CVE-2025-38653

proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al

Check pde->proc_ops->proc_lseek directly may cause UAF in rmmod scenario. It's a gap in proc_reg_open() after commit 654b33ada4ab("proc: fix UAF in proc_get_inode()"). Followed by AI Viro's suggestion, fix it in same manner.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.18%Up 0.2 points since Aug 23, 2025

What each source reports

CVE List Score used 7.8

proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al

In the Linux kernel, the following vulnerability has been resolved:

proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al

Record: CVE-2025-38653
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

EUVDEUVD-2025-25549 7.8

In the Linux kernel, the following vulnerability has been resolved:

proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al

Record: EUVD-2025-25549
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-w76p-w3h3-c35v 7.8

In the Linux kernel, the following vulnerability has been resolved: proc: use the same treatment...

In the Linux kernel, the following vulnerability has been resolved:

proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al

Record: GHSA-w76p-w3h3-c35v
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-416
Updated: 2026-11-02

NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al

Record: CVE-2025-38653
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-416
Updated: 2026-11-02

OSVBELL-CVE-2025-38653 7.8

Record: BELL-CVE-2025-38653
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSV 7.8

proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al

In the Linux kernel, the following vulnerability has been resolved:

proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al

Record: CVE-2025-38653
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 47 moreShow less

OSVDEBIAN-CVE-2025-38653 7.8

In the Linux kernel, the following vulnerability has been resolved: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al Check pde->proc_ops->proc_lseek directly may cause UAF in rmmod scenario. It's a gap in proc_reg_open() after commit 654b33ada4ab("proc: fix UAF in proc_get_inode()"). Followed by AI Viro's suggestion, fix it in same manner.

Record: DEBIAN-CVE-2025-38653
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2025-2120 8.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

gtp: Destroy device along with udp socket's netns dismantle.

gtp_newlink() links the device to a list in dev_net(dev) instead of src_net, where a udp tunnel socket is created.

Even when src_net is removed, the device stays alive on dev_net(dev). Then, removing src_net triggers the splat below. [0]

In this example, gtp0 is created in ns2, and the udp socket is created in ns1.

ip netns add ns1 ip netns add ns2 ip -n ns1 link add netns ns2 name gtp0 type gtp role sgsn ip netns del ns1

Let's link the device to the socket's netns instead.

Now, gtp_net_exit_batch_rtnl() needs another netdev iteration to remove all gtp devices in the netns.

[0]: ref_tracker: net notrefcnt@000000003d6e7d05 has 1/2 users at sk_alloc (./include/net/net_namespace.h:345 net/core/sock.c:2236) inet_create (net/ipv4/af_inet.c:326 net/ipv4/af_inet.c:252) __sock_create (net/socket.c:1558) udp_sock_create4 (net/ipv4/udp_tunnel_core.c:18) gtp_create_sock (./include/net/udp_tunnel.h:59 drivers/net/gtp.c:1423) gtp_create_sockets (drivers/net/gtp.c:1447) gtp_newlink (drivers/net/gtp.c:1507) rtnl_newlink (net/core/rtnetlink.c:3786 net/core/rtnetlink.c:3897 net/core/rtnetlink.c:4012) rtnetlink_rcv_msg (net/core/rtnetlink.c:6922) netlink_rcv_skb (net/netlink/af_netlink.c:2542) netlink_unicast (net/netlink/af_netlink.c:1321 net/netlink/af_netlink.c:1347) netlink_sendmsg (net/netlink/af_netlink.c:1891) ____sys_sendmsg (net/socket.c:711 net/socket.c:726 net/socket.c:2583) ___sys_sendmsg (net/socket.c:2639) __sys_sendmsg (net/socket.c:2669) do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83)

WARNING: CPU: 1 PID: 60 at lib/ref_tracker.c:179 ref_tracker_dir_exit (lib/ref_tracker.c:179) Modules linked in: CPU: 1 UID: 0 PID: 60 Comm: kworker/u16:2 Not tainted 6.13.0-rc5-00147-g4c1224501e9d #5 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 04/01/2014 Workqueue: netns cleanup_net RIP: 0010:ref_tracker_dir_exit (lib/ref_tracker.c:179) Code: 00 00 00 fc ff df 4d 8b 26 49 bd 00 01 00 00 00 00 ad de 4c 39 f5 0f 85 df 00 00 00 48 8b 74 24 08 48 89 df e8 a5 cc 12 02 90 <0f> 0b 90 48 8d 6b 44 be 04 00 00 00 48 89 ef e8 80 de 67 ff 48 89 RSP: 0018:ff11000009a07b60 EFLAGS: 00010286 RAX: 0000000000002bd3 RBX: ff1100000f4e1aa0 RCX: 1ffffffff0e40ac6 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8423ee3c RBP: ff1100000f4e1af0 R08: 0000000000000001 R09: fffffbfff0e395ae R10: 0000000000000001 R11: 0000000000036001 R12: ff1100000f4e1af0 R13: dead000000000100 R14: ff1100000f4e1af0 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ff1100006ce80000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f9b2464bd98 CR3: 0000000005286005 CR4: 0000000000771ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe07f0 DR7: 0000000000000400 PKRU: 55555554 Call Trace: <TASK> ? __warn (kernel/panic.c:748) ? ref_tracker_dir_exit (lib/ref_tracker.c:179) ? report_bug (lib/bug.c:201 lib/bug.c:219) ? handle_bug (arch/x86/kernel/traps.c:285) ? exc_invalid_op (arch/x86/kernel/traps.c:309 (discriminator 1)) ? asm_exc_invalid_op (./arch/x86/include/asm/idtentry.h:621) ? _raw_spin_unlock_irqrestore (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:97 ./arch/x86/include/asm/irqflags.h:155 ./include/linux/spinlock_api_smp.h:151 kernel/locking/spinlock.c:194) ? ref_tracker_dir_exit (lib/ref_tracker.c:179) ? __pfx_ref_tracker_dir_exit (lib/ref_tracker.c:158) ? kfree (mm/slub.c:4613 mm/slub.c:4761) net_free (net/core/net_namespace.c:476 net/core/net_namespace.c:467) cleanup_net (net/core/net_namespace.c:664 (discriminator 3)) process_one_work…

Record: OESA-2025-2120
CVSS 3.1: 8.0 HighCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2025-2121 8.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

gtp: Destroy device along with udp socket's netns dismantle.

gtp_newlink() links the device to a list in dev_net(dev) instead of src_net, where a udp tunnel socket is created.

Even when src_net is removed, the device stays alive on dev_net(dev). Then, removing src_net triggers the splat below. [0]

In this example, gtp0 is created in ns2, and the udp socket is created in ns1.

ip netns add ns1 ip netns add ns2 ip -n ns1 link add netns ns2 name gtp0 type gtp role sgsn ip netns del ns1

Let's link the device to the socket's netns instead.

Now, gtp_net_exit_batch_rtnl() needs another netdev iteration to remove all gtp devices in the netns.

Record: OESA-2025-2121
CVSS 3.1: 8.0 HighCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2025-2122 8.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

gtp: Destroy device along with udp socket's netns dismantle.

gtp_newlink() links the device to a list in dev_net(dev) instead of src_net, where a udp tunnel socket is created.

Even when src_net is removed, the device stays alive on dev_net(dev). Then, removing src_net triggers the splat below. [0]

In this example, gtp0 is created in ns2, and the udp socket is created in ns1.

ip netns add ns1 ip netns add ns2 ip -n ns1 link add netns ns2 name gtp0 type gtp role sgsn ip netns del ns1

Let's link the device to the socket's netns instead.

Now, gtp_net_exit_batch_rtnl() needs another netdev iteration to remove all gtp devices in the netns.

Record: OESA-2025-2122
CVSS 3.1: 8.0 HighCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:21209 7.3

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:21209
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:21556 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:21556
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:23224 8.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:23224
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:23329 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:23329
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:39371 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:39371
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:21556 7.8

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CVE-2025-38653)
kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)
kernel: nbd: defer config unlock in nbd_genl_connect (CVE-2025-68366)
kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724)
kernel: iommu: disable SVA when CONFIG_X86 is set (CVE-2025-71089)
kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392)
kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)
kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)
kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)
kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)
kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)
kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)
kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)
kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)
kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect() (CVE-2026-43023)
kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110)
kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)
kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)
kernel: mm/page_alloc: clear page->private in free_pages_prepare() (CVE-2026-43303)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:21556
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVROOT-OS-DEBIAN-12-CVE-2025-38653 7.8

CVE-2025-38653 in linux - Patched by Root

Root has patched CVE-2025-38653 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record: ROOT-OS-DEBIAN-12-CVE-2025-38653
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVROOT-OS-DEBIAN-13-CVE-2025-38653 7.8

CVE-2025-38653 in linux - Patched by Root

Root has patched CVE-2025-38653 in the linux package for Root:Debian:13. Multiple fixed versions available.

Record: ROOT-OS-DEBIAN-13-CVE-2025-38653
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-03

OSVROOT-OS-UBUNTU-2404-CVE-2025-38653 7.8

CVE-2025-38653 in linux - Patched by Root

Root has patched CVE-2025-38653 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record: ROOT-OS-UBUNTU-2404-CVE-2025-38653
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2025-38653 7.8

Record: UBUNTU-CVE-2025-38653
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVALSA-2026:21556 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CVE-2025-38653)
kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)
kernel: nbd: defer config unlock in nbd_genl_connect (CVE-2025-68366)
kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724)
kernel: iommu: disable SVA when CONFIG_X86 is set (CVE-2025-71089)
kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392)
kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)
kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)
kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)
kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)
kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)
kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)
kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)
kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)
kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect() (CVE-2026-43023)
kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110)
kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)
kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)
kernel: mm/page_alloc: clear page->private in free_pages_prepare() (CVE-2026-43303)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:21556
Updated: 2026-11-02

OSVALSA-2026:23329 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CVE-2025-38653)
kernel: nbd: defer config unlock in nbd_genl_connect (CVE-2025-68366)
kernel: smb: client: fix OOB reads parsing symlink error response (CVE-2026-31613)
kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)
kernel: netfilter: flowtable: strictly check for maximum number of actions (CVE-2026-43329)
kernel: Bluetooth: hci_sync: Fix UAF in le_read_features_complete (CVE-2026-43322)
kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions (CVE-2026-46243)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:23329
Updated: 2026-11-02

OSVAZL-66575 No score

CVE-2025-38653 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved:

proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al

Record: AZL-66575
Updated: 2026-11-02

OSVCLSA-2026-1782155469 No score

kernel: Fix of 143 CVEs

ice: Fix PTP NULL pointer dereference during VSI rebuild {CVE-2026-23210}
tracing: Add recursion protection in kernel stack trace recording {CVE-2026-23138}
mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() {CVE-2025-38681}
cpuset: fix warning when disabling remote partition {CVE-2025-71142}
virtio: break and reset virtio devices on device_shutdown() {CVE-2025-38064}
netdevsim: fix a race issue related to the operation on bpf_bound_progs list {CVE-2026-23126}
atm: clip: Fix potential null-ptr-deref in to_atmarpd(). {CVE-2025-38460}
idpf: fix error handling in the init_task on load {CVE-2026-23017}
rxrpc: Fix recvmsg() unconditional requeue {CVE-2026-23066}
block: zero non-PI portion of auto integrity buffer {CVE-2026-23007}
can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode {CVE-2025-38665}
virtio_net: Fix napi_skb_cache_put warning {CVE-2024-43835}
crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() {CVE-2026-23169}
net: fix segmentation of forwarding fraglist GRO {CVE-2026-23154}
gfs2: Validate i_depth for exhash directories {CVE-2025-38710}
KVM: Don't clobber irqfd routing type when deassigning irqfd {CVE-2026-23198}
ipvlan: Make the addrs_lock be per port {CVE-2026-23103}
xfs: fix freemap adjustments when adding xattrs to leaf blocks {CVE-2026-43158}
can: mcp251xfd: fix infinite loop when xmit fails {CVE-2024-41088}
RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly {CVE-2025-71096}
RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction {CVE-2025-38161}
scsi: qla2xxx: Validate sp before freeing associated memory {CVE-2025-71236}
net/sched: netem: account for backlog updates from child qdisc {CVE-2024-56770}
drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat {CVE-2026-31656}
iavf: fix off-by-one issues in iavf_config_rss_reg() {CVE-2025-71087}
net/sched: ets: fix divide by zero in the offload path {CVE-2026-23379}
can: j1939: implement NETDEV_UNREGISTER notification handler {CVE-2025-39925}
ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() {CVE-2026-31531}
Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb {CVE-2026-31510}
ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() {CVE-2026-23003}
drm/i915/gt: Check set_default_submission() before deferencing {CVE-2026-31540}
mac802154: check local interfaces before deleting sdata list {CVE-2024-57948}
lib/buildid: use __kernel_read() for sleepable context {CVE-2026-23002}
scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs {CVE-2023-52808}
net: fix memory leak in skb_segment_list for GRO packets {CVE-2026-22979}
irqchip/imx-irqsteer: Handle runtime power management correctly {CVE-2024-42290}
io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop {CVE-2026-23113}
net/sched: ets: Remove drr class from the active list if it changes to strict {CVE-2025-68815}
net: bonding: fix NULL deref in bond_debug_rlb_hash_show {CVE-2026-31546}
ipvs: fix ipv4 null-ptr-deref in route error path {CVE-2025-68813}
openvswitch: fix lockup on tx to unregistering netdev with carrier {CVE-2025-21681}
net: USB: Fix wrong-direction WARNING in plusb.c {CVE-2023-52742}
module: Fix kernel panic when a symbol st_shndx is out of bounds {CVE-2026-31521}
udf: Fix preallocation discarding at indirect extent boundary {CVE-2022-48946}
net/mlx5: qos: Restrict RTNL area to avoid a lock cycle {CVE-2025-39947}
scsi: core: Wake up the error handler when final completions race against each other {CVE-2026-23110}
nbd: don't allow reconnect after disconnect {CVE-2025-21731}
nfsd: check that server is running in unlock_filesystem {CVE-2026-22989}
af_key: validate families in pfkey_send_migrate() {CVE-2026-31515}
netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() {CVE-2024-36286} -…

Record: CLSA-2026-1782155469
Updated: 2026-11-02

OSVMGASA-2025-0234 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.105 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links.

Record: MGASA-2025-0234
Updated: 2026-11-02

OSVMGASA-2025-0235 No score

Updated kernel, kmod-virtualbox & kmod-xtables-addons packages fix security vulnerabilities

Upstream kernel version 6.6.105 fixes bugs and vulnerabilities. The kmod-virtualbox & kmod-xtables-addons packages have been updated to work with this new kernel. The newer meta-task and mageia-repos packages are required to simplify the correct installation of the kernel-stable-userspace-headers (for backport kernel-stable) and back to kernel-userspace-headers (for 6.6 kernels) packages see https://bugs.mageia.org/show_bug.cgi?id=34545. For information about the vulnerabilities see the links.

Record: MGASA-2025-0235
Updated: 2026-11-02

OSVopenSUSE-SU-2025:20091-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-21816: hrtimers: Force migrate away hrtimers queued after (bsc#1238472).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39779: btrfs: subpage: keep TOWRITE tag until folio is cleaned (bsc#1249495).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39903: of_numa: fix uninitialized memory nodes causing kernel panic (bsc#1250749).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39950: net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR (bsc#1251176).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39956: igc: don't fail igc_probe() on LED setup error (bsc#1251809).
CVE-2025-39963: io_uring: fix incorrect io_kiocb reference in io_link_skb (bsc#1251819).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-39979: net/mlx5: fs, add API for sharing HWS action by refcount (bsc#1252067).
CVE-2025-39984: net: tun: Update napi->skb after XDP process (bsc#1252081).
CVE-2025-39992: mm: swap: check for stable address space before operating on the VMA (bsc#1252076).
CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
CVE-2025-40012: net/smc: fix warning in smc_rx_splice() when calling get_page() (bsc#1252330).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780).
CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826).
CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation failures (bsc#1252848).
CVE-2025-40078: bpf: Explicitly check accesses to bpf_sock_addr (bsc#1252789).
CVE-2025-40080: nbd: restrict sockets to TCP and UDP (bsc#1252774).
CVE-2025-40100: btrfs: do not assert we found block group item when creating free space tree (bsc#1252918).

The following non security issues were fixed:

add bug reference to existing hv_netvsc change (bsc#1252265) -…

Record: openSUSE-SU-2025:20091-1
Updated: 2026-11-02

OSVSUSE-SU-2025:21040-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom (bsc#1250742).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check…

Record: SUSE-SU-2025:21040-1
Updated: 2026-11-02

OSVSUSE-SU-2025:21052-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom (bsc#1250742).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check…

Record: SUSE-SU-2025:21052-1
Updated: 2026-11-02

OSVSUSE-SU-2025:21056-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom (bsc#1250742).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check…

Record: SUSE-SU-2025:21056-1
Updated: 2026-11-02

OSVSUSE-SU-2025:21064-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom (bsc#1250742).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check…

Record: SUSE-SU-2025:21064-1
Updated: 2026-11-02

OSVSUSE-SU-2025:21080-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-21816: hrtimers: Force migrate away hrtimers queued after (bsc#1238472).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39779: btrfs: subpage: keep TOWRITE tag until folio is cleaned (bsc#1249495).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39903: of_numa: fix uninitialized memory nodes causing kernel panic (bsc#1250749).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39950: net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR (bsc#1251176).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39956: igc: don't fail igc_probe() on LED setup error (bsc#1251809).
CVE-2025-39963: io_uring: fix incorrect io_kiocb reference in io_link_skb (bsc#1251819).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-39979: net/mlx5: fs, add API for sharing HWS action by refcount (bsc#1252067).
CVE-2025-39984: net: tun: Update napi->skb after XDP process (bsc#1252081).
CVE-2025-39992: mm: swap: check for stable address space before operating on the VMA (bsc#1252076).
CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
CVE-2025-40012: net/smc: fix warning in smc_rx_splice() when calling get_page() (bsc#1252330).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780).
CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826).
CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation failures (bsc#1252848).
CVE-2025-40078: bpf: Explicitly check accesses to bpf_sock_addr (bsc#1252789).
CVE-2025-40080: nbd: restrict sockets to TCP and UDP (bsc#1252774).
CVE-2025-40100: btrfs: do not assert we found block group item when creating free space tree (bsc#1252918).

The following non security issues were fixed:

add bug reference to existing hv_netvsc change (bsc#1252265) -…

Record: SUSE-SU-2025:21080-1
Updated: 2026-11-02

OSVSUSE-SU-2025:21147-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-21816: hrtimers: Force migrate away hrtimers queued after (bsc#1238472).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39779: btrfs: subpage: keep TOWRITE tag until folio is cleaned (bsc#1249495).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39903: of_numa: fix uninitialized memory nodes causing kernel panic (bsc#1250749).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39950: net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR (bsc#1251176).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39956: igc: don't fail igc_probe() on LED setup error (bsc#1251809).
CVE-2025-39963: io_uring: fix incorrect io_kiocb reference in io_link_skb (bsc#1251819).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-39979: net/mlx5: fs, add API for sharing HWS action by refcount (bsc#1252067).
CVE-2025-39984: net: tun: Update napi->skb after XDP process (bsc#1252081).
CVE-2025-39992: mm: swap: check for stable address space before operating on the VMA (bsc#1252076).
CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
CVE-2025-40012: net/smc: fix warning in smc_rx_splice() when calling get_page() (bsc#1252330).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780).
CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826).
CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation failures (bsc#1252848).
CVE-2025-40078: bpf: Explicitly check accesses to bpf_sock_addr (bsc#1252789).
CVE-2025-40080: nbd: restrict sockets to TCP and UDP (bsc#1252774).
CVE-2025-40100: btrfs: do not assert we found block group item when creating free space tree (bsc#1252918).

The following non security issues were fixed:

add bug reference to existing hv_netvsc change (bsc#1252265) -…

Record: SUSE-SU-2025:21147-1
Updated: 2026-11-02

OSVSUSE-SU-2025:21180-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-21816: hrtimers: Force migrate away hrtimers queued after (bsc#1238472).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39779: btrfs: subpage: keep TOWRITE tag until folio is cleaned (bsc#1249495).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39903: of_numa: fix uninitialized memory nodes causing kernel panic (bsc#1250749).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39950: net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR (bsc#1251176).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39956: igc: don't fail igc_probe() on LED setup error (bsc#1251809).
CVE-2025-39963: io_uring: fix incorrect io_kiocb reference in io_link_skb (bsc#1251819).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-39979: net/mlx5: fs, add API for sharing HWS action by refcount (bsc#1252067).
CVE-2025-39984: net: tun: Update napi->skb after XDP process (bsc#1252081).
CVE-2025-39992: mm: swap: check for stable address space before operating on the VMA (bsc#1252076).
CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
CVE-2025-40012: net/smc: fix warning in smc_rx_splice() when calling get_page() (bsc#1252330).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780).
CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826).
CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation failures (bsc#1252848).
CVE-2025-40078: bpf: Explicitly check accesses to bpf_sock_addr (bsc#1252789).
CVE-2025-40080: nbd: restrict sockets to TCP and UDP (bsc#1252774).
CVE-2025-40100: btrfs: do not assert we found block group item when creating free space tree (bsc#1252918).

The following non security issues were fixed:

add bug reference to existing hv_netvsc change (bsc#1252265) -…

Record: SUSE-SU-2025:21180-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4057-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
CVE-2025-38735: gve: prevent ethtool ops after shutdown (bsc#1249288).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39810: bnxt_en: Fix memory corruption when FW resources change during ifdown (bsc#1249975).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39832: net/mlx5: Add sync reset drop mode support (bsc#1249901).
CVE-2025-39847: ppp: fix memory leak in pad_compress_skb (bsc#1250292).
CVE-2025-39850: vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects (bsc#1250276).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39853: i40e: Fix potential invalid access when MAC list is empty (bsc#1250275).
CVE-2025-39854: ice: fix NULL access of tx->in_use in ice_ll_ts_intr (bsc#1250297).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom (bsc#1250742).
CVE-2025-39900: net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y (bsc#1250758).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051). -…

Record: SUSE-SU-2025:4057-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4128-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826).
CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation failures (bsc#1252848).
CVE-2025-40078: bpf: Explicitly check accesses to bpf_sock_addr…

Record: SUSE-SU-2025:4128-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4132-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
CVE-2025-38735: gve: prevent ethtool ops after shutdown (bsc#1249288).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39810: bnxt_en: Fix memory corruption when FW resources change during ifdown (bsc#1249975).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39832: net/mlx5: Add sync reset drop mode support (bsc#1249901).
CVE-2025-39847: ppp: fix memory leak in pad_compress_skb (bsc#1250292).
CVE-2025-39850: vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects (bsc#1250276).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39853: i40e: Fix potential invalid access when MAC list is empty (bsc#1250275).
CVE-2025-39854: ice: fix NULL access of tx->in_use in ice_ll_ts_intr (bsc#1250297).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39900: net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y (bsc#1250758).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052). -…

Record: SUSE-SU-2025:4132-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4140-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826).
CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation failures…

Record: SUSE-SU-2025:4140-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4141-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
CVE-2025-38735: gve: prevent ethtool ops after shutdown (bsc#1249288).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39810: bnxt_en: Fix memory corruption when FW resources change during ifdown (bsc#1249975).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39832: net/mlx5: Add sync reset drop mode support (bsc#1249901).
CVE-2025-39847: ppp: fix memory leak in pad_compress_skb (bsc#1250292).
CVE-2025-39850: vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects (bsc#1250276).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39853: i40e: Fix potential invalid access when MAC list is empty (bsc#1250275).
CVE-2025-39854: ice: fix NULL access of tx->in_use in ice_ll_ts_intr (bsc#1250297).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39900: net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y (bsc#1250758).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052). -…

Record: SUSE-SU-2025:4141-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4301-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319 bsc#1252236).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826).
CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation…

Record: SUSE-SU-2025:4301-1
Updated: 2026-11-02

OSVSUSE-SU-2026:20561-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-21816: hrtimers: Force migrate away hrtimers queued after (bsc#1238472).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39779: btrfs: subpage: keep TOWRITE tag until folio is cleaned (bsc#1249495).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39903: of_numa: fix uninitialized memory nodes causing kernel panic (bsc#1250749).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39950: net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR (bsc#1251176).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39956: igc: don't fail igc_probe() on LED setup error (bsc#1251809).
CVE-2025-39963: io_uring: fix incorrect io_kiocb reference in io_link_skb (bsc#1251819).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-39979: net/mlx5: fs, add API for sharing HWS action by refcount (bsc#1252067).
CVE-2025-39984: net: tun: Update napi->skb after XDP process (bsc#1252081).
CVE-2025-39992: mm: swap: check for stable address space before operating on the VMA (bsc#1252076).
CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
CVE-2025-40012: net/smc: fix warning in smc_rx_splice() when calling get_page() (bsc#1252330).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780).
CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826).
CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation failures (bsc#1252848).
CVE-2025-40078: bpf: Explicitly check accesses to bpf_sock_addr (bsc#1252789).
CVE-2025-40080: nbd: restrict sockets to TCP and UDP (bsc#1252774).
CVE-2025-40100: btrfs: do not assert we found block group item when creating free space tree (bsc#1252918).

The following non security issues were fixed:

add bug reference to existing hv_netvsc change (bsc#1252265) -…

Record: SUSE-SU-2026:20561-1
Updated: 2026-11-02

OSVUSN-7879-1 No score

linux, linux-aws, linux-gcp, linux-hwe-6.14, linux-oracle, linux-realtime vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
PowerPC architecture;
S390 architecture;
x86 architecture;
Network block device driver;
Character device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
Hardware crypto device drivers;
Device frequency scaling framework;
DMA engine subsystem;
EDAC drivers;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
IIO subsystem;
IIO ADC drivers;
InfiniBand drivers;
Input Device core drivers;
Multiple devices driver;
Media drivers;
Network drivers;
Mellanox network drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Powercap sysfs driver;
Voltage and Current Regulator drivers;
S/390 drivers;
ASPEED SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Media staging drivers;
USB Gadget drivers;
vDPA drivers;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
BTRFS file system;
Ceph distributed file system;
EFI Variable file system;
File systems infrastructure;
F2FS file system;
GFS2 file system;
Network file systems library;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Proc file system;
SMB network file system;
DRM display driver;
io_uring subsystem;
Internal shared memory driver;
padata parallel execution mechanism;
Networking subsytem;
Bluetooth subsystem;
Netfilter;
UDP network protocol;
Tracing infrastructure;
BPF subsystem;
Perf events;
Padata parallel execution mechanism;
Codetag library;
KASAN memory debugging framework;
Memory management;
802.1Q VLAN protocol;
Appletalk network protocol;
Asynchronous Transfer Mode (ATM) subsystem;
Networking core;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netlink;
RxRPC session sockets;
Network traffic control;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
TLS protocol;
VMware vSockets driver;
Wireless networking;
XFRM subsystem;
ADI SoundPort AD1816A based soundcard drivers;
MediaTek ASoC drivers;
SOF drivers;
USB sound devices;
KVM subsystem; (CVE-2025-38335, CVE-2025-38349, CVE-2025-38351, CVE-2025-38437, CVE-2025-38438, CVE-2025-38439, CVE-2025-38440, CVE-2025-38441, CVE-2025-38443, CVE-2025-38444, CVE-2025-38445, CVE-2025-38446, CVE-2025-38448, CVE-2025-38449, CVE-2025-38450, CVE-2025-38451, CVE-2025-38452, CVE-2025-38453, CVE-2025-38454, CVE-2025-38455, CVE-2025-38456, CVE-2025-38457, CVE-2025-38458, CVE-2025-38459, CVE-2025-38460, CVE-2025-38461, CVE-2025-38462, CVE-2025-38463, CVE-2025-38464, CVE-2025-38465, CVE-2025-38466, CVE-2025-38467, CVE-2025-38468, CVE-2025-38469, CVE-2025-38470, CVE-2025-38471, CVE-2025-38472, CVE-2025-38473, CVE-2025-38474, CVE-2025-38475, CVE-2025-38476, CVE-2025-38478, CVE-2025-38480, CVE-2025-38481, CVE-2025-38482, CVE-2025-38483, CVE-2025-38484, CVE-2025-38485, CVE-2025-38487, CVE-2025-38488, CVE-2025-38489, CVE-2025-38490, CVE-2025-38491, CVE-2025-38492, CVE-2025-38493, CVE-2025-38494, CVE-2025-38495, CVE-2025-38496, CVE-2025-38497, CVE-2025-38501, CVE-2025-38503, CVE-2025-38505, CVE-2025-38506, CVE-2025-38507, CVE-2025-38508, CVE-2025-38509, CVE-2025-38510, CVE-2025-38511, CVE-2025-38512, CVE-2025-38513, CVE-2025-38514, CVE-2025-38515, CVE-2025-38516, CVE-2025-38517, CVE-2025-38520,…

Record: USN-7879-1
Updated: 2026-11-02

OSVUSN-7879-2 No score

linux-realtime-6.14 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
PowerPC architecture;
S390 architecture;
x86 architecture;
Network block device driver;
Character device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
Hardware crypto device drivers;
Device frequency scaling framework;
DMA engine subsystem;
EDAC drivers;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
IIO subsystem;
IIO ADC drivers;
InfiniBand drivers;
Input Device core drivers;
Multiple devices driver;
Media drivers;
Network drivers;
Mellanox network drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Powercap sysfs driver;
Voltage and Current Regulator drivers;
S/390 drivers;
ASPEED SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Media staging drivers;
USB Gadget drivers;
vDPA drivers;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
BTRFS file system;
Ceph distributed file system;
EFI Variable file system;
File systems infrastructure;
F2FS file system;
GFS2 file system;
Network file systems library;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Proc file system;
SMB network file system;
DRM display driver;
io_uring subsystem;
Internal shared memory driver;
padata parallel execution mechanism;
Networking subsytem;
Bluetooth subsystem;
Netfilter;
UDP network protocol;
Tracing infrastructure;
BPF subsystem;
Perf events;
Padata parallel execution mechanism;
Codetag library;
KASAN memory debugging framework;
Memory management;
802.1Q VLAN protocol;
Appletalk network protocol;
Asynchronous Transfer Mode (ATM) subsystem;
Networking core;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netlink;
RxRPC session sockets;
Network traffic control;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
TLS protocol;
VMware vSockets driver;
Wireless networking;
XFRM subsystem;
ADI SoundPort AD1816A based soundcard drivers;
MediaTek ASoC drivers;
SOF drivers;
USB sound devices;
KVM subsystem; (CVE-2025-38335, CVE-2025-38349, CVE-2025-38351, CVE-2025-38437, CVE-2025-38438, CVE-2025-38439, CVE-2025-38440, CVE-2025-38441, CVE-2025-38443, CVE-2025-38444, CVE-2025-38445, CVE-2025-38446, CVE-2025-38448, CVE-2025-38449, CVE-2025-38450, CVE-2025-38451, CVE-2025-38452, CVE-2025-38453, CVE-2025-38454, CVE-2025-38455, CVE-2025-38456, CVE-2025-38457, CVE-2025-38458, CVE-2025-38459, CVE-2025-38460, CVE-2025-38461, CVE-2025-38462, CVE-2025-38463, CVE-2025-38464, CVE-2025-38465, CVE-2025-38466, CVE-2025-38467, CVE-2025-38468, CVE-2025-38469, CVE-2025-38470, CVE-2025-38471, CVE-2025-38472, CVE-2025-38473, CVE-2025-38474, CVE-2025-38475, CVE-2025-38476, CVE-2025-38478, CVE-2025-38480, CVE-2025-38481, CVE-2025-38482, CVE-2025-38483, CVE-2025-38484, CVE-2025-38485, CVE-2025-38487, CVE-2025-38488, CVE-2025-38489, CVE-2025-38490, CVE-2025-38491, CVE-2025-38492, CVE-2025-38493, CVE-2025-38494, CVE-2025-38495, CVE-2025-38496, CVE-2025-38497, CVE-2025-38501, CVE-2025-38503, CVE-2025-38505, CVE-2025-38506, CVE-2025-38507, CVE-2025-38508, CVE-2025-38509, CVE-2025-38510, CVE-2025-38511, CVE-2025-38512, CVE-2025-38513, CVE-2025-38514, CVE-2025-38515, CVE-2025-38516, CVE-2025-38517, CVE-2025-38520,…

Record: USN-7879-2
Updated: 2026-11-03

OSVUSN-7879-3 No score

linux-aws-6.14, linux-oracle-6.14 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
PowerPC architecture;
S390 architecture;
x86 architecture;
Network block device driver;
Character device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
Hardware crypto device drivers;
Device frequency scaling framework;
DMA engine subsystem;
EDAC drivers;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
IIO subsystem;
IIO ADC drivers;
InfiniBand drivers;
Input Device core drivers;
Multiple devices driver;
Media drivers;
Network drivers;
Mellanox network drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Powercap sysfs driver;
Voltage and Current Regulator drivers;
S/390 drivers;
ASPEED SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Media staging drivers;
USB Gadget drivers;
vDPA drivers;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
BTRFS file system;
Ceph distributed file system;
EFI Variable file system;
File systems infrastructure;
F2FS file system;
GFS2 file system;
Network file systems library;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Proc file system;
SMB network file system;
DRM display driver;
io_uring subsystem;
Internal shared memory driver;
padata parallel execution mechanism;
Networking subsytem;
Bluetooth subsystem;
Netfilter;
UDP network protocol;
Tracing infrastructure;
BPF subsystem;
Perf events;
Padata parallel execution mechanism;
Codetag library;
KASAN memory debugging framework;
Memory management;
802.1Q VLAN protocol;
Appletalk network protocol;
Asynchronous Transfer Mode (ATM) subsystem;
Networking core;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netlink;
RxRPC session sockets;
Network traffic control;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
TLS protocol;
VMware vSockets driver;
Wireless networking;
XFRM subsystem;
ADI SoundPort AD1816A based soundcard drivers;
MediaTek ASoC drivers;
SOF drivers;
USB sound devices;
KVM subsystem; (CVE-2025-38335, CVE-2025-38349, CVE-2025-38351, CVE-2025-38437, CVE-2025-38438, CVE-2025-38439, CVE-2025-38440, CVE-2025-38441, CVE-2025-38443, CVE-2025-38444, CVE-2025-38445, CVE-2025-38446, CVE-2025-38448, CVE-2025-38449, CVE-2025-38450, CVE-2025-38451, CVE-2025-38452, CVE-2025-38453, CVE-2025-38454, CVE-2025-38455, CVE-2025-38456, CVE-2025-38457, CVE-2025-38458, CVE-2025-38459, CVE-2025-38460, CVE-2025-38461, CVE-2025-38462, CVE-2025-38463, CVE-2025-38464, CVE-2025-38465, CVE-2025-38466, CVE-2025-38467, CVE-2025-38468, CVE-2025-38469, CVE-2025-38470, CVE-2025-38471, CVE-2025-38472, CVE-2025-38473, CVE-2025-38474, CVE-2025-38475, CVE-2025-38476, CVE-2025-38478, CVE-2025-38480, CVE-2025-38481, CVE-2025-38482, CVE-2025-38483, CVE-2025-38484, CVE-2025-38485, CVE-2025-38487, CVE-2025-38488, CVE-2025-38489, CVE-2025-38490, CVE-2025-38491, CVE-2025-38492, CVE-2025-38493, CVE-2025-38494, CVE-2025-38495, CVE-2025-38496, CVE-2025-38497, CVE-2025-38501, CVE-2025-38503, CVE-2025-38505, CVE-2025-38506, CVE-2025-38507, CVE-2025-38508, CVE-2025-38509, CVE-2025-38510, CVE-2025-38511, CVE-2025-38512, CVE-2025-38513, CVE-2025-38514, CVE-2025-38515, CVE-2025-38516, CVE-2025-38517, CVE-2025-38520,…

Record: USN-7879-3
Updated: 2026-11-03

OSVUSN-7879-4 No score

linux-gcp-6.14, linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
PowerPC architecture;
S390 architecture;
x86 architecture;
Network block device driver;
Character device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
Hardware crypto device drivers;
Device frequency scaling framework;
DMA engine subsystem;
EDAC drivers;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
IIO subsystem;
IIO ADC drivers;
InfiniBand drivers;
Input Device core drivers;
Multiple devices driver;
Media drivers;
Network drivers;
Mellanox network drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Powercap sysfs driver;
Voltage and Current Regulator drivers;
S/390 drivers;
ASPEED SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Media staging drivers;
USB Gadget drivers;
vDPA drivers;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
BTRFS file system;
Ceph distributed file system;
EFI Variable file system;
File systems infrastructure;
F2FS file system;
GFS2 file system;
Network file systems library;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Proc file system;
SMB network file system;
DRM display driver;
io_uring subsystem;
Internal shared memory driver;
padata parallel execution mechanism;
Networking subsytem;
Bluetooth subsystem;
Netfilter;
UDP network protocol;
Tracing infrastructure;
BPF subsystem;
Perf events;
Padata parallel execution mechanism;
Codetag library;
KASAN memory debugging framework;
Memory management;
802.1Q VLAN protocol;
Appletalk network protocol;
Asynchronous Transfer Mode (ATM) subsystem;
Networking core;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netlink;
RxRPC session sockets;
Network traffic control;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
TLS protocol;
VMware vSockets driver;
Wireless networking;
XFRM subsystem;
ADI SoundPort AD1816A based soundcard drivers;
MediaTek ASoC drivers;
SOF drivers;
USB sound devices;
KVM subsystem; (CVE-2025-38335, CVE-2025-38349, CVE-2025-38351, CVE-2025-38437, CVE-2025-38438, CVE-2025-38439, CVE-2025-38440, CVE-2025-38441, CVE-2025-38443, CVE-2025-38444, CVE-2025-38445, CVE-2025-38446, CVE-2025-38448, CVE-2025-38449, CVE-2025-38450, CVE-2025-38451, CVE-2025-38452, CVE-2025-38453, CVE-2025-38454, CVE-2025-38455, CVE-2025-38456, CVE-2025-38457, CVE-2025-38458, CVE-2025-38459, CVE-2025-38460, CVE-2025-38461, CVE-2025-38462, CVE-2025-38463, CVE-2025-38464, CVE-2025-38465, CVE-2025-38466, CVE-2025-38467, CVE-2025-38468, CVE-2025-38469, CVE-2025-38470, CVE-2025-38471, CVE-2025-38472, CVE-2025-38473, CVE-2025-38474, CVE-2025-38475, CVE-2025-38476, CVE-2025-38478, CVE-2025-38480, CVE-2025-38481, CVE-2025-38482, CVE-2025-38483, CVE-2025-38484, CVE-2025-38485, CVE-2025-38487, CVE-2025-38488, CVE-2025-38489, CVE-2025-38490, CVE-2025-38491, CVE-2025-38492, CVE-2025-38493, CVE-2025-38494, CVE-2025-38495, CVE-2025-38496, CVE-2025-38497, CVE-2025-38501, CVE-2025-38503, CVE-2025-38505, CVE-2025-38506, CVE-2025-38507, CVE-2025-38508, CVE-2025-38509, CVE-2025-38510, CVE-2025-38511, CVE-2025-38512, CVE-2025-38513, CVE-2025-38514, CVE-2025-38515, CVE-2025-38516, CVE-2025-38517, CVE-2025-38520,…

Record: USN-7879-4
Updated: 2026-11-03

OSVUSN-7880-1 No score

linux-oem-6.14 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
PowerPC architecture;
S390 architecture;
x86 architecture;
Network block device driver;
Character device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
Hardware crypto device drivers;
Device frequency scaling framework;
DMA engine subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
IIO subsystem;
IIO ADC drivers;
InfiniBand drivers;
Input Device core drivers;
Multiple devices driver;
Media drivers;
Network drivers;
Mellanox network drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Powercap sysfs driver;
Voltage and Current Regulator drivers;
S/390 drivers;
ASPEED SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Media staging drivers;
USB Gadget drivers;
vDPA drivers;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
BTRFS file system;
Ceph distributed file system;
EFI Variable file system;
File systems infrastructure;
F2FS file system;
GFS2 file system;
Network file systems library;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Proc file system;
SMB network file system;
DRM display driver;
io_uring subsystem;
Internal shared memory driver;
padata parallel execution mechanism;
Networking subsytem;
Bluetooth subsystem;
Netfilter;
UDP network protocol;
Tracing infrastructure;
BPF subsystem;
Perf events;
Padata parallel execution mechanism;
Codetag library;
KASAN memory debugging framework;
Memory management;
802.1Q VLAN protocol;
Appletalk network protocol;
Asynchronous Transfer Mode (ATM) subsystem;
Networking core;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netlink;
RxRPC session sockets;
Network traffic control;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
TLS protocol;
VMware vSockets driver;
Wireless networking;
XFRM subsystem;
ADI SoundPort AD1816A based soundcard drivers;
MediaTek ASoC drivers;
SOF drivers;
USB sound devices;
KVM subsystem; (CVE-2025-38335, CVE-2025-38349, CVE-2025-38351, CVE-2025-38437, CVE-2025-38438, CVE-2025-38439, CVE-2025-38440, CVE-2025-38441, CVE-2025-38443, CVE-2025-38444, CVE-2025-38445, CVE-2025-38446, CVE-2025-38448, CVE-2025-38449, CVE-2025-38450, CVE-2025-38451, CVE-2025-38452, CVE-2025-38453, CVE-2025-38454, CVE-2025-38455, CVE-2025-38456, CVE-2025-38457, CVE-2025-38458, CVE-2025-38459, CVE-2025-38460, CVE-2025-38461, CVE-2025-38462, CVE-2025-38463, CVE-2025-38464, CVE-2025-38465, CVE-2025-38466, CVE-2025-38467, CVE-2025-38468, CVE-2025-38469, CVE-2025-38470, CVE-2025-38471, CVE-2025-38472, CVE-2025-38473, CVE-2025-38474, CVE-2025-38475, CVE-2025-38476, CVE-2025-38478, CVE-2025-38480, CVE-2025-38481, CVE-2025-38482, CVE-2025-38483, CVE-2025-38484, CVE-2025-38485, CVE-2025-38487, CVE-2025-38488, CVE-2025-38489, CVE-2025-38490, CVE-2025-38491, CVE-2025-38492, CVE-2025-38493, CVE-2025-38494, CVE-2025-38495, CVE-2025-38496, CVE-2025-38497, CVE-2025-38501, CVE-2025-38503, CVE-2025-38505, CVE-2025-38506, CVE-2025-38507, CVE-2025-38508, CVE-2025-38509, CVE-2025-38510, CVE-2025-38511, CVE-2025-38512, CVE-2025-38513, CVE-2025-38514, CVE-2025-38515, CVE-2025-38516, CVE-2025-38517, CVE-2025-38520, CVE-2025-38521,…

Record: USN-7880-1
Updated: 2026-11-03

OSVUSN-7934-1 No score

linux-azure, linux-azure-6.14 vulnerabilities

Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this to expose sensitive information from the host OS. (CVE-2025-40300)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
PowerPC architecture;
S390 architecture;
x86 architecture;
Cryptographic API;
Network block device driver;
Character device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
Hardware crypto device drivers;
Device frequency scaling framework;
DMA engine subsystem;
EDAC drivers;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
IIO subsystem;
IIO ADC drivers;
InfiniBand drivers;
Input Device core drivers;
Multiple devices driver;
Media drivers;
Network drivers;
Mellanox network drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Powercap sysfs driver;
Voltage and Current Regulator drivers;
S/390 drivers;
ASPEED SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Media staging drivers;
USB Gadget drivers;
vDPA drivers;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
BTRFS file system;
Ceph distributed file system;
EFI Variable file system;
File systems infrastructure;
F2FS file system;
GFS2 file system;
Network file systems library;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Proc file system;
SMB network file system;
DRM display driver;
io_uring subsystem;
Internal shared memory driver;
padata parallel execution mechanism;
Networking subsytem;
Bluetooth subsystem;
Netfilter;
UDP network protocol;
Tracing infrastructure;
BPF subsystem;
Perf events;
Padata parallel execution mechanism;
Codetag library;
KASAN memory debugging framework;
Memory management;
802.1Q VLAN protocol;
Appletalk network protocol;
Asynchronous Transfer Mode (ATM) subsystem;
Networking core;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netlink;
RxRPC session sockets;
Network traffic control;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
TLS protocol;
VMware vSockets driver;
Wireless networking;
XFRM subsystem;
ADI SoundPort AD1816A based soundcard drivers;
MediaTek ASoC drivers;
SOF drivers;
USB sound devices;
KVM subsystem; (CVE-2025-38335, CVE-2025-38349, CVE-2025-38351, CVE-2025-38437, CVE-2025-38438, CVE-2025-38439, CVE-2025-38440, CVE-2025-38441, CVE-2025-38443, CVE-2025-38444, CVE-2025-38445, CVE-2025-38446, CVE-2025-38448, CVE-2025-38449, CVE-2025-38450, CVE-2025-38451, CVE-2025-38452, CVE-2025-38453, CVE-2025-38454, CVE-2025-38455, CVE-2025-38456, CVE-2025-38457, CVE-2025-38458, CVE-2025-38459, CVE-2025-38460, CVE-2025-38461, CVE-2025-38462, CVE-2025-38463, CVE-2025-38464, CVE-2025-38465, CVE-2025-38466, CVE-2025-38467, CVE-2025-38468, CVE-2025-38469, CVE-2025-38470, CVE-2025-38471, CVE-2025-38472, CVE-2025-38473, CVE-2025-38474, CVE-2025-38475, CVE-2025-38476, CVE-2025-38478, CVE-2025-38480, CVE-2025-38481, CVE-2025-38482, CVE-2025-38483, CVE-2025-38484, CVE-2025-38485, CVE-2025-38487, CVE-2025-38488,…

Record: USN-7934-1
Updated: 2026-11-03

OSVUSN-8028-1 No score

linux, linux-raspi vulnerabilities

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expose sensitive information. (CVE-2024-36350, CVE-2024-36357)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
ATA over ethernet (AOE) driver;
DRBD Distributed Replicated Block Device drivers;
Network block device driver;
Ublk userspace block driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
FPGA Framework;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
MCB driver;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Microchip PCI driver;
Intel Management Engine Interface driver;
PCI Endpoint Test driver;
TI TPS6594 PFSM driver;
VMware VMCI Driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Powercap sysfs driver;
PTP clock framework;
PWM drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
Samsung SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Media staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Type-C support driver;
USB Type-C Connector System Software Interface driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
TSM Common Guest driver;
Virtio drivers;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EFI Variable file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system;…

Record: USN-8028-1
Updated: 2026-11-03

OSVUSN-8028-2 No score

linux-realtime-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
ATA over ethernet (AOE) driver;
DRBD Distributed Replicated Block Device drivers;
Network block device driver;
Ublk userspace block driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
FPGA Framework;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
MCB driver;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Microchip PCI driver;
Intel Management Engine Interface driver;
PCI Endpoint Test driver;
TI TPS6594 PFSM driver;
VMware VMCI Driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Powercap sysfs driver;
PTP clock framework;
PWM drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
Samsung SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Media staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Type-C support driver;
USB Type-C Connector System Software Interface driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
TSM Common Guest driver;
Virtio drivers;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EFI Variable file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system; …

Record: USN-8028-2
Updated: 2026-11-03

OSVUSN-8028-3 No score

linux-realtime, linux-raspi-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
ATA over ethernet (AOE) driver;
DRBD Distributed Replicated Block Device drivers;
Network block device driver;
Ublk userspace block driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
FPGA Framework;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
MCB driver;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Microchip PCI driver;
Intel Management Engine Interface driver;
PCI Endpoint Test driver;
TI TPS6594 PFSM driver;
VMware VMCI Driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Powercap sysfs driver;
PTP clock framework;
PWM drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
Samsung SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Media staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Type-C support driver;
USB Type-C Connector System Software Interface driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
TSM Common Guest driver;
Virtio drivers;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EFI Variable file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system; …

Record: USN-8028-3
Updated: 2026-11-03

OSVUSN-8028-4 No score

linux-aws-fips, linux-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
ATA over ethernet (AOE) driver;
DRBD Distributed Replicated Block Device drivers;
Network block device driver;
Ublk userspace block driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
FPGA Framework;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
MCB driver;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Microchip PCI driver;
Intel Management Engine Interface driver;
PCI Endpoint Test driver;
TI TPS6594 PFSM driver;
VMware VMCI Driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Powercap sysfs driver;
PTP clock framework;
PWM drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
Samsung SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Media staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Type-C support driver;
USB Type-C Connector System Software Interface driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
TSM Common Guest driver;
Virtio drivers;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EFI Variable file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system; …

Record: USN-8028-4
Updated: 2026-11-03

OSVUSN-8028-5 No score

linux-aws, linux-aws-6.8, linux-gkeop, linux-nvidia, linux-nvidia-6.8, linux-oracle, linux-oracle-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
ATA over ethernet (AOE) driver;
DRBD Distributed Replicated Block Device drivers;
Network block device driver;
Ublk userspace block driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
FPGA Framework;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
MCB driver;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Microchip PCI driver;
Intel Management Engine Interface driver;
PCI Endpoint Test driver;
TI TPS6594 PFSM driver;
VMware VMCI Driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Powercap sysfs driver;
PTP clock framework;
PWM drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
Samsung SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Media staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Type-C support driver;
USB Type-C Connector System Software Interface driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
TSM Common Guest driver;
Virtio drivers;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EFI Variable file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system; …

Record: USN-8028-5
Updated: 2026-11-03

OSVUSN-8028-6 No score

linux-hwe-6.8, linux-lowlatency-hwe-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
ATA over ethernet (AOE) driver;
DRBD Distributed Replicated Block Device drivers;
Network block device driver;
Ublk userspace block driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
FPGA Framework;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
MCB driver;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Microchip PCI driver;
Intel Management Engine Interface driver;
PCI Endpoint Test driver;
TI TPS6594 PFSM driver;
VMware VMCI Driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Powercap sysfs driver;
PTP clock framework;
PWM drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
Samsung SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Media staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Type-C support driver;
USB Type-C Connector System Software Interface driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
TSM Common Guest driver;
Virtio drivers;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EFI Variable file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system; …

Record: USN-8028-6
Updated: 2026-11-03

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`kernel` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-64k` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-64k-core` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-64k-debug` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-64k-debug-core` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-64k-debug-devel` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-64k-debug-devel-matched` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-64k-debug-modules` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-64k-debug-modules-core` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-64k-debug-modules-extra` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-64k-devel` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-64k-devel-matched` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-64k-modules` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-64k-modules-core` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-64k-modules-extra` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-abi-stablelists` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-core` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-cross-headers` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-debug` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-debug-core` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-debug-devel` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-debug-devel-matched` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-debug-modules` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-debug-modules-core` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-debug-modules-extra` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-debug-uki-virt` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-devel` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-devel-matched` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-doc` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-headers` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-modules` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-modules-core` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-modules-extra` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-rt` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-rt-64k` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-rt-64k-core` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-rt-64k-debug` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-rt-64k-debug-core` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-rt-64k-debug-devel` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-rt-64k-debug-modules` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-rt-64k-debug-modules-core` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-rt-64k-debug-modules-extra` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-rt-64k-devel` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-rt-64k-modules` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-rt-64k-modules-core` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-rt-64k-modules-extra` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-rt-core` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-rt-debug` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-rt-debug-core` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel` Azure Linux:3	before 6.6.104.2-1	6.6.104.2-1
`linux-lts` Alpaquita:23	6.1.147-r0 up to 6.1.151-r0	6.1.151-r0
`linux-lts` Alpaquita:25	6.12.41-r0 up to 6.12.44-r0	6.12.44-r0
`linux-lts` Alpaquita:stream	6.12.92-r1 up to 6.18.35-r1	6.18.35-r1
`kernel` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-64k` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-64k-core` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-64k-debug` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-64k-debug-core` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-64k-debug-devel` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-64k-debug-devel-matched` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-64k-debug-modules` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-64k-debug-modules-core` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-64k-debug-modules-extra` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-64k-debug-modules-internal` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-64k-debug-modules-partner` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-64k-devel` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-64k-devel-matched` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-64k-modules` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-64k-modules-core` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-64k-modules-extra` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-64k-modules-internal` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-64k-modules-partner` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-abi-stablelists` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-core` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-cross-headers` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-debug` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-debug-core` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-debug-devel` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-debug-devel-matched` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-debug-modules` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-debug-modules-core` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-debug-modules-extra` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-debug-modules-internal` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-debug-modules-partner` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-debug-uki-virt` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-debug-uki-virt-addons` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-devel` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-devel-matched` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-doc` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-headers` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-ipaclones-internal` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-modules` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-modules-core` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-modules-extra` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-modules-internal` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-modules-partner` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-rt` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-rt-64k` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-rt-64k-core` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-rt-64k-debug` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-rt-64k-debug-core` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`kernel-rt-64k-debug-devel` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els5	5.14.0-570.62.1.el9_6.tuxcare.5.els5
`Kernel` Linux	6.0.0 up to 6.1.148, 6.2.0 up to 6.6.102, 6.7.0 up to 6.12.42, 6.13.0 up to 6.15.10, 6.16.0 up to 6.16.1	6.1.1486.6.1026.12.426.15.106.16.1
`linux` Debian:12	before 6.1.148-1, plus listed versions 6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1 Show 37 moreShow less 6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1	6.1.148-1
`linux` Debian:13	before 6.12.43-1, plus listed versions 6.12.38-16.12.41-16.12.43-1~bpo12+1	6.12.43-1
`linux` Debian:14	before 6.16.3-1, plus listed versions 6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1 Show 45 moreShow less 6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp16.14.5-1~exp1	6.16.3-1
`linux-6.1` Debian:11	before 6.1.153-1~deb11u1, plus listed versions 6.1.106-3~deb11u16.1.106-3~deb11u26.1.106-3~deb11u36.1.112-1~deb11u16.1.119-1~deb11u1 Show 6 moreShow less 6.1.128-1~deb11u16.1.129-1~deb11u16.1.137-1~deb11u16.1.140-1~deb11u16.1.147-1~deb11u16.1.148-1~deb11u1	6.1.153-1~deb11u1
`kernel-linus` Mageia:9	before 6.6.105-1.mga9	6.6.105-1.mga9
`kernel` Mageia:9	before 6.6.105-1.mga9	6.6.105-1.mga9
`kmod-virtualbox` Mageia:9	before 7.1.10-10.mga9	7.1.10-10.mga9
`kmod-xtables-addons` Mageia:9	before 3.24-86.mga9	3.24-86.mga9
`mageia-repos` Mageia:9	before 9-4.mga9	9-4.mga9
`meta-task` Mageia:9	before 9-4.mga9	9-4.mga9
`kernel` openEuler:24.03-LTS	before 6.6.0-108.0.0.100.oe2403	6.6.0-108.0.0.100.oe2403
`kernel` openEuler:24.03-LTS-SP1	before 6.6.0-108.0.0.111.oe2403sp1	6.6.0-108.0.0.111.oe2403sp1
`kernel` openEuler:24.03-LTS-SP2	before 6.6.0-108.0.0.114.oe2403sp2	6.6.0-108.0.0.114.oe2403sp2
`bpftool-debuginfo` Red Hat:rhel_eus:9.4::appstream	before 0:7.3.0-427.127.1.el9_4	0:7.3.0-427.127.1.el9_4
`kernel-64k-debug-debuginfo` Red Hat:rhel_eus:9.4::appstream	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`kernel-64k-debug-devel` Red Hat:rhel_eus:9.4::appstream	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`kernel-64k-debug-devel-matched` Red Hat:rhel_eus:9.4::appstream	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`kernel-64k-debuginfo` Red Hat:rhel_eus:9.4::appstream	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`kernel-64k-devel` Red Hat:rhel_eus:9.4::appstream	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`kernel-64k-devel-matched` Red Hat:rhel_eus:9.4::appstream	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`kernel-debug-debuginfo` Red Hat:rhel_eus:9.4::appstream	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`kernel-debug-devel` Red Hat:rhel_eus:9.4::appstream	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`kernel-debug-devel-matched` Red Hat:rhel_eus:9.4::appstream	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`kernel-debuginfo` Red Hat:rhel_eus:9.4::appstream	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`kernel-debuginfo-common-aarch64` Red Hat:rhel_eus:9.4::appstream	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`kernel-debuginfo-common-ppc64le` Red Hat:rhel_eus:9.4::appstream	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`kernel-debuginfo-common-s390x` Red Hat:rhel_eus:9.4::appstream	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`kernel-debuginfo-common-x86_64` Red Hat:rhel_eus:9.4::appstream	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`kernel-devel` Red Hat:rhel_eus:9.4::appstream	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`kernel-devel-matched` Red Hat:rhel_eus:9.4::appstream	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`kernel-doc` Red Hat:rhel_eus:9.4::appstream	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`kernel-rt-debug-debuginfo` Red Hat:rhel_eus:9.4::appstream	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`kernel-rt-debuginfo` Red Hat:rhel_eus:9.4::appstream	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`kernel-tools-debuginfo` Red Hat:rhel_eus:9.4::appstream	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`kernel-zfcpdump-debuginfo` Red Hat:rhel_eus:9.4::appstream	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`kernel-zfcpdump-devel` Red Hat:rhel_eus:9.4::appstream	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`kernel-zfcpdump-devel-matched` Red Hat:rhel_eus:9.4::appstream	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`libperf-debuginfo` Red Hat:rhel_eus:9.4::appstream	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`perf` Red Hat:rhel_eus:9.4::appstream	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`perf-debuginfo` Red Hat:rhel_eus:9.4::appstream	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`python3-perf-debuginfo` Red Hat:rhel_eus:9.4::appstream	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`rtla` Red Hat:rhel_eus:9.4::appstream	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`rv` Red Hat:rhel_eus:9.4::appstream	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`bpftool` Red Hat:rhel_eus:9.4::baseos	before 0:7.3.0-427.127.1.el9_4	0:7.3.0-427.127.1.el9_4
`bpftool-debuginfo` Red Hat:rhel_eus:9.4::baseos	before 0:7.3.0-427.127.1.el9_4	0:7.3.0-427.127.1.el9_4
`kernel` Red Hat:rhel_eus:9.4::baseos	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`kernel-64k` Red Hat:rhel_eus:9.4::baseos	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`kernel-64k-core` Red Hat:rhel_eus:9.4::baseos	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`kernel-64k-debug` Red Hat:rhel_eus:9.4::baseos	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`kernel-64k-debug-core` Red Hat:rhel_eus:9.4::baseos	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`kernel-64k-debug-debuginfo` Red Hat:rhel_eus:9.4::baseos	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`kernel-64k-debug-modules` Red Hat:rhel_eus:9.4::baseos	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`kernel-64k-debug-modules-core` Red Hat:rhel_eus:9.4::baseos	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`kernel-64k-debug-modules-extra` Red Hat:rhel_eus:9.4::baseos	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`kernel-64k-debuginfo` Red Hat:rhel_eus:9.4::baseos	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`kernel-64k-modules` Red Hat:rhel_eus:9.4::baseos	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`kernel-64k-modules-core` Red Hat:rhel_eus:9.4::baseos	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`kernel-64k-modules-extra` Red Hat:rhel_eus:9.4::baseos	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`kernel-abi-stablelists` Red Hat:rhel_eus:9.4::baseos	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`kernel-core` Red Hat:rhel_eus:9.4::baseos	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`kernel-debug` Red Hat:rhel_eus:9.4::baseos	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`kernel-debug-core` Red Hat:rhel_eus:9.4::baseos	before 0:5.14.0-427.127.1.el9_4	0:5.14.0-427.127.1.el9_4
`kernel` Rocky Linux:9	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`linux` Root:Debian:12	before 6.1.190-1.aikido.167	6.1.190-1.aikido.167
`rootio-linux` Root:Debian:12	before 6.1.190-1.aikido.167	6.1.190-1.aikido.167
`linux` Root:Debian:13	before 6.12.115-2.aikido.164	6.12.115-2.aikido.164
`rootio-linux` Root:Debian:13	before 6.12.115-2.aikido.164	6.12.115-2.aikido.164
`linux` Root:Ubuntu:24.04	before 6.8.0-147.147.aikido.90	6.8.0-147.147.aikido.90
`rootio-linux` Root:Ubuntu:24.04	before 6.8.0-147.147.aikido.90	6.8.0-147.147.aikido.90
`kernel-default` SUSE:Linux Micro 6.0	before 6.4.0-36.1	6.4.0-36.1
`kernel-default-base` SUSE:Linux Micro 6.0	before 6.4.0-36.1.21.13	6.4.0-36.1.21.13
`kernel-kvmsmall` SUSE:Linux Micro 6.0	before 6.4.0-36.1	6.4.0-36.1
`kernel-source` SUSE:Linux Micro 6.0	before 6.4.0-36.1	6.4.0-36.1
`kernel-rt` SUSE:Linux Micro 6.0	before 6.4.0-38.1	6.4.0-38.1
`kernel-source-rt` SUSE:Linux Micro 6.0	before 6.4.0-38.1	6.4.0-38.1
`kernel-default` SUSE:Linux Micro 6.1	before 6.4.0-36.1	6.4.0-36.1
`kernel-default-base` SUSE:Linux Micro 6.1	before 6.4.0-36.1.21.13	6.4.0-36.1.21.13
`kernel-kvmsmall` SUSE:Linux Micro 6.1	before 6.4.0-36.1	6.4.0-36.1
`kernel-source` SUSE:Linux Micro 6.1	before 6.4.0-36.1	6.4.0-36.1
`kernel-rt` SUSE:Linux Micro 6.1	before 6.4.0-38.1	6.4.0-38.1
`kernel-source-rt` SUSE:Linux Micro 6.1	before 6.4.0-38.1	6.4.0-38.1
`kernel-64kb` SUSE:Linux Micro 6.2	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-default` SUSE:Linux Micro 6.2	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-default-base` SUSE:Linux Micro 6.2	before 6.12.0-160000.6.1.160000.2.4	6.12.0-160000.6.1.160000.2.4
`kernel-rt` SUSE:Linux Micro 6.2	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-source` SUSE:Linux Micro 6.2	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-64kb` SUSE:Linux Enterprise Server 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-default` SUSE:Linux Enterprise Server 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-default-base` SUSE:Linux Enterprise Server 16.0	before 6.12.0-160000.6.1.160000.2.4	6.12.0-160000.6.1.160000.2.4
`kernel-docs` SUSE:Linux Enterprise Server 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-kvmsmall` SUSE:Linux Enterprise Server 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-obs-qa` SUSE:Linux Enterprise Server 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-source` SUSE:Linux Enterprise Server 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-syms` SUSE:Linux Enterprise Server 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-64kb` SUSE:Linux Enterprise Server for SAP applications 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-default` SUSE:Linux Enterprise Server for SAP applications 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-default-base` SUSE:Linux Enterprise Server for SAP applications 16.0	before 6.12.0-160000.6.1.160000.2.4	6.12.0-160000.6.1.160000.2.4
`kernel-docs` SUSE:Linux Enterprise Server for SAP applications 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-kvmsmall` SUSE:Linux Enterprise Server for SAP applications 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-obs-qa` SUSE:Linux Enterprise Server for SAP applications 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-source` SUSE:Linux Enterprise Server for SAP applications 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP applications 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server for SAP applications 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 6.4.0-150700.53.22.1.150700.17.15.1	6.4.0-150700.53.22.1.150700.17.15.1
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP7	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP7	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP7	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP7	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP7	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP7	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-livepatch-SLE15-SP7_Update_6` SUSE:Linux Enterprise Live Patching 15 SP7	before 1-150700.15.3.1	1-150700.15.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP7	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-azure` openSUSE:Leap 15.6	before 6.4.0-150600.8.55.1	6.4.0-150600.8.55.1
`kernel-source-azure` openSUSE:Leap 15.6	before 6.4.0-150600.8.55.1	6.4.0-150600.8.55.1
`kernel-syms-azure` openSUSE:Leap 15.6	before 6.4.0-150600.8.55.1	6.4.0-150600.8.55.1
`dtb-aarch64` openSUSE:Leap 15.6	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-64kb` openSUSE:Leap 15.6	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-debug` openSUSE:Leap 15.6	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-default` openSUSE:Leap 15.6	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-default-base` openSUSE:Leap 15.6	before 6.4.0-150600.23.78.1.150600.12.34.2	6.4.0-150600.23.78.1.150600.12.34.2
`kernel-docs` openSUSE:Leap 15.6	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-kvmsmall` openSUSE:Leap 15.6	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-obs-build` openSUSE:Leap 15.6	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-obs-qa` openSUSE:Leap 15.6	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-source` openSUSE:Leap 15.6	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-syms` openSUSE:Leap 15.6	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-zfcpdump` openSUSE:Leap 15.6	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-rt` openSUSE:Leap 15.6	before 6.4.0-150600.10.58.1	6.4.0-150600.10.58.1
`kernel-rt_debug` openSUSE:Leap 15.6	before 6.4.0-150600.10.58.1	6.4.0-150600.10.58.1
`kernel-source-rt` openSUSE:Leap 15.6	before 6.4.0-150600.10.58.1	6.4.0-150600.10.58.1
`kernel-syms-rt` openSUSE:Leap 15.6	before 6.4.0-150600.10.58.1	6.4.0-150600.10.58.1
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-aws-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-aws-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less 5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1	None known
`linux-aws-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1	None known
`linux-azure-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less 5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2	None known
`linux-azure-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less 5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1	None known
`linux-azure-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1	None known
`linux-azure-fde` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less 5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1	None known
`linux-gcp-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less 5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3	None known
`linux-gcp-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less 5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1	None known
`linux-gcp-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41	None known
`linux-gke` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less 5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111	None known
`linux-gke-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less 5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1	None known
`linux-gkeop` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less 5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77	None known
`linux-gkeop-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 40 moreShow less 5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1	None known
`linux-hwe-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less 5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1	None known
`linux-hwe-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less 5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1	None known
`linux-hwe-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less 5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1	None known
`linux-intel-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19	None known
`linux-oem-5.10` Ubuntu:20.04:LTS	All versions, plus listed versions 5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17 Show 21 moreShow less 5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61	None known
`linux-oem-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21 Show 7 moreShow less 5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36	None known
`linux-oem-5.14` Ubuntu:20.04:LTS	All versions, plus listed versions 5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10 Show 30 moreShow less 5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67	None known
`linux-oem-5.6` Ubuntu:20.04:LTS	All versions, plus listed versions 5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13 Show 24 moreShow less 5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60	None known
`linux-oracle-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-oracle-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1 Show 7 moreShow less 5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1	None known
`linux-oracle-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1	None known
`linux-raspi2` Ubuntu:20.04:LTS	All versions, plus listed versions 5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6	None known
`linux-riscv` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34 Show 7 moreShow less 5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45	None known
`linux-riscv-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1 Show 8 moreShow less 5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35	None known
`linux-riscv-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1 Show 5 moreShow less 5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1	None known
`linux-allwinner-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1	None known
`linux-aws-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1 Show 5 moreShow less 5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1	None known
`linux-aws-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 9 moreShow less 6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1	None known
`dtb-aarch64` openSUSE:Leap 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-64kb` openSUSE:Leap 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-default` openSUSE:Leap 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-default-base` openSUSE:Leap 16.0	before 6.12.0-160000.6.1.160000.2.4	6.12.0-160000.6.1.160000.2.4
`kernel-docs` openSUSE:Leap 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-kvmsmall` openSUSE:Leap 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-obs-build` openSUSE:Leap 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-obs-qa` openSUSE:Leap 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-rt` openSUSE:Leap 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-source` openSUSE:Leap 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-syms` openSUSE:Leap 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1
`kernel-zfcpdump` openSUSE:Leap 16.0	before 6.12.0-160000.7.1	6.12.0-160000.7.1

History

History
Recorded	Changed	Sources
Nov 3, 2026	facts	OSV
Nov 3, 2026	affected	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-38653 is a high vulnerability (CVSS 7.8) in Debian Linux, published August 22, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.18%, the 7th percentile. Fixed in kernel 5.14.0-687.12.1.el9_8.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 856 package rows, 42 versions, 2,567 references and the rest of 31 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 10 source records.