CVE-2025-21883

ice: Fix deinitializing VF in error path

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

ice: Fix deinitializing VF in error path

If ice_ena_vfs() fails after calling ice_create_vf_entries(), it frees all VFs without removing them from snapshot PF-VF mailbox list, leading to list corruption.

Reproducer: devlink dev eswitch set $PF1_PCI mode switchdev ip l s $PF1 up ip l s $PF1 promisc on sleep 1 echo 1 > /sys/class/net/$PF1/device/sriov_numvfs sleep 1 echo 1 > /sys/class/net/$PF1/device/sriov_numvfs

Trace (minimized): list_add corruption. next->prev should be prev (ffff8882e241c6f0), but was 0000000000000000. (next=ffff888455da1330). kernel BUG at lib/list_debug.c:29! RIP: 0010:__list_add_valid_or_report+0xa6/0x100 ice_mbx_init_vf_info+0xa7/0x180 [ice] ice_initialize_vf_entry+0x1fa/0x250 [ice] ice_sriov_configure+0x8d7/0x1520 [ice] ? __percpu_ref_switch_mode+0x1b1/0x5d0 ? __pfx_ice_sriov_configure+0x10/0x10 [ice]

Sometimes a KASAN report can be seen instead with a similar stack trace: BUG: KASAN: use-after-free in __list_add_valid_or_report+0xf1/0x100

VFs are added to this list in ice_mbx_init_vf_info(), but only removed in ice_free_vfs(). Move the removing to ice_free_vf_entries(), which is also being called in other places where VFs are being removed (including ice_free_vfs() itself).

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.21%Up 0.2 points since Mar 28, 2025

What each source reports

NVD Score used 7.8

In the Linux kernel, the following vulnerability has been resolved:

ice: Fix deinitializing VF in error path

If ice_ena_vfs() fails after calling ice_create_vf_entries(), it frees all VFs without removing them from snapshot PF-VF mailbox list, leading to list corruption.

Sometimes a KASAN report can be seen instead with a similar stack trace: BUG: KASAN: use-after-free in __list_add_valid_or_report+0xf1/0x100

Record: CVE-2025-21883
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-416
Updated: 2026-11-02

CVE List No score

ice: Fix deinitializing VF in error path

In the Linux kernel, the following vulnerability has been resolved:

ice: Fix deinitializing VF in error path

If ice_ena_vfs() fails after calling ice_create_vf_entries(), it frees all VFs without removing them from snapshot PF-VF mailbox list, leading to list corruption.

Sometimes a KASAN report can be seen instead with a similar stack trace: BUG: KASAN: use-after-free in __list_add_valid_or_report+0xf1/0x100

Record: CVE-2025-21883
Updated: 2026-11-02

EUVDEUVD-2025-8478 No score

In the Linux kernel, the following vulnerability has been resolved:

ice: Fix deinitializing VF in error path

If ice_ena_vfs() fails after calling ice_create_vf_entries(), it frees all VFs without removing them from snapshot PF-VF mailbox list, leading to list corruption.

Sometimes a KASAN report can be seen instead with a similar stack trace: BUG: KASAN: use-after-free in __list_add_valid_or_report+0xf1/0x100

Record: EUVD-2025-8478
Updated: 2026-11-02

GitHub AdvisoriesGHSA-957j-8wc9-pfwx 7.8

In the Linux kernel, the following vulnerability has been resolved: ice: Fix deinitializing VF...

In the Linux kernel, the following vulnerability has been resolved:

ice: Fix deinitializing VF in error path

If ice_ena_vfs() fails after calling ice_create_vf_entries(), it frees all VFs without removing them from snapshot PF-VF mailbox list, leading to list corruption.

Sometimes a KASAN report can be seen instead with a similar stack trace: BUG: KASAN: use-after-free in __list_add_valid_or_report+0xf1/0x100

Record: GHSA-957j-8wc9-pfwx
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-416
Updated: 2026-11-02

OSVBELL-CVE-2025-21883 7.8

Record: BELL-CVE-2025-21883
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2025-21883 7.8

In the Linux kernel, the following vulnerability has been resolved: ice: Fix deinitializing VF in error path If ice_ena_vfs() fails after calling ice_create_vf_entries(), it frees all VFs without removing them from snapshot PF-VF mailbox list, leading to list corruption. Reproducer: devlink dev eswitch set $PF1_PCI mode switchdev ip l s $PF1 up ip l s $PF1 promisc on sleep 1 echo 1 > /sys/class/net/$PF1/device/sriov_numvfs sleep 1 echo 1 > /sys/class/net/$PF1/device/sriov_numvfs Trace (minimized): list_add corruption. next->prev should be prev (ffff8882e241c6f0), but was 0000000000000000. (next=ffff888455da1330). kernel BUG at lib/list_debug.c:29! RIP: 0010:__list_add_valid_or_report+0xa6/0x100 ice_mbx_init_vf_info+0xa7/0x180 [ice] ice_initialize_vf_entry+0x1fa/0x250 [ice] ice_sriov_configure+0x8d7/0x1520 [ice] ? __percpu_ref_switch_mode+0x1b1/0x5d0 ? __pfx_ice_sriov_configure+0x10/0x10 [ice] Sometimes a KASAN report can be seen instead with a similar stack trace: BUG: KASAN: use-after-free in __list_add_valid_or_report+0xf1/0x100 VFs are added to this list in ice_mbx_init_vf_info(), but only removed in ice_free_vfs(). Move the removing to ice_free_vf_entries(), which is also being called in other places where VFs are being removed (including ice_free_vfs() itself).

Record: DEBIAN-CVE-2025-21883
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 36 moreShow less

OSVOESA-2025-1446 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans

There is a kernel API ntb_mw_clear_trans() would pass 0 to both addr and size. This would make xlate_pos negative.

[ 23.734156] switchtec switchtec0: MW 0: part 0 addr 0x0000000000000000 size 0x0000000000000000 [ 23.734158] ================================================================================ [ 23.734172] UBSAN: shift-out-of-bounds in drivers/ntb/hw/mscc/ntb_hw_switchtec.c:293:7 [ 23.734418] shift exponent -1 is negative

Ensuring xlate_pos is a positive or zero before BIT.(CVE-2023-53034)

In the Linux kernel, the following vulnerability has been resolved:

drm/msm/gem: prevent integer overflow in msm_ioctl_gem_submit()

The "submit->cmd[i].size" and "submit->cmd[i].offset" variables are u32 values that come from the user via the submit_lookup_cmds() function. This addition could lead to an integer wrapping bug so use size_add() to prevent that.

Patchwork: https://patchwork.freedesktop.org/patch/624696/(CVE-2024-52559)

In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: Mark inode as bad as soon as error detected in mi_enum_attr()

Extended the mi_enum_attr() function interface with an additional parameter, struct ntfs_inode *ni, to allow marking the inode as bad as soon as an error is detected.(CVE-2024-52560)

In the Linux kernel, the following vulnerability has been resolved:

crypto: qat/qat_4xxx - fix off by one in uof_get_name()

The fw_objs[] array has "num_objs" elements so the > needs to be >= to prevent an out of bounds read.(CVE-2024-53162)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix use-after-free of signing key

Customers have reported use-after-free in @ses->auth_key.response with SMB2.1 + sign mounts which occurs due to following race:

task A task B cifs_mount() dfs_mount_share() get_session() cifs_mount_get_session() cifs_send_recv() cifs_get_smb_ses() compound_send_recv() cifs_setup_session() smb2_setup_request() kfree_sensitive() smb2_calc_signature() crypto_shash_setkey() UAF

Fix this by ensuring that we have a valid @ses->auth_key.response by checking whether @ses->ses_status is SES_GOOD or SES_EXITING with @ses->ses_lock held. After commit 24a9799aa8ef ("smb: client: fix UAF in smb2_reconnect_server()"), we made sure to call ->logoff() only when @ses was known to be good (e.g. valid ->auth_key.response), so it's safe to access signing key when @ses->ses_status == SES_EXITING.(CVE-2024-53179)

In the Linux kernel, the following vulnerability has been resolved:

scsi: ufs: bsg: Set bsg_queue to NULL after removal

Currently, this does not cause any issues, but I believe it is necessary to set bsg_queue to NULL after removing it to prevent potential use-after-free (UAF) access.(CVE-2024-54458)

In the Linux kernel, the following vulnerability has been resolved:

KVM: x86: Play nice with protected guests in complete_hypercall_exit()

Use is_64_bit_hypercall() instead of is_64_bit_mode() to detect a 64-bit hypercall when completing said hypercall. For guests with protected state, e.g. SEV-ES and SEV-SNP, KVM must assume the hypercall was made in 64-bit mode as the vCPU state needed to detect 64-bit mode is unavailable.

Hacking the sev_smoke_test selftest to generate a KVM_HC_MAP_GPA_RANGE hypercall via VMGEXIT trips the WARN:

------------[ cut here ]------------ WARNING: CPU: 273 PID: 326626 at arch/x86/kvm/x86.h:180 complete_hypercall_exit+0x44/0xe0 [kvm] Modules linked in: kvm_amd kvm ... [last unloaded: kvm] CPU: 273 UID: 0 PID: 326626 Comm: sev_smoke_test Not tainted 6.12.0-smp--392e932fa0f3-feat…

Record: OESA-2025-1446
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2025-1450 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans

There is a kernel API ntb_mw_clear_trans() would pass 0 to both addr and size. This would make xlate_pos negative.

Ensuring xlate_pos is a positive or zero before BIT.(CVE-2023-53034)

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix to shrink read extent node in batches

We use rwlock to protect core structure data of extent tree during its shrink, however, if there is a huge number of extent nodes in extent tree, during shrink of extent tree, it may hold rwlock for a very long time, which may trigger kernel hang issue.

This patch fixes to shrink read extent node in batches, so that, critical region of the rwlock can be shrunk to avoid its extreme long time hold.(CVE-2024-41935)

In the Linux kernel, the following vulnerability has been resolved:

vrf: revert "vrf: Remove unnecessary RCU-bh critical section"

This reverts commit 504fc6f4f7f681d2a03aa5f68aad549d90eab853.

dev_queue_xmit_nit is expected to be called with BH disabled. __dev_queue_xmit has the following:

    /* Disable soft irqs for various locks below. Also
     * stops preemption for RCU.
     */
    rcu_read_lock_bh();

VRF must follow this invariant. The referenced commit removed this protection. Which triggered a lockdep warning:

================================
WARNING: inconsistent lock state
6.11.0 #1 Tainted: G        W
--------------------------------
inconsistent {IN-SOFTIRQ-W} -&gt; {SOFTIRQ-ON-W} usage.
btserver/134819 [HC0[0]:SC0[0]:HE1:SE1] takes:
ffff8882da30c118 (rlock-AF_PACKET){+.?.}-{2:2}, at: tpacket_rcv+0x863/0x3b30
{IN-SOFTIRQ-W} state was registered at:
  lock_acquire+0x19a/0x4f0
  _raw_spin_lock+0x27/0x40
  packet_rcv+0xa33/0x1320
  __netif_receive_skb_core.constprop.0+0xcb0/0x3a90
  __netif_receive_skb_list_core+0x2c9/0x890
  netif_receive_skb_list_internal+0x610/0xcc0
      [...]

other info that might help us debug this:
 Possible unsafe locking scenario:

       CPU0
       ----
  lock(rlock-AF_PACKET);
  &lt;Interrupt&gt;
    lock(rlock-AF_PACKET);

 *** DEADLOCK ***

Call Trace:
 &lt;TASK&gt;
 dump_stack_lvl+0x73/0xa0
 mark_lock+0x102e/0x16b0
 __lock_acquire+0x9ae/0x6170
 lock_acquire+0x19a/0x4f0
 _raw_spin_lock+0x27/0x40
 tpacket_rcv+0x863/0x3b30
 dev_queue_xmit_nit+0x709/0xa40
 vrf_finish_direct+0x26e/0x340 [vrf]
 vrf_l3_out+0x5f4/0xe80 [vrf]
 __ip_local_out+0x51e/0x7a0
      [...](CVE-2024-49980)

In the Linux kernel, the following vulnerability has been resolved:

drm/msm/gem: prevent integer overflow in msm_ioctl_gem_submit()

Patchwork: https://patchwork.freedesktop.org/patch/624696/(CVE-2024-52559)

In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: Mark inode as bad as soon as error detected in mi_enum_attr()

Extended the mi_enum_attr() function interface with an additional parameter, struct ntfs_inode *ni, to allow marking the inode as bad as soon as an error is detected.(CVE-2024-52560)

In the Linux kernel, the following vulnerability has been resolved:

crypto: qat/qat_4xxx - fix off by one in uof_get_name()

The fw_objs[] array has "num_objs" elements so the > needs to be >= to…

Record: OESA-2025-1450
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2025:9302 7.1

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:9302
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2025:9896 7.1

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:9896
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVRLSA-2025:9302 7.1

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: ice: Fix deinitializing VF in error path (CVE-2025-21883)
kernel: sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CVE-2025-21919)
kernel: ibmvnic: Use kernel helpers for hex dumps (CVE-2025-22104)
kernel: ext4: fix off-by-one error in do_split (CVE-2025-23150)
kernel: ext4: ignore xattrs past end (CVE-2025-37738)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2025:9302
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2025-21883 7.8

Record: UBUNTU-CVE-2025-21883
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVALSA-2025:9302 No score

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: ice: Fix deinitializing VF in error path (CVE-2025-21883)
kernel: sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CVE-2025-21919)
kernel: ibmvnic: Use kernel helpers for hex dumps (CVE-2025-22104)
kernel: ext4: fix off-by-one error in do_split (CVE-2025-23150)
kernel: ext4: ignore xattrs past end (CVE-2025-37738)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2025:9302
Updated: 2026-11-02

OSVALSA-2025:9896 No score

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: ice: Fix deinitializing VF in error path (CVE-2025-21883)
kernel: eth: bnxt: fix truesize for mb-xdp-pass case (CVE-2025-21961)
kernel: ibmvnic: Use kernel helpers for hex dumps (CVE-2025-22104)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2025:9896
Updated: 2026-11-02

OSV No score

ice: Fix deinitializing VF in error path

In the Linux kernel, the following vulnerability has been resolved:

ice: Fix deinitializing VF in error path

If ice_ena_vfs() fails after calling ice_create_vf_entries(), it frees all VFs without removing them from snapshot PF-VF mailbox list, leading to list corruption.

Sometimes a KASAN report can be seen instead with a similar stack trace: BUG: KASAN: use-after-free in __list_add_valid_or_report+0xf1/0x100

Record: CVE-2025-21883
Updated: 2026-11-02

OSVROOT-OS-UBUNTU-2404-CVE-2025-21883 No score

CVE-2025-21883 in linux - Patched by Root

Root has patched CVE-2025-21883 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record: ROOT-OS-UBUNTU-2404-CVE-2025-21883
Updated: 2026-11-02

OSVSUSE-SU-2025:01919-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
CVE-2024-43869: perf: Fix hang while freeing sigtrap event (bsc#1229491).
CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
CVE-2024-49940: l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
CVE-2024-50162: bpf: selftests: send packet to devmap redirect XDP (bsc#1233075).
CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098).
CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (bsc#1234154).
CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086). -…

Record: SUSE-SU-2025:01919-1
Updated: 2026-11-02

OSVSUSE-SU-2025:01951-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
CVE-2024-49570: drm/xe/tracing: Fix a potential TP_printk UAF (bsc#1238782).
CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
CVE-2024-57974: udp: Deal with race between UDP socket address change and rehash (bsc#1238532).
CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
CVE-2024-58019: nvkm/gsp: correctly advance the read pointer of GSP message queue (bsc#1238997).
CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
CVE-2024-58074: drm/i915: Grab intel_display from the encoder to avoid potential (bsc#1238972).
CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036).
CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510). -…

Record: SUSE-SU-2025:01951-1
Updated: 2026-11-02

OSVSUSE-SU-2025:01967-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
CVE-2024-49570: drm/xe/tracing: Fix a potential TP_printk UAF (bsc#1238782).
CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
CVE-2024-57974: udp: Deal with race between UDP socket address change and rehash (bsc#1238532).
CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
CVE-2024-58019: nvkm/gsp: correctly advance the read pointer of GSP message queue (bsc#1238997).
CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
CVE-2024-58074: drm/i915: Grab intel_display from the encoder to avoid potential (bsc#1238972).
CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036).
CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510). -…

Record: SUSE-SU-2025:01967-1
Updated: 2026-11-02

OSVSUSE-SU-2025:1177-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
CVE-2024-49940: kABI fix for l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
CVE-2024-56702: bpf: Add tracepoints with null-able arguments (bsc#1235501).
CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
CVE-2024-57974: udp: Deal with race between UDP socket address change and rehash (bsc#1238532).
CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076).
CVE-2024-58012: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (bsc#1239104).
CVE-2024-58019: nvkm/gsp: correctly advance the read pointer of GSP message queue (bsc#1238997).
CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036).
CVE-2025-21635: rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy (bsc#1236111).
CVE-2025-21659: netdev: prevent accessing NAPI instances from another namespace (bsc#1236206).
CVE-2025-21693: mm: zswap: properly synchronize freeing resources during CPU hotunplug (bsc#1237029).
CVE-2025-21701: net: avoid race between device unregistration and ethnl ops (bsc#1237164).
CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
CVE-2025-21706: mptcp: pm: only set fullmesh for subflow endp (bsc#1238528).
CVE-2025-21739: kABI: ufshcd: add ufshcd_dealloc_host back (bsc#1238506).
CVE-2025-21753: btrfs: fix use-after-free when attempting to join an aborted transaction (bsc#1237875).
CVE-2025-21759: ipv6: mcast: extend RCU protection in igmp6_send() (bsc#1238738).
CVE-2025-21760: ndisc: extend RCU protection in ndisc_send_skb() (bsc#1238763).
CVE-2025-21761: openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (bsc#1238775).
CVE-2025-21762: arp: use RCU protection in arp_xmit() (bsc#1238780).
CVE-2025-21763:…

Record: SUSE-SU-2025:1177-1
Updated: 2026-11-02

OSVSUSE-SU-2025:1178-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
CVE-2024-49940: kABI fix for l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
CVE-2024-56702: bpf: Add tracepoints with null-able arguments (bsc#1235501).
CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
CVE-2024-57974: udp: Deal with race between UDP socket address change and rehash (bsc#1238532).
CVE-2024-57979: kABI workaround for pps changes (bsc#1238521).
CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076).
CVE-2024-58012: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (bsc#1239104).
CVE-2024-58019: nvkm/gsp: correctly advance the read pointer of GSP message queue (bsc#1238997).
CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036).
CVE-2025-21635: rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy (bsc#1236111).
CVE-2025-21659: netdev: prevent accessing NAPI instances from another namespace (bsc#1236206).
CVE-2025-21693: mm: zswap: properly synchronize freeing resources during CPU hotunplug (bsc#1237029).
CVE-2025-21701: net: avoid race between device unregistration and ethnl ops (bsc#1237164).
CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
CVE-2025-21706: mptcp: pm: only set fullmesh for subflow endp (bsc#1238528).
CVE-2025-21733: tracing/osnoise: Fix resetting of tracepoints (bsc#1238494).
CVE-2025-21739: kABI: ufshcd: add ufshcd_dealloc_host back (bsc#1238506).
CVE-2025-21753: btrfs: fix use-after-free when attempting to join an aborted transaction (bsc#1237875).
CVE-2025-21754: btrfs: fix assertion failure when splitting ordered extent after transaction abort (bsc#1238496).
CVE-2025-21759: ipv6: mcast: extend RCU protection in igmp6_send() (bsc#1238738). -…

Record: SUSE-SU-2025:1178-1
Updated: 2026-11-02

OSVSUSE-SU-2025:1180-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
CVE-2024-49940: kABI fix for l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
CVE-2024-56702: bpf: Add tracepoints with null-able arguments (bsc#1235501).
CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
CVE-2024-57974: udp: Deal with race between UDP socket address change and rehash (bsc#1238532).
CVE-2024-57979: kABI workaround for pps changes (bsc#1238521).
CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076).
CVE-2024-58012: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (bsc#1239104).
CVE-2024-58019: nvkm/gsp: correctly advance the read pointer of GSP message queue (bsc#1238997).
CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036).
CVE-2025-21635: rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy (bsc#1236111).
CVE-2025-21659: netdev: prevent accessing NAPI instances from another namespace (bsc#1236206).
CVE-2025-21693: mm: zswap: properly synchronize freeing resources during CPU hotunplug (bsc#1237029).
CVE-2025-21701: net: avoid race between device unregistration and ethnl ops (bsc#1237164).
CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
CVE-2025-21706: mptcp: pm: only set fullmesh for subflow endp (bsc#1238528).
CVE-2025-21733: tracing/osnoise: Fix resetting of tracepoints (bsc#1238494).
CVE-2025-21739: kABI: ufshcd: add ufshcd_dealloc_host back (bsc#1238506).
CVE-2025-21753: btrfs: fix use-after-free when attempting to join an aborted transaction (bsc#1237875).
CVE-2025-21754: btrfs: fix assertion failure when splitting ordered extent after transaction abort (bsc#1238496).
CVE-2025-21759: ipv6: mcast: extend RCU protection in igmp6_send() (bsc#1238738). -…

Record: SUSE-SU-2025:1180-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20190-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
CVE-2024-49940: kABI fix for l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
CVE-2024-56647: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435).
CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
CVE-2024-56702: bpf: Add tracepoints with null-able arguments (bsc#1235501).
CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn…

Record: SUSE-SU-2025:20190-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20192-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
CVE-2024-27415: netfilter: br_netfilter: skip conntrack input hook for promisc packets (bsc#1224757).
CVE-2024-35910: kABI fix for tcp: properly terminate timers for kernel sockets (bsc#1224489).
CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
CVE-2024-49940: l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
CVE-2024-56640: net/smc: fix LGR and link use-after-free…

Record: SUSE-SU-2025:20192-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20260-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
CVE-2024-49940: kABI fix for l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
CVE-2024-56647: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435).
CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
CVE-2024-56702: bpf: Add tracepoints with null-able arguments (bsc#1235501).
CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn…

Record: SUSE-SU-2025:20260-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20270-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
CVE-2024-27415: netfilter: br_netfilter: skip conntrack input hook for promisc packets (bsc#1224757).
CVE-2024-35910: kABI fix for tcp: properly terminate timers for kernel sockets (bsc#1224489).
CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
CVE-2024-49940: l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
CVE-2024-56640: net/smc: fix LGR and link use-after-free…

Record: SUSE-SU-2025:20270-1
Updated: 2026-11-02

OSVUSN-7521-1 No score

linux, linux-azure, linux-azure-6.11, linux-gcp, linux-gcp-6.11, linux-hwe-6.11, linux-oem-6.11, linux-raspi, linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Serial ATA and Parallel ATA drivers;
Drivers core;
Network block device driver;
Bluetooth drivers;
Character device driver;
TPM device driver;
Clock framework and drivers;
Hardware crypto device drivers;
FireWire subsystem;
EFI core;
Qualcomm firmware drivers;
GPIO subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
I3C subsystem;
InfiniBand drivers;
Input Device (Mouse) drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
NVIDIA Tegra memory controller driver;
Fastrpc Driver;
Network drivers;
Operating Performance Points (OPP) driver;
PCI subsystem;
x86 platform drivers;
PPS (Pulse Per Second) driver;
PTP clock framework;
Remote Processor subsystem;
Real Time Clock drivers;
S/390 drivers;
SCSI subsystem;
QCOM SoC drivers;
SPI subsystem;
Media staging drivers;
Trusted Execution Environment drivers;
TTY drivers;
UFS subsystem;
USB Device Class drivers;
USB core drivers;
USB Gadget drivers;
USB Host Controller drivers;
Framebuffer layer;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
Overlay file system;
SMB network file system;
UBI file system;
BPF subsystem;
Timer subsystem;
KVM subsystem;
Networking core;
ptr_ring data structure definitions;
Networking subsytem;
Amateur Radio drivers;
L3 Master device support module;
TCP network protocol;
XFRM subsystem;
Tracing infrastructure;
io_uring subsystem;
Process Accounting mechanism;
Perf events;
Padata parallel execution mechanism;
printk logging mechanism;
Scheduler infrastructure;
Workqueue subsystem;
Memory management;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
NFC subsystem;
Open vSwitch;
Rose network layer;
RxRPC session sockets;
Network traffic control;
Wireless networking;
Key management;
Landlock security;
Linux Security Modules (LSM) Framework;
Tomoyo security module;
SoC audio core drivers;
SOF drivers; (CVE-2025-21737, CVE-2025-21711, CVE-2025-21987, CVE-2025-21848, CVE-2024-49570, CVE-2025-21762, CVE-2025-21738, CVE-2025-21712, CVE-2025-21719, CVE-2025-21870, CVE-2024-57984, CVE-2025-21815, CVE-2025-21744, CVE-2024-58058, CVE-2024-58078, CVE-2024-57990, CVE-2024-54458, CVE-2025-21899, CVE-2025-21814, CVE-2025-21746, CVE-2024-54456, CVE-2025-21739, CVE-2024-58057, CVE-2025-21855, CVE-2025-21758, CVE-2024-58006, CVE-2024-58007, CVE-2025-21720, CVE-2024-58090, CVE-2025-21852, CVE-2024-57982, CVE-2024-58013, CVE-2024-58082, CVE-2025-21825, CVE-2024-58072, CVE-2024-57996, CVE-2025-21787, CVE-2025-21742, CVE-2025-21705, CVE-2025-21829, CVE-2024-58060, CVE-2025-21811, CVE-2025-21900, CVE-2025-21853, CVE-2025-21809, CVE-2025-21938, CVE-2025-21728, CVE-2025-21785, CVE-2025-21732, CVE-2025-21888, CVE-2025-21768, CVE-2025-21875, CVE-2025-21721, CVE-2025-21766, CVE-2025-21892, CVE-2024-57953, CVE-2025-21772, CVE-2025-21735, CVE-2024-58017, CVE-2024-58086, CVE-2024-58084, CVE-2025-21761, CVE-2024-58008, CVE-2024-57988, CVE-2025-21874, CVE-2024-58011, CVE-2025-21706, CVE-2024-57999, CVE-2025-21858, CVE-2024-58061, CVE-2025-21727, CVE-2025-21780, CVE-2024-58051, CVE-2025-21791, CVE-2025-21788, CVE-2025-21786, CVE-2024-58012, CVE-2024-58010, CVE-2024-58001, CVE-2025-21844, CVE-2025-21708, CVE-2024-57834, CVE-2025-21873,…

Record: USN-7521-1
Updated: 2026-11-02

OSVUSN-7521-3 No score

linux-lowlatency, linux-lowlatency-hwe-6.11, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Serial ATA and Parallel ATA drivers;
Drivers core;
Network block device driver;
Bluetooth drivers;
Character device driver;
TPM device driver;
Clock framework and drivers;
Hardware crypto device drivers;
FireWire subsystem;
EFI core;
Qualcomm firmware drivers;
GPIO subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
I3C subsystem;
InfiniBand drivers;
Input Device (Mouse) drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
NVIDIA Tegra memory controller driver;
Fastrpc Driver;
Network drivers;
Operating Performance Points (OPP) driver;
PCI subsystem;
x86 platform drivers;
PPS (Pulse Per Second) driver;
PTP clock framework;
Remote Processor subsystem;
Real Time Clock drivers;
S/390 drivers;
SCSI subsystem;
QCOM SoC drivers;
SPI subsystem;
Media staging drivers;
Trusted Execution Environment drivers;
TTY drivers;
UFS subsystem;
USB Device Class drivers;
USB core drivers;
USB Gadget drivers;
USB Host Controller drivers;
Framebuffer layer;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
Overlay file system;
SMB network file system;
UBI file system;
BPF subsystem;
Timer subsystem;
KVM subsystem;
Networking core;
ptr_ring data structure definitions;
Networking subsytem;
Amateur Radio drivers;
L3 Master device support module;
TCP network protocol;
XFRM subsystem;
Tracing infrastructure;
io_uring subsystem;
Process Accounting mechanism;
Perf events;
Padata parallel execution mechanism;
printk logging mechanism;
Scheduler infrastructure;
Workqueue subsystem;
Memory management;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
NFC subsystem;
Open vSwitch;
Rose network layer;
RxRPC session sockets;
Network traffic control;
Wireless networking;
Key management;
Landlock security;
Linux Security Modules (LSM) Framework;
Tomoyo security module;
SoC audio core drivers;
SOF drivers; (CVE-2025-21799, CVE-2025-21765, CVE-2024-57834, CVE-2025-21971, CVE-2025-21855, CVE-2024-58019, CVE-2025-21987, CVE-2025-21754, CVE-2025-21779, CVE-2024-57986, CVE-2025-21809, CVE-2025-21887, CVE-2025-21744, CVE-2024-58014, CVE-2025-21892, CVE-2025-21848, CVE-2024-58051, CVE-2024-58085, CVE-2025-21862, CVE-2024-57981, CVE-2024-57987, CVE-2024-58053, CVE-2024-58063, CVE-2024-58079, CVE-2025-21875, CVE-2025-21715, CVE-2024-58004, CVE-2025-21857, CVE-2025-21856, CVE-2025-21938, CVE-2024-58082, CVE-2025-21815, CVE-2025-21864, CVE-2024-52559, CVE-2024-58078, CVE-2024-57989, CVE-2024-58001, CVE-2025-21889, CVE-2025-21739, CVE-2024-58005, CVE-2025-21829, CVE-2024-58069, CVE-2025-21712, CVE-2025-21846, CVE-2025-21883, CVE-2025-21852, CVE-2025-21808, CVE-2025-21900, CVE-2025-21888, CVE-2025-21784, CVE-2025-21838, CVE-2024-58054, CVE-2025-21781, CVE-2025-21737, CVE-2024-58013, CVE-2025-21885, CVE-2025-21877, CVE-2024-58010, CVE-2025-21844, CVE-2024-58012, CVE-2024-58083, CVE-2025-21783, CVE-2025-21798, CVE-2024-57973, CVE-2024-57982, CVE-2025-21708, CVE-2024-58003, CVE-2025-21786, CVE-2025-21750, CVE-2025-21870, CVE-2025-21745, CVE-2024-58081, CVE-2024-57979, CVE-2025-21718, CVE-2025-21816, CVE-2025-21868, CVE-2025-21731, CVE-2025-21814, CVE-2025-21826, CVE-2024-58006, CVE-2025-21821, CVE-2024-57852, CVE-2025-21746,…

Record: USN-7521-3
Updated: 2026-11-02

OSVUSN-7764-1 No score

linux, linux-aws, linux-gcp, linux-gke, linux-gkeop, linux-lowlatency, linux-lowlatency-hwe-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
x86 architecture;
Compute Acceleration Framework;
Bus devices;
AMD CDX bus driver;
DPLL subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
InfiniBand drivers;
Multiple devices driver;
Network drivers;
Mellanox network drivers;
NVME drivers;
Pin controllers subsystem;
RapidIO drivers;
Voltage and Current Regulator drivers;
SCSI subsystem;
SLIMbus drivers;
QCOM SoC drivers;
UFS subsystem;
USB DSL drivers;
Renesas USBHS Controller drivers;
USB Type-C Connector System Software Interface driver;
Framebuffer layer;
ACRN Hypervisor Service Module driver;
Network file system (NFS) client;
Proc file system;
SMB network file system;
Memory Management;
Scheduler infrastructure;
SoC audio core drivers;
Perf events;
Tracing infrastructure;
Memory management;
802.1Q VLAN protocol;
Asynchronous Transfer Mode (ATM) subsystem;
Bluetooth subsystem;
Devlink API;
IPv4 networking;
IPv6 networking;
Logical Link layer;
Management Component Transport Protocol (MCTP);
Multipath TCP;
Netfilter;
Network traffic control;
Switch device API;
Wireless networking;
eXpress Data Path; (CVE-2025-22008, CVE-2025-21872, CVE-2025-21945, CVE-2025-37889, CVE-2025-21997, CVE-2025-21935, CVE-2025-21986, CVE-2025-21890, CVE-2025-21925, CVE-2024-58090, CVE-2025-38569, CVE-2025-21911, CVE-2025-21957, CVE-2025-21891, CVE-2025-21924, CVE-2025-21956, CVE-2025-21994, CVE-2025-22013, CVE-2025-21964, CVE-2025-21909, CVE-2025-21888, CVE-2025-21918, CVE-2025-21981, CVE-2025-21966, CVE-2025-22011, CVE-2025-21877, CVE-2025-21913, CVE-2025-21895, CVE-2025-21929, CVE-2025-22010, CVE-2025-21992, CVE-2025-21930, CVE-2025-21982, CVE-2025-21894, CVE-2025-21934, CVE-2025-21873, CVE-2025-21914, CVE-2025-21941, CVE-2025-21962, CVE-2025-22014, CVE-2025-21905, CVE-2025-21908, CVE-2025-21898, CVE-2025-21878, CVE-2025-22009, CVE-2025-21961, CVE-2025-22015, CVE-2025-21883, CVE-2025-21916, CVE-2025-22016, CVE-2025-21936, CVE-2025-21947, CVE-2025-21927, CVE-2025-22004, CVE-2025-21926, CVE-2025-21969, CVE-2025-21976, CVE-2025-21912, CVE-2025-21920, CVE-2025-21951, CVE-2025-22005, CVE-2025-21978, CVE-2025-21975, CVE-2025-22007, CVE-2025-21928, CVE-2025-21968, CVE-2025-21963, CVE-2025-21977, CVE-2025-21915, CVE-2025-21980, CVE-2025-22047, CVE-2025-21972, CVE-2025-21892, CVE-2025-22003, CVE-2025-21979, CVE-2025-21944, CVE-2025-21880, CVE-2025-21899, CVE-2025-21995, CVE-2025-22017, CVE-2025-21946, CVE-2025-22001, CVE-2025-21904, CVE-2025-21881, CVE-2025-21917, CVE-2025-21970, CVE-2025-21889, CVE-2025-21922, CVE-2025-21875, CVE-2025-21919, CVE-2025-21991, CVE-2025-21967, CVE-2025-21960, CVE-2025-21959, CVE-2025-21955, CVE-2025-21996, CVE-2025-21950, CVE-2025-21937, CVE-2025-21948, CVE-2025-21903, CVE-2025-21885, CVE-2025-21999, CVE-2025-21910)

Record: USN-7764-1
Updated: 2026-11-02

OSVUSN-7764-2 No score

linux-hwe-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
x86 architecture;
Compute Acceleration Framework;
Bus devices;
AMD CDX bus driver;
DPLL subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
InfiniBand drivers;
Multiple devices driver;
Network drivers;
Mellanox network drivers;
NVME drivers;
Pin controllers subsystem;
RapidIO drivers;
Voltage and Current Regulator drivers;
SCSI subsystem;
SLIMbus drivers;
QCOM SoC drivers;
UFS subsystem;
USB DSL drivers;
Renesas USBHS Controller drivers;
USB Type-C Connector System Software Interface driver;
Framebuffer layer;
ACRN Hypervisor Service Module driver;
Network file system (NFS) client;
Proc file system;
SMB network file system;
Memory Management;
Scheduler infrastructure;
SoC audio core drivers;
Perf events;
Tracing infrastructure;
Memory management;
802.1Q VLAN protocol;
Asynchronous Transfer Mode (ATM) subsystem;
Bluetooth subsystem;
Devlink API;
IPv4 networking;
IPv6 networking;
Logical Link layer;
Management Component Transport Protocol (MCTP);
Multipath TCP;
Netfilter;
Network traffic control;
Switch device API;
Wireless networking;
eXpress Data Path; (CVE-2025-21945, CVE-2025-21991, CVE-2025-22008, CVE-2025-21996, CVE-2025-21924, CVE-2025-21986, CVE-2025-21872, CVE-2025-21962, CVE-2025-22007, CVE-2025-37889, CVE-2025-21889, CVE-2025-21968, CVE-2025-21903, CVE-2025-21955, CVE-2025-21982, CVE-2025-21929, CVE-2025-21944, CVE-2025-22004, CVE-2025-21997, CVE-2025-21941, CVE-2025-22047, CVE-2025-21915, CVE-2025-21995, CVE-2025-22011, CVE-2025-21891, CVE-2025-22009, CVE-2025-22015, CVE-2024-58090, CVE-2025-21947, CVE-2025-21976, CVE-2025-21964, CVE-2025-21904, CVE-2025-21880, CVE-2025-21918, CVE-2025-21950, CVE-2025-21948, CVE-2025-21888, CVE-2025-22014, CVE-2025-21963, CVE-2025-21875, CVE-2025-21967, CVE-2025-21972, CVE-2025-21895, CVE-2025-21961, CVE-2025-21926, CVE-2025-21892, CVE-2025-21916, CVE-2025-21894, CVE-2025-21930, CVE-2025-21927, CVE-2025-21911, CVE-2025-21936, CVE-2025-21881, CVE-2025-38569, CVE-2025-21873, CVE-2025-21951, CVE-2025-22003, CVE-2025-21877, CVE-2025-21908, CVE-2025-21956, CVE-2025-21977, CVE-2025-21917, CVE-2025-21922, CVE-2025-21959, CVE-2025-22005, CVE-2025-22017, CVE-2025-22016, CVE-2025-21878, CVE-2025-21970, CVE-2025-21905, CVE-2025-21978, CVE-2025-21981, CVE-2025-21980, CVE-2025-21910, CVE-2025-21925, CVE-2025-21885, CVE-2025-21946, CVE-2025-21937, CVE-2025-21919, CVE-2025-22013, CVE-2025-21883, CVE-2025-21957, CVE-2025-21914, CVE-2025-21909, CVE-2025-21934, CVE-2025-21975, CVE-2025-21912, CVE-2025-21969, CVE-2025-21898, CVE-2025-21890, CVE-2025-21899, CVE-2025-22001, CVE-2025-21979, CVE-2025-21966, CVE-2025-21935, CVE-2025-21920, CVE-2025-21913, CVE-2025-22010, CVE-2025-21992, CVE-2025-21960, CVE-2025-21994, CVE-2025-21999, CVE-2025-21928)

Record: USN-7764-2
Updated: 2026-11-02

OSVUSN-7765-1 No score

linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
x86 architecture;
Compute Acceleration Framework;
Bus devices;
AMD CDX bus driver;
DPLL subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
InfiniBand drivers;
Multiple devices driver;
Network drivers;
Mellanox network drivers;
NVME drivers;
Pin controllers subsystem;
RapidIO drivers;
Voltage and Current Regulator drivers;
SCSI subsystem;
SLIMbus drivers;
QCOM SoC drivers;
UFS subsystem;
USB DSL drivers;
Renesas USBHS Controller drivers;
USB Type-C Connector System Software Interface driver;
Framebuffer layer;
ACRN Hypervisor Service Module driver;
Network file system (NFS) client;
Proc file system;
SMB network file system;
Memory Management;
Scheduler infrastructure;
SoC audio core drivers;
Perf events;
Tracing infrastructure;
Memory management;
802.1Q VLAN protocol;
Asynchronous Transfer Mode (ATM) subsystem;
Bluetooth subsystem;
Devlink API;
IPv4 networking;
IPv6 networking;
Logical Link layer;
Management Component Transport Protocol (MCTP);
Multipath TCP;
Netfilter;
Network traffic control;
Switch device API;
Wireless networking;
eXpress Data Path; (CVE-2025-21980, CVE-2025-21999, CVE-2025-21991, CVE-2025-21937, CVE-2025-22016, CVE-2025-21920, CVE-2025-21979, CVE-2025-21919, CVE-2025-21969, CVE-2025-21872, CVE-2025-21996, CVE-2025-21927, CVE-2025-21904, CVE-2025-22013, CVE-2025-21928, CVE-2025-21891, CVE-2025-21889, CVE-2025-21972, CVE-2025-21981, CVE-2025-38569, CVE-2025-21910, CVE-2025-21945, CVE-2025-22011, CVE-2025-21916, CVE-2025-21924, CVE-2025-21922, CVE-2025-21975, CVE-2025-21880, CVE-2025-21995, CVE-2025-21977, CVE-2025-21947, CVE-2025-21914, CVE-2025-21905, CVE-2025-22009, CVE-2025-21892, CVE-2025-22005, CVE-2024-58090, CVE-2025-21926, CVE-2025-37889, CVE-2025-21966, CVE-2025-21955, CVE-2025-22007, CVE-2025-21894, CVE-2025-21909, CVE-2025-21883, CVE-2025-21992, CVE-2025-21976, CVE-2025-21890, CVE-2025-21898, CVE-2025-21982, CVE-2025-21877, CVE-2025-21925, CVE-2025-21970, CVE-2025-21930, CVE-2025-21946, CVE-2025-22017, CVE-2025-21908, CVE-2025-21944, CVE-2025-21885, CVE-2025-22010, CVE-2025-21917, CVE-2025-21918, CVE-2025-21934, CVE-2025-21950, CVE-2025-21963, CVE-2025-22003, CVE-2025-21961, CVE-2025-21967, CVE-2025-21878, CVE-2025-21895, CVE-2025-21913, CVE-2025-21875, CVE-2025-21959, CVE-2025-22008, CVE-2025-21968, CVE-2025-21936, CVE-2025-21956, CVE-2025-21903, CVE-2025-22004, CVE-2025-21986, CVE-2025-21915, CVE-2025-21964, CVE-2025-22014, CVE-2025-21994, CVE-2025-21912, CVE-2025-21873, CVE-2025-21957, CVE-2025-22015, CVE-2025-21997, CVE-2025-21948, CVE-2025-21951, CVE-2025-21962, CVE-2025-22001, CVE-2025-21978, CVE-2025-21960, CVE-2025-22047, CVE-2025-21935, CVE-2025-21899, CVE-2025-21911, CVE-2025-21881, CVE-2025-21929, CVE-2025-21941)

Record: USN-7765-1
Updated: 2026-11-02

OSVUSN-7766-1 No score

linux-aws-6.8, linux-gcp-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
x86 architecture;
Compute Acceleration Framework;
Bus devices;
AMD CDX bus driver;
DPLL subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
InfiniBand drivers;
Multiple devices driver;
Network drivers;
Mellanox network drivers;
NVME drivers;
Pin controllers subsystem;
RapidIO drivers;
Voltage and Current Regulator drivers;
SCSI subsystem;
SLIMbus drivers;
QCOM SoC drivers;
UFS subsystem;
USB DSL drivers;
Renesas USBHS Controller drivers;
USB Type-C Connector System Software Interface driver;
Framebuffer layer;
ACRN Hypervisor Service Module driver;
Network file system (NFS) client;
Proc file system;
SMB network file system;
Memory Management;
Scheduler infrastructure;
SoC audio core drivers;
Perf events;
Tracing infrastructure;
Memory management;
802.1Q VLAN protocol;
Asynchronous Transfer Mode (ATM) subsystem;
Bluetooth subsystem;
Devlink API;
IPv4 networking;
IPv6 networking;
Logical Link layer;
Management Component Transport Protocol (MCTP);
Multipath TCP;
Netfilter;
Network traffic control;
Switch device API;
Wireless networking;
eXpress Data Path; (CVE-2025-21961, CVE-2025-21895, CVE-2025-21934, CVE-2025-21898, CVE-2024-58090, CVE-2025-21999, CVE-2025-22004, CVE-2025-21966, CVE-2025-21922, CVE-2025-21920, CVE-2025-21911, CVE-2025-21885, CVE-2025-21912, CVE-2025-21996, CVE-2025-21924, CVE-2025-21914, CVE-2025-21936, CVE-2025-21944, CVE-2025-21877, CVE-2025-21909, CVE-2025-21986, CVE-2025-21890, CVE-2025-22009, CVE-2025-21905, CVE-2025-21969, CVE-2025-21935, CVE-2025-21917, CVE-2025-22008, CVE-2025-21994, CVE-2025-21980, CVE-2025-22014, CVE-2025-21915, CVE-2025-21991, CVE-2025-22015, CVE-2025-21875, CVE-2025-21975, CVE-2025-21878, CVE-2025-21930, CVE-2025-21967, CVE-2025-21908, CVE-2025-22007, CVE-2025-21899, CVE-2025-21950, CVE-2025-21959, CVE-2025-21937, CVE-2025-22010, CVE-2025-21945, CVE-2025-21997, CVE-2025-21992, CVE-2025-22003, CVE-2025-22013, CVE-2025-21963, CVE-2025-22001, CVE-2025-21927, CVE-2025-21894, CVE-2025-21960, CVE-2025-21956, CVE-2025-21948, CVE-2025-21929, CVE-2025-21919, CVE-2025-21972, CVE-2025-21883, CVE-2025-21880, CVE-2025-21976, CVE-2025-22005, CVE-2025-22016, CVE-2025-21978, CVE-2025-21873, CVE-2025-21925, CVE-2025-21904, CVE-2025-21928, CVE-2025-21892, CVE-2025-21891, CVE-2025-21995, CVE-2025-21968, CVE-2025-21982, CVE-2025-21918, CVE-2025-21889, CVE-2025-21970, CVE-2025-21910, CVE-2025-21913, CVE-2025-21926, CVE-2025-21955, CVE-2025-21947, CVE-2025-21979, CVE-2025-21981, CVE-2025-22011, CVE-2025-21888, CVE-2025-37889, CVE-2025-21957, CVE-2025-21977, CVE-2025-21903, CVE-2025-21946, CVE-2025-21941, CVE-2025-21964, CVE-2025-21951, CVE-2025-21962, CVE-2025-22017, CVE-2025-21872, CVE-2025-21881, CVE-2025-21916)

Record: USN-7766-1
Updated: 2026-11-02

OSVUSN-7767-1 No score

linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
x86 architecture;
Compute Acceleration Framework;
Bus devices;
AMD CDX bus driver;
DPLL subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
InfiniBand drivers;
Multiple devices driver;
Network drivers;
Mellanox network drivers;
NVME drivers;
Pin controllers subsystem;
RapidIO drivers;
Voltage and Current Regulator drivers;
SCSI subsystem;
SLIMbus drivers;
QCOM SoC drivers;
UFS subsystem;
USB DSL drivers;
Renesas USBHS Controller drivers;
USB Type-C Connector System Software Interface driver;
Framebuffer layer;
ACRN Hypervisor Service Module driver;
Network file system (NFS) client;
Proc file system;
SMB network file system;
Memory Management;
Scheduler infrastructure;
SoC audio core drivers;
Perf events;
Tracing infrastructure;
Memory management;
802.1Q VLAN protocol;
Asynchronous Transfer Mode (ATM) subsystem;
Bluetooth subsystem;
Devlink API;
IPv4 networking;
IPv6 networking;
Logical Link layer;
Management Component Transport Protocol (MCTP);
Multipath TCP;
Netfilter;
Network traffic control;
Switch device API;
Wireless networking;
eXpress Data Path; (CVE-2025-21966, CVE-2025-21895, CVE-2025-21944, CVE-2025-21986, CVE-2025-21918, CVE-2025-21873, CVE-2025-21963, CVE-2025-21929, CVE-2025-21995, CVE-2025-22017, CVE-2025-21991, CVE-2025-21960, CVE-2025-21946, CVE-2025-21976, CVE-2025-21922, CVE-2025-21925, CVE-2025-21903, CVE-2025-21978, CVE-2025-21979, CVE-2025-22016, CVE-2025-21936, CVE-2025-21997, CVE-2025-21992, CVE-2025-21920, CVE-2025-21875, CVE-2025-21934, CVE-2025-21919, CVE-2025-21972, CVE-2025-22001, CVE-2025-21981, CVE-2025-21910, CVE-2025-21969, CVE-2025-22010, CVE-2025-21908, CVE-2025-21957, CVE-2025-22009, CVE-2025-21927, CVE-2025-21930, CVE-2025-21994, CVE-2025-21980, CVE-2025-21885, CVE-2025-21967, CVE-2025-21899, CVE-2025-21890, CVE-2025-21948, CVE-2025-21964, CVE-2025-21911, CVE-2025-21982, CVE-2025-21883, CVE-2025-21913, CVE-2025-21917, CVE-2025-21905, CVE-2025-21968, CVE-2025-22013, CVE-2025-22005, CVE-2025-21916, CVE-2025-21880, CVE-2025-21881, CVE-2025-22003, CVE-2025-21892, CVE-2025-21937, CVE-2025-21970, CVE-2025-22004, CVE-2025-21950, CVE-2025-21924, CVE-2025-21894, CVE-2025-21904, CVE-2025-21915, CVE-2025-21889, CVE-2025-21912, CVE-2025-21909, CVE-2025-21888, CVE-2025-21935, CVE-2025-22008, CVE-2025-37889, CVE-2025-21878, CVE-2025-21926, CVE-2025-22011, CVE-2025-21962, CVE-2025-22007, CVE-2025-21941, CVE-2025-21898, CVE-2025-21956, CVE-2025-22015, CVE-2025-21961, CVE-2025-21872, CVE-2025-21891, CVE-2025-21947, CVE-2025-21955, CVE-2025-21877, CVE-2025-21996, CVE-2025-21977, CVE-2025-21945, CVE-2025-21914, CVE-2025-21975, CVE-2024-58090, CVE-2025-21959, CVE-2025-22014, CVE-2025-21951, CVE-2025-21928, CVE-2025-21999)

Record: USN-7767-1
Updated: 2026-11-02

OSVUSN-7767-2 No score

linux-realtime-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
x86 architecture;
Compute Acceleration Framework;
Bus devices;
AMD CDX bus driver;
DPLL subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
InfiniBand drivers;
Multiple devices driver;
Network drivers;
Mellanox network drivers;
NVME drivers;
Pin controllers subsystem;
RapidIO drivers;
Voltage and Current Regulator drivers;
SCSI subsystem;
SLIMbus drivers;
QCOM SoC drivers;
UFS subsystem;
USB DSL drivers;
Renesas USBHS Controller drivers;
USB Type-C Connector System Software Interface driver;
Framebuffer layer;
ACRN Hypervisor Service Module driver;
Network file system (NFS) client;
Proc file system;
SMB network file system;
Memory Management;
Scheduler infrastructure;
SoC audio core drivers;
Perf events;
Tracing infrastructure;
Memory management;
802.1Q VLAN protocol;
Asynchronous Transfer Mode (ATM) subsystem;
Bluetooth subsystem;
Devlink API;
IPv4 networking;
IPv6 networking;
Logical Link layer;
Management Component Transport Protocol (MCTP);
Multipath TCP;
Netfilter;
Network traffic control;
Switch device API;
Wireless networking;
eXpress Data Path; (CVE-2025-21964, CVE-2025-21890, CVE-2025-21934, CVE-2025-21929, CVE-2025-21922, CVE-2025-21970, CVE-2025-21913, CVE-2025-21937, CVE-2025-21872, CVE-2025-21972, CVE-2025-21892, CVE-2025-21991, CVE-2025-21967, CVE-2025-21894, CVE-2025-21881, CVE-2025-21885, CVE-2025-21999, CVE-2025-21978, CVE-2025-22001, CVE-2025-21979, CVE-2025-21951, CVE-2025-22003, CVE-2025-21963, CVE-2025-21936, CVE-2025-21891, CVE-2025-21941, CVE-2025-21895, CVE-2025-21982, CVE-2025-21919, CVE-2025-21961, CVE-2025-21946, CVE-2025-21889, CVE-2025-21899, CVE-2025-21873, CVE-2025-37889, CVE-2025-22008, CVE-2025-21969, CVE-2025-21957, CVE-2025-21925, CVE-2025-21945, CVE-2025-21927, CVE-2025-21878, CVE-2025-21995, CVE-2025-21981, CVE-2025-21956, CVE-2025-21909, CVE-2025-21955, CVE-2025-21918, CVE-2025-21960, CVE-2025-21915, CVE-2025-21992, CVE-2025-21914, CVE-2025-21877, CVE-2025-21875, CVE-2025-21928, CVE-2025-22013, CVE-2025-22014, CVE-2025-21950, CVE-2025-21948, CVE-2025-21912, CVE-2025-21944, CVE-2025-22004, CVE-2025-22009, CVE-2025-21968, CVE-2025-21888, CVE-2025-21980, CVE-2025-21911, CVE-2025-22017, CVE-2025-21975, CVE-2025-21930, CVE-2025-21947, CVE-2025-21908, CVE-2025-21994, CVE-2024-58090, CVE-2025-21910, CVE-2025-21959, CVE-2025-21977, CVE-2025-21903, CVE-2025-22016, CVE-2025-21976, CVE-2025-21898, CVE-2025-21986, CVE-2025-22011, CVE-2025-21905, CVE-2025-22015, CVE-2025-21996, CVE-2025-21966, CVE-2025-21883, CVE-2025-22010, CVE-2025-21904, CVE-2025-21916, CVE-2025-21935, CVE-2025-21924, CVE-2025-22005, CVE-2025-21962, CVE-2025-21917, CVE-2025-21920, CVE-2025-21997, CVE-2025-21880, CVE-2025-21926, CVE-2025-22007)

Record: USN-7767-2
Updated: 2026-11-02

OSVUSN-7779-1 No score

linux-ibm, linux-ibm-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
x86 architecture;
Compute Acceleration Framework;
Bus devices;
AMD CDX bus driver;
DPLL subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
InfiniBand drivers;
Multiple devices driver;
Network drivers;
Mellanox network drivers;
NVME drivers;
Pin controllers subsystem;
RapidIO drivers;
Voltage and Current Regulator drivers;
SCSI subsystem;
SLIMbus drivers;
QCOM SoC drivers;
UFS subsystem;
USB DSL drivers;
Renesas USBHS Controller drivers;
USB Type-C Connector System Software Interface driver;
Framebuffer layer;
ACRN Hypervisor Service Module driver;
Network file system (NFS) client;
Overlay file system;
Proc file system;
SMB network file system;
Memory Management;
Scheduler infrastructure;
SoC audio core drivers;
Perf events;
Tracing infrastructure;
Memory management;
802.1Q VLAN protocol;
Asynchronous Transfer Mode (ATM) subsystem;
Bluetooth subsystem;
Devlink API;
IPv4 networking;
IPv6 networking;
Logical Link layer;
Management Component Transport Protocol (MCTP);
Multipath TCP;
Netfilter;
Network traffic control;
Switch device API;
Wireless networking;
eXpress Data Path; (CVE-2025-22017, CVE-2025-22003, CVE-2025-22009, CVE-2025-22015, CVE-2025-21934, CVE-2025-21908, CVE-2025-21885, CVE-2025-21979, CVE-2025-21887, CVE-2025-21922, CVE-2025-21944, CVE-2025-21905, CVE-2025-21969, CVE-2025-21904, CVE-2025-21926, CVE-2025-21951, CVE-2025-21997, CVE-2025-21920, CVE-2025-21994, CVE-2025-21977, CVE-2025-21976, CVE-2025-21975, CVE-2025-21972, CVE-2025-22013, CVE-2025-21894, CVE-2025-21963, CVE-2025-21978, CVE-2025-38569, CVE-2025-21936, CVE-2025-21873, CVE-2025-22010, CVE-2025-21981, CVE-2025-22005, CVE-2025-21959, CVE-2025-21929, CVE-2025-21927, CVE-2025-21966, CVE-2025-22008, CVE-2025-21957, CVE-2025-21970, CVE-2025-21968, CVE-2025-21889, CVE-2025-22047, CVE-2025-21881, CVE-2025-21956, CVE-2025-22011, CVE-2025-21986, CVE-2025-21892, CVE-2025-21964, CVE-2025-21899, CVE-2025-21877, CVE-2025-21875, CVE-2025-21912, CVE-2025-22001, CVE-2025-38350, CVE-2025-21991, CVE-2025-21930, CVE-2025-21962, CVE-2025-21880, CVE-2024-57996, CVE-2025-21914, CVE-2025-22014, CVE-2025-21888, CVE-2025-21955, CVE-2025-21937, CVE-2025-21924, CVE-2025-21895, CVE-2025-21947, CVE-2025-21946, CVE-2025-21878, CVE-2025-21918, CVE-2025-21913, CVE-2025-21945, CVE-2025-37752, CVE-2025-21935, CVE-2025-21950, CVE-2025-21960, CVE-2024-58090, CVE-2025-21992, CVE-2025-21961, CVE-2025-21948, CVE-2025-21982, CVE-2025-21910, CVE-2025-21909, CVE-2025-21925, CVE-2025-37889, CVE-2025-21967, CVE-2025-21898, CVE-2025-22007, CVE-2025-21995, CVE-2025-22016, CVE-2025-21891, CVE-2025-21911, CVE-2025-21890, CVE-2025-21999, CVE-2025-22004, CVE-2025-21915, CVE-2025-21996, CVE-2025-21980, CVE-2025-21903, CVE-2025-21916, CVE-2025-21941, CVE-2025-21928, CVE-2025-21919, CVE-2025-21883, CVE-2025-21872, CVE-2025-21917)

Record: USN-7779-1
Updated: 2026-11-02

OSVUSN-7790-1 No score

linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
x86 architecture;
Compute Acceleration Framework;
Bus devices;
AMD CDX bus driver;
DPLL subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
InfiniBand drivers;
Multiple devices driver;
Network drivers;
Mellanox network drivers;
NVME drivers;
Pin controllers subsystem;
RapidIO drivers;
Voltage and Current Regulator drivers;
SCSI subsystem;
SLIMbus drivers;
QCOM SoC drivers;
UFS subsystem;
USB DSL drivers;
Renesas USBHS Controller drivers;
USB Type-C Connector System Software Interface driver;
Framebuffer layer;
ACRN Hypervisor Service Module driver;
Network file system (NFS) client;
Proc file system;
SMB network file system;
Memory Management;
Scheduler infrastructure;
SoC audio core drivers;
Perf events;
Tracing infrastructure;
Memory management;
802.1Q VLAN protocol;
Asynchronous Transfer Mode (ATM) subsystem;
Bluetooth subsystem;
Devlink API;
IPv4 networking;
IPv6 networking;
Logical Link layer;
Management Component Transport Protocol (MCTP);
Multipath TCP;
Netfilter;
Network traffic control;
Switch device API;
Wireless networking;
eXpress Data Path; (CVE-2025-21944, CVE-2025-21927, CVE-2025-21996, CVE-2025-21928, CVE-2025-21888, CVE-2025-21995, CVE-2025-21929, CVE-2025-21873, CVE-2025-21875, CVE-2025-21894, CVE-2025-21878, CVE-2025-21977, CVE-2024-58090, CVE-2025-21872, CVE-2025-21905, CVE-2025-21963, CVE-2025-21991, CVE-2025-21947, CVE-2025-21924, CVE-2025-21899, CVE-2025-21992, CVE-2025-21909, CVE-2025-21920, CVE-2025-21917, CVE-2025-21972, CVE-2025-21997, CVE-2025-21999, CVE-2025-21895, CVE-2025-22013, CVE-2025-21936, CVE-2025-21881, CVE-2025-21956, CVE-2025-22010, CVE-2025-22015, CVE-2025-21959, CVE-2025-21980, CVE-2025-22017, CVE-2025-22005, CVE-2025-21935, CVE-2025-21911, CVE-2025-21914, CVE-2025-22001, CVE-2025-21913, CVE-2025-22007, CVE-2025-21966, CVE-2025-21962, CVE-2025-21908, CVE-2025-21910, CVE-2025-22014, CVE-2025-22016, CVE-2025-21957, CVE-2025-21968, CVE-2025-21986, CVE-2025-21981, CVE-2025-21880, CVE-2025-21950, CVE-2025-21982, CVE-2025-21976, CVE-2025-21979, CVE-2025-21912, CVE-2025-21951, CVE-2025-21994, CVE-2025-21946, CVE-2025-21955, CVE-2025-21898, CVE-2025-21960, CVE-2025-21883, CVE-2025-21970, CVE-2025-21891, CVE-2025-21919, CVE-2025-21964, CVE-2025-21926, CVE-2025-21877, CVE-2025-21903, CVE-2025-21978, CVE-2025-21885, CVE-2025-21948, CVE-2025-21930, CVE-2025-22009, CVE-2025-21918, CVE-2025-21890, CVE-2025-21925, CVE-2025-22003, CVE-2025-22008, CVE-2025-21934, CVE-2025-21961, CVE-2025-22004, CVE-2025-21941, CVE-2025-21915, CVE-2025-21967, CVE-2025-21904, CVE-2025-21916, CVE-2025-37889, CVE-2025-21922, CVE-2025-21892, CVE-2025-21975, CVE-2025-21945, CVE-2025-21889, CVE-2025-21937, CVE-2025-21969)

Record: USN-7790-1
Updated: 2026-11-02

OSVUSN-7800-1 No score

linux-raspi-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
x86 architecture;
Compute Acceleration Framework;
Bus devices;
AMD CDX bus driver;
DPLL subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
InfiniBand drivers;
Multiple devices driver;
Network drivers;
Mellanox network drivers;
NVME drivers;
Pin controllers subsystem;
RapidIO drivers;
Voltage and Current Regulator drivers;
SCSI subsystem;
SLIMbus drivers;
QCOM SoC drivers;
UFS subsystem;
USB DSL drivers;
Renesas USBHS Controller drivers;
USB Type-C Connector System Software Interface driver;
Framebuffer layer;
ACRN Hypervisor Service Module driver;
Ext4 file system;
Network file system (NFS) client;
Proc file system;
SMB network file system;
Memory Management;
Scheduler infrastructure;
SoC audio core drivers;
Perf events;
Tracing infrastructure;
Memory management;
802.1Q VLAN protocol;
Asynchronous Transfer Mode (ATM) subsystem;
Bluetooth subsystem;
Devlink API;
IPv4 networking;
IPv6 networking;
Logical Link layer;
Management Component Transport Protocol (MCTP);
Multipath TCP;
Netfilter;
Packet sockets;
Network traffic control;
Switch device API;
TLS protocol;
VMware vSockets driver;
Wireless networking;
eXpress Data Path;
XFRM subsystem; (CVE-2025-38617, CVE-2025-21898, CVE-2025-21996, CVE-2025-21903, CVE-2025-21980, CVE-2025-22007, CVE-2025-22010, CVE-2025-37756, CVE-2025-21970, CVE-2025-21930, CVE-2025-37785, CVE-2025-22015, CVE-2025-21927, CVE-2025-21914, CVE-2025-21963, CVE-2025-22004, CVE-2025-21934, CVE-2025-21986, CVE-2025-22008, CVE-2025-21895, CVE-2025-21928, CVE-2025-21899, CVE-2025-21891, CVE-2025-21925, CVE-2025-21979, CVE-2025-21945, CVE-2025-22005, CVE-2025-21880, CVE-2025-21946, CVE-2025-21957, CVE-2025-21890, CVE-2025-21955, CVE-2025-21961, CVE-2025-21935, CVE-2025-21959, CVE-2025-37889, CVE-2025-21894, CVE-2024-58090, CVE-2025-22001, CVE-2025-21924, CVE-2025-21909, CVE-2025-22009, CVE-2025-21892, CVE-2025-21976, CVE-2025-21875, CVE-2025-21915, CVE-2025-21967, CVE-2025-38618, CVE-2025-21918, CVE-2025-21881, CVE-2025-21872, CVE-2025-21873, CVE-2025-21960, CVE-2025-22014, CVE-2025-21885, CVE-2025-21950, CVE-2025-21981, CVE-2025-21917, CVE-2025-21913, CVE-2025-21972, CVE-2025-21975, CVE-2025-21977, CVE-2025-21951, CVE-2025-21962, CVE-2025-38500, CVE-2025-21916, CVE-2025-21888, CVE-2025-21910, CVE-2025-21994, CVE-2025-21904, CVE-2025-21947, CVE-2025-21995, CVE-2025-22013, CVE-2025-21920, CVE-2025-21997, CVE-2025-21905, CVE-2025-21941, CVE-2025-21877, CVE-2025-21878, CVE-2025-21937, CVE-2025-21966, CVE-2025-21919, CVE-2025-21992, CVE-2025-21948, CVE-2025-21922, CVE-2025-21911, CVE-2025-21926, CVE-2025-21908, CVE-2025-21956, CVE-2025-22003, CVE-2025-21969, CVE-2025-21999, CVE-2025-38477, CVE-2025-21944, CVE-2025-21936, CVE-2025-21978, CVE-2025-21991, CVE-2025-21912, CVE-2025-21968, CVE-2025-22017, CVE-2025-21883, CVE-2025-21964, CVE-2025-21889, CVE-2025-21982, CVE-2025-22016, CVE-2025-21929)

Record: USN-7800-1
Updated: 2026-11-03

OSVUSN-7801-1 No score

linux-hwe-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
x86 architecture;
Compute Acceleration Framework;
Bus devices;
AMD CDX bus driver;
DPLL subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
InfiniBand drivers;
Multiple devices driver;
Network drivers;
Mellanox network drivers;
NVME drivers;
Pin controllers subsystem;
RapidIO drivers;
Voltage and Current Regulator drivers;
SCSI subsystem;
SLIMbus drivers;
QCOM SoC drivers;
UFS subsystem;
USB DSL drivers;
Renesas USBHS Controller drivers;
USB Type-C Connector System Software Interface driver;
Framebuffer layer;
ACRN Hypervisor Service Module driver;
Ext4 file system;
Network file system (NFS) client;
Proc file system;
SMB network file system;
Memory Management;
Scheduler infrastructure;
SoC audio core drivers;
Perf events;
Tracing infrastructure;
Memory management;
802.1Q VLAN protocol;
Asynchronous Transfer Mode (ATM) subsystem;
Bluetooth subsystem;
Devlink API;
IPv4 networking;
IPv6 networking;
Logical Link layer;
Management Component Transport Protocol (MCTP);
Multipath TCP;
Netfilter;
Packet sockets;
Network traffic control;
Switch device API;
TLS protocol;
VMware vSockets driver;
Wireless networking;
eXpress Data Path;
XFRM subsystem; (CVE-2025-21928, CVE-2025-21976, CVE-2025-21890, CVE-2025-21929, CVE-2025-21960, CVE-2025-21978, CVE-2025-21937, CVE-2025-21908, CVE-2025-21999, CVE-2025-22015, CVE-2025-21967, CVE-2025-21913, CVE-2025-21898, CVE-2025-37756, CVE-2025-38617, CVE-2025-21927, CVE-2025-21956, CVE-2025-21979, CVE-2025-21955, CVE-2025-21895, CVE-2025-21969, CVE-2025-21877, CVE-2025-21936, CVE-2025-22001, CVE-2025-37889, CVE-2025-21875, CVE-2025-21888, CVE-2025-21911, CVE-2025-21904, CVE-2025-21878, CVE-2025-21961, CVE-2025-22013, CVE-2025-21986, CVE-2025-21915, CVE-2025-21889, CVE-2025-21903, CVE-2025-21909, CVE-2025-21950, CVE-2025-21885, CVE-2025-21966, CVE-2025-21873, CVE-2025-21883, CVE-2025-21946, CVE-2025-22003, CVE-2025-22014, CVE-2024-58090, CVE-2025-21891, CVE-2025-21962, CVE-2025-21948, CVE-2025-21924, CVE-2025-22017, CVE-2025-21975, CVE-2025-21920, CVE-2025-21972, CVE-2025-21964, CVE-2025-21917, CVE-2025-21894, CVE-2025-21982, CVE-2025-21945, CVE-2025-21996, CVE-2025-21995, CVE-2025-21912, CVE-2025-21910, CVE-2025-21980, CVE-2025-21951, CVE-2025-21934, CVE-2025-21994, CVE-2025-37785, CVE-2025-22009, CVE-2025-38618, CVE-2025-21992, CVE-2025-21930, CVE-2025-21941, CVE-2025-21916, CVE-2025-22004, CVE-2025-21919, CVE-2025-21880, CVE-2025-21963, CVE-2025-21914, CVE-2025-21981, CVE-2025-38500, CVE-2025-22005, CVE-2025-21959, CVE-2025-21899, CVE-2025-21926, CVE-2025-21968, CVE-2025-21944, CVE-2025-22016, CVE-2025-38477, CVE-2025-22008, CVE-2025-21925, CVE-2025-21997, CVE-2025-21935, CVE-2025-21947, CVE-2025-22010, CVE-2025-21977, CVE-2025-21922, CVE-2025-21881, CVE-2025-21970, CVE-2025-22007, CVE-2025-21991, CVE-2025-21918, CVE-2025-21905, CVE-2025-22011, CVE-2025-21872, CVE-2025-21957, CVE-2025-21892)

Record: USN-7801-1
Updated: 2026-11-03

OSVUSN-7801-2 No score

linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
x86 architecture;
Compute Acceleration Framework;
Bus devices;
AMD CDX bus driver;
DPLL subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
InfiniBand drivers;
Multiple devices driver;
Network drivers;
Mellanox network drivers;
NVME drivers;
Pin controllers subsystem;
RapidIO drivers;
Voltage and Current Regulator drivers;
SCSI subsystem;
SLIMbus drivers;
QCOM SoC drivers;
UFS subsystem;
USB DSL drivers;
Renesas USBHS Controller drivers;
USB Type-C Connector System Software Interface driver;
Framebuffer layer;
ACRN Hypervisor Service Module driver;
Ext4 file system;
Network file system (NFS) client;
Proc file system;
SMB network file system;
Memory Management;
Scheduler infrastructure;
SoC audio core drivers;
Perf events;
Tracing infrastructure;
Memory management;
802.1Q VLAN protocol;
Asynchronous Transfer Mode (ATM) subsystem;
Bluetooth subsystem;
Devlink API;
IPv4 networking;
IPv6 networking;
Logical Link layer;
Management Component Transport Protocol (MCTP);
Multipath TCP;
Netfilter;
Packet sockets;
Network traffic control;
Switch device API;
TLS protocol;
VMware vSockets driver;
Wireless networking;
eXpress Data Path;
XFRM subsystem; (CVE-2025-21911, CVE-2025-21937, CVE-2025-21951, CVE-2025-21948, CVE-2025-22017, CVE-2025-21982, CVE-2025-21927, CVE-2025-21935, CVE-2025-21944, CVE-2025-21917, CVE-2025-21895, CVE-2025-21966, CVE-2025-21975, CVE-2025-21945, CVE-2025-21964, CVE-2025-22001, CVE-2025-21955, CVE-2025-21980, CVE-2025-21925, CVE-2025-21957, CVE-2025-22003, CVE-2025-21999, CVE-2025-21969, CVE-2025-21885, CVE-2025-21996, CVE-2025-21883, CVE-2025-21908, CVE-2025-21978, CVE-2025-21894, CVE-2025-21929, CVE-2025-21910, CVE-2025-21979, CVE-2025-21961, CVE-2025-21915, CVE-2025-21916, CVE-2025-22008, CVE-2025-37785, CVE-2025-21873, CVE-2025-21922, CVE-2025-21936, CVE-2025-22015, CVE-2025-22016, CVE-2025-21913, CVE-2025-22009, CVE-2025-21928, CVE-2025-21899, CVE-2025-22007, CVE-2025-21898, CVE-2025-21946, CVE-2025-21920, CVE-2025-22005, CVE-2025-21872, CVE-2025-21962, CVE-2025-21888, CVE-2025-21934, CVE-2025-38618, CVE-2025-22010, CVE-2025-22014, CVE-2024-58090, CVE-2025-21941, CVE-2025-21968, CVE-2025-21972, CVE-2025-21977, CVE-2025-22013, CVE-2025-21959, CVE-2025-21919, CVE-2025-21950, CVE-2025-21926, CVE-2025-21892, CVE-2025-21880, CVE-2025-21994, CVE-2025-21909, CVE-2025-21976, CVE-2025-21956, CVE-2025-21947, CVE-2025-21981, CVE-2025-21877, CVE-2025-21995, CVE-2025-21918, CVE-2025-38500, CVE-2025-22004, CVE-2025-37756, CVE-2025-21970, CVE-2025-21891, CVE-2025-21924, CVE-2025-38477, CVE-2025-21878, CVE-2025-21881, CVE-2025-21904, CVE-2025-21960, CVE-2025-21992, CVE-2025-37889, CVE-2025-21997, CVE-2025-38617, CVE-2025-21963, CVE-2025-21890, CVE-2025-21903, CVE-2025-21912, CVE-2025-22011, CVE-2025-21889, CVE-2025-21991, CVE-2025-21914, CVE-2025-21905, CVE-2025-21986, CVE-2025-21930, CVE-2025-21875, CVE-2025-21967)

Record: USN-7801-2
Updated: 2026-11-03

OSVUSN-7801-3 No score

linux-oracle-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
x86 architecture;
Compute Acceleration Framework;
Bus devices;
AMD CDX bus driver;
DPLL subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
InfiniBand drivers;
Multiple devices driver;
Network drivers;
Mellanox network drivers;
NVME drivers;
Pin controllers subsystem;
RapidIO drivers;
Voltage and Current Regulator drivers;
SCSI subsystem;
SLIMbus drivers;
QCOM SoC drivers;
UFS subsystem;
USB DSL drivers;
Renesas USBHS Controller drivers;
USB Type-C Connector System Software Interface driver;
Framebuffer layer;
ACRN Hypervisor Service Module driver;
Ext4 file system;
Network file system (NFS) client;
Proc file system;
SMB network file system;
Memory Management;
Scheduler infrastructure;
SoC audio core drivers;
Perf events;
Tracing infrastructure;
Memory management;
802.1Q VLAN protocol;
Asynchronous Transfer Mode (ATM) subsystem;
Bluetooth subsystem;
Devlink API;
IPv4 networking;
IPv6 networking;
Logical Link layer;
Management Component Transport Protocol (MCTP);
Multipath TCP;
Netfilter;
Packet sockets;
Network traffic control;
Switch device API;
TLS protocol;
VMware vSockets driver;
Wireless networking;
eXpress Data Path;
XFRM subsystem; (CVE-2025-21969, CVE-2025-21976, CVE-2025-21898, CVE-2025-21981, CVE-2025-21929, CVE-2025-21935, CVE-2025-22009, CVE-2025-21967, CVE-2025-21963, CVE-2025-21944, CVE-2025-21970, CVE-2025-21962, CVE-2025-21912, CVE-2025-38477, CVE-2025-21977, CVE-2025-21881, CVE-2025-21980, CVE-2025-22013, CVE-2025-21946, CVE-2025-22008, CVE-2025-21975, CVE-2025-21878, CVE-2025-21891, CVE-2025-22014, CVE-2025-21916, CVE-2025-21950, CVE-2024-58090, CVE-2025-21917, CVE-2025-21885, CVE-2025-21914, CVE-2025-21873, CVE-2025-21959, CVE-2025-21964, CVE-2025-22010, CVE-2025-21928, CVE-2025-21872, CVE-2025-21908, CVE-2025-22004, CVE-2025-21895, CVE-2025-21991, CVE-2025-21936, CVE-2025-21982, CVE-2025-21996, CVE-2025-21888, CVE-2025-21961, CVE-2025-21894, CVE-2025-21966, CVE-2025-21941, CVE-2025-21890, CVE-2025-21930, CVE-2025-21883, CVE-2025-21903, CVE-2025-21922, CVE-2025-21945, CVE-2025-22005, CVE-2025-22016, CVE-2025-21926, CVE-2025-21927, CVE-2025-21924, CVE-2025-21919, CVE-2025-21997, CVE-2025-21986, CVE-2025-21905, CVE-2025-21995, CVE-2025-38617, CVE-2025-21875, CVE-2025-21910, CVE-2025-21920, CVE-2025-21913, CVE-2025-21909, CVE-2025-21911, CVE-2025-22001, CVE-2025-21972, CVE-2025-37785, CVE-2025-21889, CVE-2025-21979, CVE-2025-21918, CVE-2025-22011, CVE-2025-37756, CVE-2025-21992, CVE-2025-38618, CVE-2025-21915, CVE-2025-38500, CVE-2025-21978, CVE-2025-21947, CVE-2025-21951, CVE-2025-21994, CVE-2025-21999, CVE-2025-21960, CVE-2025-37889, CVE-2025-21892, CVE-2025-21934, CVE-2025-21877, CVE-2025-22007, CVE-2025-22003, CVE-2025-22017, CVE-2025-21925, CVE-2025-21880, CVE-2025-21957, CVE-2025-21899, CVE-2025-21956, CVE-2025-21948, CVE-2025-21955, CVE-2025-21937, CVE-2025-21968, CVE-2025-21904, CVE-2025-22015)

Record: USN-7801-3
Updated: 2026-11-03

OSVUSN-7802-1 No score

linux-azure, linux-azure-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
x86 architecture;
Compute Acceleration Framework;
Bus devices;
AMD CDX bus driver;
DPLL subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
InfiniBand drivers;
Multiple devices driver;
Network drivers;
Mellanox network drivers;
NVME drivers;
Pin controllers subsystem;
RapidIO drivers;
Voltage and Current Regulator drivers;
SCSI subsystem;
SLIMbus drivers;
QCOM SoC drivers;
UFS subsystem;
USB DSL drivers;
Renesas USBHS Controller drivers;
USB Type-C Connector System Software Interface driver;
Framebuffer layer;
ACRN Hypervisor Service Module driver;
Network file system (NFS) client;
Overlay file system;
Proc file system;
SMB network file system;
Memory Management;
Scheduler infrastructure;
SoC audio core drivers;
Perf events;
Tracing infrastructure;
Memory management;
802.1Q VLAN protocol;
Asynchronous Transfer Mode (ATM) subsystem;
Bluetooth subsystem;
Devlink API;
IPv4 networking;
IPv6 networking;
Logical Link layer;
Management Component Transport Protocol (MCTP);
Multipath TCP;
Netfilter;
Network traffic control;
Switch device API;
Wireless networking;
eXpress Data Path; (CVE-2025-21935, CVE-2025-21967, CVE-2025-21908, CVE-2025-22004, CVE-2025-21926, CVE-2025-21927, CVE-2025-21995, CVE-2025-21895, CVE-2025-21936, CVE-2025-21948, CVE-2025-21969, CVE-2025-21972, CVE-2025-21951, CVE-2025-22017, CVE-2025-21962, CVE-2025-21917, CVE-2025-22013, CVE-2025-21991, CVE-2025-22009, CVE-2025-22016, CVE-2024-57996, CVE-2025-21966, CVE-2025-21947, CVE-2025-21928, CVE-2025-21959, CVE-2025-21910, CVE-2025-21957, CVE-2025-21978, CVE-2025-21887, CVE-2025-37954, CVE-2025-21996, CVE-2025-21979, CVE-2025-37889, CVE-2025-21930, CVE-2025-21980, CVE-2025-21878, CVE-2025-21918, CVE-2025-21889, CVE-2024-58090, CVE-2025-22011, CVE-2025-21955, CVE-2025-21904, CVE-2025-21894, CVE-2025-21892, CVE-2025-21945, CVE-2025-21994, CVE-2025-21986, CVE-2025-21912, CVE-2025-21968, CVE-2025-21976, CVE-2025-21898, CVE-2025-21875, CVE-2025-21964, CVE-2025-21963, CVE-2025-21960, CVE-2025-21999, CVE-2025-21997, CVE-2025-21916, CVE-2025-21891, CVE-2025-21920, CVE-2025-21909, CVE-2025-21944, CVE-2025-21883, CVE-2025-22005, CVE-2025-22007, CVE-2025-21911, CVE-2025-21992, CVE-2025-21919, CVE-2025-22003, CVE-2025-21915, CVE-2025-21970, CVE-2025-21903, CVE-2025-21899, CVE-2025-21880, CVE-2025-21956, CVE-2025-21934, CVE-2025-21925, CVE-2025-21941, CVE-2025-21977, CVE-2025-21975, CVE-2025-21913, CVE-2025-21981, CVE-2025-21872, CVE-2025-37752, CVE-2025-22008, CVE-2025-21905, CVE-2025-21888, CVE-2025-38350, CVE-2025-21922, CVE-2025-21937, CVE-2025-21950, CVE-2025-21924, CVE-2025-22014, CVE-2025-22001, CVE-2025-21885, CVE-2025-21881, CVE-2025-21929, CVE-2025-21914, CVE-2025-21877, CVE-2025-22015, CVE-2025-21961, CVE-2025-22010, CVE-2025-21982, CVE-2025-21890, CVE-2025-21946, CVE-2025-21873)

Record: USN-7802-1
Updated: 2026-11-03

OSVUSN-7809-1 No score

linux-azure-nvidia vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
x86 architecture;
Compute Acceleration Framework;
Bus devices;
AMD CDX bus driver;
DPLL subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
InfiniBand drivers;
Multiple devices driver;
Network drivers;
Mellanox network drivers;
NVME drivers;
Pin controllers subsystem;
RapidIO drivers;
Voltage and Current Regulator drivers;
SCSI subsystem;
SLIMbus drivers;
QCOM SoC drivers;
UFS subsystem;
USB DSL drivers;
Renesas USBHS Controller drivers;
USB Type-C Connector System Software Interface driver;
Framebuffer layer;
ACRN Hypervisor Service Module driver;
Ext4 file system;
Network file system (NFS) client;
Overlay file system;
Proc file system;
SMB network file system;
Memory Management;
Scheduler infrastructure;
SoC audio core drivers;
Perf events;
Tracing infrastructure;
Memory management;
802.1Q VLAN protocol;
Asynchronous Transfer Mode (ATM) subsystem;
Bluetooth subsystem;
Devlink API;
IPv4 networking;
IPv6 networking;
Logical Link layer;
Management Component Transport Protocol (MCTP);
Multipath TCP;
Netfilter;
Packet sockets;
Network traffic control;
Switch device API;
TLS protocol;
VMware vSockets driver;
Wireless networking;
eXpress Data Path;
XFRM subsystem; (CVE-2025-21976, CVE-2025-21890, CVE-2025-38617, CVE-2025-21945, CVE-2025-21878, CVE-2025-21925, CVE-2025-21927, CVE-2025-21997, CVE-2025-21919, CVE-2025-21979, CVE-2025-21899, CVE-2025-21955, CVE-2025-21967, CVE-2024-57996, CVE-2025-22014, CVE-2025-21956, CVE-2025-21887, CVE-2025-37785, CVE-2025-21935, CVE-2024-58090, CVE-2025-21975, CVE-2025-21969, CVE-2025-21914, CVE-2025-21963, CVE-2025-21934, CVE-2025-21872, CVE-2025-21961, CVE-2025-38244, CVE-2025-21908, CVE-2025-21920, CVE-2025-21980, CVE-2025-21904, CVE-2025-22008, CVE-2025-21911, CVE-2025-21880, CVE-2025-21928, CVE-2025-21885, CVE-2025-21913, CVE-2025-37752, CVE-2025-22015, CVE-2025-38500, CVE-2025-22013, CVE-2025-21970, CVE-2025-21877, CVE-2025-21916, CVE-2025-21889, CVE-2025-21982, CVE-2025-22001, CVE-2025-22007, CVE-2025-22016, CVE-2025-21981, CVE-2025-37756, CVE-2025-21962, CVE-2025-21891, CVE-2025-21968, CVE-2025-21936, CVE-2025-21995, CVE-2025-21922, CVE-2025-21930, CVE-2025-21894, CVE-2025-38477, CVE-2025-22011, CVE-2025-21991, CVE-2025-38618, CVE-2025-22003, CVE-2025-21903, CVE-2025-21986, CVE-2025-21941, CVE-2025-21951, CVE-2025-22004, CVE-2025-21929, CVE-2025-21917, CVE-2025-21915, CVE-2025-21977, CVE-2025-21875, CVE-2025-21959, CVE-2025-22017, CVE-2025-21881, CVE-2025-21937, CVE-2025-22009, CVE-2025-38350, CVE-2025-21944, CVE-2025-21918, CVE-2025-21947, CVE-2025-21883, CVE-2025-21892, CVE-2025-21966, CVE-2025-21950, CVE-2025-21926, CVE-2025-37954, CVE-2025-21999, CVE-2025-21992, CVE-2025-21948, CVE-2025-21960, CVE-2025-21924, CVE-2025-21873, CVE-2025-21895, CVE-2025-21946, CVE-2025-37889, CVE-2025-21978, CVE-2025-21905, CVE-2025-22010, CVE-2025-38683, CVE-2025-21898, CVE-2025-21910, CVE-2025-21994, CVE-2025-21996, CVE-2025-21972, CVE-2025-21912, CVE-2025-22005, CVE-2025-21909, CVE-2025-21957, CVE-2025-21964)

Record: USN-7809-1
Updated: 2026-11-03

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`kernel` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-64k` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-64k-core` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-64k-debug` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-64k-debug-core` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-64k-debug-devel` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-64k-debug-devel-matched` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-64k-debug-modules` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-64k-debug-modules-core` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-64k-debug-modules-extra` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-64k-devel` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-64k-devel-matched` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-64k-modules` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-64k-modules-core` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-64k-modules-extra` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-abi-stablelists` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-core` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-cross-headers` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-debug` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-debug-core` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-debug-devel` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-debug-devel-matched` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-debug-modules` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-debug-modules-core` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-debug-modules-extra` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-debug-uki-virt` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-devel` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-devel-matched` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-doc` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-headers` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-modules` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-modules-core` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-modules-extra` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-rt` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-rt-64k` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-rt-64k-core` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-rt-64k-debug` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-rt-64k-debug-core` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-rt-64k-debug-devel` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-rt-64k-debug-modules` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-rt-64k-debug-modules-core` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-rt-64k-debug-modules-extra` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-rt-64k-devel` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-rt-64k-modules` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-rt-64k-modules-core` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-rt-64k-modules-extra` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-rt-core` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-rt-debug` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-rt-debug-core` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-rt-debug-devel` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-rt-debug-kvm` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-rt-debug-modules` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-rt-debug-modules-core` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-rt-debug-modules-extra` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-rt-devel` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-rt-kvm` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-rt-modules` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-rt-modules-core` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-rt-modules-extra` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-tools` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-tools-libs` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-tools-libs-devel` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-uki-virt` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-uki-virt-addons` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-zfcpdump` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-zfcpdump-core` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-zfcpdump-devel` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-zfcpdump-devel-matched` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-zfcpdump-modules` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-zfcpdump-modules-core` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`kernel-zfcpdump-modules-extra` AlmaLinux:9	before 5.14.0-570.23.1.el9_6	5.14.0-570.23.1.el9_6
`linux-lts` Alpaquita:25	6.6.89-r0 up to 6.12.41-r0	6.12.41-r0
`linux-lts` Alpaquita:stream	6.12.92-r1 up to 6.18.35-r1	6.18.35-r1
`Kernel` Linux	6.4.0 up to 6.6.81, 6.7.0 up to 6.12.18, 6.13.0 up to 6.13.6	6.6.816.12.186.13.6
`linux` Debian:13	before 6.12.19-1	6.12.19-1
`linux` Debian:14	before 6.12.19-1	6.12.19-1
`kernel` openEuler:24.03-LTS-SP1	before 6.6.0-87.0.0.93.oe2403sp1	6.6.0-87.0.0.93.oe2403sp1
`kernel` openEuler:24.03-LTS	before 6.6.0-87.0.0.82.oe2403	6.6.0-87.0.0.82.oe2403
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-64k-debug-devel` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-64k-debug-devel-matched` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-64k-devel` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-64k-devel-matched` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-debug-devel` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-debug-devel-matched` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-devel` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-devel-matched` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-doc` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-rt-64k-debug-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-rt-64k-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-rt-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-tools-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-zfcpdump-devel-matched` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`libperf-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`perf` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`perf-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`python3-perf` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`python3-perf-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`rtla` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`rv` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-64k` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-64k-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-64k-debug` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-64k-debug-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-64k-debug-modules` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-64k-debug-modules-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-64k-debug-modules-extra` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-64k-modules` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-64k-modules-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-64k-modules-extra` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-abi-stablelists` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-debug` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-debug-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-debug-modules` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-debug-modules-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-debug-modules-extra` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-debug-uki-virt` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-debuginfo` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-modules` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-modules-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-modules-extra` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-rt-64k-debug-debuginfo` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-rt-64k-debuginfo` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-rt-debuginfo` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-tools` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-tools-debuginfo` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-tools-libs` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-uki-virt` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel-uki-virt-addons` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`kernel` Rocky Linux:9	before 0:5.14.0-570.23.1.el9_6	0:5.14.0-570.23.1.el9_6
`linux` Root:Ubuntu:24.04	before 6.8.0-147.147.aikido.90	6.8.0-147.147.aikido.90
`rootio-linux` Root:Ubuntu:24.04	before 6.8.0-147.147.aikido.90	6.8.0-147.147.aikido.90
`kernel-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6	before 6.4.0-15061.21.coco15sp6.1	6.4.0-15061.21.coco15sp6.1
`kernel-coco_debug` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6	before 6.4.0-15061.21.coco15sp6.1	6.4.0-15061.21.coco15sp6.1
`kernel-source-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6	before 6.4.0-15061.21.coco15sp6.1	6.4.0-15061.21.coco15sp6.1
`kernel-syms-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6	before 6.4.0-15061.21.coco15sp6.1	6.4.0-15061.21.coco15sp6.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 6.4.0-150700.53.3.1	6.4.0-150700.53.3.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 6.4.0-150700.53.3.1	6.4.0-150700.53.3.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 6.4.0-150700.53.3.1.150700.17.2.1	6.4.0-150700.53.3.1.150700.17.2.1
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 6.4.0-150700.53.3.1	6.4.0-150700.53.3.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 6.4.0-150700.53.3.1	6.4.0-150700.53.3.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP7	before 6.4.0-150700.53.3.1	6.4.0-150700.53.3.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP7	before 6.4.0-150700.53.3.1	6.4.0-150700.53.3.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP7	before 6.4.0-150700.53.3.1	6.4.0-150700.53.3.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP7	before 6.4.0-150700.53.3.1	6.4.0-150700.53.3.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP7	before 6.4.0-150700.53.3.1	6.4.0-150700.53.3.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP7	before 6.4.0-150700.53.3.1	6.4.0-150700.53.3.1
`kernel-livepatch-SLE15-SP7_Update_1` SUSE:Linux Enterprise Live Patching 15 SP7	before 1-150700.15.3.1	1-150700.15.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP7	before 6.4.0-150700.53.3.1	6.4.0-150700.53.3.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP7	before 6.4.0-150700.53.3.1	6.4.0-150700.53.3.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7	before 6.4.0-150700.20.3.1	6.4.0-150700.20.3.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7	before 6.4.0-150700.20.3.1	6.4.0-150700.20.3.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7	before 6.4.0-150700.20.3.1	6.4.0-150700.20.3.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6	before 6.4.0-150600.8.34.2	6.4.0-150600.8.34.2
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6	before 6.4.0-150600.8.34.2	6.4.0-150600.8.34.2
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6	before 6.4.0-150600.8.34.1	6.4.0-150600.8.34.1
`kernel-azure` openSUSE:Leap 15.6	before 6.4.0-150600.8.34.2	6.4.0-150600.8.34.2
`kernel-source-azure` openSUSE:Leap 15.6	before 6.4.0-150600.8.34.2	6.4.0-150600.8.34.2
`kernel-syms-azure` openSUSE:Leap 15.6	before 6.4.0-150600.8.34.1	6.4.0-150600.8.34.1
`kernel-livepatch-SLE15-SP6-RT_Update_10` SUSE:Linux Enterprise Live Patching 15 SP6	before 1-150600.1.5.1	1-150600.1.5.1
`kernel-rt` SUSE:Real Time Module 15 SP6	before 6.4.0-150600.10.34.1	6.4.0-150600.10.34.1
`kernel-rt_debug` SUSE:Real Time Module 15 SP6	before 6.4.0-150600.10.34.1	6.4.0-150600.10.34.1
`kernel-source-rt` SUSE:Real Time Module 15 SP6	before 6.4.0-150600.10.34.1	6.4.0-150600.10.34.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP6	before 6.4.0-150600.10.34.1	6.4.0-150600.10.34.1
`kernel-rt` openSUSE:Leap 15.6	before 6.4.0-150600.10.34.1	6.4.0-150600.10.34.1
`kernel-rt_debug` openSUSE:Leap 15.6	before 6.4.0-150600.10.34.1	6.4.0-150600.10.34.1
`kernel-source-rt` openSUSE:Leap 15.6	before 6.4.0-150600.10.34.1	6.4.0-150600.10.34.1
`kernel-syms-rt` openSUSE:Leap 15.6	before 6.4.0-150600.10.34.1	6.4.0-150600.10.34.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP6	before 6.4.0-150600.23.47.2	6.4.0-150600.23.47.2
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP6	before 6.4.0-150600.23.47.2	6.4.0-150600.23.47.2
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP6	before 6.4.0-150600.23.47.2.150600.12.20.2	6.4.0-150600.23.47.2.150600.12.20.2
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP6	before 6.4.0-150600.23.47.2	6.4.0-150600.23.47.2
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP6	before 6.4.0-150600.23.47.2	6.4.0-150600.23.47.2
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP6	before 6.4.0-150600.23.47.1	6.4.0-150600.23.47.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP6	before 6.4.0-150600.23.47.1	6.4.0-150600.23.47.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP6	before 6.4.0-150600.23.47.2	6.4.0-150600.23.47.2
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP6	before 6.4.0-150600.23.47.1	6.4.0-150600.23.47.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP6	before 6.4.0-150600.23.47.2	6.4.0-150600.23.47.2
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP6	before 6.4.0-150600.23.47.2	6.4.0-150600.23.47.2
`kernel-livepatch-SLE15-SP6_Update_10` SUSE:Linux Enterprise Live Patching 15 SP6	before 1-150600.13.5.1	1-150600.13.5.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP6	before 6.4.0-150600.23.47.2	6.4.0-150600.23.47.2
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP6	before 6.4.0-150600.23.47.2	6.4.0-150600.23.47.2
`dtb-aarch64` openSUSE:Leap 15.6	before 6.4.0-150600.23.47.1	6.4.0-150600.23.47.1
`kernel-64kb` openSUSE:Leap 15.6	before 6.4.0-150600.23.47.2	6.4.0-150600.23.47.2
`kernel-debug` openSUSE:Leap 15.6	before 6.4.0-150600.23.47.2	6.4.0-150600.23.47.2
`kernel-default` openSUSE:Leap 15.6	before 6.4.0-150600.23.47.2	6.4.0-150600.23.47.2
`kernel-default-base` openSUSE:Leap 15.6	before 6.4.0-150600.23.47.2.150600.12.20.2	6.4.0-150600.23.47.2.150600.12.20.2
`kernel-docs` openSUSE:Leap 15.6	before 6.4.0-150600.23.47.1	6.4.0-150600.23.47.1
`kernel-kvmsmall` openSUSE:Leap 15.6	before 6.4.0-150600.23.47.2	6.4.0-150600.23.47.2
`kernel-obs-build` openSUSE:Leap 15.6	before 6.4.0-150600.23.47.1	6.4.0-150600.23.47.1
`kernel-obs-qa` openSUSE:Leap 15.6	before 6.4.0-150600.23.47.1	6.4.0-150600.23.47.1
`kernel-source` openSUSE:Leap 15.6	before 6.4.0-150600.23.47.2	6.4.0-150600.23.47.2
`kernel-syms` openSUSE:Leap 15.6	before 6.4.0-150600.23.47.1	6.4.0-150600.23.47.1
`kernel-zfcpdump` openSUSE:Leap 15.6	before 6.4.0-150600.23.47.2	6.4.0-150600.23.47.2
`kernel-livepatch-MICRO-6-0-RT_Update_6` SUSE:Linux Micro 6.0	before 1-3.1	1-3.1
`kernel-rt` SUSE:Linux Micro 6.0	before 6.4.0-28.1	6.4.0-28.1
`kernel-source-rt` SUSE:Linux Micro 6.0	before 6.4.0-28.1	6.4.0-28.1
`kernel-default` SUSE:Linux Micro 6.0	before 6.4.0-28.1	6.4.0-28.1
`kernel-default-base` SUSE:Linux Micro 6.0	before 6.4.0-28.1.21.6	6.4.0-28.1.21.6
`kernel-kvmsmall` SUSE:Linux Micro 6.0	before 6.4.0-28.1	6.4.0-28.1
`kernel-livepatch-MICRO-6-0_Update_6` SUSE:Linux Micro 6.0	before 1-3.1	1-3.1
`kernel-source` SUSE:Linux Micro 6.0	before 6.4.0-28.1	6.4.0-28.1
`kernel-livepatch-MICRO-6-0-RT_Update_6` SUSE:Linux Micro 6.1	before 1-3.1	1-3.1
`kernel-rt` SUSE:Linux Micro 6.1	before 6.4.0-28.1	6.4.0-28.1
`kernel-source-rt` SUSE:Linux Micro 6.1	before 6.4.0-28.1	6.4.0-28.1
`kernel-default` SUSE:Linux Micro 6.1	before 6.4.0-28.1	6.4.0-28.1
`kernel-default-base` SUSE:Linux Micro 6.1	before 6.4.0-28.1.21.6	6.4.0-28.1.21.6
`kernel-kvmsmall` SUSE:Linux Micro 6.1	before 6.4.0-28.1	6.4.0-28.1
`kernel-livepatch-MICRO-6-0_Update_6` SUSE:Linux Micro 6.1	before 1-3.1	1-3.1
`kernel-source` SUSE:Linux Micro 6.1	before 6.4.0-28.1	6.4.0-28.1
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-aws-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-aws-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less 5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1	None known
`linux-aws-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1	None known
`linux-azure-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less 5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2	None known
`linux-azure-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less 5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1	None known
`linux-azure-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1	None known
`linux-azure-fde` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less 5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1	None known
`linux-gcp-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less 5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3	None known
`linux-gcp-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less 5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1	None known
`linux-gcp-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41	None known
`linux-gke` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less 5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111	None known
`linux-gke-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less 5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1	None known
`linux-gkeop` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less 5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77	None known
`linux-gkeop-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 40 moreShow less 5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1	None known
`linux-hwe-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less 5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1	None known
`linux-hwe-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less 5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1	None known
`linux-hwe-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less 5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1	None known
`linux-intel-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19	None known
`linux-oem-5.10` Ubuntu:20.04:LTS	All versions, plus listed versions 5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17 Show 21 moreShow less 5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61	None known
`linux-oem-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21 Show 7 moreShow less 5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36	None known
`linux-oem-5.14` Ubuntu:20.04:LTS	All versions, plus listed versions 5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10 Show 30 moreShow less 5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67	None known
`linux-oem-5.6` Ubuntu:20.04:LTS	All versions, plus listed versions 5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13 Show 24 moreShow less 5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60	None known
`linux-oracle-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-oracle-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1 Show 7 moreShow less 5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1	None known
`linux-oracle-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1	None known
`linux-raspi2` Ubuntu:20.04:LTS	All versions, plus listed versions 5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6	None known
`linux-riscv` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34 Show 7 moreShow less 5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45	None known
`linux-riscv-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1 Show 8 moreShow less 5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35	None known
`linux-riscv-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1 Show 5 moreShow less 5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1	None known
`linux-allwinner-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1	None known
`linux-aws-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1 Show 5 moreShow less 5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1	None known
`linux-aws-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 9 moreShow less 6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1	None known
`linux-aws-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1 Show 9 moreShow less 6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1	None known
`linux-aws-6.8` Ubuntu:22.04:LTS	before 6.8.0-1039.41~22.04.1, plus listed versions 6.8.0-1009.9~22.04.26.8.0-1010.10~22.04.26.8.0-1011.12~22.04.16.8.0-1013.14~22.04.16.8.0-1014.15~22.04.1 Show 18 moreShow less 6.8.0-1015.16~22.04.16.8.0-1016.17~22.04.26.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1023.25~22.04.16.8.0-1024.26~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1035.37~22.04.16.8.0-1036.38~22.04.1	6.8.0-1039.41~22.04.1
`linux-azure-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2	None known
`linux-azure-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 8 moreShow less 6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1	None known
`linux-azure-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1 Show 9 moreShow less 6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1	None known
`linux-azure-6.8` Ubuntu:22.04:LTS	before 6.8.0-1036.42~22.04.1, plus listed versions 6.8.0-1008.8~22.04.16.8.0-1009.9~22.04.16.8.0-1010.10~22.04.16.8.0-1012.14~22.04.16.8.0-1013.15~22.04.1 Show 14 moreShow less 6.8.0-1014.16~22.04.16.8.0-1015.17~22.04.26.8.0-1017.20~22.04.16.8.0-1018.21~22.04.16.8.0-1020.23~22.04.16.8.0-1021.25~22.04.16.8.0-1025.30~22.04.16.8.0-1026.31~22.04.16.8.0-1027.32~22.04.16.8.0-1028.33~22.04.16.8.0-1029.34~22.04.16.8.0-1030.35~22.04.16.8.0-1031.36~22.04.16.8.0-1034.39~22.04.1	6.8.0-1036.42~22.04.1
`linux-azure-fde-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1	None known
`linux-azure-fde-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1 Show 5 moreShow less 6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1	None known
`linux-gcp-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1020.22~22.04.25.19.0-1021.23~22.04.15.19.0-1022.24~22.04.15.19.0-1024.26~22.04.15.19.0-1025.27~22.04.15.19.0-1026.28~22.04.15.19.0-1027.29~22.04.15.19.0-1030.32~22.04.1	None known
`linux-gcp-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1009.9~22.04.36.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1011.11~22.04.36.2.0-1012.12~22.04.1 Show 7 moreShow less 6.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1016.18~22.04.16.2.0-1017.19~22.04.16.2.0-1018.20~22.04.16.2.0-1019.21~22.04.16.2.0-1021.23~22.04.1	None known
`linux-gcp-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1010.10~22.04.36.5.0-1011.11~22.04.16.5.0-1013.13~22.04.16.5.0-1014.14~22.04.16.5.0-1015.15~22.04.1 Show 8 moreShow less 6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1022.24~22.04.16.5.0-1023.25~22.04.16.5.0-1024.26~22.04.16.5.0-1025.27~22.04.1	None known
`linux-gcp-6.8` Ubuntu:22.04:LTS	before 6.8.0-1040.42~22.04.1, plus listed versions 6.8.0-1010.11~22.04.16.8.0-1011.12~22.04.16.8.0-1012.13~22.04.16.8.0-1013.14~22.04.16.8.0-1014.16~22.04.1 Show 20 moreShow less 6.8.0-1015.17~22.04.16.8.0-1016.18~22.04.16.8.0-1017.19~22.04.16.8.0-1018.20~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1024.26~22.04.16.8.0-1025.27~22.04.16.8.0-1026.28~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1034.36~22.04.26.8.0-1036.38~22.04.16.8.0-1037.39~22.04.1	6.8.0-1040.42~22.04.1
`linux-hwe-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-28.29~22.04.15.19.0-32.33~22.04.15.19.0-35.36~22.04.15.19.0-38.39~22.04.15.19.0-40.41~22.04.1 Show 6 moreShow less 5.19.0-41.42~22.04.15.19.0-42.43~22.04.15.19.0-43.44~22.04.15.19.0-45.46~22.04.15.19.0-46.47~22.04.15.19.0-50.50	None known
`linux-hwe-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-25.25~22.04.26.2.0-26.26~22.04.16.2.0-31.31~22.04.16.2.0-32.32~22.04.16.2.0-33.33~22.04.1 Show 5 moreShow less 6.2.0-34.34~22.04.16.2.0-35.35~22.04.16.2.0-36.37~22.04.16.2.0-37.38~22.04.16.2.0-39.40~22.04.1	None known
`linux-hwe-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-14.14~22.04.16.5.0-15.15~22.04.16.5.0-17.17~22.04.16.5.0-18.18~22.04.16.5.0-21.21~22.04.1 Show 8 moreShow less 6.5.0-25.25~22.04.16.5.0-26.26~22.04.16.5.0-27.28~22.04.16.5.0-28.29~22.04.16.5.0-35.35~22.04.16.5.0-41.41~22.04.26.5.0-44.44~22.04.16.5.0-45.45~22.04.1	None known
`linux-hwe-6.8` Ubuntu:22.04:LTS	before 6.8.0-85.85~22.04.1, plus listed versions 6.8.0-38.38~22.04.16.8.0-39.39~22.04.16.8.0-40.40~22.04.36.8.0-45.45~22.04.16.8.0-47.47~22.04.1 Show 15 moreShow less 6.8.0-48.48~22.04.16.8.0-49.49~22.04.16.8.0-50.51~22.04.16.8.0-51.52~22.04.16.8.0-52.53~22.04.16.8.0-57.59~22.04.16.8.0-58.60~22.04.16.8.0-59.61~22.04.16.8.0-60.63~22.04.16.8.0-64.67~22.04.16.8.0-65.68~22.04.16.8.0-78.78~22.04.16.8.0-79.79~22.04.16.8.0-83.83~22.04.16.8.0-84.84~22.04.1	6.8.0-85.85~22.04.1
`linux-ibm-6.8` Ubuntu:22.04:LTS	before 6.8.0-1037.37~22.04.1, plus listed versions 6.8.0-1008.8~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.16.8.0-1013.13~22.04.1 Show 16 moreShow less 6.8.0-1014.14~22.04.16.8.0-1015.15~22.04.16.8.0-1016.16~22.04.16.8.0-1017.17~22.04.16.8.0-1018.18~22.04.16.8.0-1019.19~22.04.16.8.0-1023.23~22.04.16.8.0-1024.24~22.04.16.8.0-1025.25~22.04.16.8.0-1026.26~22.04.16.8.0-1027.27~22.04.16.8.0-1028.28~22.04.16.8.0-1029.29~22.04.16.8.0-1030.30~22.04.16.8.0-1033.33~22.04.16.8.0-1036.36~22.04.1	6.8.0-1037.37~22.04.1
`linux-intel-iot-realtime` Ubuntu:22.04:LTS	All versions, plus listed versions 5.15.0-1073.75	None known
`linux-lowlatency-hwe-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.1 Show 5 moreShow less 5.19.0-1024.25~22.04.15.19.0-1025.26~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1030.30	None known
`linux-lowlatency-hwe-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1008.8~22.04.16.2.0-1009.9~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.1 Show 5 moreShow less 6.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1	None known
`linux-lowlatency-hwe-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-14.14.1~22.04.16.5.0-15.15.1.1~22.04.16.5.0-17.17.1.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.1 Show 8 moreShow less 6.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.16.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-41.41.1~22.04.16.5.0-42.42.1~22.04.16.5.0-44.44.1~22.04.16.5.0-45.45.1~22.04.1	None known
`linux-lowlatency-hwe-6.8` Ubuntu:22.04:LTS	before 6.8.0-84.84.1~22.04.1, plus listed versions 6.8.0-38.38.1~22.04.26.8.0-40.40.1~22.04.16.8.0-44.44.1~22.04.16.8.0-45.45.1~22.04.16.8.0-47.47.1~22.04.1 Show 19 moreShow less 6.8.0-48.48.3~22.04.16.8.0-49.49.1~22.04.16.8.0-50.51.1~22.04.16.8.0-51.52.1~22.04.16.8.0-52.53.1~22.04.16.8.0-54.56.1~22.04.16.8.0-55.57.1~22.04.16.8.0-56.58.1~22.04.16.8.0-57.59.1~22.04.16.8.0-58.60.1~22.04.16.8.0-59.61.1~22.04.16.8.0-60.63.1~22.04.16.8.0-62.65.1~22.04.16.8.0-63.66.1~22.04.16.8.0-64.67.1~22.04.16.8.0-65.68.1~22.04.16.8.0-78.78.1~22.04.16.8.0-79.79.1~22.04.16.8.0-83.83.1~22.04.1	6.8.0-84.84.1~22.04.1

History

History
Recorded	Changed	Sources
Nov 3, 2026	facts	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-21883 is a high vulnerability (CVSS 7.8) in Linux, published March 27, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.21%, the 11th percentile. Fixed in kernel 5.14.0-570.23.1.el9_6.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 239 package rows, 29 versions, 1,628 references and the rest of 14 source descriptions. The JSON record has them.