53.28.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 395 CVEs	before 6.4.0-150700.53.28.1	6.4.0-150700.53.28.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 395 CVEs	before 6.4.0-150700.53.28.1.150700.17.19.1	6.4.0-150700.53.28.1.150700.17.19.1
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 395 CVEs	before 6.4.0-150700.53.28.1	6.4.0-150700.53.28.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 395 CVEs	before 6.4.0-150700.53.28.1	6.4.0-150700.53.28.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 395 CVEs	before 6.4.0-150700.53.28.1	6.4.0-150700.53.28.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 395 CVEs	before 6.4.0-150700.53.28.1	6.4.0-150700.53.28.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 395 CVEs	before 6.4.0-150700.53.28.1	6.4.0-150700.53.28.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 395 CVEs	before 6.4.0-150700.53.28.1	6.4.0-150700.53.28.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP7 From an advisory covering 395 CVEs	before 6.4.0-150700.53.28.1	6.4.0-150700.53.28.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 395 CVEs	before 6.4.0-150700.53.28.1	6.4.0-150700.53.28.1
`kernel-livepatch-SLE15-SP7_Update_8` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 395 CVEs	before 1-150700.15.3.1	1-150700.15.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP7 From an advisory covering 395 CVEs	before 6.4.0-150700.53.28.1	6.4.0-150700.53.28.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP7 From an advisory covering 395 CVEs	before 6.4.0-150700.53.28.1	6.4.0-150700.53.28.1
`kernel-default` SUSE:Linux Micro 6.0 From an advisory covering 524 CVEs	before 6.4.0-39.1	6.4.0-39.1
`kernel-default-base` SUSE:Linux Micro 6.0 From an advisory covering 524 CVEs	before 6.4.0-39.1.21.16	6.4.0-39.1.21.16
`kernel-kvmsmall` SUSE:Linux Micro 6.0 From an advisory covering 524 CVEs	before 6.4.0-39.1	6.4.0-39.1
`kernel-source` SUSE:Linux Micro 6.0 From an advisory covering 524 CVEs	before 6.4.0-39.1	6.4.0-39.1
`kernel-default` SUSE:Linux Micro 6.1 From an advisory covering 524 CVEs	before 6.4.0-39.1	6.4.0-39.1
`kernel-default-base` SUSE:Linux Micro 6.1 From an advisory covering 524 CVEs	before 6.4.0-39.1.21.16	6.4.0-39.1.21.16
`kernel-kvmsmall` SUSE:Linux Micro 6.1 From an advisory covering 524 CVEs	before 6.4.0-39.1	6.4.0-39.1
`kernel-source` SUSE:Linux Micro 6.1 From an advisory covering 524 CVEs	before 6.4.0-39.1	6.4.0-39.1
`kernel-rt` SUSE:Linux Micro 6.0 From an advisory covering 655 CVEs	before 6.4.0-40.1	6.4.0-40.1
`kernel-source-rt` SUSE:Linux Micro 6.0 From an advisory covering 655 CVEs	before 6.4.0-40.1	6.4.0-40.1
`kernel-rt` SUSE:Linux Micro 6.1 From an advisory covering 655 CVEs	before 6.4.0-40.1	6.4.0-40.1
`kernel-source-rt` SUSE:Linux Micro 6.1 From an advisory covering 655 CVEs	before 6.4.0-40.1	6.4.0-40.1
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-aws-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-aws-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less 5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1	None known
`linux-aws-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1	None known
`linux-azure-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less 5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2	None known
`linux-azure-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less 5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1	None known
`linux-azure-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1	None known
`linux-azure-fde` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less 5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1	None known
`linux-gcp-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less 5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3	None known
`linux-gcp-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less 5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1	None known
`linux-gcp-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41	None known
`linux-gke` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less 5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111	None known
`linux-gke-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less 5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1	None known
`linux-gkeop` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less 5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77	None known
`linux-gkeop-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 40 moreShow less 5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1	None known
`linux-hwe-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less 5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1	None known
`linux-hwe-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less 5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1	None known
`linux-hwe-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less 5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1	None known
`linux-intel-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19	None known
`linux-oem-5.10` Ubuntu:20.04:LTS	All versions, plus listed versions 5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17 Show 21 moreShow less 5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61	None known
`linux-oem-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21 Show 7 moreShow less 5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36	None known
`linux-oem-5.14` Ubuntu:20.04:LTS	All versions, plus listed versions 5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10 Show 30 moreShow less 5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67	None known
`linux-oem-5.6` Ubuntu:20.04:LTS	All versions, plus listed versions 5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13 Show 24 moreShow less 5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60	None known
`linux-oracle-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-oracle-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1 Show 7 moreShow less 5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1	None known
`linux-oracle-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1	None known
`linux-raspi2` Ubuntu:20.04:LTS	All versions, plus listed versions 5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6	None known
`linux-riscv` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34 Show 7 moreShow less 5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45	None known
`linux-riscv-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1 Show 8 moreShow less 5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35	None known
`linux-riscv-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1 Show 5 moreShow less 5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1	None known
`linux-allwinner-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1	None known
`linux-aws-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1 Show 5 moreShow less 5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1	None known
`linux-aws-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 9 moreShow less 6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1	None known
`linux-aws-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1 Show 9 moreShow less 6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1	None known
`linux-azure-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2	None known
`linux-azure-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 8 moreShow less 6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1	None known
`linux-azure-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1 Show 9 moreShow less 6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1	None known
`linux-azure-fde-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1	None known
`linux-azure-fde-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1 Show 5 moreShow less 6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1	None known
`linux-gcp-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1020.22~22.04.25.19.0-1021.23~22.04.15.19.0-1022.24~22.04.15.19.0-1024.26~22.04.15.19.0-1025.27~22.04.15.19.0-1026.28~22.04.15.19.0-1027.29~22.04.15.19.0-1030.32~22.04.1	None known
`linux-gcp-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1009.9~22.04.36.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1011.11~22.04.36.2.0-1012.12~22.04.1 Show 7 moreShow less 6.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1016.18~22.04.16.2.0-1017.19~22.04.16.2.0-1018.20~22.04.16.2.0-1019.21~22.04.16.2.0-1021.23~22.04.1	None known
`linux-gcp-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1010.10~22.04.36.5.0-1011.11~22.04.16.5.0-1013.13~22.04.16.5.0-1014.14~22.04.16.5.0-1015.15~22.04.1 Show 8 moreShow less 6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1022.24~22.04.16.5.0-1023.25~22.04.16.5.0-1024.26~22.04.16.5.0-1025.27~22.04.1	None known
`linux-hwe-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-28.29~22.04.15.19.0-32.33~22.04.15.19.0-35.36~22.04.15.19.0-38.39~22.04.15.19.0-40.41~22.04.1 Show 6 moreShow less 5.19.0-41.42~22.04.15.19.0-42.43~22.04.15.19.0-43.44~22.04.15.19.0-45.46~22.04.15.19.0-46.47~22.04.15.19.0-50.50	None known
`linux-hwe-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-25.25~22.04.26.2.0-26.26~22.04.16.2.0-31.31~22.04.16.2.0-32.32~22.04.16.2.0-33.33~22.04.1 Show 5 moreShow less 6.2.0-34.34~22.04.16.2.0-35.35~22.04.16.2.0-36.37~22.04.16.2.0-37.38~22.04.16.2.0-39.40~22.04.1	None known
`linux-hwe-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-14.14~22.04.16.5.0-15.15~22.04.16.5.0-17.17~22.04.16.5.0-18.18~22.04.16.5.0-21.21~22.04.1 Show 8 moreShow less 6.5.0-25.25~22.04.16.5.0-26.26~22.04.16.5.0-27.28~22.04.16.5.0-28.29~22.04.16.5.0-35.35~22.04.16.5.0-41.41~22.04.26.5.0-44.44~22.04.16.5.0-45.45~22.04.1	None known
`linux-intel-iot-realtime` Ubuntu:22.04:LTS	All versions, plus listed versions 5.15.0-1073.75	None known
`linux-lowlatency-hwe-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.1 Show 5 moreShow less 5.19.0-1024.25~22.04.15.19.0-1025.26~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1030.30	None known
`linux-lowlatency-hwe-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1008.8~22.04.16.2.0-1009.9~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.1 Show 5 moreShow less 6.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1	None known
`linux-lowlatency-hwe-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-14.14.1~22.04.16.5.0-15.15.1.1~22.04.16.5.0-17.17.1.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.1 Show 8 moreShow less 6.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.16.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-41.41.1~22.04.16.5.0-42.42.1~22.04.16.5.0-44.44.1~22.04.16.5.0-45.45.1~22.04.1	None known
`linux-nvidia-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1003.3~22.04.16.2.0-1009.96.2.0-1010.106.2.0-1011.116.2.0-1012.126.2.0-1013.136.2.0-1015.15	None known
`linux-nvidia-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1004.46.5.0-1007.76.5.0-1013.136.5.0-1014.146.5.0-1015.15 Show 6 moreShow less 6.5.0-1018.186.5.0-1019.196.5.0-1021.226.5.0-1022.236.5.0-1023.246.5.0-1024.25	None known
`linux-oem-5.17` Ubuntu:22.04:LTS	All versions, plus listed versions 5.17.0-1003.35.17.0-1004.45.17.0-1006.65.17.0-1011.125.17.0-1012.13 Show 21 moreShow less 5.17.0-1013.145.17.0-1014.155.17.0-1015.165.17.0-1016.175.17.0-1017.185.17.0-1018.195.17.0-1019.205.17.0-1020.215.17.0-1021.225.17.0-1024.255.17.0-1025.265.17.0-1026.275.17.0-1027.285.17.0-1028.295.17.0-1029.305.17.0-1030.315.17.0-1031.325.17.0-1032.335.17.0-1033.345.17.0-1034.355.17.0-1035.36	None known
`linux-oem-6.0` Ubuntu:22.04:LTS	All versions, plus listed versions 6.0.0-1006.66.0.0-1007.76.0.0-1008.86.0.0-1009.96.0.0-1010.10 Show 11 moreShow less 6.0.0-1011.116.0.0-1012.126.0.0-1013.136.0.0-1014.146.0.0-1015.156.0.0-1016.166.0.0-1017.176.0.0-1018.186.0.0-1019.196.0.0-1020.206.0.0-1021.21	None known
`linux-oem-6.1` Ubuntu:22.04:LTS	All versions, plus listed versions 6.1.0-1004.46.1.0-1006.66.1.0-1007.76.1.0-1008.86.1.0-1009.9 Show 22 moreShow less 6.1.0-1010.106.1.0-1012.126.1.0-1013.136.1.0-1014.146.1.0-1015.156.1.0-1016.166.1.0-1017.176.1.0-1019.196.1.0-1020.206.1.0-1021.216.1.0-1022.226.1.0-1023.236.1.0-1024.246.1.0-1025.256.1.0-1026.266.1.0-1027.276.1.0-1028.286.1.0-1029.296.1.0-1033.336.1.0-1034.346.1.0-1035.356.1.0-1036.36	None known
`linux-oem-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1003.36.5.0-1004.46.5.0-1006.66.5.0-1007.76.5.0-1008.8 Show 14 moreShow less 6.5.0-1009.106.5.0-1011.126.5.0-1013.146.5.0-1014.156.5.0-1015.166.5.0-1016.176.5.0-1018.196.5.0-1019.206.5.0-1020.216.5.0-1022.236.5.0-1023.246.5.0-1024.256.5.0-1025.266.5.0-1027.28	None known
`linux-oracle-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1013.13~22.04.46.5.0-1014.14~22.04.16.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1018.18~22.04.1 Show 8 moreShow less 6.5.0-1019.19~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.16.5.0-1025.25~22.04.16.5.0-1026.26~22.04.16.5.0-1027.27~22.04.1	None known
`linux-realtime` Ubuntu:22.04:LTS	All versions, plus listed versions 5.15.0-1032.35	None known
`linux-riscv` Ubuntu:22.04:LTS	All versions, plus listed versions 5.13.0-1004.45.13.0-1006.6+22.04.15.13.0-1007.7+22.04.15.13.0-1010.11+22.04.15.15.0-1004.4 Show 18 moreShow less 5.15.0-1005.55.15.0-1006.65.15.0-1007.75.15.0-1008.85.15.0-1011.125.15.0-1012.135.15.0-1014.165.15.0-1015.175.15.0-1016.185.15.0-1017.195.15.0-1018.215.15.0-1019.225.15.0-1020.235.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.32	None known
`linux-riscv-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1012.13~22.04.15.19.0-1015.16~22.04.15.19.0-1016.17~22.04.15.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.15.19.0-1021.23~22.04.1	None known
`linux-riscv-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-17.17.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.16.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.1 Show 5 moreShow less 6.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-40.40.1~22.04.16.5.0-42.42.1~22.04.16.5.0-45.45.1~22.04.1	None known
`linux-starfive-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1014.16~22.04.15.19.0-1015.17~22.04.15.19.0-1016.18~22.04.15.19.0-1017.19~22.04.15.19.0-1018.20~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.1	None known
`linux-starfive-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1006.7~22.04.16.2.0-1007.8~22.04.16.2.0-1009.10~22.04.1	None known
`linux-starfive-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1007.8~22.04.16.5.0-1008.9~22.04.16.5.0-1009.10~22.04.16.5.0-1010.11~22.04.16.5.0-1011.12~22.04.1 Show 6 moreShow less 6.5.0-1012.13~22.04.16.5.0-1014.15~22.04.16.5.0-1015.16~22.04.16.5.0-1016.17~22.04.16.5.0-1017.18~22.04.16.5.0-1018.19~22.04.1	None known
`linux` Ubuntu:24.04:LTS	before 6.8.0-35.35, plus listed versions 6.5.0-9.96.6.0-14.146.8.0-11.116.8.0-20.206.8.0-22.226.8.0-28.286.8.0-31.31	6.8.0-35.35
`linux-aws` Ubuntu:24.04:LTS	before 6.8.0-1009.9, plus listed versions 6.5.0-1008.86.6.0-1001.16.8.0-1001.16.8.0-1006.66.8.0-1008.8	6.8.0-1009.9
`linux-azure` Ubuntu:24.04:LTS	before 6.8.0-1008.8, plus listed versions 6.5.0-1007.76.6.0-1001.16.8.0-1001.16.8.0-1005.56.8.0-1006.66.8.0-1007.7	6.8.0-1008.8
`linux-gcp` Ubuntu:24.04:LTS	before 6.8.0-1008.9, plus listed versions 6.5.0-1007.76.6.0-1001.16.8.0-1002.26.8.0-1005.56.8.0-1006.66.8.0-1007.7	6.8.0-1008.9
`linux-gke` Ubuntu:24.04:LTS	before 6.8.0-1004.7, plus listed versions 6.8.0-1003.5	6.8.0-1004.7
`linux-ibm` Ubuntu:24.04:LTS	before 6.8.0-1006.6, plus listed versions 6.5.0-1009.96.8.0-1001.16.8.0-1003.36.8.0-1004.46.8.0-1005.5	6.8.0-1006.6
`linux-lowlatency` Ubuntu:24.04:LTS	before 6.8.0-35.35.1, plus listed versions 6.5.0-9.9.16.6.0-14.14.16.8.0-7.7.16.8.0-25.25.36.8.0-28.28.16.8.0-31.31.1	6.8.0-35.35.1
`linux-oem-6.8` Ubuntu:24.04:LTS	before 6.8.0-1006.6, plus listed versions 6.8.0-1003.36.8.0-1004.46.8.0-1005.5	6.8.0-1006.6
`linux-oracle` Ubuntu:24.04:LTS	before 6.8.0-1006.6, plus listed versions 6.5.0-1010.106.6.0-1001.16.8.0-1001.16.8.0-1004.46.8.0-1005.5	6.8.0-1006.6
`linux-raspi` Ubuntu:24.04:LTS	before 6.8.0-1005.5, plus listed versions 6.5.0-1005.76.7.0-1001.16.8.0-1001.16.8.0-1002.26.8.0-1003.36.8.0-1004.4	6.8.0-1005.5
`linux-riscv` Ubuntu:24.04:LTS	before 6.8.0-35.35.1, plus listed versions 6.5.0-9.9.16.8.0-20.20.16.8.0-28.28.16.8.0-31.31.1	6.8.0-35.35.1
`linux-raspi-realtime` Ubuntu:Pro:Realtime:24.04:LTS	before 6.8.0-2004.4, plus listed versions 6.7.0-2001.16.8.0-2001.16.8.0-2002.2	6.8.0-2004.4
`linux-realtime` Ubuntu:Pro:Realtime:24.04:LTS	before 6.8.1-1002.2, plus listed versions 6.8.0-1008.196.8.1-1001.1	6.8.1-1002.2
`linux` Ubuntu:24.04:LTS From an advisory covering 221 CVEs	before 6.8.0-35.35, plus listed versions 6.5.0-9.96.6.0-14.146.8.0-11.116.8.0-20.206.8.0-22.226.8.0-28.286.8.0-31.31	6.8.0-35.35
`linux-ibm` Ubuntu:24.04:LTS From an advisory covering 221 CVEs	before 6.8.0-1006.6, plus listed versions 6.5.0-1009.96.8.0-1001.16.8.0-1003.36.8.0-1004.46.8.0-1005.5	6.8.0-1006.6
`linux-lowlatency` Ubuntu:24.04:LTS From an advisory covering 221 CVEs	before 6.8.0-35.35.1, plus listed versions 6.5.0-9.9.16.6.0-14.14.16.8.0-7.7.16.8.0-25.25.36.8.0-28.28.16.8.0-31.31.1	6.8.0-35.35.1
`linux-raspi` Ubuntu:24.04:LTS From an advisory covering 221 CVEs	before 6.8.0-1005.5, plus listed versions 6.5.0-1005.76.7.0-1001.16.8.0-1001.16.8.0-1002.26.8.0-1003.36.8.0-1004.4	6.8.0-1005.5
`linux-aws` Ubuntu:24.04:LTS From an advisory covering 220 CVEs	before 6.8.0-1009.9, plus listed versions 6.5.0-1008.86.6.0-1001.16.8.0-1001.16.8.0-1006.66.8.0-1008.8	6.8.0-1009.9
`linux-gcp` Ubuntu:24.04:LTS From an advisory covering 220 CVEs	before 6.8.0-1008.9, plus listed versions 6.5.0-1007.76.6.0-1001.16.8.0-1002.26.8.0-1005.56.8.0-1006.66.8.0-1007.7	6.8.0-1008.9
`linux-oem-6.8` Ubuntu:24.04:LTS From an advisory covering 220 CVEs	before 6.8.0-1006.6, plus listed versions 6.8.0-1003.36.8.0-1004.46.8.0-1005.5	6.8.0-1006.6
`linux-azure` Ubuntu:24.04:LTS From an advisory covering 220 CVEs	before 6.8.0-1008.8, plus listed versions 6.5.0-1007.76.6.0-1001.16.8.0-1001.16.8.0-1005.56.8.0-1006.66.8.0-1007.7	6.8.0-1008.8
`linux-gke` Ubuntu:24.04:LTS From an advisory covering 220 CVEs	before 6.8.0-1004.7, plus listed versions 6.8.0-1003.5	6.8.0-1004.7
`linux-oracle` Ubuntu:24.04:LTS From an advisory covering 218 CVEs	before 6.8.0-1006.6, plus listed versions 6.5.0-1010.106.6.0-1001.16.8.0-1001.16.8.0-1004.46.8.0-1005.5	6.8.0-1006.6

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected
Nov 5, 2026	affected	OSV
Nov 3, 2026	facts
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-26944 is a high vulnerability (CVSS 7.8) in Linux, published May 1, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.24%, the 15th percentile. Fixed in linux-lts 6.12.41-r0.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 352 versions, 4,240 references and the rest of 21 source descriptions. The JSON record has them.