Every CVE Search/ Get API key

CVE-2026-31669

mptcp: fix slab-use-after-free in __inet_lookup_established

9.8 CriticalFix available

In the Linux kernel, the following vulnerability has been resolved:

mptcp: fix slab-use-after-free in __inet_lookup_established

The ehash table lookups are lockless and rely on SLAB_TYPESAFE_BY_RCU to guarantee socket memory stability during RCU read-side critical sections. Both tcp_prot and tcpv6_prot have their slab caches created with this flag via proto_register().

However, MPTCP's mptcp_subflow_init() copies tcpv6_prot into tcpv6_prot_override during inet_init() (fs_initcall, level 5), before inet6_init() (module_init/device_initcall, level 6) has called proto_register(&tcpv6_prot). At that point, tcpv6_prot.slab is still NULL, so tcpv6_prot_override.slab remains NULL permanently.

This causes MPTCP v6 subflow child sockets to be allocated via kmalloc (falling into kmalloc-4k) instead of the TCPv6 slab cache. The kmalloc-4k cache lacks SLAB_TYPESAFE_BY_RCU, so when these sockets are freed without SOCK_RCU_FREE (which is cleared for child sockets by design), the memory can be immediately reused. Concurrent ehash lookups under rcu_read_lock can then access freed memory, triggering a slab-use-after-free in __inet_lookup_established.

Fix this by splitting the IPv6-specific initialization out of mptcp_subflow_init() into a new mptcp_subflow_v6_init(), called from mptcp_proto_v6_init() before protocol registration. This ensures tcpv6_prot_override.slab correctly inherits the SLAB_TYPESAFE_BY_RCU slab cache.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.47%Up 0.4 points since Apr 25, 2026
90%50%10%1%

What each source reports

CVE List Score used 9.8

mptcp: fix slab-use-after-free in __inet_lookup_established

In the Linux kernel, the following vulnerability has been resolved:

mptcp: fix slab-use-after-free in __inet_lookup_established

The ehash table lookups are lockless and rely on SLAB_TYPESAFE_BY_RCU to guarantee socket memory stability during RCU read-side critical sections. Both tcp_prot and tcpv6_prot have their slab caches created with this flag via proto_register().

However, MPTCP's mptcp_subflow_init() copies tcpv6_prot into tcpv6_prot_override during inet_init() (fs_initcall, level 5), before inet6_init() (module_init/device_initcall, level 6) has called proto_register(&tcpv6_prot). At that point, tcpv6_prot.slab is still NULL, so tcpv6_prot_override.slab remains NULL permanently.

This causes MPTCP v6 subflow child sockets to be allocated via kmalloc (falling into kmalloc-4k) instead of the TCPv6 slab cache. The kmalloc-4k cache lacks SLAB_TYPESAFE_BY_RCU, so when these sockets are freed without SOCK_RCU_FREE (which is cleared for child sockets by design), the memory can be immediately reused. Concurrent ehash lookups under rcu_read_lock can then access freed memory, triggering a slab-use-after-free in __inet_lookup_established.

Fix this by splitting the IPv6-specific initialization out of mptcp_subflow_init() into a new mptcp_subflow_v6_init(), called from mptcp_proto_v6_init() before protocol registration. This ensures tcpv6_prot_override.slab correctly inherits the SLAB_TYPESAFE_BY_RCU slab cache.

Record
CVE-2026-31669
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
EUVDEUVD-2026-25562 9.8

In the Linux kernel, the following vulnerability has been resolved:

mptcp: fix slab-use-after-free in __inet_lookup_established

The ehash table lookups are lockless and rely on SLAB_TYPESAFE_BY_RCU to guarantee socket memory stability during RCU read-side critical sections. Both tcp_prot and tcpv6_prot have their slab caches created with this flag via proto_register().

However, MPTCP's mptcp_subflow_init() copies tcpv6_prot into tcpv6_prot_override during inet_init() (fs_initcall, level 5), before inet6_init() (module_init/device_initcall, level 6) has called proto_register(&tcpv6_prot). At that point, tcpv6_prot.slab is still NULL, so tcpv6_prot_override.slab remains NULL permanently.

This causes MPTCP v6 subflow child sockets to be allocated via kmalloc (falling into kmalloc-4k) instead of the TCPv6 slab cache. The kmalloc-4k cache lacks SLAB_TYPESAFE_BY_RCU, so when these sockets are freed without SOCK_RCU_FREE (which is cleared for child sockets by design), the memory can be immediately reused. Concurrent ehash lookups under rcu_read_lock can then access freed memory, triggering a slab-use-after-free in __inet_lookup_established.

Fix this by splitting the IPv6-specific initialization out of mptcp_subflow_init() into a new mptcp_subflow_v6_init(), called from mptcp_proto_v6_init() before protocol registration. This ensures tcpv6_prot_override.slab correctly inherits the SLAB_TYPESAFE_BY_RCU slab cache.

Record
EUVD-2026-25562
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-29w7-pv74-wpq7 9.8

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix slab-use-after...

In the Linux kernel, the following vulnerability has been resolved:

mptcp: fix slab-use-after-free in __inet_lookup_established

The ehash table lookups are lockless and rely on SLAB_TYPESAFE_BY_RCU to guarantee socket memory stability during RCU read-side critical sections. Both tcp_prot and tcpv6_prot have their slab caches created with this flag via proto_register().

However, MPTCP's mptcp_subflow_init() copies tcpv6_prot into tcpv6_prot_override during inet_init() (fs_initcall, level 5), before inet6_init() (module_init/device_initcall, level 6) has called proto_register(&tcpv6_prot). At that point, tcpv6_prot.slab is still NULL, so tcpv6_prot_override.slab remains NULL permanently.

This causes MPTCP v6 subflow child sockets to be allocated via kmalloc (falling into kmalloc-4k) instead of the TCPv6 slab cache. The kmalloc-4k cache lacks SLAB_TYPESAFE_BY_RCU, so when these sockets are freed without SOCK_RCU_FREE (which is cleared for child sockets by design), the memory can be immediately reused. Concurrent ehash lookups under rcu_read_lock can then access freed memory, triggering a slab-use-after-free in __inet_lookup_established.

Fix this by splitting the IPv6-specific initialization out of mptcp_subflow_init() into a new mptcp_subflow_v6_init(), called from mptcp_proto_v6_init() before protocol registration. This ensures tcpv6_prot_override.slab correctly inherits the SLAB_TYPESAFE_BY_RCU slab cache.

Record
GHSA-29w7-pv74-wpq7
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
NVD 9.8

In the Linux kernel, the following vulnerability has been resolved:

mptcp: fix slab-use-after-free in __inet_lookup_established

The ehash table lookups are lockless and rely on SLAB_TYPESAFE_BY_RCU to guarantee socket memory stability during RCU read-side critical sections. Both tcp_prot and tcpv6_prot have their slab caches created with this flag via proto_register().

However, MPTCP's mptcp_subflow_init() copies tcpv6_prot into tcpv6_prot_override during inet_init() (fs_initcall, level 5), before inet6_init() (module_init/device_initcall, level 6) has called proto_register(&tcpv6_prot). At that point, tcpv6_prot.slab is still NULL, so tcpv6_prot_override.slab remains NULL permanently.

This causes MPTCP v6 subflow child sockets to be allocated via kmalloc (falling into kmalloc-4k) instead of the TCPv6 slab cache. The kmalloc-4k cache lacks SLAB_TYPESAFE_BY_RCU, so when these sockets are freed without SOCK_RCU_FREE (which is cleared for child sockets by design), the memory can be immediately reused. Concurrent ehash lookups under rcu_read_lock can then access freed memory, triggering a slab-use-after-free in __inet_lookup_established.

Fix this by splitting the IPv6-specific initialization out of mptcp_subflow_init() into a new mptcp_subflow_v6_init(), called from mptcp_proto_v6_init() before protocol registration. This ensures tcpv6_prot_override.slab correctly inherits the SLAB_TYPESAFE_BY_RCU slab cache.

Record
CVE-2026-31669
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
OSVBELL-CVE-2026-31669 9.8
Record
BELL-CVE-2026-31669
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 9.8

mptcp: fix slab-use-after-free in __inet_lookup_established

In the Linux kernel, the following vulnerability has been resolved:

mptcp: fix slab-use-after-free in __inet_lookup_established

The ehash table lookups are lockless and rely on SLAB_TYPESAFE_BY_RCU to guarantee socket memory stability during RCU read-side critical sections. Both tcp_prot and tcpv6_prot have their slab caches created with this flag via proto_register().

However, MPTCP's mptcp_subflow_init() copies tcpv6_prot into tcpv6_prot_override during inet_init() (fs_initcall, level 5), before inet6_init() (module_init/device_initcall, level 6) has called proto_register(&tcpv6_prot). At that point, tcpv6_prot.slab is still NULL, so tcpv6_prot_override.slab remains NULL permanently.

This causes MPTCP v6 subflow child sockets to be allocated via kmalloc (falling into kmalloc-4k) instead of the TCPv6 slab cache. The kmalloc-4k cache lacks SLAB_TYPESAFE_BY_RCU, so when these sockets are freed without SOCK_RCU_FREE (which is cleared for child sockets by design), the memory can be immediately reused. Concurrent ehash lookups under rcu_read_lock can then access freed memory, triggering a slab-use-after-free in __inet_lookup_established.

Fix this by splitting the IPv6-specific initialization out of mptcp_subflow_init() into a new mptcp_subflow_v6_init(), called from mptcp_proto_v6_init() before protocol registration. This ensures tcpv6_prot_override.slab correctly inherits the SLAB_TYPESAFE_BY_RCU slab cache.

Record
CVE-2026-31669
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 48 moreShow less
OSVDEBIAN-CVE-2026-31669 9.8

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix slab-use-after-free in __inet_lookup_established The ehash table lookups are lockless and rely on SLAB_TYPESAFE_BY_RCU to guarantee socket memory stability during RCU read-side critical sections. Both tcp_prot and tcpv6_prot have their slab caches created with this flag via proto_register(). However, MPTCP's mptcp_subflow_init() copies tcpv6_prot into tcpv6_prot_override during inet_init() (fs_initcall, level 5), before inet6_init() (module_init/device_initcall, level 6) has called proto_register(&tcpv6_prot). At that point, tcpv6_prot.slab is still NULL, so tcpv6_prot_override.slab remains NULL permanently. This causes MPTCP v6 subflow child sockets to be allocated via kmalloc (falling into kmalloc-4k) instead of the TCPv6 slab cache. The kmalloc-4k cache lacks SLAB_TYPESAFE_BY_RCU, so when these sockets are freed without SOCK_RCU_FREE (which is cleared for child sockets by design), the memory can be immediately reused. Concurrent ehash lookups under rcu_read_lock can then access freed memory, triggering a slab-use-after-free in __inet_lookup_established. Fix this by splitting the IPv6-specific initialization out of mptcp_subflow_init() into a new mptcp_subflow_v6_init(), called from mptcp_proto_v6_init() before protocol registration. This ensures tcpv6_prot_override.slab correctly inherits the SLAB_TYPESAFE_BY_RCU slab cache.

Record
DEBIAN-CVE-2026-31669
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:26427 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:26427
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:26428 7.8

Red Hat Security Advisory: kernel-rt security update

Record
RHSA-2026:26428
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:27288 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:27288
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:27713 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:27713
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:27789 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:27789
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:33215 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:33215
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:33900 7.8

Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Record
RHSA-2026:33900
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:34094 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:34094
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:34095 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:34095
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:35863 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:35863
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:35894 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:35894
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:35896 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:35896
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:26427 7.5

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: mptcp: fix slab-use-after-free in __inet_lookup_established (CVE-2026-31669)

  • kernel: xen/privcmd: fix double free via VMA splitting (CVE-2026-31787)

  • kernel: Buffer overflow in drivers/xen/sys-hypervisor.c (CVE-2026-31786)

  • kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110)

  • kernel: netfilter: flowtable: strictly check for maximum number of actions (CVE-2026-43329)

  • kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CVE-2026-46056)

  • kernel: wifi: mac80211: drop stray 'static' from fast-RX rx_result (CVE-2026-46152)

  • kernel: wifi: mac80211: remove station if connection prep fails (CVE-2026-46125)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:26427
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:27288 7.8

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CVE-2026-31474)

  • kernel: mptcp: fix slab-use-after-free in __inet_lookup_established (CVE-2026-31669)

  • kernel: rxrpc: Fix RxGK token loading to check bounds (CVE-2026-31641)

  • kernel: xen/privcmd: fix double free via VMA splitting (CVE-2026-31787)

  • kernel: Buffer overflow in drivers/xen/sys-hypervisor.c (CVE-2026-31786)

  • kernel: net: mana: fix use-after-free in add_adev() error path (CVE-2026-43056)

  • kernel: Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CVE-2026-31772)

  • kernel: bnxt_en: Fix RSS context delete logic (CVE-2026-43260)

  • kernel: crypto: caam - fix overflow on long hmac keys (CVE-2026-43330)

  • kernel: net/sched: act_pedit: extend the writable skb range per key (CVE-2026-46331)

  • kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CVE-2026-46056)

  • kernel: wifi: mac80211: drop stray 'static' from fast-RX rx_result (CVE-2026-46152)

  • kernel: wifi: mac80211: remove station if connection prep fails (CVE-2026-46125)

  • kernel: exit: prevent preemption of oopsing TASK_DEAD task (CVE-2026-46173)

  • kernel: wifi: mac80211: use safe list iteration in radar detect work (CVE-2026-46166)

Bug Fix(es) and Enhancement(s):

  • Rocky Linux10.0 - s390/ap: Expose ap_bindings_complete_count counter via sysfs [rhel-10.2.z] (JIRA:Rocky Linux-166047)

  • Rocky Linux9.5 crash due to lpfc NULL ndlp->vport [rhel-10.2.z] (JIRA:Rocky Linux-171774)

  • objtool static_call check blocks build of out-of-tree livepatch modules on Rocky Linux 10.2 GA kernels ? missing upstream revert f495054bd12e (JIRA:Rocky Linux-178495)

  • ibmveth Adapter Freeze with Small MSS [rhel-10.2.z] (JIRA:Rocky Linux-179723)

  • rbd: eliminate a race in lock_dwork draining on unmap [rhel-10.2.z] (JIRA:Rocky Linux-183127)

  • Rocky Linux10.0 - s390/mm: Add missing secure storage access fixups [rhel-10.2.z] (JIRA:Rocky Linux-183319)

  • [Rocky Linux10.2.z] Enable Pretimeout Watchdog Panic Functionality on x86 (JIRA:Rocky Linux-182299)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:27288
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:27789 7.8

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CVE-2026-31474)

  • kernel: mptcp: fix slab-use-after-free in __inet_lookup_established (CVE-2026-31669)

  • kernel: xen/privcmd: fix double free via VMA splitting (CVE-2026-31787)

  • kernel: Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CVE-2026-31772)

  • kernel: bnxt_en: Fix RSS context delete logic (CVE-2026-43260)

  • kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing (CVE-2026-43279)

  • kernel: scsi: qla2xxx: Completely fix fcport double free (CVE-2026-43414)

  • kernel: net/sched: act_pedit: extend the writable skb range per key (CVE-2026-46331)

  • kernel: gfs2: Fix use-after-free in iomap inline data write path (CVE-2026-45984)

  • kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CVE-2026-46056)

  • kernel: wifi: mac80211: drop stray 'static' from fast-RX rx_result (CVE-2026-46152)

  • kernel: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CVE-2026-46117)

  • kernel: RDMA/mana: Validate rx_hash_key_len (CVE-2026-46145)

  • kernel: wifi: mac80211: remove station if connection prep fails (CVE-2026-46125)

  • kernel: exit: prevent preemption of oopsing TASK_DEAD task (CVE-2026-46173)

  • kernel: wifi: mac80211: use safe list iteration in radar detect work (CVE-2026-46166)

  • kernel: nvmet-tcp: fix race between ICReq handling and queue teardown (CVE-2026-46135)

Bug Fix(es) and Enhancement(s):

  • Rocky Linux9.4 - s390/ap: Expose ap_bindings_complete_count counter via sysfs [rhel-9.8.z] (JIRA:Rocky Linux-166048)

  • [Rocky Linux 9.8] Hung tasks during both suspend and hibernate operations on systems with Intel E810 NICs [rhel-9.8.z] (JIRA:Rocky Linux-175699)

  • DPLL: Add support for pin operational state [rhel-9.8.z] (JIRA:Rocky Linux-175820)

  • DPLL: Add support for fractional frequency offset between pin and device [rhel-9.8.z] (JIRA:Rocky Linux-175823)

  • ibmveth Adapter Freeze with Small MSS [rhel-9.8.z] (JIRA:Rocky Linux-178308)

  • Rocky Linux9.4 - s390/mm: Add missing secure storage access fixups [rhel-9.8.z] (JIRA:Rocky Linux-183317)

  • rbd: eliminate a race in lock_dwork draining on unmap [rhel-9.8.z] (JIRA:Rocky Linux-183130)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:27789
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2026-31669 7.3

CVE-2026-31669 in linux - Patched by Root

Root has patched CVE-2026-31669 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2026-31669
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-13-CVE-2026-31669 7.3

CVE-2026-31669 in linux - Patched by Root

Root has patched CVE-2026-31669 in the linux package for Root:Debian:13. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-13-CVE-2026-31669
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated
2026-11-03
OSVROOT-OS-UBUNTU-2204-CVE-2026-31669 7.3

CVE-2026-31669 in linux - Patched by Root

Root has patched CVE-2026-31669 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2204-CVE-2026-31669
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated
2026-11-06
OSVROOT-OS-UBUNTU-2404-CVE-2026-31669 7.3

CVE-2026-31669 in linux - Patched by Root

Root has patched CVE-2026-31669 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2404-CVE-2026-31669
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated
2026-11-06
OSVUBUNTU-CVE-2026-31669 7.3

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix slab-use-after-free in __inet_lookup_established The ehash table lookups are lockless and rely on SLAB_TYPESAFE_BY_RCU to guarantee socket memory stability during RCU read-side critical sections. Both tcp_prot and tcpv6_prot have their slab caches created with this flag via proto_register(). However, MPTCP's mptcp_subflow_init() copies tcpv6_prot into tcpv6_prot_override during inet_init() (fs_initcall, level 5), before inet6_init() (module_init/device_initcall, level 6) has called proto_register(&tcpv6_prot). At that point, tcpv6_prot.slab is still NULL, so tcpv6_prot_override.slab remains NULL permanently. This causes MPTCP v6 subflow child sockets to be allocated via kmalloc (falling into kmalloc-4k) instead of the TCPv6 slab cache. The kmalloc-4k cache lacks SLAB_TYPESAFE_BY_RCU, so when these sockets are freed without SOCK_RCU_FREE (which is cleared for child sockets by design), the memory can be immediately reused. Concurrent ehash lookups under rcu_read_lock can then access freed memory, triggering a slab-use-after-free in __inet_lookup_established. Fix this by splitting the IPv6-specific initialization out of mptcp_subflow_init() into a new mptcp_subflow_v6_init(), called from mptcp_proto_v6_init() before protocol registration. This ensures tcpv6_prot_override.slab correctly inherits the SLAB_TYPESAFE_BY_RCU slab cache.

Record
UBUNTU-CVE-2026-31669
CVSS 4.0
7.3 HighCVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVALSA-2026:26427 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: mptcp: fix slab-use-after-free in __inet_lookup_established (CVE-2026-31669)
  • kernel: xen/privcmd: fix double free via VMA splitting (CVE-2026-31787)
  • kernel: Buffer overflow in drivers/xen/sys-hypervisor.c (CVE-2026-31786)
  • kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110)
  • kernel: netfilter: flowtable: strictly check for maximum number of actions (CVE-2026-43329)
  • kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CVE-2026-46056)
  • kernel: wifi: mac80211: drop stray 'static' from fast-RX rx_result (CVE-2026-46152)
  • kernel: wifi: mac80211: remove station if connection prep fails (CVE-2026-46125)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:26427
Updated
2026-11-02
OSVALSA-2026:26428 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: mptcp: fix slab-use-after-free in __inet_lookup_established (CVE-2026-31669)
  • kernel: xen/privcmd: fix double free via VMA splitting (CVE-2026-31787)
  • kernel: Buffer overflow in drivers/xen/sys-hypervisor.c (CVE-2026-31786)
  • kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110)
  • kernel: netfilter: flowtable: strictly check for maximum number of actions (CVE-2026-43329)
  • kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CVE-2026-46056)
  • kernel: wifi: mac80211: drop stray 'static' from fast-RX rx_result (CVE-2026-46152)
  • kernel: wifi: mac80211: remove station if connection prep fails (CVE-2026-46125)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:26428
Updated
2026-11-02
OSVALSA-2026:27288 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CVE-2026-31474)
  • kernel: mptcp: fix slab-use-after-free in __inet_lookup_established (CVE-2026-31669)
  • kernel: rxrpc: Fix RxGK token loading to check bounds (CVE-2026-31641)
  • kernel: xen/privcmd: fix double free via VMA splitting (CVE-2026-31787)
  • kernel: Buffer overflow in drivers/xen/sys-hypervisor.c (CVE-2026-31786)
  • kernel: net: mana: fix use-after-free in add_adev() error path (CVE-2026-43056)
  • kernel: Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CVE-2026-31772)
  • kernel: bnxt_en: Fix RSS context delete logic (CVE-2026-43260)
  • kernel: crypto: caam - fix overflow on long hmac keys (CVE-2026-43330)
  • kernel: net/sched: act_pedit: extend the writable skb range per key (CVE-2026-46331)
  • kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CVE-2026-46056)
  • kernel: wifi: mac80211: drop stray 'static' from fast-RX rx_result (CVE-2026-46152)
  • kernel: wifi: mac80211: remove station if connection prep fails (CVE-2026-46125)
  • kernel: exit: prevent preemption of oopsing TASK_DEAD task (CVE-2026-46173)
  • kernel: wifi: mac80211: use safe list iteration in radar detect work (CVE-2026-46166)

Bug Fix(es) and Enhancement(s):

  • AlmaLinux10.0 - s390/ap: Expose ap_bindings_complete_count counter via sysfs [almalinux-10.2.z] (JIRA:AlmaLinux-166047)
  • AlmaLinux9.5 crash due to lpfc NULL ndlp->vport [almalinux-10.2.z] (JIRA:AlmaLinux-171774)
  • objtool static_call check blocks build of out-of-tree livepatch modules on AlmaLinux 10.2 GA kernels ? missing upstream revert f495054bd12e (JIRA:AlmaLinux-178495)
  • ibmveth Adapter Freeze with Small MSS [almalinux-10.2.z] (JIRA:AlmaLinux-179723)
  • rbd: eliminate a race in lock_dwork draining on unmap [almalinux-10.2.z] (JIRA:AlmaLinux-183127)
  • AlmaLinux10.0 - s390/mm: Add missing secure storage access fixups [almalinux-10.2.z] (JIRA:AlmaLinux-183319)
  • [AlmaLinux10.2.z] Enable Pretimeout Watchdog Panic Functionality on x86 (JIRA:AlmaLinux-182299)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:27288
Updated
2026-11-02
OSVALSA-2026:27789 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CVE-2026-31474)
  • kernel: mptcp: fix slab-use-after-free in __inet_lookup_established (CVE-2026-31669)
  • kernel: xen/privcmd: fix double free via VMA splitting (CVE-2026-31787)
  • kernel: Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CVE-2026-31772)
  • kernel: bnxt_en: Fix RSS context delete logic (CVE-2026-43260)
  • kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing (CVE-2026-43279)
  • kernel: scsi: qla2xxx: Completely fix fcport double free (CVE-2026-43414)
  • kernel: net/sched: act_pedit: extend the writable skb range per key (CVE-2026-46331)
  • kernel: gfs2: Fix use-after-free in iomap inline data write path (CVE-2026-45984)
  • kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CVE-2026-46056)
  • kernel: wifi: mac80211: drop stray 'static' from fast-RX rx_result (CVE-2026-46152)
  • kernel: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CVE-2026-46117)
  • kernel: RDMA/mana: Validate rx_hash_key_len (CVE-2026-46145)
  • kernel: wifi: mac80211: remove station if connection prep fails (CVE-2026-46125)
  • kernel: exit: prevent preemption of oopsing TASK_DEAD task (CVE-2026-46173)
  • kernel: wifi: mac80211: use safe list iteration in radar detect work (CVE-2026-46166)
  • kernel: nvmet-tcp: fix race between ICReq handling and queue teardown (CVE-2026-46135)

Bug Fix(es) and Enhancement(s):

  • AlmaLinux9.4 - s390/ap: Expose ap_bindings_complete_count counter via sysfs [almalinux-9.8.z] (JIRA:AlmaLinux-166048)
  • [AlmaLinux 9.8] Hung tasks during both suspend and hibernate operations on systems with Intel E810 NICs [almalinux-9.8.z] (JIRA:AlmaLinux-175699)
  • DPLL: Add support for pin operational state [almalinux-9.8.z] (JIRA:AlmaLinux-175820)
  • DPLL: Add support for fractional frequency offset between pin and device [almalinux-9.8.z] (JIRA:AlmaLinux-175823)
  • ibmveth Adapter Freeze with Small MSS [almalinux-9.8.z] (JIRA:AlmaLinux-178308)
  • AlmaLinux9.4 - s390/mm: Add missing secure storage access fixups [almalinux-9.8.z] (JIRA:AlmaLinux-183317)
  • rbd: eliminate a race in lock_dwork draining on unmap [almalinux-9.8.z] (JIRA:AlmaLinux-183130)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:27789
Updated
2026-11-02
OSVAZL-83837 No score

CVE-2026-31669 affecting package kernel for versions less than 6.6.137.1-1

In the Linux kernel, the following vulnerability has been resolved:

mptcp: fix slab-use-after-free in __inet_lookup_established

The ehash table lookups are lockless and rely on SLAB_TYPESAFE_BY_RCU to guarantee socket memory stability during RCU read-side critical sections. Both tcp_prot and tcpv6_prot have their slab caches created with this flag via proto_register().

However, MPTCP's mptcp_subflow_init() copies tcpv6_prot into tcpv6_prot_override during inet_init() (fs_initcall, level 5), before inet6_init() (module_init/device_initcall, level 6) has called proto_register(&tcpv6_prot). At that point, tcpv6_prot.slab is still NULL, so tcpv6_prot_override.slab remains NULL permanently.

This causes MPTCP v6 subflow child sockets to be allocated via kmalloc (falling into kmalloc-4k) instead of the TCPv6 slab cache. The kmalloc-4k cache lacks SLAB_TYPESAFE_BY_RCU, so when these sockets are freed without SOCK_RCU_FREE (which is cleared for child sockets by design), the memory can be immediately reused. Concurrent ehash lookups under rcu_read_lock can then access freed memory, triggering a slab-use-after-free in __inet_lookup_established.

Fix this by splitting the IPv6-specific initialization out of mptcp_subflow_init() into a new mptcp_subflow_v6_init(), called from mptcp_proto_v6_init() before protocol registration. This ensures tcpv6_prot_override.slab correctly inherits the SLAB_TYPESAFE_BY_RCU slab cache.

Record
AZL-83837
Updated
2026-11-02
OSVCLSA-2026-1781344094 No score

kernel: Fix of 93 CVEs

  • irqchip: Fix refcount leak in platform_irqchip_probe {CVE-2023-53610}
  • IB/hfi1: Fix a memleak in init_credit_return {CVE-2024-26839}
  • RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() {CVE-2026-23335}
  • wifi: brcmfmac: validate bsscfg indices in IF events {CVE-2026-43110}
  • wifi: rtlwifi: 8192cu: fix tid out of range in rtl92cu_tx_fill_desc() {CVE-2025-71100}
  • RDMA/core: always drop device refcount in ib_del_sub_device_and_put() {CVE-2025-71157}
  • drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table {CVE-2024-58052}
  • ionic: Fix netdev notifier unregister on failure {CVE-2024-56715}
  • uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind {CVE-2024-46739}
  • netfilter: xt_tcpmss: check remaining length before reading optlen {CVE-2026-43190}
  • usb: typec: altmodes/displayport: do not index invalid pin_assignments {CVE-2025-38391}
  • crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init {CVE-2023-52616}
  • eventpoll: defer struct eventpoll free to RCU grace period {CVE-2026-43074}
  • wifi: brcmsmac: Fix dma_free_coherent() size {CVE-2026-31661}
  • SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf {CVE-2025-71120}
  • netfilter: nf_conntrack_expect: skip expectations in other netns via proc {CVE-2026-31496}
  • platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data {CVE-2026-23370}
  • crypto: bcm - add error check in the ahash_hmac_init function {CVE-2024-56681}
  • nvme-pci: ensure we're polling a polled queue {CVE-2026-31523}
  • mmc: vub300: fix NULL-deref on disconnect {CVE-2026-31651}
  • kernel/irq/irqdomain.c: fix memory leak with using debugfs_lookup() {CVE-2023-52936}
  • ipmi: ipmb: Add check devm_kasprintf() returned value {CVE-2024-58051}
  • net: usb: pegasus: fix memory leak in update_eth_regs_async() {CVE-2026-23021}
  • ASoC: amd: fix memory leak in acp3x pdm dma ops {CVE-2026-23190}
  • udp: Deal with race between UDP socket address change and rehash {CVE-2024-57974}
  • team: avoid NETDEV_CHANGEMTU event when unregistering slave {CVE-2026-43234}
  • tcp: secure_seq: add back ports to TS offset {CVE-2026-23247}
  • udp: Fix wildcard bind conflict check when using hash2 {CVE-2026-31503}
  • netfilter: nft_set_pipapo: prevent overflow in lookup table allocation {CVE-2025-38162}
  • rxrpc: Fix recv-recv race of completed call {CVE-2025-38524}
  • netfilter: nf_tables: reject duplicate device on updates {CVE-2025-38678}
  • nf_tables: nft_dynset: fix possible stateful expression memleak in error path {CVE-2026-23399}
  • crypto: af_alg - limit RX SG extraction by receive buffer budget {CVE-2026-31677}
  • xfrm: account XFRMA_IF_ID in aevent size calculation {CVE-2026-43107}
  • KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop {CVE-2025-21839}
  • perf: Fix sample vs do_exit() {CVE-2025-38424}
  • netfilter: nf_tables: avoid chain re-validation if possible {CVE-2025-71160}
  • ksm: use range-walk function to jump over holes in scan_get_next_rmap_item {CVE-2025-68211}
  • net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime {CVE-2025-38470}
  • net: add proper RCU protection to /proc/net/ptype {CVE-2026-23255}
  • ALSA: ctxfi: Check the error for index mapping {CVE-2026-31777}
  • rseq: Fix segfault on registration when rseq_cs is non-zero {CVE-2025-38067}
  • RDMA/core: Don't expose hw_counters outside of init net namespace {CVE-2025-22089}
  • net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv {CVE-2026-22996}
  • Input: synaptics - fix crash when enabling pass-through port {CVE-2025-21746}
  • wireguard: device: use exit_rtnl callback instead of manual rtnl_lock in pre_exit {CVE-2026-31579}
  • ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use() {CVE-2025-38305}
  • driver core: fix potential NULL pointer dereference in dev_uevent() {CVE-2025-37800}
  • dm: fix NULL pointer dereference in __dm_suspend() {CVE-2025-40134}
  • net: let net.core.dev_weight always be non-zero {CVE-2025-21806}
  • exec:…
Record
CLSA-2026-1781344094
Updated
2026-11-02
OSVCLSA-2026-1782151303 No score

kernel: Fix of 151 CVEs

  • spi: spi-fsl-lpspi: fix teardown order issue (UAF) {CVE-2026-31485}
  • Buffer overflow in drivers/xen/sys-hypervisor.c {CVE-2026-31786}
  • ip6_tunnel: clear skb2->cb[] in ip4ip6_err() {CVE-2026-43037}
  • net: bonding: fix use-after-free in bond_xmit_broadcast() {CVE-2026-31419}
  • bonding: do not set usable_slaves for broadcast mode {CVE-2026-31419}
  • net: bonding: update the slave array for broadcast mode {CVE-2026-31419}
  • dlm: validate length in dlm_search_rsb_tree {CVE-2026-43125}
  • net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check {CVE-2026-23448}
  • net: Fix an unsafe loop on the list {CVE-2024-50024}
  • sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy {CVE-2025-21636}
  • wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx {CVE-2023-54300}
  • wifi: nl80211: reject cooked mode if it is set along with other flags {CVE-2025-21909}
  • drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream {CVE-2024-49913}
  • xfrm: validate new SA's prefixlen using SA family when sel.family is unset {CVE-2024-50142}
  • serial: imx: Introduce timeout when waiting on transmitter empty {CVE-2024-40967}
  • iommu/amd/iommu_v2: Fix pasid_state refcount dec hit 0 warning on pasid unbind {CVE-2023-53501}
  • octeontx2-af: Add validation before accessing cgx and lmac {CVE-2023-53654}
  • sctp: sysctl: rto_min/max: avoid using current->nsproxy {CVE-2025-21639}
  • net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices {CVE-2023-52984}
  • sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start {CVE-2024-49944}
  • netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path {CVE-2026-43451}
  • thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR {CVE-2022-48703}
  • x86/mm: Fix pti_clone_pgtable() alignment assumption {CVE-2024-44965}
  • net: usb: asix_devices: add phy_mask for ax88772 mdio bus {CVE-2025-38725}
  • ALSA: hda: Do not unset preset when cleaning up codec {CVE-2023-52736}
  • drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func {CVE-2024-49909}
  • Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE {CVE-2024-53144}
  • fuse: Initialize beyond-EOF page contents before setting uptodate {CVE-2024-44947}
  • sctp: sysctl: udp_port: avoid using current->nsproxy {CVE-2025-21637}
  • dm stats: check for and propagate alloc_percpu failure {CVE-2023-53044}
  • netpoll: Fix race condition in netpoll_owner_active {CVE-2024-41005}
  • tracing: Fix overflow in get_free_elt() {CVE-2024-43890}
  • mm/slub: avoid accessing metadata when pointer is invalid in object_err() {CVE-2025-39902}
  • xen/netfront: stop tx queues during live migration {CVE-2022-48969}
  • Bluetooth: btusb: clamp SCO altsetting table indices {CVE-2026-31497}
  • ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free {CVE-2025-38105}
  • can: j1939: make j1939_sk_bind() fail if device is no longer registered {CVE-2025-39925}
  • nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid() {CVE-2023-52508}
  • smb: client: Don't log plaintext credentials in cifs_set_cifscreds {CVE-2026-23303}
  • cifs: Fix integer overflow while processing acdirmax mount option {CVE-2025-21963}
  • netfilter: nfnetlink_log: account for netlink header size {CVE-2026-31416}
  • drm/amdgpu/vkms: fix a possible null pointer dereference {CVE-2023-52815}
  • drm/amd/amdgpu: Check tbo resource pointer {CVE-2024-46807}
  • bonding: fix null pointer deref in bond_ipsec_offload_ok {CVE-2024-44990}
  • wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower {CVE-2024-50237}
  • trace_events_hist: add check for return value of 'create_hist_field' {CVE-2023-53005}
  • drm/amdkfd: Add sync after creating vram bo {CVE-2023-53009}
  • bpf: Send signals asynchronously if !preemptible {CVE-2025-21728}
  • drm/client: fix null pointer dereference in drm_client_modeset_probe {CVE-2024-43894}
  • ext4: correct grp validation in ext4_mb_good_group {CVE-2023-53861}
  • RDMA/irdma: Initialize…
Record
CLSA-2026-1782151303
Updated
2026-11-02
OSVCLSA-2026-1783790425 No score

kernel: Fix of 41 CVEs

  • ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr {CVE-2025-68183}
  • futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock {CVE-2026-53166}
  • rtmutex: Use waiter::task instead of current in remove_waiter() {CVE-2026-43499}
  • net: bonding: fix use-after-free in bond_xmit_broadcast() {CVE-2026-31419}
  • Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold {CVE-2026-31408}
  • mptcp: fix slab-use-after-free in __inet_lookup_established {CVE-2026-31669}
  • svcrdma: bound check rq_pages index in inline path {CVE-2025-71068}
  • ALSA: scarlett2: Fix buffer overflow in config retrieval {CVE-2026-23078}
  • cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path {CVE-2026-43328}
  • drm/amd/display: Do not skip unrelated mode changes in DSC validation {CVE-2026-31488}
  • HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq {CVE-2026-43051}
  • net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check {CVE-2026-23448}
  • bpf, sockmap: Fix race between element replace and close() {CVE-2024-56664}
  • mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() {CVE-2026-31586}
  • crypto: pcrypt - Fix handling of MAY_BACKLOG requests {CVE-2026-43493}
  • atm: lec: fix use-after-free in sock_def_readable() {CVE-2026-43050}
  • driver core: enforce device_lock for driver_match_device() {CVE-2026-31688}
  • driver core: platform: use generic driver_override infrastructure {CVE-2026-31527}
  • nfsd: fix heap overflow in NFSv4.0 LOCK replay cache {CVE-2026-31402}
  • ext4: convert inline data to extents when truncate exceeds inline size {CVE-2026-31452}
  • usb: class: cdc-wdm: fix reordering issue in read code path {CVE-2026-43427}
  • xen/privcmd: fix double free via VMA splitting {CVE-2026-31787}
  • netfilter: nf_tables: release flowtable after rcu grace period on error {CVE-2026-23392}
  • wifi: mac80211: check tdls flag in ieee80211_tdls_oper {CVE-2026-43052}
  • netfilter: conntrack: switch to siphash {CVE-2021-3773}
  • gpiolib: cdev: fix NULL-pointer dereferences {CVE-2022-50453}
  • tracing: Free buffers when a used dynamic event is removed {CVE-2022-49006}
  • dlm: validate length in dlm_search_rsb_tree {CVE-2026-43125}
  • Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock {CVE-2026-31500}
  • tpm: fix reference counting for struct tpm_chip {CVE-2022-2977}
  • tracing: Fix wild-memory-access in register_synth_event() {CVE-2022-49799}
  • nfnetlink_osf: validate individual option lengths in fingerprints {CVE-2026-23397}
  • ext4: block range must be validated before use in ext4_mb_clear_bb() {CVE-2022-50021}
  • netfilter: flowtable: strictly check for maximum number of actions {CVE-2026-43329}
  • crypto: lzo - Fix compression buffer overrun {CVE-2025-38068}
  • xen: fix buffer overflow in buildid_show() {CVE-2026-31786}
  • NTB: fix possible name leak in ntb_register_device() {CVE-2023-52652}
  • ALSA: ctxfi: Fix potential OOB access in audio mixer handling {CVE-2026-23076}
  • erspan: do not use skb_mac_header() in ndo_start_xmit() {CVE-2023-53053}
  • net: af_key: zero aligned sockaddr tail in PF_KEY exports {CVE-2026-43088}
  • ata: libata-transport: fix double ata_host_put() in ata_tport_add() {CVE-2022-49826}
Record
CLSA-2026-1783790425
Updated
2026-11-02
OSVCLSA-2026-1792247642 No score

kernel: Fix of 50 CVEs

  • ALSA: usx2y: bound the hwdep mmap fault offset {CVE-2026-74641}
  • ALSA: usx2y: Fix potential leaks of uninitialized memory {CVE-2026-74641}
  • net/packet: reset the MAC header on the packet-socket transmit path {CVE-2026-74667}
  • drm/amd/display: Bound VBIOS record-chain walk loops {CVE-2026-53138}
  • drm/amd/display: Clamp VBIOS HDMI retimer register count to array size {CVE-2026-53136}
  • tty: clear cdev pointer after cdev_add() failure {CVE-2026-90334}
  • netfilter: flowtable: publish GC-visible tuple last {CVE-2026-74746}
  • mptcp: fix slab-use-after-free in __inet_lookup_established {CVE-2026-31669}
  • ethtool: do not perform operations on net devices being unregistered {CVE-2021-47517}
  • Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock {CVE-2026-31500}
  • net/mlx5: Add a timeout to acquire the command queue semaphore {CVE-2024-38556}
  • vsock/vmci: fix UAF when peer resets connection during handshake {CVE-2026-64115}
  • af_unix: Fix UAF read of tail->len in unix_stream_data_wait() {CVE-2026-64109}
  • tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done {CVE-2026-63801}
  • tipc: fix double-free in tipc_buf_append() {CVE-2026-52993}
  • dm: fix a buffer overflow in ioctl processing {CVE-2026-46294}
  • scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown {CVE-2026-97536}
  • drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() {CVE-2026-46209}
  • ipv4: validate checksum_start before completing checksum {CVE-2026-99999}
  • drm: Remove plane hsub/vsub alignment requirement for core helpers {CVE-2026-46209}
  • nfsd: make sure exp active before svc_export_show {CVE-2024-56558}
  • USB: serial: io_edgeport: cap received transmit credits {CVE-2026-68365}
  • ALSA: seq: close a re-opened queue timer in the destructor {CVE-2026-68202}
  • geneve: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-68142}
  • net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-63829}
  • RDMA/mad: Fix receive buffer leak when PKey enforcement fails {CVE-2026-98354}
  • RDMA/srp: Do not call scsi_done() from srp_abort() {CVE-2023-52515}
  • wifi: cfg80211: cancel sched scan results work on unregister {CVE-2026-68414}
  • ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF {CVE-2026-68398}
  • netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check {CVE-2026-52998}
  • drm/nouveau: fix u32 overflow in pushbuf reloc bounds check {CVE-2026-46006}
  • scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress {CVE-2023-52974}
  • drm/edid: fix OOB read in drm_parse_tiled_block() {CVE-2026-64546}
  • ipvs: clear IPv4 options after rebasing tunnel ICMP errors {CVE-2026-74669}
  • net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers {CVE-2026-74700}
  • bpf, sockmap: Fix sk_redir use-after-free in send verdict {CVE-2026-74589}
  • bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO {CVE-2022-49961}
  • dm cache: fix null-deref with concurrent writes in passthrough mode {CVE-2026-53064}
  • net: bonding: fix use-after-free after 802.3ad slave unbind {CVE-2022-49667}
  • bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() {CVE-2026-64548}
  • xen/netfront: drop RX packets with a short Ethernet header {CVE-2026-98375}
  • NFSv4.2: fix LAYOUTSTATS send buffer exhaustion {CVE-2026-90103}
  • Squashfs: check block offset is not negative {CVE-2026-90203}
  • wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length {CVE-2026-90382}
  • uio: Fix stale info pointer in failed registration path {CVE-2026-93054}
  • md/raid5-ppl: fix use-after-free in ppl_do_flush() {CVE-2026-93262}
  • tipc: read le->link under the node lock in tipc_node_link_down() {CVE-2026-74609}
  • crypto: pcrypt - Fix handling of MAY_BACKLOG requests {CVE-2026-43493}
  • libceph: define and enforce CEPH_MAX_KEY_LEN {CVE-2026-43304}
  • nvme-tcp: fix UAF when detecting digest errors {CVE-2022-48686}
  • ALSA: 6fire: fix use-after-free on disconnect…
Record
CLSA-2026-1792247642
Updated
2026-11-02
OSVMGASA-2026-0108 No score

Updated kernel, kmod-virtualbox & kmod-xtables-addons packages fix security vulnerabilities

Upstream kernel version 6.6.137 fixes bugs and vulnerabilities. The kmod-virtualbox & kmod-xtables-addons packages have been updated to work with this new kernel.

Record
MGASA-2026-0108
Updated
2026-11-02
OSVMGASA-2026-0110 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.137 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links.

Record
MGASA-2026-0110
Updated
2026-11-02
OSVopenSUSE-SU-2026:20826-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
  • CVE-2024-14027: xattr: switch to CLASS(fd) (bsc#1259420).
  • CVE-2025-40181: x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP (bsc#1253471).
  • CVE-2025-68265: nvme: fix admin request_queue lifetime (bsc#1255360).
  • CVE-2025-68310: s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (bsc#1255160).
  • CVE-2025-71302: drm/panthor: fix for dma-fence safe access rules (bsc#1264837).
  • CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
  • CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
  • CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
  • CVE-2026-23276: net: add xmit recursion limit to tunnel xmit functions (bsc#1260012).
  • CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
  • CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
  • CVE-2026-23316: net: ipv4: fix ARM64 alignment fault in multipath hash seed (bsc#1260573).
  • CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
  • CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
  • CVE-2026-23346: arm64: io: Rename ioremap_prot() to __ioremap_prot() (bsc#1260529).
  • CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
  • CVE-2026-23354: x86/fred: Correct speculative safety in fred_extint() (bsc#1260801).
  • CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
  • CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
  • CVE-2026-23375: mm: thp: deny THP for files on anonymous inodes (bsc#1260576).
  • CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
  • CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
  • CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
  • CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
  • CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
  • CVE-2026-23417: bpf: Fix constant blinding for PROBE_MEM32 stores (bsc#1261410).
  • CVE-2026-23436: net: add helpers for lookup and walking netdevs under netdev_lock() (bsc#1261617).
  • CVE-2026-23437: net: shaper: protect late read accesses to the hierarchy (bsc#1261635).
  • CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
  • CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
  • CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
  • CVE-2026-23445: igc: fix page fault in XDP TX timestamps handling (bsc#1261702).
  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
  • CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
  • CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
  • CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
  • CVE-2026-23457: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).
  • CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
  • CVE-2026-23468: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (bsc#1261692).
  • CVE-2026-23472: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (bsc#1261636).
  • CVE-2026-23473: io_uring/poll: fix multishot recv missing EOF on…
Record
openSUSE-SU-2026:20826-1
Updated
2026-11-02
OSVSUSE-SU-2026:2111-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2021-47103: inet: fully convert sk->sk_rx_dst to RCU rules (bsc#1221010).
  • CVE-2023-20585: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
  • CVE-2025-54518: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (bsc#1264013).
  • CVE-2026-23239: espintcp: Fix race condition in espintcp_close() (bsc#1259485).
  • CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1259484).
  • CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
  • CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260522).
  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
  • CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
  • CVE-2026-23462: Bluetooth: HIDP: Fix possible UAF (bsc#1261710).
  • CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261638).
  • CVE-2026-31403: NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (bsc#1261796).
  • CVE-2026-31408: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (bsc#1261797).
  • CVE-2026-31436: dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() (bsc#1262602).
  • CVE-2026-31504: net: fix fanout UAF in packet_release() via NETDEV_UP race (bsc#1263085).
  • CVE-2026-31507: net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer (bsc#1263095).
  • CVE-2026-31512: Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() (bsc#1262734).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262758).
  • CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel() (bsc#1263065).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263176).
  • CVE-2026-31588: KVM: x86: Use scratch field in MMIO fragment to hold small write values (bsc#1263165).
  • CVE-2026-31602: ALSA: ctxfi: Limit PTP to a single page (bsc#1263723).
  • CVE-2026-31607: usbip: validate number_of_packets in usbip_pack_ret_submit() (bsc#1263600).
  • CVE-2026-31649: net: stmmac: fix integer underflow in chain mode (bsc#1263582).
  • CVE-2026-31656: drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (bsc#1263170).
  • CVE-2026-31662: tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG (bsc#1263131).
  • CVE-2026-31669: mptcp: fix slab-use-after-free in __inet_lookup_established (bsc#1263141).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263668).
  • CVE-2026-31694: fuse: reject oversized dirents in page cache (bsc#1263901).
  • CVE-2026-31700: net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() (bsc#1263882).
  • CVE-2026-31738: vxlan: validate ND option lengths in vxlan_na_create (bsc#1264059).
  • CVE-2026-31787: xen/privcmd: fix double free via VMA splitting (bsc#1262181).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1263931).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1263933).
  • CVE-2026-43050: atm: lec: fix use-after-free in sock_def_readable() (bsc#1264082).
  • CVE-2026-43110: wifi: brcmfmac: validate bsscfg indices in IF events (bsc#1264482).
  • CVE-2026-43126: ALSA: mixer: oss: Add card disconnect checkpoints (bsc#1264634).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264848).
  • CVE-2026-43214: KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() (bsc#1264651).
  • CVE-2026-43329: netfilter: flowtable: strictly check for maximum number of actions (bsc#1265085).
  • CVE-2026-43334: Bluetooth: SMP: force responder MITM…
Record
SUSE-SU-2026:2111-1
Updated
2026-11-02
OSVSUSE-SU-2026:21834-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
  • CVE-2024-14027: xattr: switch to CLASS(fd) (bsc#1259420).
  • CVE-2025-40181: x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP (bsc#1253471).
  • CVE-2025-68265: nvme: fix admin request_queue lifetime (bsc#1255360).
  • CVE-2025-68310: s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (bsc#1255160).
  • CVE-2025-71302: drm/panthor: fix for dma-fence safe access rules (bsc#1264837).
  • CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
  • CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
  • CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
  • CVE-2026-23276: net: add xmit recursion limit to tunnel xmit functions (bsc#1260012).
  • CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
  • CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
  • CVE-2026-23316: net: ipv4: fix ARM64 alignment fault in multipath hash seed (bsc#1260573).
  • CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
  • CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
  • CVE-2026-23346: arm64: io: Rename ioremap_prot() to __ioremap_prot() (bsc#1260529).
  • CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
  • CVE-2026-23354: x86/fred: Correct speculative safety in fred_extint() (bsc#1260801).
  • CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
  • CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
  • CVE-2026-23375: mm: thp: deny THP for files on anonymous inodes (bsc#1260576).
  • CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
  • CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
  • CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
  • CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
  • CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
  • CVE-2026-23417: bpf: Fix constant blinding for PROBE_MEM32 stores (bsc#1261410).
  • CVE-2026-23436: net: add helpers for lookup and walking netdevs under netdev_lock() (bsc#1261617).
  • CVE-2026-23437: net: shaper: protect late read accesses to the hierarchy (bsc#1261635).
  • CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
  • CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
  • CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
  • CVE-2026-23445: igc: fix page fault in XDP TX timestamps handling (bsc#1261702).
  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
  • CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
  • CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
  • CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
  • CVE-2026-23457: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).
  • CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
  • CVE-2026-23468: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (bsc#1261692).
  • CVE-2026-23472: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (bsc#1261636).
  • CVE-2026-23473: io_uring/poll: fix multishot recv missing EOF on…
Record
SUSE-SU-2026:21834-1
Updated
2026-11-02
OSVSUSE-SU-2026:21841-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
  • CVE-2024-14027: xattr: switch to CLASS(fd) (bsc#1259420).
  • CVE-2025-40181: x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP (bsc#1253471).
  • CVE-2025-68265: nvme: fix admin request_queue lifetime (bsc#1255360).
  • CVE-2025-68310: s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (bsc#1255160).
  • CVE-2025-71302: drm/panthor: fix for dma-fence safe access rules (bsc#1264837).
  • CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
  • CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
  • CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
  • CVE-2026-23276: net: add xmit recursion limit to tunnel xmit functions (bsc#1260012).
  • CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
  • CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
  • CVE-2026-23316: net: ipv4: fix ARM64 alignment fault in multipath hash seed (bsc#1260573).
  • CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
  • CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
  • CVE-2026-23346: arm64: io: Rename ioremap_prot() to __ioremap_prot() (bsc#1260529).
  • CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
  • CVE-2026-23354: x86/fred: Correct speculative safety in fred_extint() (bsc#1260801).
  • CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
  • CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
  • CVE-2026-23375: mm: thp: deny THP for files on anonymous inodes (bsc#1260576).
  • CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
  • CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
  • CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
  • CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
  • CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
  • CVE-2026-23417: bpf: Fix constant blinding for PROBE_MEM32 stores (bsc#1261410).
  • CVE-2026-23436: net: add helpers for lookup and walking netdevs under netdev_lock() (bsc#1261617).
  • CVE-2026-23437: net: shaper: protect late read accesses to the hierarchy (bsc#1261635).
  • CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
  • CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
  • CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
  • CVE-2026-23445: igc: fix page fault in XDP TX timestamps handling (bsc#1261702).
  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
  • CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
  • CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
  • CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
  • CVE-2026-23457: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).
  • CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
  • CVE-2026-23468: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (bsc#1261692).
  • CVE-2026-23472: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (bsc#1261636).
  • CVE-2026-23473: io_uring/poll: fix multishot recv missing EOF on…
Record
SUSE-SU-2026:21841-1
Updated
2026-11-02
OSVSUSE-SU-2026:21845-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
  • CVE-2024-14027: xattr: switch to CLASS(fd) (bsc#1259420).
  • CVE-2025-40181: x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP (bsc#1253471).
  • CVE-2025-68265: nvme: fix admin request_queue lifetime (bsc#1255360).
  • CVE-2025-68310: s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (bsc#1255160).
  • CVE-2025-71302: drm/panthor: fix for dma-fence safe access rules (bsc#1264837).
  • CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
  • CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
  • CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
  • CVE-2026-23276: net: add xmit recursion limit to tunnel xmit functions (bsc#1260012).
  • CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
  • CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
  • CVE-2026-23316: net: ipv4: fix ARM64 alignment fault in multipath hash seed (bsc#1260573).
  • CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
  • CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
  • CVE-2026-23346: arm64: io: Rename ioremap_prot() to __ioremap_prot() (bsc#1260529).
  • CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
  • CVE-2026-23354: x86/fred: Correct speculative safety in fred_extint() (bsc#1260801).
  • CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
  • CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
  • CVE-2026-23375: mm: thp: deny THP for files on anonymous inodes (bsc#1260576).
  • CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
  • CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
  • CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
  • CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
  • CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
  • CVE-2026-23417: bpf: Fix constant blinding for PROBE_MEM32 stores (bsc#1261410).
  • CVE-2026-23436: net: add helpers for lookup and walking netdevs under netdev_lock() (bsc#1261617).
  • CVE-2026-23437: net: shaper: protect late read accesses to the hierarchy (bsc#1261635).
  • CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
  • CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
  • CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
  • CVE-2026-23445: igc: fix page fault in XDP TX timestamps handling (bsc#1261702).
  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
  • CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
  • CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
  • CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
  • CVE-2026-23457: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).
  • CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
  • CVE-2026-23468: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (bsc#1261692).
  • CVE-2026-23472: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (bsc#1261636).
  • CVE-2026-23473: io_uring/poll: fix multishot recv missing EOF on…
Record
SUSE-SU-2026:21845-1
Updated
2026-11-02
OSVSUSE-SU-2026:21860-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
  • CVE-2024-14027: xattr: switch to CLASS(fd) (bsc#1259420).
  • CVE-2025-40181: x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP (bsc#1253471).
  • CVE-2025-68265: nvme: fix admin request_queue lifetime (bsc#1255360).
  • CVE-2025-68310: s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (bsc#1255160).
  • CVE-2025-71302: drm/panthor: fix for dma-fence safe access rules (bsc#1264837).
  • CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
  • CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
  • CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
  • CVE-2026-23276: net: add xmit recursion limit to tunnel xmit functions (bsc#1260012).
  • CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
  • CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
  • CVE-2026-23316: net: ipv4: fix ARM64 alignment fault in multipath hash seed (bsc#1260573).
  • CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
  • CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
  • CVE-2026-23346: arm64: io: Rename ioremap_prot() to __ioremap_prot() (bsc#1260529).
  • CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
  • CVE-2026-23354: x86/fred: Correct speculative safety in fred_extint() (bsc#1260801).
  • CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
  • CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
  • CVE-2026-23375: mm: thp: deny THP for files on anonymous inodes (bsc#1260576).
  • CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
  • CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
  • CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
  • CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
  • CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
  • CVE-2026-23417: bpf: Fix constant blinding for PROBE_MEM32 stores (bsc#1261410).
  • CVE-2026-23436: net: add helpers for lookup and walking netdevs under netdev_lock() (bsc#1261617).
  • CVE-2026-23437: net: shaper: protect late read accesses to the hierarchy (bsc#1261635).
  • CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
  • CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
  • CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
  • CVE-2026-23445: igc: fix page fault in XDP TX timestamps handling (bsc#1261702).
  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
  • CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
  • CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
  • CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
  • CVE-2026-23457: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).
  • CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
  • CVE-2026-23468: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (bsc#1261692).
  • CVE-2026-23472: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (bsc#1261636).
  • CVE-2026-23473: io_uring/poll: fix multishot recv missing EOF on…
Record
SUSE-SU-2026:21860-1
Updated
2026-11-02
OSVSUSE-SU-2026:21876-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-20585: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
  • CVE-2025-71183: btrfs: always detect conflicting inodes when logging inode refs (bsc#1257631).
  • CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
  • CVE-2026-23239: espintcp: Fix race condition in espintcp_close() (bsc#1259485).
  • CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1259484).
  • CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
  • CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
  • CVE-2026-23276: net: move dev_xmit_recursion() helpers to net/core/dev.h (bsc#1260012).
  • CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
  • CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
  • CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
  • CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
  • CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
  • CVE-2026-23346: mm/ioremap: define generic_ioremap_prot() and generic_iounmap() (bsc#1260529).
  • CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
  • CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
  • CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
  • CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
  • CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
  • CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260522).
  • CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
  • CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
  • CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
  • CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
  • CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
  • CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
  • CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
  • CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
  • CVE-2026-23457: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).
  • CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
  • CVE-2026-23461: Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user (bsc#1261707).
  • CVE-2026-23462: Bluetooth: HIDP: Fix possible UAF (bsc#1261710).
  • CVE-2026-23468: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (bsc#1261692).
  • CVE-2026-23472: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (bsc#1261636).
  • CVE-2026-23473: io_uring/poll: fix multishot recv missing EOF on wakeup race (bsc#1261694).
  • CVE-2026-31400: sunrpc: fix cache_request leak in cache_release (bsc#1261645).
  • CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261638).
  • CVE-2026-31403: NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (bsc#1261796).
  • CVE-2026-31404: xfs: avoid dereferencing log items after push callbacks (bsc#1261628).
  • CVE-2026-31407:…
Record
SUSE-SU-2026:21876-1
Updated
2026-11-02
OSVSUSE-SU-2026:21877-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
  • CVE-2025-71183: btrfs: always detect conflicting inodes when logging inode refs (bsc#1257631).
  • CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
  • CVE-2026-23239: espintcp: Fix race condition in espintcp_close() (bsc#1259485).
  • CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1259484).
  • CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
  • CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
  • CVE-2026-23276: net: move dev_xmit_recursion() helpers to net/core/dev.h (bsc#1260012).
  • CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
  • CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
  • CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
  • CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
  • CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
  • CVE-2026-23346: mm/ioremap: define generic_ioremap_prot() and generic_iounmap() (bsc#1260529).
  • CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
  • CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
  • CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
  • CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
  • CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
  • CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260522).
  • CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
  • CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
  • CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
  • CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
  • CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
  • CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
  • CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
  • CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
  • CVE-2026-23457: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).
  • CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
  • CVE-2026-23461: Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user (bsc#1261707).
  • CVE-2026-23462: Bluetooth: HIDP: Fix possible UAF (bsc#1261710).
  • CVE-2026-23468: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (bsc#1261692).
  • CVE-2026-23472: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (bsc#1261636).
  • CVE-2026-23473: io_uring/poll: fix multishot recv missing EOF on wakeup race (bsc#1261694).
  • CVE-2026-31400: sunrpc: fix cache_request leak in cache_release (bsc#1261645).
  • CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261638).
  • CVE-2026-31403: NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (bsc#1261796).
  • CVE-2026-31404: xfs: avoid dereferencing log items after push callbacks (bsc#1261628).
  • CVE-2026-31407:…
Record
SUSE-SU-2026:21877-1
Updated
2026-11-02
OSVSUSE-SU-2026:21916-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-20585: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
  • CVE-2025-71183: btrfs: always detect conflicting inodes when logging inode refs (bsc#1257631).
  • CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
  • CVE-2026-23239: espintcp: Fix race condition in espintcp_close() (bsc#1259485).
  • CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1259484).
  • CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
  • CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
  • CVE-2026-23276: net: move dev_xmit_recursion() helpers to net/core/dev.h (bsc#1260012).
  • CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
  • CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
  • CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
  • CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
  • CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
  • CVE-2026-23346: mm/ioremap: define generic_ioremap_prot() and generic_iounmap() (bsc#1260529).
  • CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
  • CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
  • CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
  • CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
  • CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
  • CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260522).
  • CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
  • CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
  • CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
  • CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
  • CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
  • CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
  • CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
  • CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
  • CVE-2026-23457: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).
  • CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
  • CVE-2026-23461: Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user (bsc#1261707).
  • CVE-2026-23462: Bluetooth: HIDP: Fix possible UAF (bsc#1261710).
  • CVE-2026-23468: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (bsc#1261692).
  • CVE-2026-23472: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (bsc#1261636).
  • CVE-2026-23473: io_uring/poll: fix multishot recv missing EOF on wakeup race (bsc#1261694).
  • CVE-2026-31400: sunrpc: fix cache_request leak in cache_release (bsc#1261645).
  • CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261638).
  • CVE-2026-31403: NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (bsc#1261796).
  • CVE-2026-31404: xfs: avoid dereferencing log items after push callbacks (bsc#1261628).
  • CVE-2026-31407:…
Record
SUSE-SU-2026:21916-1
Updated
2026-11-02
OSVSUSE-SU-2026:21919-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
  • CVE-2025-71183: btrfs: always detect conflicting inodes when logging inode refs (bsc#1257631).
  • CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
  • CVE-2026-23239: espintcp: Fix race condition in espintcp_close() (bsc#1259485).
  • CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1259484).
  • CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
  • CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
  • CVE-2026-23276: net: move dev_xmit_recursion() helpers to net/core/dev.h (bsc#1260012).
  • CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
  • CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
  • CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
  • CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
  • CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
  • CVE-2026-23346: mm/ioremap: define generic_ioremap_prot() and generic_iounmap() (bsc#1260529).
  • CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
  • CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
  • CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
  • CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
  • CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
  • CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260522).
  • CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
  • CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
  • CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
  • CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
  • CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
  • CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
  • CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
  • CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
  • CVE-2026-23457: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).
  • CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
  • CVE-2026-23461: Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user (bsc#1261707).
  • CVE-2026-23462: Bluetooth: HIDP: Fix possible UAF (bsc#1261710).
  • CVE-2026-23468: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (bsc#1261692).
  • CVE-2026-23472: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (bsc#1261636).
  • CVE-2026-23473: io_uring/poll: fix multishot recv missing EOF on wakeup race (bsc#1261694).
  • CVE-2026-31400: sunrpc: fix cache_request leak in cache_release (bsc#1261645).
  • CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261638).
  • CVE-2026-31403: NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (bsc#1261796).
  • CVE-2026-31404: xfs: avoid dereferencing log items after push callbacks (bsc#1261628).
  • CVE-2026-31407:…
Record
SUSE-SU-2026:21919-1
Updated
2026-11-02
OSVSUSE-SU-2026:2195-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
  • CVE-2025-54518: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (bsc#1264013).
  • CVE-2026-23239: espintcp: Fix race condition in espintcp_close() (bsc#1259485).
  • CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1259484).
  • CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
  • CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260522).
  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
  • CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
  • CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
  • CVE-2026-23461: Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user (bsc#1261707).
  • CVE-2026-23462: Bluetooth: HIDP: Fix possible UAF (bsc#1261710).
  • CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261638).
  • CVE-2026-31403: NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (bsc#1261796).
  • CVE-2026-31408: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (bsc#1261797).
  • CVE-2026-31436: dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() (bsc#1262602).
  • CVE-2026-31470: virt: tdx-guest: Fix handling of host controlled 'quote' buffer length (bsc#1262665).
  • CVE-2026-31504: net: fix fanout UAF in packet_release() via NETDEV_UP race (bsc#1263085).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263093).
  • CVE-2026-31507: net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer (bsc#1263095).
  • CVE-2026-31512: Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() (bsc#1262734).
  • CVE-2026-31528: perf: Make sure to use pmu_ctx->pmu for groups (bsc#1263001).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262758).
  • CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel() (bsc#1263065).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263176).
  • CVE-2026-31588: KVM: x86: Use scratch field in MMIO fragment to hold small write values (bsc#1263165).
  • CVE-2026-31602: ALSA: ctxfi: Limit PTP to a single page (bsc#1263723).
  • CVE-2026-31607: usbip: validate number_of_packets in usbip_pack_ret_submit() (bsc#1263600).
  • CVE-2026-31622: NFC: digital: Bounds check NFC-A cascade depth in SDD response handler (bsc#1263797).
  • CVE-2026-31649: net: stmmac: fix integer underflow in chain mode (bsc#1263582).
  • CVE-2026-31656: drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (bsc#1263170).
  • CVE-2026-31662: tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG (bsc#1263131).
  • CVE-2026-31669: mptcp: fix slab-use-after-free in __inet_lookup_established (bsc#1263141).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263668).
  • CVE-2026-31694: fuse: reject oversized dirents in page cache (bsc#1263901).
  • CVE-2026-31700: net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() (bsc#1263882).
  • CVE-2026-31738: vxlan: validate ND option lengths in vxlan_na_create (bsc#1264059).
  • CVE-2026-31787: xen/privcmd: fix double free via VMA splitting (bsc#1262181).
  • CVE-2026-46331: kernel: net/sched: fix pedit partial COW leading to page cache
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1263931).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1263933).
  • CVE-2026-43038: ipv6: icmp: clear skb2->cb…
Record
SUSE-SU-2026:2195-1
Updated
2026-11-02
OSVSUSE-SU-2026:2202-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2021-47103: inet: fully convert sk->sk_rx_dst to RCU rules (bsc#1221010).
  • CVE-2023-20585: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
  • CVE-2026-23239: espintcp: Fix race condition in espintcp_close() (bsc#1259485).
  • CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1259484).
  • CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
  • CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260522).
  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
  • CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
  • CVE-2026-23462: Bluetooth: HIDP: Fix possible UAF (bsc#1261710).
  • CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261638).
  • CVE-2026-31403: NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (bsc#1261796).
  • CVE-2026-31408: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (bsc#1261797).
  • CVE-2026-31436: dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() (bsc#1262602).
  • CVE-2026-31504: net: fix fanout UAF in packet_release() via NETDEV_UP race (bsc#1263085).
  • CVE-2026-31507: net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer (bsc#1263095).
  • CVE-2026-31512: Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() (bsc#1262734).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262758).
  • CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel() (bsc#1263065).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263176).
  • CVE-2026-31588: KVM: x86: Use scratch field in MMIO fragment to hold small write values (bsc#1263165).
  • CVE-2026-31602: ALSA: ctxfi: Limit PTP to a single page (bsc#1263723).
  • CVE-2026-31607: usbip: validate number_of_packets in usbip_pack_ret_submit() (bsc#1263600).
  • CVE-2026-31649: net: stmmac: fix integer underflow in chain mode (bsc#1263582).
  • CVE-2026-31656: drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (bsc#1263170).
  • CVE-2026-31662: tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG (bsc#1263131).
  • CVE-2026-31669: mptcp: fix slab-use-after-free in __inet_lookup_established (bsc#1263141).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263668).
  • CVE-2026-31694: fuse: reject oversized dirents in page cache (bsc#1263901).
  • CVE-2026-31700: net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() (bsc#1263882).
  • CVE-2026-31738: vxlan: validate ND option lengths in vxlan_na_create (bsc#1264059).
  • CVE-2026-31787: xen/privcmd: fix double free via VMA splitting (bsc#1262181).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1263931).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1263933).
  • CVE-2026-43050: atm: lec: fix use-after-free in sock_def_readable() (bsc#1264082).
  • CVE-2026-43110: wifi: brcmfmac: validate bsscfg indices in IF events (bsc#1264482).
  • CVE-2026-43126: ALSA: mixer: oss: Add card disconnect checkpoints (bsc#1264634).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264848).
  • CVE-2026-43214: KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() (bsc#1264651).
  • CVE-2026-43329: netfilter: flowtable: strictly check for maximum number of actions (bsc#1265085).
  • CVE-2026-43334: Bluetooth: SMP: force responder MITM requirements before building the pairing response (bsc#1265090).
  • CVE-2026-43365: xfs: fix undersized l_iclog_roundoff…
Record
SUSE-SU-2026:2202-1
Updated
2026-11-02
OSVSUSE-SU-2026:2215-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2022-49979: net: fix refcount bug in sk_psock_get (bsc#1245109).
  • CVE-2023-20585: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
  • CVE-2026-23239: espintcp: Fix race condition in espintcp_close() (bsc#1259485).
  • CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1259484).
  • CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
  • CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260522).
  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
  • CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
  • CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
  • CVE-2026-23462: Bluetooth: HIDP: Fix possible UAF (bsc#1261710).
  • CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261638).
  • CVE-2026-31403: NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (bsc#1261796).
  • CVE-2026-31408: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (bsc#1261797).
  • CVE-2026-31436: dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() (bsc#1262602).
  • CVE-2026-31470: virt: tdx-guest: Fix handling of host controlled 'quote' buffer length (bsc#1262665).
  • CVE-2026-31504: net: fix fanout UAF in packet_release() via NETDEV_UP race (bsc#1263085).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263093).
  • CVE-2026-31507: net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer (bsc#1263095).
  • CVE-2026-31512: Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() (bsc#1262734).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262758).
  • CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel() (bsc#1263065).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263176).
  • CVE-2026-31588: KVM: x86: Use scratch field in MMIO fragment to hold small write values (bsc#1263165).
  • CVE-2026-31602: ALSA: ctxfi: Limit PTP to a single page (bsc#1263723).
  • CVE-2026-31607: usbip: validate number_of_packets in usbip_pack_ret_submit() (bsc#1263600).
  • CVE-2026-31649: net: stmmac: fix integer underflow in chain mode (bsc#1263582).
  • CVE-2026-31656: drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (bsc#1263170).
  • CVE-2026-31662: tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG (bsc#1263131).
  • CVE-2026-31669: mptcp: fix slab-use-after-free in __inet_lookup_established (bsc#1263141).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263668).
  • CVE-2026-31694: fuse: reject oversized dirents in page cache (bsc#1263901).
  • CVE-2026-31700: net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() (bsc#1263882).
  • CVE-2026-31738: vxlan: validate ND option lengths in vxlan_na_create (bsc#1264059).
  • CVE-2026-31787: xen/privcmd: fix double free via VMA splitting (bsc#1262181).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1263931).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1263933).
  • CVE-2026-43050: atm: lec: fix use-after-free in sock_def_readable() (bsc#1264082).
  • CVE-2026-43110: wifi: brcmfmac: validate bsscfg indices in IF events (bsc#1264482).
  • CVE-2026-43126: ALSA: mixer: oss: Add card disconnect checkpoints (bsc#1264634).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264848).
  • CVE-2026-43214: KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2()…
Record
SUSE-SU-2026:2215-1
Updated
2026-11-02
OSVSUSE-SU-2026:2216-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2022-49979: net: fix refcount bug in sk_psock_get (bsc#1245109).
  • CVE-2023-20585: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
  • CVE-2026-23239: espintcp: Fix race condition in espintcp_close() (bsc#1259485).
  • CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1259484).
  • CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
  • CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260522).
  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
  • CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
  • CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
  • CVE-2026-23462: Bluetooth: HIDP: Fix possible UAF (bsc#1261710).
  • CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261638).
  • CVE-2026-31403: NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (bsc#1261796).
  • CVE-2026-31408: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (bsc#1261797).
  • CVE-2026-31436: dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() (bsc#1262602).
  • CVE-2026-31470: virt: tdx-guest: Fix handling of host controlled 'quote' buffer length (bsc#1262665).
  • CVE-2026-31504: net: fix fanout UAF in packet_release() via NETDEV_UP race (bsc#1263085).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263093).
  • CVE-2026-31507: net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer (bsc#1263095).
  • CVE-2026-31512: Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() (bsc#1262734).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262758).
  • CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel() (bsc#1263065).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263176).
  • CVE-2026-31588: KVM: x86: Use scratch field in MMIO fragment to hold small write values (bsc#1263165).
  • CVE-2026-31602: ALSA: ctxfi: Limit PTP to a single page (bsc#1263723).
  • CVE-2026-31607: usbip: validate number_of_packets in usbip_pack_ret_submit() (bsc#1263600).
  • CVE-2026-31649: net: stmmac: fix integer underflow in chain mode (bsc#1263582).
  • CVE-2026-31656: drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (bsc#1263170).
  • CVE-2026-31662: tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG (bsc#1263131).
  • CVE-2026-31669: mptcp: fix slab-use-after-free in __inet_lookup_established (bsc#1263141).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263668).
  • CVE-2026-31694: fuse: reject oversized dirents in page cache (bsc#1263901).
  • CVE-2026-31700: net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() (bsc#1263882).
  • CVE-2026-31738: vxlan: validate ND option lengths in vxlan_na_create (bsc#1264059).
  • CVE-2026-31787: xen/privcmd: fix double free via VMA splitting (bsc#1262181).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1263931).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1263933).
  • CVE-2026-43050: atm: lec: fix use-after-free in sock_def_readable() (bsc#1264082).
  • CVE-2026-43110: wifi: brcmfmac: validate bsscfg indices in IF events (bsc#1264482).
  • CVE-2026-43126: ALSA: mixer: oss: Add card disconnect checkpoints (bsc#1264634).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264848).
  • CVE-2026-43214: KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2()…
Record
SUSE-SU-2026:2216-1
Updated
2026-11-02
OSVSUSE-SU-2026:2217-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-20585: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
  • CVE-2025-68310: s390/pci: Use pci_uevent_ers() in PCI recovery (bsc#1255160).
  • CVE-2025-71183: btrfs: always detect conflicting inodes when logging inode refs (bsc#1257631).
  • CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
  • CVE-2026-23239: espintcp: Fix race condition in espintcp_close() (bsc#1259485).
  • CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1259484).
  • CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
  • CVE-2026-23262: gve: Fix stats report corruption on queue count change (bsc#1259870).
  • CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
  • CVE-2026-23276: net: move dev_xmit_recursion() helpers to net/core/dev.h (bsc#1260012).
  • CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
  • CVE-2026-23304: ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() (bsc#1260544).
  • CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
  • CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
  • CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
  • CVE-2026-23335: RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() (bsc#1260550).
  • CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
  • CVE-2026-23343: xdp: produce a warning when calculated tailroom is negative (bsc#1260527).
  • CVE-2026-23346: mm/ioremap: define generic_ioremap_prot() and generic_iounmap() (bsc#1260529).
  • CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
  • CVE-2026-23354: x86/fred: Correct speculative safety in fred_extint() (bsc#1260801).
  • CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
  • CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
  • CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
  • CVE-2026-23383: bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing (bsc#1260497).
  • CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
  • CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260522).
  • CVE-2026-23395: Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ (bsc#1260580).
  • CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
  • CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
  • CVE-2026-23412: netfilter: bpf: defer hook memory release until rcu readers are done (bsc#1261412).
  • CVE-2026-23419: net/rds: Fix circular locking dependency in rds_tcp_tune (bsc#1261507).
  • CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
  • CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
  • CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
  • CVE-2026-23445: igc: fix page fault in XDP TX timestamps handling (bsc#1261702).
  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
  • CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
  • CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
  • CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
  • CVE-2026-23457: netfilter: nf_conntrack_sip: fix…
Record
SUSE-SU-2026:2217-1
Updated
2026-11-02
OSVSUSE-SU-2026:2238-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-20585: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
  • CVE-2025-54518: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (bsc#1264013).
  • CVE-2025-68310: s390/pci: Use pci_uevent_ers() in PCI recovery (bsc#1255160).
  • CVE-2025-71183: btrfs: always detect conflicting inodes when logging inode refs (bsc#1257631).
  • CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
  • CVE-2026-23239: espintcp: Fix race condition in espintcp_close() (bsc#1259485).
  • CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1259484).
  • CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
  • CVE-2026-23262: gve: Fix stats report corruption on queue count change (bsc#1259870).
  • CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
  • CVE-2026-23276: net: move dev_xmit_recursion() helpers to net/core/dev.h (bsc#1260012).
  • CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
  • CVE-2026-23304: ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() (bsc#1260544).
  • CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
  • CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
  • CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
  • CVE-2026-23335: RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() (bsc#1260550).
  • CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
  • CVE-2026-23343: xdp: produce a warning when calculated tailroom is negative (bsc#1260527).
  • CVE-2026-23346: mm/ioremap: define generic_ioremap_prot() and generic_iounmap() (bsc#1260529).
  • CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
  • CVE-2026-23354: x86/fred: Correct speculative safety in fred_extint() (bsc#1260801).
  • CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
  • CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
  • CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
  • CVE-2026-23383: bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing (bsc#1260497).
  • CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
  • CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260522).
  • CVE-2026-23395: Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ (bsc#1260580).
  • CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
  • CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
  • CVE-2026-23412: netfilter: bpf: defer hook memory release until rcu readers are done (bsc#1261412).
  • CVE-2026-23419: net/rds: Fix circular locking dependency in rds_tcp_tune (bsc#1261507).
  • CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
  • CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
  • CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
  • CVE-2026-23445: igc: fix page fault in XDP TX timestamps handling (bsc#1261702).
  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
  • CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
  • CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
  • CVE-2026-23456: netfilter: nf_conntrack_h323:…
Record
SUSE-SU-2026:2238-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
bpftool
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.134.1.el8_10
4.18.0-553.134.1.el8_10
kernel
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.134.1.el8_10
4.18.0-553.134.1.el8_10
kernel-abi-stablelists
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.134.1.el8_10
4.18.0-553.134.1.el8_10
kernel-core
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.134.1.el8_10
4.18.0-553.134.1.el8_10
kernel-cross-headers
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.134.1.el8_10
4.18.0-553.134.1.el8_10
kernel-debug
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.134.1.el8_10
4.18.0-553.134.1.el8_10
kernel-debug-core
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.134.1.el8_10
4.18.0-553.134.1.el8_10
kernel-debug-devel
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.134.1.el8_10
4.18.0-553.134.1.el8_10
kernel-debug-modules
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.134.1.el8_10
4.18.0-553.134.1.el8_10
kernel-debug-modules-extra
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.134.1.el8_10
4.18.0-553.134.1.el8_10
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-devel
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.134.1.el8_10
4.18.0-553.134.1.el8_10
kernel-doc
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.134.1.el8_10
4.18.0-553.134.1.el8_10
kernel-headers
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.134.1.el8_10
4.18.0-553.134.1.el8_10
kernel-modules
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.134.1.el8_10
4.18.0-553.134.1.el8_10
kernel-modules-extra
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.134.1.el8_10
4.18.0-553.134.1.el8_10
kernel-tools
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.134.1.el8_10
4.18.0-553.134.1.el8_10
kernel-tools-libs
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.134.1.el8_10
4.18.0-553.134.1.el8_10
kernel-tools-libs-devel
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.134.1.el8_10
4.18.0-553.134.1.el8_10
kernel-zfcpdump
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.134.1.el8_10
4.18.0-553.134.1.el8_10
kernel-zfcpdump-core
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.134.1.el8_10
4.18.0-553.134.1.el8_10
kernel-zfcpdump-devel
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.134.1.el8_10
4.18.0-553.134.1.el8_10
kernel-zfcpdump-modules
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.134.1.el8_10
4.18.0-553.134.1.el8_10
kernel-zfcpdump-modules-extra
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.134.1.el8_10
4.18.0-553.134.1.el8_10
perf
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.134.1.el8_10
4.18.0-553.134.1.el8_10
python3-perf
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.134.1.el8_10
4.18.0-553.134.1.el8_10
kernel-rt
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.134.1.rt7.475.el8_10
4.18.0-553.134.1.rt7.475.el8_10
kernel-rt-core
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.134.1.rt7.475.el8_10
4.18.0-553.134.1.rt7.475.el8_10
kernel-rt-debug
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.134.1.rt7.475.el8_10
4.18.0-553.134.1.rt7.475.el8_10
kernel-rt-debug-core
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.134.1.rt7.475.el8_10
4.18.0-553.134.1.rt7.475.el8_10
kernel-rt-debug-devel
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.134.1.rt7.475.el8_10
4.18.0-553.134.1.rt7.475.el8_10
kernel-rt-debug-modules
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.134.1.rt7.475.el8_10
4.18.0-553.134.1.rt7.475.el8_10
kernel-rt-debug-modules-extra
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.134.1.rt7.475.el8_10
4.18.0-553.134.1.rt7.475.el8_10
kernel-rt-devel
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.134.1.rt7.475.el8_10
4.18.0-553.134.1.rt7.475.el8_10
kernel-rt-modules
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.134.1.rt7.475.el8_10
4.18.0-553.134.1.rt7.475.el8_10
kernel-rt-modules-extra
AlmaLinux:8
From an advisory covering 8 CVEs
 before 4.18.0-553.134.1.rt7.475.el8_10
4.18.0-553.134.1.rt7.475.el8_10
kernel
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-64k
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-64k-core
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-64k-debug
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-64k-debug-core
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-64k-debug-devel
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-64k-debug-devel-matched
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-64k-debug-modules
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-64k-debug-modules-core
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-64k-debug-modules-extra
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-64k-devel
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-64k-devel-matched
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-64k-modules
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-64k-modules-core
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-64k-modules-extra
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-abi-stablelists
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-core
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-cross-headers
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-debug
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-debug-core
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-debug-devel
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-debug-devel-matched
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-debug-modules
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-debug-modules-core
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-debug-modules-extra
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel-debug-uki-virt
AlmaLinux:10
From an advisory covering 15 CVEs
 before 6.12.0-211.26.1.el10_2
6.12.0-211.26.1.el10_2
kernel
Azure Linux:3
 before 6.6.137.1-1
6.6.137.1-1
linux-lts
Alpaquita:23
 6.1.168-r0 up to 6.1.170-r0
6.1.170-r0
linux-lts
Alpaquita:25
 6.12.81-r0 up to 6.12.85-r0
6.12.85-r0
linux-lts
Alpaquita:stream
 6.12.92-r1 up to 6.18.35-r1
6.18.35-r1
kernel
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-core
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-debug
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-debug-core
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-debug-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-debug-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-debug-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-debug-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-debug-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-debug-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-debug-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-64k-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-abi-stablelists
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-core
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-cross-headers
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-debug
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-debug-core
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-debug-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-debug-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-debug-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-debug-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-debug-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-debug-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-debug-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-debug-uki-virt
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-debug-uki-virt-addons
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-doc
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-headers
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-ipaclones-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-core
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-debug
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-debug-core
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-debug-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-debug-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-debug-kvm
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-debug-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-debug-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-debug-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-debug-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-debug-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-kvm
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
kernel-rt-64k-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 94 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els4
5.14.0-570.62.1.el9_6.tuxcare.5.els4
Kernel
Linux
 5.12.0 up to 5.15.203, 5.16.0 up to 6.1.169, 6.2.0 up to 6.6.135, 6.7.0 up to 6.12.82, 6.13.0 up to 6.18.23, 6.19.0 up to 6.19.13
5.15.2036.1.1696.6.1356.12.826.18.236.19.13
linux
Debian:12
 before 6.1.170-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 43 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1
6.1.170-1
linux
Debian:13
 before 6.12.85-1, plus listed versions
6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-1
Show 12 moreShow less
6.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-1~bpo12+1
6.12.85-1
linux
Debian:14
 before 6.19.13-1, plus listed versions
6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1
Show 45 moreShow less
6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1
6.19.13-1
kernel
Mageia:9
From an advisory covering 189 CVEs
 before 6.6.137-1.mga9
6.6.137-1.mga9
kmod-virtualbox
Mageia:9
From an advisory covering 189 CVEs
 before 7.1.18-18.mga9
7.1.18-18.mga9
kmod-xtables-addons
Mageia:9
From an advisory covering 189 CVEs
 before 3.24-90.mga9
3.24-90.mga9
kernel-linus
Mageia:9
From an advisory covering 189 CVEs
 before 6.6.137-1.mga9
6.6.137-1.mga9
bpftool
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
bpftool-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
kernel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
kernel-abi-stablelists
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
kernel-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
kernel-debug
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
kernel-debug-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
kernel-debug-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
kernel-debug-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
kernel-debug-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
kernel-debug-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
kernel-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
kernel-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
kernel-doc
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
kernel-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
kernel-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
kernel-tools
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
kernel-tools-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
kernel-tools-libs
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
kernel-zfcpdump
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
kernel-zfcpdump-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
kernel-zfcpdump-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
kernel-zfcpdump-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
kernel-zfcpdump-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
perf
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
perf-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
python3-perf
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
python3-perf-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
bpftool-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
kernel-debug-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
kernel-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:8::crb
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:8::crb
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::crb
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
kernel-tools-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
kernel-tools-libs-devel
Red Hat:enterprise_linux:8::crb
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
perf-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
python3-perf-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
kernel-rt
Red Hat:enterprise_linux:8::nfv
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.rt7.475.el8_10
0:4.18.0-553.134.1.rt7.475.el8_10
kernel-rt-core
Red Hat:enterprise_linux:8::nfv
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.rt7.475.el8_10
0:4.18.0-553.134.1.rt7.475.el8_10
kernel-rt-debug
Red Hat:enterprise_linux:8::nfv
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.rt7.475.el8_10
0:4.18.0-553.134.1.rt7.475.el8_10
kernel-rt-debug-core
Red Hat:enterprise_linux:8::nfv
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.rt7.475.el8_10
0:4.18.0-553.134.1.rt7.475.el8_10
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:8::nfv
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.rt7.475.el8_10
0:4.18.0-553.134.1.rt7.475.el8_10
kernel-rt-debug-devel
Red Hat:enterprise_linux:8::nfv
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.rt7.475.el8_10
0:4.18.0-553.134.1.rt7.475.el8_10
kernel-rt-debug-kvm
Red Hat:enterprise_linux:8::nfv
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.rt7.475.el8_10
0:4.18.0-553.134.1.rt7.475.el8_10
kernel-rt-debug-modules
Red Hat:enterprise_linux:8::nfv
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.rt7.475.el8_10
0:4.18.0-553.134.1.rt7.475.el8_10
kernel-rt-debug-modules-extra
Red Hat:enterprise_linux:8::nfv
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.rt7.475.el8_10
0:4.18.0-553.134.1.rt7.475.el8_10
kernel-rt-debuginfo
Red Hat:enterprise_linux:8::nfv
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.rt7.475.el8_10
0:4.18.0-553.134.1.rt7.475.el8_10
kernel-rt-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::nfv
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.rt7.475.el8_10
0:4.18.0-553.134.1.rt7.475.el8_10
kernel-rt-devel
Red Hat:enterprise_linux:8::nfv
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.rt7.475.el8_10
0:4.18.0-553.134.1.rt7.475.el8_10
kernel-rt-kvm
Red Hat:enterprise_linux:8::nfv
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.rt7.475.el8_10
0:4.18.0-553.134.1.rt7.475.el8_10
kernel-rt-modules
Red Hat:enterprise_linux:8::nfv
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.rt7.475.el8_10
0:4.18.0-553.134.1.rt7.475.el8_10
kernel-rt-modules-extra
Red Hat:enterprise_linux:8::nfv
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.rt7.475.el8_10
0:4.18.0-553.134.1.rt7.475.el8_10
kernel-rt
Red Hat:enterprise_linux:8::realtime
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.rt7.475.el8_10
0:4.18.0-553.134.1.rt7.475.el8_10
kernel-rt-core
Red Hat:enterprise_linux:8::realtime
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.rt7.475.el8_10
0:4.18.0-553.134.1.rt7.475.el8_10
kernel-rt-debug
Red Hat:enterprise_linux:8::realtime
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.rt7.475.el8_10
0:4.18.0-553.134.1.rt7.475.el8_10
kernel
Rocky Linux:8
From an advisory covering 8 CVEs
 before 0:4.18.0-553.134.1.el8_10
0:4.18.0-553.134.1.el8_10
kernel
Rocky Linux:10
From an advisory covering 15 CVEs
 before 0:6.12.0-211.26.1.el10_2
0:6.12.0-211.26.1.el10_2
kernel
Rocky Linux:9
From an advisory covering 17 CVEs
 before 0:5.14.0-687.17.1.el9_8
0:5.14.0-687.17.1.el9_8
linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
rootio-linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
linux
Root:Debian:13
 before 6.12.115-2.aikido.164
6.12.115-2.aikido.164
rootio-linux
Root:Debian:13
 before 6.12.115-2.aikido.164
6.12.115-2.aikido.164
linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
rootio-linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
rootio-linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
kernel-obs-build
SUSE:Linux Micro Extras 6.2
From an advisory covering 206 CVEs
 before 6.12.0-160000.33.1
6.12.0-160000.33.1
kernel-syms
SUSE:Linux Micro Extras 6.2
From an advisory covering 206 CVEs
 before 6.12.0-160000.33.1
6.12.0-160000.33.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 69 CVEs
 before 6.4.0-150600.23.112.1
6.4.0-150600.23.112.1
kernel-livepatch-SLE15-SP6_Update_26
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 69 CVEs
 before 1-150600.13.3.1
1-150600.13.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP6
From an advisory covering 69 CVEs
 before 6.4.0-150600.23.112.1
6.4.0-150600.23.112.1
kernel-64kb
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 69 CVEs
 before 6.4.0-150600.23.112.1
6.4.0-150600.23.112.1
kernel-default
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 69 CVEs
 before 6.4.0-150600.23.112.1
6.4.0-150600.23.112.1
kernel-default-base
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 69 CVEs
 before 6.4.0-150600.23.112.1.150600.12.52.1
6.4.0-150600.23.112.1.150600.12.52.1
kernel-docs
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 69 CVEs
 before 6.4.0-150600.23.112.1
6.4.0-150600.23.112.1
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 69 CVEs
 before 6.4.0-150600.23.112.1
6.4.0-150600.23.112.1
kernel-source
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 69 CVEs
 before 6.4.0-150600.23.112.1
6.4.0-150600.23.112.1
kernel-syms
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 69 CVEs
 before 6.4.0-150600.23.112.1
6.4.0-150600.23.112.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 69 CVEs
 before 6.4.0-150600.23.112.1
6.4.0-150600.23.112.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 69 CVEs
 before 6.4.0-150600.23.112.1
6.4.0-150600.23.112.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 69 CVEs
 before 6.4.0-150600.23.112.1.150600.12.52.1
6.4.0-150600.23.112.1.150600.12.52.1
kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 69 CVEs
 before 6.4.0-150600.23.112.1
6.4.0-150600.23.112.1
kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 69 CVEs
 before 6.4.0-150600.23.112.1
6.4.0-150600.23.112.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 69 CVEs
 before 6.4.0-150600.23.112.1
6.4.0-150600.23.112.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 69 CVEs
 before 6.4.0-150600.23.112.1
6.4.0-150600.23.112.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 204 CVEs
 before 6.4.0-150700.53.55.1
6.4.0-150700.53.55.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 204 CVEs
 before 6.4.0-150700.53.55.1
6.4.0-150700.53.55.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 204 CVEs
 before 6.4.0-150700.53.55.1.150700.17.33.1
6.4.0-150700.53.55.1.150700.17.33.1
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 204 CVEs
 before 6.4.0-150700.53.55.1
6.4.0-150700.53.55.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 204 CVEs
 before 6.4.0-150700.53.55.1
6.4.0-150700.53.55.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 204 CVEs
 before 6.4.0-150700.53.55.1
6.4.0-150700.53.55.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 204 CVEs
 before 6.4.0-150700.53.55.1
6.4.0-150700.53.55.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 204 CVEs
 before 6.4.0-150700.53.55.1
6.4.0-150700.53.55.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 204 CVEs
 before 6.4.0-150700.53.55.1
6.4.0-150700.53.55.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP7
From an advisory covering 204 CVEs
 before 6.4.0-150700.53.55.1
6.4.0-150700.53.55.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 204 CVEs
 before 6.4.0-150700.53.55.1
6.4.0-150700.53.55.1
kernel-livepatch-SLE15-SP7_Update_15
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 204 CVEs
 before 1-150700.15.3.1
1-150700.15.3.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 204 CVEs
 before 6.4.0-150700.53.55.1
6.4.0-150700.53.55.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP7
From an advisory covering 204 CVEs
 before 6.4.0-150700.53.55.1
6.4.0-150700.53.55.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP7
From an advisory covering 204 CVEs
 before 6.4.0-150700.53.55.1
6.4.0-150700.53.55.1
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1111.118~20.04.1, plus listed versions
5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1
Show 45 moreShow less
5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1
5.15.0-1111.118~20.04.1
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
linux-azure-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
 None known
linux-azure-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1116.125~20.04.1, plus listed versions
5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1
Show 45 moreShow less
5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1
5.15.0-1116.125~20.04.1
linux-azure-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
 None known
linux-azure-fde
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
 None known
linux-azure-fde-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1116.125~20.04.1, plus listed versions
5.15.0-1019.24~20.04.1.15.15.0-1020.25~20.04.1.15.15.0-1021.26~20.04.1.15.15.0-1029.36~20.04.1.15.15.0-1030.37~20.04.1.1
Show 45 moreShow less
5.15.0-1031.38~20.04.1.15.15.0-1033.40~20.04.1.15.15.0-1034.41~20.04.1.25.15.0-1035.42~20.04.1.15.15.0-1036.43~20.04.1.15.15.0-1037.44~20.04.1.15.15.0-1038.45~20.04.1.15.15.0-1039.46~20.04.1.15.15.0-1040.47~20.04.1.15.15.0-1041.48~20.04.1.15.15.0-1042.49~20.04.1.15.15.0-1043.50~20.04.1.15.15.0-1046.53~20.04.1.15.15.0-1047.54~20.04.1.15.15.0-1049.56~20.04.1.15.15.0-1050.57~20.04.1.15.15.0-1051.59~20.04.1.15.15.0-1052.60~20.04.1.15.15.0-1053.61~20.04.1.15.15.0-1054.62~20.04.1.15.15.0-1056.64~20.04.1.15.15.0-1057.65~20.04.1.15.15.0-1058.66~20.04.2.15.15.0-1059.67~20.04.1.15.15.0-1060.69~20.04.1.15.15.0-1061.70~20.04.1.15.15.0-1063.72~20.04.1.15.15.0-1064.73~20.04.1.15.15.0-1065.74~20.04.1.15.15.0-1067.76~20.04.1.15.15.0-1068.77~20.04.1.15.15.0-1070.79~20.04.1.15.15.0-1071.80~20.04.1.15.15.0-1072.81~20.04.1.15.15.0-1073.82~20.04.1.15.15.0-1074.83~20.04.1.15.15.0-1076.85~20.04.1.15.15.0-1078.87~20.04.1.15.15.0-1081.90~20.04.1.15.15.0-1082.91~20.04.1.15.15.0-1086.95~20.04.1.15.15.0-1087.96~20.04.1.15.15.0-1088.97~20.04.1.15.15.0-1089.98~20.04.1.15.15.0-1091.100~20.04.1.1
5.15.0-1116.125~20.04.1
linux-gcp-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1
Show 7 moreShow less
5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3
 None known
linux-gcp-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1
Show 8 moreShow less
5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1
 None known
linux-gcp-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1111.121~20.04.1, plus listed versions
5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2
Show 45 moreShow less
5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.15.15.0-1065.73~20.04.15.15.0-1066.74~20.04.15.15.0-1067.75~20.04.15.15.0-1068.76~20.04.15.15.0-1069.77~20.04.15.15.0-1070.78~20.04.15.15.0-1071.79~20.04.15.15.0-1072.80~20.04.15.15.0-1073.81~20.04.15.15.0-1074.83~20.04.1
5.15.0-1111.121~20.04.1
linux-gcp-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41
 None known
linux-gke
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
 None known
linux-gke-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1
Show 13 moreShow less
5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1
 None known
linux-gkeop
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13
Show 45 moreShow less
5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77
 None known
linux-gkeop-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2
Show 40 moreShow less
5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1
 None known
linux-hwe-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1
Show 7 moreShow less
5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1
 None known
linux-hwe-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1
Show 11 moreShow less
5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1
 None known
linux-hwe-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-185.195~20.04.1, plus listed versions
5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
Show 45 moreShow less
5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1
5.15.0-185.195~20.04.1
linux-hwe-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1
Show 16 moreShow less
5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1
 None known
linux-ibm-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1105.109~20.04.1, plus listed versions
5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1
Show 45 moreShow less
5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.15.15.0-1057.60~20.04.15.15.0-1058.61~20.04.15.15.0-1059.62~20.04.15.15.0-1060.63~20.04.15.15.0-1061.64~20.04.15.15.0-1062.65~20.04.15.15.0-1063.66~20.04.15.15.0-1064.67~20.04.15.15.0-1065.68~20.04.15.15.0-1066.69~20.04.15.15.0-1067.70~20.04.15.15.0-1068.71~20.04.15.15.0-1069.72~20.04.15.15.0-1074.77~20.04.15.15.0-1075.78~20.04.15.15.0-1076.79~20.04.15.15.0-1078.81~20.04.15.15.0-1079.82~20.04.15.15.0-1080.83~20.04.15.15.0-1081.84~20.04.15.15.0-1083.86~20.04.15.15.0-1085.88~20.04.15.15.0-1086.89~20.04.15.15.0-1087.90~20.04.15.15.0-1089.92~20.04.15.15.0-1090.93~20.04.15.15.0-1091.94~20.04.15.15.0-1092.95~20.04.15.15.0-1093.96~20.04.15.15.0-1094.97~20.04.1
5.15.0-1105.109~20.04.1
linux-intel-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19
 None known
linux-intel-iotg-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1106.112~20.04.1, plus listed versions
5.15.0-1003.5~20.04.15.15.0-1008.11~20.04.15.15.0-1010.14~20.04.15.15.0-1015.20~20.04.25.15.0-1016.21~20.04.1
Show 45 moreShow less
5.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1021.26~20.04.15.15.0-1023.28~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1030.35~20.04.15.15.0-1031.36~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1040.46~20.04.15.15.0-1043.49~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1060.66~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.25.15.0-1074.80~20.04.15.15.0-1077.83~20.04.15.15.0-1078.84~20.04.15.15.0-1079.85~20.04.15.15.0-1083.89~20.04.15.15.0-1084.90~20.04.15.15.0-1085.91~20.04.15.15.0-1086.92~20.04.1
5.15.0-1106.112~20.04.1
linux-lowlatency-hwe-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-183.193~20.04.1, plus listed versions
5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
Show 45 moreShow less
5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.88~20.04.15.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.95~20.04.15.15.0-87.96~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-110.120~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1
5.15.0-183.193~20.04.1
linux-nvidia-tegra-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1063.63~20.04.1, plus listed versions
5.15.0-1009.9~20.04.15.15.0-1010.10~20.04.15.15.0-1012.12~20.04.15.15.0-1014.14~20.04.15.15.0-1015.15~20.04.1
Show 30 moreShow less
5.15.0-1016.16~20.04.15.15.0-1017.17~20.04.15.15.0-1018.18~20.04.15.15.0-1019.19~20.04.15.15.0-1020.20~20.04.15.15.0-1022.22~20.04.15.15.0-1025.25~20.04.15.15.0-1027.27~20.04.15.15.0-1030.30~20.04.15.15.0-1032.32~20.04.15.15.0-1039.39~20.04.15.15.0-1040.40~20.04.15.15.0-1041.41~20.04.15.15.0-1042.42~20.04.15.15.0-1043.43~20.04.15.15.0-1044.44~20.04.15.15.0-1045.45~20.04.15.15.0-1046.46~20.04.15.15.0-1047.47~20.04.15.15.0-1048.48~20.04.15.15.0-1049.49~20.04.15.15.0-1050.50~20.04.15.15.0-1051.51~20.04.15.15.0-1052.52~20.04.25.15.0-1053.53~20.04.15.15.0-1055.55~20.04.15.15.0-1057.57~20.04.15.15.0-1058.58~20.04.15.15.0-1060.60~20.04.15.15.0-1061.61~20.04.1
5.15.0-1063.63~20.04.1
linux-oem-5.10
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17
Show 21 moreShow less
5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61
 None known
linux-oem-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21
Show 7 moreShow less
5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36
 None known
linux-oem-5.14
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10
Show 30 moreShow less
5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67
 None known
linux-oem-5.6
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13
Show 24 moreShow less
5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60
 None known
linux-oracle-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-oracle-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1
Show 7 moreShow less
5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1
 None known
linux-oracle-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1108.114~20.04.1, plus listed versions
5.15.0-1007.9~20.04.15.15.0-1013.17~20.04.15.15.0-1016.20~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.1
Show 45 moreShow less
5.15.0-1019.24~20.04.15.15.0-1021.27~20.04.15.15.0-1022.28~20.04.15.15.0-1025.31~20.04.25.15.0-1027.33~20.04.15.15.0-1029.35~20.04.15.15.0-1030.36~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1041.47~20.04.15.15.0-1042.48~20.04.15.15.0-1044.50~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1047.53~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1053.59~20.04.15.15.0-1054.60~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1074.80~20.04.1
5.15.0-1108.114~20.04.1
linux-oracle-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1
 None known
linux-raspi2
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
 None known
linux-riscv
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34
Show 7 moreShow less
5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45
 None known
linux-riscv-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1
Show 8 moreShow less
5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35
 None known
linux-riscv-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1105.109~20.04.1, plus listed versions
5.15.0-1015.17~20.04.15.15.0-1017.19~20.04.15.15.0-1018.21~20.04.15.15.0-1019.22~20.04.15.15.0-1022.26~20.04.1
Show 45 moreShow less
5.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1029.33~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1032.36~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.25.15.0-1037.41~20.04.25.15.0-1038.42~20.04.25.15.0-1039.43~20.04.25.15.0-1040.44~20.04.35.15.0-1041.45~20.04.15.15.0-1043.47~20.04.15.15.0-1044.48~20.04.15.15.0-1045.49~20.04.15.15.0-1046.50~20.04.15.15.0-1047.51~20.04.15.15.0-1048.52~20.04.15.15.0-1049.53~20.04.25.15.0-1050.54~20.04.15.15.0-1051.55~20.04.15.15.0-1052.56~20.04.15.15.0-1053.57~20.04.15.15.0-1056.60~20.04.15.15.0-1057.61~20.04.15.15.0-1058.62~20.04.15.15.0-1059.63~20.04.15.15.0-1060.64~20.04.15.15.0-1061.65~20.04.15.15.0-1062.66~20.04.15.15.0-1063.67~20.04.15.15.0-1064.68~20.04.15.15.0-1065.69~20.04.15.15.0-1066.70~20.04.15.15.0-1067.71~20.04.15.15.0-1068.72~20.04.15.15.0-1069.73~20.04.15.15.0-1070.74~20.04.15.15.0-1071.75~20.04.15.15.0-1072.76~20.04.1
5.15.0-1105.109~20.04.1
linux-riscv-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1
Show 5 moreShow less
5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1
 None known
linux
Ubuntu:22.04:LTS
 before 5.15.0-185.195, plus listed versions
5.13.0-19.195.15.0-17.175.15.0-18.185.15.0-22.225.15.0-23.23
Show 45 moreShow less
5.15.0-25.255.15.0-27.285.15.0-30.315.15.0-33.345.15.0-35.365.15.0-37.395.15.0-39.425.15.0-40.435.15.0-41.445.15.0-43.465.15.0-46.495.15.0-47.515.15.0-48.545.15.0-50.565.15.0-52.585.15.0-53.595.15.0-56.625.15.0-57.635.15.0-58.645.15.0-60.665.15.0-67.745.15.0-69.765.15.0-70.775.15.0-71.785.15.0-72.795.15.0-73.805.15.0-75.825.15.0-76.835.15.0-78.855.15.0-79.865.15.0-82.915.15.0-83.925.15.0-84.935.15.0-86.965.15.0-87.975.15.0-88.985.15.0-89.995.15.0-91.1015.15.0-92.1025.15.0-94.1045.15.0-97.1075.15.0-100.1105.15.0-101.1115.15.0-102.1125.15.0-105.115
5.15.0-185.195
linux-allwinner-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1
 None known
linux-aws
Ubuntu:22.04:LTS
 before 5.15.0-1111.118, plus listed versions
5.13.0-1005.65.15.0-1002.45.15.0-1003.55.15.0-1004.65.15.0-1005.7
Show 45 moreShow less
5.15.0-1008.105.15.0-1009.115.15.0-1011.145.15.0-1013.175.15.0-1014.185.15.0-1015.195.15.0-1017.215.15.0-1019.235.15.0-1020.245.15.0-1021.255.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.325.15.0-1030.345.15.0-1031.355.15.0-1033.375.15.0-1034.385.15.0-1035.395.15.0-1036.405.15.0-1037.415.15.0-1038.435.15.0-1039.445.15.0-1040.455.15.0-1042.475.15.0-1043.485.15.0-1044.495.15.0-1045.505.15.0-1047.525.15.0-1048.535.15.0-1049.545.15.0-1050.555.15.0-1051.565.15.0-1052.575.15.0-1053.585.15.0-1055.605.15.0-1056.615.15.0-1057.635.15.0-1060.665.15.0-1061.675.15.0-1062.685.15.0-1063.695.15.0-1064.705.15.0-1065.71
5.15.0-1111.118
linux-aws-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1
Show 5 moreShow less
5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1
 None known

History

History
RecordedChangedSources
affectedOSV
affectedOSV
affectedOSV
affectedOSV
affected, aliases, referencesOSV
affected, aliases, referencesOSV
factsOSV
affectedOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-31669 is a critical vulnerability (CVSS 9.8) in Linux, published April 24, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.47%, the 40th percentile. Fixed in kernel 6.6.137.1-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 1,327 package rows, 406 versions, 2,528 references and the rest of 19 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 26 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open