Every CVE Search/ Get API key

CVE-2024-53174

SUNRPC: make sure cache entry active before cache_show

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: make sure cache entry active before cache_show

The function c_show was called with protection from RCU. This only ensures that cp will not be freed. Therefore, the reference count for cp can drop to zero, which will trigger a refcount use-after-free warning when cache_get is called. To resolve this issue, use cache_get_rcu to ensure that cp remains active.

------------[ cut here ]------------ refcount_t: addition on 0; use-after-free. WARNING: CPU: 7 PID: 822 at lib/refcount.c:25 refcount_warn_saturate+0xb1/0x120 CPU: 7 UID: 0 PID: 822 Comm: cat Not tainted 6.12.0-rc3+ #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.1-2.fc37 04/01/2014 RIP: 0010:refcount_warn_saturate+0xb1/0x120

Call Trace: <TASK> c_show+0x2fc/0x380 [sunrpc] seq_read_iter+0x589/0x770 seq_read+0x1e5/0x270 proc_reg_read+0xe1/0x140 vfs_read+0x125/0x530 ksys_read+0xc1/0x160 do_syscall_64+0x5f/0x170 entry_SYSCALL_64_after_hwframe+0x76/0x7e

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.26%Up 0.2 points since Dec 28, 2024
90%50%10%1%

What each source reports

CVE List Score used 7.8

SUNRPC: make sure cache entry active before cache_show

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: make sure cache entry active before cache_show

The function c_show was called with protection from RCU. This only ensures that cp will not be freed. Therefore, the reference count for cp can drop to zero, which will trigger a refcount use-after-free warning when cache_get is called. To resolve this issue, use cache_get_rcu to ensure that cp remains active.

------------[ cut here ]------------ refcount_t: addition on 0; use-after-free. WARNING: CPU: 7 PID: 822 at lib/refcount.c:25 refcount_warn_saturate+0xb1/0x120 CPU: 7 UID: 0 PID: 822 Comm: cat Not tainted 6.12.0-rc3+ #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.1-2.fc37 04/01/2014 RIP: 0010:refcount_warn_saturate+0xb1/0x120

Call Trace: <TASK> c_show+0x2fc/0x380 [sunrpc] seq_read_iter+0x589/0x770 seq_read+0x1e5/0x270 proc_reg_read+0xe1/0x140 vfs_read+0x125/0x530 ksys_read+0xc1/0x160 do_syscall_64+0x5f/0x170 entry_SYSCALL_64_after_hwframe+0x76/0x7e

Record
CVE-2024-53174
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
EUVDEUVD-2024-51846 7.8

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: make sure cache entry active before cache_show

The function c_show was called with protection from RCU. This only ensures that cp will not be freed. Therefore, the reference count for cp can drop to zero, which will trigger a refcount use-after-free warning when cache_get is called. To resolve this issue, use cache_get_rcu to ensure that cp remains active.

------------[ cut here ]------------ refcount_t: addition on 0; use-after-free. WARNING: CPU: 7 PID: 822 at lib/refcount.c:25 refcount_warn_saturate+0xb1/0x120 CPU: 7 UID: 0 PID: 822 Comm: cat Not tainted 6.12.0-rc3+ #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.1-2.fc37 04/01/2014 RIP: 0010:refcount_warn_saturate+0xb1/0x120

Call Trace: <TASK> c_show+0x2fc/0x380 [sunrpc] seq_read_iter+0x589/0x770 seq_read+0x1e5/0x270 proc_reg_read+0xe1/0x140 vfs_read+0x125/0x530 ksys_read+0xc1/0x160 do_syscall_64+0x5f/0x170 entry_SYSCALL_64_after_hwframe+0x76/0x7e

Record
EUVD-2024-51846
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-2xg4-wc7m-f6pq 7.8

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: make sure cache...

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: make sure cache entry active before cache_show

The function c_show was called with protection from RCU. This only ensures that cp will not be freed. Therefore, the reference count for cp can drop to zero, which will trigger a refcount use-after-free warning when cache_get is called. To resolve this issue, use cache_get_rcu to ensure that cp remains active.

------------[ cut here ]------------ refcount_t: addition on 0; use-after-free. WARNING: CPU: 7 PID: 822 at lib/refcount.c:25 refcount_warn_saturate+0xb1/0x120 CPU: 7 UID: 0 PID: 822 Comm: cat Not tainted 6.12.0-rc3+ #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.1-2.fc37 04/01/2014 RIP: 0010:refcount_warn_saturate+0xb1/0x120

Call Trace: <TASK> c_show+0x2fc/0x380 [sunrpc] seq_read_iter+0x589/0x770 seq_read+0x1e5/0x270 proc_reg_read+0xe1/0x140 vfs_read+0x125/0x530 ksys_read+0xc1/0x160 do_syscall_64+0x5f/0x170 entry_SYSCALL_64_after_hwframe+0x76/0x7e

Record
GHSA-2xg4-wc7m-f6pq
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: make sure cache entry active before cache_show

The function c_show was called with protection from RCU. This only ensures that cp will not be freed. Therefore, the reference count for cp can drop to zero, which will trigger a refcount use-after-free warning when cache_get is called. To resolve this issue, use cache_get_rcu to ensure that cp remains active.

------------[ cut here ]------------ refcount_t: addition on 0; use-after-free. WARNING: CPU: 7 PID: 822 at lib/refcount.c:25 refcount_warn_saturate+0xb1/0x120 CPU: 7 UID: 0 PID: 822 Comm: cat Not tainted 6.12.0-rc3+ #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.1-2.fc37 04/01/2014 RIP: 0010:refcount_warn_saturate+0xb1/0x120

Call Trace: <TASK> c_show+0x2fc/0x380 [sunrpc] seq_read_iter+0x589/0x770 seq_read+0x1e5/0x270 proc_reg_read+0xe1/0x140 vfs_read+0x125/0x530 ksys_read+0xc1/0x160 do_syscall_64+0x5f/0x170 entry_SYSCALL_64_after_hwframe+0x76/0x7e

Record
CVE-2024-53174
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
OSVBELL-CVE-2024-53174 7.8
Record
BELL-CVE-2024-53174
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 7.8

SUNRPC: make sure cache entry active before cache_show

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: make sure cache entry active before cache_show

The function c_show was called with protection from RCU. This only ensures that cp will not be freed. Therefore, the reference count for cp can drop to zero, which will trigger a refcount use-after-free warning when cache_get is called. To resolve this issue, use cache_get_rcu to ensure that cp remains active.

------------[ cut here ]------------ refcount_t: addition on 0; use-after-free. WARNING: CPU: 7 PID: 822 at lib/refcount.c:25 refcount_warn_saturate+0xb1/0x120 CPU: 7 UID: 0 PID: 822 Comm: cat Not tainted 6.12.0-rc3+ #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.1-2.fc37 04/01/2014 RIP: 0010:refcount_warn_saturate+0xb1/0x120

Call Trace: <TASK> c_show+0x2fc/0x380 [sunrpc] seq_read_iter+0x589/0x770 seq_read+0x1e5/0x270 proc_reg_read+0xe1/0x140 vfs_read+0x125/0x530 ksys_read+0xc1/0x160 do_syscall_64+0x5f/0x170 entry_SYSCALL_64_after_hwframe+0x76/0x7e

Record
CVE-2024-53174
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 46 moreShow less
OSVDEBIAN-CVE-2024-53174 7.8

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: make sure cache entry active before cache_show The function c_show was called with protection from RCU. This only ensures that cp will not be freed. Therefore, the reference count for cp can drop to zero, which will trigger a refcount use-after-free warning when cache_get is called. To resolve this issue, use cache_get_rcu to ensure that cp remains active. ------------[ cut here ]------------ refcount_t: addition on 0; use-after-free. WARNING: CPU: 7 PID: 822 at lib/refcount.c:25 refcount_warn_saturate+0xb1/0x120 CPU: 7 UID: 0 PID: 822 Comm: cat Not tainted 6.12.0-rc3+ #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.1-2.fc37 04/01/2014 RIP: 0010:refcount_warn_saturate+0xb1/0x120 Call Trace: <TASK> c_show+0x2fc/0x380 [sunrpc] seq_read_iter+0x589/0x770 seq_read+0x1e5/0x270 proc_reg_read+0xe1/0x140 vfs_read+0x125/0x530 ksys_read+0xc1/0x160 do_syscall_64+0x5f/0x170 entry_SYSCALL_64_after_hwframe+0x76/0x7e

Record
DEBIAN-CVE-2024-53174
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-1372 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: make sure cache entry active before cache_show

The function c_show was called with protection from RCU. This only ensures that cp will not be freed. Therefore, the reference count for cp can drop to zero, which will trigger a refcount use-after-free warning when cache_get is called. To resolve this issue, use cache_get_rcu to ensure that cp remains active.

------------[ cut here ]------------ refcount_t: addition on 0; use-after-free. WARNING: CPU: 7 PID: 822 at lib/refcount.c:25 refcount_warn_saturate+0xb1/0x120 CPU: 7 UID: 0 PID: 822 Comm: cat Not tainted 6.12.0-rc3+ #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.1-2.fc37 04/01/2014 RIP: 0010:refcount_warn_saturate+0xb1/0x120

Call Trace: <TASK> c_show+0x2fc/0x380 [sunrpc] seq_read_iter+0x589/0x770 seq_read+0x1e5/0x270 proc_reg_read+0xe1/0x140 vfs_read+0x125/0x530 ksys_read+0xc1/0x160 do_syscall_64+0x5f/0x170 entry_SYSCALL_64_after_hwframe+0x76/0x7e(CVE-2024-53174)

In the Linux kernel, the following vulnerability has been resolved:

ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init()

Under certain kernel configurations when building with Clang/LLVM, the compiler does not generate a return or jump as the terminator instruction for ip_vs_protocol_init(), triggering the following objtool warning during build time:

vmlinux.o: warning: objtool: ip_vs_protocol_init() falls through to next function __initstub__kmod_ip_vs_rr__935_123_ip_vs_rr_init6()

At runtime, this either causes an oops when trying to load the ipvs module or a boot-time panic if ipvs is built-in. This same issue has been reported by the Intel kernel test robot previously.

Digging deeper into both LLVM and the kernel code reveals this to be a undefined behavior problem. ip_vs_protocol_init() uses a on-stack buffer of 64 chars to store the registered protocol names and leaves it uninitialized after definition. The function calls strnlen() when concatenating protocol names into the buffer. With CONFIG_FORTIFY_SOURCE strnlen() performs an extra step to check whether the last byte of the input char buffer is a null character (commit 3009f891bb9f ("fortify: Allow strlen() and strnlen() to pass compile-time known lengths")). This, together with possibly other configurations, cause the following IR to be generated:

define hidden i32 @ip_vs_protocol_init() local_unnamed_addr #5 section ".init.text" align 16 !kcfi_type !29 { %1 = alloca [64 x i8], align 16 ...

14: ; preds = %11 %15 = getelementptr inbounds i8, ptr %1, i64 63 %16 = load i8, ptr %15, align 1 %17 = tail call i1 @llvm.is.constant.i8(i8 %16) %18 = icmp eq i8 %16, 0 %19 = select i1 %17, i1 %18, i1 false br i1 %19, label %20, label %23

20: ; preds = %14 %21 = call i64 @strlen(ptr noundef nonnull dereferenceable(1) %1) #23 ...

23: ; preds = %14, %11, %20 %24 = call i64 @strnlen(ptr noundef nonnull dereferenceable(1) %1, i64 noundef 64) #24 ... }

The above code calculates the address of the last char in the buffer (value %15) and then loads from it (value %16). Because the buffer is never initialized, the LLVM GVN pass marks value %16 as undefined:

%13 = getelementptr inbounds i8, ptr %1, i64 63 br i1 undef, label %14, label %17

This gives later passes (SCCP, in particular) more DCE opportunities by propagating the undef value further, and eventually removes everything after the load on the uninitialized stack location:

define hidden i32 @ip_vs_protocol_init() local_unnamed_addr #0 section ".init.text" align 16 !kcfi_type !11 { %1 = alloca [64 x i8], align 16 ...

12: …

Record
OESA-2025-1372
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-1450 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans

There is a kernel API ntb_mw_clear_trans() would pass 0 to both addr and size. This would make xlate_pos negative.

[ 23.734156] switchtec switchtec0: MW 0: part 0 addr 0x0000000000000000 size 0x0000000000000000 [ 23.734158] ================================================================================ [ 23.734172] UBSAN: shift-out-of-bounds in drivers/ntb/hw/mscc/ntb_hw_switchtec.c:293:7 [ 23.734418] shift exponent -1 is negative

Ensuring xlate_pos is a positive or zero before BIT.(CVE-2023-53034)

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix to shrink read extent node in batches

We use rwlock to protect core structure data of extent tree during its shrink, however, if there is a huge number of extent nodes in extent tree, during shrink of extent tree, it may hold rwlock for a very long time, which may trigger kernel hang issue.

This patch fixes to shrink read extent node in batches, so that, critical region of the rwlock can be shrunk to avoid its extreme long time hold.(CVE-2024-41935)

In the Linux kernel, the following vulnerability has been resolved:

vrf: revert "vrf: Remove unnecessary RCU-bh critical section"

This reverts commit 504fc6f4f7f681d2a03aa5f68aad549d90eab853.

dev_queue_xmit_nit is expected to be called with BH disabled. __dev_queue_xmit has the following:

    /* Disable soft irqs for various locks below. Also
     * stops preemption for RCU.
     */
    rcu_read_lock_bh();

VRF must follow this invariant. The referenced commit removed this protection. Which triggered a lockdep warning:

================================
WARNING: inconsistent lock state
6.11.0 #1 Tainted: G        W
--------------------------------
inconsistent {IN-SOFTIRQ-W} -&gt; {SOFTIRQ-ON-W} usage.
btserver/134819 [HC0[0]:SC0[0]:HE1:SE1] takes:
ffff8882da30c118 (rlock-AF_PACKET){+.?.}-{2:2}, at: tpacket_rcv+0x863/0x3b30
{IN-SOFTIRQ-W} state was registered at:
  lock_acquire+0x19a/0x4f0
  _raw_spin_lock+0x27/0x40
  packet_rcv+0xa33/0x1320
  __netif_receive_skb_core.constprop.0+0xcb0/0x3a90
  __netif_receive_skb_list_core+0x2c9/0x890
  netif_receive_skb_list_internal+0x610/0xcc0
      [...]

other info that might help us debug this:
 Possible unsafe locking scenario:

       CPU0
       ----
  lock(rlock-AF_PACKET);
  &lt;Interrupt&gt;
    lock(rlock-AF_PACKET);

 *** DEADLOCK ***

Call Trace:
 &lt;TASK&gt;
 dump_stack_lvl+0x73/0xa0
 mark_lock+0x102e/0x16b0
 __lock_acquire+0x9ae/0x6170
 lock_acquire+0x19a/0x4f0
 _raw_spin_lock+0x27/0x40
 tpacket_rcv+0x863/0x3b30
 dev_queue_xmit_nit+0x709/0xa40
 vrf_finish_direct+0x26e/0x340 [vrf]
 vrf_l3_out+0x5f4/0xe80 [vrf]
 __ip_local_out+0x51e/0x7a0
      [...](CVE-2024-49980)

In the Linux kernel, the following vulnerability has been resolved:

drm/msm/gem: prevent integer overflow in msm_ioctl_gem_submit()

The "submit->cmd[i].size" and "submit->cmd[i].offset" variables are u32 values that come from the user via the submit_lookup_cmds() function. This addition could lead to an integer wrapping bug so use size_add() to prevent that.

Patchwork: https://patchwork.freedesktop.org/patch/624696/(CVE-2024-52559)

In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: Mark inode as bad as soon as error detected in mi_enum_attr()

Extended the mi_enum_attr() function interface with an additional parameter, struct ntfs_inode *ni, to allow marking the inode as bad as soon as an error is detected.(CVE-2024-52560)

In the Linux kernel, the following vulnerability has been resolved:

crypto: qat/qat_4xxx - fix off by one in uof_get_name()

The fw_objs[] array has "num_objs" elements so the > needs to be >= to…

Record
OESA-2025-1450
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-2632 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: make sure cache entry active before cache_show

The function c_show was called with protection from RCU. This only ensures that cp will not be freed. Therefore, the reference count for cp can drop to zero, which will trigger a refcount use-after-free warning when cache_get is called. To resolve this issue, use cache_get_rcu to ensure that cp remains active.

------------[ cut here ]------------ refcount_t: addition on 0; use-after-free. WARNING: CPU: 7 PID: 822 at lib/refcount.c:25 refcount_warn_saturate+0xb1/0x120 CPU: 7 UID: 0 PID: 822 Comm: cat Not tainted 6.12.0-rc3+ #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.1-2.fc37 04/01/2014 RIP: 0010:refcount_warn_saturate+0xb1/0x120

Call Trace: <TASK> c_show+0x2fc/0x380 [sunrpc] seq_read_iter+0x589/0x770 seq_read+0x1e5/0x270 proc_reg_read+0xe1/0x140 vfs_read+0x125/0x530 ksys_read+0xc1/0x160 do_syscall_64+0x5f/0x170 entry_SYSCALL_64_after_hwframe+0x76/0x7e(CVE-2024-53174)

In the Linux kernel, the following vulnerability has been resolved:dm array: fix releasing a faulty array block twice in dm_array_cursor_endWhen dm_bm_read_lock() fails due to locking or checksum errors, itreleases the faulty block implicitly while leaving an invalid outputpointer behind. The caller of dm_bm_read_lock() should not operate onthis invalid dm_block pointer, or it will lead to undefined result.For example, the dm_array_cursor incorrectly caches the invalid pointeron reading a faulty array block, causing a double release indm_array_cursor_end(), then hitting the BUG_ON in dm-bufio cache_put().Reproduce steps:1. initialize a cache devicedmsetup create cmeta --table 0 8192 linear /dev/sdc 0 dmsetup create cdata --table 0 65536 linear /dev/sdc 8192 dmsetup create corig --table 0 524288 linear /dev/sdc $262144 dd if=/dev/zero of=/dev/mapper/cmeta bs=4k count=1dmsetup create cache --table 0 524288 cache /dev/mapper/cmeta /dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0 2. wipe the second array block offlinedmsteup remove cache cmeta cdata corigmapping_root=$(dd if=/dev/sdc bs=1c count=8 skip=192 2>/dev/null | hexdump -e 1/8 %u n )ablock=$(dd if=/dev/sdc bs=1c count=8 skip=$((4096*mapping_root+2056)) 2>/dev/null | hexdump -e 1/8 %u n )dd if=/dev/zero of=/dev/sdc bs=4k count=1 seek=$ablock3. try reopen the cache devicedmsetup create cmeta --table 0 8192 linear /dev/sdc 0 dmsetup create cdata --table 0 65536 linear /dev/sdc 8192 dmsetup create corig --table 0 524288 linear /dev/sdc $262144 dmsetup create cache --table 0 524288 cache /dev/mapper/cmeta /dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0 Kernel logs:(snip)device-mapper: array: array_block_check failed: blocknr 0 != wanted 10device-mapper: block manager: array validator check failed for block 10device-mapper: array: get_ablock faileddevice-mapper: cache metadata: dm_array_cursor_next for mapping failed------------[ cut here ]------------kernel BUG at drivers/md/dm-bufio.c:638!Fix by setting the cached block pointer to NULL on errors.In addition to the reproducer described above, this fix can beverified using the array_cursor/damaged test in dm-unit: dm-unit run /pdata/array_cursor/damaged --kernel-dir <KERNEL_DIR>(CVE-2024-57929)

In the Linux kernel, the following vulnerability has been resolved:

mm/vmscan: fix hwpoisoned large folio handling in shrink_folio_list

In shrink_folio_list(), the hwpoisoned folio may be large folio, which can't be handled by unmap_poisoned_folio(). For THP, try_to_unmap_one() must be passed with TTU_SPLIT_HUGE_PMD to split huge PMD first and then retry. Without TTU_SPLIT_HUGE_PMD, we will trigger null-ptr deref of pvmw.pte. Even we passed TTU_SPLIT_HUGE_PMD, we will trigger a WARN_ON_ONCE due to the page isn't in swapcache.

Since…

Record
OESA-2025-2632
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-2636 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

gfs2: Fix possible data races in gfs2_show_options()

Some fields such as gt_logd_secs of the struct gfs2_tune are accessed without holding the lock gt_spin in gfs2_show_options():

val = sdp->sd_tune.gt_logd_secs; if (val != 30) seq_printf(s, ",commit=%d", val);

And thus can cause data races when gfs2_show_options() and other functions such as gfs2_reconfigure() are concurrently executed:

spin_lock(&gt->gt_spin); gt->gt_logd_secs = newargs->ar_commit;

To fix these possible data races, the lock sdp->sd_tune.gt_spin is acquired before accessing the fields of gfs2_tune and released after these accesses.

Further changes by Andreas:

  • Don't hold the spin lock over the seq_printf operations.(CVE-2023-53622)

In the Linux kernel, a vulnerability exists in the IP checksum code for arm64 architecture. Although commit c2c24edb1d9c ("arm64: csum: Fix pathological zero-length calls") added an early return for zero-length input, syzkaller has discovered an example of a negative length that causes an undefined shift and an out-of-bounds read. An attacker can exploit this vulnerability to read data beyond the buffer boundary, affecting system confidentiality.(CVE-2023-53726)

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: make sure cache entry active before cache_show

The function c_show was called with protection from RCU. This only ensures that cp will not be freed. Therefore, the reference count for cp can drop to zero, which will trigger a refcount use-after-free warning when cache_get is called. To resolve this issue, use cache_get_rcu to ensure that cp remains active.

------------[ cut here ]------------ refcount_t: addition on 0; use-after-free. WARNING: CPU: 7 PID: 822 at lib/refcount.c:25 refcount_warn_saturate+0xb1/0x120 CPU: 7 UID: 0 PID: 822 Comm: cat Not tainted 6.12.0-rc3+ #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.1-2.fc37 04/01/2014 RIP: 0010:refcount_warn_saturate+0xb1/0x120

Call Trace: <TASK> c_show+0x2fc/0x380 [sunrpc] seq_read_iter+0x589/0x770 seq_read+0x1e5/0x270 proc_reg_read+0xe1/0x140 vfs_read+0x125/0x530 ksys_read+0xc1/0x160 do_syscall_64+0x5f/0x170 entry_SYSCALL_64_after_hwframe+0x76/0x7e(CVE-2024-53174)

In the Linux kernel, the following vulnerability has been resolved:dm array: fix releasing a faulty array block twice in dm_array_cursor_endWhen dm_bm_read_lock() fails due to locking or checksum errors, itreleases the faulty block implicitly while leaving an invalid outputpointer behind. The caller of dm_bm_read_lock() should not operate onthis invalid dm_block pointer, or it will lead to undefined result.For example, the dm_array_cursor incorrectly caches the invalid pointeron reading a faulty array block, causing a double release indm_array_cursor_end(), then hitting the BUG_ON in dm-bufio cache_put().Reproduce steps:1. initialize a cache devicedmsetup create cmeta --table 0 8192 linear /dev/sdc 0 dmsetup create cdata --table 0 65536 linear /dev/sdc 8192 dmsetup create corig --table 0 524288 linear /dev/sdc $262144 dd if=/dev/zero of=/dev/mapper/cmeta bs=4k count=1dmsetup create cache --table 0 524288 cache /dev/mapper/cmeta /dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0 2. wipe the second array block offlinedmsteup remove cache cmeta cdata corigmapping_root=$(dd if=/dev/sdc bs=1c count=8 skip=192 2>/dev/null | hexdump -e 1/8 %u n )ablock=$(dd if=/dev/sdc bs=1c count=8 skip=$((4096*mapping_root+2056)) 2>/dev/null | hexdump -e 1/8 %u n )dd if=/dev/zero of=/dev/sdc bs=4k count=1 seek=$ablock3. try reopen the cache devicedmsetup create cmeta --table 0 8192 linear /dev/sdc 0 dmsetup create cdata --table 0 65536 linear /dev/sdc 8192 dmsetup create corig --table 0 524288 linear /dev/sdc…

Record
OESA-2025-2636
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:6966 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:6966
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2024-53174 7.8

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: make sure cache entry active before cache_show The function c_show was called with protection from RCU. This only ensures that cp will not be freed. Therefore, the reference count for cp can drop to zero, which will trigger a refcount use-after-free warning when cache_get is called. To resolve this issue, use cache_get_rcu to ensure that cp remains active. ------------[ cut here ]------------ refcount_t: addition on 0; use-after-free. WARNING: CPU: 7 PID: 822 at lib/refcount.c:25 refcount_warn_saturate+0xb1/0x120 CPU: 7 UID: 0 PID: 822 Comm: cat Not tainted 6.12.0-rc3+ #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.1-2.fc37 04/01/2014 RIP: 0010:refcount_warn_saturate+0xb1/0x120 Call Trace: <TASK> c_show+0x2fc/0x380 [sunrpc] seq_read_iter+0x589/0x770 seq_read+0x1e5/0x270 proc_reg_read+0xe1/0x140 vfs_read+0x125/0x530 ksys_read+0xc1/0x160 do_syscall_64+0x5f/0x170 entry_SYSCALL_64_after_hwframe+0x76/0x7e

Record
UBUNTU-CVE-2024-53174
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVCLSA-2025-1744213128 No score

Fix of 55 CVEs

Record
CLSA-2025-1744213128
Updated
2026-11-02
OSVCLSA-2025-1744624441 No score

Fix of 56 CVEs

[ Ubuntu: 4.15.0-246.257 ]

Record
CLSA-2025-1744624441
Updated
2026-11-02
OSVCLSA-2025-1744713316 No score

Fix of 50 CVEs

Record
CLSA-2025-1744713316
Updated
2026-11-02
OSVCLSA-2025-1746479711 No score

kernel-uek: Fix of 225 CVEs

  • sctp: sysctl: auth_enable: avoid using current->nsproxy
  • sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy {CVE-2025-21640}
  • bpf: Use preempt_count() directly in bpf_send_signal_common()
  • Revert "sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy"
  • jfs: fix slab-out-of-bounds read in ea_get()
  • serial: 8250_dma: terminate correct DMA in tx_dma_flush()
  • Revert "sctp: sysctl: auth_enable: avoid using current->nsproxy"
  • net: usb: usbnet: restore usb%d name exception for local mac addresses
  • vlan: fix memory leak in vlan_newlink() {CVE-2022-49636}
  • rds: ib: Fix NULL ptr deref in rds_ib_cq_follow_affinity
  • LTS tag: v5.4.291
  • eeprom: digsy_mtc: Make GPIO lookup table match the device
  • slimbus: messaging: Free transaction ID in delayed interrupt scenario {CVE-2025-21914}
  • intel_th: pci: Add Panther Lake-P/U support
  • intel_th: pci: Add Panther Lake-H support
  • intel_th: pci: Add Arrow Lake support
  • Squashfs: check the inode number is not the invalid value of zero {CVE-2024-26982}
  • xhci: pci: Fix indentation in the PCI device ID definitions
  • usb: gadget: Check bmAttributes only if configuration is valid
  • usb: gadget: Fix setting self-powered state on suspend
  • usb: gadget: Set self-powered based on MaxPower and bmAttributes
  • usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality
  • usb: typec: ucsi: increase timeout for PPM reset operations
  • usb: atm: cxacru: fix a flaw in existing endpoint checks {CVE-2025-21916}
  • usb: renesas_usbhs: Flush the notify_hotplug_work {CVE-2025-21917}
  • usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader
  • usb: renesas_usbhs: Use devm_usb_get_phy()
  • usb: renesas_usbhs: Call clk_put()
  • Revert "drivers/card_reader/rtsx_usb: Restore interrupt based detection"
  • gpio: rcar: Fix missing of_node_put() call
  • net: ipv6: fix missing dst ref drop in ila lwtunnel
  • net: ipv6: fix dst ref loop in ila lwtunnel
  • net-timestamp: support TCP GSO case for a few missing flags
  • vlan: enforce underlying device type {CVE-2025-21920}
  • ppp: Fix KMSAN uninit-value warning with bpf {CVE-2025-21922}
  • be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink
  • drm/sched: Fix preprocessor guard
  • hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe()
  • llc: do not use skb_get() before dev_queue_xmit() {CVE-2025-21925}
  • hwmon: (ad7314) Validate leading zero bits and return error
  • hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table
  • hwmon: (pmbus) Initialise page count in pmbus_identify()
  • caif_virtio: fix wrong pointer check in cfv_probe() {CVE-2025-21904}
  • net: gso: fix ownership in __udp_gso_segment {CVE-2025-21926}
  • HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() {CVE-2025-21928}
  • HID: google: fix unused variable warning under !CONFIG_ACPI
  • wifi: iwlwifi: limit printed string from FW file {CVE-2025-21905}
  • mm/page_alloc: fix uninitialized variable
  • rapidio: fix an API misues when rio_add_net() fails {CVE-2025-21934}
  • rapidio: add check for rio_add_net() in rio_scan_alloc_net()
  • wifi: nl80211: reject cooked mode if it is set along with other flags {CVE-2025-21909}
  • wifi: cfg80211: regulatory: improve invalid hints checking {CVE-2025-21910}
  • x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63
  • x86/cpu: Validate CPUID leaf 0x2 EDX output
  • x86/cacheinfo: Validate CPUID leaf 0x2 EDX output
  • platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e
  • drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M
  • ALSA: hda/realtek: update ALC222 depop optimize
  • ALSA: hda: intel: Add Dell ALC3271 to power_save denylist
  • HID: appleir: Fix potential NULL dereference at raw event handle {CVE-2025-21948}
  • Revert "of: reserved-memory: Fix using wrong number of cells to get property 'alignment'"
  • drm/amdgpu: disable BAR resize on Dell G5 SE
  • drm/amdgpu: Check extended configuration space register when system uses large bar
  • drm/amdgpu: skip BAR resizing if the bios already…
Record
CLSA-2025-1746479711
Updated
2026-11-02
OSVCLSA-2025-1749480611 No score

kernel: Fix of 26 CVEs

  • rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow {CVE-2024-38577}
  • tcp: fix mptcp DSS corruption due to large pmtu xmit {CVE-2024-50083}
  • vsock: Keep the binding until socket destruction {CVE-2025-21756}
  • memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove {CVE-2025-22020}
  • drm/i915: Fix potential bit_17 double-free {CVE-2023-52930}
  • netfilter: nft_tunnel: fix geneve_opt type confusion addition {CVE-2025-22056}
  • mm: shmem: fix data-race in shmem_getattr() {CVE-2024-46828}
  • nvmet-auth: assign dh_key to NULL after kfree_sensitive {CVE-2024-50215}
  • net: explicitly clear the sk pointer, when pf->create fails {CVE-2024-50186}
  • net: wwan: fix global oob in wwan_rtnl_policy {CVE-2024-50128}
  • ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free {CVE-2024-49983}
  • vhost_vdpa: assign irq bypass producer token correctly {CVE-2024-47748}
  • wifi: rtw88: always wait for both firmware loading attempts {CVE-2024-47718}
  • sched: sch_cake: fix bulk flow accounting logic for host fairness {CVE-2024-46828}
  • fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF {CVE-2024-46786}
  • net: bridge: mcast: wait for previous gc cycles when removing port {CVE-2024-44934}
  • vhost/vsock: always initialize seqpacket_allow {CVE-2024-43873}
  • ext4: check dot and dotdot of dx_root before making dir indexed {CVE-2024-42305}
  • nfsd: make sure exp active before svc_export_show {CVE-2024-56558}
  • SUNRPC: make sure cache entry active before cache_show {CVE-2024-53174}
  • Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync {CVE-2024-53208}
  • wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one {CVE-2024-56663}
  • Bluetooth: fix use-after-free in device_for_each_child() {CVE-2024-53237}
  • hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails {CVE-2022-49029}
  • tracing: Free buffers when a used dynamic event is removed {CVE-2022-49006}
  • net: tun: Fix use-after-free in tun_detach() {CVE-2022-49014}
Record
CLSA-2025-1749480611
Updated
2026-11-02
OSVCLSA-2025-1757693980 No score

kernel: Fix of 40 CVEs

  • x86/kvm: Disable kvmclock on all CPUs on shutdown {CVE-2021-47110}
  • posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() {CVE-2025-38352}
  • cifs: fix double free race when mount fails in cifs_get_root() {CVE-2022-48919}
  • aio: mark AIO pseudo-fs noexec {CVE-2016-10044}
  • cifs: potential buffer overflow in handling symlinks {CVE-2022-49058}
  • NFSD: fix race between nfsd registration and exports_proc {CVE-2025-38232}
  • nfsd: register pernet ops last, unregister first {CVE-2025-38232}
  • do_change_type(): refuse to operate on unmounted/not ours mounts {CVE-2025-38498}
  • net: atm: fix /proc/net/atm/lec handling {CVE-2025-38180}
  • net: atm: add lec_mutex {CVE-2025-38180}
  • SUNRPC: make sure cache entry active before cache_show {CVE-2024-53174}
  • scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() {CVE-2025-38399}
  • scsi: target: Fix crash during SPEC_I_PT handling {CVE-2025-38399}
  • mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race {CVE-2025-38085}
  • drivers:md:fix a potential use-after-free bug {CVE-2022-50022}
  • ext4: avoid resizing to a partial cluster size {CVE-2022-50020}
  • HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() {CVE-2025-21928}
  • net/sched: Abort __tc_modify_qdisc if parent class does not exist {CVE-2025-38457}
  • misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() {CVE-2022-49788}
  • dlm: fix plock invalid read {CVE-2022-49407}
  • net: usb: smsc75xx: Limit packet length to skb->len {CVE-2023-53125}
  • scsi: libfc: Fix use after free in fc_exch_abts_resp() {CVE-2022-49114}
  • crypto: algif_hash - fix double free in hash_accept {CVE-2025-38079}
  • HID: core: Harden s32ton() against conversion to 0 bits {CVE-2025-38556}
  • HID: core: ensure the allocated report buffer can contain the reserved report ID {CVE-2025-38495}
  • ext4: Fix possible corruption when moving a directory {CVE-2023-53137}
  • ceph: avoid putting the realm twice when decoding snaps fails {CVE-2022-49770}
  • vsock/vmci: Clear the vmci transport packet properly when initializing it {CVE-2025-38403}
  • HID: core: do not bypass hid_hw_raw_request {CVE-2025-38494}
  • sch_hfsc: make hfsc_qlen_notify() idempotent {CVE-2025-38177}
  • ext4: check dot and dotdot of dx_root before making dir indexed {CVE-2024-42305}
  • ALSA: bcd2000: Fix a UAF bug on the error path of probing {CVE-2022-50229}
  • dm ioctl: prevent potential spectre v1 gadget {CVE-2022-49122}
  • net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too {CVE-2025-37823}
  • md-raid10: fix KASAN warning {CVE-2022-50211}
  • scsi: lpfc: Use memcpy() for BIOS version {CVE-2025-38332}
  • ACPICA: Refuse to evaluate a method if arguments are missing {CVE-2025-38386}
  • media: cxusb: no longer judge rbuf when the write fails {CVE-2025-38229}
  • ipc: fix to protect IPCS lookups using RCU {CVE-2025-38212}
  • ext4: fix off-by-one error in do_split {CVE-2025-23150}
  • perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init {CVE-2025-37878}
  • sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() {CVE-2025-38000}
  • i40e: fix MMIO write access to an invalid page in i40e_clear_hw {CVE-2025-38200}
Record
CLSA-2025-1757693980
Updated
2026-11-02
OSVCLSA-2025-1757698145 No score

kernel: Fix of 42 CVEs

  • x86/kvm: Disable kvmclock on all CPUs on shutdown {CVE-2021-47110}
  • posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() {CVE-2025-38352}
  • cifs: fix double free race when mount fails in cifs_get_root() {CVE-2022-48919}
  • aio: mark AIO pseudo-fs noexec {CVE-2016-10044}
  • cifs: potential buffer overflow in handling symlinks {CVE-2022-49058}
  • NFSD: fix race between nfsd registration and exports_proc {CVE-2025-38232}
  • nfsd: register pernet ops last, unregister first {CVE-2025-38232}
  • net: atm: fix use after free in lec_send() {CVE-2025-22004}
  • net: atlantic: fix aq_vec index out of range error {CVE-2022-50066}
  • do_change_type(): refuse to operate on unmounted/not ours mounts {CVE-2025-38498}
  • net: atm: fix /proc/net/atm/lec handling {CVE-2025-38180}
  • net: atm: add lec_mutex {CVE-2025-38180}
  • SUNRPC: make sure cache entry active before cache_show {CVE-2024-53174}
  • scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() {CVE-2025-38399}
  • scsi: target: Fix crash during SPEC_I_PT handling {CVE-2025-38399}
  • mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race {CVE-2025-38085}
  • drivers:md:fix a potential use-after-free bug {CVE-2022-50022}
  • ext4: avoid resizing to a partial cluster size {CVE-2022-50020}
  • HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() {CVE-2025-21928}
  • net/sched: Abort __tc_modify_qdisc if parent class does not exist {CVE-2025-38457}
  • misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() {CVE-2022-49788}
  • dlm: fix plock invalid read {CVE-2022-49407}
  • net: usb: smsc75xx: Limit packet length to skb->len {CVE-2023-53125}
  • scsi: libfc: Fix use after free in fc_exch_abts_resp() {CVE-2022-49114}
  • crypto: algif_hash - fix double free in hash_accept {CVE-2025-38079}
  • HID: core: Harden s32ton() against conversion to 0 bits {CVE-2025-38556}
  • HID: core: ensure the allocated report buffer can contain the reserved report ID {CVE-2025-38495}
  • ext4: Fix possible corruption when moving a directory {CVE-2023-53137}
  • ceph: avoid putting the realm twice when decoding snaps fails {CVE-2022-49770}
  • vsock/vmci: Clear the vmci transport packet properly when initializing it {CVE-2025-38403}
  • HID: core: do not bypass hid_hw_raw_request {CVE-2025-38494}
  • sch_hfsc: make hfsc_qlen_notify() idempotent {CVE-2025-38177}
  • ext4: check dot and dotdot of dx_root before making dir indexed {CVE-2024-42305}
  • ALSA: bcd2000: Fix a UAF bug on the error path of probing {CVE-2022-50229}
  • dm ioctl: prevent potential spectre v1 gadget {CVE-2022-49122}
  • net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too {CVE-2025-37823}
  • md-raid10: fix KASAN warning {CVE-2022-50211}
  • scsi: lpfc: Use memcpy() for BIOS version {CVE-2025-38332}
  • ACPICA: Refuse to evaluate a method if arguments are missing {CVE-2025-38386}
  • media: cxusb: no longer judge rbuf when the write fails {CVE-2025-38229}
  • ipc: fix to protect IPCS lookups using RCU {CVE-2025-38212}
  • ext4: fix off-by-one error in do_split {CVE-2025-23150}
  • perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init {CVE-2025-37878}
  • sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() {CVE-2025-38000}
  • i40e: fix MMIO write access to an invalid page in i40e_clear_hw {CVE-2025-38200}
Record
CLSA-2025-1757698145
Updated
2026-11-02
OSVCLSA-2025-1757967705 No score

kernel: Fix of 42 CVEs

  • x86/kvm: Disable kvmclock on all CPUs on shutdown {CVE-2021-47110}
  • posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() {CVE-2025-38352}
  • cifs: fix double free race when mount fails in cifs_get_root() {CVE-2022-48919}
  • aio: mark AIO pseudo-fs noexec {CVE-2016-10044}
  • cifs: potential buffer overflow in handling symlinks {CVE-2022-49058}
  • NFSD: fix race between nfsd registration and exports_proc {CVE-2025-38232}
  • nfsd: register pernet ops last, unregister first {CVE-2025-38232}
  • net: atm: fix use after free in lec_send() {CVE-2025-22004}
  • net: atlantic: fix aq_vec index out of range error {CVE-2022-50066}
  • do_change_type(): refuse to operate on unmounted/not ours mounts {CVE-2025-38498}
  • net: atm: fix /proc/net/atm/lec handling {CVE-2025-38180}
  • net: atm: add lec_mutex {CVE-2025-38180}
  • SUNRPC: make sure cache entry active before cache_show {CVE-2024-53174}
  • scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() {CVE-2025-38399}
  • scsi: target: Fix crash during SPEC_I_PT handling {CVE-2025-38399}
  • mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race {CVE-2025-38085}
  • drivers:md:fix a potential use-after-free bug {CVE-2022-50022}
  • ext4: avoid resizing to a partial cluster size {CVE-2022-50020}
  • HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() {CVE-2025-21928}
  • net/sched: Abort __tc_modify_qdisc if parent class does not exist {CVE-2025-38457}
  • misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() {CVE-2022-49788}
  • dlm: fix plock invalid read {CVE-2022-49407}
  • net: usb: smsc75xx: Limit packet length to skb->len {CVE-2023-53125}
  • scsi: libfc: Fix use after free in fc_exch_abts_resp() {CVE-2022-49114}
  • crypto: algif_hash - fix double free in hash_accept {CVE-2025-38079}
  • HID: core: Harden s32ton() against conversion to 0 bits {CVE-2025-38556}
  • HID: core: ensure the allocated report buffer can contain the reserved report ID {CVE-2025-38495}
  • ext4: Fix possible corruption when moving a directory {CVE-2023-53137}
  • ceph: avoid putting the realm twice when decoding snaps fails {CVE-2022-49770}
  • vsock/vmci: Clear the vmci transport packet properly when initializing it {CVE-2025-38403}
  • HID: core: do not bypass hid_hw_raw_request {CVE-2025-38494}
  • sch_hfsc: make hfsc_qlen_notify() idempotent {CVE-2025-38177}
  • ext4: check dot and dotdot of dx_root before making dir indexed {CVE-2024-42305}
  • ALSA: bcd2000: Fix a UAF bug on the error path of probing {CVE-2022-50229}
  • dm ioctl: prevent potential spectre v1 gadget {CVE-2022-49122}
  • net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too {CVE-2025-37823}
  • md-raid10: fix KASAN warning {CVE-2022-50211}
  • scsi: lpfc: Use memcpy() for BIOS version {CVE-2025-38332}
  • ACPICA: Refuse to evaluate a method if arguments are missing {CVE-2025-38386}
  • media: cxusb: no longer judge rbuf when the write fails {CVE-2025-38229}
  • ipc: fix to protect IPCS lookups using RCU {CVE-2025-38212}
  • ext4: fix off-by-one error in do_split {CVE-2025-23150}
  • perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init {CVE-2025-37878}
  • sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() {CVE-2025-38000}
  • i40e: fix MMIO write access to an invalid page in i40e_clear_hw {CVE-2025-38200}
Record
CLSA-2025-1757967705
Updated
2026-11-02
OSVCLSA-2026-1789141176 No score

kernel: Fix of 131 CVEs

  • net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-63829}
  • USB: legousbtower: fix use-after-free on disconnect race {CVE-2026-64340}
  • udf: validate sparing table length as an entry count, not a byte count {CVE-2026-64322}
  • ipv4: igmp: remove multicast group from hash table on device destruction {CVE-2026-64423}
  • USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343}
  • USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}
  • net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers {CVE-2026-74700}
  • ipvs: clear IPv4 options after rebasing tunnel ICMP errors {CVE-2026-74669}
  • netfilter: ebt_nflog: pin the NFLOG backend {CVE-2026-74660}
  • ipv4: fix use-after-free in fib_nhc_update_mtu() {CVE-2026-74656}
  • ALSA: usx2y: bound the hwdep mmap fault offset {CVE-2026-74641}
  • ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}
  • tipc: read le->link under the node lock in tipc_node_link_down() {CVE-2026-74609}
  • ip6_tunnel: clear skb2->cb[] in ip6ip6_err() {CVE-2026-74597}
  • bpf, sockmap: Fix sk_redir use-after-free in send verdict {CVE-2026-74589}
  • sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
  • netfilter: nf_tables: make nft_object rhltable per table {CVE-2026-74565}
  • scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write {CVE-2026-74470}
  • nfs: use nfsi->rwsem to protect traversal of the file lock list {CVE-2026-72472}
  • geneve: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-68142}
  • sctp: fix use-after-free of cached ASCONF chunk {CVE-2026-74587}
  • net/packet: reset the MAC header on the packet-socket transmit path {CVE-2026-74667}
  • ALSA: usb-audio: fix OOB write on Type II inbound URBs {CVE-2026-74682}
  • sctp: clear control chunk transport if it is being removed {CVE-2026-74688}
  • udp: fix potential use-after-free in tunnel segmentation {CVE-2026-74705}
  • bpf: Preserve pointer state for commuted arithmetic {CVE-2026-74720}
  • RDMA/siw: bound Read Response placement to the RREAD length {CVE-2026-64268}
  • libceph: Avoid using invalid osd indices from primary_temp {CVE-2026-80558}
  • drm/i915: Fix potential UAF in TTM object purge {CVE-2026-63884}
  • wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request {CVE-2026-68363}
  • ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() {CVE-2026-68160}
  • libceph: Reject monmaps advertising zero monitors {CVE-2026-68155}
  • sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}
  • Bluetooth: hci_sync: Protect UUID list traversal {CVE-2026-68189}
  • net: slip: serialize receive against buffer reallocation {CVE-2026-68143}
  • libceph: remove debugfs files before client teardown {CVE-2026-68153}
  • media: rtl2832: fix use-after-free in rtl2832_remove() {CVE-2026-68214}
  • sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}
  • drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async {CVE-2026-64219}
  • pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}
  • libceph: Fix multiplication overflow in decode_new_up_state_weight() {CVE-2026-68158}
  • ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() {CVE-2026-74499}
  • fbdev: Fix invalid page access after closing deferred I/O devices {CVE-2023-52731}
  • Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync {CVE-2023-53252}
  • net_sched: red: fix a race in __red_change() {CVE-2025-38108}
  • iio: event: Fix event FIFO reset race {CVE-2026-64496}
  • netfilter: ctnetlink: ensure safe access to master conntrack {CVE-2026-43116}
  • NFSv4: include MAY_WRITE in open permission mask for O_TRUNC {CVE-2026-64298}
  • openvswitch: fix GSO userspace truncation underflow {CVE-2026-68123}
  • media: cx23885: add ioremap return check and cleanup {CVE-2026-68226}
  • tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev {CVE-2026-68176} -…
Record
CLSA-2026-1789141176
Updated
2026-11-02
OSVCLSA-2026-1792750763 No score

kernel: Fix of 91 CVEs

  • net: skbuff: propagate shared-frag marker in skb_zerocopy()
  • net: bridge: stop fast-leave after deleting a port group {CVE-2026-74480}
  • net: ipv6: clear suppressed fib6 rule result {CVE-2026-74581}
  • net/sched: fix pedit partial COW leading to page cache corruption {CVE-2026-46331}
  • ipvs: do not propagate one-packet flag to synced conns {CVE-2026-80714}
  • net: skbuff: propagate shared-frag marker through frag-transfer helpers {CVE-2026-43503}
  • smb: client: harden POSIX SID length parsing {CVE-2026-64380}
  • RDMA: Fix use-after-free in rxe_queue_cleanup {CVE-2021-47616}
  • nfsd: validate symlink target length in NFSv4 CREATE {CVE-2026-89699}
  • sctp: fix addr_wq_timer race in sctp_free_addr_wq() {CVE-2026-72383}
  • isofs: fix out-of-bounds page array access on empty zisofs block {CVE-2026-89778}
  • configfs: unhash the dentry before dropping the item in rmdir {CVE-2026-97949}
  • netfilter: ipset: fix race between dump and ip_set_list resize {CVE-2026-64189}
  • netfilter: conntrack_irc: fix possible out-of-bounds read {CVE-2026-53268}
  • ipvs: clear the svc scheduler ptr early on edit {CVE-2026-53270}
  • netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920}
  • media: cx23885: cancel NetUP CI work before teardown {CVE-2026-89893}
  • dmaengine: Fix possible use after free {CVE-2026-72476}
  • net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring {CVE-2026-64047}
  • tipc: prevent snt_unacked underflow on CONN_ACK {CVE-2026-74282}
  • xfrm: hold net_device reference under RCU in bundle creation {CVE-2026-98364}
  • xfrm: Check for underflow in xfrm_state_mtu {CVE-2026-64009}
  • net: mpls: clear inner_protocol when the last label is popped {CVE-2026-97612}
  • net: guard timestamp cmsgs to real error queue skbs {CVE-2026-53223}
  • thunderbolt: Bound root directory content to block size {CVE-2026-53149}
  • SUNRPC: always drain cache_cleaner before destroying a cache_detail {CVE-2026-89548}
  • SUNRPC: harden gss_krb5_unwrap_v2 against short tokens {CVE-2026-89542}
  • SUNRPC: svcauth_gss: enforce krb5 token minimum length {CVE-2026-89550}
  • SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 {CVE-2026-89537}
  • SUNRPC: make sure cache entry active before cache_show {CVE-2024-53174}
  • ipv6: fix fib6 walker UAF on seq stop {CVE-2026-97940}
  • ipv6: sr: restore network header before routing and forwarding {CVE-2026-98096}
  • ipv6: sit: reload inner IPv6 header after GSO offloads {CVE-2026-53228}
  • ipv6: mcast: Fix use-after-free when processing MLD queries {CVE-2026-53275}
  • ipv6: exthdrs: refresh nh after handling HAO option {CVE-2026-63922}
  • ip6_gre: Use cached t->net in ip6erspan_changelink(). {CVE-2026-46120}
  • ipv6: fix possible UAF in icmpv6_rcv() {CVE-2026-53006}
  • ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() {CVE-2026-64002}
  • Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count {CVE-2026-64276}
  • ACPICA: Add validation for node in acpi_ns_build_normalized_path() {CVE-2026-97448}
  • scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() {CVE-2026-46149}
  • usb: xusbatm: don't rely on id table pointer arithmetic {CVE-2026-97539}
  • USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() {CVE-2026-53195}
  • mrp: introduce active flags to prevent UAF when applicant uninit {CVE-2022-50697}
  • HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature {CVE-2026-89729}
  • net/sched: defer qdisc freeing after failed creation {CVE-2026-98017}
  • Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp {CVE-2026-53071}
  • Bluetooth: L2CAP: Fix invalid access if ECRED Reconfigure fails {CVE-2026-53071}
  • scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation {CVE-2026-89856}
  • drm: fix race between partial drm_dev_register() failure and ioctl {CVE-2026-89823}
  • drm/amd/pm: bound pp_dpm_set_pp_table() memcpy {CVE-2026-97427}
  • dm log: fix out-of-bounds write due to region_count overflow {CVE-2026-53059} -…
Record
CLSA-2026-1792750763
Updated
2026-11-02
OSVSUSE-SU-2025:0117-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
  • CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
  • CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
  • CVE-2024-36915: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies (bsc#1225758).
  • CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
  • CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
  • CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
  • CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
  • CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
  • CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
  • CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
  • CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
  • CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
  • CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467).
  • CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
  • CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
  • CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558).
  • CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
  • CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
  • CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
  • CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
  • CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
  • CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
  • CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
  • CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
  • CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
  • CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
  • CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
  • CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
  • CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
  • CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
  • CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
  • CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
  • CVE-2024-53161: EDAC/bluefield: Fix potential integer overflow (bsc#1234856).
  • CVE-2024-53179: smb: client: fix use-after-free of signing key (bsc#1234921).
  • CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235004).
  • CVE-2024-53216: nfsd: fix UAF when access ex_uuid or ex_stats (bsc#1235003).
  • CVE-2024-53222: zram: fix NULL pointer in comp_algorithm_show() (bsc#1234974).
  • CVE-2024-53234: erofs: handle NONHEAD !delta[1] lclusters gracefully (bsc#1235045).
  • CVE-2024-53240: xen/netfront: fix crash when removing device (bsc#1234281).
  • CVE-2024-53241: x86/xen: use new hypercall functions instead of hypercall page (bsc#1234282).
  • CVE-2024-56549: cachefiles: Fix NULL pointer dereference in object->file (bsc#1234912).
  • CVE-2024-56566: mm/slub: Avoid list corruption when removing a slab from the full list (bsc#1235033).
  • CVE-2024-56582: btrfs: fix use-after-free in…
Record
SUSE-SU-2025:0117-1
Updated
2026-11-02
OSVSUSE-SU-2025:0153-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
  • CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
  • CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
  • CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
  • CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
  • CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
  • CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
  • CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
  • CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
  • CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
  • CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
  • CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
  • CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
  • CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
  • CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
  • CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
  • CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
  • CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
  • CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
  • CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
  • CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
  • CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
  • CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
  • CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
  • CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
  • CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
  • CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
  • CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
  • CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
  • CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
  • CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
  • CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
  • CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
  • CVE-2024-53161: EDAC/bluefield: Fix potential integer overflow (bsc#1234856).
  • CVE-2024-53179: smb: client: fix use-after-free of signing key (bsc#1234921).
  • CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235004).
  • CVE-2024-53216: nfsd: fix UAF when access ex_uuid or ex_stats (bsc#1235003).
  • CVE-2024-53222: zram: fix NULL pointer in comp_algorithm_show() (bsc#1234974).
  • CVE-2024-53234: erofs: handle NONHEAD !delta[1] lclusters gracefully (bsc#1235045).
  • CVE-2024-53240: xen/netfront: fix crash when removing device (bsc#1234281).
  • CVE-2024-53241: x86/xen: use new hypercall functions instead of hypercall page (XSA-466 bsc#1234282).
  • CVE-2024-56549: cachefiles: Fix NULL pointer dereference in object->file (bsc#1234912).
  • CVE-2024-56566: mm/slub: Avoid list corruption when removing a slab from the full list (bsc#1235033).
  • CVE-2024-56582: btrfs: fix…
Record
SUSE-SU-2025:0153-1
Updated
2026-11-02
OSVSUSE-SU-2025:0154-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
  • CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
  • CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
  • CVE-2024-36915: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies (bsc#1225758).
  • CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
  • CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
  • CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
  • CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
  • CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
  • CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
  • CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
  • CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
  • CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
  • CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
  • CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
  • CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233468).
  • CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
  • CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
  • CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
  • CVE-2024-53095: smb: client: Fix use-after-free of network namespace (bsc#1233642).
  • CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
  • CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
  • CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
  • CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
  • CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
  • CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
  • CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
  • CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
  • CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
  • CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
  • CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
  • CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
  • CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
  • CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
  • CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
  • CVE-2024-53161: EDAC/bluefield: Fix potential integer overflow (bsc#1234856).
  • CVE-2024-53179: smb: client: fix use-after-free of signing key (bsc#1234921).
  • CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235004).
  • CVE-2024-53216: nfsd: fix UAF when access ex_uuid or ex_stats (bsc#1235003).
  • CVE-2024-53222: zram: fix NULL pointer in comp_algorithm_show() (bsc#1234974).
  • CVE-2024-53234: erofs: handle NONHEAD !delta[1] lclusters gracefully (bsc#1235045).
  • CVE-2024-53240: xen/netfront: fix crash when removing device (XSA-465 bsc#1234281).
  • CVE-2024-53241: x86/xen: use new hypercall functions instead of hypercall page (XSA-466 bsc#1234282).
  • CVE-2024-56549: cachefiles: Fix…
Record
SUSE-SU-2025:0154-1
Updated
2026-11-02
OSVSUSE-SU-2025:0289-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52489: mm/sparsemem: fix race in accessing memory_section->usage (bsc#1221326).
  • CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355).
  • CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
  • CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
  • CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
  • CVE-2024-36915: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies (bsc#1225758).
  • CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
  • CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
  • CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
  • CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
  • CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).
  • CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).
  • CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
  • CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
  • CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
  • CVE-2024-49944: sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (bsc#1232166).
  • CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
  • CVE-2024-49952: netfilter: nf_tables: prevent nf_skb_duplicated corruption (bsc#1232157).
  • CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
  • CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
  • CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
  • CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
  • CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
  • CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
  • CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
  • CVE-2024-50252: mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (bsc#1233201).
  • CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
  • CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
  • CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
  • CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
  • CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233468).
  • CVE-2024-50296: net: hns3: fix kernel crash when uninstalling driver (bsc#1233485).
  • CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
  • CVE-2024-53043: mctp i2c: handle NULL header address (bsc#1233523).
  • CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
  • CVE-2024-53051: drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability (bsc#1233547).
  • CVE-2024-53055: wifi: iwlwifi: mvm: fix 6 GHz scan construction (bsc#1233550).
  • CVE-2024-53056: drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() (bsc#1233568).
  • CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
  • CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
  • CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
  • CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
  • CVE-2024-53105: mm: page_alloc: move mlocked flag…
Record
SUSE-SU-2025:0289-1
Updated
2026-11-02
OSVSUSE-SU-2025:0556-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-57897: drm/amdkfd: Correct the migration DMA map direction (bsc#1235969).
  • CVE-2024-57893: ALSA: seq: oss: Fix races at processing SysEx messages (bsc#1235920).
  • CVE-2024-57876: drm/dp_mst: Fix resetting msg rx state after topology removal (bsc#1235806).
  • CVE-2024-57849: s390/cpum_sf: Handle CPU hotplug remove during sampling (bsc#1235814).
  • CVE-2024-57798: drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() (bsc#1235818).
  • CVE-2024-57793: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors (bsc#1235768).
  • CVE-2024-57792: power: supply: gpio-charger: Fix set charge current limits (bsc#1235764).
  • CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).
  • CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).
  • CVE-2024-56747: scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (bsc#1234934).
  • CVE-2024-56704: 9p/xen: fix release of IRQ (bsc#1235584).
  • CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235249).
  • CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
  • CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430).
  • CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235451).
  • CVE-2024-56642: tipc: Fix use-after-free of kernel socket in cleanup_bearer() (bsc#1235433).
  • CVE-2024-56631: scsi: sg: Fix slab-use-after-free read in sg_release() (bsc#1235480).
  • CVE-2024-56623: scsi: qla2xxx: Fix use after free on unload (bsc#1235466).
  • CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521).
  • CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
  • CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
  • CVE-2024-56588: scsi: hisi_sas: Create all dump files during debugfs initialization (bsc#1235123).
  • CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).
  • CVE-2024-53209: bnxt_en: Fix receive ring space parameters when XDP is active (bsc#1235002).
  • CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
  • CVE-2024-53166: block, bfq: fix bfqq uaf in bfq_limit_depth() (bsc#1234884).
  • CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
  • CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1234025).
  • CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
  • CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
  • CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
  • CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
  • CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
  • CVE-2024-36898: gpiolib: cdev: fix uninitialised kfifo (bsc#1225736).

The following non-security bugs were fixed:

  • NFS: Adjust the amount of readahead performed by NFS readdir (bsc#1231847).
  • NFS: Do not flush the readdir cache in nfs_dentry_iput() (bsc#1231847).
  • NFS: Improve heuristic for readdirplus (bsc#1231847).
  • NFS: Trigger the 'ls -l' readdir heuristic sooner (bsc#1231847).
  • VFS: use system_unbound_wq for delayed_mntput (bsc#1234683).
  • ceph: improve error handling and short/overflow-read logic in __ceph_sync_read() (bsc#1228592).
  • ibmvnic: Free any outstanding tx skbs during scrq reset (bsc#1226980).
  • netfilter: nf_tables: validate family when identifying table via handle (bsc#1233778 ZDI-24-1454).
  • powerpc/pseries/vas: Add close() callback in vas_vm_ops struct…
Record
SUSE-SU-2025:0556-1
Updated
2026-11-02
OSVSUSE-SU-2025:0577-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-36898: gpiolib: cdev: fix uninitialised kfifo (bsc#1225736).
  • CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
  • CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
  • CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
  • CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
  • CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
  • CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1234025).
  • CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
  • CVE-2024-53166: block, bfq: fix bfqq uaf in bfq_limit_depth() (bsc#1234884).
  • CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
  • CVE-2024-53209: bnxt_en: Fix receive ring space parameters when XDP is active (bsc#1235002).
  • CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).
  • CVE-2024-56588: scsi: hisi_sas: Create all dump files during debugfs initialization (bsc#1235123).
  • CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
  • CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
  • CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521).
  • CVE-2024-56623: scsi: qla2xxx: Fix use after free on unload (bsc#1235466).
  • CVE-2024-56631: scsi: sg: Fix slab-use-after-free read in sg_release() (bsc#1235480).
  • CVE-2024-56642: tipc: Fix use-after-free of kernel socket in cleanup_bearer() (bsc#1235433).
  • CVE-2024-56645: can: j1939: j1939_session_new(): fix skb reference counting (bsc#1235134).
  • CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235451).
  • CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430).
  • CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
  • CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235249).
  • CVE-2024-56704: 9p/xen: fix release of IRQ (bsc#1235584).
  • CVE-2024-56747: scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (bsc#1234934).
  • CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).
  • CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).
  • CVE-2024-57792: power: supply: gpio-charger: Fix set charge current limits (bsc#1235764).
  • CVE-2024-57793: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors (bsc#1235768).
  • CVE-2024-57798: drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() (bsc#1235818).
  • CVE-2024-57849: s390/cpum_sf: Handle CPU hotplug remove during sampling (bsc#1235814).
  • CVE-2024-57876: drm/dp_mst: Fix resetting msg rx state after topology removal (bsc#1235806).
  • CVE-2024-57893: ALSA: seq: oss: Fix races at processing SysEx messages (bsc#1235920).
  • CVE-2024-57897: drm/amdkfd: Correct the migration DMA map direction (bsc#1235969).

The following non-security bugs were fixed:

  • NFS: Adjust the amount of readahead performed by NFS readdir (bsc#1231847).
  • NFS: Do not flush the readdir cache in nfs_dentry_iput() (bsc#1231847).
  • NFS: Improve heuristic for readdirplus (bsc#1231847).
  • NFS: Trigger the 'ls -l' readdir heuristic sooner (bsc#1231847).
  • VFS: use system_unbound_wq for delayed_mntput (bsc#1234683).
  • ceph: improve error handling and short/overflow-read logic in __ceph_sync_read() (bsc#1228592).
  • ibmvnic: Free any outstanding tx skbs during scrq reset (bsc#1226980).
  • netfilter: nf_tables: validate family when identifying table via handle…
Record
SUSE-SU-2025:0577-1
Updated
2026-11-02
OSVSUSE-SU-2025:0577-2 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-36898: gpiolib: cdev: fix uninitialised kfifo (bsc#1225736).
  • CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
  • CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
  • CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
  • CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
  • CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
  • CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1234025).
  • CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
  • CVE-2024-53166: block, bfq: fix bfqq uaf in bfq_limit_depth() (bsc#1234884).
  • CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
  • CVE-2024-53209: bnxt_en: Fix receive ring space parameters when XDP is active (bsc#1235002).
  • CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).
  • CVE-2024-56588: scsi: hisi_sas: Create all dump files during debugfs initialization (bsc#1235123).
  • CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
  • CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
  • CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521).
  • CVE-2024-56623: scsi: qla2xxx: Fix use after free on unload (bsc#1235466).
  • CVE-2024-56631: scsi: sg: Fix slab-use-after-free read in sg_release() (bsc#1235480).
  • CVE-2024-56642: tipc: Fix use-after-free of kernel socket in cleanup_bearer() (bsc#1235433).
  • CVE-2024-56645: can: j1939: j1939_session_new(): fix skb reference counting (bsc#1235134).
  • CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235451).
  • CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430).
  • CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
  • CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235249).
  • CVE-2024-56704: 9p/xen: fix release of IRQ (bsc#1235584).
  • CVE-2024-56747: scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (bsc#1234934).
  • CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).
  • CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).
  • CVE-2024-57792: power: supply: gpio-charger: Fix set charge current limits (bsc#1235764).
  • CVE-2024-57793: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors (bsc#1235768).
  • CVE-2024-57798: drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() (bsc#1235818).
  • CVE-2024-57849: s390/cpum_sf: Handle CPU hotplug remove during sampling (bsc#1235814).
  • CVE-2024-57876: drm/dp_mst: Fix resetting msg rx state after topology removal (bsc#1235806).
  • CVE-2024-57893: ALSA: seq: oss: Fix races at processing SysEx messages (bsc#1235920).
  • CVE-2024-57897: drm/amdkfd: Correct the migration DMA map direction (bsc#1235969).

The following non-security bugs were fixed:

  • NFS: Adjust the amount of readahead performed by NFS readdir (bsc#1231847).
  • NFS: Do not flush the readdir cache in nfs_dentry_iput() (bsc#1231847).
  • NFS: Improve heuristic for readdirplus (bsc#1231847).
  • NFS: Trigger the 'ls -l' readdir heuristic sooner (bsc#1231847).
  • VFS: use system_unbound_wq for delayed_mntput (bsc#1234683).
  • ceph: improve error handling and short/overflow-read logic in __ceph_sync_read() (bsc#1228592).
  • ibmvnic: Free any outstanding tx skbs during scrq reset (bsc#1226980).
  • netfilter: nf_tables: validate family when identifying table via handle…
Record
SUSE-SU-2025:0577-2
Updated
2026-11-02
OSVSUSE-SU-2025:20165-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
  • CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
  • CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
  • CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
  • CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
  • CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
  • CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
  • CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
  • CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
  • CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
  • CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
  • CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
  • CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
  • CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
  • CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
  • CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
  • CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
  • CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
  • CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
  • CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
  • CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
  • CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
  • CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
  • CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
  • CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
  • CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
  • CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
  • CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
  • CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
  • CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
  • CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
  • CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
  • CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
  • CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
  • CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
  • CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
  • CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
  • CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
  • CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
  • CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
  • CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
  • CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
  • CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
  • CVE-2024-53161:…
Record
SUSE-SU-2025:20165-1
Updated
2026-11-02
OSVSUSE-SU-2025:20166-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
  • CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
  • CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
  • CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
  • CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
  • CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
  • CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
  • CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
  • CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
  • CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
  • CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
  • CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
  • CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
  • CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
  • CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
  • CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
  • CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
  • CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
  • CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
  • CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
  • CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
  • CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
  • CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
  • CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
  • CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
  • CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
  • CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
  • CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
  • CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
  • CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
  • CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
  • CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
  • CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
  • CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
  • CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
  • CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
  • CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
  • CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
  • CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
  • CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
  • CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
  • CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
  • CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
  • CVE-2024-53161:…
Record
SUSE-SU-2025:20166-1
Updated
2026-11-02
OSVSUSE-SU-2025:20248-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
  • CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
  • CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
  • CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
  • CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
  • CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
  • CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
  • CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
  • CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
  • CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
  • CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
  • CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
  • CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
  • CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
  • CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
  • CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
  • CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
  • CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
  • CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
  • CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
  • CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
  • CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
  • CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
  • CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
  • CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
  • CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
  • CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
  • CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
  • CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
  • CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
  • CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
  • CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
  • CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
  • CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
  • CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
  • CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
  • CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
  • CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
  • CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
  • CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
  • CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
  • CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
  • CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
  • CVE-2024-53161:…
Record
SUSE-SU-2025:20248-1
Updated
2026-11-02
OSVSUSE-SU-2025:20249-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
  • CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
  • CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
  • CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
  • CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
  • CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
  • CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
  • CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
  • CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
  • CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
  • CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
  • CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
  • CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
  • CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
  • CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
  • CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
  • CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
  • CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
  • CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
  • CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
  • CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
  • CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
  • CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
  • CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
  • CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
  • CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
  • CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
  • CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
  • CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
  • CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
  • CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
  • CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
  • CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
  • CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
  • CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
  • CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
  • CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
  • CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
  • CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
  • CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
  • CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
  • CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
  • CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
  • CVE-2024-53161:…
Record
SUSE-SU-2025:20249-1
Updated
2026-11-02
OSVUSN-7310-1 No score

linux-oem-6.11 vulnerabilities

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • SuperH RISC architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Drivers core;
  • ATA over ethernet (AOE) driver;
  • RAM backed block device driver;
  • Network block device driver;
  • Ublk userspace block driver;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • TPM device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • DAX dirext access to differentiated memory framework;
  • Buffer Sharing and Synchronization framework;
  • EDAC drivers;
  • FireWire subsystem;
  • ARM SCMI message protocol;
  • ARM SCPI message protocol;
  • EFI core;
  • Qualcomm firmware drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • I2C subsystem;
  • I3C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • MMC subsystem;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NTB driver;
  • Virtio pmem driver;
  • NVME drivers;
  • Parport drivers;
  • PCI subsystem;
  • Alibaba DDR Sub-System Driveway PMU driver;
  • PHY drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • i.MX PM domains;
  • Powercap sysfs driver;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • StarFive reset controller drivers;
  • Real Time Clock drivers;
  • SCSI subsystem;
  • SuperH / SH-Mobile drivers;
  • QCOM SoC drivers;
  • Xilinx SoC drivers;
  • SPI subsystem;
  • Direct Digital Synthesis drivers;
  • Media staging drivers;
  • TCM subsystem;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • USB Device Class drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • USB Type-C support driver;
  • USB Type-C Port Controller Manager driver;
  • TI TPS6598x USB Power Delivery controller driver;
  • USB Type-C Connector System Software Interface driver;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Virtio drivers;
  • Xen hypervisor drivers;
  • AFS file system;
  • BTRFS file system;
  • File systems infrastructure;
  • Ceph distributed file system;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • JFS file system;
  • Network file systems library;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • File system notification infrastructure;
  • NTFS3 file system;
  • Proc file system;
  • SMB network file system;
  • UBI file system;
  • BPF subsystem;
  • Network file system (NFS) superblock;
  • Virtio network driver;
  • Bluetooth subsystem;
  • Network traffic control;
  • Network sockets;
  • TCP network protocol;
  • Tracing infrastructure;
  • User-space API (UAPI);
  • Kernel init infrastructure; -…
Record
USN-7310-1
Updated
2026-11-03
OSVUSN-7387-1 No score

linux, linux-aws, linux-azure, linux-gcp, linux-gke, linux-gkeop, linux-ibm, linux-intel-iotg, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15, linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • SuperH RISC architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • Drivers core;
  • RAM backed block device driver;
  • Virtio block driver;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • DMA engine subsystem;
  • EDAC drivers;
  • ARM SCPI message protocol;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • I3C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • NVME drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Real Time Clock drivers;
  • SCSI subsystem;
  • SuperH / SH-Mobile drivers;
  • i.MX SoC drivers;
  • QCOM SoC drivers;
  • SPI subsystem;
  • Media staging drivers;
  • UFS subsystem;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • VFIO drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • F2FS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • Overlay file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • UBI file system;
  • Timer subsystem;
  • VLANs driver;
  • LAPB network protocol;
  • Kernel init infrastructure;
  • BPF subsystem;
  • Kernel CPU control infrastructure;
  • DMA mapping infrastructure;
  • KCSAN framework;
  • Tracing infrastructure;
  • Memory management;
  • 9P file system network protocol;
  • Bluetooth subsystem;
  • CAN network layer;
  • Networking core;
  • DCCP (Datagram Congestion Control Protocol);
  • Distributed Switch Architecture;
  • HSR network protocol;
  • IEEE802154.4 network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • IEEE 802.15.4 subsystem;
  • Multipath TCP;
  • Netfilter;
  • Netlink;
  • NET/ROM layer;
  • Packet sockets;
  • Network traffic control;
  • SCTP protocol;
  • SMC sockets;
  • Sun RPC protocol;
  • TIPC protocol;
  • VMware vSockets driver;
  • eXpress Data Path;
  • SELinux security module;
  • ALSA framework;
  • USB sound devices; (CVE-2024-56558, CVE-2024-53227, CVE-2024-53130, CVE-2025-21664, CVE-2024-53142, CVE-2024-55881, CVE-2024-57906, CVE-2024-46809, CVE-2024-53198, CVE-2024-53184, CVE-2024-53237, CVE-2024-56770, CVE-2024-53150, CVE-2024-56700, CVE-2024-50242, CVE-2024-53181, CVE-2024-56574, CVE-2024-56681, CVE-2024-56678, CVE-2024-53119, CVE-2024-53129, CVE-2024-56567, CVE-2024-56688, CVE-2024-49925, CVE-2025-21687, CVE-2024-56643, CVE-2025-21631, CVE-2024-52332, CVE-2024-53226, CVE-2025-21665, CVE-2024-56615, CVE-2024-57911, CVE-2024-53136, CVE-2024-56603, CVE-2024-56690, CVE-2024-47730, CVE-2024-56586, CVE-2024-46784, CVE-2024-56596, CVE-2024-53172, CVE-2024-57901, CVE-2024-56693, CVE-2024-56605, CVE-2024-57896, CVE-2024-56698, CVE-2024-56724, CVE-2024-49998, CVE-2024-53239, CVE-2024-53206, CVE-2024-56636, CVE-2024-56597, CVE-2024-56533, CVE-2024-42315, CVE-2024-56701, CVE-2024-56587, CVE-2024-57791, CVE-2024-56619, CVE-2024-50051, CVE-2024-56569, CVE-2025-21694, CVE-2025-21699, CVE-2024-53214, CVE-2024-57904, CVE-2024-49571,…
Record
USN-7387-1
Updated
2026-11-02
OSVUSN-7387-2 No score

linux-fips, linux-aws-fips, linux-azure-fips, linux-gcp-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • SuperH RISC architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • Drivers core;
  • RAM backed block device driver;
  • Virtio block driver;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • DMA engine subsystem;
  • EDAC drivers;
  • ARM SCPI message protocol;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • I3C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • NVME drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Real Time Clock drivers;
  • SCSI subsystem;
  • SuperH / SH-Mobile drivers;
  • i.MX SoC drivers;
  • QCOM SoC drivers;
  • SPI subsystem;
  • Media staging drivers;
  • UFS subsystem;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • VFIO drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • F2FS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • Overlay file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • UBI file system;
  • Timer subsystem;
  • VLANs driver;
  • LAPB network protocol;
  • Kernel init infrastructure;
  • BPF subsystem;
  • Kernel CPU control infrastructure;
  • DMA mapping infrastructure;
  • KCSAN framework;
  • Tracing infrastructure;
  • Memory management;
  • 9P file system network protocol;
  • Bluetooth subsystem;
  • CAN network layer;
  • Networking core;
  • DCCP (Datagram Congestion Control Protocol);
  • Distributed Switch Architecture;
  • HSR network protocol;
  • IEEE802154.4 network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • IEEE 802.15.4 subsystem;
  • Multipath TCP;
  • Netfilter;
  • Netlink;
  • NET/ROM layer;
  • Packet sockets;
  • Network traffic control;
  • SCTP protocol;
  • SMC sockets;
  • Sun RPC protocol;
  • TIPC protocol;
  • VMware vSockets driver;
  • eXpress Data Path;
  • SELinux security module;
  • ALSA framework;
  • USB sound devices; (CVE-2024-56558, CVE-2024-53227, CVE-2024-53130, CVE-2025-21664, CVE-2024-53142, CVE-2024-55881, CVE-2024-57906, CVE-2024-46809, CVE-2024-53198, CVE-2024-53184, CVE-2024-53237, CVE-2024-56770, CVE-2024-53150, CVE-2024-56700, CVE-2024-50242, CVE-2024-53181, CVE-2024-56574, CVE-2024-56681, CVE-2024-56678, CVE-2024-53119, CVE-2024-53129, CVE-2024-56567, CVE-2024-56688, CVE-2024-49925, CVE-2025-21687, CVE-2024-56643, CVE-2025-21631, CVE-2024-52332, CVE-2024-53226, CVE-2025-21665, CVE-2024-56615, CVE-2024-57911, CVE-2024-53136, CVE-2024-56603, CVE-2024-56690, CVE-2024-47730, CVE-2024-56586, CVE-2024-46784, CVE-2024-56596, CVE-2024-53172, CVE-2024-57901, CVE-2024-56693, CVE-2024-56605, CVE-2024-57896, CVE-2024-56698, CVE-2024-56724, CVE-2024-49998, CVE-2024-53239, CVE-2024-53206, CVE-2024-56636, CVE-2024-56597, CVE-2024-56533, CVE-2024-42315, CVE-2024-56701, CVE-2024-56587, CVE-2024-57791, CVE-2024-56619, CVE-2024-50051, CVE-2024-56569, CVE-2025-21694, CVE-2025-21699, CVE-2024-53214, CVE-2024-57904, CVE-2024-49571,…
Record
USN-7387-2
Updated
2026-11-02
OSVUSN-7387-3 No score

linux-realtime, linux-intel-iot-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • SuperH RISC architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • Drivers core;
  • RAM backed block device driver;
  • Virtio block driver;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • DMA engine subsystem;
  • EDAC drivers;
  • ARM SCPI message protocol;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • I3C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • NVME drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Real Time Clock drivers;
  • SCSI subsystem;
  • SuperH / SH-Mobile drivers;
  • i.MX SoC drivers;
  • QCOM SoC drivers;
  • SPI subsystem;
  • Media staging drivers;
  • UFS subsystem;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • VFIO drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • F2FS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • Overlay file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • UBI file system;
  • Timer subsystem;
  • VLANs driver;
  • LAPB network protocol;
  • Kernel init infrastructure;
  • BPF subsystem;
  • Kernel CPU control infrastructure;
  • DMA mapping infrastructure;
  • KCSAN framework;
  • Tracing infrastructure;
  • Memory management;
  • 9P file system network protocol;
  • Bluetooth subsystem;
  • CAN network layer;
  • Networking core;
  • DCCP (Datagram Congestion Control Protocol);
  • Distributed Switch Architecture;
  • HSR network protocol;
  • IEEE802154.4 network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • IEEE 802.15.4 subsystem;
  • Multipath TCP;
  • Netfilter;
  • Netlink;
  • NET/ROM layer;
  • Packet sockets;
  • Network traffic control;
  • SCTP protocol;
  • SMC sockets;
  • Sun RPC protocol;
  • TIPC protocol;
  • VMware vSockets driver;
  • eXpress Data Path;
  • SELinux security module;
  • ALSA framework;
  • USB sound devices; (CVE-2024-56558, CVE-2024-53227, CVE-2024-53130, CVE-2025-21664, CVE-2024-53142, CVE-2024-55881, CVE-2024-57906, CVE-2024-46809, CVE-2024-53198, CVE-2024-53184, CVE-2024-53237, CVE-2024-56770, CVE-2024-53150, CVE-2024-56700, CVE-2024-50242, CVE-2024-53181, CVE-2024-56574, CVE-2024-56681, CVE-2024-56678, CVE-2024-53119, CVE-2024-53129, CVE-2024-56567, CVE-2024-56688, CVE-2024-49925, CVE-2025-21687, CVE-2024-56643, CVE-2025-21631, CVE-2024-52332, CVE-2024-53226, CVE-2025-21665, CVE-2024-56615, CVE-2024-57911, CVE-2024-53136, CVE-2024-56603, CVE-2024-56690, CVE-2024-47730, CVE-2024-56586, CVE-2024-46784, CVE-2024-56596, CVE-2024-53172, CVE-2024-57901, CVE-2024-56693, CVE-2024-56605, CVE-2024-57896, CVE-2024-56698, CVE-2024-56724, CVE-2024-49998, CVE-2024-53239, CVE-2024-53206, CVE-2024-56636, CVE-2024-56597, CVE-2024-56533, CVE-2024-42315, CVE-2024-56701, CVE-2024-56587, CVE-2024-57791, CVE-2024-56619, CVE-2024-50051, CVE-2024-56569, CVE-2025-21694, CVE-2025-21699, CVE-2024-53214, CVE-2024-57904, CVE-2024-49571,…
Record
USN-7387-3
Updated
2026-11-02
OSVUSN-7388-1 No score

linux-aws-5.15, linux-kvm vulnerabilities

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • SuperH RISC architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • Drivers core;
  • RAM backed block device driver;
  • Virtio block driver;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • DMA engine subsystem;
  • EDAC drivers;
  • ARM SCPI message protocol;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • NVME drivers;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Real Time Clock drivers;
  • SCSI subsystem;
  • SuperH / SH-Mobile drivers;
  • i.MX SoC drivers;
  • QCOM SoC drivers;
  • SPI subsystem;
  • Direct Digital Synthesis drivers;
  • Media staging drivers;
  • TCM subsystem;
  • TTY drivers;
  • UFS subsystem;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • USB Type-C support driver;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • VFIO drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • F2FS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • Overlay file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • UBI file system;
  • Timer subsystem;
  • VLANs driver;
  • LAPB network protocol;
  • User-space API (UAPI);
  • Kernel init infrastructure;
  • io_uring subsystem;
  • BPF subsystem;
  • Kernel CPU control infrastructure;
  • DMA mapping infrastructure;
  • KCSAN framework;
  • Tracing infrastructure;
  • Closures library;
  • Memory management;
  • 9P file system network protocol;
  • Amateur Radio drivers;
  • Bluetooth subsystem;
  • CAN network layer;
  • Networking core;
  • DCCP (Datagram Congestion Control Protocol);
  • Distributed Switch Architecture;
  • HSR network protocol;
  • IEEE802154.4 network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • IEEE 802.15.4 subsystem;
  • Multipath TCP;
  • Netfilter;
  • Netlink;
  • NET/ROM layer;
  • Packet sockets;
  • Network traffic control;
  • SCTP protocol;
  • SMC sockets;
  • Sun RPC protocol;
  • TIPC protocol;
  • VMware vSockets driver;
  • eXpress Data Path;
  • XFRM subsystem;
  • Key management;
  • SELinux security module;
  • ALSA framework;
  • FireWire sound drivers;
  • HD-audio driver;
  • QCOM ASoC drivers;
  • STMicroelectronics SoC drivers;
  • USB sound devices;
  • KVM core; (CVE-2024-56622, CVE-2024-42252, CVE-2024-53101, CVE-2025-21664, CVE-2024-50168, CVE-2024-53214, CVE-2024-56670,…
Record
USN-7388-1
Updated
2026-11-02
OSVUSN-7389-1 No score

linux-nvidia-tegra, linux-nvidia-tegra-igx vulnerabilities

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • SuperH RISC architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • Drivers core;
  • RAM backed block device driver;
  • Virtio block driver;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • DMA engine subsystem;
  • EDAC drivers;
  • ARM SCPI message protocol;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • NVME drivers;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Real Time Clock drivers;
  • SCSI subsystem;
  • SuperH / SH-Mobile drivers;
  • i.MX SoC drivers;
  • QCOM SoC drivers;
  • SPI subsystem;
  • Direct Digital Synthesis drivers;
  • Media staging drivers;
  • TCM subsystem;
  • TTY drivers;
  • UFS subsystem;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • USB Type-C support driver;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • VFIO drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • F2FS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • Overlay file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • UBI file system;
  • Timer subsystem;
  • VLANs driver;
  • LAPB network protocol;
  • User-space API (UAPI);
  • Kernel init infrastructure;
  • io_uring subsystem;
  • BPF subsystem;
  • Kernel CPU control infrastructure;
  • DMA mapping infrastructure;
  • KCSAN framework;
  • Tracing infrastructure;
  • Closures library;
  • Memory management;
  • 9P file system network protocol;
  • Amateur Radio drivers;
  • Bluetooth subsystem;
  • CAN network layer;
  • Networking core;
  • DCCP (Datagram Congestion Control Protocol);
  • Distributed Switch Architecture;
  • HSR network protocol;
  • IEEE802154.4 network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • IEEE 802.15.4 subsystem;
  • Multipath TCP;
  • Netfilter;
  • Netlink;
  • NET/ROM layer;
  • Packet sockets;
  • Network traffic control;
  • SCTP protocol;
  • SMC sockets;
  • Sun RPC protocol;
  • TIPC protocol;
  • VMware vSockets driver;
  • eXpress Data Path;
  • XFRM subsystem;
  • Key management;
  • SELinux security module;
  • ALSA framework;
  • FireWire sound drivers;
  • HD-audio driver;
  • QCOM ASoC drivers;
  • STMicroelectronics SoC drivers;
  • USB sound devices;
  • KVM core; (CVE-2025-21640, CVE-2024-56625, CVE-2024-53104, CVE-2024-53055, CVE-2024-26718, CVE-2024-53180, CVE-2024-50257,…
Record
USN-7389-1
Updated
2026-11-02
OSVUSN-7390-1 No score

linux-xilinx-zynqmp vulnerabilities

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • SuperH RISC architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • Drivers core;
  • RAM backed block device driver;
  • Virtio block driver;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • DMA engine subsystem;
  • EDAC drivers;
  • ARM SCPI message protocol;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • NVME drivers;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Real Time Clock drivers;
  • SCSI subsystem;
  • SuperH / SH-Mobile drivers;
  • i.MX SoC drivers;
  • QCOM SoC drivers;
  • SPI subsystem;
  • Direct Digital Synthesis drivers;
  • Media staging drivers;
  • TCM subsystem;
  • TTY drivers;
  • UFS subsystem;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • USB Type-C support driver;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • VFIO drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • F2FS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • Overlay file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • UBI file system;
  • Timer subsystem;
  • VLANs driver;
  • LAPB network protocol;
  • User-space API (UAPI);
  • Kernel init infrastructure;
  • io_uring subsystem;
  • BPF subsystem;
  • Kernel CPU control infrastructure;
  • DMA mapping infrastructure;
  • KCSAN framework;
  • Tracing infrastructure;
  • Closures library;
  • Memory management;
  • 9P file system network protocol;
  • Amateur Radio drivers;
  • Bluetooth subsystem;
  • CAN network layer;
  • Networking core;
  • DCCP (Datagram Congestion Control Protocol);
  • Distributed Switch Architecture;
  • HSR network protocol;
  • IEEE802154.4 network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • IEEE 802.15.4 subsystem;
  • Multipath TCP;
  • Netfilter;
  • Netlink;
  • NET/ROM layer;
  • Packet sockets;
  • Network traffic control;
  • SCTP protocol;
  • SMC sockets;
  • Sun RPC protocol;
  • TIPC protocol;
  • VMware vSockets driver;
  • eXpress Data Path;
  • XFRM subsystem;
  • Key management;
  • SELinux security module;
  • ALSA framework;
  • FireWire sound drivers;
  • HD-audio driver;
  • QCOM ASoC drivers;
  • STMicroelectronics SoC drivers;
  • USB sound devices;
  • KVM core; (CVE-2024-50299, CVE-2024-50304, CVE-2024-50196, CVE-2024-56548, CVE-2024-56531, CVE-2024-56720, CVE-2024-58087,…
Record
USN-7390-1
Updated
2026-11-02
OSVUSN-7391-1 No score

linux, linux-hwe-5.4 vulnerabilities

Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2024-23848)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PowerPC architecture;
  • S390 architecture;
  • SuperH RISC architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Cryptographic API;
  • Virtio block driver;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • DMA engine subsystem;
  • EDAC drivers;
  • ARM SCPI message protocol;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • I3C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • NVME drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Real Time Clock drivers;
  • SCSI subsystem;
  • SuperH / SH-Mobile drivers;
  • QCOM SoC drivers;
  • SPI subsystem;
  • USB Gadget drivers;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • VFIO drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • BTRFS file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • File systems infrastructure;
  • JFFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • Overlay file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • UBI file system;
  • Timer subsystem;
  • VLANs driver;
  • LAPB network protocol;
  • Kernel init infrastructure;
  • BPF subsystem;
  • Kernel CPU control infrastructure;
  • Tracing infrastructure;
  • Memory management;
  • 9P file system network protocol;
  • Bluetooth subsystem;
  • CAN network layer;
  • Networking core;
  • DCCP (Datagram Congestion Control Protocol);
  • IEEE802154.4 network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • IEEE 802.15.4 subsystem;
  • Netfilter;
  • Netlink;
  • NET/ROM layer;
  • Packet sockets;
  • Network traffic control;
  • SCTP protocol;
  • Sun RPC protocol;
  • TIPC protocol;
  • eXpress Data Path;
  • SELinux security module;
  • USB sound devices; (CVE-2024-53172, CVE-2024-56572, CVE-2024-56739, CVE-2024-56643, CVE-2024-53131, CVE-2024-57904, CVE-2024-53145, CVE-2024-57908, CVE-2024-53155, CVE-2024-56691, CVE-2024-57901, CVE-2024-56595, CVE-2024-55916, CVE-2024-50051, CVE-2024-49936, CVE-2024-57900, CVE-2024-53239, CVE-2024-53142, CVE-2024-57889, CVE-2024-53217, CVE-2024-56619, CVE-2025-21653, CVE-2024-53140, CVE-2024-53130, CVE-2024-43098, CVE-2024-56746, CVE-2024-56650, CVE-2024-56723, CVE-2024-56558, CVE-2024-57884, CVE-2024-56601, CVE-2024-56581, CVE-2024-57906, CVE-2024-57948, CVE-2024-49996, CVE-2024-56598, CVE-2025-21638, CVE-2024-49925, CVE-2024-56767, CVE-2024-53127, CVE-2024-53181, CVE-2024-53194, CVE-2024-57902, CVE-2024-56630, CVE-2024-56567, CVE-2024-56602, CVE-2024-56562, CVE-2024-56596, CVE-2024-56570, CVE-2024-56670, CVE-2024-53135, CVE-2024-56629, CVE-2024-56769, CVE-2024-56637, CVE-2024-56681, CVE-2024-57910, CVE-2024-57892, CVE-2024-56574, CVE-2024-53121, CVE-2024-56532, CVE-2025-21689, CVE-2024-53156, CVE-2024-57912, CVE-2024-56597, CVE-2025-21640, CVE-2024-53690, CVE-2024-56548, CVE-2024-56633, CVE-2024-43900, CVE-2024-56631, CVE-2021-47219, CVE-2024-56659, CVE-2024-53158, CVE-2025-21639, CVE-2024-53136, CVE-2024-56615, CVE-2024-56586, CVE-2024-57946, CVE-2024-57911, CVE-2025-21699, CVE-2025-21664, CVE-2024-53174, CVE-2024-53184, CVE-2024-53138, CVE-2024-53680, CVE-2024-56593, CVE-2024-56644,…
Record
USN-7391-1
Updated
2026-11-02
OSVUSN-7392-1 No score

linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-ibm, linux-kvm, linux-oracle, linux-oracle-5.4, linux-xilinx-zynqmp vulnerabilities

Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2024-23848)

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PowerPC architecture;
  • S390 architecture;
  • SuperH RISC architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Cryptographic API;
  • Virtio block driver;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • DMA engine subsystem;
  • EDAC drivers;
  • ARM SCPI message protocol;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • I3C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • NVME drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Real Time Clock drivers;
  • SCSI subsystem;
  • SuperH / SH-Mobile drivers;
  • QCOM SoC drivers;
  • SPI subsystem;
  • USB Gadget drivers;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • VFIO drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • BTRFS file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • File systems infrastructure;
  • JFFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • Overlay file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • UBI file system;
  • Timer subsystem;
  • VLANs driver;
  • LAPB network protocol;
  • Kernel init infrastructure;
  • BPF subsystem;
  • Kernel CPU control infrastructure;
  • Tracing infrastructure;
  • Memory management;
  • 9P file system network protocol;
  • Bluetooth subsystem;
  • CAN network layer;
  • Networking core;
  • DCCP (Datagram Congestion Control Protocol);
  • IEEE802154.4 network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • IEEE 802.15.4 subsystem;
  • Netfilter;
  • Netlink;
  • NET/ROM layer;
  • Packet sockets;
  • Network traffic control;
  • SCTP protocol;
  • Sun RPC protocol;
  • TIPC protocol;
  • eXpress Data Path;
  • SELinux security module;
  • USB sound devices; (CVE-2024-56532, CVE-2024-53127, CVE-2024-56574, CVE-2024-56576, CVE-2024-57922, CVE-2024-53135, CVE-2024-56606, CVE-2024-53155, CVE-2024-53136, CVE-2024-56769, CVE-2024-56690, CVE-2024-53150, CVE-2024-38588, CVE-2024-53171, CVE-2024-56748, CVE-2024-56558, CVE-2024-56595, CVE-2024-56670, CVE-2024-56637, CVE-2024-56739, CVE-2024-56681, CVE-2024-53158, CVE-2024-53172, CVE-2024-56700, CVE-2024-56645, CVE-2024-56723, CVE-2024-56572, CVE-2024-57889, CVE-2024-43098, CVE-2024-56614, CVE-2024-53197, CVE-2025-21640, CVE-2024-57938, CVE-2024-53140, CVE-2024-57929, CVE-2024-56593, CVE-2024-56691, CVE-2025-21687, CVE-2024-56770, CVE-2024-53131, CVE-2024-56531, CVE-2024-56603, CVE-2025-21653, CVE-2024-53239, CVE-2024-57946, CVE-2024-56581, CVE-2024-56694, CVE-2024-56597, CVE-2024-57849, CVE-2024-56601, CVE-2024-53156, CVE-2024-56747, CVE-2024-53146, CVE-2025-21664, CVE-2024-53217, CVE-2025-21638, CVE-2024-53157, CVE-2024-56688, CVE-2024-47707, CVE-2024-53173, CVE-2024-56605, CVE-2024-56619, CVE-2024-49925, CVE-2024-49936, CVE-2024-56586, CVE-2024-57892, CVE-2024-56562, CVE-2024-57902,…
Record
USN-7392-1
Updated
2026-11-02
OSVUSN-7392-2 No score

linux-azure-fips, linux-gcp-fips vulnerabilities

Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2024-23848)

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PowerPC architecture;
  • S390 architecture;
  • SuperH RISC architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Cryptographic API;
  • Virtio block driver;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • DMA engine subsystem;
  • EDAC drivers;
  • ARM SCPI message protocol;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • I3C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • NVME drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Real Time Clock drivers;
  • SCSI subsystem;
  • SuperH / SH-Mobile drivers;
  • QCOM SoC drivers;
  • SPI subsystem;
  • USB Gadget drivers;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • VFIO drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • BTRFS file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • File systems infrastructure;
  • JFFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • Overlay file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • UBI file system;
  • Timer subsystem;
  • VLANs driver;
  • LAPB network protocol;
  • Kernel init infrastructure;
  • BPF subsystem;
  • Kernel CPU control infrastructure;
  • Tracing infrastructure;
  • Memory management;
  • 9P file system network protocol;
  • Bluetooth subsystem;
  • CAN network layer;
  • Networking core;
  • DCCP (Datagram Congestion Control Protocol);
  • IEEE802154.4 network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • IEEE 802.15.4 subsystem;
  • Netfilter;
  • Netlink;
  • NET/ROM layer;
  • Packet sockets;
  • Network traffic control;
  • SCTP protocol;
  • Sun RPC protocol;
  • TIPC protocol;
  • eXpress Data Path;
  • SELinux security module;
  • USB sound devices; (CVE-2024-56532, CVE-2024-53127, CVE-2024-56574, CVE-2024-56576, CVE-2024-57922, CVE-2024-53135, CVE-2024-56606, CVE-2024-53155, CVE-2024-53136, CVE-2024-56769, CVE-2024-56690, CVE-2024-53150, CVE-2024-38588, CVE-2024-53171, CVE-2024-56748, CVE-2024-56558, CVE-2024-56595, CVE-2024-56670, CVE-2024-56637, CVE-2024-56739, CVE-2024-56681, CVE-2024-53158, CVE-2024-53172, CVE-2024-56700, CVE-2024-56645, CVE-2024-56723, CVE-2024-56572, CVE-2024-57889, CVE-2024-43098, CVE-2024-56614, CVE-2024-53197, CVE-2025-21640, CVE-2024-57938, CVE-2024-53140, CVE-2024-57929, CVE-2024-56593, CVE-2024-56691, CVE-2025-21687, CVE-2024-56770, CVE-2024-53131, CVE-2024-56531, CVE-2024-56603, CVE-2025-21653, CVE-2024-53239, CVE-2024-57946, CVE-2024-56581, CVE-2024-56694, CVE-2024-56597, CVE-2024-57849, CVE-2024-56601, CVE-2024-53156, CVE-2024-56747, CVE-2024-53146, CVE-2025-21664, CVE-2024-53217, CVE-2025-21638, CVE-2024-53157, CVE-2024-56688, CVE-2024-47707, CVE-2024-53173, CVE-2024-56605, CVE-2024-56619, CVE-2024-49925, CVE-2024-49936, CVE-2024-56586, CVE-2024-57892, CVE-2024-56562, CVE-2024-57902,…
Record
USN-7392-2
Updated
2026-11-02
OSVUSN-7392-3 No score

linux-aws vulnerabilities

Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2024-23848)

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PowerPC architecture;
  • S390 architecture;
  • SuperH RISC architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Cryptographic API;
  • Virtio block driver;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • DMA engine subsystem;
  • EDAC drivers;
  • ARM SCPI message protocol;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • I3C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • NVME drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Real Time Clock drivers;
  • SCSI subsystem;
  • SuperH / SH-Mobile drivers;
  • QCOM SoC drivers;
  • SPI subsystem;
  • USB Gadget drivers;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • VFIO drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • BTRFS file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • File systems infrastructure;
  • JFFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • Overlay file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • UBI file system;
  • Timer subsystem;
  • VLANs driver;
  • LAPB network protocol;
  • Kernel init infrastructure;
  • BPF subsystem;
  • Kernel CPU control infrastructure;
  • Tracing infrastructure;
  • Memory management;
  • 9P file system network protocol;
  • Bluetooth subsystem;
  • CAN network layer;
  • Networking core;
  • DCCP (Datagram Congestion Control Protocol);
  • IEEE802154.4 network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • IEEE 802.15.4 subsystem;
  • Netfilter;
  • Netlink;
  • NET/ROM layer;
  • Packet sockets;
  • Network traffic control;
  • SCTP protocol;
  • Sun RPC protocol;
  • TIPC protocol;
  • eXpress Data Path;
  • SELinux security module;
  • USB sound devices; (CVE-2024-56532, CVE-2024-53127, CVE-2024-56574, CVE-2024-56576, CVE-2024-57922, CVE-2024-53135, CVE-2024-56606, CVE-2024-53155, CVE-2024-53136, CVE-2024-56769, CVE-2024-56690, CVE-2024-53150, CVE-2024-38588, CVE-2024-53171, CVE-2024-56748, CVE-2024-56558, CVE-2024-56595, CVE-2024-56670, CVE-2024-56637, CVE-2024-56739, CVE-2024-56681, CVE-2024-53158, CVE-2024-53172, CVE-2024-56700, CVE-2024-56645, CVE-2024-56723, CVE-2024-56572, CVE-2024-57889, CVE-2024-43098, CVE-2024-56614, CVE-2024-53197, CVE-2025-21640, CVE-2024-57938, CVE-2024-53140, CVE-2024-57929, CVE-2024-56593, CVE-2024-56691, CVE-2025-21687, CVE-2024-56770, CVE-2024-53131, CVE-2024-56531, CVE-2024-56603, CVE-2025-21653, CVE-2024-53239, CVE-2024-57946, CVE-2024-56581, CVE-2024-56694, CVE-2024-56597, CVE-2024-57849, CVE-2024-56601, CVE-2024-53156, CVE-2024-56747, CVE-2024-53146, CVE-2025-21664, CVE-2024-53217, CVE-2025-21638, CVE-2024-53157, CVE-2024-56688, CVE-2024-47707, CVE-2024-53173, CVE-2024-56605, CVE-2024-56619, CVE-2024-49925, CVE-2024-49936, CVE-2024-56586, CVE-2024-57892, CVE-2024-56562, CVE-2024-57902,…
Record
USN-7392-3
Updated
2026-11-02
OSVUSN-7392-4 No score

linux-aws-fips vulnerabilities

Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2024-23848)

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PowerPC architecture;
  • S390 architecture;
  • SuperH RISC architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Cryptographic API;
  • Virtio block driver;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • DMA engine subsystem;
  • EDAC drivers;
  • ARM SCPI message protocol;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • I3C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • NVME drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Real Time Clock drivers;
  • SCSI subsystem;
  • SuperH / SH-Mobile drivers;
  • QCOM SoC drivers;
  • SPI subsystem;
  • USB Gadget drivers;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • VFIO drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • BTRFS file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • File systems infrastructure;
  • JFFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • Overlay file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • UBI file system;
  • Timer subsystem;
  • VLANs driver;
  • LAPB network protocol;
  • Kernel init infrastructure;
  • BPF subsystem;
  • Kernel CPU control infrastructure;
  • Tracing infrastructure;
  • Memory management;
  • 9P file system network protocol;
  • Bluetooth subsystem;
  • CAN network layer;
  • Networking core;
  • DCCP (Datagram Congestion Control Protocol);
  • IEEE802154.4 network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • IEEE 802.15.4 subsystem;
  • Netfilter;
  • Netlink;
  • NET/ROM layer;
  • Packet sockets;
  • Network traffic control;
  • SCTP protocol;
  • Sun RPC protocol;
  • TIPC protocol;
  • eXpress Data Path;
  • SELinux security module;
  • USB sound devices; (CVE-2024-56532, CVE-2024-53127, CVE-2024-56574, CVE-2024-56576, CVE-2024-57922, CVE-2024-53135, CVE-2024-56606, CVE-2024-53155, CVE-2024-53136, CVE-2024-56769, CVE-2024-56690, CVE-2024-53150, CVE-2024-38588, CVE-2024-53171, CVE-2024-56748, CVE-2024-56558, CVE-2024-56595, CVE-2024-56670, CVE-2024-56637, CVE-2024-56739, CVE-2024-56681, CVE-2024-53158, CVE-2024-53172, CVE-2024-56700, CVE-2024-56645, CVE-2024-56723, CVE-2024-56572, CVE-2024-57889, CVE-2024-43098, CVE-2024-56614, CVE-2024-53197, CVE-2025-21640, CVE-2024-57938, CVE-2024-53140, CVE-2024-57929, CVE-2024-56593, CVE-2024-56691, CVE-2025-21687, CVE-2024-56770, CVE-2024-53131, CVE-2024-56531, CVE-2024-56603, CVE-2025-21653, CVE-2024-53239, CVE-2024-57946, CVE-2024-56581, CVE-2024-56694, CVE-2024-56597, CVE-2024-57849, CVE-2024-56601, CVE-2024-53156, CVE-2024-56747, CVE-2024-53146, CVE-2025-21664, CVE-2024-53217, CVE-2025-21638, CVE-2024-53157, CVE-2024-56688, CVE-2024-47707, CVE-2024-53173, CVE-2024-56605, CVE-2024-56619, CVE-2024-49925, CVE-2024-49936, CVE-2024-56586, CVE-2024-57892, CVE-2024-56562, CVE-2024-57902,…
Record
USN-7392-4
Updated
2026-11-02
OSVUSN-7393-1 No score

linux-fips vulnerabilities

Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2024-23848)

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • S390 architecture;
  • SuperH RISC architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • Drivers core;
  • ATA over ethernet (AOE) driver;
  • Virtio block driver;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • DMA engine subsystem;
  • EDAC drivers;
  • ARM SCPI message protocol;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • NTB driver;
  • Virtio pmem driver;
  • NVME drivers;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Real Time Clock drivers;
  • SCSI subsystem;
  • SuperH / SH-Mobile drivers;
  • QCOM SoC drivers;
  • SPI subsystem;
  • Direct Digital Synthesis drivers;
  • USB Device Class drivers;
  • USB Gadget drivers;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • USB Type-C support driver;
  • USB Type-C Port Controller Manager driver;
  • VFIO drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • BTRFS file system;
  • Ceph distributed file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • File systems infrastructure;
  • JFFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • Overlay file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • UBI file system;
  • Timer subsystem;
  • VLANs driver;
  • LAPB network protocol;
  • Network traffic control;
  • Network sockets;
  • TCP network protocol;
  • Kernel init infrastructure;
  • BPF subsystem;
  • Kernel CPU control infrastructure;
  • Perf events;
  • Arbitrary resource management;
  • Tracing infrastructure;
  • Closures library;
  • Memory management;
  • 9P file system network protocol;
  • Amateur Radio drivers;
  • Bluetooth subsystem;
  • Ethernet bridge;
  • CAN network layer;
  • Networking core;
  • DCCP (Datagram Congestion Control Protocol);
  • IEEE802154.4 network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • IEEE 802.15.4 subsystem;
  • Netfilter;
  • Netlink;
  • NET/ROM layer;
  • Packet sockets;
  • SCTP protocol;
  • Sun RPC protocol;
  • TIPC protocol;
  • Wireless networking;
  • eXpress Data Path;
  • XFRM subsystem;
  • Key management;
  • SELinux security module;
  • FireWire sound drivers;
  • AudioScience HPI driver;
  • Amlogic Meson SoC drivers;
  • USB sound devices;
  • KVM core; (CVE-2024-49938, CVE-2024-41066, CVE-2024-57951, CVE-2024-56779, CVE-2024-50194, CVE-2024-50265, CVE-2024-56596, CVE-2024-57922, CVE-2024-56614, CVE-2024-57912, CVE-2024-50251, CVE-2024-56569, CVE-2024-56587, CVE-2024-57807, CVE-2024-50051, CVE-2024-49997, CVE-2024-57911, CVE-2024-50195,…
Record
USN-7393-1
Updated
2026-11-02
OSVUSN-7401-1 No score

linux-aws-5.4 vulnerabilities

Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2024-23848)

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • S390 architecture;
  • SuperH RISC architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • Drivers core;
  • ATA over ethernet (AOE) driver;
  • Virtio block driver;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • DMA engine subsystem;
  • EDAC drivers;
  • ARM SCPI message protocol;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • NTB driver;
  • Virtio pmem driver;
  • NVME drivers;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Real Time Clock drivers;
  • SCSI subsystem;
  • SuperH / SH-Mobile drivers;
  • QCOM SoC drivers;
  • SPI subsystem;
  • Direct Digital Synthesis drivers;
  • USB Device Class drivers;
  • USB Gadget drivers;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • USB Type-C support driver;
  • USB Type-C Port Controller Manager driver;
  • VFIO drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • BTRFS file system;
  • Ceph distributed file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • File systems infrastructure;
  • JFFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • Overlay file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • UBI file system;
  • Timer subsystem;
  • VLANs driver;
  • LAPB network protocol;
  • Network traffic control;
  • Network sockets;
  • TCP network protocol;
  • Kernel init infrastructure;
  • BPF subsystem;
  • Kernel CPU control infrastructure;
  • Perf events;
  • Arbitrary resource management;
  • Tracing infrastructure;
  • Closures library;
  • Memory management;
  • 9P file system network protocol;
  • Amateur Radio drivers;
  • Bluetooth subsystem;
  • Ethernet bridge;
  • CAN network layer;
  • Networking core;
  • DCCP (Datagram Congestion Control Protocol);
  • IEEE802154.4 network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • IEEE 802.15.4 subsystem;
  • Netfilter;
  • Netlink;
  • NET/ROM layer;
  • Packet sockets;
  • SCTP protocol;
  • Sun RPC protocol;
  • TIPC protocol;
  • Wireless networking;
  • eXpress Data Path;
  • XFRM subsystem;
  • Key management;
  • SELinux security module;
  • FireWire sound drivers;
  • AudioScience HPI driver;
  • Amlogic Meson SoC drivers;
  • USB sound devices;
  • KVM core; (CVE-2024-56637, CVE-2024-56576, CVE-2024-47685, CVE-2024-56558, CVE-2024-47684, CVE-2024-50233, CVE-2024-50301, CVE-2024-49860, CVE-2021-47219, CVE-2024-56581, CVE-2024-57902, CVE-2024-49851, CVE-2024-50074, CVE-2025-21640, CVE-2023-52458, CVE-2024-50134, CVE-2024-47692, CVE-2024-46849,…
Record
USN-7401-1
Updated
2026-11-02
OSVUSN-7407-1 No score

linux-hwe-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • SuperH RISC architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • Drivers core;
  • RAM backed block device driver;
  • Virtio block driver;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • DMA engine subsystem;
  • EDAC drivers;
  • ARM SCPI message protocol;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • I3C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • NVME drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Real Time Clock drivers;
  • SCSI subsystem;
  • SuperH / SH-Mobile drivers;
  • i.MX SoC drivers;
  • QCOM SoC drivers;
  • SPI subsystem;
  • Media staging drivers;
  • UFS subsystem;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • VFIO drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • F2FS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • Overlay file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • UBI file system;
  • Timer subsystem;
  • VLANs driver;
  • LAPB network protocol;
  • Network namespace;
  • Kernel init infrastructure;
  • BPF subsystem;
  • Kernel CPU control infrastructure;
  • DMA mapping infrastructure;
  • KCSAN framework;
  • Tracing infrastructure;
  • Memory management;
  • 9P file system network protocol;
  • Bluetooth subsystem;
  • CAN network layer;
  • Networking core;
  • DCCP (Datagram Congestion Control Protocol);
  • Distributed Switch Architecture;
  • HSR network protocol;
  • IEEE802154.4 network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • IEEE 802.15.4 subsystem;
  • Multipath TCP;
  • Netfilter;
  • Netlink;
  • NET/ROM layer;
  • Packet sockets;
  • Network traffic control;
  • SCTP protocol;
  • SMC sockets;
  • Sun RPC protocol;
  • TIPC protocol;
  • VMware vSockets driver;
  • eXpress Data Path;
  • SELinux security module;
  • ALSA framework;
  • USB sound devices; (CVE-2024-50242, CVE-2024-53165, CVE-2024-56569, CVE-2024-57938, CVE-2024-57889, CVE-2024-53226, CVE-2024-57882, CVE-2024-57913, CVE-2024-53096, CVE-2024-56575, CVE-2024-56630, CVE-2024-50055, CVE-2024-53129, CVE-2025-21646, CVE-2024-50121, CVE-2024-56594, CVE-2024-57802, CVE-2024-53183, CVE-2024-57904, CVE-2025-21653, CVE-2024-56633, CVE-2024-56595, CVE-2024-56659, CVE-2024-47730, CVE-2024-57948, CVE-2024-56614, CVE-2024-56601, CVE-2024-36476, CVE-2024-49998, CVE-2024-53122, CVE-2024-56701, CVE-2024-56781, CVE-2024-56785, CVE-2024-47707, CVE-2025-21694, CVE-2024-56715, CVE-2024-56693, CVE-2024-56587, CVE-2024-56726, CVE-2024-56688, CVE-2024-53124, CVE-2024-46871, CVE-2025-21648, CVE-2024-56603, CVE-2024-56779, CVE-2025-21637, CVE-2025-21664, CVE-2024-57951, CVE-2024-53136, CVE-2025-21687, CVE-2024-57798, CVE-2024-53680, CVE-2024-56606, CVE-2024-56643, CVE-2024-56634, CVE-2024-56716, CVE-2024-57908, CVE-2024-56774, CVE-2024-56562, CVE-2025-21669, CVE-2024-57849, CVE-2024-56623,…
Record
USN-7407-1
Updated
2026-11-02
OSVUSN-7413-1 No score

linux-iot vulnerabilities

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. (CVE-2022-38096)

Ye Zhang and Nicolas Wu discovered that the io_uring subsystem in the Linux kernel did not properly handle locking for rings with IOPOLL, leading to a double-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-21400)

Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2024-23848)

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • S390 architecture;
  • SuperH RISC architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • Drivers core;
  • ATA over ethernet (AOE) driver;
  • Virtio block driver;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • DMA engine subsystem;
  • EDAC drivers;
  • ARM SCPI message protocol;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • NTB driver;
  • Virtio pmem driver;
  • NVME drivers;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Real Time Clock drivers;
  • SCSI subsystem;
  • SuperH / SH-Mobile drivers;
  • QCOM SoC drivers;
  • SPI subsystem;
  • Direct Digital Synthesis drivers;
  • TTY drivers;
  • USB Device Class drivers;
  • USB Gadget drivers;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • USB Type-C support driver;
  • USB Type-C Port Controller Manager driver;
  • VFIO drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • BTRFS file system;
  • Ceph distributed file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • File systems infrastructure;
  • JFFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • Overlay file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • UBI file system;
  • Timer subsystem;
  • VLANs driver;
  • Bluetooth subsystem;
  • LAPB network protocol;
  • Network traffic control;
  • Network sockets;
  • TCP network protocol;
  • Kernel init infrastructure;
  • BPF subsystem;
  • Kernel CPU control infrastructure;
  • Perf events;
  • Arbitrary resource management;
  • Tracing infrastructure;
  • Closures library;
  • Memory management;
  • 9P file system network protocol;
  • Amateur Radio drivers;
  • Ethernet bridge;
  • CAN network layer;
  • Networking core;
  • DCCP (Datagram Congestion Control Protocol);
  • IEEE802154.4 network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • IEEE 802.15.4 subsystem;
  • Netfilter;
  • Netlink;
  • NET/ROM layer;
  • Packet sockets;
  • SCTP…
Record
USN-7413-1
Updated
2026-11-02
OSVUSN-7421-1 No score

linux-azure-5.15, linux-azure-fde-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • SuperH RISC architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • Drivers core;
  • RAM backed block device driver;
  • Virtio block driver;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • DMA engine subsystem;
  • EDAC drivers;
  • ARM SCPI message protocol;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • I3C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • NVME drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Real Time Clock drivers;
  • SCSI subsystem;
  • SuperH / SH-Mobile drivers;
  • i.MX SoC drivers;
  • QCOM SoC drivers;
  • SPI subsystem;
  • Media staging drivers;
  • UFS subsystem;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • VFIO drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • F2FS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • Overlay file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • UBI file system;
  • Timer subsystem;
  • VLANs driver;
  • LAPB network protocol;
  • Network namespace;
  • Kernel init infrastructure;
  • BPF subsystem;
  • Kernel CPU control infrastructure;
  • DMA mapping infrastructure;
  • KCSAN framework;
  • Tracing infrastructure;
  • Memory management;
  • 9P file system network protocol;
  • Bluetooth subsystem;
  • CAN network layer;
  • Networking core;
  • DCCP (Datagram Congestion Control Protocol);
  • Distributed Switch Architecture;
  • HSR network protocol;
  • IEEE802154.4 network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • IEEE 802.15.4 subsystem;
  • Multipath TCP;
  • Netfilter;
  • Netlink;
  • NET/ROM layer;
  • Packet sockets;
  • Network traffic control;
  • SCTP protocol;
  • SMC sockets;
  • Sun RPC protocol;
  • TIPC protocol;
  • VMware vSockets driver;
  • eXpress Data Path;
  • SELinux security module;
  • ALSA framework;
  • USB sound devices; (CVE-2024-53680, CVE-2024-53148, CVE-2024-47408, CVE-2024-53122, CVE-2024-56691, CVE-2024-56763, CVE-2024-53227, CVE-2024-56369, CVE-2024-50275, CVE-2024-57892, CVE-2024-53142, CVE-2024-56693, CVE-2024-56658, CVE-2024-57882, CVE-2024-56606, CVE-2024-46871, CVE-2024-57907, CVE-2024-56642, CVE-2025-21631, CVE-2024-57908, CVE-2024-57890, CVE-2024-53194, CVE-2024-57913, CVE-2024-56659, CVE-2024-56643, CVE-2024-56590, CVE-2024-56754, CVE-2025-21678, CVE-2024-56678, CVE-2024-49974, CVE-2024-56614, CVE-2024-53124, CVE-2022-49034, CVE-2024-49996, CVE-2024-47143, CVE-2024-50055, CVE-2024-53184, CVE-2024-56681, CVE-2025-21683, CVE-2024-57922, CVE-2024-56532, CVE-2024-53161, CVE-2024-57791, CVE-2025-21664, CVE-2024-53206, CVE-2024-56589, CVE-2024-57902, CVE-2024-56633, CVE-2024-53140, CVE-2024-56627, CVE-2024-57912, CVE-2024-55916, CVE-2024-56594, CVE-2025-21690, CVE-2024-56602, CVE-2024-49998, CVE-2024-53171, CVE-2024-53174, CVE-2024-53172, CVE-2024-56701, CVE-2024-52332, CVE-2024-57948,…
Record
USN-7421-1
Updated
2026-11-02
OSVUSN-7449-1 No score

linux, linux-aws, linux-azure, linux-azure-6.8, linux-ibm, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-oem-6.8, linux-oracle, linux-oracle-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • SuperH RISC architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Drivers core;
  • RAM backed block device driver;
  • Compressed RAM block device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • EDAC drivers;
  • ARM SCMI message protocol;
  • ARM SCPI message protocol;
  • EFI core;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • I3C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NVME drivers;
  • PCI subsystem;
  • PHY drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • i.MX PM domains;
  • Voltage and Current Regulator drivers;
  • StarFive reset controller drivers;
  • Real Time Clock drivers;
  • SCSI subsystem;
  • i.MX SoC drivers;
  • QCOM SoC drivers;
  • Xilinx SoC drivers;
  • SPI subsystem;
  • Media staging drivers;
  • TCM subsystem;
  • UFS subsystem;
  • DesignWare USB3 driver;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • USB Type-C support driver;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • vDPA drivers;
  • VFIO drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • AFS file system;
  • BTRFS file system;
  • File systems infrastructure;
  • EROFS file system;
  • F2FS file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file systems library;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • Overlay file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • UBI file system;
  • DRM display driver;
  • BPF subsystem;
  • StackDepot library;
  • Bluetooth subsystem;
  • IP tunnels definitions;
  • Netfilter;
  • Tracing infrastructure;
  • User-space API (UAPI);
  • Kernel init infrastructure;
  • io_uring subsystem;
  • IPC subsystem;
  • DMA mapping infrastructure;
  • Kernel fork() syscall;
  • KCSAN framework;
  • RCU subsystem;
  • Arbitrary resource management;
  • Scheduler infrastructure;
  • Signal handling mechanism;
  • Task handling mechanism;
  • Timer subsystem;
  • KUnit library;
  • Memory management;
  • 9P file system network protocol;
  • CAN network layer;
  • Networking core;
  • DCCP (Datagram Congestion Control Protocol);
  • Ethtool driver;
  • HSR network protocol;
  • IEEE802154.4 network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • IUCV driver;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Packet sockets;
  • RxRPC session sockets;
  • Network traffic control;
  • SCTP protocol;
  • SMC sockets;
  • Sun RPC protocol;
  • TIPC protocol;
  • VMware vSockets driver;
  • Wireless networking;
  • eXpress Data Path;
  • XFRM subsystem;
  • Integrity Measurement Architecture(IMA) framework;
  • Key management;
  • ALSA framework;
  • FireWire sound drivers;
  • HD-audio driver;
  • MediaTek ASoC drivers;
  • QCOM ASoC drivers;
  • SoC audio core drivers;
  • STMicroelectronics SoC drivers;
  • USB sound devices; (CVE-2024-50288, CVE-2024-56568, CVE-2024-50280, CVE-2024-56677, CVE-2024-56620, CVE-2024-53108, CVE-2024-53115, CVE-2024-53061,…
Record
USN-7449-1
Updated
2026-11-03

Affected products

Affected packages

Affected packages
PackageAffectedFixed
linux-lts
Alpaquita:23
6.1.119-r0 up to 6.1.120-r0
6.1.120-r0
linux-lts
Alpaquita:25
6.6.89-r0 up to 6.12.41-r0
6.12.41-r0
linux-lts
Alpaquita:stream
6.12.92-r1 up to 6.18.35-r1
6.18.35-r1
linux-buildinfo-4.15.0-246-tuxcare.els34-generic
TuxCare:Ubuntu:18.04
before 4.15.0-246.257
4.15.0-246.257
linux-buildinfo-4.15.0-246-tuxcare.els34-lowlatency
TuxCare:Ubuntu:18.04
before 4.15.0-246.257
4.15.0-246.257
linux-cloud-tools-4.15.0-246-tuxcare.els34
TuxCare:Ubuntu:18.04
before 4.15.0-246.257
4.15.0-246.257
linux-cloud-tools-4.15.0-246-tuxcare.els34-generic
TuxCare:Ubuntu:18.04
before 4.15.0-246.257
4.15.0-246.257
linux-cloud-tools-4.15.0-246-tuxcare.els34-lowlatency
TuxCare:Ubuntu:18.04
before 4.15.0-246.257
4.15.0-246.257
linux-cloud-tools-common
TuxCare:Ubuntu:18.04
before 4.15.0-246.257
4.15.0-246.257
linux-cloud-tools-generic
TuxCare:Ubuntu:18.04
before 4.15.0.246.257
4.15.0.246.257
Show 290 moreShow less
Affected packages
PackageAffectedFixed
linux-cloud-tools-lowlatency
TuxCare:Ubuntu:18.04
before 4.15.0.246.257
4.15.0.246.257
linux-crashdump
TuxCare:Ubuntu:18.04
before 4.15.0.246.257
4.15.0.246.257
linux-doc
TuxCare:Ubuntu:18.04
before 4.15.0-246.257
4.15.0-246.257
linux-generic
TuxCare:Ubuntu:18.04
before 4.15.0.246.257
4.15.0.246.257
linux-headers-4.15.0-246-tuxcare.els34
TuxCare:Ubuntu:18.04
before 4.15.0-246.257
4.15.0-246.257
linux-headers-4.15.0-246-tuxcare.els34-generic
TuxCare:Ubuntu:18.04
before 4.15.0-246.257
4.15.0-246.257
linux-headers-4.15.0-246-tuxcare.els34-lowlatency
TuxCare:Ubuntu:18.04
before 4.15.0-246.257
4.15.0-246.257
linux-headers-generic
TuxCare:Ubuntu:18.04
before 4.15.0.246.257
4.15.0.246.257
linux-headers-lowlatency
TuxCare:Ubuntu:18.04
before 4.15.0.246.257
4.15.0.246.257
linux-image-generic
TuxCare:Ubuntu:18.04
before 4.15.0.246.257
4.15.0.246.257
linux-image-lowlatency
TuxCare:Ubuntu:18.04
before 4.15.0.246.257
4.15.0.246.257
linux-image-unsigned-4.15.0-246-tuxcare.els34-generic
TuxCare:Ubuntu:18.04
before 4.15.0-246.257
4.15.0-246.257
linux-image-unsigned-4.15.0-246-tuxcare.els34-lowlatency
TuxCare:Ubuntu:18.04
before 4.15.0-246.257
4.15.0-246.257
linux-libc-dev
TuxCare:Ubuntu:18.04
before 4.15.0-246.257
4.15.0-246.257
linux-lowlatency
TuxCare:Ubuntu:18.04
before 4.15.0.246.257
4.15.0.246.257
linux-modules-4.15.0-246-tuxcare.els34-generic
TuxCare:Ubuntu:18.04
before 4.15.0-246.257
4.15.0-246.257
linux-modules-4.15.0-246-tuxcare.els34-lowlatency
TuxCare:Ubuntu:18.04
before 4.15.0-246.257
4.15.0-246.257
linux-modules-extra-4.15.0-246-tuxcare.els34-generic
TuxCare:Ubuntu:18.04
before 4.15.0-246.257
4.15.0-246.257
linux-source
TuxCare:Ubuntu:18.04
before 4.15.0.246.257
4.15.0.246.257
linux-source-4.15.0
TuxCare:Ubuntu:18.04
before 4.15.0-246.257
4.15.0-246.257
linux-tools-4.15.0-246-tuxcare.els34
TuxCare:Ubuntu:18.04
before 4.15.0-246.257
4.15.0-246.257
linux-tools-4.15.0-246-tuxcare.els34-generic
TuxCare:Ubuntu:18.04
before 4.15.0-246.257
4.15.0-246.257
linux-tools-4.15.0-246-tuxcare.els34-lowlatency
TuxCare:Ubuntu:18.04
before 4.15.0-246.257
4.15.0-246.257
linux-tools-common
TuxCare:Ubuntu:18.04
before 4.15.0-246.257
4.15.0-246.257
linux-tools-generic
TuxCare:Ubuntu:18.04
before 4.15.0.246.257
4.15.0.246.257
linux-tools-host
TuxCare:Ubuntu:18.04
before 4.15.0-246.257
4.15.0-246.257
linux-tools-lowlatency
TuxCare:Ubuntu:18.04
before 4.15.0.246.257
4.15.0.246.257
linux-buildinfo-4.15.0-246-tuxcare.els44-generic
TuxCare:Ubuntu:16.04
before 4.15.0-246.257~16.04.1
4.15.0-246.257~16.04.1
linux-buildinfo-4.15.0-246-tuxcare.els44-lowlatency
TuxCare:Ubuntu:16.04
before 4.15.0-246.257~16.04.1
4.15.0-246.257~16.04.1
linux-cloud-tools-4.15.0-246-tuxcare.els44-generic
TuxCare:Ubuntu:16.04
before 4.15.0-246.257~16.04.1
4.15.0-246.257~16.04.1
linux-cloud-tools-4.15.0-246-tuxcare.els44-lowlatency
TuxCare:Ubuntu:16.04
before 4.15.0-246.257~16.04.1
4.15.0-246.257~16.04.1
linux-headers-4.15.0-246-tuxcare.els44
TuxCare:Ubuntu:16.04
before 4.15.0-246.257~16.04.1
4.15.0-246.257~16.04.1
linux-headers-4.15.0-246-tuxcare.els44-generic
TuxCare:Ubuntu:16.04
before 4.15.0-246.257~16.04.1
4.15.0-246.257~16.04.1
linux-headers-4.15.0-246-tuxcare.els44-lowlatency
TuxCare:Ubuntu:16.04
before 4.15.0-246.257~16.04.1
4.15.0-246.257~16.04.1
linux-hwe-cloud-tools-4.15.0-246-tuxcare.els44
TuxCare:Ubuntu:16.04
before 4.15.0-246.257~16.04.1
4.15.0-246.257~16.04.1
linux-hwe-tools-4.15.0-246-tuxcare.els44
TuxCare:Ubuntu:16.04
before 4.15.0-246.257~16.04.1
4.15.0-246.257~16.04.1
linux-image-unsigned-4.15.0-246-tuxcare.els44-generic
TuxCare:Ubuntu:16.04
before 4.15.0-246.257~16.04.1
4.15.0-246.257~16.04.1
linux-image-unsigned-4.15.0-246-tuxcare.els44-lowlatency
TuxCare:Ubuntu:16.04
before 4.15.0-246.257~16.04.1
4.15.0-246.257~16.04.1
linux-modules-4.15.0-246-tuxcare.els44-generic
TuxCare:Ubuntu:16.04
before 4.15.0-246.257~16.04.1
4.15.0-246.257~16.04.1
linux-modules-4.15.0-246-tuxcare.els44-lowlatency
TuxCare:Ubuntu:16.04
before 4.15.0-246.257~16.04.1
4.15.0-246.257~16.04.1
linux-modules-extra-4.15.0-246-tuxcare.els44-generic
TuxCare:Ubuntu:16.04
before 4.15.0-246.257~16.04.1
4.15.0-246.257~16.04.1
linux-source-4.15.0
TuxCare:Ubuntu:16.04
before 4.15.0-246.257~16.04.1
4.15.0-246.257~16.04.1
linux-tools-4.15.0-246-tuxcare.els44-generic
TuxCare:Ubuntu:16.04
before 4.15.0-246.257~16.04.1
4.15.0-246.257~16.04.1
linux-tools-4.15.0-246-tuxcare.els44-lowlatency
TuxCare:Ubuntu:16.04
before 4.15.0-246.257~16.04.1
4.15.0-246.257~16.04.1
linux-buildinfo-4.4.0-273-tuxcare.els44-generic
TuxCare:Ubuntu:16.04
before 4.4.0-273.307
4.4.0-273.307
linux-buildinfo-4.4.0-273-tuxcare.els44-lowlatency
TuxCare:Ubuntu:16.04
before 4.4.0-273.307
4.4.0-273.307
linux-cloud-tools-4.4.0-273-tuxcare.els44
TuxCare:Ubuntu:16.04
before 4.4.0-273.307
4.4.0-273.307
linux-cloud-tools-4.4.0-273-tuxcare.els44-generic
TuxCare:Ubuntu:16.04
before 4.4.0-273.307
4.4.0-273.307
linux-cloud-tools-4.4.0-273-tuxcare.els44-lowlatency
TuxCare:Ubuntu:16.04
before 4.4.0-273.307
4.4.0-273.307
linux-cloud-tools-common
TuxCare:Ubuntu:16.04
before 4.4.0-273.307
4.4.0-273.307
linux-cloud-tools-generic
TuxCare:Ubuntu:16.04
before 4.4.0.273.307
4.4.0.273.307
linux-cloud-tools-lowlatency
TuxCare:Ubuntu:16.04
before 4.4.0.273.307
4.4.0.273.307
linux-crashdump
TuxCare:Ubuntu:16.04
before 4.4.0.273.307
4.4.0.273.307
linux-doc
TuxCare:Ubuntu:16.04
before 4.4.0-273.307
4.4.0-273.307
linux-generic
TuxCare:Ubuntu:16.04
before 4.4.0.273.307
4.4.0.273.307
linux-headers-4.4.0-273-tuxcare.els44
TuxCare:Ubuntu:16.04
before 4.4.0-273.307
4.4.0-273.307
linux-headers-4.4.0-273-tuxcare.els44-generic
TuxCare:Ubuntu:16.04
before 4.4.0-273.307
4.4.0-273.307
linux-headers-4.4.0-273-tuxcare.els44-lowlatency
TuxCare:Ubuntu:16.04
before 4.4.0-273.307
4.4.0-273.307
linux-headers-generic
TuxCare:Ubuntu:16.04
before 4.4.0.273.307
4.4.0.273.307
linux-headers-lowlatency
TuxCare:Ubuntu:16.04
before 4.4.0.273.307
4.4.0.273.307
Kernel
Linux
4.20.0 up to 5.4.287, 5.5.0 up to 5.10.231, 5.11.0 up to 5.15.174, 5.16.0 up to 6.1.120, 6.2.0 up to 6.6.64, 6.7.0 up to 6.11.11, 6.12.0 up to 6.12.2
5.4.2875.10.2315.15.1746.1.1206.6.646.11.116.12.2
linux
Debian:12
before 6.1.123-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 27 moreShow less
6.1.119-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1
6.1.123-1
linux
Debian:13
before 6.12.3-1
6.12.3-1
linux
Debian:14
before 6.12.3-1
6.12.3-1
linux
Debian:11
before 5.10.234-1, plus listed versions
5.10.103-15.10.103-1~bpo10+15.10.106-15.10.113-15.10.120-1
Show 39 moreShow less
5.10.120-1~bpo10+15.10.127-15.10.127-25.10.127-2~bpo10+15.10.136-15.10.140-15.10.148-15.10.149-15.10.149-25.10.158-15.10.158-25.10.162-15.10.178-15.10.178-25.10.178-35.10.179-15.10.179-25.10.179-35.10.179-45.10.179-55.10.191-15.10.197-15.10.205-15.10.205-25.10.209-15.10.209-25.10.216-15.10.218-15.10.221-15.10.223-15.10.226-15.10.46-45.10.46-55.10.70-15.10.70-1~bpo10+15.10.84-15.10.92-15.10.92-1~bpo10+15.10.92-2
5.10.234-1
linux-6.1
Debian:11
before 6.1.128-1~deb11u1, plus listed versions
6.1.106-3~deb11u16.1.106-3~deb11u26.1.106-3~deb11u36.1.112-1~deb11u16.1.119-1~deb11u1
6.1.128-1~deb11u1
kernel
openEuler:24.03-LTS-SP1
before 6.6.0-85.0.0.90.oe2403sp1
6.6.0-85.0.0.90.oe2403sp1
kernel
openEuler:24.03-LTS
before 6.6.0-87.0.0.82.oe2403
6.6.0-87.0.0.82.oe2403
kernel
openEuler:22.03-LTS-SP4
before 5.10.0-288.0.0.191.oe2203sp4
5.10.0-288.0.0.191.oe2203sp4
kernel
openEuler:22.03-LTS-SP3
before 5.10.0-288.0.0.190.oe2203sp3
5.10.0-288.0.0.190.oe2203sp3
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-64k-debug-devel
Red Hat:enterprise_linux:9::appstream
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-64k-debug-devel-matched
Red Hat:enterprise_linux:9::appstream
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-64k-debuginfo
Red Hat:enterprise_linux:9::appstream
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-64k-devel
Red Hat:enterprise_linux:9::appstream
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-64k-devel-matched
Red Hat:enterprise_linux:9::appstream
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-debug-devel
Red Hat:enterprise_linux:9::appstream
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-debug-devel-matched
Red Hat:enterprise_linux:9::appstream
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-debuginfo
Red Hat:enterprise_linux:9::appstream
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:9::appstream
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:9::appstream
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:9::appstream
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:9::appstream
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-devel
Red Hat:enterprise_linux:9::appstream
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-devel-matched
Red Hat:enterprise_linux:9::appstream
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-doc
Red Hat:enterprise_linux:9::appstream
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-rt-64k-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-rt-64k-debuginfo
Red Hat:enterprise_linux:9::appstream
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-rt-debuginfo
Red Hat:enterprise_linux:9::appstream
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-tools-debuginfo
Red Hat:enterprise_linux:9::appstream
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:9::appstream
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-zfcpdump-devel
Red Hat:enterprise_linux:9::appstream
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-zfcpdump-devel-matched
Red Hat:enterprise_linux:9::appstream
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
libperf-debuginfo
Red Hat:enterprise_linux:9::appstream
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
perf
Red Hat:enterprise_linux:9::appstream
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
perf-debuginfo
Red Hat:enterprise_linux:9::appstream
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
python3-perf
Red Hat:enterprise_linux:9::appstream
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
python3-perf-debuginfo
Red Hat:enterprise_linux:9::appstream
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
rtla
Red Hat:enterprise_linux:9::appstream
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
rv
Red Hat:enterprise_linux:9::appstream
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel
Red Hat:enterprise_linux:9::baseos
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-64k
Red Hat:enterprise_linux:9::baseos
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-64k-core
Red Hat:enterprise_linux:9::baseos
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-64k-debug
Red Hat:enterprise_linux:9::baseos
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-64k-debug-core
Red Hat:enterprise_linux:9::baseos
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:9::baseos
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-64k-debug-modules
Red Hat:enterprise_linux:9::baseos
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-64k-debug-modules-core
Red Hat:enterprise_linux:9::baseos
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-64k-debug-modules-extra
Red Hat:enterprise_linux:9::baseos
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-64k-debuginfo
Red Hat:enterprise_linux:9::baseos
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-64k-modules
Red Hat:enterprise_linux:9::baseos
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-64k-modules-core
Red Hat:enterprise_linux:9::baseos
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-64k-modules-extra
Red Hat:enterprise_linux:9::baseos
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-abi-stablelists
Red Hat:enterprise_linux:9::baseos
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-core
Red Hat:enterprise_linux:9::baseos
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-debug
Red Hat:enterprise_linux:9::baseos
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-debug-core
Red Hat:enterprise_linux:9::baseos
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-debug-debuginfo
Red Hat:enterprise_linux:9::baseos
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-debug-modules
Red Hat:enterprise_linux:9::baseos
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-debug-modules-core
Red Hat:enterprise_linux:9::baseos
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-debug-modules-extra
Red Hat:enterprise_linux:9::baseos
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-debug-uki-virt
Red Hat:enterprise_linux:9::baseos
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-debuginfo
Red Hat:enterprise_linux:9::baseos
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:9::baseos
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:9::baseos
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:9::baseos
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:9::baseos
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-modules
Red Hat:enterprise_linux:9::baseos
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-modules-core
Red Hat:enterprise_linux:9::baseos
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-modules-extra
Red Hat:enterprise_linux:9::baseos
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-rt-64k-debug-debuginfo
Red Hat:enterprise_linux:9::baseos
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-rt-64k-debuginfo
Red Hat:enterprise_linux:9::baseos
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:9::baseos
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-rt-debuginfo
Red Hat:enterprise_linux:9::baseos
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-tools
Red Hat:enterprise_linux:9::baseos
before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
before 6.4.0-150600.8.23.1
6.4.0-150600.8.23.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
before 6.4.0-150600.8.23.1
6.4.0-150600.8.23.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
before 6.4.0-150600.8.23.1
6.4.0-150600.8.23.1
kernel-azure
openSUSE:Leap 15.6
before 6.4.0-150600.8.23.1
6.4.0-150600.8.23.1
kernel-source-azure
openSUSE:Leap 15.6
before 6.4.0-150600.8.23.1
6.4.0-150600.8.23.1
kernel-syms-azure
openSUSE:Leap 15.6
before 6.4.0-150600.8.23.1
6.4.0-150600.8.23.1
kernel-livepatch-SLE15-SP6-RT_Update_7
SUSE:Linux Enterprise Live Patching 15 SP6
before 1-150600.1.3.1
1-150600.1.3.1
kernel-rt
SUSE:Real Time Module 15 SP6
before 6.4.0-150600.10.23.1
6.4.0-150600.10.23.1
kernel-rt_debug
SUSE:Real Time Module 15 SP6
before 6.4.0-150600.10.23.1
6.4.0-150600.10.23.1
kernel-source-rt
SUSE:Real Time Module 15 SP6
before 6.4.0-150600.10.23.1
6.4.0-150600.10.23.1
kernel-syms-rt
SUSE:Real Time Module 15 SP6
before 6.4.0-150600.10.23.1
6.4.0-150600.10.23.1
kernel-rt
openSUSE:Leap 15.6
before 6.4.0-150600.10.23.1
6.4.0-150600.10.23.1
kernel-rt_debug
openSUSE:Leap 15.6
before 6.4.0-150600.10.23.1
6.4.0-150600.10.23.1
kernel-source-rt
openSUSE:Leap 15.6
before 6.4.0-150600.10.23.1
6.4.0-150600.10.23.1
kernel-syms-rt
openSUSE:Leap 15.6
before 6.4.0-150600.10.23.1
6.4.0-150600.10.23.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP6
before 6.4.0-150600.23.33.1
6.4.0-150600.23.33.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP6
before 6.4.0-150600.23.33.1
6.4.0-150600.23.33.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP6
before 6.4.0-150600.23.33.1.150600.12.14.1
6.4.0-150600.23.33.1.150600.12.14.1
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP6
before 6.4.0-150600.23.33.1
6.4.0-150600.23.33.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP6
before 6.4.0-150600.23.33.1
6.4.0-150600.23.33.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP6
before 6.4.0-150600.23.33.1
6.4.0-150600.23.33.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP6
before 6.4.0-150600.23.33.1
6.4.0-150600.23.33.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP6
before 6.4.0-150600.23.33.1
6.4.0-150600.23.33.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP6
before 6.4.0-150600.23.33.1
6.4.0-150600.23.33.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP6
before 6.4.0-150600.23.33.1
6.4.0-150600.23.33.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP6
before 6.4.0-150600.23.33.1
6.4.0-150600.23.33.1
kernel-livepatch-SLE15-SP6_Update_7
SUSE:Linux Enterprise Live Patching 15 SP6
before 1-150600.13.3.1
1-150600.13.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP6
before 6.4.0-150600.23.33.1
6.4.0-150600.23.33.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP6
before 6.4.0-150600.23.33.1
6.4.0-150600.23.33.1
dtb-aarch64
openSUSE:Leap 15.6
before 6.4.0-150600.23.33.1
6.4.0-150600.23.33.1
kernel-64kb
openSUSE:Leap 15.6
before 6.4.0-150600.23.33.1
6.4.0-150600.23.33.1
kernel-debug
openSUSE:Leap 15.6
before 6.4.0-150600.23.33.1
6.4.0-150600.23.33.1
kernel-default
openSUSE:Leap 15.6
before 6.4.0-150600.23.33.1
6.4.0-150600.23.33.1
kernel-default-base
openSUSE:Leap 15.6
before 6.4.0-150600.23.33.1.150600.12.14.1
6.4.0-150600.23.33.1.150600.12.14.1
kernel-docs
openSUSE:Leap 15.6
before 6.4.0-150600.23.33.1
6.4.0-150600.23.33.1
kernel-kvmsmall
openSUSE:Leap 15.6
before 6.4.0-150600.23.33.1
6.4.0-150600.23.33.1
kernel-obs-build
openSUSE:Leap 15.6
before 6.4.0-150600.23.33.1
6.4.0-150600.23.33.1
kernel-obs-qa
openSUSE:Leap 15.6
before 6.4.0-150600.23.33.1
6.4.0-150600.23.33.1
kernel-source
openSUSE:Leap 15.6
before 6.4.0-150600.23.33.1
6.4.0-150600.23.33.1
kernel-syms
openSUSE:Leap 15.6
before 6.4.0-150600.23.33.1
6.4.0-150600.23.33.1
kernel-zfcpdump
openSUSE:Leap 15.6
before 6.4.0-150600.23.33.1
6.4.0-150600.23.33.1
kernel-coco
SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6
before 6.4.0-15061.12.coco15sp6.1
6.4.0-15061.12.coco15sp6.1
kernel-coco_debug
SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6
before 6.4.0-15061.12.coco15sp6.1
6.4.0-15061.12.coco15sp6.1
kernel-source-coco
SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6
before 6.4.0-15061.12.coco15sp6.1
6.4.0-15061.12.coco15sp6.1
kernel-syms-coco
SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6
before 6.4.0-15061.12.coco15sp6.1
6.4.0-15061.12.coco15sp6.1
kernel-rt
SUSE:Linux Enterprise Micro 5.5
before 5.14.21-150500.13.85.1
5.14.21-150500.13.85.1
kernel-source-rt
SUSE:Linux Enterprise Micro 5.5
before 5.14.21-150500.13.85.1
5.14.21-150500.13.85.1
kernel-default
SUSE:Linux Enterprise Micro 5.5
before 5.14.21-150500.55.94.1
5.14.21-150500.55.94.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.5
before 5.14.21-150500.55.94.1.150500.6.43.1
5.14.21-150500.55.94.1.150500.6.43.1
kernel-source
SUSE:Linux Enterprise Micro 5.5
before 5.14.21-150500.55.94.1
5.14.21-150500.55.94.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP5
before 5.14.21-150500.55.94.1
5.14.21-150500.55.94.1
kernel-livepatch-SLE15-SP5_Update_23
SUSE:Linux Enterprise Live Patching 15 SP5
before 1-150500.11.3.1
1-150500.11.3.1
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
before 5.14.21-150500.55.94.1
5.14.21-150500.55.94.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
before 5.14.21-150500.55.94.1
5.14.21-150500.55.94.1
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
before 5.14.21-150500.55.94.1.150500.6.43.1
5.14.21-150500.55.94.1.150500.6.43.1
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
before 5.14.21-150500.55.94.1
5.14.21-150500.55.94.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
before 5.14.21-150500.55.94.1
5.14.21-150500.55.94.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
before 5.14.21-150500.55.94.1
5.14.21-150500.55.94.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
before 5.14.21-150500.55.94.1
5.14.21-150500.55.94.1
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
before 5.14.21-150500.55.94.1
5.14.21-150500.55.94.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
before 5.14.21-150500.55.94.1
5.14.21-150500.55.94.1
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
before 5.14.21-150500.55.94.1.150500.6.43.1
5.14.21-150500.55.94.1.150500.6.43.1
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
before 5.14.21-150500.55.94.1
5.14.21-150500.55.94.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
before 5.14.21-150500.55.94.1
5.14.21-150500.55.94.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
before 5.14.21-150500.55.94.1
5.14.21-150500.55.94.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
before 5.14.21-150500.55.94.1
5.14.21-150500.55.94.1
kernel-64kb
SUSE:Linux Enterprise Server 15 SP5-LTSS
before 5.14.21-150500.55.94.1
5.14.21-150500.55.94.1
kernel-default
SUSE:Linux Enterprise Server 15 SP5-LTSS
before 5.14.21-150500.55.94.1
5.14.21-150500.55.94.1
kernel-default-base
SUSE:Linux Enterprise Server 15 SP5-LTSS
before 5.14.21-150500.55.94.1.150500.6.43.1
5.14.21-150500.55.94.1.150500.6.43.1
kernel-docs
SUSE:Linux Enterprise Server 15 SP5-LTSS
before 5.14.21-150500.55.94.1
5.14.21-150500.55.94.1
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP5-LTSS
before 5.14.21-150500.55.94.1
5.14.21-150500.55.94.1
kernel-source
SUSE:Linux Enterprise Server 15 SP5-LTSS
before 5.14.21-150500.55.94.1
5.14.21-150500.55.94.1
kernel-syms
SUSE:Linux Enterprise Server 15 SP5-LTSS
before 5.14.21-150500.55.94.1
5.14.21-150500.55.94.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 15 SP5-LTSS
before 5.14.21-150500.55.94.1
5.14.21-150500.55.94.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
before 5.14.21-150500.55.94.1
5.14.21-150500.55.94.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
before 5.14.21-150500.55.94.1.150500.6.43.1
5.14.21-150500.55.94.1.150500.6.43.1
kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
before 5.14.21-150500.55.94.1
5.14.21-150500.55.94.1
kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
before 5.14.21-150500.55.94.1
5.14.21-150500.55.94.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
before 5.14.21-150500.55.94.1
5.14.21-150500.55.94.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
before 5.14.21-150500.55.94.1
5.14.21-150500.55.94.1
kernel-default
SUSE:Linux Micro 6.0
before 6.4.0-25.1
6.4.0-25.1
kernel-default-base
SUSE:Linux Micro 6.0
before 6.4.0-24.1.21.4
6.4.0-24.1.21.4
kernel-kvmsmall
SUSE:Linux Micro 6.0
before 6.4.0-25.1
6.4.0-25.1
kernel-livepatch-MICRO-6-0_Update_5
SUSE:Linux Micro 6.0
before 1-1.2
1-1.2
kernel-source
SUSE:Linux Micro 6.0
before 6.4.0-25.1
6.4.0-25.1
kernel-livepatch-MICRO-6-0-RT_Update_5
SUSE:Linux Micro 6.0
before 1-1.1
1-1.1
linux-hwe-edge
Ubuntu:16.04:LTS
All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
None known
linux-aws-5.0
Ubuntu:18.04:LTS
All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
None known
linux-aws-5.3
Ubuntu:18.04:LTS
All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
None known
linux-aws-5.4
Ubuntu:Pro:18.04:LTS
before 5.4.0-1142.152~18.04.1, plus listed versions
5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2
5.4.0-1142.152~18.04.1
linux-azure
Ubuntu:18.04:LTS
All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
None known
linux-azure-5.3
Ubuntu:18.04:LTS
All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
None known
linux-azure-5.4
Ubuntu:Pro:18.04:LTS
before 5.4.0-1147.154~18.04.1, plus listed versions
5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1
Show 45 moreShow less
5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1
5.4.0-1147.154~18.04.1
linux-azure-edge
Ubuntu:18.04:LTS
All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
None known
linux-gcp
Ubuntu:18.04:LTS
All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
None known
linux-gcp-5.3
Ubuntu:18.04:LTS
All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
None known
linux-gcp-5.4
Ubuntu:Pro:18.04:LTS
before 5.4.0-1145.154~18.04.1, plus listed versions
5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2
5.4.0-1145.154~18.04.1
linux-gke-4.15
Ubuntu:18.04:LTS
All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
None known
linux-gke-5.4
Ubuntu:18.04:LTS
All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
None known
linux-hwe
Ubuntu:18.04:LTS
All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
None known
linux-hwe-5.4
Ubuntu:Pro:18.04:LTS
before 5.4.0-211.231~18.04.1, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 45 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1
5.4.0-211.231~18.04.1
linux-hwe-edge
Ubuntu:18.04:LTS
All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
None known
linux-ibm-5.4
Ubuntu:Pro:18.04:LTS
before 5.4.0-1090.95~18.04.1, plus listed versions
5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1
Show 45 moreShow less
5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1
5.4.0-1090.95~18.04.1
linux-oem
Ubuntu:18.04:LTS
All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
None known
linux-oracle-5.0
Ubuntu:18.04:LTS
All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
None known
linux-oracle-5.3
Ubuntu:18.04:LTS
All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
None known
linux-oracle-5.4
Ubuntu:Pro:18.04:LTS
before 5.4.0-1140.149~18.04.1, plus listed versions
5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1
5.4.0-1140.149~18.04.1
linux-raspi-5.4
Ubuntu:Pro:18.04:LTS
before 5.4.0-1129.142~18.04.1, plus listed versions
5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1
Show 45 moreShow less
5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1
5.4.0-1129.142~18.04.1
linux
Ubuntu:20.04:LTS
before 5.4.0-211.231, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 45 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110
5.4.0-211.231
linux-aws
Ubuntu:20.04:LTS
before 5.4.0-1142.152, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5
Show 45 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78
5.4.0-1142.152
linux-aws-5.15
Ubuntu:20.04:LTS
before 5.15.0-1080.87~20.04.1, plus listed versions
5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1
Show 45 moreShow less
5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1
5.15.0-1080.87~20.04.1
linux-azure
Ubuntu:20.04:LTS
before 5.4.0-1147.154, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8
Show 45 moreShow less
5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87
5.4.0-1147.154
linux-azure-5.15
Ubuntu:20.04:LTS
before 5.15.0-1086.95~20.04.1, plus listed versions
5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1
Show 45 moreShow less
5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1
5.15.0-1086.95~20.04.1
linux-bluefield
Ubuntu:20.04:LTS
before 5.4.0-1101.108, plus listed versions
5.4.0-1007.105.4.0-1011.145.4.0-1012.155.4.0-1013.165.4.0-1016.19
Show 45 moreShow less
5.4.0-1019.225.4.0-1020.235.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1030.335.4.0-1032.355.4.0-1035.385.4.0-1036.395.4.0-1040.445.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1049.555.4.0-1050.565.4.0-1054.605.4.0-1058.645.4.0-1059.655.4.0-1060.665.4.0-1062.685.4.0-1064.705.4.0-1065.715.4.0-1066.725.4.0-1068.745.4.0-1070.765.4.0-1071.775.4.0-1072.785.4.0-1073.795.4.0-1074.805.4.0-1075.815.4.0-1076.825.4.0-1077.835.4.0-1078.845.4.0-1079.855.4.0-1080.875.4.0-1081.885.4.0-1082.895.4.0-1083.905.4.0-1084.915.4.0-1085.92
5.4.0-1101.108
linux-gcp
Ubuntu:20.04:LTS
before 5.4.0-1145.154, plus listed versions
5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7
Show 45 moreShow less
5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1033.355.4.0-1034.375.4.0-1036.395.4.0-1037.405.4.0-1038.415.4.0-1040.435.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1044.475.4.0-1046.495.4.0-1049.535.4.0-1051.555.4.0-1052.565.4.0-1053.575.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1060.645.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1065.695.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1072.775.4.0-1073.785.4.0-1075.80
5.4.0-1145.154
linux-gcp-5.15
Ubuntu:20.04:LTS
before 5.15.0-1081.90~20.04.1, plus listed versions
5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2
Show 45 moreShow less
5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.15.15.0-1065.73~20.04.15.15.0-1066.74~20.04.15.15.0-1067.75~20.04.15.15.0-1068.76~20.04.15.15.0-1069.77~20.04.15.15.0-1070.78~20.04.15.15.0-1071.79~20.04.15.15.0-1072.80~20.04.15.15.0-1073.81~20.04.15.15.0-1074.83~20.04.1
5.15.0-1081.90~20.04.1
linux-hwe-5.15
Ubuntu:20.04:LTS
before 5.15.0-136.147~20.04.1, plus listed versions
5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
Show 45 moreShow less
5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1
5.15.0-136.147~20.04.1
linux-ibm
Ubuntu:20.04:LTS
before 5.4.0-1088.93, plus listed versions
5.4.0-1003.45.4.0-1004.55.4.0-1005.65.4.0-1006.75.4.0-1007.8
Show 45 moreShow less
5.4.0-1008.95.4.0-1010.115.4.0-1012.135.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1017.195.4.0-1018.205.4.0-1019.215.4.0-1020.225.4.0-1021.235.4.0-1023.255.4.0-1026.295.4.0-1028.325.4.0-1029.335.4.0-1031.355.4.0-1032.365.4.0-1033.375.4.0-1034.385.4.0-1036.415.4.0-1037.425.4.0-1040.455.4.0-1041.465.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1048.535.4.0-1049.545.4.0-1050.555.4.0-1051.565.4.0-1052.575.4.0-1053.585.4.0-1054.595.4.0-1056.615.4.0-1057.625.4.0-1058.635.4.0-1059.645.4.0-1060.655.4.0-1061.665.4.0-1063.685.4.0-1064.695.4.0-1065.705.4.0-1066.71
5.4.0-1088.93
linux-ibm-5.15
Ubuntu:20.04:LTS
before 5.15.0-1074.77~20.04.1, plus listed versions
5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1
Show 28 moreShow less
5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.15.15.0-1057.60~20.04.15.15.0-1058.61~20.04.15.15.0-1059.62~20.04.15.15.0-1060.63~20.04.15.15.0-1061.64~20.04.15.15.0-1062.65~20.04.15.15.0-1063.66~20.04.15.15.0-1064.67~20.04.15.15.0-1065.68~20.04.15.15.0-1066.69~20.04.15.15.0-1067.70~20.04.15.15.0-1068.71~20.04.15.15.0-1069.72~20.04.1
5.15.0-1074.77~20.04.1
linux-intel-iotg-5.15
Ubuntu:20.04:LTS
before 5.15.0-1077.83~20.04.1, plus listed versions
5.15.0-1003.5~20.04.15.15.0-1008.11~20.04.15.15.0-1010.14~20.04.15.15.0-1015.20~20.04.25.15.0-1016.21~20.04.1
Show 38 moreShow less
5.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1021.26~20.04.15.15.0-1023.28~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1030.35~20.04.15.15.0-1031.36~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1040.46~20.04.15.15.0-1043.49~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1060.66~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.25.15.0-1074.80~20.04.1
5.15.0-1077.83~20.04.1
linux-iot
Ubuntu:20.04:LTS
before 5.4.0-1048.51, plus listed versions
5.4.0-1001.35.4.0-1004.65.4.0-1005.75.4.0-1006.85.4.0-1009.11
Show 32 moreShow less
5.4.0-1010.125.4.0-1011.135.4.0-1012.145.4.0-1013.155.4.0-1014.165.4.0-1017.185.4.0-1018.195.4.0-1019.205.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1035.365.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1041.425.4.0-1042.435.4.0-1043.445.4.0-1044.455.4.0-1045.46
5.4.0-1048.51
linux-kvm
Ubuntu:20.04:LTS
before 5.4.0-1129.138, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1004.45.4.0-1006.6
Show 45 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1023.235.4.0-1024.245.4.0-1026.275.4.0-1028.295.4.0-1030.315.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1041.425.4.0-1044.465.4.0-1045.475.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1050.525.4.0-1051.535.4.0-1053.555.4.0-1054.565.4.0-1055.575.4.0-1056.585.4.0-1058.615.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1068.725.4.0-1070.755.4.0-1071.765.4.0-1073.78
5.4.0-1129.138
linux-lowlatency-hwe-5.15
Ubuntu:20.04:LTS
before 5.15.0-135.146~20.04.1, plus listed versions
5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
Show 45 moreShow less
5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.88~20.04.15.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.95~20.04.15.15.0-87.96~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-110.120~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1
5.15.0-135.146~20.04.1
linux-oracle
Ubuntu:20.04:LTS
before 5.4.0-1140.150, plus listed versions
5.3.0-1002.25.3.0-1007.85.3.0-1008.95.4.0-1005.55.4.0-1007.7
Show 45 moreShow less
5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1034.365.4.0-1035.385.4.0-1037.405.4.0-1038.415.4.0-1039.425.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1045.495.4.0-1046.505.4.0-1048.525.4.0-1049.535.4.0-1052.565.4.0-1053.575.4.0-1054.585.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1061.655.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1066.715.4.0-1067.725.4.0-1069.755.4.0-1070.765.4.0-1071.775.4.0-1073.795.4.0-1076.83
5.4.0-1140.150
linux-oracle-5.15
Ubuntu:20.04:LTS
before 5.15.0-1077.83~20.04.1, plus listed versions
5.15.0-1007.9~20.04.15.15.0-1013.17~20.04.15.15.0-1016.20~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.1
Show 45 moreShow less
5.15.0-1019.24~20.04.15.15.0-1021.27~20.04.15.15.0-1022.28~20.04.15.15.0-1025.31~20.04.25.15.0-1027.33~20.04.15.15.0-1029.35~20.04.15.15.0-1030.36~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1041.47~20.04.15.15.0-1042.48~20.04.15.15.0-1044.50~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1047.53~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1053.59~20.04.15.15.0-1054.60~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1074.80~20.04.1
5.15.0-1077.83~20.04.1
linux-raspi
Ubuntu:20.04:LTS
before 5.4.0-1129.142, plus listed versions
5.4.0-1007.75.4.0-1008.85.4.0-1011.115.4.0-1012.125.4.0-1013.13
Show 45 moreShow less
5.4.0-1015.155.4.0-1016.175.4.0-1018.205.4.0-1019.215.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1029.325.4.0-1030.335.4.0-1032.355.4.0-1033.365.4.0-1034.375.4.0-1035.385.4.0-1036.395.4.0-1038.415.4.0-1041.455.4.0-1042.465.4.0-1043.475.4.0-1044.485.4.0-1045.495.4.0-1046.505.4.0-1047.525.4.0-1048.535.4.0-1050.565.4.0-1052.585.4.0-1053.605.4.0-1055.625.4.0-1056.635.4.0-1058.655.4.0-1059.675.4.0-1060.685.4.0-1062.705.4.0-1065.755.4.0-1066.765.4.0-1068.785.4.0-1069.795.4.0-1070.805.4.0-1071.815.4.0-1073.845.4.0-1074.855.4.0-1077.885.4.0-1078.89
5.4.0-1129.142
linux-riscv-5.15
Ubuntu:20.04:LTS
before 5.15.0-1075.79~20.04.1, plus listed versions
5.15.0-1015.17~20.04.15.15.0-1017.19~20.04.15.15.0-1018.21~20.04.15.15.0-1019.22~20.04.15.15.0-1022.26~20.04.1
Show 45 moreShow less
5.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1029.33~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1032.36~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.25.15.0-1037.41~20.04.25.15.0-1038.42~20.04.25.15.0-1039.43~20.04.25.15.0-1040.44~20.04.35.15.0-1041.45~20.04.15.15.0-1043.47~20.04.15.15.0-1044.48~20.04.15.15.0-1045.49~20.04.15.15.0-1046.50~20.04.15.15.0-1047.51~20.04.15.15.0-1048.52~20.04.15.15.0-1049.53~20.04.25.15.0-1050.54~20.04.15.15.0-1051.55~20.04.15.15.0-1052.56~20.04.15.15.0-1053.57~20.04.15.15.0-1056.60~20.04.15.15.0-1057.61~20.04.15.15.0-1058.62~20.04.15.15.0-1059.63~20.04.15.15.0-1060.64~20.04.15.15.0-1061.65~20.04.15.15.0-1062.66~20.04.15.15.0-1063.67~20.04.15.15.0-1064.68~20.04.15.15.0-1065.69~20.04.15.15.0-1066.70~20.04.15.15.0-1067.71~20.04.15.15.0-1068.72~20.04.15.15.0-1069.73~20.04.15.15.0-1070.74~20.04.15.15.0-1071.75~20.04.15.15.0-1072.76~20.04.1
5.15.0-1075.79~20.04.1
linux-xilinx-zynqmp
Ubuntu:20.04:LTS
before 5.4.0-1060.64, plus listed versions
5.4.0-1020.245.4.0-1021.255.4.0-1022.265.4.0-1023.275.4.0-1024.28
Show 33 moreShow less
5.4.0-1025.295.4.0-1026.305.4.0-1027.315.4.0-1028.325.4.0-1029.335.4.0-1030.345.4.0-1031.355.4.0-1032.365.4.0-1033.375.4.0-1034.385.4.0-1035.395.4.0-1036.405.4.0-1037.415.4.0-1038.425.4.0-1039.435.4.0-1040.445.4.0-1041.455.4.0-1042.465.4.0-1043.475.4.0-1044.485.4.0-1045.495.4.0-1046.505.4.0-1047.515.4.0-1048.525.4.0-1049.535.4.0-1050.545.4.0-1051.555.4.0-1052.565.4.0-1053.575.4.0-1054.585.4.0-1055.595.4.0-1056.605.4.0-1058.62
5.4.0-1060.64
linux-aws-5.11
Ubuntu:20.04:LTS
All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
None known
linux-aws-5.13
Ubuntu:20.04:LTS
All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
None known
linux-aws-5.8
Ubuntu:20.04:LTS
All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
None known
linux-azure-5.11
Ubuntu:20.04:LTS
All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
None known
linux-azure-5.13
Ubuntu:20.04:LTS
All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
None known
linux-azure-5.8
Ubuntu:20.04:LTS
All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
None known
linux-azure-fde
Ubuntu:20.04:LTS
All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
None known
linux-gcp-5.11
Ubuntu:20.04:LTS
All versions, plus listed versions
5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1
Show 7 moreShow less
5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3
None known
linux-gcp-5.13
Ubuntu:20.04:LTS
All versions, plus listed versions
5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1
Show 8 moreShow less
5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1
None known
linux-gcp-5.8
Ubuntu:20.04:LTS
All versions, plus listed versions
5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41
None known
linux-gke
Ubuntu:20.04:LTS
All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
None known
linux-gke-5.15
Ubuntu:20.04:LTS
All versions, plus listed versions
5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1
Show 13 moreShow less
5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1
None known
linux-gkeop
Ubuntu:20.04:LTS
All versions, plus listed versions
5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13
Show 45 moreShow less
5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77
None known
linux-gkeop-5.15
Ubuntu:20.04:LTS
All versions, plus listed versions
5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2
Show 40 moreShow less
5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1
None known
linux-hwe-5.11
Ubuntu:20.04:LTS
All versions, plus listed versions
5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1
Show 7 moreShow less
5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1
None known
linux-hwe-5.13
Ubuntu:20.04:LTS
All versions, plus listed versions
5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1
Show 11 moreShow less
5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1
None known
linux-hwe-5.8
Ubuntu:20.04:LTS
All versions, plus listed versions
5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1
Show 16 moreShow less
5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1
None known
linux-intel-5.13
Ubuntu:20.04:LTS
All versions, plus listed versions
5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19
None known
linux-nvidia-tegra-5.15
Ubuntu:Pro:20.04:LTS
before 5.15.0-1039.39~20.04.1, plus listed versions
5.15.0-1009.9~20.04.15.15.0-1010.10~20.04.15.15.0-1012.12~20.04.15.15.0-1014.14~20.04.15.15.0-1015.15~20.04.1
Show 10 moreShow less
5.15.0-1016.16~20.04.15.15.0-1017.17~20.04.15.15.0-1018.18~20.04.15.15.0-1019.19~20.04.15.15.0-1020.20~20.04.15.15.0-1022.22~20.04.15.15.0-1025.25~20.04.15.15.0-1027.27~20.04.15.15.0-1030.30~20.04.15.15.0-1032.32~20.04.1
5.15.0-1039.39~20.04.1
linux-oem-5.10
Ubuntu:20.04:LTS
All versions, plus listed versions
5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17
Show 21 moreShow less
5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61
None known
linux-oem-5.13
Ubuntu:20.04:LTS
All versions, plus listed versions
5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21
Show 7 moreShow less
5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36
None known
linux-oem-5.14
Ubuntu:20.04:LTS
All versions, plus listed versions
5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10
Show 30 moreShow less
5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67
None known
linux-oem-5.6
Ubuntu:20.04:LTS
All versions, plus listed versions
5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13
Show 24 moreShow less
5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60
None known
linux-oracle-5.11
Ubuntu:20.04:LTS
All versions, plus listed versions
5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
None known

History

History
RecordedChangedSources
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-53174 is a high vulnerability (CVSS 7.8) in Linux, published December 27, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.26%, the 17th percentile. Fixed in linux-lts 6.1.120-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 357 package rows, 718 versions, 5,122 references and the rest of 39 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 14 source records.

MoveEnter Open