CVE-2025-39981

Bluetooth: MGMT: Fix possible UAFs

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: MGMT: Fix possible UAFs

This attemps to fix possible UAFs caused by struct mgmt_pending being freed while still being processed like in the following trace, in order to fix mgmt_pending_valid is introduce and use to check if the mgmt_pending hasn't been removed from the pending list, on the complete callbacks it is used to check and in addtion remove the cmd from the list while holding mgmt_pending_lock to avoid TOCTOU problems since if the cmd is left on the list it can still be accessed and freed.

BUG: KASAN: slab-use-after-free in mgmt_add_adv_patterns_monitor_sync+0x35/0x50 net/bluetooth/mgmt.c:5223 Read of size 8 at addr ffff8880709d4dc0 by task kworker/u11:0/55

CPU: 0 UID: 0 PID: 55 Comm: kworker/u11:0 Not tainted 6.16.4 #2 PREEMPT(full) Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1ubuntu1 04/01/2014 Workqueue: hci0 hci_cmd_sync_work Call Trace: <TASK> dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report+0xca/0x240 mm/kasan/report.c:482 kasan_report+0x118/0x150 mm/kasan/report.c:595 mgmt_add_adv_patterns_monitor_sync+0x35/0x50 net/bluetooth/mgmt.c:5223 hci_cmd_sync_work+0x210/0x3a0 net/bluetooth/hci_sync.c:332 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0xade/0x17b0 kernel/workqueue.c:3321 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3402 kthread+0x711/0x8a0 kernel/kthread.c:464 ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 home/kwqcheii/source/fuzzing/kernel/kasan/linux-6.16.4/arch/x86/entry/entry_64.S:245 </TASK>

Allocated by task 12210: kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:68 poison_kmalloc_redzone mm/kasan/common.c:377 [inline] __kasan_kmalloc+0x93/0xb0 mm/kasan/common.c:394 kasan_kmalloc include/linux/kasan.h:260 [inline] __kmalloc_cache_noprof+0x230/0x3d0 mm/slub.c:4364 kmalloc_noprof include/linux/slab.h:905 [inline] kzalloc_noprof include/linux/slab.h:1039 [inline] mgmt_pending_new+0x65/0x1e0 net/bluetooth/mgmt_util.c:269 mgmt_pending_add+0x35/0x140 net/bluetooth/mgmt_util.c:296 __add_adv_patterns_monitor+0x130/0x200 net/bluetooth/mgmt.c:5247 add_adv_patterns_monitor+0x214/0x360 net/bluetooth/mgmt.c:5364 hci_mgmt_cmd+0x9c9/0xef0 net/bluetooth/hci_sock.c:1719 hci_sock_sendmsg+0x6ca/0xef0 net/bluetooth/hci_sock.c:1839 sock_sendmsg_nosec net/socket.c:714 [inline] __sock_sendmsg+0x219/0x270 net/socket.c:729 sock_write_iter+0x258/0x330 net/socket.c:1133 new_sync_write fs/read_write.c:593 [inline] vfs_write+0x5c9/0xb30 fs/read_write.c:686 ksys_write+0x145/0x250 fs/read_write.c:738 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Freed by task 12221: kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:68 kasan_save_free_info+0x46/0x50 mm/kasan/generic.c:576 poison_slab_object mm/kasan/common.c:247 [inline] __kasan_slab_free+0x62/0x70 mm/kasan/common.c:264 kasan_slab_free include/linux/kasan.h:233 [inline] slab_free_hook mm/slub.c:2381 [inline] slab_free mm/slub.c:4648 [inline] kfree+0x18e/0x440 mm/slub.c:4847 mgmt_pending_free net/bluetooth/mgmt_util.c:311 [inline] mgmt_pending_foreach+0x30d/0x380 net/bluetooth/mgmt_util.c:257 __mgmt_power_off+0x169/0x350 net/bluetooth/mgmt.c:9444 hci_dev_close_sync+0x754/0x1330 net/bluetooth/hci_sync.c:5290 hci_dev_do_close net/bluetooth/hci_core.c:501 [inline] hci_dev_close+0x108/0x200 net/bluetooth/hci_core.c:526 sock_do_ioctl+0xd9/0x300 net/socket.c:1192 sock_ioctl+0x576/0x790 net/socket.c:1313 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl+0xf9/0x170 fs/ioctl.c:893 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xf ---truncated---

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.15%Up 0.1 points since Oct 15, 2025

What each source reports

CVE List Score used 7.8

Bluetooth: MGMT: Fix possible UAFs

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: MGMT: Fix possible UAFs

BUG: KASAN: slab-use-after-free in mgmt_add_adv_patterns_monitor_sync+0x35/0x50 net/bluetooth/mgmt.c:5223 Read of size 8 at addr ffff8880709d4dc0 by task kworker/u11:0/55

Record: CVE-2025-39981
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

EUVDEUVD-2025-34591 7.8

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: MGMT: Fix possible UAFs

BUG: KASAN: slab-use-after-free in mgmt_add_adv_patterns_monitor_sync+0x35/0x50 net/bluetooth/mgmt.c:5223 Read of size 8 at addr ffff8880709d4dc0 by task kworker/u11:0/55

Record: EUVD-2025-34591
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-rvm4-4vv7-vq58 7.8

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix...

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: MGMT: Fix possible UAFs

BUG: KASAN: slab-use-after-free in mgmt_add_adv_patterns_monitor_sync+0x35/0x50 net/bluetooth/mgmt.c:5223 Read of size 8 at addr ffff8880709d4dc0 by task kworker/u11:0/55

Record: GHSA-rvm4-4vv7-vq58
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: MGMT: Fix possible UAFs

BUG: KASAN: slab-use-after-free in mgmt_add_adv_patterns_monitor_sync+0x35/0x50 net/bluetooth/mgmt.c:5223 Read of size 8 at addr ffff8880709d4dc0 by task kworker/u11:0/55

Record: CVE-2025-39981
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVBELL-CVE-2025-39981 7.8

Record: BELL-CVE-2025-39981
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSV 7.8

Bluetooth: MGMT: Fix possible UAFs

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: MGMT: Fix possible UAFs

BUG: KASAN: slab-use-after-free in mgmt_add_adv_patterns_monitor_sync+0x35/0x50 net/bluetooth/mgmt.c:5223 Read of size 8 at addr ffff8880709d4dc0 by task kworker/u11:0/55

Record: CVE-2025-39981
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 48 moreShow less

OSVDEBIAN-CVE-2025-39981 7.8

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix possible UAFs This attemps to fix possible UAFs caused by struct mgmt_pending being freed while still being processed like in the following trace, in order to fix mgmt_pending_valid is introduce and use to check if the mgmt_pending hasn't been removed from the pending list, on the complete callbacks it is used to check and in addtion remove the cmd from the list while holding mgmt_pending_lock to avoid TOCTOU problems since if the cmd is left on the list it can still be accessed and freed. BUG: KASAN: slab-use-after-free in mgmt_add_adv_patterns_monitor_sync+0x35/0x50 net/bluetooth/mgmt.c:5223 Read of size 8 at addr ffff8880709d4dc0 by task kworker/u11:0/55 CPU: 0 UID: 0 PID: 55 Comm: kworker/u11:0 Not tainted 6.16.4 #2 PREEMPT(full) Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1ubuntu1 04/01/2014 Workqueue: hci0 hci_cmd_sync_work Call Trace: <TASK> dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report+0xca/0x240 mm/kasan/report.c:482 kasan_report+0x118/0x150 mm/kasan/report.c:595 mgmt_add_adv_patterns_monitor_sync+0x35/0x50 net/bluetooth/mgmt.c:5223 hci_cmd_sync_work+0x210/0x3a0 net/bluetooth/hci_sync.c:332 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0xade/0x17b0 kernel/workqueue.c:3321 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3402 kthread+0x711/0x8a0 kernel/kthread.c:464 ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 home/kwqcheii/source/fuzzing/kernel/kasan/linux-6.16.4/arch/x86/entry/entry_64.S:245 </TASK> Allocated by task 12210: kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:68 poison_kmalloc_redzone mm/kasan/common.c:377 [inline] __kasan_kmalloc+0x93/0xb0 mm/kasan/common.c:394 kasan_kmalloc include/linux/kasan.h:260 [inline] __kmalloc_cache_noprof+0x230/0x3d0 mm/slub.c:4364 kmalloc_noprof include/linux/slab.h:905 [inline] kzalloc_noprof include/linux/slab.h:1039 [inline] mgmt_pending_new+0x65/0x1e0 net/bluetooth/mgmt_util.c:269 mgmt_pending_add+0x35/0x140 net/bluetooth/mgmt_util.c:296 __add_adv_patterns_monitor+0x130/0x200 net/bluetooth/mgmt.c:5247 add_adv_patterns_monitor+0x214/0x360 net/bluetooth/mgmt.c:5364 hci_mgmt_cmd+0x9c9/0xef0 net/bluetooth/hci_sock.c:1719 hci_sock_sendmsg+0x6ca/0xef0 net/bluetooth/hci_sock.c:1839 sock_sendmsg_nosec net/socket.c:714 [inline] __sock_sendmsg+0x219/0x270 net/socket.c:729 sock_write_iter+0x258/0x330 net/socket.c:1133 new_sync_write fs/read_write.c:593 [inline] vfs_write+0x5c9/0xb30 fs/read_write.c:686 ksys_write+0x145/0x250 fs/read_write.c:738 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Freed by task 12221: kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:68 kasan_save_free_info+0x46/0x50 mm/kasan/generic.c:576 poison_slab_object mm/kasan/common.c:247 [inline] __kasan_slab_free+0x62/0x70 mm/kasan/common.c:264 kasan_slab_free include/linux/kasan.h:233 [inline] slab_free_hook mm/slub.c:2381 [inline] slab_free mm/slub.c:4648 [inline] kfree+0x18e/0x440 mm/slub.c:4847 mgmt_pending_free net/bluetooth/mgmt_util.c:311 [inline] mgmt_pending_foreach+0x30d/0x380 net/bluetooth/mgmt_util.c:257 __mgmt_power_off+0x169/0x350 net/bluetooth/mgmt.c:9444 hci_dev_close_sync+0x754/0x1330 net/bluetooth/hci_sync.c:5290 hci_dev_do_close net/bluetooth/hci_core.c:501 [inline] hci_dev_close+0x108/0x200 net/bluetooth/hci_core.c:526 sock_do_ioctl+0xd9/0x300 net/socket.c:1192 sock_ioctl+0x576/0x790 net/socket.c:1313 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl+0xf9/0x170 fs/ioctl.c:893 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xf ---truncated---

Record: DEBIAN-CVE-2025-39981
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2026-1642 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

fs/xattr: missing fdput() in fremovexattr error path

In the Linux kernel, the fremovexattr() syscall calls fdget() to acquire a file reference but returns early without calling fdput() when strncpy_from_user() fails on the name argument. In multi-threaded processes where fdget() takes the slow path, this permanently leaks one file reference per call, pinning the struct file and associated kernel objects in memory. An unprivileged local user can exploit this to cause kernel memory exhaustion. The issue was inadvertently fixed by commit a71874379ec8 ("xattr: switch to CLASS(fd)").(CVE-2024-14027)

In the Linux kernel, the following vulnerability has been resolved:

pps: Fix a use-after-free

On a board running ntpd and gpsd, I'm seeing a consistent use-after-free in sys_exit() from gpsd when rebooting:

pps pps1: removed
------------[ cut here ]------------
kobject: &apos;(null)&apos; (00000000db4bec24): is not initialized, yet kobject_put() is being called.
WARNING: CPU: 2 PID: 440 at lib/kobject.c:734 kobject_put+0x120/0x150
CPU: 2 UID: 299 PID: 440 Comm: gpsd Not tainted 6.11.0-rc6-00308-gb31c44928842 #1
Hardware name: Raspberry Pi 4 Model B Rev 1.1 (DT)
pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : kobject_put+0x120/0x150
lr : kobject_put+0x120/0x150
sp : ffffffc0803d3ae0
x29: ffffffc0803d3ae0 x28: ffffff8042dc9738 x27: 0000000000000001
x26: 0000000000000000 x25: ffffff8042dc9040 x24: ffffff8042dc9440
x23: ffffff80402a4620 x22: ffffff8042ef4bd0 x21: ffffff80405cb600
x20: 000000000008001b x19: ffffff8040b3b6e0 x18: 0000000000000000
x17: 0000000000000000 x16: 0000000000000000 x15: 696e6920746f6e20
x14: 7369203a29343263 x13: 205d303434542020 x12: 0000000000000000
x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000000
x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
 kobject_put+0x120/0x150
 cdev_put+0x20/0x3c
 __fput+0x2c4/0x2d8
 ____fput+0x1c/0x38
 task_work_run+0x70/0xfc
 do_exit+0x2a0/0x924
 do_group_exit+0x34/0x90
 get_signal+0x7fc/0x8c0
 do_signal+0x128/0x13b4
 do_notify_resume+0xdc/0x160
 el0_svc+0xd4/0xf8
 el0t_64_sync_handler+0x140/0x14c
 el0t_64_sync+0x190/0x194
---[ end trace 0000000000000000 ]---

...followed by more symptoms of corruption, with similar stacks:

refcount_t: underflow; use-after-free.
kernel BUG at lib/list_debug.c:62!
Kernel panic - not syncing: Oops - BUG: Fatal exception

This happens because pps_device_destruct() frees the pps_device with the embedded cdev immediately after calling cdev_del(), but, as the comment above cdev_del() notes, fops for previously opened cdevs are still callable even after cdev_del() returns. I think this bug has always been there: I can't explain why it suddenly started happening every time I reboot this particular board.

In commit d953e0e837e6 ("pps: Fix a use-after free bug when unregistering a source."), George Spelvin suggested removing the embedded cdev. That seems like the simplest way to fix this, so I've implemented his suggestion, using __register_chrdev() with pps_idr becoming the source of truth for which minor corresponds to which device.

But now that pps_idr defines userspace visibility instead of cdev_add(), we need to be sure the pps->dev refcount can't reach zero while userspace can still find it again. So, the idr_remove() call moves to pps_unregister_cdev(), and pps_idr now holds a reference to pps->dev.

pps_core: source serial1 got cdev (251:1)
&lt;...&gt;
pps pps1: removed
pps_core: unregistering pps1

…

Record: OESA-2026-1642
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2026-1643 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

fs/xattr: missing fdput() in fremovexattr error path

In the Linux kernel, the following vulnerability has been resolved:

pps: Fix a use-after-free

On a board running ntpd and gpsd, I'm seeing a consistent use-after-free in sys_exit() from gpsd when rebooting:

pps pps1: removed
------------[ cut here ]------------
kobject: &apos;(null)&apos; (00000000db4bec24): is not initialized, yet kobject_put() is being called.
WARNING: CPU: 2 PID: 440 at lib/kobject.c:734 kobject_put+0x120/0x150
CPU: 2 UID: 299 PID: 440 Comm: gpsd Not tainted 6.11.0-rc6-00308-gb31c44928842 #1
Hardware name: Raspberry Pi 4 Model B Rev 1.1 (DT)
pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : kobject_put+0x120/0x150
lr : kobject_put+0x120/0x150
sp : ffffffc0803d3ae0
x29: ffffffc0803d3ae0 x28: ffffff8042dc9738 x27: 0000000000000001
x26: 0000000000000000 x25: ffffff8042dc9040 x24: ffffff8042dc9440
x23: ffffff80402a4620 x22: ffffff8042ef4bd0 x21: ffffff80405cb600
x20: 000000000008001b x19: ffffff8040b3b6e0 x18: 0000000000000000
x17: 0000000000000000 x16: 0000000000000000 x15: 696e6920746f6e20
x14: 7369203a29343263 x13: 205d303434542020 x12: 0000000000000000
x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000000
x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
 kobject_put+0x120/0x150
 cdev_put+0x20/0x3c
 __fput+0x2c4/0x2d8
 ____fput+0x1c/0x38
 task_work_run+0x70/0xfc
 do_exit+0x2a0/0x924
 do_group_exit+0x34/0x90
 get_signal+0x7fc/0x8c0
 do_signal+0x128/0x13b4
 do_notify_resume+0xdc/0x160
 el0_svc+0xd4/0xf8
 el0t_64_sync_handler+0x140/0x14c
 el0t_64_sync+0x190/0x194
---[ end trace 0000000000000000 ]---

...followed by more symptoms of corruption, with similar stacks:

refcount_t: underflow; use-after-free.
kernel BUG at lib/list_debug.c:62!
Kernel panic - not syncing: Oops - BUG: Fatal exception

pps_core: source serial1 got cdev (251:1)
&lt;...&gt;
pps pps1: removed
pps_core: unregistering pps1

…

Record: OESA-2026-1643
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2026-1644 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

fs/xattr: missing fdput() in fremovexattr error path

In the Linux kernel, the following vulnerability has been resolved:

pps: Fix a use-after-free

On a board running ntpd and gpsd, I'm seeing a consistent use-after-free in sys_exit() from gpsd when rebooting:

pps pps1: removed
------------[ cut here ]------------
kobject: &apos;(null)&apos; (00000000db4bec24): is not initialized, yet kobject_put() is being called.
WARNING: CPU: 2 PID: 440 at lib/kobject.c:734 kobject_put+0x120/0x150
CPU: 2 UID: 299 PID: 440 Comm: gpsd Not tainted 6.11.0-rc6-00308-gb31c44928842 #1
Hardware name: Raspberry Pi 4 Model B Rev 1.1 (DT)
pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : kobject_put+0x120/0x150
lr : kobject_put+0x120/0x150
sp : ffffffc0803d3ae0
x29: ffffffc0803d3ae0 x28: ffffff8042dc9738 x27: 0000000000000001
x26: 0000000000000000 x25: ffffff8042dc9040 x24: ffffff8042dc9440
x23: ffffff80402a4620 x22: ffffff8042ef4bd0 x21: ffffff80405cb600
x20: 000000000008001b x19: ffffff8040b3b6e0 x18: 0000000000000000
x17: 0000000000000000 x16: 0000000000000000 x15: 696e6920746f6e20
x14: 7369203a29343263 x13: 205d303434542020 x12: 0000000000000000
x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000000
x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
 kobject_put+0x120/0x150
 cdev_put+0x20/0x3c
 __fput+0x2c4/0x2d8
 ____fput+0x1c/0x38
 task_work_run+0x70/0xfc
 do_exit+0x2a0/0x924
 do_group_exit+0x34/0x90
 get_signal+0x7fc/0x8c0
 do_signal+0x128/0x13b4
 do_notify_resume+0xdc/0x160
 el0_svc+0xd4/0xf8
 el0t_64_sync_handler+0x140/0x14c
 el0t_64_sync+0x190/0x194
---[ end trace 0000000000000000 ]---

...followed by more symptoms of corruption, with similar stacks:

refcount_t: underflow; use-after-free.
kernel BUG at lib/list_debug.c:62!
Kernel panic - not syncing: Oops - BUG: Fatal exception

pps_core: source serial1 got cdev (251:1)
&lt;...&gt;
pps pps1: removed
pps_core: unregistering pps1

…

Record: OESA-2026-1644
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2025:22405 7.6

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:22405
CVSS 3.1: 7.6 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Updated: 2026-11-02

OSVRHSA-2025:22854 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:22854
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:0271 7.5

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:0271
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:0457 7.5

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:0457
CVSS 3.1: 7.5 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2026:10108 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:10108
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:21706 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:21706
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:21745 7.8

Red Hat Security Advisory: kernel-rt security update

Record: RHSA-2026:21745
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:9512 7.5

Red Hat Security Advisory: kernel-rt security update

Record: RHSA-2026:9512
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:9644 7.5

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:9644
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2025:22405 7.6

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CVE-2025-38724)
kernel: wifi: cfg80211: fix use-after-free in cmp_bss() (CVE-2025-39864)
kernel: e1000e: fix heap overflow in e1000_set_eeprom (CVE-2025-39898)
kernel: wifi: mt76: fix linked list corruption (CVE-2025-39918)
kernel: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (CVE-2025-39955)
kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)
kernel: iommu/vt-d: Disallow dirty tracking if incoherent page walk (CVE-2025-40058)
kernel: ice: ice_adapter: release xa entry on adapter allocation failure (CVE-2025-40185)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2025:22405
CVSS 3.1: 7.6 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
Updated: 2026-11-02

OSVRLSA-2025:22854 7.8

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: cifs: Fix oops due to uninitialised variable (CVE-2025-38737)
kernel: can: j1939: implement NETDEV_UNREGISTER notification handler (CVE-2025-39925)
kernel: Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CVE-2025-39982)
kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)
kernel: net/mlx5: fs, fix UAF in flow counter release (CVE-2025-39979)
kernel: Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CVE-2025-39983)
kernel: io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CVE-2025-40047)
kernel: iommu/vt-d: Disallow dirty tracking if incoherent page walk (CVE-2025-40058)
kernel: ice: ice_adapter: release xa entry on adapter allocation failure (CVE-2025-40185)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2025:22854
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:21706 7.8

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)
kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)
kernel: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CVE-2025-68347)
kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116)
kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)
kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)
kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)
kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)
kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)
kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)
kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)
kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)
kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)
kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)
kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)
kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)
kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:21706
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:21745 7.8

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)
kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)
kernel: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CVE-2025-68347)
kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116)
kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)
kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)
kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)
kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)
kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)
kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)
kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)
kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)
kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)
kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)
kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)
kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)
kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:21745
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2025-39981 7.1

Record: UBUNTU-CVE-2025-39981
CVSS 4.0: 7.1 HighCVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVALSA-2025:22405 No score

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CVE-2025-38724)
kernel: wifi: cfg80211: fix use-after-free in cmp_bss() (CVE-2025-39864)
kernel: e1000e: fix heap overflow in e1000_set_eeprom (CVE-2025-39898)
kernel: wifi: mt76: fix linked list corruption (CVE-2025-39918)
kernel: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (CVE-2025-39955)
kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)
kernel: iommu/vt-d: Disallow dirty tracking if incoherent page walk (CVE-2025-40058)
kernel: ice: ice_adapter: release xa entry on adapter allocation failure (CVE-2025-40185)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2025:22405
Updated: 2026-11-02

OSVALSA-2025:22854 No score

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: cifs: Fix oops due to uninitialised variable (CVE-2025-38737)
kernel: can: j1939: implement NETDEV_UNREGISTER notification handler (CVE-2025-39925)
kernel: Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CVE-2025-39982)
kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)
kernel: net/mlx5: fs, fix UAF in flow counter release (CVE-2025-39979)
kernel: Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CVE-2025-39983)
kernel: io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CVE-2025-40047)
kernel: iommu/vt-d: Disallow dirty tracking if incoherent page walk (CVE-2025-40058)
kernel: ice: ice_adapter: release xa entry on adapter allocation failure (CVE-2025-40185)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2025:22854
Updated: 2026-11-02

OSVALSA-2026:21706 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)
kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)
kernel: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CVE-2025-68347)
kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116)
kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)
kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)
kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)
kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)
kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)
kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)
kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)
kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)
kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)
kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)
kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)
kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)
kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:21706
Updated: 2026-11-02

OSVALSA-2026:21745 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)
kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)
kernel: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CVE-2025-68347)
kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116)
kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)
kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)
kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)
kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)
kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)
kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)
kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)
kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)
kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)
kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)
kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)
kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)
kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:21745
Updated: 2026-11-02

OSVAZL-68501 No score

CVE-2025-39981 affecting package kernel for versions less than 6.6.141.1-1

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: MGMT: Fix possible UAFs

BUG: KASAN: slab-use-after-free in mgmt_add_adv_patterns_monitor_sync+0x35/0x50 net/bluetooth/mgmt.c:5223 Read of size 8 at addr ffff8880709d4dc0 by task kworker/u11:0/55

Record: AZL-68501
Updated: 2026-11-02

OSVCLSA-2025-1766488019 No score

kernel: Fix of 63 CVEs

scsi: target: iscsi: Fix timeout on deleted connection {CVE-2025-38075}
tls: wait for pending async decryptions if tls_strp_msg_hold fails {CVE-2025-40176}
clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns {CVE-2025-38499}
rcu: Fix rcu_read_unlock() deadloop due to IRQ work {CVE-2025-39744}
page_pool: Fix use-after-free in page_pool_recycle_in_ring {CVE-2025-38129}
rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access {CVE-2025-38704}
bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors {CVE-2024-56675}
padata: Fix pd UAF once and for all {CVE-2025-38584}
padata: do not leak refcount in reorder_work {CVE-2025-38031}
Bluetooth: MGMT: Fix possible UAFs {CVE-2025-39981}
Bluetooth: MGMT: Protect mgmt_pending list with its own lock {CVE-2025-38117}
Bluetooth: MGMT: Remove unused mgmt_pending_find_data
Bluetooth: MGMT: set_mesh: update LE scan interval and window
Bluetooth: hci_sync: fix set_local_name race condition {CVE-2025-39797}
xfrm: Duplicate SPI Handling {CVE-2025-39797}
kernfs: Fix UAF in polling when open file is released {CVE-2025-39881}
OPP: add index check to assert to avoid buffer overflow in _read_freq() {CVE-2024-57998}
block: fix uaf for flush rq while iterating tags {CVE-2024-58072} {CVE-2024-53170}
wifi: rtlwifi: remove unused check_buddy_priv {CVE-2024-58072}
wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() {CVE-2024-58014}
block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() {CVE-2025-21631}
net: af_can: do not leave a dangling sk pointer in can_create() {CVE-2024-40954}
Squashfs: sanity check symbolic link size {CVE-2024-46744}
e1000e: fix heap overflow in e1000_set_eeprom {CVE-2025-39898}
wifi: cfg80211: fix use-after-free in cmp_bss() {CVE-2025-39864}
nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() {CVE-2025-38724}
i40e: fix idx validation in config queues msg {CVE-2025-39971}
NFS: Fix a race when updating an existing write {CVE-2025-39697}
tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). {CVE-2025-39955}
wifi: mt76: fix linked list corruption {CVE-2025-39918}
io_uring/waitid: always prune wait queue entry in io_waitid_wait() {CVE-2025-40047}
Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync {CVE-2025-39982}
workqueue: Put the pwq after detaching the rescuer from the pool {CVE-2025-21786}
zram: fix potential UAF of zram table {CVE-2025-21671}
sched: sch_cake: add bounds checks to host bulk flow fairness counts {CVE-2025-21647}
wifi: mt76: mt7925: fix off by one in mt7925_load_clc() {CVE-2024-57990}
blk-cgroup: Fix UAF in blkcg_unpin_online() {CVE-2024-56672}
NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() {CVE-2024-54456}
nfsd: release svc_expkey/svc_export with rcu_work {CVE-2024-53216}
igb: Fix potential invalid memory access in igb_init_module() {CVE-2024-52332}
x86/tdx: Fix "in-kernel MMIO" check {CVE-2024-47727}
drm/amd/display: Check dce_hwseq before dereferencing it {CVE-2025-38361}
dm-bufio: don't schedule in atomic context {CVE-2025-37928}
usb: xhci: Fix isochronous Ring Underrun/Overrun event handling {CVE-2025-37882}
KVM: arm64: Tear down vGIC on failed vCPU creation {CVE-2025-37849}
usb: xhci: Apply the link chain quirk on NEC isoc endpoints {CVE-2025-22022}
drm/amd/display: Fix out-of-bound accesses {CVE-2025-21985}
usb: cdc-acm: Check control transfer buffer size before access {CVE-2025-21704}
pfifo_tail_enqueue: Drop new packet when sch->limit == 0 {CVE-2025-21702}
partitions: mac: fix handling of bogus partition table {CVE-2025-21772}
ipmr: do not call mr_mfc_uses_dev() for unres entries {CVE-2025-21719}
net: openvswitch: fix nested key length validation in the set() action {CVE-2025-37789}
isofs: Prevent the use of too small fid {CVE-2025-37780}
sctp: detect and prevent references to a freed transport in sendmsg {CVE-2025-23142}
iommu/amd: Fix…

Record: CLSA-2025-1766488019
Updated: 2026-11-02

OSVCLSA-2026-1767864313 No score

kernel: Fix of 46 CVEs

mm: hugetlb: fix UAF in hugetlb_handle_userfault {CVE-2022-50630}
drm/amdkfd: fix potential kgd_mem UAFs {CVE-2023-53816}
net/mlx5e: Fix deadlock in tc route query code {CVE-2023-53591}
PCI: Fix pci_device_is_present() for VFs by checking PF {CVE-2022-50636}
wifi: ath11k: fix monitor mode bringup crash {CVE-2022-50627}
wifi: mac80211_hwsim: drop short frames {CVE-2023-53321}
scsi: target: iscsi: Fix timeout on deleted connection {CVE-2025-38075}
amdgpu: validate offset_in_bo of drm_amdgpu_gem_va {CVE-2023-53819}
dmaengine: ptdma: check for null desc before calling pt_cmd_callback {CVE-2023-53755}
wifi: mt7601u: fix an integer underflow {CVE-2023-53679}
Bluetooth: hci_event: call disconnect callback before deleting conn {CVE-2023-53673}
firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails {CVE-2022-50087}
tls: wait for pending async decryptions if tls_strp_msg_hold fails {CVE-2025-40176}
clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns {CVE-2025-38499}
net: openvswitch: reject negative ifindex {CVE-2023-53843}
drm/i915: Fix NULL ptr deref by checking new_crtc_state {CVE-2023-53833}
iommu/amd: Improve page fault error reporting {CVE-2023-53789}
media: v4l2-mem2mem: add lock to protect parameter num_rdy {CVE-2023-53519}
Bluetooth: Fix potential use-after-free when clear keys {CVE-2023-53386}
Bluetooth: L2CAP: Fix use-after-free {CVE-2023-53305}
ext4: add bounds checking in get_max_inline_xattr_value_size() {CVE-2023-53285}
ext4: fix use-after-free in ext4_orphan_cleanup {CVE-2022-50673}
cacheinfo: Fix shared_cpu_map to handle shared caches at different levels {CVE-2023-53254}
rxrpc: Make it so that a waiting process can be aborted {CVE-2023-53218}
ip6_vti: fix slab-use-after-free in decode_session6 {CVE-2023-53821}
vxlan: Fix nexthop hash size {CVE-2023-53192}
wifi: mac80211: check S1G action frame size {CVE-2023-53257}
wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit() {CVE-2022-50279}
dm flakey: fix a crash with invalid table line {CVE-2023-53786}
md/raid10: fix null-ptr-deref in raid10_sync_request {CVE-2023-53832}
md: don't dereference mddev after export_rdev() {CVE-2023-53665}
md: fix 'delete_mutex' deadlock
md: fix duplicate filename for rdev {CVE-2023-53665}
kernfs: Fix UAF in polling when open file is released {CVE-2025-39881}
mptcp: pm: avoid possible UaF when selecting endp {CVE-2024-44974}
mptcp: fix UaF in listener shutdown {CVE-2023-53088}
Bluetooth: MGMT: Fix possible UAFs {CVE-2025-39981}
Bluetooth: hci_sync: fix set_local_name race condition
Bluetooth: MGMT: Fix possible deadlocks {CVE-2024-53207}
tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). {CVE-2025-40186}
e1000e: fix heap overflow in e1000_set_eeprom {CVE-2025-39898}
wifi: cfg80211: fix use-after-free in cmp_bss() {CVE-2025-39864}
nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() {CVE-2025-38724}
usb: xhci: Apply the link chain quirk on NEC isoc endpoints {CVE-2025-22022}
xfrm: xfrm_alloc_spi shouldn't use 0 as SPI {CVE-2025-39965}
xfrm: Duplicate SPI Handling {CVE-2025-39797}
nfsd: release svc_expkey/svc_export with rcu_work {CVE-2024-53216}
NFS: Fix a race when updating an existing write {CVE-2025-39697}
nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests
drm/amd/display: Check dce_hwseq before dereferencing it {CVE-2025-38361}

Record: CLSA-2026-1767864313
Updated: 2026-11-02

OSVCLSA-2026-1792239979 No score

kernel: Fix of 73 CVEs

ipv4: validate checksum_start before completing checksum {CVE-2026-99999}
net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72055}
ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). {CVE-2026-63921}
ip6: vti: Use ip6_tnl.net in vti6_changelink(). {CVE-2026-63917}
bpf: Mask pseudo pointer values in verifier logs {CVE-2026-72402}
drop_monitor: perform u64_stats updates under IRQ-disabled section {CVE-2026-68286}
wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin {CVE-2026-68362}
gve: fix Rx queue stall on alloc failure {CVE-2026-68129}
vxlan: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-68432}
net: qrtr: restrict socket creation to the initial network namespace {CVE-2026-68294}
nbd: restrict sockets to TCP and UDP {CVE-2025-40080}
audit: fix recursive locking deadlock in audit_dupe_exe() {CVE-2026-68096}
scsi: smartpqi: Fix device resources accessed after device removal {CVE-2025-68371}
cifs: fix oops during encryption {CVE-2022-50341}
net: qrtr: ns: Limit the maximum server registration per node {CVE-2026-43491}
mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING {CVE-2022-50430}
ipvlan: inherit needed_headroom and needed_tailroom from phy_dev {CVE-2026-74744}
xfs: don't swallow dquot recovery verification errors {CVE-2026-80529}
xfs: dquot recovery does not validate the recovered dquot {CVE-2026-80529}
xfs: clean up dqblk extraction {CVE-2026-80529}
Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}
bpf: Fix accesses to uninit stack slots {CVE-2023-52452}
bpf: Allow reads from uninit stack {CVE-2023-52452}
fbdev: Fix incorrect page mapping clearance at fb_deferred_io_release() {CVE-2023-52731}
iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() {CVE-2026-68324}
nfsd: make sure exp active before svc_export_show {CVE-2024-56558}
Input: elan_i2c - validate firmware size before use {CVE-2026-64237}
net/sched: ets: use old 'nbands' while purging unused classes {CVE-2025-38684}
net_sched: ets: fix a race in ets_qdisc_change() {CVE-2025-38107}
fbcon: Fix OOB access in font allocation {CVE-2025-39967}
fbcon: fix integer overflow in fbcon_do_set_font {CVE-2025-39967}
kyber: fix out of bounds access when preempted {CVE-2021-46984}
padata: Reset next CPU when reorder sequence wraps around {CVE-2025-38584}
padata: Fix pd UAF once and for all {CVE-2025-38584}
padata: Fix refcnt handling in padata_free_shell() {CVE-2023-52854}
xen/privcmd: unregister xenstore notifier on module exit {CVE-2026-31788}
xen/privcmd: restrict usage in unprivileged domU {CVE-2026-31788}
Bluetooth: MGMT: Fix memory leak in set_ssp_complete {CVE-2026-23151}
Bluetooth: MGMT: Fix possible UAFs {CVE-2025-39981}
xfrm: Fix dev use-after-free in xfrm async resumption {CVE-2026-72463}
xfrm: hold dev ref until after transport_finish NF_HOOK {CVE-2026-31663}
netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one {CVE-2023-53333}
nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec {CVE-2026-22998}
bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() {CVE-2022-49840}
ALSA: firewire-motu: add bounds check in put_user loop for DSP events {CVE-2025-68753}
ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events {CVE-2025-68347}
HID: multitouch: Add NULL check in mt_input_configured {CVE-2024-58020}
HID: multitouch: Correct devm device reference for hidinput input_dev name {CVE-2023-53454}
RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction {CVE-2025-38161}
RDMA/mlx5: Return the firmware result upon destroying QP/RQ {CVE-2023-53286}
cifs: Fix warning and UAF when destroy the MR list {CVE-2023-53427}
cifs: Fix lost destroy smbd connection when MR allocate failed {CVE-2023-54260}
cifs: Fix oops due to uncleared server->smbd_conn in reconnect {CVE-2023-53006}
PCI/ASPM:…

Record: CLSA-2026-1792239979
Updated: 2026-11-02

OSVopenSUSE-SU-2025:20091-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-21816: hrtimers: Force migrate away hrtimers queued after (bsc#1238472).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39779: btrfs: subpage: keep TOWRITE tag until folio is cleaned (bsc#1249495).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39903: of_numa: fix uninitialized memory nodes causing kernel panic (bsc#1250749).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39950: net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR (bsc#1251176).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39956: igc: don't fail igc_probe() on LED setup error (bsc#1251809).
CVE-2025-39963: io_uring: fix incorrect io_kiocb reference in io_link_skb (bsc#1251819).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-39979: net/mlx5: fs, add API for sharing HWS action by refcount (bsc#1252067).
CVE-2025-39984: net: tun: Update napi->skb after XDP process (bsc#1252081).
CVE-2025-39992: mm: swap: check for stable address space before operating on the VMA (bsc#1252076).
CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
CVE-2025-40012: net/smc: fix warning in smc_rx_splice() when calling get_page() (bsc#1252330).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780).
CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826).
CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation failures (bsc#1252848).
CVE-2025-40078: bpf: Explicitly check accesses to bpf_sock_addr (bsc#1252789).
CVE-2025-40080: nbd: restrict sockets to TCP and UDP (bsc#1252774).
CVE-2025-40100: btrfs: do not assert we found block group item when creating free space tree (bsc#1252918).

The following non security issues were fixed:

add bug reference to existing hv_netvsc change (bsc#1252265) -…

Record: openSUSE-SU-2025:20091-1
Updated: 2026-11-02

OSVROOT-OS-DEBIAN-12-CVE-2025-39981 No score

CVE-2025-39981 in linux - Patched by Root

Root has patched CVE-2025-39981 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record: ROOT-OS-DEBIAN-12-CVE-2025-39981
Updated: 2026-11-02

OSVROOT-OS-DEBIAN-13-CVE-2025-39981 No score

CVE-2025-39981 in linux - Patched by Root

Root has patched CVE-2025-39981 in the linux package for Root:Debian:13. Multiple fixed versions available.

Record: ROOT-OS-DEBIAN-13-CVE-2025-39981
Updated: 2026-11-03

OSVROOT-OS-UBUNTU-2404-CVE-2025-39981 No score

CVE-2025-39981 in linux - Patched by Root

Root has patched CVE-2025-39981 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record: ROOT-OS-UBUNTU-2404-CVE-2025-39981
Updated: 2026-11-02

OSVSUSE-SU-2025:21040-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom (bsc#1250742).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check…

Record: SUSE-SU-2025:21040-1
Updated: 2026-11-02

OSVSUSE-SU-2025:21052-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom (bsc#1250742).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check…

Record: SUSE-SU-2025:21052-1
Updated: 2026-11-02

OSVSUSE-SU-2025:21056-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom (bsc#1250742).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check…

Record: SUSE-SU-2025:21056-1
Updated: 2026-11-02

OSVSUSE-SU-2025:21064-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom (bsc#1250742).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check…

Record: SUSE-SU-2025:21064-1
Updated: 2026-11-02

OSVSUSE-SU-2025:21080-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-21816: hrtimers: Force migrate away hrtimers queued after (bsc#1238472).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39779: btrfs: subpage: keep TOWRITE tag until folio is cleaned (bsc#1249495).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39903: of_numa: fix uninitialized memory nodes causing kernel panic (bsc#1250749).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39950: net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR (bsc#1251176).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39956: igc: don't fail igc_probe() on LED setup error (bsc#1251809).
CVE-2025-39963: io_uring: fix incorrect io_kiocb reference in io_link_skb (bsc#1251819).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-39979: net/mlx5: fs, add API for sharing HWS action by refcount (bsc#1252067).
CVE-2025-39984: net: tun: Update napi->skb after XDP process (bsc#1252081).
CVE-2025-39992: mm: swap: check for stable address space before operating on the VMA (bsc#1252076).
CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
CVE-2025-40012: net/smc: fix warning in smc_rx_splice() when calling get_page() (bsc#1252330).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780).
CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826).
CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation failures (bsc#1252848).
CVE-2025-40078: bpf: Explicitly check accesses to bpf_sock_addr (bsc#1252789).
CVE-2025-40080: nbd: restrict sockets to TCP and UDP (bsc#1252774).
CVE-2025-40100: btrfs: do not assert we found block group item when creating free space tree (bsc#1252918).

The following non security issues were fixed:

add bug reference to existing hv_netvsc change (bsc#1252265) -…

Record: SUSE-SU-2025:21080-1
Updated: 2026-11-02

OSVSUSE-SU-2025:21147-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-21816: hrtimers: Force migrate away hrtimers queued after (bsc#1238472).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39779: btrfs: subpage: keep TOWRITE tag until folio is cleaned (bsc#1249495).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39903: of_numa: fix uninitialized memory nodes causing kernel panic (bsc#1250749).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39950: net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR (bsc#1251176).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39956: igc: don't fail igc_probe() on LED setup error (bsc#1251809).
CVE-2025-39963: io_uring: fix incorrect io_kiocb reference in io_link_skb (bsc#1251819).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-39979: net/mlx5: fs, add API for sharing HWS action by refcount (bsc#1252067).
CVE-2025-39984: net: tun: Update napi->skb after XDP process (bsc#1252081).
CVE-2025-39992: mm: swap: check for stable address space before operating on the VMA (bsc#1252076).
CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
CVE-2025-40012: net/smc: fix warning in smc_rx_splice() when calling get_page() (bsc#1252330).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780).
CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826).
CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation failures (bsc#1252848).
CVE-2025-40078: bpf: Explicitly check accesses to bpf_sock_addr (bsc#1252789).
CVE-2025-40080: nbd: restrict sockets to TCP and UDP (bsc#1252774).
CVE-2025-40100: btrfs: do not assert we found block group item when creating free space tree (bsc#1252918).

The following non security issues were fixed:

add bug reference to existing hv_netvsc change (bsc#1252265) -…

Record: SUSE-SU-2025:21147-1
Updated: 2026-11-02

OSVSUSE-SU-2025:21180-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-21816: hrtimers: Force migrate away hrtimers queued after (bsc#1238472).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39779: btrfs: subpage: keep TOWRITE tag until folio is cleaned (bsc#1249495).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39903: of_numa: fix uninitialized memory nodes causing kernel panic (bsc#1250749).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39950: net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR (bsc#1251176).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39956: igc: don't fail igc_probe() on LED setup error (bsc#1251809).
CVE-2025-39963: io_uring: fix incorrect io_kiocb reference in io_link_skb (bsc#1251819).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-39979: net/mlx5: fs, add API for sharing HWS action by refcount (bsc#1252067).
CVE-2025-39984: net: tun: Update napi->skb after XDP process (bsc#1252081).
CVE-2025-39992: mm: swap: check for stable address space before operating on the VMA (bsc#1252076).
CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
CVE-2025-40012: net/smc: fix warning in smc_rx_splice() when calling get_page() (bsc#1252330).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780).
CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826).
CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation failures (bsc#1252848).
CVE-2025-40078: bpf: Explicitly check accesses to bpf_sock_addr (bsc#1252789).
CVE-2025-40080: nbd: restrict sockets to TCP and UDP (bsc#1252774).
CVE-2025-40100: btrfs: do not assert we found block group item when creating free space tree (bsc#1252918).

The following non security issues were fixed:

add bug reference to existing hv_netvsc change (bsc#1252265) -…

Record: SUSE-SU-2025:21180-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4057-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
CVE-2025-38735: gve: prevent ethtool ops after shutdown (bsc#1249288).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39810: bnxt_en: Fix memory corruption when FW resources change during ifdown (bsc#1249975).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39832: net/mlx5: Add sync reset drop mode support (bsc#1249901).
CVE-2025-39847: ppp: fix memory leak in pad_compress_skb (bsc#1250292).
CVE-2025-39850: vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects (bsc#1250276).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39853: i40e: Fix potential invalid access when MAC list is empty (bsc#1250275).
CVE-2025-39854: ice: fix NULL access of tx->in_use in ice_ll_ts_intr (bsc#1250297).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom (bsc#1250742).
CVE-2025-39900: net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y (bsc#1250758).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051). -…

Record: SUSE-SU-2025:4057-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4128-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826).
CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation failures (bsc#1252848).
CVE-2025-40078: bpf: Explicitly check accesses to bpf_sock_addr…

Record: SUSE-SU-2025:4128-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4132-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
CVE-2025-38735: gve: prevent ethtool ops after shutdown (bsc#1249288).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39810: bnxt_en: Fix memory corruption when FW resources change during ifdown (bsc#1249975).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39832: net/mlx5: Add sync reset drop mode support (bsc#1249901).
CVE-2025-39847: ppp: fix memory leak in pad_compress_skb (bsc#1250292).
CVE-2025-39850: vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects (bsc#1250276).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39853: i40e: Fix potential invalid access when MAC list is empty (bsc#1250275).
CVE-2025-39854: ice: fix NULL access of tx->in_use in ice_ll_ts_intr (bsc#1250297).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39900: net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y (bsc#1250758).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052). -…

Record: SUSE-SU-2025:4132-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4140-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826).
CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation failures…

Record: SUSE-SU-2025:4140-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4141-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
CVE-2025-38735: gve: prevent ethtool ops after shutdown (bsc#1249288).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39810: bnxt_en: Fix memory corruption when FW resources change during ifdown (bsc#1249975).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39832: net/mlx5: Add sync reset drop mode support (bsc#1249901).
CVE-2025-39847: ppp: fix memory leak in pad_compress_skb (bsc#1250292).
CVE-2025-39850: vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects (bsc#1250276).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39853: i40e: Fix potential invalid access when MAC list is empty (bsc#1250275).
CVE-2025-39854: ice: fix NULL access of tx->in_use in ice_ll_ts_intr (bsc#1250297).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39900: net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y (bsc#1250758).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052). -…

Record: SUSE-SU-2025:4141-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4149-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1249859).
CVE-2022-50334: hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() (bsc#1249857).
CVE-2022-50490: bpf: Propagate error from htab_lock_bucket() to userspace (bsc#1251164).
CVE-2022-50516: fs: dlm: fix invalid derefence of sb_lvbptr (bsc#1251741).
CVE-2023-53365: ip6mr: Fix skb_under_panic in ip6mr_cache_report() (bsc#1249988).
CVE-2023-53500: xfrm: fix slab-use-after-free in decode_session6 (bsc#1250816).
CVE-2023-53559: ip_vti: fix potential slab-use-after-free in decode_session6 (bsc#1251052).
CVE-2023-53574: wifi: rtw88: delete timer and free skb queue when unloading (bsc#1251222).
CVE-2023-53619: netfilter: conntrack: Avoid nf_ct_helper_hash uses after free (bsc#1251743).
CVE-2023-53673: Bluetooth: hci_event: call disconnect callback before deleting conn (bsc#1251763).
CVE-2023-53705: ipv6: Fix out-of-bounds access in ipv6_find_tlv() (bsc#1252554).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-38084: hugetlb: unshare some PMDs when splitting VMAs (bsc#1245498).
CVE-2025-38085: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (bsc#1245499).
CVE-2025-38476: rpl: Fix use-after-free in rpl_do_srh_inline() (bsc#1247317).
CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1249479).
CVE-2025-39797: xfrm: Duplicate SPI Handling (bsc#1249608).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39967: fbcon: fix integer overflow in fbcon_do_set_font (bsc#1252033).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-39981: Bluetooth: MGMT: Fix possible UAFs (bsc#1252060).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40044: fs: udf: fix OOB read in lengthAllocDescs handling (bsc#1252785).

The following non security issues were fixed:

NFS: remove revoked delegation from server's delegation list (bsc#1246211).
NFSv4: Allow FREE_STATEID to clean up delegations (bsc#1246211).
fbcon: Fix OOB access in font allocation (bsc#1252033)
kabi fix for NFSv4: Allow FREE_STATEID to clean up delegations (bsc#1246211).
mm: avoid unnecessary page fault retires on shared memory types (bsc#1251823).
net: hv_netvsc: fix loss of early receive events from host during channel open (bsc#1252265).
net: mana: Switch to page pool for jumbo frames (bsc#1248754).
net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency (bsc#1248754).
netfilter: nft_objref: validate objref and objrefmap expressions (bsc#1250237). No CVE available yet, please see the bugzilla ticket referenced.

Record: SUSE-SU-2025:4149-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4301-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319 bsc#1252236).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826).
CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation…

Record: SUSE-SU-2025:4301-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4320-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1249859).
CVE-2022-50334: hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() (bsc#1249857).
CVE-2022-50490: bpf: Propagate error from htab_lock_bucket() to userspace (bsc#1251164).
CVE-2022-50516: fs: dlm: fix invalid derefence of sb_lvbptr (bsc#1251741).
CVE-2023-53365: ip6mr: Fix skb_under_panic in ip6mr_cache_report() (bsc#1249988).
CVE-2023-53500: xfrm: fix slab-use-after-free in decode_session6 (bsc#1250816).
CVE-2023-53559: ip_vti: fix potential slab-use-after-free in decode_session6 (bsc#1251052).
CVE-2023-53574: wifi: rtw88: delete timer and free skb queue when unloading (bsc#1251222).
CVE-2023-53619: netfilter: conntrack: Avoid nf_ct_helper_hash uses after free (bsc#1251743).
CVE-2023-53673: Bluetooth: hci_event: call disconnect callback before deleting conn (bsc#1251763).
CVE-2023-53705: ipv6: Fix out-of-bounds access in ipv6_find_tlv() (bsc#1252554).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-38084: hugetlb: unshare some PMDs when splitting VMAs (bsc#1245498).
CVE-2025-38085: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (bsc#1245499).
CVE-2025-38476: rpl: Fix use-after-free in rpl_do_srh_inline() (bsc#1247317).
CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1249479).
CVE-2025-39797: xfrm: Duplicate SPI Handling (bsc#1249608).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39967: fbcon: fix integer overflow in fbcon_do_set_font (bsc#1252033).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-39981: Bluetooth: MGMT: Fix possible UAFs (bsc#1252060).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40044: fs: udf: fix OOB read in lengthAllocDescs handling (bsc#1252785).

The following non security issues were fixed:

NFS: remove revoked delegation from server's delegation list (bsc#1246211).
NFSv4: Allow FREE_STATEID to clean up delegations (bsc#1246211).
fbcon: Fix OOB access in font allocation (bsc#1252033)
kabi fix for NFSv4: Allow FREE_STATEID to clean up delegations (bsc#1246211).
kernel-subpackage-spec: Do not doubly-sign modules (bsc#1251930).
mm: avoid unnecessary page fault retires on shared memory types (bsc#1251823).
net: hv_netvsc: fix loss of early receive events from host during channel open (bsc#1252265).
net: mana: Switch to page pool for jumbo frames (bsc#1248754).
net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency (bsc#1248754).
netfilter: nft_objref: validate objref and objrefmap expressions (bsc#1250237).
rpm/check-for-config-changes: ignore CONFIG_SCHED_PROXY_EXEC, too (bsc#1250946)

Record: SUSE-SU-2025:4320-1
Updated: 2026-11-02

OSVSUSE-SU-2026:20561-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-21816: hrtimers: Force migrate away hrtimers queued after (bsc#1238472).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39779: btrfs: subpage: keep TOWRITE tag until folio is cleaned (bsc#1249495).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39903: of_numa: fix uninitialized memory nodes causing kernel panic (bsc#1250749).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39950: net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR (bsc#1251176).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39956: igc: don't fail igc_probe() on LED setup error (bsc#1251809).
CVE-2025-39963: io_uring: fix incorrect io_kiocb reference in io_link_skb (bsc#1251819).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-39979: net/mlx5: fs, add API for sharing HWS action by refcount (bsc#1252067).
CVE-2025-39984: net: tun: Update napi->skb after XDP process (bsc#1252081).
CVE-2025-39992: mm: swap: check for stable address space before operating on the VMA (bsc#1252076).
CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
CVE-2025-40012: net/smc: fix warning in smc_rx_splice() when calling get_page() (bsc#1252330).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780).
CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826).
CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation failures (bsc#1252848).
CVE-2025-40078: bpf: Explicitly check accesses to bpf_sock_addr (bsc#1252789).
CVE-2025-40080: nbd: restrict sockets to TCP and UDP (bsc#1252774).
CVE-2025-40100: btrfs: do not assert we found block group item when creating free space tree (bsc#1252918).

The following non security issues were fixed:

add bug reference to existing hv_netvsc change (bsc#1252265) -…

Record: SUSE-SU-2026:20561-1
Updated: 2026-11-02

OSVUSN-8095-1 No score

linux, linux-aws, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-hwe-6.8, linux-ibm, linux-ibm-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle, linux-oracle-6.8 vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
Nios II architecture;
PA-RISC architecture;
RISC-V architecture;
S390 architecture;
Sun Sparc architecture;
User-Mode Linux (UML);
x86 architecture;
Xtensa architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
ATM drivers;
Drivers core;
Block device driver;
Network block device driver;
Bluetooth drivers;
Bus devices;
Hardware random number generator core;
Character device driver;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
DMA engine subsystem;
ARM SCMI message protocol;
EFI core;
Intel Stratix 10 firmware drivers;
GPU drivers;
HID subsystem;
CoreSight HW tracing drivers;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
Input Device (Tablet) drivers;
IOMMU subsystem;
ISDN/mISDN subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
Fastrpc Driver;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
Texas Instruments network drivers;
Ethernet team driver;
NVME drivers;
PCI subsystem;
PCCARD (PCMCIA/CardBus) bus subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
ARM PM domains;
PPS (Pulse Per Second) driver;
PTP clock framework;
PWM drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
Texas Instruments SoC drivers;
TCM subsystem;
Trusted Execution Environment drivers;
TTY drivers;
Userspace I/O drivers;
Cadence USB3 driver;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Mass Storage drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
Ceph distributed file system;
File systems infrastructure;
EFI Variable file system;
exFAT file system;
Ext4 file system;
F2FS file system;
FUSE (File system in Userspace);
GFS2 file system;
HFS file system;
HFS+ file system;
HugeTLB file system;
JFS file system;
KERNFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
File system notification infrastructure;
NTFS3 file system;
OCFS2 file system;
OrangeFS file system;
Proc file system;
Diskquota system;
SMB network file system;
SquashFS file system;
UDF file system;
XFS file system;
Asynchronous Transfer Mode (ATM) subsystem;
BPF subsystem;
Mellanox drivers;
NFS page cache wrapper;
Memory management;
Memory Management;
Media input infrastructure;
Bluetooth subsystem;
IP tunnels definitions;
Network traffic control;
Rose network layer;
Network sockets;
io_uring subsystem;
Control group (cgroup);
Kernel crash support code;
Kernel futex primitives;
PID allocator;
Scheduler infrastructure;
Syscalls implementation;
Timer…

Record: USN-8095-1
Updated: 2026-11-03

OSVUSN-8095-2 No score

linux-fips, linux-aws-fips, linux-gcp-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
Nios II architecture;
PA-RISC architecture;
RISC-V architecture;
S390 architecture;
Sun Sparc architecture;
User-Mode Linux (UML);
x86 architecture;
Xtensa architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
ATM drivers;
Drivers core;
Block device driver;
Network block device driver;
Bluetooth drivers;
Bus devices;
Hardware random number generator core;
Character device driver;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
DMA engine subsystem;
ARM SCMI message protocol;
EFI core;
Intel Stratix 10 firmware drivers;
GPU drivers;
HID subsystem;
CoreSight HW tracing drivers;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
Input Device (Tablet) drivers;
IOMMU subsystem;
ISDN/mISDN subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
Fastrpc Driver;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
Texas Instruments network drivers;
Ethernet team driver;
NVME drivers;
PCI subsystem;
PCCARD (PCMCIA/CardBus) bus subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
ARM PM domains;
PPS (Pulse Per Second) driver;
PTP clock framework;
PWM drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
Texas Instruments SoC drivers;
TCM subsystem;
Trusted Execution Environment drivers;
TTY drivers;
Userspace I/O drivers;
Cadence USB3 driver;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Mass Storage drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
Ceph distributed file system;
File systems infrastructure;
EFI Variable file system;
exFAT file system;
Ext4 file system;
F2FS file system;
FUSE (File system in Userspace);
GFS2 file system;
HFS file system;
HFS+ file system;
HugeTLB file system;
JFS file system;
KERNFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
File system notification infrastructure;
NTFS3 file system;
OCFS2 file system;
OrangeFS file system;
Proc file system;
Diskquota system;
SMB network file system;
SquashFS file system;
UDF file system;
XFS file system;
Asynchronous Transfer Mode (ATM) subsystem;
BPF subsystem;
Mellanox drivers;
NFS page cache wrapper;
Memory management;
Memory Management;
Media input infrastructure;
Bluetooth subsystem;
IP tunnels definitions;
Network traffic control;
Rose network layer;
Network sockets;
io_uring subsystem;
Control group (cgroup);
Kernel crash support code;
Kernel futex primitives;
PID allocator;
Scheduler infrastructure;
Syscalls implementation;
Timer…

Record: USN-8095-2
Updated: 2026-11-03

Affected products

linux

Affected packages

Affected packages
Package	Affected	Fixed
`kernel` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-64k` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-64k-core` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-64k-debug` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-64k-debug-core` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-64k-debug-devel` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-64k-debug-devel-matched` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-64k-debug-modules` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-64k-debug-modules-core` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-64k-debug-modules-extra` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-64k-devel` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-64k-devel-matched` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-64k-modules` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-64k-modules-core` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-64k-modules-extra` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-abi-stablelists` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-core` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-cross-headers` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-debug` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-debug-core` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-debug-devel` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-debug-devel-matched` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-debug-modules` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-debug-modules-core` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-debug-modules-extra` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-debug-uki-virt` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-devel` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-devel-matched` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-doc` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-headers` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-modules` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-modules-core` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-modules-extra` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-rt` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-rt-64k` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-rt-64k-core` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-rt-64k-debug` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-rt-64k-debug-core` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-rt-64k-debug-devel` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-rt-64k-debug-modules` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-rt-64k-debug-modules-core` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-rt-64k-debug-modules-extra` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-rt-64k-devel` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-rt-64k-modules` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-rt-64k-modules-core` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-rt-64k-modules-extra` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-rt-core` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-rt-debug` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-rt-debug-core` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel-rt-debug-devel` AlmaLinux:9	before 5.14.0-611.11.1.el9_7	5.14.0-611.11.1.el9_7
`kernel` Azure Linux:3	before 6.6.141.1-1	6.6.141.1-1
`linux-lts` Alpaquita:23	6.1.155-r0 and later	None known
`linux-lts` Alpaquita:25	6.12.58-r0 up to 6.12.61-r0	6.12.61-r0
`linux-lts` Alpaquita:stream	6.12.92-r1 up to 6.18.35-r1	6.18.35-r1
`kernel` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-64k` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-64k-core` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-64k-debug` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-64k-debug-core` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-64k-debug-devel` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-64k-debug-devel-matched` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-64k-debug-modules` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-64k-debug-modules-core` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-64k-debug-modules-extra` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-64k-debug-modules-internal` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-64k-debug-modules-partner` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-64k-devel` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-64k-devel-matched` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-64k-modules` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-64k-modules-core` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-64k-modules-extra` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-64k-modules-internal` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-64k-modules-partner` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-abi-stablelists` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-core` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-cross-headers` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-debug` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-debug-core` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-debug-devel` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-debug-devel-matched` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-debug-modules` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-debug-modules-core` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-debug-modules-extra` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-debug-modules-internal` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-debug-modules-partner` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-debug-uki-virt` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-debug-uki-virt-addons` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-devel` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-devel-matched` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-doc` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-headers` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-ipaclones-internal` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-modules` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-modules-core` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-modules-extra` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-modules-internal` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-modules-partner` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-rt` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-rt-64k` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-rt-64k-core` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-rt-64k-debug` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-rt-64k-debug-core` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-rt-64k-debug-devel` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`kernel-rt-64k-debug-devel-matched` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els1	5.14.0-570.62.1.el9_6.tuxcare.1.els1
`Kernel` Linux	5.17.0 up to 6.6.140, 6.7.0 up to 6.12.59, 6.13.0 up to 6.16.10	6.6.1406.12.596.16.10
`linux` Debian:12	All versions, plus listed versions 6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1 Show 45 moreShow less 6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.170-16.1.170-26.1.170-36.1.172-16.1.174-16.1.176-16.1.177-16.1.180-16.1.187-16.1.190-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+1	None known
`linux` Debian:13	before 6.12.63-1, plus listed versions 6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-1~bpo12+1	6.12.63-1
`linux` Debian:14	before 6.16.10-1, plus listed versions 6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1 Show 45 moreShow less 6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1	6.16.10-1
`kernel` openEuler:24.03-LTS	before 6.6.0-143.0.0.125.oe2403	6.6.0-143.0.0.125.oe2403
`kernel` openEuler:24.03-LTS-SP1	before 6.6.0-143.0.0.137.oe2403sp1	6.6.0-143.0.0.137.oe2403sp1
`kernel` openEuler:24.03-LTS-SP2	before 6.6.0-143.0.0.138.oe2403sp2	6.6.0-143.0.0.138.oe2403sp2
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel-64k-debug-devel` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel-64k-debug-devel-matched` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel-64k-devel` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel-64k-devel-matched` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel-debug-devel` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel-debug-devel-matched` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel-devel` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel-devel-matched` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel-doc` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel-rt-64k-debug-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel-rt-64k-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel-rt-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel-tools-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel-zfcpdump-devel-matched` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`libperf-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`perf` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`perf-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`python3-perf` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`python3-perf-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`rtla` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`rv` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel-64k` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel-64k-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel-64k-debug` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel-64k-debug-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel-64k-debug-modules` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel-64k-debug-modules-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel-64k-debug-modules-extra` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel-64k-modules` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel-64k-modules-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel-64k-modules-extra` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel-abi-stablelists` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel-debug` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel-debug-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel` Rocky Linux:9	before 0:5.14.0-611.11.1.el9_7	0:5.14.0-611.11.1.el9_7
`kernel` Rocky Linux:10	before 0:6.12.0-124.20.1.el10_1	0:6.12.0-124.20.1.el10_1
`kernel` Rocky Linux:8	before 0:4.18.0-553.126.1.el8_10	0:4.18.0-553.126.1.el8_10
`kernel-rt` Rocky Linux:8	before 0:4.18.0-553.126.1.rt7.467.el8_10	0:4.18.0-553.126.1.rt7.467.el8_10
`linux` Root:Debian:12	before 6.1.190-1.aikido.167	6.1.190-1.aikido.167
`rootio-linux` Root:Debian:12	before 6.1.190-1.aikido.167	6.1.190-1.aikido.167
`linux` Root:Debian:13	before 6.12.115-2.aikido.164	6.12.115-2.aikido.164
`rootio-linux` Root:Debian:13	before 6.12.115-2.aikido.164	6.12.115-2.aikido.164
`linux` Root:Ubuntu:24.04	before 6.8.0-147.147.aikido.90	6.8.0-147.147.aikido.90
`rootio-linux` Root:Ubuntu:24.04	before 6.8.0-147.147.aikido.90	6.8.0-147.147.aikido.90
`kernel-default` SUSE:Linux Micro 6.0	before 6.4.0-36.1	6.4.0-36.1
`kernel-default-base` SUSE:Linux Micro 6.0	before 6.4.0-36.1.21.13	6.4.0-36.1.21.13
`kernel-kvmsmall` SUSE:Linux Micro 6.0	before 6.4.0-36.1	6.4.0-36.1
`kernel-source` SUSE:Linux Micro 6.0	before 6.4.0-36.1	6.4.0-36.1
`kernel-rt` SUSE:Linux Micro 6.0	before 6.4.0-38.1	6.4.0-38.1
`kernel-source-rt` SUSE:Linux Micro 6.0	before 6.4.0-38.1	6.4.0-38.1
`kernel-default` SUSE:Linux Micro 6.1	before 6.4.0-36.1	6.4.0-36.1
`kernel-default-base` SUSE:Linux Micro 6.1	before 6.4.0-36.1.21.13	6.4.0-36.1.21.13
`kernel-kvmsmall` SUSE:Linux Micro 6.1	before 6.4.0-36.1	6.4.0-36.1
`kernel-source` SUSE:Linux Micro 6.1	before 6.4.0-36.1	6.4.0-36.1
`kernel-rt` SUSE:Linux Micro 6.1	before 6.4.0-38.1	6.4.0-38.1
`kernel-source-rt` SUSE:Linux Micro 6.1	before 6.4.0-38.1	6.4.0-38.1
`kernel-64kb` SUSE:Linux Micro 6.2	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-default` SUSE:Linux Micro 6.2	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-default-base` SUSE:Linux Micro 6.2	before 6.12.0-160000.6.1.160000.2.4	6.12.0-160000.6.1.160000.2.4
`kernel-rt` SUSE:Linux Micro 6.2	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-source` SUSE:Linux Micro 6.2	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-64kb` SUSE:Linux Enterprise Server 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-default` SUSE:Linux Enterprise Server 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-default-base` SUSE:Linux Enterprise Server 16.0	before 6.12.0-160000.6.1.160000.2.4	6.12.0-160000.6.1.160000.2.4
`kernel-docs` SUSE:Linux Enterprise Server 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-kvmsmall` SUSE:Linux Enterprise Server 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-obs-qa` SUSE:Linux Enterprise Server 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-source` SUSE:Linux Enterprise Server 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-syms` SUSE:Linux Enterprise Server 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-64kb` SUSE:Linux Enterprise Server for SAP applications 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-default` SUSE:Linux Enterprise Server for SAP applications 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-default-base` SUSE:Linux Enterprise Server for SAP applications 16.0	before 6.12.0-160000.6.1.160000.2.4	6.12.0-160000.6.1.160000.2.4
`kernel-docs` SUSE:Linux Enterprise Server for SAP applications 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-kvmsmall` SUSE:Linux Enterprise Server for SAP applications 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-obs-qa` SUSE:Linux Enterprise Server for SAP applications 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-source` SUSE:Linux Enterprise Server for SAP applications 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP applications 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server for SAP applications 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 6.4.0-150700.53.22.1.150700.17.15.1	6.4.0-150700.53.22.1.150700.17.15.1
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP7	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP7	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP7	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP7	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP7	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP7	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-livepatch-SLE15-SP7_Update_6` SUSE:Linux Enterprise Live Patching 15 SP7	before 1-150700.15.3.1	1-150700.15.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP7	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-azure` openSUSE:Leap 15.6	before 6.4.0-150600.8.55.1	6.4.0-150600.8.55.1
`kernel-source-azure` openSUSE:Leap 15.6	before 6.4.0-150600.8.55.1	6.4.0-150600.8.55.1
`kernel-syms-azure` openSUSE:Leap 15.6	before 6.4.0-150600.8.55.1	6.4.0-150600.8.55.1
`dtb-aarch64` openSUSE:Leap 15.6	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-64kb` openSUSE:Leap 15.6	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-debug` openSUSE:Leap 15.6	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-default` openSUSE:Leap 15.6	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-default-base` openSUSE:Leap 15.6	before 6.4.0-150600.23.78.1.150600.12.34.2	6.4.0-150600.23.78.1.150600.12.34.2
`kernel-docs` openSUSE:Leap 15.6	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-kvmsmall` openSUSE:Leap 15.6	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-obs-build` openSUSE:Leap 15.6	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-obs-qa` openSUSE:Leap 15.6	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-source` openSUSE:Leap 15.6	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-syms` openSUSE:Leap 15.6	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-zfcpdump` openSUSE:Leap 15.6	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-rt` openSUSE:Leap 15.6	before 6.4.0-150600.10.58.1	6.4.0-150600.10.58.1
`kernel-rt_debug` openSUSE:Leap 15.6	before 6.4.0-150600.10.58.1	6.4.0-150600.10.58.1
`kernel-source-rt` openSUSE:Leap 15.6	before 6.4.0-150600.10.58.1	6.4.0-150600.10.58.1
`kernel-syms-rt` openSUSE:Leap 15.6	before 6.4.0-150600.10.58.1	6.4.0-150600.10.58.1
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-aws-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-aws-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less 5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1	None known
`linux-aws-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1	None known
`linux-azure-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less 5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2	None known
`linux-azure-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less 5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1	None known
`linux-azure-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1	None known
`linux-azure-fde` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less 5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1	None known
`linux-gcp-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less 5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3	None known
`linux-gcp-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less 5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1	None known
`linux-gcp-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41	None known
`linux-gke` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less 5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111	None known
`linux-gke-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less 5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1	None known
`linux-gkeop` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less 5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77	None known
`linux-gkeop-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 40 moreShow less 5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1	None known
`linux-hwe-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less 5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1	None known
`linux-hwe-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less 5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1	None known
`linux-hwe-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less 5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1	None known
`linux-intel-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19	None known
`linux-oem-5.10` Ubuntu:20.04:LTS	All versions, plus listed versions 5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17 Show 21 moreShow less 5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61	None known
`linux-oem-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21 Show 7 moreShow less 5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36	None known
`linux-oem-5.14` Ubuntu:20.04:LTS	All versions, plus listed versions 5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10 Show 30 moreShow less 5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67	None known
`linux-oem-5.6` Ubuntu:20.04:LTS	All versions, plus listed versions 5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13 Show 24 moreShow less 5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60	None known
`linux-oracle-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-oracle-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1 Show 7 moreShow less 5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1	None known
`linux-oracle-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1	None known
`linux-raspi2` Ubuntu:20.04:LTS	All versions, plus listed versions 5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6	None known
`linux-riscv` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34 Show 7 moreShow less 5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45	None known
`linux-riscv-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1 Show 8 moreShow less 5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35	None known
`linux-riscv-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1 Show 5 moreShow less 5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1	None known
`linux-allwinner-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1	None known
`linux-aws-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1 Show 5 moreShow less 5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1	None known
`linux-aws-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 9 moreShow less 6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1	None known
`linux-aws-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1 Show 9 moreShow less 6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1	None known
`dtb-aarch64` openSUSE:Leap 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-64kb` openSUSE:Leap 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-default` openSUSE:Leap 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-default-base` openSUSE:Leap 16.0	before 6.12.0-160000.6.1.160000.2.4	6.12.0-160000.6.1.160000.2.4
`kernel-docs` openSUSE:Leap 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-kvmsmall` openSUSE:Leap 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-obs-build` openSUSE:Leap 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-obs-qa` openSUSE:Leap 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-rt` openSUSE:Leap 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-source` openSUSE:Leap 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-syms` openSUSE:Leap 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-zfcpdump` openSUSE:Leap 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1

History

History
Recorded	Changed	Sources
Nov 3, 2026	facts	OSV
Nov 3, 2026	affected	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-39981 is a high vulnerability (CVSS 7.8) in Linux, published October 15, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.15%, the 4th percentile. Fixed in kernel 5.14.0-611.11.1.el9_7.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 1,081 package rows, 367 versions, 2,954 references and the rest of 22 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 8 source records.