CVE-2024-56642

tipc: Fix use-after-free of kernel socket in cleanup_bearer().

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

tipc: Fix use-after-free of kernel socket in cleanup_bearer().

syzkaller reported a use-after-free of UDP kernel socket in cleanup_bearer() without repro. [0][1]

When bearer_disable() calls tipc_udp_disable(), cleanup of the UDP kernel socket is deferred by work calling cleanup_bearer().

tipc_exit_net() waits for such works to finish by checking tipc_net(net)->wq_count. However, the work decrements the count too early before releasing the kernel socket, unblocking cleanup_net() and resulting in use-after-free.

Let's move the decrement after releasing the socket in cleanup_bearer().

[0]: ref_tracker: net notrefcnt@000000009b3d1faf has 1/1 users at sk_alloc+0x438/0x608 inet_create+0x4c8/0xcb0 __sock_create+0x350/0x6b8 sock_create_kern+0x58/0x78 udp_sock_create4+0x68/0x398 udp_sock_create+0x88/0xc8 tipc_udp_enable+0x5e8/0x848 __tipc_nl_bearer_enable+0x84c/0xed8 tipc_nl_bearer_enable+0x38/0x60 genl_family_rcv_msg_doit+0x170/0x248 genl_rcv_msg+0x400/0x5b0 netlink_rcv_skb+0x1dc/0x398 genl_rcv+0x44/0x68 netlink_unicast+0x678/0x8b0 netlink_sendmsg+0x5e4/0x898 ____sys_sendmsg+0x500/0x830

[1]: BUG: KMSAN: use-after-free in udp_hashslot include/net/udp.h:85 [inline] BUG: KMSAN: use-after-free in udp_lib_unhash+0x3b8/0x930 net/ipv4/udp.c:1979 udp_hashslot include/net/udp.h:85 [inline] udp_lib_unhash+0x3b8/0x930 net/ipv4/udp.c:1979 sk_common_release+0xaf/0x3f0 net/core/sock.c:3820 inet_release+0x1e0/0x260 net/ipv4/af_inet.c:437 inet6_release+0x6f/0xd0 net/ipv6/af_inet6.c:489 __sock_release net/socket.c:658 [inline] sock_release+0xa0/0x210 net/socket.c:686 cleanup_bearer+0x42d/0x4c0 net/tipc/udp_media.c:819 process_one_work kernel/workqueue.c:3229 [inline] process_scheduled_works+0xcaf/0x1c90 kernel/workqueue.c:3310 worker_thread+0xf6c/0x1510 kernel/workqueue.c:3391 kthread+0x531/0x6b0 kernel/kthread.c:389 ret_from_fork+0x60/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:244

Uninit was created at: slab_free_hook mm/slub.c:2269 [inline] slab_free mm/slub.c:4580 [inline] kmem_cache_free+0x207/0xc40 mm/slub.c:4682 net_free net/core/net_namespace.c:454 [inline] cleanup_net+0x16f2/0x19d0 net/core/net_namespace.c:647 process_one_work kernel/workqueue.c:3229 [inline] process_scheduled_works+0xcaf/0x1c90 kernel/workqueue.c:3310 worker_thread+0xf6c/0x1510 kernel/workqueue.c:3391 kthread+0x531/0x6b0 kernel/kthread.c:389 ret_from_fork+0x60/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:244

CPU: 0 UID: 0 PID: 54 Comm: kworker/0:2 Not tainted 6.12.0-rc1-00131-gf66ebf37d69c #7 91723d6f74857f70725e1583cba3cf4adc716cfa Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 Workqueue: events cleanup_bearer

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.24%Up 0.2 points since Dec 28, 2024

What each source reports

CVE List Score used 7.8

tipc: Fix use-after-free of kernel socket in cleanup_bearer().

In the Linux kernel, the following vulnerability has been resolved:

tipc: Fix use-after-free of kernel socket in cleanup_bearer().

syzkaller reported a use-after-free of UDP kernel socket in cleanup_bearer() without repro. [0][1]

When bearer_disable() calls tipc_udp_disable(), cleanup of the UDP kernel socket is deferred by work calling cleanup_bearer().

Let's move the decrement after releasing the socket in cleanup_bearer().

Record: CVE-2024-56642
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-416
Updated: 2026-11-02

EUVDEUVD-2024-53290 7.8

In the Linux kernel, the following vulnerability has been resolved:

tipc: Fix use-after-free of kernel socket in cleanup_bearer().

syzkaller reported a use-after-free of UDP kernel socket in cleanup_bearer() without repro. [0][1]

When bearer_disable() calls tipc_udp_disable(), cleanup of the UDP kernel socket is deferred by work calling cleanup_bearer().

Let's move the decrement after releasing the socket in cleanup_bearer().

Record: EUVD-2024-53290
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-wp52-h62r-qwj4 7.8

In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free of...

In the Linux kernel, the following vulnerability has been resolved:

tipc: Fix use-after-free of kernel socket in cleanup_bearer().

syzkaller reported a use-after-free of UDP kernel socket in cleanup_bearer() without repro. [0][1]

When bearer_disable() calls tipc_udp_disable(), cleanup of the UDP kernel socket is deferred by work calling cleanup_bearer().

tipc_net_stop() waits for such works to finish by checking tipc_net(net)->wq_count. However, the work decrements the count too early before releasing the kernel socket, unblocking cleanup_net() and resulting in use-after-free.

Let's move the decrement after releasing the socket in cleanup_bearer().

Record: GHSA-wp52-h62r-qwj4
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-416
Updated: 2026-11-02

NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

tipc: Fix use-after-free of kernel socket in cleanup_bearer().

syzkaller reported a use-after-free of UDP kernel socket in cleanup_bearer() without repro. [0][1]

When bearer_disable() calls tipc_udp_disable(), cleanup of the UDP kernel socket is deferred by work calling cleanup_bearer().

Let's move the decrement after releasing the socket in cleanup_bearer().

Record: CVE-2024-56642
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-416
Updated: 2026-11-02

OSVAZL-55163 7.8

CVE-2024-56642 affecting package kernel for versions less than 6.6.76.1-1

In the Linux kernel, the following vulnerability has been resolved:

tipc: Fix use-after-free of kernel socket in cleanup_bearer().

syzkaller reported a use-after-free of UDP kernel socket in cleanup_bearer() without repro. [0][1]

When bearer_disable() calls tipc_udp_disable(), cleanup of the UDP kernel socket is deferred by work calling cleanup_bearer().

Let's move the decrement after releasing the socket in cleanup_bearer().

Record: AZL-55163
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVAZL-55214 7.8

CVE-2024-56642 affecting package kernel for versions less than 5.15.176.3-1

In the Linux kernel, the following vulnerability has been resolved:

tipc: Fix use-after-free of kernel socket in cleanup_bearer().

syzkaller reported a use-after-free of UDP kernel socket in cleanup_bearer() without repro. [0][1]

When bearer_disable() calls tipc_udp_disable(), cleanup of the UDP kernel socket is deferred by work calling cleanup_bearer().

Let's move the decrement after releasing the socket in cleanup_bearer().

Record: AZL-55214
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 46 moreShow less

OSVBELL-CVE-2024-56642 7.8

Record: BELL-CVE-2024-56642
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSV 7.8

tipc: Fix use-after-free of kernel socket in cleanup_bearer().

In the Linux kernel, the following vulnerability has been resolved:

tipc: Fix use-after-free of kernel socket in cleanup_bearer().

syzkaller reported a use-after-free of UDP kernel socket in cleanup_bearer() without repro. [0][1]

When bearer_disable() calls tipc_udp_disable(), cleanup of the UDP kernel socket is deferred by work calling cleanup_bearer().

Let's move the decrement after releasing the socket in cleanup_bearer().

Record: CVE-2024-56642
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2024-56642 7.8

In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free of kernel socket in cleanup_bearer(). syzkaller reported a use-after-free of UDP kernel socket in cleanup_bearer() without repro. [0][1] When bearer_disable() calls tipc_udp_disable(), cleanup of the UDP kernel socket is deferred by work calling cleanup_bearer(). tipc_exit_net() waits for such works to finish by checking tipc_net(net)->wq_count. However, the work decrements the count too early before releasing the kernel socket, unblocking cleanup_net() and resulting in use-after-free. Let's move the decrement after releasing the socket in cleanup_bearer(). [0]: ref_tracker: net notrefcnt@000000009b3d1faf has 1/1 users at sk_alloc+0x438/0x608 inet_create+0x4c8/0xcb0 __sock_create+0x350/0x6b8 sock_create_kern+0x58/0x78 udp_sock_create4+0x68/0x398 udp_sock_create+0x88/0xc8 tipc_udp_enable+0x5e8/0x848 __tipc_nl_bearer_enable+0x84c/0xed8 tipc_nl_bearer_enable+0x38/0x60 genl_family_rcv_msg_doit+0x170/0x248 genl_rcv_msg+0x400/0x5b0 netlink_rcv_skb+0x1dc/0x398 genl_rcv+0x44/0x68 netlink_unicast+0x678/0x8b0 netlink_sendmsg+0x5e4/0x898 ____sys_sendmsg+0x500/0x830 [1]: BUG: KMSAN: use-after-free in udp_hashslot include/net/udp.h:85 [inline] BUG: KMSAN: use-after-free in udp_lib_unhash+0x3b8/0x930 net/ipv4/udp.c:1979 udp_hashslot include/net/udp.h:85 [inline] udp_lib_unhash+0x3b8/0x930 net/ipv4/udp.c:1979 sk_common_release+0xaf/0x3f0 net/core/sock.c:3820 inet_release+0x1e0/0x260 net/ipv4/af_inet.c:437 inet6_release+0x6f/0xd0 net/ipv6/af_inet6.c:489 __sock_release net/socket.c:658 [inline] sock_release+0xa0/0x210 net/socket.c:686 cleanup_bearer+0x42d/0x4c0 net/tipc/udp_media.c:819 process_one_work kernel/workqueue.c:3229 [inline] process_scheduled_works+0xcaf/0x1c90 kernel/workqueue.c:3310 worker_thread+0xf6c/0x1510 kernel/workqueue.c:3391 kthread+0x531/0x6b0 kernel/kthread.c:389 ret_from_fork+0x60/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:244 Uninit was created at: slab_free_hook mm/slub.c:2269 [inline] slab_free mm/slub.c:4580 [inline] kmem_cache_free+0x207/0xc40 mm/slub.c:4682 net_free net/core/net_namespace.c:454 [inline] cleanup_net+0x16f2/0x19d0 net/core/net_namespace.c:647 process_one_work kernel/workqueue.c:3229 [inline] process_scheduled_works+0xcaf/0x1c90 kernel/workqueue.c:3310 worker_thread+0xf6c/0x1510 kernel/workqueue.c:3391 kthread+0x531/0x6b0 kernel/kthread.c:389 ret_from_fork+0x60/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:244 CPU: 0 UID: 0 PID: 54 Comm: kworker/0:2 Not tainted 6.12.0-rc1-00131-gf66ebf37d69c #7 91723d6f74857f70725e1583cba3cf4adc716cfa Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 Workqueue: events cleanup_bearer

Record: DEBIAN-CVE-2024-56642
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2025-1067 8.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix out of bounds reads when finding clock sources The current USB-audio driver code doesn't check bLength of each descriptor at traversing for clock descriptors. That is, when a device provides a bogus descriptor with a shorter bLength, the driver might hit out-of-bounds reads. For addressing it, this patch adds sanity checks to the validator functions for the clock descriptor traversal. When the descriptor length is shorter than expected, it's skipped in the loop. For the clock source and clock multiplier descriptors, we can just check bLength against the sizeof() of each descriptor type. OTOH, the clock selector descriptor of UAC2 and UAC3 has an array of bNrInPins elements and two more fields at its tail, hence those have to be checked in addition to the sizeof() check.(CVE-2024-53150)

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix uninitialized value in ocfs2_file_read_iter() Syzbot has reported the following KMSAN splat: BUG: KMSAN: uninit-value in ocfs2_file_read_iter+0x9a4/0xf80 ocfs2_file_read_iter+0x9a4/0xf80 __io_read+0x8d4/0x20f0 io_read+0x3e/0xf0 io_issue_sqe+0x42b/0x22c0 io_wq_submit_work+0xaf9/0xdc0 io_worker_handle_work+0xd13/0x2110 io_wq_worker+0x447/0x1410 ret_from_fork+0x6f/0x90 ret_from_fork_asm+0x1a/0x30 Uninit was created at: __alloc_pages_noprof+0x9a7/0xe00 alloc_pages_mpol_noprof+0x299/0x990 alloc_pages_noprof+0x1bf/0x1e0 allocate_slab+0x33a/0x1250 ___slab_alloc+0x12ef/0x35e0 kmem_cache_alloc_bulk_noprof+0x486/0x1330 __io_alloc_req_refill+0x84/0x560 io_submit_sqes+0x172f/0x2f30 __se_sys_io_uring_enter+0x406/0x41c0 __x64_sys_io_uring_enter+0x11f/0x1a0 x64_sys_call+0x2b54/0x3ba0 do_syscall_64+0xcd/0x1e0 entry_SYSCALL_64_after_hwframe+0x77/0x7f Since an instance of 'struct kiocb' may be passed from the block layer with 'private' field uninitialized, introduce 'ocfs2_iocb_init_rw_locked()' and use it from where 'ocfs2_dio_end_io()' might take care, i.e. in 'ocfs2_file_read_iter()' and 'ocfs2_file_write_iter()'.(CVE-2024-53155)

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scpi: Check the DVFS OPP count returned by the firmware Fix a kernel crash with the below call trace when the SCPI firmware returns OPP count of zero. dvfs_info.opp_count may be zero on some platforms during the reboot test, and the kernel will crash after dereferencing the pointer to kcalloc(info->count, sizeof(*opp), GFP_KERNEL). | Unable to handle kernel NULL pointer dereference at virtual address 0000000000000028 | Mem abort info: | ESR = 0x96000004 | Exception class = DABT (current EL), IL = 32 bits | SET = 0, FnV = 0 | EA = 0, S1PTW = 0 | Data abort info: | ISV = 0, ISS = 0x00000004 | CM = 0, WnR = 0 | user pgtable: 4k pages, 48-bit VAs, pgdp = 00000000faefa08c | [0000000000000028] pgd=0000000000000000 | Internal error: Oops: 96000004 [#1] SMP | scpi-hwmon: probe of PHYT000D:00 failed with error -110 | Process systemd-udevd (pid: 1701, stack limit = 0x00000000aaede86c) | CPU: 2 PID: 1701 Comm: systemd-udevd Not tainted 4.19.90+ #1 | Hardware name: PHYTIUM LTD Phytium FT2000/4/Phytium FT2000/4, BIOS | pstate: 60000005 (nZCv daif -PAN -UAO) | pc : scpi_dvfs_recalc_rate+0x40/0x58 [clk_scpi] | lr : clk_register+0x438/0x720 | Call trace: | scpi_dvfs_recalc_rate+0x40/0x58 [clk_scpi] | devm_clk_hw_register+0x50/0xa0 | scpi_clk_ops_init.isra.2+0xa0/0x138 [clk_scpi] | scpi_clocks_probe+0x528/0x70c [clk_scpi] | platform_drv_probe+0x58/0xa8 | really_probe+0x260/0x3d0 | driver_probe_device+0x12c/0x148 | device_driver_attach+0x74/0x98 | __driver_attach+0xb4/0xe8 | bus_for_each_dev+0x88/0xe0 | …

Record: OESA-2025-1067
CVSS 3.1: 8.0 HighCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2025-1339 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

dma-debug: fix a possible deadlock on radix_lock

radix_lock() shouldn't be held while holding dma_hash_entry[idx].lock otherwise, there's a possible deadlock scenario when dma debug API is called holding rq_lock():

CPU0 CPU1 CPU2 dma_free_attrs() check_unmap() add_dma_entry() __schedule() //out (A) rq_lock() get_hash_bucket() (A) dma_entry_hash check_sync() (A) radix_lock() (W) dma_entry_hash dma_entry_free() (W) radix_lock() // CPU2's one (W) rq_lock()

CPU1 situation can happen when it extending radix tree and it tries to wake up kswapd via wake_all_kswapd().

CPU2 situation can happen while perf_event_task_sched_out() (i.e. dma sync operation is called while deleting perf_event using etm and etr tmc which are Arm Coresight hwtracing driver backends).

To remove this possible situation, call dma_entry_free() after put_hash_bucket() in check_unmap().(CVE-2024-47143)

In the Linux kernel, the following vulnerability has been resolved:

dlm: fix possible lkb_resource null dereference

This patch fixes a possible null pointer dereference when this function is called from request_lock() as lkb->lkb_resource is not assigned yet, only after validate_lock_args() by calling attach_lkb(). Another issue is that a resource name could be a non printable bytearray and we cannot assume to be ASCII coded.

The log functionality is probably never being hit when DLM is used in normal way and no debug logging is enabled. The null pointer dereference can only occur on a new created lkb that does not have the resource assigned yet, it probably never hits the null pointer dereference but we should be sure that other changes might not change this behaviour and we actually can hit the mentioned null pointer dereference.

In this patch we just drop the printout of the resource name, the lkb id is enough to make a possible connection to a resource name if this exists.(CVE-2024-47809)

In the Linux kernel, the following vulnerability has been resolved:

bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again

Commit 028ddcac477b ("bcache: Remove unnecessary NULL point check in node allocations") leads a NULL pointer deference in cache_set_flush().

1721 if (!IS_ERR_OR_NULL(c->root)) 1722 list_add(&c->root->list, &c->btree_cache);

>From the above code in cache_set_flush(), if previous registration code fails before allocating c->root, it is possible c->root is NULL as what it is initialized. __bch_btree_node_alloc() never returns NULL but c->root is possible to be NULL at above line 1721.

This patch replaces IS_ERR() by IS_ERR_OR_NULL() to fix this.(CVE-2024-48881)

In the Linux kernel, the following vulnerability has been resolved:

vfio/pci: Properly hide first-in-list PCIe extended capability

There are cases where a PCIe extended capability should be hidden from the user. For example, an unknown capability (i.e., capability with ID greater than PCI_EXT_CAP_ID_MAX) or a capability that is intentionally chosen to be hidden from the user.

Hiding a capability is done by virtualizing and modifying the 'Next Capability Offset' field of the previous capability so it points to the capability after the one that should be hidden.

The special case where the first capability in the list should be hidden is handled differently because there is no previous capability that can be modified. In this case, the capability ID and version are zeroed while leaving the next pointer intact. This hides the capability and leaves an anchor for the rest of the capability list.

However, today,…

Record: OESA-2025-1339
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2025-1340 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

tipc: Fix use-after-free of kernel socket in cleanup_bearer().

syzkaller reported a use-after-free of UDP kernel socket in cleanup_bearer() without repro. [0][1]

When bearer_disable() calls tipc_udp_disable(), cleanup of the UDP kernel socket is deferred by work calling cleanup_bearer().

Let's move the decrement after releasing the socket in cleanup_bearer().

In the Linux kernel, the following vulnerability has been resolved:

net: hsr: avoid potential out-of-bound access in fill_frame_info()

syzbot is able to feed a packet with 14 bytes, pretending it is a vlan one.

Since fill_frame_info() is relying on skb->mac_len already, extend the check to cover this case.

BUG: KMSAN: uninit-value in fill_frame_info net/hsr/hsr_forward.c:709 [inline] BUG: KMSAN: uninit-value in hsr_forward_skb+0x9ee/0x3b10 net/hsr/hsr_forward.c:724 fill_frame_info net/hsr/hsr_forward.c:709 [inline] hsr_forward_skb+0x9ee/0x3b10 net/hsr/hsr_forward.c:724 hsr_dev_xmit+0x2f0/0x350 net/hsr/hsr_device.c:235 __netdev_start_xmit include/linux/netdevice.h:5002 [inline] netdev_start_xmit include/linux/netdevice.h:5011 [inline] xmit_one net/core/dev.c:3590 [inline] dev_hard_start_xmit+0x247/0xa20 net/core/dev.c:3606 __dev_queue_xmit+0x366a/0x57d0 net/core/dev.c:4434 dev_queue_xmit…

Record: OESA-2025-1340
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2025-1409 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'

All error handling paths lead to 'out' where many resources are freed.

Do it as well here instead of a direct return, otherwise 'log', 'ra' and 'log->one_page_buf' (at least) will leak.(CVE-2021-47660)

In the Linux kernel, the following vulnerability has been resolved:

list: fix a data-race around ep->rdllist

ep_poll() first calls ep_events_available() with no lock held and checks if ep->rdllist is empty by list_empty_careful(), which reads rdllist->prev. Thus all accesses to it need some protection to avoid store/load-tearing.

Note INIT_LIST_HEAD_RCU() already has the annotation for both prev and next.

Commit bf3b9f6372c4 ("epoll: Add busy poll support to epoll with socket fds.") added the first lockless ep_events_available(), and commit c5a282e9635e ("fs/epoll: reduce the scope of wq lock in epoll_wait()") made some ep_events_available() calls lockless and added single call under a lock, finally commit e59d3c64cba6 ("epoll: eliminate unnecessary lock for zero timeout") made the last ep_events_available() lockless.

BUG: KCSAN: data-race in do_epoll_wait / do_epoll_wait

write to 0xffff88810480c7d8 of 8 bytes by task 1802 on cpu 0: INIT_LIST_HEAD include/linux/list.h:38 [inline] list_splice_init include/linux/list.h:492 [inline] ep_start_scan fs/eventpoll.c:622 [inline] ep_send_events fs/eventpoll.c:1656 [inline] ep_poll fs/eventpoll.c:1806 [inline] do_epoll_wait+0x4eb/0xf40 fs/eventpoll.c:2234 do_epoll_pwait fs/eventpoll.c:2268 [inline] __do_sys_epoll_pwait fs/eventpoll.c:2281 [inline] __se_sys_epoll_pwait+0x12b/0x240 fs/eventpoll.c:2275 __x64_sys_epoll_pwait+0x74/0x80 fs/eventpoll.c:2275 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff88810480c7d8 of 8 bytes by task 1799 on cpu 1: list_empty_careful include/linux/list.h:329 [inline] ep_events_available fs/eventpoll.c:381 [inline] ep_poll fs/eventpoll.c:1797 [inline] do_epoll_wait+0x279/0xf40 fs/eventpoll.c:2234 do_epoll_pwait fs/eventpoll.c:2268 [inline] __do_sys_epoll_pwait fs/eventpoll.c:2281 [inline] __se_sys_epoll_pwait+0x12b/0x240 fs/eventpoll.c:2275 __x64_sys_epoll_pwait+0x74/0x80 fs/eventpoll.c:2275 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0xffff88810480c7d0 -> 0xffff888103c15098

Reported by Kernel Concurrency Sanitizer on: CPU: 1 PID: 1799 Comm: syz-fuzzer Tainted: G W 5.17.0-rc7-syzkaller-dirty #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011(CVE-2022-49443)

In the Linux kernel, the following vulnerability has been resolved:

cpufreq: governor: Use kobject release() method to free dbs_data

The struct dbs_data embeds a struct gov_attr_set and the struct gov_attr_set embeds a kobject. Since every kobject must have a release() method and we can't use kfree() to free it directly, so introduce cpufreq_dbs_data_release() to release the dbs_data via the kobject::release() method. This fixes the calltrace like below:

ODEBUG: free active (active state 0) object type: timer_list hint: delayed_work_timer_fn+0x0/0x34 WARNING: CPU: 12 PID: 810 at lib/debugobjects.c:505 debug_print_object+0xb8/0x100 Modules linked in: CPU: 12 PID: 810 Comm: sh Not tainted 5.16.0-next-20220120-yocto-standard+ #536 Hardware name: Marvell OcteonTX CN96XX board (DT) pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : debug_print_object+0xb8/0x100 lr : debug_print_object+0xb8/0x100 sp : ffff80001dfcf9a0 x29: ffff80001dfcf9a0 x28:…

Record: OESA-2025-1409
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2025-1410 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'

All error handling paths lead to 'out' where many resources are freed.

Do it as well here instead of a direct return, otherwise 'log', 'ra' and 'log->one_page_buf' (at least) will leak.(CVE-2021-47660)

In the Linux kernel, the following vulnerability has been resolved:

list: fix a data-race around ep->rdllist

Note INIT_LIST_HEAD_RCU() already has the annotation for both prev and next.

BUG: KCSAN: data-race in do_epoll_wait / do_epoll_wait

value changed: 0xffff88810480c7d0 -> 0xffff888103c15098

In the Linux kernel, the following vulnerability has been resolved:

cpufreq: governor: Use kobject release() method to free dbs_data

Record: OESA-2025-1410
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2025:6966 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:6966
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2024-56642 7.3

Record: UBUNTU-CVE-2024-56642
CVSS 4.0: 7.3 HighCVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVCLSA-2025-1738671431 No score

kernel: Fix of 43 CVEs

smb: client: fix use-after-free of signing key {CVE-2024-53179}
smb: client: stop flooding dmesg in smb2_calc_signature() {CVE-2024-53179}
smb3: fix oops in calculating shash_setkey {CVE-2024-53179}
cifs: return correct error in ->calc_signature() {CVE-2024-53179}
cifs: secmech: use shash_desc directly, remove sdesc {CVE-2024-53179}
cifs: replace kfree() with kfree_sensitive() for sensitive data {CVE-2024-53179}
xsk: fix OOB map writes when deleting elements {CVE-2024-56614}
hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer {CVE-2024-53103}
scsi: sg: Fix slab-use-after-free read in sg_release() {CVE-2024-56631}
EDAC/igen6: Avoid segmentation fault on module unload {CVE-2024-56708}
acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl {CVE-2024-56662}
net: inet: do not leave a dangling sk pointer in inet_create() {CVE-2024-56601}
initramfs: avoid filename buffer overrun {CVE-2024-53142}
ALSA: usb-audio: Fix out of bounds reads when finding clock sources {CVE-2024-53150}
Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() {CVE-2024-56604}
wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() {CVE-2024-53156}
Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() {CVE-2024-56605}
Bluetooth: msft: fix slab-use-after-free in msft_do_close() {CVE-2024-36012}
Bluetooth: Fix support for Read Local Supported Codecs V2 {CVE-2024-36012}
Bluetooth: hci_codec: Fix leaking content of local_codecs {CVE-2024-36012}
blk-cgroup: Fix UAF in blkcg_unpin_online() {CVE-2024-56672}
net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() {CVE-2024-56602}
net: inet6: do not leave a dangling sk pointer in inet6_create() {CVE-2024-56600}
NFSv4.0: Fix a use-after-free problem in the asynchronous open() {CVE-2024-53173}
net: af_can: do not leave a dangling sk pointer in can_create() {CVE-2024-56603}
drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 {CVE-2023-52818}
bpf, sockmap: Fix race between element replace and close() {CVE-2024-56664}
ceph: prevent use-after-free in encode_cap_msg() {CVE-2024-26689}
drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' {CVE-2024-56608}
netfilter: ipset: add missing range check in bitmap_ip_uadt {CVE-2024-53141}
HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit {CVE-2023-52519}
tipc: Fix use-after-free of kernel socket in cleanup_bearer(). {CVE-2024-56642}
cifs: Fix buffer overflow when parsing NFS reparse points {CVE-2024-49996}
Input: powermate - fix use-after-free in powermate_config_complete {CVE-2023-52475}
PM / devfreq: Fix buffer overflow in trans_stat_show {CVE-2023-52614}
PM / devfreq: Rework freq_table to be local to devfreq struct {CVE-2023-52614}
cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() {CVE-2024-41057}
cachefiles: fix slab-use-after-free in fscache_withdraw_volume() {CVE-2024-41058}
[ELSCVE-37480] netfs, fscache: export fscache_put_volume() and add fscache_try_get_volume() {CVE-2024-41058}
memcg: fix possible use-after-free in memcg_write_event_control() {CVE-2022-48988}
Bluetooth: ISO: Fix UAF on iso_sock_timeout {CVE-2024-50124}
Bluetooth: SCO: Fix UAF on sco_sock_timeout {CVE-2024-50125}
Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout {CVE-2024-50125}
Bluetooth: Consolidate code around sk_alloc into a helper function {CVE-2024-50125}
smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect() {CVE-2024-35861}
gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() {CVE-2024-26754}
smb: client: fix potential UAF in cifs_stats_proc_write() {CVE-2024-35868}
smb: client: fix potential UAF in cifs_debug_files_proc_show() {CVE-2024-35868}
vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans {CVE-2024-50264}
net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT {CVE-2024-53057}
wifi:…

Record: CLSA-2025-1738671431
Updated: 2026-11-02

OSVCLSA-2025-1739525795 No score

kernel: Fix of 24 CVEs

media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format {CVE-2024-53104}
wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() {CVE-2024-53156}
xsk: fix OOB map writes when deleting elements {CVE-2024-56614}
hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer {CVE-2024-53103}
net: inet: do not leave a dangling sk pointer in inet_create() {CVE-2024-56601}
scsi: sg: Fix slab-use-after-free read in sg_release() {CVE-2024-56631}
scsi: sg: Enable runtime power management {CVE-2024-56631}
scsi: sg: Avoid race in error handling & drop bogus warn {CVE-2024-56631}
scsi: sg: Avoid sg device teardown race {CVE-2024-56631}
initramfs: avoid filename buffer overrun {CVE-2024-53142}
Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() {CVE-2024-56604}
cifs: Fix use-after-free in rdata->read_into_pages() {CVE-2023-52741}
Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() {CVE-2024-56605}
af_packet: avoid erroring out after sock_init_data() in packet_create() {CVE-2024-56606}
net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() {CVE-2024-56602}
net: inet6: do not leave a dangling sk pointer in inet6_create() {CVE-2024-56600}
NFSv4.0: Fix a use-after-free problem in the asynchronous open() {CVE-2024-53173}
net: af_can: do not leave a dangling sk pointer in can_create() {CVE-2024-56603}
drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 {CVE-2023-52818}
rds: tcp: Fix use-after-free of net in reqsk_timer_handler(). {CVE-2024-26865}
tcp: Save unnecessary inet_twsk_purge() calls. {CVE-2024-26865}
ceph: prevent use-after-free in encode_cap_msg() {CVE-2024-26689}
drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' {CVE-2024-56608}
bpf: Check validity of link->type in bpf_link_show_fdinfo() {CVE-2024-53099}
drm/amd/pm: fix a double-free in si_dpm_init {CVE-2023-52691}
netfilter: ipset: add missing range check in bitmap_ip_uadt {CVE-2024-53141}
tipc: fix NULL deref in cleanup_bearer() {CVE-2024-56661}
tipc: Fix use-after-free of kernel socket in cleanup_bearer(). {CVE-2024-56642}

Record: CLSA-2025-1739525795
Updated: 2026-11-02

OSVCLSA-2025-1739525834 No score

kernel: Fix of 24 CVEs

media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format {CVE-2024-53104}
wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() {CVE-2024-53156}
xsk: fix OOB map writes when deleting elements {CVE-2024-56614}
hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer {CVE-2024-53103}
net: inet: do not leave a dangling sk pointer in inet_create() {CVE-2024-56601}
scsi: sg: Fix slab-use-after-free read in sg_release() {CVE-2024-56631}
scsi: sg: Enable runtime power management {CVE-2024-56631}
scsi: sg: Avoid race in error handling & drop bogus warn {CVE-2024-56631}
scsi: sg: Avoid sg device teardown race {CVE-2024-56631}
initramfs: avoid filename buffer overrun {CVE-2024-53142}
Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() {CVE-2024-56604}
cifs: Fix use-after-free in rdata->read_into_pages() {CVE-2023-52741}
Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() {CVE-2024-56605}
af_packet: avoid erroring out after sock_init_data() in packet_create() {CVE-2024-56606}
net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() {CVE-2024-56602}
net: inet6: do not leave a dangling sk pointer in inet6_create() {CVE-2024-56600}
NFSv4.0: Fix a use-after-free problem in the asynchronous open() {CVE-2024-53173}
net: af_can: do not leave a dangling sk pointer in can_create() {CVE-2024-56603}
drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 {CVE-2023-52818}
rds: tcp: Fix use-after-free of net in reqsk_timer_handler(). {CVE-2024-26865}
tcp: Save unnecessary inet_twsk_purge() calls. {CVE-2024-26865}
ceph: prevent use-after-free in encode_cap_msg() {CVE-2024-26689}
drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' {CVE-2024-56608}
bpf: Check validity of link->type in bpf_link_show_fdinfo() {CVE-2024-53099}
drm/amd/pm: fix a double-free in si_dpm_init {CVE-2023-52691}
netfilter: ipset: add missing range check in bitmap_ip_uadt {CVE-2024-53141}
tipc: fix NULL deref in cleanup_bearer() {CVE-2024-56661}
tipc: Fix use-after-free of kernel socket in cleanup_bearer(). {CVE-2024-56642}
tipc: wait and exit until all work queues are done {CVE-2024-56642}

Record: CLSA-2025-1739525834
Updated: 2026-11-02

OSVCLSA-2025-1746479711 No score

kernel-uek: Fix of 225 CVEs

sctp: sysctl: auth_enable: avoid using current->nsproxy
sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy {CVE-2025-21640}
bpf: Use preempt_count() directly in bpf_send_signal_common()
Revert "sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy"
jfs: fix slab-out-of-bounds read in ea_get()
serial: 8250_dma: terminate correct DMA in tx_dma_flush()
Revert "sctp: sysctl: auth_enable: avoid using current->nsproxy"
net: usb: usbnet: restore usb%d name exception for local mac addresses
vlan: fix memory leak in vlan_newlink() {CVE-2022-49636}
rds: ib: Fix NULL ptr deref in rds_ib_cq_follow_affinity
LTS tag: v5.4.291
eeprom: digsy_mtc: Make GPIO lookup table match the device
slimbus: messaging: Free transaction ID in delayed interrupt scenario {CVE-2025-21914}
intel_th: pci: Add Panther Lake-P/U support
intel_th: pci: Add Panther Lake-H support
intel_th: pci: Add Arrow Lake support
Squashfs: check the inode number is not the invalid value of zero {CVE-2024-26982}
xhci: pci: Fix indentation in the PCI device ID definitions
usb: gadget: Check bmAttributes only if configuration is valid
usb: gadget: Fix setting self-powered state on suspend
usb: gadget: Set self-powered based on MaxPower and bmAttributes
usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality
usb: typec: ucsi: increase timeout for PPM reset operations
usb: atm: cxacru: fix a flaw in existing endpoint checks {CVE-2025-21916}
usb: renesas_usbhs: Flush the notify_hotplug_work {CVE-2025-21917}
usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader
usb: renesas_usbhs: Use devm_usb_get_phy()
usb: renesas_usbhs: Call clk_put()
Revert "drivers/card_reader/rtsx_usb: Restore interrupt based detection"
gpio: rcar: Fix missing of_node_put() call
net: ipv6: fix missing dst ref drop in ila lwtunnel
net: ipv6: fix dst ref loop in ila lwtunnel
net-timestamp: support TCP GSO case for a few missing flags
vlan: enforce underlying device type {CVE-2025-21920}
ppp: Fix KMSAN uninit-value warning with bpf {CVE-2025-21922}
be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink
drm/sched: Fix preprocessor guard
hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe()
llc: do not use skb_get() before dev_queue_xmit() {CVE-2025-21925}
hwmon: (ad7314) Validate leading zero bits and return error
hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table
hwmon: (pmbus) Initialise page count in pmbus_identify()
caif_virtio: fix wrong pointer check in cfv_probe() {CVE-2025-21904}
net: gso: fix ownership in __udp_gso_segment {CVE-2025-21926}
HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() {CVE-2025-21928}
HID: google: fix unused variable warning under !CONFIG_ACPI
wifi: iwlwifi: limit printed string from FW file {CVE-2025-21905}
mm/page_alloc: fix uninitialized variable
rapidio: fix an API misues when rio_add_net() fails {CVE-2025-21934}
rapidio: add check for rio_add_net() in rio_scan_alloc_net()
wifi: nl80211: reject cooked mode if it is set along with other flags {CVE-2025-21909}
wifi: cfg80211: regulatory: improve invalid hints checking {CVE-2025-21910}
x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63
x86/cpu: Validate CPUID leaf 0x2 EDX output
x86/cacheinfo: Validate CPUID leaf 0x2 EDX output
platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e
drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M
ALSA: hda/realtek: update ALC222 depop optimize
ALSA: hda: intel: Add Dell ALC3271 to power_save denylist
HID: appleir: Fix potential NULL dereference at raw event handle {CVE-2025-21948}
Revert "of: reserved-memory: Fix using wrong number of cells to get property 'alignment'"
drm/amdgpu: disable BAR resize on Dell G5 SE
drm/amdgpu: Check extended configuration space register when system uses large bar
drm/amdgpu: skip BAR resizing if the bios already…

Record: CLSA-2025-1746479711
Updated: 2026-11-02

OSVCLSA-2025-1747430081 No score

Fix of 47 CVEs

CVE-url: https://ubuntu.com/security/CVE-2021-47352
- virtio-net: Add validation for used length
CVE-url: https://ubuntu.com/security/CVE-2024-46745
- Input: uinput - reject requests with unreasonable number of slots
CVE-url: https://ubuntu.com/security/CVE-2024-44952
- driver core: Fix uevent_show() vs driver detach race
CVE-url: https://ubuntu.com/security/CVE-2024-42304
- ext4: make sure the first directory block is not a hole
CVE-url: https://ubuntu.com/security/CVE-2024-42305
- ext4: check dot and dotdot of dx_root before making dir indexed
CVE-url: https://ubuntu.com/security/CVE-2024-53168
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
CVE-url: https://ubuntu.com/security/CVE-2024-49925
- driver core: add dev_groups to all drivers
- driver core: Fix error return code in really_probe()
- fbdev: efifb: Register sysfs groups through driver core
CVE-url: https://ubuntu.com/security/CVE-2024-56661
- tipc: fix NULL deref in cleanup_bearer()
CVE-url: https://ubuntu.com/security/CVE-2024-56642
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
CVE-url: https://ubuntu.com/security/CVE-2021-47163
- tipc: wait and exit until all work queues are done
CVE-url: https://ubuntu.com/security/CVE-2024-26915
- drm/amdgpu: fix IH overflow on Vega10 v2
- drm/amdgpu: Add check to prevent IH overflow
- drm/amdgpu: Reset IH OVERFLOW_CLEAR bit
CVE-url: https://ubuntu.com/security/CVE-2024-56770
- net/sched: netem: account for backlog updates from child qdisc
- netem: Update sch->q.qlen before qdisc_tree_reduce_backlog()
CVE-url: https://ubuntu.com/security/CVE-2024-50296
- net: hns3: fix kernel crash when uninstalling driver
CVE-url: https://ubuntu.com/security/CVE-2024-53066
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
CVE-url: https://ubuntu.com/security/CVE-2024-49944
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
CVE-url: https://ubuntu.com/security/CVE-2024-50237
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
CVE-url: https://ubuntu.com/security/CVE-2024-46780
- nilfs2: protect references to superblock parameters exposed in sysfs
CVE-url: https://ubuntu.com/security/CVE-2024-53063
- media: dvbdev: prevent the risk of out of memory access
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
CVE-url: https://ubuntu.com/security/CVE-2023-52927
- netfilter: allow exp not to be removed in nf_ct_find_expectation
CVE-url: https://ubuntu.com/security/CVE-2021-47150
- net: fec: fix the potential memory leak in fec_enet_init()
CVE-url: https://ubuntu.com/security/CVE-2024-53140
- netlink: terminate outstanding dump on socket close
CVE-url: https://ubuntu.com/security/CVE-2025-21971
- net_sched: Prevent creation of classes with TC_H_ROOT
CVE-url: https://ubuntu.com/security/CVE-2025-37785
- ext4: fix OOB read when checking dotdot dir
CVE-url: https://ubuntu.com/security/CVE-2023-52572
- cifs: Fix UAF in cifs_demultiplex_thread()
CVE-url: https://ubuntu.com/security/CVE-2022-49738
- f2fs: fix to do sanity check on summary info
- f2fs: should put a page when checking the summary info
- f2fs: fix to do sanity check on i_extra_isize in is_alive()
CVE-url: https://ubuntu.com/security/CVE-2022-49740
- wifi: brcmfmac: Check the count value of channel spec to prevent out-of- bounds reads
CVE-url: https://ubuntu.com/security/
- ipv6: Define dscp_t and stop taking ECN bits into account in fib6-rules
CVE-url: https://ubuntu.com/security/CVE-2023-53020
- l2tp: close all race conditions in l2tp_tunnel_register()
CVE-url: https://ubuntu.com/security/CVE-2025-21957
- scsi: qla1280: Fix kernel oops when debug level > 2 *…

Record: CLSA-2025-1747430081
Updated: 2026-11-02

OSVCLSA-2025-1747431461 No score

Fix of 39 CVEs

[ Ubuntu: 4.15.0-247.258 ]

CVE-url: https://ubuntu.com/security/CVE-2021-47352
- virtio-net: Add validation for used length
CVE-url: https://ubuntu.com/security/CVE-2024-46745
- Input: uinput - reject requests with unreasonable number of slots
CVE-url: https://ubuntu.com/security/CVE-2024-44952
- driver core: Fix uevent_show() vs driver detach race
CVE-url: https://ubuntu.com/security/CVE-2024-42304
- ext4: make sure the first directory block is not a hole
CVE-url: https://ubuntu.com/security/CVE-2024-42305
- ext4: check dot and dotdot of dx_root before making dir indexed
CVE-url: https://ubuntu.com/security/CVE-2024-53168
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
CVE-url: https://ubuntu.com/security/CVE-2024-49925
- driver core: add dev_groups to all drivers
- driver core: Fix error return code in really_probe()
- fbdev: efifb: Register sysfs groups through driver core
CVE-url: https://ubuntu.com/security/CVE-2024-56661
- tipc: fix NULL deref in cleanup_bearer()
CVE-url: https://ubuntu.com/security/CVE-2024-56642
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
CVE-url: https://ubuntu.com/security/CVE-2021-47163
- tipc: wait and exit until all work queues are done
CVE-url: https://ubuntu.com/security/CVE-2024-26915
- drm/amdgpu: fix IH overflow on Vega10 v2
- drm/amdgpu: Add check to prevent IH overflow
- drm/amdgpu: Reset IH OVERFLOW_CLEAR bit
CVE-url: https://ubuntu.com/security/CVE-2024-56770
- net/sched: netem: account for backlog updates from child qdisc
- netem: Update sch->q.qlen before qdisc_tree_reduce_backlog()
CVE-url: https://ubuntu.com/security/CVE-2024-50296
- net: hns3: fix kernel crash when uninstalling driver
CVE-url: https://ubuntu.com/security/CVE-2024-53066
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
CVE-url: https://ubuntu.com/security/CVE-2024-49944
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
CVE-url: https://ubuntu.com/security/CVE-2024-50237
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
CVE-url: https://ubuntu.com/security/CVE-2024-46780
- nilfs2: protect references to superblock parameters exposed in sysfs
CVE-url: https://ubuntu.com/security/CVE-2024-53063
- media: dvbdev: prevent the risk of out of memory access
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
CVE-url: https://ubuntu.com/security/CVE-2023-52927
- netfilter: allow exp not to be removed in nf_ct_find_expectation
CVE-url: https://ubuntu.com/security/CVE-2021-47150
- net: fec: fix the potential memory leak in fec_enet_init()
CVE-url: https://ubuntu.com/security/CVE-2024-53140
- netlink: terminate outstanding dump on socket close
CVE-url: https://ubuntu.com/security/CVE-2025-21971
- net_sched: Prevent creation of classes with TC_H_ROOT
CVE-url: https://ubuntu.com/security/CVE-2025-37785
- ext4: fix OOB read when checking dotdot dir
CVE-url: https://ubuntu.com/security/CVE-2023-52572
- cifs: Fix UAF in cifs_demultiplex_thread()
CVE-url: https://ubuntu.com/security/CVE-2022-49738
- f2fs: fix to do sanity check on summary info
- f2fs: should put a page when checking the summary info
- f2fs: fix to do sanity check on i_extra_isize in is_alive()
CVE-url: https://ubuntu.com/security/CVE-2022-49740
- wifi: brcmfmac: Check the count value of channel spec to prevent out-of- bounds reads
CVE-url: https://ubuntu.com/security/
- ipv6: Define dscp_t and stop taking ECN bits into account in fib6-rules
CVE-url: https://ubuntu.com/security/CVE-2023-53020
- l2tp: close all race conditions in l2tp_tunnel_register()
CVE-url: https://ubuntu.com/security/CVE-2025-21957
- scsi: qla1280: Fix kernel oops…

Record: CLSA-2025-1747431461
Updated: 2026-11-02

OSVCLSA-2025-1749548218 No score

Fix of 6 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-57896
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
CVE-url: https://ubuntu.com/security/CVE-2024-56551
- drm/amdgpu: fix usage slab after free
CVE-url: https://ubuntu.com/security/CVE-2021-47211
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
CVE-url: https://ubuntu.com/security/CVE-2024-56661
- tipc: fix NULL deref in cleanup_bearer()
CVE-url: https://ubuntu.com/security/CVE-2024-56642
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
CVE-url: https://ubuntu.com/security/CVE-2021-47163
- tipc: wait and exit until all work queues are done
Miscellaneous upstream changes
- Revert "block: add check that partition length needs to be aligned with block size"

Record: CLSA-2025-1749548218
Updated: 2026-11-02

OSVMGASA-2025-0030 No score

Updated kernel, kmod-virtualbox, kmod-xtables-addons & dwarves packages fix security vulnerabilities

Upstream kernel version 6.6.74 fixes bugs and vulnerabilities. The kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new kernel. For information about the vulnerabilities see the links.

Record: MGASA-2025-0030
Updated: 2026-11-02

OSVMGASA-2025-0032 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.74 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links.

Record: MGASA-2025-0032
Updated: 2026-11-02

OSVSUSE-SU-2025:01633-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-49111: Bluetooth: Fix use after free in hci_send_acl (bsc#1237984).
CVE-2025-21726: padata: avoid UAF for reorder_work (bsc#1238865).
CVE-2025-21785: arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (bsc#1238747).
CVE-2025-21791: vrf: use RCU protection in l3mdev_l3_out() (bsc#1238512).
CVE-2025-22004: net: atm: fix use after free in lec_send() (bsc#1240835).
CVE-2025-22020: memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (bsc#1241280).
CVE-2025-22055: net: fix geneve_opt length integer overflow (bsc#1241371).

Record: SUSE-SU-2025:01633-1
Updated: 2026-11-02

OSVSUSE-SU-2025:0236-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-48742: rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() (bsc#1226694).
CVE-2022-49033: btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() (bsc#1232045).
CVE-2022-49035: media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE (bsc#1215304).
CVE-2023-52434: Fixed potential OOBs in smb2_parse_contexts() (bsc#1220148).
CVE-2023-52922: can: bcm: Fix UAF in bcm_proc_show() (bsc#1233977).
CVE-2024-26976: KVM: Always flush async #PF workqueue when vCPU is being destroyed (bsc#1223635).
CVE-2024-35847: irqchip/gic-v3-its: Prevent double free on error (bsc#1224697).
CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
CVE-2024-47141: pinmux: Use sequential access to access desc->pinmux data (bsc#1235708).
CVE-2024-47666: scsi: pm80xx: Set phy->enable_completion only when we wait for it (bsc#1231453).
CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
CVE-2024-49944: sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (bsc#1232166).
CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50166: fsl/fman: Fix refcount handling of fman-related devices (bsc#1233050).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50211: udf: refactor inode_bmap() to handle error (bsc#1233096).
CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
CVE-2024-50287: media: v4l2-tpg: prevent the risk of a division by zero (bsc#1233476).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
CVE-2024-53101: fs: Fix uninitialized value issue in from_kuid and from_kgid (bsc#1233769).
CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234853).
CVE-2024-53150: ALSA: usb-audio: Fix out of bounds reads when finding clock sources (bsc#1234834).
CVE-2024-53156: wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (bsc#1234846).
CVE-2024-53157: firmware: arm_scpi: Check the DVFS OPP count returned by the firmware (bsc#1234827).
CVE-2024-53172: ubi: fastmap: Fix duplicate slab cache names while attaching (bsc#1234898).
CVE-2024-53173: NFSv4.0: Fix a use-after-free problem in the asynchronous open() (bsc#1234891).
CVE-2024-53179: smb: client: fix use-after-free of signing key (bsc#1234921).
CVE-2024-53198: xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (bsc#1234923).
CVE-2024-53210: s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (bsc#1234971).
CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235004).
CVE-2024-53224: RDMA/mlx5: Cancel pkey work before destroying device resources (bsc#1235009).
CVE-2024-53239: ALSA: 6fire: Release resources at card release (bsc#1235054).
CVE-2024-53240: xen/netfront: fix crash when removing device (bsc#1234281).
CVE-2024-56531: ALSA: caiaq: Use snd_card_free_when_closed() at disconnection (bsc#1235057).
CVE-2024-56548: hfsplus: do not query the device logical block size multiple times (bsc#1235073). -…

Record: SUSE-SU-2025:0236-1
Updated: 2026-11-02

OSVSUSE-SU-2025:0289-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52489: mm/sparsemem: fix race in accessing memory_section->usage (bsc#1221326).
CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355).
CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
CVE-2024-36915: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies (bsc#1225758).
CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).
CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).
CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
CVE-2024-49944: sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (bsc#1232166).
CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
CVE-2024-49952: netfilter: nf_tables: prevent nf_skb_duplicated corruption (bsc#1232157).
CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
CVE-2024-50252: mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (bsc#1233201).
CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233468).
CVE-2024-50296: net: hns3: fix kernel crash when uninstalling driver (bsc#1233485).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-53043: mctp i2c: handle NULL header address (bsc#1233523).
CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
CVE-2024-53051: drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability (bsc#1233547).
CVE-2024-53055: wifi: iwlwifi: mvm: fix 6 GHz scan construction (bsc#1233550).
CVE-2024-53056: drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() (bsc#1233568).
CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
CVE-2024-53105: mm: page_alloc: move mlocked flag…

Record: SUSE-SU-2025:0289-1
Updated: 2026-11-02

OSVSUSE-SU-2025:0428-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52489: mm/sparsemem: fix race in accessing memory_section->usage (bsc#1221326).
CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
CVE-2024-53170: block: fix uaf for flush rq while iterating tags (bsc#1234888).
CVE-2024-53172: ubi: fastmap: Fix duplicate slab cache names while attaching (bsc#1234898).
CVE-2024-53175: ipc: fix memleak if msg_init_ns failed in create_ipc_ns (bsc#1234893).
CVE-2024-53185: smb: client: fix NULL ptr deref in crypto_aead_setkey() (bsc#1234901).
CVE-2024-53187: io_uring: check for overflows in io_pin_pages (bsc#1234947).
CVE-2024-53195: KVM: arm64: Get rid of userspace_irqchip_in_use (bsc#1234957).
CVE-2024-53196: KVM: arm64: Do not retire aborted MMIO instruction (bsc#1234906).
CVE-2024-53198: xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (bsc#1234923).
CVE-2024-53203: usb: typec: fix potential array underflow in ucsi_ccg_sync_control() (bsc#1235001).
CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).
CVE-2024-53232: iommu/s390: Implement blocking domain (bsc#1235050).
CVE-2024-53236: xsk: Free skb when TX metadata options are invalid (bsc#1235000).
CVE-2024-53685: ceph: give up on paths longer than PATH_MAX (bsc#1235720).
CVE-2024-55639: net: renesas: rswitch: avoid use-after-put for a device tree node (bsc#1235737).
CVE-2024-55881: KVM: x86: Play nice with protected guests in complete_hypercall_exit() (bsc#1235745).
CVE-2024-56372: net: tun: fix tun_napi_alloc_frags() (bsc#1235753).
CVE-2024-56568: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032).
CVE-2024-56569: ftrace: Fix regression with module command in stack_trace_filter (bsc#1235031).
CVE-2024-56570: ovl: Filter invalid inodes with missing lookup function (bsc#1235035).
CVE-2024-56588: scsi: hisi_sas: Create all dump files during debugfs initialization (bsc#1235123).
CVE-2024-56589: scsi: hisi_sas: Add cond_resched() for no forced preemption model (bsc#1235241).
CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521).
CVE-2024-56603: net: af_can: do not leave a dangling sk pointer in can_create() (bsc#1235415).
CVE-2024-56605: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (bsc#1235061).
CVE-2024-56608: drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'…

Record: SUSE-SU-2025:0428-1
Updated: 2026-11-02

OSVSUSE-SU-2025:0499-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2025-21682: eth: bnxt: always recalculate features after XDP clearing, fix null-deref (bsc#1236703).
CVE-2025-21678: gtp: Destroy device along with udp socket's netns dismantle (bsc#1236698).
CVE-2025-21676: net: fec: handle page_pool_dev_alloc_pages error (bsc#1236696).
CVE-2025-21675: net/mlx5: Clear port select structure when fail to create (bsc#1236694).
CVE-2025-21674: net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel (bsc#1236688).
CVE-2025-21670: vsock/bpf: return early if transport is not assigned (bsc#1236685).
CVE-2025-21669: vsock/virtio: discard packets if the transport changes (bsc#1236683).
CVE-2025-21666: vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] (bsc#1236680).
CVE-2025-21664: dm thin: make get_first_thin use rcu-safe list first function (bsc#1236262).
CVE-2025-21663: net: stmmac: dwmac-tegra: Read iommu stream id from device tree (bsc#1236260).
CVE-2025-21662: net/mlx5: Fix variable not being completed when function returns (bsc#1236198).
CVE-2025-21655: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (bsc#1236163).
CVE-2025-21653: net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (bsc#1236161).
CVE-2025-21652: ipvlan: Fix use-after-free in ipvlan_get_iflink() (bsc#1236160).
CVE-2025-21651: net: hns3: do not auto enable misc vector (bsc#1236145).
CVE-2025-21650: net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue (bsc#1236144).
CVE-2025-21649: net: hns3: fix kernel crash when 1588 is sent on HIP08 devices (bsc#1236143).
CVE-2025-21632: x86/fpu: Ensure shadow stack is active before 'getting' registers (bsc#1236106).
CVE-2024-57946: virtio-blk: do not keep queue frozen during system suspend (bsc#1236247).
CVE-2024-57938: net/sctp: Prevent autoclose integer overflow in sctp_association_init() (bsc#1236182).
CVE-2024-57933: gve: guard XSK operations on the existence of queues (bsc#1236178).
CVE-2024-57932: gve: guard XDP xmit NDO on existence of xdp queues (bsc#1236190).
CVE-2024-57931: selinux: ignore unknown extended permissions (bsc#1236192).
CVE-2024-57929: dm array: fix releasing a faulty array block twice in dm_array_cursor_end (bsc#1236096).
CVE-2024-57917: topology: Keep the cpumask unchanged when printing cpumap (bsc#1236127).
CVE-2024-57903: net: restrict SO_REUSEPORT to inet sockets (bsc#1235967).
CVE-2024-57896: btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount (bsc#1235965).
CVE-2024-57892: ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (bsc#1235964).
CVE-2024-57884: mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (bsc#1235948).
CVE-2024-57882: mptcp: fix TCP options overflow. (bsc#1235914).
CVE-2024-57857: RDMA/siw: Remove direct link to net_device (bsc#1235946).
CVE-2024-57838: s390/entry: Mark IRQ entries to fix stack depot warnings (bsc#1235798).
CVE-2024-57809: PCI: imx6: Fix suspend/resume support on i.MX6QDL (bsc#1235793).
CVE-2024-57804: scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (bsc#1235779).
CVE-2024-57802: netrom: check buffer length before accessing it (bsc#1235941).
CVE-2024-57801: net/mlx5e: Skip restore TC rules for vport rep without loaded flag (bsc#1235940).
CVE-2024-57795: RDMA/rxe: Remove the direct link to net_device (bsc#1235906).
CVE-2024-57793: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors (bsc#1235768).
CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).
CVE-2024-56775: drm/amd/display: Fix handling of plane refcount (bsc#1235657).
CVE-2024-56774: btrfs: add a sanity check for btrfs root in btrfs_search_slot() (bsc#1235653).
CVE-2024-56763: tracing: Prevent bad count for…

Record: SUSE-SU-2025:0499-1
Updated: 2026-11-02

OSVSUSE-SU-2025:0555-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1234025).
CVE-2024-53166: block, bfq: fix bfqq uaf in bfq_limit_depth() (bsc#1234884).
CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521).
CVE-2024-56623: scsi: qla2xxx: Fix use after free on unload (bsc#1235466).
CVE-2024-56631: scsi: sg: Fix slab-use-after-free read in sg_release() (bsc#1235480).
CVE-2024-56642: tipc: Fix use-after-free of kernel socket in cleanup_bearer() (bsc#1235433).
CVE-2024-56645: can: j1939: j1939_session_new(): fix skb reference counting (bsc#1235134).
CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235451).
CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430).
CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235249).
CVE-2024-56704: 9p/xen: fix release of IRQ (bsc#1235584).
CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).
CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).
CVE-2024-57792: power: supply: gpio-charger: Fix set charge current limits (bsc#1235764).
CVE-2024-57798: drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() (bsc#1235818).
CVE-2024-57849: s390/cpum_sf: Handle CPU hotplug remove during sampling (bsc#1235814).
CVE-2024-57893: ALSA: seq: oss: Fix races at processing SysEx messages (bsc#1235920).
CVE-2024-57897: drm/amdkfd: Correct the migration DMA map direction (bsc#1235969).

The following non-security bugs were fixed:

NFS: Adjust the amount of readahead performed by NFS readdir (bsc#1231847).
NFS: Do not flush the readdir cache in nfs_dentry_iput() (bsc#1231847).
NFS: Improve heuristic for readdirplus (bsc#1231847).
NFS: Trigger the 'ls -l' readdir heuristic sooner (bsc#1231847).
tipc: fix NULL deref in cleanup_bearer() (bsc#1235433).
x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0 (git-fixes).

Record: SUSE-SU-2025:0555-1
Updated: 2026-11-02

OSVSUSE-SU-2025:0556-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-57897: drm/amdkfd: Correct the migration DMA map direction (bsc#1235969).
CVE-2024-57893: ALSA: seq: oss: Fix races at processing SysEx messages (bsc#1235920).
CVE-2024-57876: drm/dp_mst: Fix resetting msg rx state after topology removal (bsc#1235806).
CVE-2024-57849: s390/cpum_sf: Handle CPU hotplug remove during sampling (bsc#1235814).
CVE-2024-57798: drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() (bsc#1235818).
CVE-2024-57793: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors (bsc#1235768).
CVE-2024-57792: power: supply: gpio-charger: Fix set charge current limits (bsc#1235764).
CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).
CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).
CVE-2024-56747: scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (bsc#1234934).
CVE-2024-56704: 9p/xen: fix release of IRQ (bsc#1235584).
CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235249).
CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430).
CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235451).
CVE-2024-56642: tipc: Fix use-after-free of kernel socket in cleanup_bearer() (bsc#1235433).
CVE-2024-56631: scsi: sg: Fix slab-use-after-free read in sg_release() (bsc#1235480).
CVE-2024-56623: scsi: qla2xxx: Fix use after free on unload (bsc#1235466).
CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521).
CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
CVE-2024-56588: scsi: hisi_sas: Create all dump files during debugfs initialization (bsc#1235123).
CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).
CVE-2024-53209: bnxt_en: Fix receive ring space parameters when XDP is active (bsc#1235002).
CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
CVE-2024-53166: block, bfq: fix bfqq uaf in bfq_limit_depth() (bsc#1234884).
CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1234025).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
CVE-2024-36898: gpiolib: cdev: fix uninitialised kfifo (bsc#1225736).

The following non-security bugs were fixed:

NFS: Adjust the amount of readahead performed by NFS readdir (bsc#1231847).
NFS: Do not flush the readdir cache in nfs_dentry_iput() (bsc#1231847).
NFS: Improve heuristic for readdirplus (bsc#1231847).
NFS: Trigger the 'ls -l' readdir heuristic sooner (bsc#1231847).
VFS: use system_unbound_wq for delayed_mntput (bsc#1234683).
ceph: improve error handling and short/overflow-read logic in __ceph_sync_read() (bsc#1228592).
ibmvnic: Free any outstanding tx skbs during scrq reset (bsc#1226980).
netfilter: nf_tables: validate family when identifying table via handle (bsc#1233778 ZDI-24-1454).
powerpc/pseries/vas: Add close() callback in vas_vm_ops struct…

Record: SUSE-SU-2025:0556-1
Updated: 2026-11-02

OSVSUSE-SU-2025:0557-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
CVE-2024-53170: block: fix uaf for flush rq while iterating tags (bsc#1234888).
CVE-2024-53172: ubi: fastmap: Fix duplicate slab cache names while attaching (bsc#1234898).
CVE-2024-53175: ipc: fix memleak if msg_init_ns failed in create_ipc_ns (bsc#1234893).
CVE-2024-53185: smb: client: fix NULL ptr deref in crypto_aead_setkey() (bsc#1234901).
CVE-2024-53187: io_uring: check for overflows in io_pin_pages (bsc#1234947).
CVE-2024-53195: KVM: arm64: Get rid of userspace_irqchip_in_use (bsc#1234957).
CVE-2024-53196: KVM: arm64: Do not retire aborted MMIO instruction (bsc#1234906).
CVE-2024-53198: xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (bsc#1234923).
CVE-2024-53203: usb: typec: fix potential array underflow in ucsi_ccg_sync_control() (bsc#1235001).
CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).
CVE-2024-53232: iommu/s390: Implement blocking domain (bsc#1235050).
CVE-2024-53236: xsk: Free skb when TX metadata options are invalid (bsc#1235000).
CVE-2024-53685: ceph: give up on paths longer than PATH_MAX (bsc#1235720).
CVE-2024-55639: net: renesas: rswitch: avoid use-after-put for a device tree node (bsc#1235737).
CVE-2024-55881: KVM: x86: Play nice with protected guests in complete_hypercall_exit() (bsc#1235745).
CVE-2024-56372: net: tun: fix tun_napi_alloc_frags() (bsc#1235753).
CVE-2024-56568: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032).
CVE-2024-56569: ftrace: Fix regression with module command in stack_trace_filter (bsc#1235031).
CVE-2024-56570: ovl: Filter invalid inodes with missing lookup function (bsc#1235035).
CVE-2024-56588: scsi: hisi_sas: Create all dump files during debugfs initialization (bsc#1235123).
CVE-2024-56589: scsi: hisi_sas: Add cond_resched() for no forced preemption model (bsc#1235241).
CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521).
CVE-2024-56603: net: af_can: do not leave a dangling sk pointer in can_create() (bsc#1235415).
CVE-2024-56608: drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' (bsc#1235487).
CVE-2024-56610: kcsan: Turn…

Record: SUSE-SU-2025:0557-1
Updated: 2026-11-02

OSVSUSE-SU-2025:0576-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1234025).
CVE-2024-53166: block, bfq: fix bfqq uaf in bfq_limit_depth() (bsc#1234884).
CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521).
CVE-2024-56623: scsi: qla2xxx: Fix use after free on unload (bsc#1235466).
CVE-2024-56631: scsi: sg: Fix slab-use-after-free read in sg_release() (bsc#1235480).
CVE-2024-56642: tipc: Fix use-after-free of kernel socket in cleanup_bearer() (bsc#1235433).
CVE-2024-56645: can: j1939: j1939_session_new(): fix skb reference counting (bsc#1235134).
CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235451).
CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430).
CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235249).
CVE-2024-56704: 9p/xen: fix release of IRQ (bsc#1235584).
CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).
CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).
CVE-2024-57792: power: supply: gpio-charger: Fix set charge current limits (bsc#1235764).
CVE-2024-57798: drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() (bsc#1235818).
CVE-2024-57849: s390/cpum_sf: Handle CPU hotplug remove during sampling (bsc#1235814).
CVE-2024-57893: ALSA: seq: oss: Fix races at processing SysEx messages (bsc#1235920).
CVE-2024-57897: drm/amdkfd: Correct the migration DMA map direction (bsc#1235969).

The following non-security bugs were fixed:

NFS: Adjust the amount of readahead performed by NFS readdir (bsc#1231847).
NFS: Do not flush the readdir cache in nfs_dentry_iput() (bsc#1231847).
NFS: Improve heuristic for readdirplus (bsc#1231847).
NFS: Trigger the 'ls -l' readdir heuristic sooner (bsc#1231847).
tipc: fix NULL deref in cleanup_bearer() (bsc#1235433).
x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0 (git-fixes).

Record: SUSE-SU-2025:0576-1
Updated: 2026-11-02

OSVSUSE-SU-2025:0577-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-36898: gpiolib: cdev: fix uninitialised kfifo (bsc#1225736).
CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1234025).
CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
CVE-2024-53166: block, bfq: fix bfqq uaf in bfq_limit_depth() (bsc#1234884).
CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
CVE-2024-53209: bnxt_en: Fix receive ring space parameters when XDP is active (bsc#1235002).
CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).
CVE-2024-56588: scsi: hisi_sas: Create all dump files during debugfs initialization (bsc#1235123).
CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521).
CVE-2024-56623: scsi: qla2xxx: Fix use after free on unload (bsc#1235466).
CVE-2024-56631: scsi: sg: Fix slab-use-after-free read in sg_release() (bsc#1235480).
CVE-2024-56642: tipc: Fix use-after-free of kernel socket in cleanup_bearer() (bsc#1235433).
CVE-2024-56645: can: j1939: j1939_session_new(): fix skb reference counting (bsc#1235134).
CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235451).
CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430).
CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235249).
CVE-2024-56704: 9p/xen: fix release of IRQ (bsc#1235584).
CVE-2024-56747: scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (bsc#1234934).
CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).
CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).
CVE-2024-57792: power: supply: gpio-charger: Fix set charge current limits (bsc#1235764).
CVE-2024-57793: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors (bsc#1235768).
CVE-2024-57798: drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() (bsc#1235818).
CVE-2024-57849: s390/cpum_sf: Handle CPU hotplug remove during sampling (bsc#1235814).
CVE-2024-57876: drm/dp_mst: Fix resetting msg rx state after topology removal (bsc#1235806).
CVE-2024-57893: ALSA: seq: oss: Fix races at processing SysEx messages (bsc#1235920).
CVE-2024-57897: drm/amdkfd: Correct the migration DMA map direction (bsc#1235969).

The following non-security bugs were fixed:

NFS: Adjust the amount of readahead performed by NFS readdir (bsc#1231847).
NFS: Do not flush the readdir cache in nfs_dentry_iput() (bsc#1231847).
NFS: Improve heuristic for readdirplus (bsc#1231847).
NFS: Trigger the 'ls -l' readdir heuristic sooner (bsc#1231847).
VFS: use system_unbound_wq for delayed_mntput (bsc#1234683).
ceph: improve error handling and short/overflow-read logic in __ceph_sync_read() (bsc#1228592).
ibmvnic: Free any outstanding tx skbs during scrq reset (bsc#1226980).
netfilter: nf_tables: validate family when identifying table via handle…

Record: SUSE-SU-2025:0577-1
Updated: 2026-11-02

OSVSUSE-SU-2025:0577-2 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-36898: gpiolib: cdev: fix uninitialised kfifo (bsc#1225736).
CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1234025).
CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
CVE-2024-53166: block, bfq: fix bfqq uaf in bfq_limit_depth() (bsc#1234884).
CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
CVE-2024-53209: bnxt_en: Fix receive ring space parameters when XDP is active (bsc#1235002).
CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).
CVE-2024-56588: scsi: hisi_sas: Create all dump files during debugfs initialization (bsc#1235123).
CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521).
CVE-2024-56623: scsi: qla2xxx: Fix use after free on unload (bsc#1235466).
CVE-2024-56631: scsi: sg: Fix slab-use-after-free read in sg_release() (bsc#1235480).
CVE-2024-56642: tipc: Fix use-after-free of kernel socket in cleanup_bearer() (bsc#1235433).
CVE-2024-56645: can: j1939: j1939_session_new(): fix skb reference counting (bsc#1235134).
CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235451).
CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430).
CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235249).
CVE-2024-56704: 9p/xen: fix release of IRQ (bsc#1235584).
CVE-2024-56747: scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (bsc#1234934).
CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).
CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).
CVE-2024-57792: power: supply: gpio-charger: Fix set charge current limits (bsc#1235764).
CVE-2024-57793: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors (bsc#1235768).
CVE-2024-57798: drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() (bsc#1235818).
CVE-2024-57849: s390/cpum_sf: Handle CPU hotplug remove during sampling (bsc#1235814).
CVE-2024-57876: drm/dp_mst: Fix resetting msg rx state after topology removal (bsc#1235806).
CVE-2024-57893: ALSA: seq: oss: Fix races at processing SysEx messages (bsc#1235920).
CVE-2024-57897: drm/amdkfd: Correct the migration DMA map direction (bsc#1235969).

The following non-security bugs were fixed:

NFS: Adjust the amount of readahead performed by NFS readdir (bsc#1231847).
NFS: Do not flush the readdir cache in nfs_dentry_iput() (bsc#1231847).
NFS: Improve heuristic for readdirplus (bsc#1231847).
NFS: Trigger the 'ls -l' readdir heuristic sooner (bsc#1231847).
VFS: use system_unbound_wq for delayed_mntput (bsc#1234683).
ceph: improve error handling and short/overflow-read logic in __ceph_sync_read() (bsc#1228592).
ibmvnic: Free any outstanding tx skbs during scrq reset (bsc#1226980).
netfilter: nf_tables: validate family when identifying table via handle…

Record: SUSE-SU-2025:0577-2
Updated: 2026-11-02

OSVSUSE-SU-2025:1194-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47248: udp: fix race between close() and udp_abort() (bsc#1224867).
CVE-2022-49051: net: usb: aqc111: Fix out-of-bounds accesses in RX fixup (bsc#1237903).
CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237918).
CVE-2022-49275: can: m_can: m_can_tx_handler(): fix use after free of skb (bsc#1238719).
CVE-2022-49413: bfq: Update cgroup information before merging bio (bsc#1238710).
CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has been throttled (bsc#1238919).
CVE-2022-49545: ALSA: usb-audio: Cancel pending work at closing a MIDI substream (bsc#1238729).
CVE-2022-49563: crypto: qat - add param check for RSA (bsc#1238787).
CVE-2022-49564: crypto: qat - add param check for DH (bsc#1238789).
CVE-2022-49739: gfs2: Always check inode size of inline inodes (bsc#1240207).
CVE-2023-52935: mm/khugepaged: fix ->anon_vma race (bsc#1240276).
CVE-2024-56642: tipc: Fix use-after-free of kernel socket in cleanup_bearer() (bsc#1235433).
CVE-2024-56651: can: hi311x: hi3110_can_ist(): fix potential use-after-free (bsc#1235528).
CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076).
CVE-2024-58014: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (bsc#1239109).
CVE-2025-21772: partitions: mac: fix handling of bogus partition table (bsc#1238911).
CVE-2025-21780: drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() (bsc#1239115).

The following non-security bugs were fixed:

ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (bsc#1237530).
btrfs: send: allow cloning non-aligned extent if it ends at i_size (bsc#1239969).
btrfs: send: fix invalid clone operation for file that got its size decreased (bsc#1239969).
btrfs: send: use btrfs_file_extent_end() in send_write_or_clone() (bsc#1239969).

Record: SUSE-SU-2025:1194-1
Updated: 2026-11-02

OSVSUSE-SU-2025:1263-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47248: udp: fix race between close() and udp_abort() (bsc#1224867).
CVE-2022-49051: net: usb: aqc111: Fix out-of-bounds accesses in RX fixup (bsc#1237903).
CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237918).
CVE-2022-49275: can: m_can: m_can_tx_handler(): fix use after free of skb (bsc#1238719).
CVE-2022-49413: bfq: Update cgroup information before merging bio (bsc#1238710).
CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has been throttled (bsc#1238919).
CVE-2022-49545: ALSA: usb-audio: Cancel pending work at closing a MIDI substream (bsc#1238729).
CVE-2022-49563: crypto: qat - add param check for RSA (bsc#1238787).
CVE-2022-49564: crypto: qat - add param check for DH (bsc#1238789).
CVE-2022-49739: gfs2: Always check inode size of inline inodes (bsc#1240207).
CVE-2023-52935: mm/khugepaged: fix ->anon_vma race (bsc#1240276).
CVE-2024-56642: tipc: Fix use-after-free of kernel socket in cleanup_bearer() (bsc#1235433).
CVE-2024-56651: can: hi311x: hi3110_can_ist(): fix potential use-after-free (bsc#1235528).
CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076).
CVE-2024-58014: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (bsc#1239109).
CVE-2025-21772: partitions: mac: fix handling of bogus partition table (bsc#1238911).
CVE-2025-21780: drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() (bsc#1239115).

The following non-security bugs were fixed:

ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (bsc#1237530).
btrfs: send: allow cloning non-aligned extent if it ends at i_size (bsc#1239969).
btrfs: send: fix invalid clone operation for file that got its size decreased (bsc#1239969).
btrfs: send: use btrfs_file_extent_end() in send_write_or_clone() (bsc#1239969).

Record: SUSE-SU-2025:1263-1
Updated: 2026-11-02

OSVSUSE-SU-2025:1574-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2025-21726: padata: avoid UAF for reorder_work (bsc#1238865).
CVE-2025-21785: arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (bsc#1238747).
CVE-2025-21791: vrf: use RCU protection in l3mdev_l3_out() (bsc#1238512).
CVE-2025-22004: net: atm: fix use after free in lec_send() (bsc#1240835).
CVE-2025-22020: memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (bsc#1241280).
CVE-2025-22055: net: fix geneve_opt length integer overflow (bsc#1241371).

Record: SUSE-SU-2025:1574-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20165-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
CVE-2024-53161:…

Record: SUSE-SU-2025:20165-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20166-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
CVE-2024-53161:…

Record: SUSE-SU-2025:20166-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20248-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
CVE-2024-53161:…

Record: SUSE-SU-2025:20248-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20249-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
CVE-2024-53161:…

Record: SUSE-SU-2025:20249-1
Updated: 2026-11-02

OSVUSN-7379-1 No score

linux, linux-aws, linux-azure, linux-gcp, linux-hwe-6.11, linux-oracle, linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Compute Acceleration Framework;
ACPI drivers;
Drivers core;
Ublk userspace block driver;
Virtio block driver;
Bluetooth drivers;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
Microsoft Hyper-V drivers;
Hardware monitoring drivers;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
Microchip PCI driver;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVME drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
i.MX PM domains;
Power supply drivers;
Voltage and Current Regulator drivers;
SCSI subsystem;
i.MX SoC drivers;
SPI subsystem;
UFS subsystem;
USB Gadget drivers;
TDX Guest driver;
AFS file system;
BTRFS file system;
Ceph distributed file system;
File systems infrastructure;
F2FS file system;
JFFS2 file system;
JFS file system;
Network file systems library;
Network file system (NFS) server daemon;
NILFS2 file system;
File system notification infrastructure;
Overlay file system;
Diskquota system;
SMB network file system;
DRM display driver;
BPF subsystem;
VLANs driver;
KASAN memory debugging framework;
Memory management;
StackDepot library;
Bluetooth subsystem;
LAPB network protocol;
Netfilter;
io_uring subsystem;
Control group (cgroup);
DMA mapping infrastructure;
KCSAN framework;
Scheduler infrastructure;
Seccomp subsystem;
Tracing infrastructure;
Workqueue subsystem;
KUnit library;
CAN network layer;
Networking core;
DCCP (Datagram Congestion Control Protocol);
HSR network protocol;
IEEE802154.4 network protocol;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
NET/ROM layer;
Packet sockets;
RDS protocol;
Network traffic control;
SCTP protocol;
SMC sockets;
TIPC protocol;
Wireless networking;
eXpress Data Path;
SELinux security module;
ALSA framework;
Intel ASoC drivers;
SOF drivers; (CVE-2024-57921, CVE-2024-56614, CVE-2024-56558, CVE-2024-56589, CVE-2024-56662, CVE-2024-56610, CVE-2024-56717, CVE-2024-57890, CVE-2024-55639, CVE-2024-56562, CVE-2025-21633, CVE-2024-56598, CVE-2024-47794, CVE-2024-41935, CVE-2024-57901, CVE-2024-56587, CVE-2024-56581, CVE-2024-56783, CVE-2024-57888, CVE-2024-57809, CVE-2024-57926, CVE-2025-21650, CVE-2024-56634, CVE-2025-21639, CVE-2025-21656, CVE-2024-56578, CVE-2025-21632, CVE-2024-56784, CVE-2025-21644, CVE-2024-56776, CVE-2024-56764, CVE-2024-56652, CVE-2024-56550, CVE-2024-56569, CVE-2024-57904, CVE-2024-49569, CVE-2024-56770, CVE-2024-56606, CVE-2024-57806, CVE-2024-56646, CVE-2024-57895, CVE-2024-57880, CVE-2024-56650, CVE-2024-56591, CVE-2024-56590, CVE-2024-56642, CVE-2024-56713, CVE-2025-21663, CVE-2024-57938, CVE-2024-56760, CVE-2024-56583, CVE-2025-21662, CVE-2024-56629, CVE-2024-47408, CVE-2024-57850, CVE-2024-56777, CVE-2024-56626, CVE-2024-56773, CVE-2024-56647, CVE-2025-21664, CVE-2024-56564, CVE-2024-56597, CVE-2024-56623, CVE-2024-57897, CVE-2024-56670, CVE-2024-56567, CVE-2024-57931, CVE-2024-56761, CVE-2024-57935, CVE-2024-53690, CVE-2025-21640, CVE-2024-56608, CVE-2024-57878, CVE-2025-21648, CVE-2024-57898, CVE-2024-57889, CVE-2024-56644, CVE-2024-56763, CVE-2024-57900,…

Record: USN-7379-1
Updated: 2026-11-02

OSVUSN-7381-1 No score

linux-lowlatency-hwe-6.11 vulnerabilities

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Compute Acceleration Framework;
ACPI drivers;
Drivers core;
Ublk userspace block driver;
Virtio block driver;
Bluetooth drivers;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
Microsoft Hyper-V drivers;
Hardware monitoring drivers;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
Microchip PCI driver;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVME drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
i.MX PM domains;
Power supply drivers;
Voltage and Current Regulator drivers;
SCSI subsystem;
i.MX SoC drivers;
SPI subsystem;
UFS subsystem;
USB Gadget drivers;
TDX Guest driver;
AFS file system;
BTRFS file system;
Ceph distributed file system;
File systems infrastructure;
F2FS file system;
JFFS2 file system;
JFS file system;
Network file systems library;
Network file system (NFS) server daemon;
NILFS2 file system;
File system notification infrastructure;
Overlay file system;
Diskquota system;
SMB network file system;
DRM display driver;
BPF subsystem;
VLANs driver;
KASAN memory debugging framework;
Memory management;
StackDepot library;
Bluetooth subsystem;
LAPB network protocol;
Network namespace;
Netfilter;
io_uring subsystem;
Control group (cgroup);
DMA mapping infrastructure;
KCSAN framework;
Scheduler infrastructure;
Seccomp subsystem;
Tracing infrastructure;
Workqueue subsystem;
KUnit library;
CAN network layer;
Networking core;
DCCP (Datagram Congestion Control Protocol);
HSR network protocol;
IEEE802154.4 network protocol;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
NET/ROM layer;
Packet sockets;
RDS protocol;
Network traffic control;
SCTP protocol;
SMC sockets;
TIPC protocol;
Wireless networking;
eXpress Data Path;
SELinux security module;
ALSA framework;
Intel ASoC drivers;
SOF drivers; (CVE-2024-56712, CVE-2024-56761, CVE-2025-21661, CVE-2024-56565, CVE-2024-57804, CVE-2024-57887, CVE-2025-21642, CVE-2024-56779, CVE-2025-21656, CVE-2024-57890, CVE-2024-36476, CVE-2024-57843, CVE-2024-56594, CVE-2024-41932, CVE-2025-21653, CVE-2024-56567, CVE-2024-56665, CVE-2024-54191, CVE-2024-57893, CVE-2024-57932, CVE-2024-56656, CVE-2024-57945, CVE-2024-57931, CVE-2024-56599, CVE-2024-57897, CVE-2024-57903, CVE-2024-57918, CVE-2024-57795, CVE-2024-56662, CVE-2025-21639, CVE-2024-55881, CVE-2024-57889, CVE-2024-57884, CVE-2024-57934, CVE-2024-39282, CVE-2024-56718, CVE-2024-56644, CVE-2024-56760, CVE-2024-43098, CVE-2024-47143, CVE-2024-55642, CVE-2024-56634, CVE-2024-56564, CVE-2024-56768, CVE-2024-56649, CVE-2024-57919, CVE-2024-56620, CVE-2024-56625, CVE-2024-56655, CVE-2024-56772, CVE-2025-21637, CVE-2024-56617, CVE-2024-57879, CVE-2024-56715, CVE-2024-56550, CVE-2024-50051, CVE-2024-56673, CVE-2024-51729, CVE-2025-21664,…

Record: USN-7381-1
Updated: 2026-11-02

OSVUSN-7382-1 No score

linux-oem-6.11 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Compute Acceleration Framework;
ACPI drivers;
Drivers core;
Ublk userspace block driver;
Virtio block driver;
Bluetooth drivers;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
Microsoft Hyper-V drivers;
Hardware monitoring drivers;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
Microchip PCI driver;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVME drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
i.MX PM domains;
Power supply drivers;
Voltage and Current Regulator drivers;
SCSI subsystem;
i.MX SoC drivers;
SPI subsystem;
UFS subsystem;
USB Gadget drivers;
TDX Guest driver;
AFS file system;
BTRFS file system;
Ceph distributed file system;
File systems infrastructure;
F2FS file system;
JFFS2 file system;
JFS file system;
Network file systems library;
Network file system (NFS) server daemon;
NILFS2 file system;
File system notification infrastructure;
Overlay file system;
Diskquota system;
SMB network file system;
DRM display driver;
BPF subsystem;
VLANs driver;
KASAN memory debugging framework;
Memory management;
StackDepot library;
Bluetooth subsystem;
LAPB network protocol;
Netfilter;
io_uring subsystem;
Control group (cgroup);
DMA mapping infrastructure;
KCSAN framework;
Scheduler infrastructure;
Seccomp subsystem;
Tracing infrastructure;
Workqueue subsystem;
KUnit library;
CAN network layer;
Networking core;
DCCP (Datagram Congestion Control Protocol);
HSR network protocol;
IEEE802154.4 network protocol;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
NET/ROM layer;
Packet sockets;
RDS protocol;
Network traffic control;
SCTP protocol;
SMC sockets;
TIPC protocol;
Wireless networking;
eXpress Data Path;
SELinux security module;
ALSA framework;
Intel ASoC drivers;
SOF drivers; (CVE-2024-47794, CVE-2025-21653, CVE-2024-55642, CVE-2024-56580, CVE-2024-36476, CVE-2024-56623, CVE-2024-56773, CVE-2024-48873, CVE-2024-47141, CVE-2024-57910, CVE-2024-56759, CVE-2024-54460, CVE-2024-57839, CVE-2024-56625, CVE-2024-55916, CVE-2025-21664, CVE-2025-21652, CVE-2024-56624, CVE-2024-56574, CVE-2024-50051, CVE-2025-21655, CVE-2024-56578, CVE-2024-56782, CVE-2024-57939, CVE-2024-57935, CVE-2024-56647, CVE-2024-57905, CVE-2024-57921, CVE-2024-56660, CVE-2025-21650, CVE-2025-21631, CVE-2024-56642, CVE-2024-56552, CVE-2024-57934, CVE-2024-56621, CVE-2024-57881, CVE-2024-41932, CVE-2024-56770, CVE-2024-57897, CVE-2024-56785, CVE-2024-56664, CVE-2024-57945, CVE-2024-57938, CVE-2024-56636, CVE-2024-56572, CVE-2024-43098, CVE-2024-56760, CVE-2024-57916, CVE-2024-56714, CVE-2025-21660, CVE-2024-57906, CVE-2025-21638, CVE-2024-53687, CVE-2024-56652, CVE-2024-51729, CVE-2024-49571, CVE-2024-57883, CVE-2024-54191, CVE-2024-56712, CVE-2024-49568, CVE-2024-57932, CVE-2024-57893, CVE-2024-56645, CVE-2024-56719, CVE-2024-56641, CVE-2024-57802, CVE-2024-56775, CVE-2024-56627, CVE-2024-56638, CVE-2024-57929, CVE-2024-56615, CVE-2024-56566, CVE-2024-56620, CVE-2024-56577, CVE-2025-21656, CVE-2024-57887, CVE-2024-52319, CVE-2024-56657, CVE-2024-57872,…

Record: USN-7382-1
Updated: 2026-11-02

OSVUSN-7387-1 No score

linux, linux-aws, linux-azure, linux-gcp, linux-gke, linux-gkeop, linux-ibm, linux-intel-iotg, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15, linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
SuperH RISC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
Drivers core;
RAM backed block device driver;
Virtio block driver;
Data acquisition framework and drivers;
Hardware crypto device drivers;
DMA engine subsystem;
EDAC drivers;
ARM SCPI message protocol;
GPIO subsystem;
GPU drivers;
HID subsystem;
Microsoft Hyper-V drivers;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
NVME drivers;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Real Time Clock drivers;
SCSI subsystem;
SuperH / SH-Mobile drivers;
i.MX SoC drivers;
QCOM SoC drivers;
SPI subsystem;
Media staging drivers;
UFS subsystem;
DesignWare USB3 driver;
USB Gadget drivers;
USB Serial drivers;
USB Type-C Port Controller Manager driver;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
Ceph distributed file system;
File systems infrastructure;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system;
Proc file system;
Diskquota system;
SMB network file system;
UBI file system;
Timer subsystem;
VLANs driver;
LAPB network protocol;
Kernel init infrastructure;
BPF subsystem;
Kernel CPU control infrastructure;
DMA mapping infrastructure;
KCSAN framework;
Tracing infrastructure;
Memory management;
9P file system network protocol;
Bluetooth subsystem;
CAN network layer;
Networking core;
DCCP (Datagram Congestion Control Protocol);
Distributed Switch Architecture;
HSR network protocol;
IEEE802154.4 network protocol;
IPv4 networking;
IPv6 networking;
IEEE 802.15.4 subsystem;
Multipath TCP;
Netfilter;
Netlink;
NET/ROM layer;
Packet sockets;
Network traffic control;
SCTP protocol;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
VMware vSockets driver;
eXpress Data Path;
SELinux security module;
ALSA framework;
USB sound devices; (CVE-2024-56558, CVE-2024-53227, CVE-2024-53130, CVE-2025-21664, CVE-2024-53142, CVE-2024-55881, CVE-2024-57906, CVE-2024-46809, CVE-2024-53198, CVE-2024-53184, CVE-2024-53237, CVE-2024-56770, CVE-2024-53150, CVE-2024-56700, CVE-2024-50242, CVE-2024-53181, CVE-2024-56574, CVE-2024-56681, CVE-2024-56678, CVE-2024-53119, CVE-2024-53129, CVE-2024-56567, CVE-2024-56688, CVE-2024-49925, CVE-2025-21687, CVE-2024-56643, CVE-2025-21631, CVE-2024-52332, CVE-2024-53226, CVE-2025-21665, CVE-2024-56615, CVE-2024-57911, CVE-2024-53136, CVE-2024-56603, CVE-2024-56690, CVE-2024-47730, CVE-2024-56586, CVE-2024-46784, CVE-2024-56596, CVE-2024-53172, CVE-2024-57901, CVE-2024-56693, CVE-2024-56605, CVE-2024-57896, CVE-2024-56698, CVE-2024-56724, CVE-2024-49998, CVE-2024-53239, CVE-2024-53206, CVE-2024-56636, CVE-2024-56597, CVE-2024-56533, CVE-2024-42315, CVE-2024-56701, CVE-2024-56587, CVE-2024-57791, CVE-2024-56619, CVE-2024-50051, CVE-2024-56569, CVE-2025-21694, CVE-2025-21699, CVE-2024-53214, CVE-2024-57904, CVE-2024-49571,…

Record: USN-7387-1
Updated: 2026-11-02

OSVUSN-7387-2 No score

linux-fips, linux-aws-fips, linux-azure-fips, linux-gcp-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
SuperH RISC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
Drivers core;
RAM backed block device driver;
Virtio block driver;
Data acquisition framework and drivers;
Hardware crypto device drivers;
DMA engine subsystem;
EDAC drivers;
ARM SCPI message protocol;
GPIO subsystem;
GPU drivers;
HID subsystem;
Microsoft Hyper-V drivers;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
NVME drivers;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Real Time Clock drivers;
SCSI subsystem;
SuperH / SH-Mobile drivers;
i.MX SoC drivers;
QCOM SoC drivers;
SPI subsystem;
Media staging drivers;
UFS subsystem;
DesignWare USB3 driver;
USB Gadget drivers;
USB Serial drivers;
USB Type-C Port Controller Manager driver;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
Ceph distributed file system;
File systems infrastructure;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system;
Proc file system;
Diskquota system;
SMB network file system;
UBI file system;
Timer subsystem;
VLANs driver;
LAPB network protocol;
Kernel init infrastructure;
BPF subsystem;
Kernel CPU control infrastructure;
DMA mapping infrastructure;
KCSAN framework;
Tracing infrastructure;
Memory management;
9P file system network protocol;
Bluetooth subsystem;
CAN network layer;
Networking core;
DCCP (Datagram Congestion Control Protocol);
Distributed Switch Architecture;
HSR network protocol;
IEEE802154.4 network protocol;
IPv4 networking;
IPv6 networking;
IEEE 802.15.4 subsystem;
Multipath TCP;
Netfilter;
Netlink;
NET/ROM layer;
Packet sockets;
Network traffic control;
SCTP protocol;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
VMware vSockets driver;
eXpress Data Path;
SELinux security module;
ALSA framework;
USB sound devices; (CVE-2024-56558, CVE-2024-53227, CVE-2024-53130, CVE-2025-21664, CVE-2024-53142, CVE-2024-55881, CVE-2024-57906, CVE-2024-46809, CVE-2024-53198, CVE-2024-53184, CVE-2024-53237, CVE-2024-56770, CVE-2024-53150, CVE-2024-56700, CVE-2024-50242, CVE-2024-53181, CVE-2024-56574, CVE-2024-56681, CVE-2024-56678, CVE-2024-53119, CVE-2024-53129, CVE-2024-56567, CVE-2024-56688, CVE-2024-49925, CVE-2025-21687, CVE-2024-56643, CVE-2025-21631, CVE-2024-52332, CVE-2024-53226, CVE-2025-21665, CVE-2024-56615, CVE-2024-57911, CVE-2024-53136, CVE-2024-56603, CVE-2024-56690, CVE-2024-47730, CVE-2024-56586, CVE-2024-46784, CVE-2024-56596, CVE-2024-53172, CVE-2024-57901, CVE-2024-56693, CVE-2024-56605, CVE-2024-57896, CVE-2024-56698, CVE-2024-56724, CVE-2024-49998, CVE-2024-53239, CVE-2024-53206, CVE-2024-56636, CVE-2024-56597, CVE-2024-56533, CVE-2024-42315, CVE-2024-56701, CVE-2024-56587, CVE-2024-57791, CVE-2024-56619, CVE-2024-50051, CVE-2024-56569, CVE-2025-21694, CVE-2025-21699, CVE-2024-53214, CVE-2024-57904, CVE-2024-49571,…

Record: USN-7387-2
Updated: 2026-11-02

OSVUSN-7387-3 No score

linux-realtime, linux-intel-iot-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
SuperH RISC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
Drivers core;
RAM backed block device driver;
Virtio block driver;
Data acquisition framework and drivers;
Hardware crypto device drivers;
DMA engine subsystem;
EDAC drivers;
ARM SCPI message protocol;
GPIO subsystem;
GPU drivers;
HID subsystem;
Microsoft Hyper-V drivers;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
NVME drivers;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Real Time Clock drivers;
SCSI subsystem;
SuperH / SH-Mobile drivers;
i.MX SoC drivers;
QCOM SoC drivers;
SPI subsystem;
Media staging drivers;
UFS subsystem;
DesignWare USB3 driver;
USB Gadget drivers;
USB Serial drivers;
USB Type-C Port Controller Manager driver;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
Ceph distributed file system;
File systems infrastructure;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system;
Proc file system;
Diskquota system;
SMB network file system;
UBI file system;
Timer subsystem;
VLANs driver;
LAPB network protocol;
Kernel init infrastructure;
BPF subsystem;
Kernel CPU control infrastructure;
DMA mapping infrastructure;
KCSAN framework;
Tracing infrastructure;
Memory management;
9P file system network protocol;
Bluetooth subsystem;
CAN network layer;
Networking core;
DCCP (Datagram Congestion Control Protocol);
Distributed Switch Architecture;
HSR network protocol;
IEEE802154.4 network protocol;
IPv4 networking;
IPv6 networking;
IEEE 802.15.4 subsystem;
Multipath TCP;
Netfilter;
Netlink;
NET/ROM layer;
Packet sockets;
Network traffic control;
SCTP protocol;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
VMware vSockets driver;
eXpress Data Path;
SELinux security module;
ALSA framework;
USB sound devices; (CVE-2024-56558, CVE-2024-53227, CVE-2024-53130, CVE-2025-21664, CVE-2024-53142, CVE-2024-55881, CVE-2024-57906, CVE-2024-46809, CVE-2024-53198, CVE-2024-53184, CVE-2024-53237, CVE-2024-56770, CVE-2024-53150, CVE-2024-56700, CVE-2024-50242, CVE-2024-53181, CVE-2024-56574, CVE-2024-56681, CVE-2024-56678, CVE-2024-53119, CVE-2024-53129, CVE-2024-56567, CVE-2024-56688, CVE-2024-49925, CVE-2025-21687, CVE-2024-56643, CVE-2025-21631, CVE-2024-52332, CVE-2024-53226, CVE-2025-21665, CVE-2024-56615, CVE-2024-57911, CVE-2024-53136, CVE-2024-56603, CVE-2024-56690, CVE-2024-47730, CVE-2024-56586, CVE-2024-46784, CVE-2024-56596, CVE-2024-53172, CVE-2024-57901, CVE-2024-56693, CVE-2024-56605, CVE-2024-57896, CVE-2024-56698, CVE-2024-56724, CVE-2024-49998, CVE-2024-53239, CVE-2024-53206, CVE-2024-56636, CVE-2024-56597, CVE-2024-56533, CVE-2024-42315, CVE-2024-56701, CVE-2024-56587, CVE-2024-57791, CVE-2024-56619, CVE-2024-50051, CVE-2024-56569, CVE-2025-21694, CVE-2025-21699, CVE-2024-53214, CVE-2024-57904, CVE-2024-49571,…

Record: USN-7387-3
Updated: 2026-11-02

OSVUSN-7388-1 No score

linux-aws-5.15, linux-kvm vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
SuperH RISC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
Drivers core;
RAM backed block device driver;
Virtio block driver;
Data acquisition framework and drivers;
Hardware crypto device drivers;
DMA engine subsystem;
EDAC drivers;
ARM SCPI message protocol;
GPIO subsystem;
GPU drivers;
HID subsystem;
Microsoft Hyper-V drivers;
I2C subsystem;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
NVME drivers;
Parport drivers;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Real Time Clock drivers;
SCSI subsystem;
SuperH / SH-Mobile drivers;
i.MX SoC drivers;
QCOM SoC drivers;
SPI subsystem;
Direct Digital Synthesis drivers;
Media staging drivers;
TCM subsystem;
TTY drivers;
UFS subsystem;
DesignWare USB3 driver;
USB Gadget drivers;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
USB Type-C Connector System Software Interface driver;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
Ceph distributed file system;
File systems infrastructure;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system;
Proc file system;
Diskquota system;
SMB network file system;
UBI file system;
Timer subsystem;
VLANs driver;
LAPB network protocol;
User-space API (UAPI);
Kernel init infrastructure;
io_uring subsystem;
BPF subsystem;
Kernel CPU control infrastructure;
DMA mapping infrastructure;
KCSAN framework;
Tracing infrastructure;
Closures library;
Memory management;
9P file system network protocol;
Amateur Radio drivers;
Bluetooth subsystem;
CAN network layer;
Networking core;
DCCP (Datagram Congestion Control Protocol);
Distributed Switch Architecture;
HSR network protocol;
IEEE802154.4 network protocol;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
IEEE 802.15.4 subsystem;
Multipath TCP;
Netfilter;
Netlink;
NET/ROM layer;
Packet sockets;
Network traffic control;
SCTP protocol;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
VMware vSockets driver;
eXpress Data Path;
XFRM subsystem;
Key management;
SELinux security module;
ALSA framework;
FireWire sound drivers;
HD-audio driver;
QCOM ASoC drivers;
STMicroelectronics SoC drivers;
USB sound devices;
KVM core; (CVE-2024-56622, CVE-2024-42252, CVE-2024-53101, CVE-2025-21664, CVE-2024-50168, CVE-2024-53214, CVE-2024-56670,…

Record: USN-7388-1
Updated: 2026-11-02

OSVUSN-7389-1 No score

linux-nvidia-tegra, linux-nvidia-tegra-igx vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
SuperH RISC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
Drivers core;
RAM backed block device driver;
Virtio block driver;
Data acquisition framework and drivers;
Hardware crypto device drivers;
DMA engine subsystem;
EDAC drivers;
ARM SCPI message protocol;
GPIO subsystem;
GPU drivers;
HID subsystem;
Microsoft Hyper-V drivers;
I2C subsystem;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
NVME drivers;
Parport drivers;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Real Time Clock drivers;
SCSI subsystem;
SuperH / SH-Mobile drivers;
i.MX SoC drivers;
QCOM SoC drivers;
SPI subsystem;
Direct Digital Synthesis drivers;
Media staging drivers;
TCM subsystem;
TTY drivers;
UFS subsystem;
DesignWare USB3 driver;
USB Gadget drivers;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
USB Type-C Connector System Software Interface driver;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
Ceph distributed file system;
File systems infrastructure;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system;
Proc file system;
Diskquota system;
SMB network file system;
UBI file system;
Timer subsystem;
VLANs driver;
LAPB network protocol;
User-space API (UAPI);
Kernel init infrastructure;
io_uring subsystem;
BPF subsystem;
Kernel CPU control infrastructure;
DMA mapping infrastructure;
KCSAN framework;
Tracing infrastructure;
Closures library;
Memory management;
9P file system network protocol;
Amateur Radio drivers;
Bluetooth subsystem;
CAN network layer;
Networking core;
DCCP (Datagram Congestion Control Protocol);
Distributed Switch Architecture;
HSR network protocol;
IEEE802154.4 network protocol;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
IEEE 802.15.4 subsystem;
Multipath TCP;
Netfilter;
Netlink;
NET/ROM layer;
Packet sockets;
Network traffic control;
SCTP protocol;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
VMware vSockets driver;
eXpress Data Path;
XFRM subsystem;
Key management;
SELinux security module;
ALSA framework;
FireWire sound drivers;
HD-audio driver;
QCOM ASoC drivers;
STMicroelectronics SoC drivers;
USB sound devices;
KVM core; (CVE-2025-21640, CVE-2024-56625, CVE-2024-53104, CVE-2024-53055, CVE-2024-26718, CVE-2024-53180, CVE-2024-50257,…

Record: USN-7389-1
Updated: 2026-11-02

OSVUSN-7390-1 No score

linux-xilinx-zynqmp vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
SuperH RISC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
Drivers core;
RAM backed block device driver;
Virtio block driver;
Data acquisition framework and drivers;
Hardware crypto device drivers;
DMA engine subsystem;
EDAC drivers;
ARM SCPI message protocol;
GPIO subsystem;
GPU drivers;
HID subsystem;
Microsoft Hyper-V drivers;
I2C subsystem;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
NVME drivers;
Parport drivers;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Real Time Clock drivers;
SCSI subsystem;
SuperH / SH-Mobile drivers;
i.MX SoC drivers;
QCOM SoC drivers;
SPI subsystem;
Direct Digital Synthesis drivers;
Media staging drivers;
TCM subsystem;
TTY drivers;
UFS subsystem;
DesignWare USB3 driver;
USB Gadget drivers;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
USB Type-C Connector System Software Interface driver;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
Ceph distributed file system;
File systems infrastructure;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system;
Proc file system;
Diskquota system;
SMB network file system;
UBI file system;
Timer subsystem;
VLANs driver;
LAPB network protocol;
User-space API (UAPI);
Kernel init infrastructure;
io_uring subsystem;
BPF subsystem;
Kernel CPU control infrastructure;
DMA mapping infrastructure;
KCSAN framework;
Tracing infrastructure;
Closures library;
Memory management;
9P file system network protocol;
Amateur Radio drivers;
Bluetooth subsystem;
CAN network layer;
Networking core;
DCCP (Datagram Congestion Control Protocol);
Distributed Switch Architecture;
HSR network protocol;
IEEE802154.4 network protocol;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
IEEE 802.15.4 subsystem;
Multipath TCP;
Netfilter;
Netlink;
NET/ROM layer;
Packet sockets;
Network traffic control;
SCTP protocol;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
VMware vSockets driver;
eXpress Data Path;
XFRM subsystem;
Key management;
SELinux security module;
ALSA framework;
FireWire sound drivers;
HD-audio driver;
QCOM ASoC drivers;
STMicroelectronics SoC drivers;
USB sound devices;
KVM core; (CVE-2024-50299, CVE-2024-50304, CVE-2024-50196, CVE-2024-56548, CVE-2024-56531, CVE-2024-56720, CVE-2024-58087,…

Record: USN-7390-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`kernel` Azure Linux:3	before 6.6.76.1-1	6.6.76.1-1
`kernel` Azure Linux:2	before 5.15.176.3-1	5.15.176.3-1
`linux-lts` Alpaquita:23	6.1.119-r0 up to 6.1.120-r0	6.1.120-r0
`linux-lts` Alpaquita:25	6.6.89-r0 up to 6.12.41-r0	6.12.41-r0
`linux-lts` Alpaquita:stream	6.12.92-r1 up to 6.18.35-r1	6.18.35-r1
`bpftool` TuxCare:AlmaLinux:9.2	before 7.0.0-284.30.1.el9_2.tuxcare.els10	7.0.0-284.30.1.el9_2.tuxcare.els10
`kernel` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els10	5.14.0-284.30.1.el9_2.tuxcare.els10
`kernel-abi-stablelists` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els10	5.14.0-284.30.1.el9_2.tuxcare.els10
`kernel-core` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els10	5.14.0-284.30.1.el9_2.tuxcare.els10
`kernel-cross-headers` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els10	5.14.0-284.30.1.el9_2.tuxcare.els10

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-debug` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els10	5.14.0-284.30.1.el9_2.tuxcare.els10
`kernel-debug-core` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els10	5.14.0-284.30.1.el9_2.tuxcare.els10
`kernel-debug-devel` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els10	5.14.0-284.30.1.el9_2.tuxcare.els10
`kernel-debug-devel-matched` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els10	5.14.0-284.30.1.el9_2.tuxcare.els10
`kernel-debug-modules` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els10	5.14.0-284.30.1.el9_2.tuxcare.els10
`kernel-debug-modules-core` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els10	5.14.0-284.30.1.el9_2.tuxcare.els10
`kernel-debug-modules-extra` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els10	5.14.0-284.30.1.el9_2.tuxcare.els10
`kernel-debug-modules-internal` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els10	5.14.0-284.30.1.el9_2.tuxcare.els10
`kernel-debug-modules-partner` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els10	5.14.0-284.30.1.el9_2.tuxcare.els10
`kernel-debug-uki-virt` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els10	5.14.0-284.30.1.el9_2.tuxcare.els10
`kernel-devel` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els10	5.14.0-284.30.1.el9_2.tuxcare.els10
`kernel-devel-matched` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els10	5.14.0-284.30.1.el9_2.tuxcare.els10
`kernel-doc` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els10	5.14.0-284.30.1.el9_2.tuxcare.els10
`kernel-headers` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els10	5.14.0-284.30.1.el9_2.tuxcare.els10
`kernel-ipaclones-internal` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els10	5.14.0-284.30.1.el9_2.tuxcare.els10
`kernel-modules` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els10	5.14.0-284.30.1.el9_2.tuxcare.els10
`kernel-modules-core` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els10	5.14.0-284.30.1.el9_2.tuxcare.els10
`kernel-modules-extra` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els10	5.14.0-284.30.1.el9_2.tuxcare.els10
`kernel-modules-internal` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els10	5.14.0-284.30.1.el9_2.tuxcare.els10
`kernel-modules-partner` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els10	5.14.0-284.30.1.el9_2.tuxcare.els10
`kernel-selftests-internal` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els10	5.14.0-284.30.1.el9_2.tuxcare.els10
`kernel-tools` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els10	5.14.0-284.30.1.el9_2.tuxcare.els10
`kernel-tools-libs` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els10	5.14.0-284.30.1.el9_2.tuxcare.els10
`kernel-tools-libs-devel` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els10	5.14.0-284.30.1.el9_2.tuxcare.els10
`kernel-uki-virt` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els10	5.14.0-284.30.1.el9_2.tuxcare.els10
`perf` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els10	5.14.0-284.30.1.el9_2.tuxcare.els10
`python3-perf` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els10	5.14.0-284.30.1.el9_2.tuxcare.els10
`rtla` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els10	5.14.0-284.30.1.el9_2.tuxcare.els10
`bpftool` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els25	4.18.0-348.7.1.el8_5.tuxcare.els25
`kernel` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els25	4.18.0-348.7.1.el8_5.tuxcare.els25
`kernel-core` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els25	4.18.0-348.7.1.el8_5.tuxcare.els25
`kernel-cross-headers` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els25	4.18.0-348.7.1.el8_5.tuxcare.els25
`kernel-debug` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els25	4.18.0-348.7.1.el8_5.tuxcare.els25
`kernel-debug-core` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els25	4.18.0-348.7.1.el8_5.tuxcare.els25
`kernel-debug-devel` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els25	4.18.0-348.7.1.el8_5.tuxcare.els25
`kernel-debug-modules` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els25	4.18.0-348.7.1.el8_5.tuxcare.els25
`kernel-debug-modules-extra` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els25	4.18.0-348.7.1.el8_5.tuxcare.els25
`kernel-debug-modules-internal` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els25	4.18.0-348.7.1.el8_5.tuxcare.els25
`kernel-devel` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els25	4.18.0-348.7.1.el8_5.tuxcare.els25
`kernel-headers` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els25	4.18.0-348.7.1.el8_5.tuxcare.els25
`kernel-ipaclones-internal` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els25	4.18.0-348.7.1.el8_5.tuxcare.els25
`kernel-modules` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els25	4.18.0-348.7.1.el8_5.tuxcare.els25
`kernel-modules-extra` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els25	4.18.0-348.7.1.el8_5.tuxcare.els25
`kernel-modules-internal` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els25	4.18.0-348.7.1.el8_5.tuxcare.els25
`kernel-selftests-internal` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els25	4.18.0-348.7.1.el8_5.tuxcare.els25
`kernel-tools` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els25	4.18.0-348.7.1.el8_5.tuxcare.els25
`kernel-tools-libs` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els25	4.18.0-348.7.1.el8_5.tuxcare.els25
`kernel-tools-libs-devel` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els25	4.18.0-348.7.1.el8_5.tuxcare.els25
`perf` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els25	4.18.0-348.7.1.el8_5.tuxcare.els25
`python3-perf` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els25	4.18.0-348.7.1.el8_5.tuxcare.els25
`bpftool` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els25	4.18.0-305.25.1.el8_4.tuxcare.els25
`kernel` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els25	4.18.0-305.25.1.el8_4.tuxcare.els25
`kernel-core` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els25	4.18.0-305.25.1.el8_4.tuxcare.els25
`kernel-cross-headers` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els25	4.18.0-305.25.1.el8_4.tuxcare.els25
`kernel-debug` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els25	4.18.0-305.25.1.el8_4.tuxcare.els25
`kernel-debug-core` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els25	4.18.0-305.25.1.el8_4.tuxcare.els25
`kernel-debug-devel` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els25	4.18.0-305.25.1.el8_4.tuxcare.els25
`kernel-debug-modules` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els25	4.18.0-305.25.1.el8_4.tuxcare.els25
`kernel-debug-modules-extra` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els25	4.18.0-305.25.1.el8_4.tuxcare.els25
`kernel-debug-modules-internal` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els25	4.18.0-305.25.1.el8_4.tuxcare.els25
`Kernel` Linux	before 5.4.287, 5.5.0 up to 5.10.231, 5.11.0 up to 5.15.174, 5.13.0 up to 6.1.120, 5.16.0 up to 6.6.66, 6.2.0 up to 6.12.5	5.4.2875.10.2315.15.1746.1.1206.6.666.12.5
`linux` Debian:12	before 6.1.123-1, plus listed versions 6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1 Show 27 moreShow less 6.1.119-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1	6.1.123-1
`linux` Debian:13	before 6.12.5-1	6.12.5-1
`linux` Debian:14	before 6.12.5-1	6.12.5-1
`linux` Debian:11	before 5.10.234-1, plus listed versions 5.10.103-15.10.103-1~bpo10+15.10.106-15.10.113-15.10.120-1 Show 39 moreShow less 5.10.120-1~bpo10+15.10.127-15.10.127-25.10.127-2~bpo10+15.10.136-15.10.140-15.10.148-15.10.149-15.10.149-25.10.158-15.10.158-25.10.162-15.10.178-15.10.178-25.10.178-35.10.179-15.10.179-25.10.179-35.10.179-45.10.179-55.10.191-15.10.197-15.10.205-15.10.205-25.10.209-15.10.209-25.10.216-15.10.218-15.10.221-15.10.223-15.10.226-15.10.46-45.10.46-55.10.70-15.10.70-1~bpo10+15.10.84-15.10.92-15.10.92-1~bpo10+15.10.92-2	5.10.234-1
`linux-6.1` Debian:11	before 6.1.128-1~deb11u1, plus listed versions 6.1.106-3~deb11u16.1.106-3~deb11u26.1.106-3~deb11u36.1.112-1~deb11u16.1.119-1~deb11u1	6.1.128-1~deb11u1
`kernel` Mageia:9	before 6.6.74-1.mga9	6.6.74-1.mga9
`kmod-virtualbox` Mageia:9	before 7.0.24-64.mga9	7.0.24-64.mga9
`kmod-xtables-addons` Mageia:9	before 3.24-70.mga9	3.24-70.mga9
`dwarves` Mageia:9	before 1.29-1.mga9	1.29-1.mga9
`kernel-linus` Mageia:9	before 6.6.74-1.mga9	6.6.74-1.mga9
`kernel` openEuler:20.03-LTS-SP4	before 4.19.90-2501.3.0.0312.oe2003sp4	4.19.90-2501.3.0.0312.oe2003sp4
`kernel` openEuler:24.03-LTS	before 6.6.0-84.0.0.78.oe2403	6.6.0-84.0.0.78.oe2403
`kernel` openEuler:24.03-LTS-SP1	before 6.6.0-84.0.0.89.oe2403sp1	6.6.0-84.0.0.89.oe2403sp1
`kernel` openEuler:22.03-LTS-SP3	before 5.10.0-259.0.0.161.oe2203sp3	5.10.0-259.0.0.161.oe2203sp3
`kernel` openEuler:22.03-LTS-SP4	before 5.10.0-259.0.0.162.oe2203sp4	5.10.0-259.0.0.162.oe2203sp4
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debug-devel` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debug-devel-matched` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-devel` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-devel-matched` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debug-devel` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debug-devel-matched` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-devel` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-devel-matched` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-doc` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-rt-64k-debug-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-rt-64k-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-rt-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-tools-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-zfcpdump-devel-matched` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`libperf-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`perf` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`perf-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`python3-perf` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`python3-perf-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`rtla` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`rv` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debug` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debug-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debug-modules` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debug-modules-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debug-modules-extra` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-modules` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-modules-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-modules-extra` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-abi-stablelists` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debug` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debug-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debug-modules` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debug-modules-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debug-modules-extra` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debug-uki-virt` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-modules` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-modules-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-modules-extra` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-rt-64k-debug-debuginfo` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-rt-64k-debuginfo` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP3	before 5.3.18-150300.59.204.1	5.3.18-150300.59.204.1
`kernel-livepatch-SLE15-SP3_Update_57` SUSE:Linux Enterprise Live Patching 15 SP3	before 1-150300.7.3.1	1-150300.7.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP3	before 5.3.18-150300.59.204.1	5.3.18-150300.59.204.1
`kernel-64kb` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS	before 5.3.18-150300.59.204.1	5.3.18-150300.59.204.1
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS	before 5.3.18-150300.59.204.1	5.3.18-150300.59.204.1
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS	before 5.3.18-150300.59.204.1.150300.18.122.1	5.3.18-150300.59.204.1.150300.18.122.1
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS	before 5.3.18-150300.59.204.1	5.3.18-150300.59.204.1
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS	before 5.3.18-150300.59.204.1	5.3.18-150300.59.204.1
`kernel-preempt` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS	before 5.3.18-150300.59.204.1	5.3.18-150300.59.204.1
`kernel-source` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS	before 5.3.18-150300.59.204.1	5.3.18-150300.59.204.1
`kernel-syms` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS	before 5.3.18-150300.59.204.1	5.3.18-150300.59.204.1
`kernel-64kb` SUSE:Linux Enterprise Server 15 SP3-LTSS	before 5.3.18-150300.59.204.1	5.3.18-150300.59.204.1
`kernel-default` SUSE:Linux Enterprise Server 15 SP3-LTSS	before 5.3.18-150300.59.204.1	5.3.18-150300.59.204.1
`kernel-default-base` SUSE:Linux Enterprise Server 15 SP3-LTSS	before 5.3.18-150300.59.204.1.150300.18.122.1	5.3.18-150300.59.204.1.150300.18.122.1
`kernel-docs` SUSE:Linux Enterprise Server 15 SP3-LTSS	before 5.3.18-150300.59.204.1	5.3.18-150300.59.204.1
`kernel-obs-build` SUSE:Linux Enterprise Server 15 SP3-LTSS	before 5.3.18-150300.59.204.1	5.3.18-150300.59.204.1
`kernel-preempt` SUSE:Linux Enterprise Server 15 SP3-LTSS	before 5.3.18-150300.59.204.1	5.3.18-150300.59.204.1
`kernel-source` SUSE:Linux Enterprise Server 15 SP3-LTSS	before 5.3.18-150300.59.204.1	5.3.18-150300.59.204.1
`kernel-syms` SUSE:Linux Enterprise Server 15 SP3-LTSS	before 5.3.18-150300.59.204.1	5.3.18-150300.59.204.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server 15 SP3-LTSS	before 5.3.18-150300.59.204.1	5.3.18-150300.59.204.1
`kernel-default` SUSE:Linux Enterprise Server for SAP Applications 15 SP3	before 5.3.18-150300.59.204.1	5.3.18-150300.59.204.1
`kernel-default-base` SUSE:Linux Enterprise Server for SAP Applications 15 SP3	before 5.3.18-150300.59.204.1.150300.18.122.1	5.3.18-150300.59.204.1.150300.18.122.1
`kernel-docs` SUSE:Linux Enterprise Server for SAP Applications 15 SP3	before 5.3.18-150300.59.204.1	5.3.18-150300.59.204.1
`kernel-obs-build` SUSE:Linux Enterprise Server for SAP Applications 15 SP3	before 5.3.18-150300.59.204.1	5.3.18-150300.59.204.1
`kernel-preempt` SUSE:Linux Enterprise Server for SAP Applications 15 SP3	before 5.3.18-150300.59.204.1	5.3.18-150300.59.204.1
`kernel-source` SUSE:Linux Enterprise Server for SAP Applications 15 SP3	before 5.3.18-150300.59.204.1	5.3.18-150300.59.204.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP Applications 15 SP3	before 5.3.18-150300.59.204.1	5.3.18-150300.59.204.1
`kernel-default` SUSE:Linux Enterprise Micro 5.1	before 5.3.18-150300.59.204.1	5.3.18-150300.59.204.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.1	before 5.3.18-150300.59.204.1.150300.18.122.1	5.3.18-150300.59.204.1.150300.18.122.1
`kernel-default` SUSE:Linux Enterprise Micro 5.2	before 5.3.18-150300.59.204.1	5.3.18-150300.59.204.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.2	before 5.3.18-150300.59.204.1.150300.18.122.1	5.3.18-150300.59.204.1.150300.18.122.1
`kernel-64kb` SUSE:Enterprise Storage 7.1	before 5.3.18-150300.59.204.1	5.3.18-150300.59.204.1
`kernel-default` SUSE:Enterprise Storage 7.1	before 5.3.18-150300.59.204.1	5.3.18-150300.59.204.1
`kernel-default-base` SUSE:Enterprise Storage 7.1	before 5.3.18-150300.59.204.1.150300.18.122.1	5.3.18-150300.59.204.1.150300.18.122.1
`kernel-docs` SUSE:Enterprise Storage 7.1	before 5.3.18-150300.59.204.1	5.3.18-150300.59.204.1
`kernel-obs-build` SUSE:Enterprise Storage 7.1	before 5.3.18-150300.59.204.1	5.3.18-150300.59.204.1
`kernel-preempt` SUSE:Enterprise Storage 7.1	before 5.3.18-150300.59.204.1	5.3.18-150300.59.204.1
`kernel-source` SUSE:Enterprise Storage 7.1	before 5.3.18-150300.59.204.1	5.3.18-150300.59.204.1
`kernel-syms` SUSE:Enterprise Storage 7.1	before 5.3.18-150300.59.204.1	5.3.18-150300.59.204.1
`kernel-default` SUSE:Linux Enterprise Live Patching 12 SP5	before 4.12.14-122.244.1	4.12.14-122.244.1
`kgraft-patch-SLE12-SP5_Update_64` SUSE:Linux Enterprise Live Patching 12 SP5	before 1-8.5.1	1-8.5.1
`kernel-default` SUSE:Linux Enterprise Server 12 SP5-LTSS	before 4.12.14-122.244.1	4.12.14-122.244.1
`kernel-source` SUSE:Linux Enterprise Server 12 SP5-LTSS	before 4.12.14-122.244.1	4.12.14-122.244.1
`kernel-syms` SUSE:Linux Enterprise Server 12 SP5-LTSS	before 4.12.14-122.244.1	4.12.14-122.244.1
`kernel-default` SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5	before 4.12.14-122.244.1	4.12.14-122.244.1
`kernel-source` SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5	before 4.12.14-122.244.1	4.12.14-122.244.1
`kernel-syms` SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5	before 4.12.14-122.244.1	4.12.14-122.244.1
`kernel-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6	before 6.4.0-15061.12.coco15sp6.1	6.4.0-15061.12.coco15sp6.1
`kernel-coco_debug` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6	before 6.4.0-15061.12.coco15sp6.1	6.4.0-15061.12.coco15sp6.1
`kernel-source-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6	before 6.4.0-15061.12.coco15sp6.1	6.4.0-15061.12.coco15sp6.1
`kernel-syms-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6	before 6.4.0-15061.12.coco15sp6.1	6.4.0-15061.12.coco15sp6.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6	before 6.4.0-150600.8.26.1	6.4.0-150600.8.26.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6	before 6.4.0-150600.8.26.1	6.4.0-150600.8.26.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6	before 6.4.0-150600.8.26.1	6.4.0-150600.8.26.1
`kernel-azure` openSUSE:Leap 15.6	before 6.4.0-150600.8.26.1	6.4.0-150600.8.26.1
`kernel-source-azure` openSUSE:Leap 15.6	before 6.4.0-150600.8.26.1	6.4.0-150600.8.26.1
`kernel-syms-azure` openSUSE:Leap 15.6	before 6.4.0-150600.8.26.1	6.4.0-150600.8.26.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP6	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP6	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP6	before 6.4.0-150600.23.38.1.150600.12.16.2	6.4.0-150600.23.38.1.150600.12.16.2
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP6	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP6	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP6	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP6	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP6	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP6	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP6	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP6	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`dtb-aarch64` openSUSE:Leap 15.6	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-64kb` openSUSE:Leap 15.6	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-debug` openSUSE:Leap 15.6	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-default` openSUSE:Leap 15.6	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-default-base` openSUSE:Leap 15.6	before 6.4.0-150600.23.38.1.150600.12.16.2	6.4.0-150600.23.38.1.150600.12.16.2
`kernel-docs` openSUSE:Leap 15.6	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-kvmsmall` openSUSE:Leap 15.6	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-obs-build` openSUSE:Leap 15.6	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-obs-qa` openSUSE:Leap 15.6	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-source` openSUSE:Leap 15.6	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-syms` openSUSE:Leap 15.6	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-zfcpdump` openSUSE:Leap 15.6	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-rt` openSUSE:Leap 15.6	before 6.4.0-150600.10.26.1	6.4.0-150600.10.26.1
`kernel-rt_debug` openSUSE:Leap 15.6	before 6.4.0-150600.10.26.1	6.4.0-150600.10.26.1
`kernel-source-rt` openSUSE:Leap 15.6	before 6.4.0-150600.10.26.1	6.4.0-150600.10.26.1
`kernel-syms-rt` openSUSE:Leap 15.6	before 6.4.0-150600.10.26.1	6.4.0-150600.10.26.1
`linux-aws` Ubuntu:Pro:14.04:LTS	before 4.4.0-1143.149, plus listed versions 4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9 Show 45 moreShow less 4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80	4.4.0-1143.149
`linux-azure` Ubuntu:Pro:14.04:LTS	before 4.15.0-1188.203~14.04.1, plus listed versions 4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2 Show 45 moreShow less 4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1	4.15.0-1188.203~14.04.1
`linux-lts-xenial` Ubuntu:Pro:14.04:LTS	before 4.4.0-268.302~14.04.1, plus listed versions 4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1 Show 45 moreShow less 4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1	4.4.0-268.302~14.04.1
`linux` Ubuntu:Pro:16.04:LTS	before 4.4.0-268.302, plus listed versions 4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11 Show 45 moreShow less 4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96	4.4.0-268.302
`linux-aws` Ubuntu:Pro:16.04:LTS	before 4.4.0-1181.196, plus listed versions 4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18 Show 45 moreShow less 4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93	4.4.0-1181.196
`linux-aws-hwe` Ubuntu:Pro:16.04:LTS	before 4.15.0-1180.193~16.04.1, plus listed versions 4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1 Show 45 moreShow less 4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1	4.15.0-1180.193~16.04.1
`linux-azure` Ubuntu:Pro:16.04:LTS	before 4.15.0-1188.203~16.04.1, plus listed versions 4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15 Show 45 moreShow less 4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71	4.15.0-1188.203~16.04.1
`linux-gcp` Ubuntu:Pro:16.04:LTS	before 4.15.0-1173.190~16.04.1, plus listed versions 4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9 Show 45 moreShow less 4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1	4.15.0-1173.190~16.04.1
`linux-hwe` Ubuntu:Pro:16.04:LTS	before 4.15.0-237.249~16.04.1, plus listed versions 4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1 Show 45 moreShow less 4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1	4.15.0-237.249~16.04.1
`linux-kvm` Ubuntu:Pro:16.04:LTS	before 4.4.0-1144.155, plus listed versions 4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15 Show 45 moreShow less 4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.674.4.0-1062.694.4.0-1063.704.4.0-1064.714.4.0-1065.724.4.0-1066.734.4.0-1068.754.4.0-1069.764.4.0-1070.774.4.0-1071.784.4.0-1075.824.4.0-1076.834.4.0-1077.84	4.4.0-1144.155
`linux-oracle` Ubuntu:Pro:16.04:LTS	before 4.15.0-1142.153~16.04.1, plus listed versions 4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1 Show 45 moreShow less 4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1	4.15.0-1142.153~16.04.1
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-fips` Ubuntu:Pro:FIPS-updates:16.04:LTS	before 4.4.0-1113.120, plus listed versions 4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13 Show 45 moreShow less 4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78	4.4.0-1113.120
`linux-fips` Ubuntu:Pro:FIPS:16.04:LTS	All versions, plus listed versions 4.4.0-1001.14.4.0-1002.2	None known
`linux` Ubuntu:Pro:18.04:LTS	before 4.15.0-237.249, plus listed versions 4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11 Show 45 moreShow less 4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107	4.15.0-237.249
`linux-aws` Ubuntu:Pro:18.04:LTS	before 4.15.0-1180.193, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7 Show 45 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87	4.15.0-1180.193
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-aws-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1142.152~18.04.1, plus listed versions 5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2	5.4.0-1142.152~18.04.1
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-4.15` Ubuntu:Pro:18.04:LTS	before 4.15.0-1188.203, plus listed versions 4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102 Show 45 moreShow less 4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176	4.15.0-1188.203
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1147.154~18.04.1, plus listed versions 5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1 Show 45 moreShow less 5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1	5.4.0-1147.154~18.04.1
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-4.15` Ubuntu:Pro:18.04:LTS	before 4.15.0-1173.190, plus listed versions 4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92 Show 45 moreShow less 4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161	4.15.0-1173.190
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gcp-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1145.154~18.04.1, plus listed versions 5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2	5.4.0-1145.154~18.04.1
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-211.231~18.04.1, plus listed versions 5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2 Show 45 moreShow less 5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1	5.4.0-211.231~18.04.1
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-ibm-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1090.95~18.04.1, plus listed versions 5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1 Show 45 moreShow less 5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1	5.4.0-1090.95~18.04.1
`linux-kvm` Ubuntu:Pro:18.04:LTS	before 4.15.0-1163.168, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8 Show 45 moreShow less 4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83	4.15.0-1163.168
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle` Ubuntu:Pro:18.04:LTS	before 4.15.0-1142.153, plus listed versions 4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13 Show 45 moreShow less 4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88	4.15.0-1142.153
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-oracle-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1140.149~18.04.1, plus listed versions 5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1	5.4.0-1140.149~18.04.1
`linux-raspi-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1129.142~18.04.1, plus listed versions 5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1 Show 45 moreShow less 5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1	5.4.0-1129.142~18.04.1
`linux-aws-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	before 4.15.0-2118.124, plus listed versions 4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24 Show 45 moreShow less 4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93	4.15.0-2118.124
`linux-azure-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	before 4.15.0-2097.103, plus listed versions 4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10 Show 45 moreShow less 4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80	4.15.0-2097.103
`linux-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	before 4.15.0-1135.146, plus listed versions 4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42 Show 45 moreShow less 4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110	4.15.0-1135.146
`linux-gcp-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	before 4.15.0-2081.87, plus listed versions 4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21 Show 45 moreShow less 4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.794.15.0-2075.804.15.0-2076.814.15.0-2077.83	4.15.0-2081.87
`linux-aws-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-2000.4	None known
`linux-azure-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1002.2	None known
`linux-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1011.12	None known
`linux-gcp-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1001.1	None known
`linux` Ubuntu:20.04:LTS	before 5.4.0-211.231, plus listed versions 5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25 Show 45 moreShow less 5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110	5.4.0-211.231
`linux-aws` Ubuntu:20.04:LTS	before 5.4.0-1142.152, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5 Show 45 moreShow less 5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78	5.4.0-1142.152
`linux-aws-5.15` Ubuntu:20.04:LTS	before 5.15.0-1080.87~20.04.1, plus listed versions 5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1 Show 45 moreShow less 5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1	5.15.0-1080.87~20.04.1
`linux-azure` Ubuntu:20.04:LTS	before 5.4.0-1147.154, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8 Show 45 moreShow less 5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87	5.4.0-1147.154
`linux-azure-5.15` Ubuntu:20.04:LTS	before 5.15.0-1086.95~20.04.1, plus listed versions 5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1 Show 45 moreShow less 5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1	5.15.0-1086.95~20.04.1
`linux-bluefield` Ubuntu:20.04:LTS	before 5.4.0-1101.108, plus listed versions 5.4.0-1007.105.4.0-1011.145.4.0-1012.155.4.0-1013.165.4.0-1016.19 Show 45 moreShow less 5.4.0-1019.225.4.0-1020.235.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1030.335.4.0-1032.355.4.0-1035.385.4.0-1036.395.4.0-1040.445.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1049.555.4.0-1050.565.4.0-1054.605.4.0-1058.645.4.0-1059.655.4.0-1060.665.4.0-1062.685.4.0-1064.705.4.0-1065.715.4.0-1066.725.4.0-1068.745.4.0-1070.765.4.0-1071.775.4.0-1072.785.4.0-1073.795.4.0-1074.805.4.0-1075.815.4.0-1076.825.4.0-1077.835.4.0-1078.845.4.0-1079.855.4.0-1080.875.4.0-1081.885.4.0-1082.895.4.0-1083.905.4.0-1084.915.4.0-1085.92	5.4.0-1101.108
`linux-gcp` Ubuntu:20.04:LTS	before 5.4.0-1145.154, plus listed versions 5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7 Show 45 moreShow less 5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1033.355.4.0-1034.375.4.0-1036.395.4.0-1037.405.4.0-1038.415.4.0-1040.435.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1044.475.4.0-1046.495.4.0-1049.535.4.0-1051.555.4.0-1052.565.4.0-1053.575.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1060.645.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1065.695.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1072.775.4.0-1073.785.4.0-1075.80	5.4.0-1145.154
`linux-gcp-5.15` Ubuntu:20.04:LTS	before 5.15.0-1081.90~20.04.1, plus listed versions 5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2 Show 45 moreShow less 5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.15.15.0-1065.73~20.04.15.15.0-1066.74~20.04.15.15.0-1067.75~20.04.15.15.0-1068.76~20.04.15.15.0-1069.77~20.04.15.15.0-1070.78~20.04.15.15.0-1071.79~20.04.15.15.0-1072.80~20.04.15.15.0-1073.81~20.04.15.15.0-1074.83~20.04.1	5.15.0-1081.90~20.04.1
`linux-hwe-5.15` Ubuntu:20.04:LTS	before 5.15.0-136.147~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 45 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1	5.15.0-136.147~20.04.1
`linux-ibm` Ubuntu:20.04:LTS	before 5.4.0-1088.93, plus listed versions 5.4.0-1003.45.4.0-1004.55.4.0-1005.65.4.0-1006.75.4.0-1007.8 Show 45 moreShow less 5.4.0-1008.95.4.0-1010.115.4.0-1012.135.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1017.195.4.0-1018.205.4.0-1019.215.4.0-1020.225.4.0-1021.235.4.0-1023.255.4.0-1026.295.4.0-1028.325.4.0-1029.335.4.0-1031.355.4.0-1032.365.4.0-1033.375.4.0-1034.385.4.0-1036.415.4.0-1037.425.4.0-1040.455.4.0-1041.465.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1048.535.4.0-1049.545.4.0-1050.555.4.0-1051.565.4.0-1052.575.4.0-1053.585.4.0-1054.595.4.0-1056.615.4.0-1057.625.4.0-1058.635.4.0-1059.645.4.0-1060.655.4.0-1061.665.4.0-1063.685.4.0-1064.695.4.0-1065.705.4.0-1066.71	5.4.0-1088.93
`linux-ibm-5.15` Ubuntu:20.04:LTS	before 5.15.0-1074.77~20.04.1, plus listed versions 5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1 Show 28 moreShow less 5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.15.15.0-1057.60~20.04.15.15.0-1058.61~20.04.15.15.0-1059.62~20.04.15.15.0-1060.63~20.04.15.15.0-1061.64~20.04.15.15.0-1062.65~20.04.15.15.0-1063.66~20.04.15.15.0-1064.67~20.04.15.15.0-1065.68~20.04.15.15.0-1066.69~20.04.15.15.0-1067.70~20.04.15.15.0-1068.71~20.04.15.15.0-1069.72~20.04.1	5.15.0-1074.77~20.04.1
`linux-intel-iotg-5.15` Ubuntu:20.04:LTS	before 5.15.0-1077.83~20.04.1, plus listed versions 5.15.0-1003.5~20.04.15.15.0-1008.11~20.04.15.15.0-1010.14~20.04.15.15.0-1015.20~20.04.25.15.0-1016.21~20.04.1 Show 38 moreShow less 5.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1021.26~20.04.15.15.0-1023.28~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1030.35~20.04.15.15.0-1031.36~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1040.46~20.04.15.15.0-1043.49~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1060.66~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.25.15.0-1074.80~20.04.1	5.15.0-1077.83~20.04.1
`linux-iot` Ubuntu:20.04:LTS	before 5.4.0-1048.51, plus listed versions 5.4.0-1001.35.4.0-1004.65.4.0-1005.75.4.0-1006.85.4.0-1009.11 Show 32 moreShow less 5.4.0-1010.125.4.0-1011.135.4.0-1012.145.4.0-1013.155.4.0-1014.165.4.0-1017.185.4.0-1018.195.4.0-1019.205.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1035.365.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1041.425.4.0-1042.435.4.0-1043.445.4.0-1044.455.4.0-1045.46	5.4.0-1048.51
`linux-kvm` Ubuntu:20.04:LTS	before 5.4.0-1129.138, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1004.45.4.0-1006.6 Show 45 moreShow less 5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1023.235.4.0-1024.245.4.0-1026.275.4.0-1028.295.4.0-1030.315.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1041.425.4.0-1044.465.4.0-1045.475.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1050.525.4.0-1051.535.4.0-1053.555.4.0-1054.565.4.0-1055.575.4.0-1056.585.4.0-1058.615.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1068.725.4.0-1070.755.4.0-1071.765.4.0-1073.78	5.4.0-1129.138
`linux-lowlatency-hwe-5.15` Ubuntu:20.04:LTS	before 5.15.0-135.146~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 45 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.88~20.04.15.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.95~20.04.15.15.0-87.96~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-110.120~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1	5.15.0-135.146~20.04.1

History

History
Recorded	Changed	Sources
Nov 3, 2026	facts	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-56642 is a high vulnerability (CVSS 7.8) in Linux, published December 27, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.24%, the 15th percentile. Fixed in kernel 6.6.76.1-1.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 476 package rows, 1,862 versions, 5,382 references and the rest of 30 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 34 source records.