CVE-2026-23270

net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks

As Paolo said earlier [1]:

"Since the blamed commit below, classify can return TC_ACT_CONSUMED while the current skb being held by the defragmentation engine. As reported by GangMin Kim, if such packet is that may cause a UaF when the defrag engine later on tries to tuch again such packet."

act_ct was never meant to be used in the egress path, however some users are attaching it to egress today [2]. Attempting to reach a middle ground, we noticed that, while most qdiscs are not handling TC_ACT_CONSUMED, clsact/ingress qdiscs are. With that in mind, we address the issue by only allowing act_ct to bind to clsact/ingress qdiscs and shared blocks. That way it's still possible to attach act_ct to egress (albeit only with clsact).

[1] https://lore.kernel.org/netdev/674b8cbfc385c6f37fb29a1de08d8fe5c2b0fbee.1771321118.git.pabeni@redhat.com/ [2] https://lore.kernel.org/netdev/[email protected]/

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.13%Up 0.1 points since Mar 19, 2026

What each source reports

CVE List Score used 7.8

net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks

In the Linux kernel, the following vulnerability has been resolved:

net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks

As Paolo said earlier [1]:

[1] https://lore.kernel.org/netdev/674b8cbfc385c6f37fb29a1de08d8fe5c2b0fbee.1771321118.git.pabeni@redhat.com/ [2] https://lore.kernel.org/netdev/[email protected]/

Record: CVE-2026-23270
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-416
Updated: 2026-11-02

EUVDEUVD-2026-12913 7.8

In the Linux kernel, the following vulnerability has been resolved:

net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks

As Paolo said earlier [1]:

[1] https://lore.kernel.org/netdev/674b8cbfc385c6f37fb29a1de08d8fe5c2b0fbee.1771321118.git.pabeni@redhat.com/ [2] https://lore.kernel.org/netdev/[email protected]/

Record: EUVD-2026-12913
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-62jp-jvc3-7hh9 7.8

In the Linux kernel, the following vulnerability has been resolved: net/sched: Only allow act_ct...

In the Linux kernel, the following vulnerability has been resolved:

net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks

As Paolo said earlier [1]:

[1] https://lore.kernel.org/netdev/674b8cbfc385c6f37fb29a1de08d8fe5c2b0fbee.1771321118.git.pabeni@redhat.com/ [2] https://lore.kernel.org/netdev/[email protected]/

Record: GHSA-62jp-jvc3-7hh9
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-416
Updated: 2026-11-02

NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks

As Paolo said earlier [1]:

[1] https://lore.kernel.org/netdev/674b8cbfc385c6f37fb29a1de08d8fe5c2b0fbee.1771321118.git.pabeni@redhat.com/ [2] https://lore.kernel.org/netdev/[email protected]/

Record: CVE-2026-23270
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-416
Updated: 2026-11-02

OSVBELL-CVE-2026-23270 7.8

Record: BELL-CVE-2026-23270
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSV 7.8

net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks

In the Linux kernel, the following vulnerability has been resolved:

net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks

As Paolo said earlier [1]:

[1] https://lore.kernel.org/netdev/674b8cbfc385c6f37fb29a1de08d8fe5c2b0fbee.1771321118.git.pabeni@redhat.com/ [2] https://lore.kernel.org/netdev/[email protected]/

Record: CVE-2026-23270
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 48 moreShow less

OSVDEBIAN-CVE-2026-23270 7.8

In the Linux kernel, the following vulnerability has been resolved: net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks As Paolo said earlier [1]: "Since the blamed commit below, classify can return TC_ACT_CONSUMED while the current skb being held by the defragmentation engine. As reported by GangMin Kim, if such packet is that may cause a UaF when the defrag engine later on tries to tuch again such packet." act_ct was never meant to be used in the egress path, however some users are attaching it to egress today [2]. Attempting to reach a middle ground, we noticed that, while most qdiscs are not handling TC_ACT_CONSUMED, clsact/ingress qdiscs are. With that in mind, we address the issue by only allowing act_ct to bind to clsact/ingress qdiscs and shared blocks. That way it's still possible to attach act_ct to egress (albeit only with clsact). [1] https://lore.kernel.org/netdev/674b8cbfc385c6f37fb29a1de08d8fe5c2b0fbee.1771321118.git.pabeni@redhat.com/ [2] https://lore.kernel.org/netdev/[email protected]/

Record: DEBIAN-CVE-2026-23270
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2026-1862 9.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix to detect potential corrupted nid in free_nid_list

As reported, on-disk footer.ino and footer.nid is the same and out-of-range, let's add sanity check on f2fs_alloc_nid() to detect any potential corruption in free_nid_list.(CVE-2025-68315)

In the Linux kernel, the following vulnerability has been resolved:

ntfs3: Fix uninit buffer allocated by __getname()

Fix uninit errors caused after buffer allocation given to 'de'; by initializing the buffer with zeroes. The fix was found by using KMSAN.(CVE-2025-68727)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: fix use-after-free in nf_tables_addchain()

nf_tables_addchain() publishes the chain to table->chains via list_add_tail_rcu() (in nft_chain_add()) before registering hooks. If nf_tables_register_hook() then fails, the error path calls nft_chain_del() (list_del_rcu()) followed by nf_tables_chain_destroy() with no RCU grace period in between.

This creates two use-after-free conditions:

Control-plane: nf_tables_dump_chains() traverses table->chains under rcu_read_lock(). A concurrent dump can still be walking the chain when the error path frees it.
Packet path: for NFPROTO_INET, nf_register_net_hook() briefly installs the IPv4 hook before IPv6 registration fails. Packets entering nft_do_chain() via the transient IPv4 hook can still be dereferencing chain->blob_gen_X when the error path frees the chain.

Add synchronize_rcu() between nft_chain_del() and the chain destroy so that all RCU readers -- both dump threads and in-flight packet evaluation -- have finished before the chain is freed.(CVE-2026-23231)

In the Linux kernel, the following vulnerability has been resolved:

tls: Fix race condition in tls_sw_cancel_work_tx()

This issue was discovered during a code audit.

After cancel_delayed_work_sync() is called from tls_sk_proto_close(), tx_work_handler() can still be scheduled from paths such as the Delayed ACK handler or ksoftirqd. As a result, the tx_work_handler() worker may dereference a freed TLS object.

The following is a simple race scenario:

      cpu0                         cpu1

tls_sk_proto_close() tls_sw_cancel_work_tx() tls_write_space() tls_sw_write_space() if (!test_and_set_bit(BIT_TX_SCHEDULED, &tx_ctx->tx_bitmask)) set_bit(BIT_TX_SCHEDULED, &ctx->tx_bitmask); cancel_delayed_work_sync(&ctx->tx_work.work); schedule_delayed_work(&tx_ctx->tx_work.work, 0);

To prevent this race condition, cancel_delayed_work_sync() is replaced with disable_delayed_work_sync().(CVE-2026-23240)

In the Linux kernel, the following vulnerability has been resolved:

net/sched: act_gate: snapshot parameters with RCU on replace

The gate action can be replaced while the hrtimer callback or dump path is walking the schedule list.

Convert the parameters to an RCU-protected snapshot and swap updates under tcf_lock, freeing the previous snapshot via call_rcu(). When REPLACE omits the entry list, preserve the existing schedule so the effective state is unchanged.(CVE-2026-23245)

In the Linux kernel, the following vulnerability has been resolved:

net: gro: fix outer network offset

The udp GRO complete stage assumes that all the packets inserted the RX have the encapsulation flag zeroed. Such assumption is not true, as a few H/W NICs can set such flag when H/W offloading the checksum for an UDP encapsulated traffic, the tun driver can inject GSO packets with UDP encapsulation and the problematic layout can also be created via a veth based setup.

Due to the above, in the problematic scenarios, udp4_gro_complete() uses the wrong network offset (inner…

Record: OESA-2026-1862
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2026-1863 9.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix to detect potential corrupted nid in free_nid_list

As reported, on-disk footer.ino and footer.nid is the same and out-of-range, let's add sanity check on f2fs_alloc_nid() to detect any potential corruption in free_nid_list.(CVE-2025-68315)

In the Linux kernel, the following vulnerability has been resolved:

ntfs3: Fix uninit buffer allocated by __getname()

Fix uninit errors caused after buffer allocation given to 'de'; by initializing the buffer with zeroes. The fix was found by using KMSAN.(CVE-2025-68727)

In the Linux kernel, a security vulnerability exists in the IOMMU Shared Virtual Addressing (SVA) feature. On x86 architecture when CONFIG_X86 is set, IOMMU hardware caches kernel page table entries. Due to the lack of notification mechanism for kernel page table changes, when kernel page table pages are freed and reused, the IOMMU may retain stale entries, leading to Use-After-Free (UAF) and Write-After-Free (WAF) conditions. This can be exploited to cause arbitrary physical memory DMA access or privilege escalation.(CVE-2025-71089)

In the Linux kernel, the following vulnerability has been resolved:

uacce: fix cdev handling in the cleanup path

When cdev_device_add fails, it internally releases the cdev memory, and if cdev_device_del is then executed, it will cause a hang error. To fix it, we check the return value of cdev_device_add() and clear uacce->cdev to avoid calling cdev_device_del in the uacce_remove.(CVE-2026-23096)

In the Linux kernel, the following vulnerability has been resolved:

bonding: fix use-after-free due to enslave fail after slave array update

Fix a use-after-free which happens due to enslave failure after the new slave has been added to the array. Since the new slave can be used for Tx immediately, we can use it after it has been freed by the enslave error cleanup path which frees the allocated slave memory. Slave update array is supposed to be called last when further enslave failures are not expected. Move it after xdp setup to avoid any problems.

It is very easy to reproduce the problem with a simple xdp_pass prog: ip l add bond1 type bond mode balance-xor ip l set bond1 up ip l set dev bond1 xdp object xdp_pass.o sec xdp_pass ip l add dumdum type dummy

Then run in parallel: while :; do ip l set dumdum master bond1 1>/dev/null 2>&1; done; mausezahn bond1 -a own -b rand -A rand -B 1.1.1.1 -c 0 -t tcp "dp=1-1023, flags=syn"

The crash happens almost immediately: [ 605.602850] Oops: general protection fault, probably for non-canonical address 0xe0e6fc2460000137: 0000 [#1] SMP KASAN NOPTI [ 605.602916] KASAN: maybe wild-memory-access in range [0x07380123000009b8-0x07380123000009bf] [ 605.602946] CPU: 0 UID: 0 PID: 2445 Comm: mausezahn Kdump: loaded Tainted: G B 6.19.0-rc6+ #21 PREEMPT(voluntary) [ 605.602979] Tainted: [B]=BAD_PAGE [ 605.602998] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 605.603032] RIP: 0010:netdev_core_pick_tx+0xcd/0x210 [ 605.603063] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 3e 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 6b 08 49 8d 7d 30 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 25 01 00 00 49 8b 45 30 4c 89 e2 48 89 ee 48 89 [ 605.603111] RSP: 0018:ffff88817b9af348 EFLAGS: 00010213 [ 605.603145] RAX: dffffc0000000000 RBX: ffff88817d28b420 RCX: 0000000000000000 [ 605.603172] RDX: 00e7002460000137 RSI: 0000000000000008 RDI: 07380123000009be [ 605.603199] RBP: ffff88817b541a00 R08: 0000000000000001 R09: fffffbfff3ed8c0c [ 605.603226] R10: ffffffff9f6c6067 R11: 0000000000000001 R12: 0000000000000000 [ 605.603253] R13: 073801230000098e R14: ffff88817d28b448 R15: ffff88817b541a84 [ 605.603286] FS: 00007f6570ef67c0(0000) GS:ffff888221dfa000(0000) knlGS:0000000000000000 [ …

Record: OESA-2026-1863
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2026-1864 9.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix to detect potential corrupted nid in free_nid_list

As reported, on-disk footer.ino and footer.nid is the same and out-of-range, let's add sanity check on f2fs_alloc_nid() to detect any potential corruption in free_nid_list.(CVE-2025-68315)

In the Linux kernel, the following vulnerability has been resolved:

ntfs3: Fix uninit buffer allocated by __getname()

Fix uninit errors caused after buffer allocation given to 'de'; by initializing the buffer with zeroes. The fix was found by using KMSAN.(CVE-2025-68727)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: fix use-after-free in nf_tables_addchain()

This creates two use-after-free conditions:

Control-plane: nf_tables_dump_chains() traverses table->chains under rcu_read_lock(). A concurrent dump can still be walking the chain when the error path frees it.
Packet path: for NFPROTO_INET, nf_register_net_hook() briefly installs the IPv4 hook before IPv6 registration fails. Packets entering nft_do_chain() via the transient IPv4 hook can still be dereferencing chain->blob_gen_X when the error path frees the chain.

In the Linux kernel, the following vulnerability has been resolved:

tls: Fix race condition in tls_sw_cancel_work_tx()

This issue was discovered during a code audit.

The following is a simple race scenario:

      cpu0                         cpu1

To prevent this race condition, cancel_delayed_work_sync() is replaced with disable_delayed_work_sync().(CVE-2026-23240)

In the Linux kernel, the following vulnerability has been resolved:

net/sched: act_gate: snapshot parameters with RCU on replace

The gate action can be replaced while the hrtimer callback or dump path is walking the schedule list.

In the Linux kernel, the following vulnerability has been resolved:

net: gro: fix outer network offset

Due to the above, in the problematic scenarios, udp4_gro_complete() uses the wrong network offset (inner…

Record: OESA-2026-1864
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:13565 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:13565
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:13566 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:13566
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:19568 8.1

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:19568
CVSS 3.1: 8.1 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:19569 8.1

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:19569
CVSS 3.1: 8.1 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:21209 7.3

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:21209
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:21706 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:21706
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:21745 7.8

Red Hat Security Advisory: kernel-rt security update

Record: RHSA-2026:21745
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:22900 8.8

Red Hat Security Advisory: kernel-rt security update

Record: RHSA-2026:22900
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:22940 8.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:22940
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:23224 8.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:23224
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:24343 8.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:24343
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:35863 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record: RHSA-2026:35863
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:13565 7.8

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state (CVE-2026-23136)
kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402)
kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:13565
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:13566 7.8

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402)
kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service (CVE-2026-31419)
kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:13566
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:19568 8.1

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766)
kernel: scsi: qla2xxx: Fix improper freeing of purex item (CVE-2025-68741)
kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116)
kernel: libceph: prevent potential out-of-bounds reads in handle_auth_done() (CVE-2026-22984)
kernel: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CVE-2026-22990)
kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state (CVE-2026-23136)
kernel: net/sched: cls_u32: use skb_header_pointer_careful() (CVE-2026-23204)
kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling (CVE-2026-23401)
kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402)
kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)
kernel: usbip: validate number_of_packets in usbip_pack_ret_submit() (CVE-2026-31607)
kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)
kernel: RDMA/umem: Fix double dma_buf_unpin in failure path (CVE-2026-43128)
kernel: "Dirty Frag" is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284)
kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-46300)
kernel: Read root-owned files as an unprivileged user (CVE-2026-46333)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:19568
CVSS 3.1: 8.1 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:19569 8.1

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: net: af_can: do not leave a dangling sk pointer in can_create() (CVE-2024-56603)
kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766)
kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724)
kernel: scsi: qla2xxx: Fix improper freeing of purex item (CVE-2025-68741)
kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling (CVE-2026-23401)
kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402)
kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)
kernel: usbip: validate number_of_packets in usbip_pack_ret_submit() (CVE-2026-31607)
kernel: RDMA/umem: Fix double dma_buf_unpin in failure path (CVE-2026-43128)
kernel: "Dirty Frag" is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284)
kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-46300)
kernel: Read root-owned files as an unprivileged user (CVE-2026-46333)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:19569
CVSS 3.1: 8.1 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:21706 7.8

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)
kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)
kernel: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CVE-2025-68347)
kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116)
kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)
kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)
kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)
kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)
kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)
kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)
kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)
kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)
kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)
kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)
kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)
kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)
kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:21706
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:21745 7.8

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)
kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)
kernel: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CVE-2025-68347)
kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116)
kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)
kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)
kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)
kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)
kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)
kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)
kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)
kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)
kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)
kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)
kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)
kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)
kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:21745
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVROOT-OS-DEBIAN-12-CVE-2026-23270 7.0

CVE-2026-23270 in linux - Patched by Root

Root has patched CVE-2026-23270 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record: ROOT-OS-DEBIAN-12-CVE-2026-23270
CVSS 3.1: 7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVROOT-OS-DEBIAN-13-CVE-2026-23270 7.0

CVE-2026-23270 in linux - Patched by Root

Root has patched CVE-2026-23270 in the linux package for Root:Debian:13. Multiple fixed versions available.

Record: ROOT-OS-DEBIAN-13-CVE-2026-23270
CVSS 3.1: 7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-03

OSVROOT-OS-UBUNTU-2204-CVE-2026-23270 7.0

CVE-2026-23270 in linux - Patched by Root

Root has patched CVE-2026-23270 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record: ROOT-OS-UBUNTU-2204-CVE-2026-23270
CVSS 3.1: 7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVROOT-OS-UBUNTU-2404-CVE-2026-23270 7.0

CVE-2026-23270 in linux - Patched by Root

Root has patched CVE-2026-23270 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record: ROOT-OS-UBUNTU-2404-CVE-2026-23270
CVSS 3.1: 7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRXSA-2026:13565 7.8

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state (CVE-2026-23136)
kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402)
kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RXSA-2026:13565
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2026-23270 7.8

Record: UBUNTU-CVE-2026-23270
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVALSA-2026:13565 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state (CVE-2026-23136)
kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402)
kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:13565
Updated: 2026-11-02

OSVALSA-2026:13566 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402)
kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service (CVE-2026-31419)
kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:13566
Updated: 2026-11-02

OSVALSA-2026:19568 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766)
kernel: scsi: qla2xxx: Fix improper freeing of purex item (CVE-2025-68741)
kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116)
kernel: libceph: prevent potential out-of-bounds reads in handle_auth_done() (CVE-2026-22984)
kernel: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CVE-2026-22990)
kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state (CVE-2026-23136)
kernel: net/sched: cls_u32: use skb_header_pointer_careful() (CVE-2026-23204)
kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling (CVE-2026-23401)
kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402)
kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)
kernel: usbip: validate number_of_packets in usbip_pack_ret_submit() (CVE-2026-31607)
kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)
kernel: RDMA/umem: Fix double dma_buf_unpin in failure path (CVE-2026-43128)
kernel: "Dirty Frag" is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284)
kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-46300)
kernel: Read root-owned files as an unprivileged user (CVE-2026-46333)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:19568
Updated: 2026-11-02

OSVALSA-2026:19569 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: net: af_can: do not leave a dangling sk pointer in can_create() (CVE-2024-56603)
kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766)
kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724)
kernel: scsi: qla2xxx: Fix improper freeing of purex item (CVE-2025-68741)
kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling (CVE-2026-23401)
kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402)
kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)
kernel: usbip: validate number_of_packets in usbip_pack_ret_submit() (CVE-2026-31607)
kernel: RDMA/umem: Fix double dma_buf_unpin in failure path (CVE-2026-43128)
kernel: "Dirty Frag" is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284)
kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-46300)
kernel: Read root-owned files as an unprivileged user (CVE-2026-46333)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:19569
Updated: 2026-11-02

OSVALSA-2026:21706 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)
kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)
kernel: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CVE-2025-68347)
kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116)
kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)
kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)
kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)
kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)
kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)
kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)
kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)
kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)
kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)
kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)
kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)
kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)
kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:21706
Updated: 2026-11-02

OSVALSA-2026:21745 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)
kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)
kernel: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CVE-2025-68347)
kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116)
kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)
kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)
kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)
kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)
kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)
kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)
kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)
kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)
kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)
kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)
kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)
kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)
kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:21745
Updated: 2026-11-02

OSVCLSA-2026-1779987841 No score

kernel: Fix of 110 CVEs

smb: client: reject userspace cifs.spnego descriptions
mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash {CVE-2024-35854}
cifs: Fix memory leak when build ntlmssp negotiate blob failed {CVE-2022-50372}
scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read() {CVE-2023-53038}
drm/amd/display: Do not set DRR on pipe Commit {CVE-2023-53042}
tcp: fix skb_copy_ubufs() vs BIG TCP {CVE-2023-53669}
clk: Fix clk_core_get NULL dereference {CVE-2024-27038}
drm/amd/display: Check null pointers before using dc->clk_mgr {CVE-2024-49907}
bpf: reject unhashed sockets in bpf_sk_assign {CVE-2023-53585}
driver core: fix resource leak in device_add() {CVE-2023-53594}
wifi: ath9k: hif_usb: fix memory leak of remain_skbs {CVE-2023-53641}
wifi: ath9k: verify the expected usb_endpoints are present {CVE-2022-50297}
drm/amd/display: Fix potential null-deref in dm_resume {CVE-2022-50535}
ext4: don't allow journal inode to have encrypt flag {CVE-2022-50277}
tls: get psock ref after taking rxlock to avoid leak {CVE-2024-35908}
cpumap: Zero-initialise xdp_rxq_info struct before running XDP program {CVE-2024-27431}
bpf: Guard stack limits against 32bit overflow {CVE-2023-52676}
can: isotp: isotp_sendmsg(): add result check for wait_event_interruptible() {CVE-2021-47457}
serial: core: fix transmit-buffer reset and memleak {CVE-2021-47527}
cpufreq: exit() callback is optional {CVE-2024-38615}
ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() {CVE-2024-39276}
tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets {CVE-2024-36905}
wifi: nl80211: reject iftype change with mesh ID change {CVE-2024-27410}
tcp: do not accept ACK of bytes we never sent {CVE-2023-52881}
crypto: pcrypt - Fix hungtask for PADATA_RESET {CVE-2023-52813}
net/mlx5: Properly link new fs rules into the tree {CVE-2024-35960}
usb: ulpi: fix memory leak on ulpi_register() error paths
usb: ulpi: fix double free in ulpi_register_interface() error path {CVE-2026-31759}
wifi: ath11k: fix htt pktlog locking {CVE-2023-52800}
net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute {CVE-2025-21653}
calipso: fix memory leak in netlbl_calipso_add_pass() {CVE-2023-52698}
wifi: iwlwifi: mvm: avoid NULL pointer dereference {CVE-2024-49929}
ext4: update orig_path in ext4_find_extent() {CVE-2024-49881}
drm/vmwgfx: Fix a deadlock in dma buf fence polling {CVE-2024-43863}
RDMA/restrack: Fix potential invalid address access {CVE-2024-42080}
net: can: j1939: Initialize unused data in j1939_send_one() {CVE-2024-42076}
nfsd: clear acl_access/acl_default after releasing them {CVE-2025-21796}
rtc: pl031: fix rtc features null pointer dereference {CVE-2022-49273}
net: veth: clear GRO when clearing XDP even when down {CVE-2024-26803}
coresight: cti: Fix hang in cti_disable_hw() {CVE-2022-50491}
scsi: qla2xxx: Fix deletion race condition {CVE-2023-53615}
iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry() {CVE-2023-53476}
scsi: qla2xxx: Fix potential NULL pointer dereference {CVE-2023-53451}
usb: ucsi_acpi: Increase the command completion timeout {CVE-2023-53168}
drivers: base: dd: fix memory leak with using debugfs_lookup() {CVE-2023-53390}
USB: fix memory leak with using debugfs_lookup() {CVE-2023-53359}
PM: domains: fix memory leak with using debugfs_lookup() {CVE-2023-53202}
drm/client: Fix memory leak in drm_client_modeset_probe {CVE-2023-53288}
drivers: base: component: fix memory leak with using debugfs_lookup() {CVE-2023-53409}
USB: uhci: fix memory leak with using debugfs_lookup() {CVE-2023-53197}
media: uvcvideo: Handle cameras with invalid descriptors {CVE-2023-53437}
arm64: csum: Fix OoB access in IP checksum code for negative lengths {CVE-2023-53726}
bnxt: Do not read past the end of test names {CVE-2023-53010}
dax: make sure inodes are flushed before destroy cache {CVE-2022-49220}
cifs: Fix oops due to uncleared server->smbd_conn…

Record: CLSA-2026-1779987841
Updated: 2026-11-02

OSVCLSA-2026-1780052998 No score

kernel: Fix of 102 CVEs

smb: client: reject userspace cifs.spnego descriptions
usb: ulpi: fix memory leak on ulpi_register() error paths
usb: ulpi: fix double free in ulpi_register_interface() error path {CVE-2026-31759}
mptcp: consolidate suboption status {CVE-2025-21707}
blktrace: fix __this_cpu_read/write in preemptible context {CVE-2026-23374}
espintcp: remove encap socket caching to avoid reference leak {CVE-2025-38097}
net: usb: asix: validate PHY address before use {CVE-2025-71094}
driver: iio: add missing checks on iio_info's callback access {CVE-2024-46715}
net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts {CVE-2026-22997}
crypto: af_alg - Set merge to zero early in af_alg_sendmsg {CVE-2025-39931}
bonding: fix use-after-free due to enslave fail after slave array update {CVE-2026-23171}
Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT {CVE-2025-38335}
spi: spi-fsl-lpspi: fix teardown order issue (UAF) {CVE-2026-31485}
mm/smaps: fix race between smaps_hugetlb_range and migration {CVE-2025-39754}
vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects {CVE-2025-39850}
mm/userfaultfd: fix hugetlb fault mutex hash calculation {CVE-2026-31575}
RDMA/irdma: Initialize free_qp completion before using it {CVE-2026-31492}
calipso: Don't call calipso functions for AF_INET sk. {CVE-2025-38147}
mm/ksm: fix flag-dropping behavior in ksm_madvise {CVE-2025-40040}
espintcp: fix skb leaks {CVE-2025-38057}
net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize {CVE-2023-53667}
memcg: fix soft lockup in the OOM process {CVE-2024-57977}
futex: Clear stale exiting pointer in futex_lock_pi() retry path {CVE-2026-31555}
trace_events_hist: add check for return value of 'create_hist_field' {CVE-2023-53005}
dm-verity: disable recursive forward error correction {CVE-2025-71161}
Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ {CVE-2026-23395}
vfs: Don't evict inode under the inode lru traversing context {CVE-2024-45003}
ipvs: fix uninit-value for saddr in do_output_route4 {CVE-2025-37961}
sctp: add mutual exclusion in proc_sctp_do_udp_port() {CVE-2025-22062}
net: phy: leds: fix memory leak {CVE-2025-37989}
x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper {CVE-2025-39681}
tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). {CVE-2025-40149}
netfilter: ctnetlink: remove refcounting in expectation dumpers {CVE-2025-39764}
sctp: sysctl: auth_enable: avoid using current->nsproxy {CVE-2025-21638}
kobject: Add sanity check for kset->kobj.ktype in kset_register() {CVE-2023-53480}
io_uring: check if iowq is killed before queuing {CVE-2024-56709}
netfilter: x_tables: fix percpu counter block leak on error path when creating new netns {CVE-2023-53200}
ubi: ubi_wl_put_peb: Fix infinite loop when wear-leveling work failed {CVE-2023-53481}
udf: Do not update file length for failed writes to inline files {CVE-2023-53295}
bpf: Forget ranges when refining tnum after JSET {CVE-2025-39748}
perf/core: Exit early on perf_mmap() fail {CVE-2025-38565}
misc: vmw_balloon: fix memory leak with using debugfs_lookup() {CVE-2023-53279}
can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write {CVE-2023-53344}
tracing: Fix race issue between cpu buffer write and swap {CVE-2023-53368}
KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses {CVE-2025-23141}
io_uring/tctx: work around xa_store() allocation error issue {CVE-2024-56584}
objtool: Fix memory leak in create_static_call_sections() {CVE-2023-53423}
net: bcmgenet: Add a check for oversized packets {CVE-2023-53535}
ext4: remove a BUG_ON in ext4_mb_release_group_pa() {CVE-2023-53450}
PM: EM: fix memory leak with using debugfs_lookup() {CVE-2023-53411}
ALSA: usb-audio: Use correct version for UAC3 header validation {CVE-2026-23318}
watchdog: Fix kmemleak in watchdog_cdev_register {CVE-2023-53234} -…

Record: CLSA-2026-1780052998
Updated: 2026-11-02

OSVopenSUSE-SU-2026:20572-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-39998: scsi: target: target_core_configfs: Add length check to avoid buffer overflow (bsc#1252073).
CVE-2025-40253: s390/ctcm: Fix double-kfree (bsc#1255084).
CVE-2025-68794: iomap: adjust read range correctly for non-block-aligned positions (bsc#1256647).
CVE-2025-71239: audit: add fchmodat2() to change attributes class (bsc#1259759).
CVE-2026-23072: l2tp: Fix memleak in l2tp_udp_encap_recv() (bsc#1257708).
CVE-2026-23103: ipvlan: Make the addrs_lock be per port (bsc#1257773).
CVE-2026-23120: l2tp: avoid one data-race in l2tp_tunnel_del_work() (bsc#1258280).
CVE-2026-23125: sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT (bsc#1258293).
CVE-2026-23138: kABI: Preserve values of the trace recursion bits (bsc#1258301).
CVE-2026-23140: bpf, test_run: Subtract size of xdp_frame from allowed metadata size (bsc#1258305).
CVE-2026-23187: pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains (bsc#1258330).
CVE-2026-23193: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (bsc#1258414).
CVE-2026-23201: ceph: fix oops due to invalid pointer for kfree() in parse_longname() (bsc#1258337).
CVE-2026-23204: net: add skb_header_pointer_careful() helper (bsc#1258340).
CVE-2026-23215: x86/vmware: Fix hypercall clobbers (bsc#1258476).
CVE-2026-23216: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (bsc#1258447).
CVE-2026-23231: netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (bsc#1259188).
CVE-2026-23239: espintcp: Fix race condition in espintcp_close() (bsc#1259485).
CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1259484).
CVE-2026-23242: RDMA/siw: Fix potential NULL pointer dereference in header processing (bsc#1259795).
CVE-2026-23243: RDMA/umad: Reject negative data_len in ib_umad_write (bsc#1259797).
CVE-2026-23255: net: add proper RCU protection to /proc/net/ptype (bsc#1259891).
CVE-2026-23262: gve: Fix stats report corruption on queue count change (bsc#1259870).
CVE-2026-23270: net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (bsc#1259886).
CVE-2026-23272: netfilter: nf_tables: unconditionally bump set->nelems before insertion (bsc#1260009).
CVE-2026-23274: netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels (bsc#1260005).
CVE-2026-23277: net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit (bsc#1259997).
CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1259998).
CVE-2026-23281: wifi: libertas: fix use-after-free in lbs_free_adapter() (bsc#1260464).
CVE-2026-23292: scsi: target: Fix recursive locking in __configfs_open_file() (bsc#1260500).
CVE-2026-23293: net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled (bsc#1260486).
CVE-2026-23297: nfsd: Fix cred ref leak in nfsd_nl_threads_set_doit() (bsc#1260490).
CVE-2026-23304: ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() (bsc#1260544).
CVE-2026-23319: bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim (bsc#1260735).
CVE-2026-23326: xsk: Fix fragment node deletion to prevent buffer leak (bsc#1260606).
CVE-2026-23335: RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() (bsc#1260550).
CVE-2026-23343: xdp: produce a warning when calculated tailroom is negative (bsc#1260527).
CVE-2026-23361: PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry (bsc#1260732).
CVE-2026-23379: net/sched: ets: fix divide by zero in the offload path (bsc#1260481).
CVE-2026-23381: net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled (bsc#1260471).
CVE-2026-23383: bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing (bsc#1260497).
CVE-2026-23386: gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets…

Record: openSUSE-SU-2026:20572-1
Updated: 2026-11-02

OSVSUSE-SU-2026:1573-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2025-39998: scsi: target: target_core_configfs: Add length check to avoid buffer overflow (bsc#1252073).
CVE-2025-68794: iomap: adjust read range correctly for non-block-aligned positions (bsc#1256647).
CVE-2025-71268: btrfs: fix reservation leak in some error paths when inserting inline extent (bsc#1259865).
CVE-2025-71269: btrfs: do not free data reservation in fallback from inline due to -ENOSPC (bsc#1259889).
CVE-2026-23030: phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() (bsc#1257561).
CVE-2026-23047: libceph: make calc_target() set t->paused, not just clear it (bsc#1257682).
CVE-2026-23103: ipvlan: Make the addrs_lock be per port (bsc#1257773).
CVE-2026-23120: l2tp: avoid one data-race in l2tp_tunnel_del_work() (bsc#1258280).
CVE-2026-23136: libceph: reset sparse-read state in osd_fault() (bsc#1258303).
CVE-2026-23140: bpf, test_run: Subtract size of xdp_frame from allowed metadata size (bsc#1258305).
CVE-2026-23187: pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains (bsc#1258330).
CVE-2026-23193: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (bsc#1258414).
CVE-2026-23201: ceph: fix oops due to invalid pointer for kfree() in parse_longname() (bsc#1258337).
CVE-2026-23215: x86/vmware: Fix hypercall clobbers (bsc#1258476).
CVE-2026-23216: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (bsc#1258447).
CVE-2026-23231: netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (bsc#1259188).
CVE-2026-23242: RDMA/siw: Fix potential NULL pointer dereference in header processing (bsc#1259795).
CVE-2026-23243: RDMA/umad: Reject negative data_len in ib_umad_write (bsc#1259797).
CVE-2026-23255: net: add proper RCU protection to /proc/net/ptype (bsc#1259891).
CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
CVE-2026-23270: net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (bsc#1259886).
CVE-2026-23272: netfilter: nf_tables: unconditionally bump set->nelems before insertion (bsc#1260009).
CVE-2026-23274: netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels (bsc#1260005).
CVE-2026-23277: net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit (bsc#1259997).
CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1259998).
CVE-2026-23281: wifi: libertas: fix use-after-free in lbs_free_adapter() (bsc#1260464).
CVE-2026-23292: scsi: target: Fix recursive locking in __configfs_open_file() (bsc#1260500).
CVE-2026-23293: net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled (bsc#1260486).
CVE-2026-23317: drm/vmwgfx: Return the correct value in vmw_translate_ptr functions (bsc#1260562).
CVE-2026-23319: bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim (bsc#1260735).
CVE-2026-23361: PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry (bsc#1260732).
CVE-2026-23379: net/sched: ets: fix divide by zero in the offload path (bsc#1260481).
CVE-2026-23381: net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled (bsc#1260471).
CVE-2026-23386: gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (bsc#1260799).
CVE-2026-23398: icmp: fix NULL pointer dereference in icmp_tag_validation() (bsc#1260730).
CVE-2026-23413: clsact: Fix use-after-free in init/destroy rollback asymmetry (bsc#1261498).
CVE-2026-23414: tls: Purge async_hold in tls_decrypt_async_wait() (bsc#1261496).
CVE-2026-31788: xen/privcmd: restrict usage in unprivileged domU (bsc#1259707).

The following non-security bugs were fixed:

ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() (git-fixes).
ACPI: OSI: Add DMI quirk for Acer Aspire One D255 (stable-fixes). -…

Record: SUSE-SU-2026:1573-1
Updated: 2026-11-02

OSVSUSE-SU-2026:1661-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-39998: scsi: target: target_core_configfs: Add length check to avoid buffer overflow (bsc#1252073).
CVE-2025-68794: iomap: adjust read range correctly for non-block-aligned positions (bsc#1256647).
CVE-2025-71268: btrfs: fix reservation leak in some error paths when inserting inline extent (bsc#1259865).
CVE-2025-71269: btrfs: do not free data reservation in fallback from inline due to -ENOSPC (bsc#1259889).
CVE-2026-23030: phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() (bsc#1257561).
CVE-2026-23047: libceph: make calc_target() set t->paused, not just clear it (bsc#1257682).
CVE-2026-23103: ipvlan: Make the addrs_lock be per port (bsc#1257773).
CVE-2026-23120: l2tp: avoid one data-race in l2tp_tunnel_del_work() (bsc#1258280).
CVE-2026-23136: libceph: reset sparse-read state in osd_fault() (bsc#1258303).
CVE-2026-23140: bpf, test_run: Subtract size of xdp_frame from allowed metadata size (bsc#1258305).
CVE-2026-23187: pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains (bsc#1258330).
CVE-2026-23193: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (bsc#1258414).
CVE-2026-23201: ceph: fix oops due to invalid pointer for kfree() in parse_longname() (bsc#1258337).
CVE-2026-23215: x86/vmware: Fix hypercall clobbers (bsc#1258476).
CVE-2026-23216: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (bsc#1258447).
CVE-2026-23231: netfilter: nf_tables: register hooks last when adding new chain/flowtable (bsc#1259188).
CVE-2026-23242: RDMA/siw: Fix potential NULL pointer dereference in header processing (bsc#1259795).
CVE-2026-23243: RDMA/umad: Reject negative data_len in ib_umad_write (bsc#1259797).
CVE-2026-23255: net: add proper RCU protection to /proc/net/ptype (bsc#1259891).
CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
CVE-2026-23270: net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (bsc#1259886).
CVE-2026-23272: netfilter: nf_tables: unconditionally bump set->nelems before insertion (bsc#1260009).
CVE-2026-23274: netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels (bsc#1260005).
CVE-2026-23277: net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit (bsc#1259997).
CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1259998).
CVE-2026-23281: wifi: libertas: fix use-after-free in lbs_free_adapter() (bsc#1260464).
CVE-2026-23292: scsi: target: Fix recursive locking in __configfs_open_file() (bsc#1260500).
CVE-2026-23293: net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled (bsc#1260486).
CVE-2026-23317: drm/vmwgfx: Return the correct value in vmw_translate_ptr functions (bsc#1260562).
CVE-2026-23319: bpf: export bpf_link_inc_not_zero (bsc#1260735).
CVE-2026-23361: PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry (bsc#1260732).
CVE-2026-23379: net/sched: ets: fix divide by zero in the offload path (bsc#1260481).
CVE-2026-23381: net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled (bsc#1260471).
CVE-2026-23386: gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (bsc#1260799).
CVE-2026-23398: icmp: fix NULL pointer dereference in icmp_tag_validation() (bsc#1260730).
CVE-2026-23413: clsact: Fix use-after-free in init/destroy rollback asymmetry (bsc#1261498).
CVE-2026-23414: tls: Purge async_hold in tls_decrypt_async_wait() (bsc#1261496).
CVE-2026-31788: xen/privcmd: restrict usage in unprivileged domU (bsc#1259707).

The following non security issues were fixed:

accel/qaic: Handle DBC deactivation if the owner went away (git-fixes).
ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() (git-fixes).
ACPI: OSI: Add…

Record: SUSE-SU-2026:1661-1
Updated: 2026-11-02

OSVSUSE-SU-2026:21114-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-38542: RDMA/mana_ib: boundary check before installing cq callbacks (bsc#1226591).
CVE-2025-39817: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (bsc#1249998).
CVE-2025-39998: scsi: target: target_core_configfs: Add length check to avoid buffer overflow (bsc#1252073).
CVE-2025-40201: kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths (bsc#1253455).
CVE-2025-40253: s390/ctcm: Fix double-kfree (bsc#1255084).
CVE-2025-68794: iomap: adjust read range correctly for non-block-aligned positions (bsc#1256647).
CVE-2025-71125: tracing: Do not register unsupported perf events (bsc#1256784).
CVE-2025-71268: btrfs: fix reservation leak in some error paths when inserting inline extent (bsc#1259865).
CVE-2025-71269: btrfs: do not free data reservation in fallback from inline due to -ENOSPC (bsc#1259889).
CVE-2026-23030: phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() (bsc#1257561).
CVE-2026-23047: libceph: make calc_target() set t->paused, not just clear it (bsc#1257682).
CVE-2026-23069: vsock/virtio: fix potential underflow in virtio_transport_get_credit() (bsc#1257755).
CVE-2026-23088: tracing: Fix crash on synthetic stacktrace field usage (bsc#1257814).
CVE-2026-23103: ipvlan: Make the addrs_lock be per port (bsc#1257773).
CVE-2026-23120: l2tp: avoid one data-race in l2tp_tunnel_del_work() (bsc#1258280).
CVE-2026-23125: sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT (bsc#1258293).
CVE-2026-23136: libceph: reset sparse-read state in osd_fault() (bsc#1258303).
CVE-2026-23140: bpf, test_run: Subtract size of xdp_frame from allowed metadata size (bsc#1258305).
CVE-2026-23154: net: fix segmentation of forwarding fraglist GRO (bsc#1258286).
CVE-2026-23169: mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() (bsc#1258389).
CVE-2026-23187: pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains (bsc#1258330).
CVE-2026-23193: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (bsc#1258414).
CVE-2026-23201: ceph: fix oops due to invalid pointer for kfree() in parse_longname() (bsc#1258337).
CVE-2026-23204: net/sched: cls_u32: use skb_header_pointer_careful() (bsc#1258340).
CVE-2026-23216: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (bsc#1258447).
CVE-2026-23231: netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (bsc#1259188).
CVE-2026-23242: RDMA/siw: Fix potential NULL pointer dereference in header processing (bsc#1259795).
CVE-2026-23243: RDMA/umad: Reject negative data_len in ib_umad_write (bsc#1259797).
CVE-2026-23255: net: add proper RCU protection to /proc/net/ptype (bsc#1259891).
CVE-2026-23262: gve: Fix stats report corruption on queue count change (bsc#1259870).
CVE-2026-23270: net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (bsc#1259886).
CVE-2026-23272: netfilter: nf_tables: unconditionally bump set->nelems before insertion (bsc#1260009).
CVE-2026-23274: netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels (bsc#1260005).
CVE-2026-23277: net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit (bsc#1259997).
CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1259998).
CVE-2026-23281: wifi: libertas: fix use-after-free in lbs_free_adapter() (bsc#1260464).
CVE-2026-23292: scsi: target: Fix recursive locking in __configfs_open_file() (bsc#1260500).
CVE-2026-23293: net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled (bsc#1260486).
CVE-2026-23304: ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() (bsc#1260544).
CVE-2026-23317: drm/vmwgfx: Return the correct value in vmw_translate_ptr functions (bsc#1260562).
CVE-2026-23319: bpf:…

Record: SUSE-SU-2026:21114-1
Updated: 2026-11-02

OSVSUSE-SU-2026:21123-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-38542: RDMA/mana_ib: boundary check before installing cq callbacks (bsc#1226591).
CVE-2025-39817: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (bsc#1249998).
CVE-2025-39998: scsi: target: target_core_configfs: Add length check to avoid buffer overflow (bsc#1252073).
CVE-2025-40201: kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths (bsc#1253455).
CVE-2025-40253: s390/ctcm: Fix double-kfree (bsc#1255084).
CVE-2025-68794: iomap: adjust read range correctly for non-block-aligned positions (bsc#1256647).
CVE-2025-71125: tracing: Do not register unsupported perf events (bsc#1256784).
CVE-2025-71268: btrfs: fix reservation leak in some error paths when inserting inline extent (bsc#1259865).
CVE-2025-71269: btrfs: do not free data reservation in fallback from inline due to -ENOSPC (bsc#1259889).
CVE-2026-23030: phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() (bsc#1257561).
CVE-2026-23047: libceph: make calc_target() set t->paused, not just clear it (bsc#1257682).
CVE-2026-23069: vsock/virtio: fix potential underflow in virtio_transport_get_credit() (bsc#1257755).
CVE-2026-23088: tracing: Fix crash on synthetic stacktrace field usage (bsc#1257814).
CVE-2026-23103: ipvlan: Make the addrs_lock be per port (bsc#1257773).
CVE-2026-23120: l2tp: avoid one data-race in l2tp_tunnel_del_work() (bsc#1258280).
CVE-2026-23125: sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT (bsc#1258293).
CVE-2026-23136: libceph: reset sparse-read state in osd_fault() (bsc#1258303).
CVE-2026-23140: bpf, test_run: Subtract size of xdp_frame from allowed metadata size (bsc#1258305).
CVE-2026-23154: net: fix segmentation of forwarding fraglist GRO (bsc#1258286).
CVE-2026-23169: mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() (bsc#1258389).
CVE-2026-23187: pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains (bsc#1258330).
CVE-2026-23193: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (bsc#1258414).
CVE-2026-23201: ceph: fix oops due to invalid pointer for kfree() in parse_longname() (bsc#1258337).
CVE-2026-23204: net/sched: cls_u32: use skb_header_pointer_careful() (bsc#1258340).
CVE-2026-23216: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (bsc#1258447).
CVE-2026-23231: netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (bsc#1259188).
CVE-2026-23242: RDMA/siw: Fix potential NULL pointer dereference in header processing (bsc#1259795).
CVE-2026-23243: RDMA/umad: Reject negative data_len in ib_umad_write (bsc#1259797).
CVE-2026-23255: net: add proper RCU protection to /proc/net/ptype (bsc#1259891).
CVE-2026-23262: gve: Fix stats report corruption on queue count change (bsc#1259870).
CVE-2026-23270: net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (bsc#1259886).
CVE-2026-23272: netfilter: nf_tables: unconditionally bump set->nelems before insertion (bsc#1260009).
CVE-2026-23274: netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels (bsc#1260005).
CVE-2026-23277: net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit (bsc#1259997).
CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1259998).
CVE-2026-23281: wifi: libertas: fix use-after-free in lbs_free_adapter() (bsc#1260464).
CVE-2026-23292: scsi: target: Fix recursive locking in __configfs_open_file() (bsc#1260500).
CVE-2026-23293: net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled (bsc#1260486).
CVE-2026-23304: ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() (bsc#1260544).
CVE-2026-23317: drm/vmwgfx: Return the correct value in vmw_translate_ptr functions (bsc#1260562).
CVE-2026-23319: bpf:…

Record: SUSE-SU-2026:21123-1
Updated: 2026-11-02

OSVSUSE-SU-2026:21230-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-39998: scsi: target: target_core_configfs: Add length check to avoid buffer overflow (bsc#1252073).
CVE-2025-40253: s390/ctcm: Fix double-kfree (bsc#1255084).
CVE-2025-68794: iomap: adjust read range correctly for non-block-aligned positions (bsc#1256647).
CVE-2025-71239: audit: add fchmodat2() to change attributes class (bsc#1259759).
CVE-2026-23072: l2tp: Fix memleak in l2tp_udp_encap_recv() (bsc#1257708).
CVE-2026-23103: ipvlan: Make the addrs_lock be per port (bsc#1257773).
CVE-2026-23120: l2tp: avoid one data-race in l2tp_tunnel_del_work() (bsc#1258280).
CVE-2026-23125: sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT (bsc#1258293).
CVE-2026-23138: kABI: Preserve values of the trace recursion bits (bsc#1258301).
CVE-2026-23140: bpf, test_run: Subtract size of xdp_frame from allowed metadata size (bsc#1258305).
CVE-2026-23187: pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains (bsc#1258330).
CVE-2026-23193: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (bsc#1258414).
CVE-2026-23201: ceph: fix oops due to invalid pointer for kfree() in parse_longname() (bsc#1258337).
CVE-2026-23204: net: add skb_header_pointer_careful() helper (bsc#1258340).
CVE-2026-23215: x86/vmware: Fix hypercall clobbers (bsc#1258476).
CVE-2026-23216: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (bsc#1258447).
CVE-2026-23231: netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (bsc#1259188).
CVE-2026-23239: espintcp: Fix race condition in espintcp_close() (bsc#1259485).
CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1259484).
CVE-2026-23242: RDMA/siw: Fix potential NULL pointer dereference in header processing (bsc#1259795).
CVE-2026-23243: RDMA/umad: Reject negative data_len in ib_umad_write (bsc#1259797).
CVE-2026-23255: net: add proper RCU protection to /proc/net/ptype (bsc#1259891).
CVE-2026-23262: gve: Fix stats report corruption on queue count change (bsc#1259870).
CVE-2026-23270: net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (bsc#1259886).
CVE-2026-23272: netfilter: nf_tables: unconditionally bump set->nelems before insertion (bsc#1260009).
CVE-2026-23274: netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels (bsc#1260005).
CVE-2026-23277: net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit (bsc#1259997).
CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1259998).
CVE-2026-23281: wifi: libertas: fix use-after-free in lbs_free_adapter() (bsc#1260464).
CVE-2026-23292: scsi: target: Fix recursive locking in __configfs_open_file() (bsc#1260500).
CVE-2026-23293: net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled (bsc#1260486).
CVE-2026-23297: nfsd: Fix cred ref leak in nfsd_nl_threads_set_doit() (bsc#1260490).
CVE-2026-23304: ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() (bsc#1260544).
CVE-2026-23319: bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim (bsc#1260735).
CVE-2026-23326: xsk: Fix fragment node deletion to prevent buffer leak (bsc#1260606).
CVE-2026-23335: RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() (bsc#1260550).
CVE-2026-23343: xdp: produce a warning when calculated tailroom is negative (bsc#1260527).
CVE-2026-23361: PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry (bsc#1260732).
CVE-2026-23379: net/sched: ets: fix divide by zero in the offload path (bsc#1260481).
CVE-2026-23381: net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled (bsc#1260471).
CVE-2026-23383: bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing (bsc#1260497).
CVE-2026-23386: gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets…

Record: SUSE-SU-2026:21230-1
Updated: 2026-11-02

OSVSUSE-SU-2026:21237-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-39998: scsi: target: target_core_configfs: Add length check to avoid buffer overflow (bsc#1252073).
CVE-2025-40253: s390/ctcm: Fix double-kfree (bsc#1255084).
CVE-2025-68794: iomap: adjust read range correctly for non-block-aligned positions (bsc#1256647).
CVE-2025-71239: audit: add fchmodat2() to change attributes class (bsc#1259759).
CVE-2026-23072: l2tp: Fix memleak in l2tp_udp_encap_recv() (bsc#1257708).
CVE-2026-23103: ipvlan: Make the addrs_lock be per port (bsc#1257773).
CVE-2026-23120: l2tp: avoid one data-race in l2tp_tunnel_del_work() (bsc#1258280).
CVE-2026-23125: sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT (bsc#1258293).
CVE-2026-23138: kABI: Preserve values of the trace recursion bits (bsc#1258301).
CVE-2026-23140: bpf, test_run: Subtract size of xdp_frame from allowed metadata size (bsc#1258305).
CVE-2026-23187: pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains (bsc#1258330).
CVE-2026-23193: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (bsc#1258414).
CVE-2026-23201: ceph: fix oops due to invalid pointer for kfree() in parse_longname() (bsc#1258337).
CVE-2026-23204: net: add skb_header_pointer_careful() helper (bsc#1258340).
CVE-2026-23215: x86/vmware: Fix hypercall clobbers (bsc#1258476).
CVE-2026-23216: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (bsc#1258447).
CVE-2026-23231: netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (bsc#1259188).
CVE-2026-23239: espintcp: Fix race condition in espintcp_close() (bsc#1259485).
CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1259484).
CVE-2026-23242: RDMA/siw: Fix potential NULL pointer dereference in header processing (bsc#1259795).
CVE-2026-23243: RDMA/umad: Reject negative data_len in ib_umad_write (bsc#1259797).
CVE-2026-23255: net: add proper RCU protection to /proc/net/ptype (bsc#1259891).
CVE-2026-23262: gve: Fix stats report corruption on queue count change (bsc#1259870).
CVE-2026-23270: net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (bsc#1259886).
CVE-2026-23272: netfilter: nf_tables: unconditionally bump set->nelems before insertion (bsc#1260009).
CVE-2026-23274: netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels (bsc#1260005).
CVE-2026-23277: net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit (bsc#1259997).
CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1259998).
CVE-2026-23281: wifi: libertas: fix use-after-free in lbs_free_adapter() (bsc#1260464).
CVE-2026-23292: scsi: target: Fix recursive locking in __configfs_open_file() (bsc#1260500).
CVE-2026-23293: net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled (bsc#1260486).
CVE-2026-23297: nfsd: Fix cred ref leak in nfsd_nl_threads_set_doit() (bsc#1260490).
CVE-2026-23304: ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() (bsc#1260544).
CVE-2026-23319: bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim (bsc#1260735).
CVE-2026-23326: xsk: Fix fragment node deletion to prevent buffer leak (bsc#1260606).
CVE-2026-23335: RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() (bsc#1260550).
CVE-2026-23343: xdp: produce a warning when calculated tailroom is negative (bsc#1260527).
CVE-2026-23361: PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry (bsc#1260732).
CVE-2026-23379: net/sched: ets: fix divide by zero in the offload path (bsc#1260481).
CVE-2026-23381: net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled (bsc#1260471).
CVE-2026-23383: bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing (bsc#1260497).
CVE-2026-23386: gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets…

Record: SUSE-SU-2026:21237-1
Updated: 2026-11-02

OSVSUSE-SU-2026:21255-1 No score

Security update for the Linux Kernel

The SUSE Linux Micro (RT) 6.0 and 6.1 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2024-38542: RDMA/mana_ib: boundary check before installing cq callbacks (bsc#1226591).
CVE-2025-39817: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (bsc#1249998).
CVE-2025-39998: scsi: target: target_core_configfs: Add length check to avoid buffer overflow (bsc#1252073).
CVE-2025-40201: kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths (bsc#1253455).
CVE-2025-40253: s390/ctcm: Fix double-kfree (bsc#1255084).
CVE-2025-68794: iomap: adjust read range correctly for non-block-aligned positions (bsc#1256647).
CVE-2025-71125: tracing: Do not register unsupported perf events (bsc#1256784).
CVE-2025-71268: btrfs: fix reservation leak in some error paths when inserting inline extent (bsc#1259865).
CVE-2025-71269: btrfs: do not free data reservation in fallback from inline due to -ENOSPC (bsc#1259889).
CVE-2026-23030: phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() (bsc#1257561).
CVE-2026-23047: libceph: make calc_target() set t->paused, not just clear it (bsc#1257682).
CVE-2026-23069: vsock/virtio: fix potential underflow in virtio_transport_get_credit() (bsc#1257755).
CVE-2026-23088: tracing: Fix crash on synthetic stacktrace field usage (bsc#1257814).
CVE-2026-23103: ipvlan: Make the addrs_lock be per port (bsc#1257773).
CVE-2026-23120: l2tp: avoid one data-race in l2tp_tunnel_del_work() (bsc#1258280).
CVE-2026-23125: sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT (bsc#1258293).
CVE-2026-23136: libceph: reset sparse-read state in osd_fault() (bsc#1258303).
CVE-2026-23140: bpf, test_run: Subtract size of xdp_frame from allowed metadata size (bsc#1258305).
CVE-2026-23154: net: fix segmentation of forwarding fraglist GRO (bsc#1258286).
CVE-2026-23169: mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() (bsc#1258389).
CVE-2026-23187: pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains (bsc#1258330).
CVE-2026-23193: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (bsc#1258414).
CVE-2026-23201: ceph: fix oops due to invalid pointer for kfree() in parse_longname() (bsc#1258337).
CVE-2026-23204: net/sched: cls_u32: use skb_header_pointer_careful() (bsc#1258340).
CVE-2026-23216: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (bsc#1258447).
CVE-2026-23231: netfilter: nf_tables: register hooks last when adding new chain/flowtable (bsc#1259188).
CVE-2026-23242: RDMA/siw: Fix potential NULL pointer dereference in header processing (bsc#1259795).
CVE-2026-23243: RDMA/umad: Reject negative data_len in ib_umad_write (bsc#1259797).
CVE-2026-23255: net: add proper RCU protection to /proc/net/ptype (bsc#1259891).
CVE-2026-23262: gve: Fix stats report corruption on queue count change (bsc#1259870).
CVE-2026-23270: net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (bsc#1259886).
CVE-2026-23272: netfilter: nf_tables: unconditionally bump set->nelems before insertion (bsc#1260009).
CVE-2026-23274: netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels (bsc#1260005).
CVE-2026-23277: net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit (bsc#1259997).
CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1259998).
CVE-2026-23281: wifi: libertas: fix use-after-free in lbs_free_adapter() (bsc#1260464).
CVE-2026-23292: scsi: target: Fix recursive locking in __configfs_open_file() (bsc#1260500).
CVE-2026-23293: net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled (bsc#1260486).
CVE-2026-23304: ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() (bsc#1260544).
CVE-2026-23317: drm/vmwgfx: Return the correct value in vmw_translate_ptr functions (bsc#1260562).
CVE-2026-23319: bpf: export…

Record: SUSE-SU-2026:21255-1
Updated: 2026-11-02

OSVSUSE-SU-2026:21352-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-39998: scsi: target: target_core_configfs: Add length check to avoid buffer overflow (bsc#1252073).
CVE-2025-40253: s390/ctcm: Fix double-kfree (bsc#1255084).
CVE-2025-68794: iomap: adjust read range correctly for non-block-aligned positions (bsc#1256647).
CVE-2025-71239: audit: add fchmodat2() to change attributes class (bsc#1259759).
CVE-2026-23072: l2tp: Fix memleak in l2tp_udp_encap_recv() (bsc#1257708).
CVE-2026-23103: ipvlan: Make the addrs_lock be per port (bsc#1257773).
CVE-2026-23120: l2tp: avoid one data-race in l2tp_tunnel_del_work() (bsc#1258280).
CVE-2026-23125: sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT (bsc#1258293).
CVE-2026-23138: kABI: Preserve values of the trace recursion bits (bsc#1258301).
CVE-2026-23140: bpf, test_run: Subtract size of xdp_frame from allowed metadata size (bsc#1258305).
CVE-2026-23187: pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains (bsc#1258330).
CVE-2026-23193: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (bsc#1258414).
CVE-2026-23201: ceph: fix oops due to invalid pointer for kfree() in parse_longname() (bsc#1258337).
CVE-2026-23204: net: add skb_header_pointer_careful() helper (bsc#1258340).
CVE-2026-23215: x86/vmware: Fix hypercall clobbers (bsc#1258476).
CVE-2026-23216: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (bsc#1258447).
CVE-2026-23231: netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (bsc#1259188).
CVE-2026-23239: espintcp: Fix race condition in espintcp_close() (bsc#1259485).
CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1259484).
CVE-2026-23242: RDMA/siw: Fix potential NULL pointer dereference in header processing (bsc#1259795).
CVE-2026-23243: RDMA/umad: Reject negative data_len in ib_umad_write (bsc#1259797).
CVE-2026-23255: net: add proper RCU protection to /proc/net/ptype (bsc#1259891).
CVE-2026-23262: gve: Fix stats report corruption on queue count change (bsc#1259870).
CVE-2026-23270: net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (bsc#1259886).
CVE-2026-23272: netfilter: nf_tables: unconditionally bump set->nelems before insertion (bsc#1260009).
CVE-2026-23274: netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels (bsc#1260005).
CVE-2026-23277: net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit (bsc#1259997).
CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1259998).
CVE-2026-23281: wifi: libertas: fix use-after-free in lbs_free_adapter() (bsc#1260464).
CVE-2026-23292: scsi: target: Fix recursive locking in __configfs_open_file() (bsc#1260500).
CVE-2026-23293: net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled (bsc#1260486).
CVE-2026-23297: nfsd: Fix cred ref leak in nfsd_nl_threads_set_doit() (bsc#1260490).
CVE-2026-23304: ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() (bsc#1260544).
CVE-2026-23319: bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim (bsc#1260735).
CVE-2026-23326: xsk: Fix fragment node deletion to prevent buffer leak (bsc#1260606).
CVE-2026-23335: RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() (bsc#1260550).
CVE-2026-23343: xdp: produce a warning when calculated tailroom is negative (bsc#1260527).
CVE-2026-23361: PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry (bsc#1260732).
CVE-2026-23379: net/sched: ets: fix divide by zero in the offload path (bsc#1260481).
CVE-2026-23381: net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled (bsc#1260471).
CVE-2026-23383: bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing (bsc#1260497).
CVE-2026-23386: gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets…

Record: SUSE-SU-2026:21352-1
Updated: 2026-11-02

OSVSUSE-SU-2026:21361-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-39998: scsi: target: target_core_configfs: Add length check to avoid buffer overflow (bsc#1252073).
CVE-2025-40253: s390/ctcm: Fix double-kfree (bsc#1255084).
CVE-2025-68794: iomap: adjust read range correctly for non-block-aligned positions (bsc#1256647).
CVE-2025-71239: audit: add fchmodat2() to change attributes class (bsc#1259759).
CVE-2026-23072: l2tp: Fix memleak in l2tp_udp_encap_recv() (bsc#1257708).
CVE-2026-23103: ipvlan: Make the addrs_lock be per port (bsc#1257773).
CVE-2026-23120: l2tp: avoid one data-race in l2tp_tunnel_del_work() (bsc#1258280).
CVE-2026-23125: sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT (bsc#1258293).
CVE-2026-23138: kABI: Preserve values of the trace recursion bits (bsc#1258301).
CVE-2026-23140: bpf, test_run: Subtract size of xdp_frame from allowed metadata size (bsc#1258305).
CVE-2026-23187: pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains (bsc#1258330).
CVE-2026-23193: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (bsc#1258414).
CVE-2026-23201: ceph: fix oops due to invalid pointer for kfree() in parse_longname() (bsc#1258337).
CVE-2026-23204: net: add skb_header_pointer_careful() helper (bsc#1258340).
CVE-2026-23215: x86/vmware: Fix hypercall clobbers (bsc#1258476).
CVE-2026-23216: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (bsc#1258447).
CVE-2026-23231: netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (bsc#1259188).
CVE-2026-23239: espintcp: Fix race condition in espintcp_close() (bsc#1259485).
CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1259484).
CVE-2026-23242: RDMA/siw: Fix potential NULL pointer dereference in header processing (bsc#1259795).
CVE-2026-23243: RDMA/umad: Reject negative data_len in ib_umad_write (bsc#1259797).
CVE-2026-23255: net: add proper RCU protection to /proc/net/ptype (bsc#1259891).
CVE-2026-23262: gve: Fix stats report corruption on queue count change (bsc#1259870).
CVE-2026-23270: net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (bsc#1259886).
CVE-2026-23272: netfilter: nf_tables: unconditionally bump set->nelems before insertion (bsc#1260009).
CVE-2026-23274: netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels (bsc#1260005).
CVE-2026-23277: net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit (bsc#1259997).
CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1259998).
CVE-2026-23281: wifi: libertas: fix use-after-free in lbs_free_adapter() (bsc#1260464).
CVE-2026-23292: scsi: target: Fix recursive locking in __configfs_open_file() (bsc#1260500).
CVE-2026-23293: net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled (bsc#1260486).
CVE-2026-23297: nfsd: Fix cred ref leak in nfsd_nl_threads_set_doit() (bsc#1260490).
CVE-2026-23304: ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() (bsc#1260544).
CVE-2026-23319: bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim (bsc#1260735).
CVE-2026-23326: xsk: Fix fragment node deletion to prevent buffer leak (bsc#1260606).
CVE-2026-23335: RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() (bsc#1260550).
CVE-2026-23343: xdp: produce a warning when calculated tailroom is negative (bsc#1260527).
CVE-2026-23361: PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry (bsc#1260732).
CVE-2026-23379: net/sched: ets: fix divide by zero in the offload path (bsc#1260481).
CVE-2026-23381: net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled (bsc#1260471).
CVE-2026-23383: bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing (bsc#1260497).
CVE-2026-23386: gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets…

Record: SUSE-SU-2026:21361-1
Updated: 2026-11-02

OSVUSN-8567-1 No score

linux, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-realtime, linux-realtime-6.8 vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
Drivers core;
Power management core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
Character device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
Counter interface drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
DMA engine subsystem;
EDAC drivers;
EFI core;
GPU drivers;
Greybus drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
Input Device (Miscellaneous) drivers;
IRQ chip drivers;
LED subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
MediaTek SMI driver;
NVIDIA Tegra memory controller driver;
Fastrpc Driver;
IBM Advanced System Management driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Ethernet team driver;
MediaTek network drivers;
Near Field Communication (NFC) drivers;
NTB driver;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
Device tree and open firmware driver;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
Broadcom BCM2835 power domain driver;
Generic PM domains;
i.MX PM domains;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
SLIMbus drivers;
Freescale SoC drivers;
Microchip PolarFire SoC system controller driver;
SPI subsystem;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
SM750 framebuffer staging driver;
TCM subsystem;
Thermal drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
USB Device Class drivers;
ULPI bus;
USB core drivers;
DesignWare USB2 driver;
USB Gadget drivers;
USB Host Controller drivers;
Mustek MDC800 USB digital camera driver;
USB YUREX driver;
Renesas USBHS Controller drivers;
USB Type-C Connector System Software Interface driver;
VFIO drivers;
Framebuffer layer;
TSM TDX Guest driver;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EROFS file system;
Ext4 file system;
F2FS file system;
FUSE (File system in Userspace);
GFS2 file system;
HFS+ file system;
Journaling layer for block devices (JBD2);
Network file systems library;
Network…

Record: USN-8567-1
Updated: 2026-11-03

OSVUSN-8574-1 No score

linux-gcp-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
Drivers core;
Power management core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
Character device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
Counter interface drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
DMA engine subsystem;
EDAC drivers;
EFI core;
GPU drivers;
Greybus drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
Input Device (Miscellaneous) drivers;
IRQ chip drivers;
LED subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
MediaTek SMI driver;
NVIDIA Tegra memory controller driver;
Fastrpc Driver;
IBM Advanced System Management driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Ethernet team driver;
MediaTek network drivers;
Near Field Communication (NFC) drivers;
NTB driver;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
Device tree and open firmware driver;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
Broadcom BCM2835 power domain driver;
Generic PM domains;
i.MX PM domains;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
SLIMbus drivers;
Freescale SoC drivers;
Microchip PolarFire SoC system controller driver;
SPI subsystem;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
SM750 framebuffer staging driver;
TCM subsystem;
Thermal drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
USB Device Class drivers;
ULPI bus;
USB core drivers;
DesignWare USB2 driver;
USB Gadget drivers;
USB Host Controller drivers;
Mustek MDC800 USB digital camera driver;
USB YUREX driver;
Renesas USBHS Controller drivers;
USB Type-C Connector System Software Interface driver;
VFIO drivers;
Framebuffer layer;
TSM TDX Guest driver;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EROFS file system;
Ext4 file system;
F2FS file system;
FUSE (File system in Userspace);
GFS2 file system;
HFS+ file system;
Journaling layer for block devices (JBD2);
Network file systems library;
Network…

Record: USN-8574-1
Updated: 2026-11-03

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`kernel` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-64k` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-64k-core` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-64k-debug` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-64k-debug-core` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-64k-debug-devel` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-64k-debug-devel-matched` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-64k-debug-modules` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-64k-debug-modules-core` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-64k-debug-modules-extra` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-64k-devel` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-64k-devel-matched` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-64k-modules` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-64k-modules-core` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-64k-modules-extra` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-abi-stablelists` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-core` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-cross-headers` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-debug` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-debug-core` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-debug-devel` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-debug-devel-matched` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-debug-modules` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-debug-modules-core` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-debug-modules-extra` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-debug-uki-virt` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-devel` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-devel-matched` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-doc` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-headers` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-modules` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-modules-core` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-modules-extra` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-rt` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-rt-64k` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-rt-64k-core` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-rt-64k-debug` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-rt-64k-debug-core` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-rt-64k-debug-devel` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-rt-64k-debug-modules` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-rt-64k-debug-modules-core` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-rt-64k-debug-modules-extra` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-rt-64k-devel` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-rt-64k-modules` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-rt-64k-modules-core` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-rt-64k-modules-extra` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-rt-core` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-rt-debug` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-rt-debug-core` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-rt-debug-devel` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-rt-debug-modules` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-rt-debug-modules-core` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-rt-debug-modules-extra` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-rt-devel` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-rt-modules` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-rt-modules-core` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-rt-modules-extra` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-tools` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-tools-libs` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`kernel-tools-libs-devel` AlmaLinux:9	before 5.14.0-611.54.1.el9_7	5.14.0-611.54.1.el9_7
`linux-lts` Alpaquita:23	6.1.164-r0 up to 6.1.167-r0	6.1.167-r0
`linux-lts` Alpaquita:25	6.12.74-r0 up to 6.12.80-r0	6.12.80-r0
`linux-lts` Alpaquita:stream	6.12.92-r1 up to 6.18.35-r1	6.18.35-r1
`bpftool` TuxCare:AlmaLinux:9.2	before 7.0.0-284.1101.el9_2.tuxcare.11.els2	7.0.0-284.1101.el9_2.tuxcare.11.els2
`kernel` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-64k` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-64k-core` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-64k-debug` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-64k-debug-core` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-64k-debug-devel` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-64k-debug-devel-matched` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-64k-debug-modules` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-64k-debug-modules-core` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-64k-debug-modules-extra` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-64k-debug-modules-internal` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-64k-debug-modules-partner` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-64k-devel` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-64k-devel-matched` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-64k-modules` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-64k-modules-core` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-64k-modules-extra` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-64k-modules-internal` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-64k-modules-partner` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-abi-stablelists` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-core` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-cross-headers` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-debug` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-debug-core` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-debug-devel` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-debug-devel-matched` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-debug-modules` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-debug-modules-core` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-debug-modules-extra` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-debug-modules-internal` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-debug-modules-partner` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-debug-uki-virt` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-devel` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-devel-matched` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-doc` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-headers` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-ipaclones-internal` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-modules` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-modules-core` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-modules-extra` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-modules-internal` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-modules-partner` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-selftests-internal` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-tools` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-tools-libs` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-tools-libs-devel` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-uki-virt` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`libbpf` TuxCare:AlmaLinux:9.2	before 2:1.0.0-2.el9_2.tuxcare.11.els2	2:1.0.0-2.el9_2.tuxcare.11.els2
`libbpf-devel` TuxCare:AlmaLinux:9.2	before 2:1.0.0-2.el9_2.tuxcare.11.els2	2:1.0.0-2.el9_2.tuxcare.11.els2
`libbpf-static` TuxCare:AlmaLinux:9.2	before 2:1.0.0-2.el9_2.tuxcare.11.els2	2:1.0.0-2.el9_2.tuxcare.11.els2
`perf` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`python3-perf` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`rtla` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els2	5.14.0-570.62.1.el9_6.tuxcare.5.els2
`kernel-abi-stablelists` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els2	5.14.0-570.62.1.el9_6.tuxcare.5.els2
`kernel-core` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els2	5.14.0-570.62.1.el9_6.tuxcare.5.els2
`kernel-cross-headers` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els2	5.14.0-570.62.1.el9_6.tuxcare.5.els2
`kernel-debug` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els2	5.14.0-570.62.1.el9_6.tuxcare.5.els2
`kernel-debug-core` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els2	5.14.0-570.62.1.el9_6.tuxcare.5.els2
`Kernel` Linux	before 5.15.203, 5.16.0 up to 6.1.167, 6.2.0 up to 6.6.130, 6.7.0 up to 6.12.77, 6.8.0 up to 6.18.18, 6.13.0 up to 6.19.8	5.15.2036.1.1676.6.1306.12.776.18.186.19.8
`linux` Debian:12	before 6.1.170-1, plus listed versions 6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1 Show 43 moreShow less 6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1	6.1.170-1
`linux` Debian:13	before 6.12.85-1, plus listed versions 6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-1 Show 12 moreShow less 6.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-1~bpo12+1	6.12.85-1
`linux` Debian:14	before 6.19.8-1, plus listed versions 6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1 Show 45 moreShow less 6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1	6.19.8-1
`kernel` openEuler:24.03-LTS	before 6.6.0-145.0.2.130.oe2403	6.6.0-145.0.2.130.oe2403
`kernel` openEuler:24.03-LTS-SP1	before 6.6.0-145.0.2.142.oe2403sp1	6.6.0-145.0.2.142.oe2403sp1
`kernel` openEuler:24.03-LTS-SP2	before 6.6.0-145.0.2.143.oe2403sp2	6.6.0-145.0.2.143.oe2403sp2
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-64k-debug-devel` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-64k-debug-devel-matched` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-64k-devel` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-64k-devel-matched` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-debug-devel` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-debug-devel-matched` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-devel` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-devel-matched` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-doc` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-rt-64k-debug-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-rt-64k-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-rt-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-tools-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-zfcpdump-devel-matched` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`libperf-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`perf` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`perf-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`python3-perf` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`python3-perf-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`rtla` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`rv` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-64k` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-64k-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-64k-debug` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-64k-debug-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-64k-debug-modules` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-64k-debug-modules-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-64k-debug-modules-extra` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-64k-modules` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-64k-modules-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-64k-modules-extra` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-abi-stablelists` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-debug` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-debug-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-debug-modules` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-debug-modules-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-debug-modules-extra` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-debug-uki-virt` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-debuginfo` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel-modules` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel` Rocky Linux:9	before 0:5.14.0-611.54.1.el9_7	0:5.14.0-611.54.1.el9_7
`kernel` Rocky Linux:10	before 0:6.12.0-124.55.1.el10_1	0:6.12.0-124.55.1.el10_1
`kernel` Rocky Linux:9	before 0:5.14.0-687.10.1.el9_8.0.1	0:5.14.0-687.10.1.el9_8.0.1
`kernel` Rocky Linux:10	before 0:6.12.0-211.16.1.el10_2.0.1	0:6.12.0-211.16.1.el10_2.0.1
`kernel` Rocky Linux:8	before 0:4.18.0-553.126.1.el8_10	0:4.18.0-553.126.1.el8_10
`kernel-rt` Rocky Linux:8	before 0:4.18.0-553.126.1.rt7.467.el8_10	0:4.18.0-553.126.1.rt7.467.el8_10
`linux` Root:Debian:12	before 6.1.190-1.aikido.167	6.1.190-1.aikido.167
`rootio-linux` Root:Debian:12	before 6.1.190-1.aikido.167	6.1.190-1.aikido.167
`linux` Root:Debian:13	before 6.12.115-2.aikido.164	6.12.115-2.aikido.164
`rootio-linux` Root:Debian:13	before 6.12.115-2.aikido.164	6.12.115-2.aikido.164
`linux` Root:Ubuntu:22.04	before 5.15.0-202.212.aikido.118	5.15.0-202.212.aikido.118
`rootio-linux` Root:Ubuntu:22.04	before 5.15.0-202.212.aikido.118	5.15.0-202.212.aikido.118
`linux` Root:Ubuntu:24.04	before 6.8.0-147.147.aikido.90	6.8.0-147.147.aikido.90
`rootio-linux` Root:Ubuntu:24.04	before 6.8.0-147.147.aikido.90	6.8.0-147.147.aikido.90
`kernel` Rocky Linux:9	before 0:5.14.0-611.54.1.el9_7.cloud.1.0	0:5.14.0-611.54.1.el9_7.cloud.1.0
`kernel-livepatch-SLE15-SP7-RT_Update_11` SUSE:Linux Enterprise Live Patching 15 SP7	before 1-150700.1.3.1	1-150700.1.3.1
`kernel-rt` SUSE:Real Time Module 15 SP7	before 6.4.0-150700.7.37.2	6.4.0-150700.7.37.2
`kernel-source-rt` SUSE:Real Time Module 15 SP7	before 6.4.0-150700.7.37.2	6.4.0-150700.7.37.2
`kernel-syms-rt` SUSE:Real Time Module 15 SP7	before 6.4.0-150700.7.37.1	6.4.0-150700.7.37.1
`kernel-default` SUSE:Linux Micro 6.1	before 6.4.0-41.1	6.4.0-41.1
`kernel-default-base` SUSE:Linux Micro 6.1	before 6.4.0-41.1.21.18	6.4.0-41.1.21.18
`kernel-kvmsmall` SUSE:Linux Micro 6.1	before 6.4.0-41.1	6.4.0-41.1
`kernel-source` SUSE:Linux Micro 6.1	before 6.4.0-41.1	6.4.0-41.1
`kernel-default` SUSE:Linux Micro 6.0	before 6.4.0-41.1	6.4.0-41.1
`kernel-default-base` SUSE:Linux Micro 6.0	before 6.4.0-41.1.21.18	6.4.0-41.1.21.18
`kernel-kvmsmall` SUSE:Linux Micro 6.0	before 6.4.0-41.1	6.4.0-41.1
`kernel-source` SUSE:Linux Micro 6.0	before 6.4.0-41.1	6.4.0-41.1
`gdk-pixbuf` SUSE:Linux Micro 6.2	before 2.42.12-160000.4.1	2.42.12-160000.4.1
`kernel-obs-build` SUSE:Linux Micro Extras 6.2	before 6.12.0-160000.28.1	6.12.0-160000.28.1
`kernel-syms` SUSE:Linux Micro Extras 6.2	before 6.12.0-160000.28.1	6.12.0-160000.28.1
`kernel-64kb` SUSE:Linux Micro 6.2	before 6.12.0-160000.28.1	6.12.0-160000.28.1
`kernel-default` SUSE:Linux Micro 6.2	before 6.12.0-160000.28.1	6.12.0-160000.28.1
`kernel-default-base` SUSE:Linux Micro 6.2	before 6.12.0-160000.27.1.160000.2.8	6.12.0-160000.27.1.160000.2.8
`kernel-rt` SUSE:Linux Micro 6.2	before 6.12.0-160000.28.1	6.12.0-160000.28.1
`kernel-source` SUSE:Linux Micro 6.2	before 6.12.0-160000.28.1	6.12.0-160000.28.1
`kernel-rt` SUSE:Linux Micro 6.1	before 6.4.0-41.1	6.4.0-41.1
`kernel-source-rt` SUSE:Linux Micro 6.1	before 6.4.0-41.1	6.4.0-41.1
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-aws-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-aws-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less 5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1	None known
`linux-aws-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1112.119~20.04.1, plus listed versions 5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1 Show 45 moreShow less 5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1	5.15.0-1112.119~20.04.1
`linux-aws-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1	None known
`linux-azure-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less 5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2	None known
`linux-azure-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less 5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1	None known
`linux-azure-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1117.126~20.04.1, plus listed versions 5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1 Show 45 moreShow less 5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1	5.15.0-1117.126~20.04.1
`linux-azure-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1	None known
`linux-azure-fde` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less 5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1	None known
`linux-azure-fde-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1117.126~20.04.2, plus listed versions 5.15.0-1019.24~20.04.1.15.15.0-1020.25~20.04.1.15.15.0-1021.26~20.04.1.15.15.0-1029.36~20.04.1.15.15.0-1030.37~20.04.1.1 Show 45 moreShow less 5.15.0-1031.38~20.04.1.15.15.0-1033.40~20.04.1.15.15.0-1034.41~20.04.1.25.15.0-1035.42~20.04.1.15.15.0-1036.43~20.04.1.15.15.0-1037.44~20.04.1.15.15.0-1038.45~20.04.1.15.15.0-1039.46~20.04.1.15.15.0-1040.47~20.04.1.15.15.0-1041.48~20.04.1.15.15.0-1042.49~20.04.1.15.15.0-1043.50~20.04.1.15.15.0-1046.53~20.04.1.15.15.0-1047.54~20.04.1.15.15.0-1049.56~20.04.1.15.15.0-1050.57~20.04.1.15.15.0-1051.59~20.04.1.15.15.0-1052.60~20.04.1.15.15.0-1053.61~20.04.1.15.15.0-1054.62~20.04.1.15.15.0-1056.64~20.04.1.15.15.0-1057.65~20.04.1.15.15.0-1058.66~20.04.2.15.15.0-1059.67~20.04.1.15.15.0-1060.69~20.04.1.15.15.0-1061.70~20.04.1.15.15.0-1063.72~20.04.1.15.15.0-1064.73~20.04.1.15.15.0-1065.74~20.04.1.15.15.0-1067.76~20.04.1.15.15.0-1068.77~20.04.1.15.15.0-1070.79~20.04.1.15.15.0-1071.80~20.04.1.15.15.0-1072.81~20.04.1.15.15.0-1073.82~20.04.1.15.15.0-1074.83~20.04.1.15.15.0-1076.85~20.04.1.15.15.0-1078.87~20.04.1.15.15.0-1081.90~20.04.1.15.15.0-1082.91~20.04.1.15.15.0-1086.95~20.04.1.15.15.0-1087.96~20.04.1.15.15.0-1088.97~20.04.1.15.15.0-1089.98~20.04.1.15.15.0-1091.100~20.04.1.1	5.15.0-1117.126~20.04.2
`linux-gcp-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less 5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3	None known
`linux-gcp-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less 5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1	None known
`linux-gcp-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1112.122~20.04.1, plus listed versions 5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2 Show 45 moreShow less 5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.15.15.0-1065.73~20.04.15.15.0-1066.74~20.04.15.15.0-1067.75~20.04.15.15.0-1068.76~20.04.15.15.0-1069.77~20.04.15.15.0-1070.78~20.04.15.15.0-1071.79~20.04.15.15.0-1072.80~20.04.15.15.0-1073.81~20.04.15.15.0-1074.83~20.04.1	5.15.0-1112.122~20.04.1
`linux-gcp-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41	None known
`linux-gke` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less 5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111	None known
`linux-gke-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less 5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1	None known
`linux-gkeop` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less 5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77	None known
`linux-gkeop-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 40 moreShow less 5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1	None known
`linux-hwe-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less 5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1	None known
`linux-hwe-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less 5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1	None known
`linux-hwe-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-186.196~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 45 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1	5.15.0-186.196~20.04.1
`linux-hwe-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less 5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1	None known
`linux-ibm-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1106.110~20.04.1, plus listed versions 5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1 Show 45 moreShow less 5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.15.15.0-1057.60~20.04.15.15.0-1058.61~20.04.15.15.0-1059.62~20.04.15.15.0-1060.63~20.04.15.15.0-1061.64~20.04.15.15.0-1062.65~20.04.15.15.0-1063.66~20.04.15.15.0-1064.67~20.04.15.15.0-1065.68~20.04.15.15.0-1066.69~20.04.15.15.0-1067.70~20.04.15.15.0-1068.71~20.04.15.15.0-1069.72~20.04.15.15.0-1074.77~20.04.15.15.0-1075.78~20.04.15.15.0-1076.79~20.04.15.15.0-1078.81~20.04.15.15.0-1079.82~20.04.15.15.0-1080.83~20.04.15.15.0-1081.84~20.04.15.15.0-1083.86~20.04.15.15.0-1085.88~20.04.15.15.0-1086.89~20.04.15.15.0-1087.90~20.04.15.15.0-1089.92~20.04.15.15.0-1090.93~20.04.15.15.0-1091.94~20.04.15.15.0-1092.95~20.04.15.15.0-1093.96~20.04.15.15.0-1094.97~20.04.1	5.15.0-1106.110~20.04.1
`linux-intel-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19	None known
`linux-intel-iotg-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1107.113~20.04.1, plus listed versions 5.15.0-1003.5~20.04.15.15.0-1008.11~20.04.15.15.0-1010.14~20.04.15.15.0-1015.20~20.04.25.15.0-1016.21~20.04.1 Show 45 moreShow less 5.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1021.26~20.04.15.15.0-1023.28~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1030.35~20.04.15.15.0-1031.36~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1040.46~20.04.15.15.0-1043.49~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1060.66~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.25.15.0-1074.80~20.04.15.15.0-1077.83~20.04.15.15.0-1078.84~20.04.15.15.0-1079.85~20.04.15.15.0-1083.89~20.04.15.15.0-1084.90~20.04.15.15.0-1085.91~20.04.15.15.0-1086.92~20.04.1	5.15.0-1107.113~20.04.1
`linux-lowlatency-hwe-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-184.194~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 45 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.88~20.04.15.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.95~20.04.15.15.0-87.96~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-110.120~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1	5.15.0-184.194~20.04.1
`linux-nvidia-tegra-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1064.66~20.04.1, plus listed versions 5.15.0-1009.9~20.04.15.15.0-1010.10~20.04.15.15.0-1012.12~20.04.15.15.0-1014.14~20.04.15.15.0-1015.15~20.04.1 Show 31 moreShow less 5.15.0-1016.16~20.04.15.15.0-1017.17~20.04.15.15.0-1018.18~20.04.15.15.0-1019.19~20.04.15.15.0-1020.20~20.04.15.15.0-1022.22~20.04.15.15.0-1025.25~20.04.15.15.0-1027.27~20.04.15.15.0-1030.30~20.04.15.15.0-1032.32~20.04.15.15.0-1039.39~20.04.15.15.0-1040.40~20.04.15.15.0-1041.41~20.04.15.15.0-1042.42~20.04.15.15.0-1043.43~20.04.15.15.0-1044.44~20.04.15.15.0-1045.45~20.04.15.15.0-1046.46~20.04.15.15.0-1047.47~20.04.15.15.0-1048.48~20.04.15.15.0-1049.49~20.04.15.15.0-1050.50~20.04.15.15.0-1051.51~20.04.15.15.0-1052.52~20.04.25.15.0-1053.53~20.04.15.15.0-1055.55~20.04.15.15.0-1057.57~20.04.15.15.0-1058.58~20.04.15.15.0-1060.60~20.04.15.15.0-1061.61~20.04.15.15.0-1063.63~20.04.1	5.15.0-1064.66~20.04.1
`linux-oem-5.10` Ubuntu:20.04:LTS	All versions, plus listed versions 5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17 Show 21 moreShow less 5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61	None known
`linux-oem-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21 Show 7 moreShow less 5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36	None known
`linux-oem-5.14` Ubuntu:20.04:LTS	All versions, plus listed versions 5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10 Show 30 moreShow less 5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67	None known
`linux-oem-5.6` Ubuntu:20.04:LTS	All versions, plus listed versions 5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13 Show 24 moreShow less 5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60	None known
`linux-oracle-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-oracle-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1 Show 7 moreShow less 5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1	None known
`linux-oracle-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1109.115~20.04.1, plus listed versions 5.15.0-1007.9~20.04.15.15.0-1013.17~20.04.15.15.0-1016.20~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.1 Show 45 moreShow less 5.15.0-1019.24~20.04.15.15.0-1021.27~20.04.15.15.0-1022.28~20.04.15.15.0-1025.31~20.04.25.15.0-1027.33~20.04.15.15.0-1029.35~20.04.15.15.0-1030.36~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1041.47~20.04.15.15.0-1042.48~20.04.15.15.0-1044.50~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1047.53~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1053.59~20.04.15.15.0-1054.60~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1074.80~20.04.1	5.15.0-1109.115~20.04.1
`linux-oracle-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1	None known
`linux-raspi2` Ubuntu:20.04:LTS	All versions, plus listed versions 5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6	None known
`linux-riscv` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34 Show 7 moreShow less 5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45	None known
`linux-riscv-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1 Show 8 moreShow less 5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35	None known
`linux-riscv-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1106.110~20.04.1, plus listed versions 5.15.0-1015.17~20.04.15.15.0-1017.19~20.04.15.15.0-1018.21~20.04.15.15.0-1019.22~20.04.15.15.0-1022.26~20.04.1 Show 45 moreShow less 5.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1029.33~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1032.36~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.25.15.0-1037.41~20.04.25.15.0-1038.42~20.04.25.15.0-1039.43~20.04.25.15.0-1040.44~20.04.35.15.0-1041.45~20.04.15.15.0-1043.47~20.04.15.15.0-1044.48~20.04.15.15.0-1045.49~20.04.15.15.0-1046.50~20.04.15.15.0-1047.51~20.04.15.15.0-1048.52~20.04.15.15.0-1049.53~20.04.25.15.0-1050.54~20.04.15.15.0-1051.55~20.04.15.15.0-1052.56~20.04.15.15.0-1053.57~20.04.15.15.0-1056.60~20.04.15.15.0-1057.61~20.04.15.15.0-1058.62~20.04.15.15.0-1059.63~20.04.15.15.0-1060.64~20.04.15.15.0-1061.65~20.04.15.15.0-1062.66~20.04.15.15.0-1063.67~20.04.15.15.0-1064.68~20.04.15.15.0-1065.69~20.04.15.15.0-1066.70~20.04.15.15.0-1067.71~20.04.15.15.0-1068.72~20.04.15.15.0-1069.73~20.04.15.15.0-1070.74~20.04.15.15.0-1071.75~20.04.15.15.0-1072.76~20.04.1	5.15.0-1106.110~20.04.1
`linux-riscv-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1 Show 5 moreShow less 5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1	None known
`linux` Ubuntu:22.04:LTS	before 5.15.0-186.196, plus listed versions 5.13.0-19.195.15.0-17.175.15.0-18.185.15.0-22.225.15.0-23.23 Show 45 moreShow less 5.15.0-25.255.15.0-27.285.15.0-30.315.15.0-33.345.15.0-35.365.15.0-37.395.15.0-39.425.15.0-40.435.15.0-41.445.15.0-43.465.15.0-46.495.15.0-47.515.15.0-48.545.15.0-50.565.15.0-52.585.15.0-53.595.15.0-56.625.15.0-57.635.15.0-58.645.15.0-60.665.15.0-67.745.15.0-69.765.15.0-70.775.15.0-71.785.15.0-72.795.15.0-73.805.15.0-75.825.15.0-76.835.15.0-78.855.15.0-79.865.15.0-82.915.15.0-83.925.15.0-84.935.15.0-86.965.15.0-87.975.15.0-88.985.15.0-89.995.15.0-91.1015.15.0-92.1025.15.0-94.1045.15.0-97.1075.15.0-100.1105.15.0-101.1115.15.0-102.1125.15.0-105.115	5.15.0-186.196
`linux-allwinner-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1	None known
`linux-aws` Ubuntu:22.04:LTS	before 5.15.0-1112.119, plus listed versions 5.13.0-1005.65.15.0-1002.45.15.0-1003.55.15.0-1004.65.15.0-1005.7 Show 45 moreShow less 5.15.0-1008.105.15.0-1009.115.15.0-1011.145.15.0-1013.175.15.0-1014.185.15.0-1015.195.15.0-1017.215.15.0-1019.235.15.0-1020.245.15.0-1021.255.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.325.15.0-1030.345.15.0-1031.355.15.0-1033.375.15.0-1034.385.15.0-1035.395.15.0-1036.405.15.0-1037.415.15.0-1038.435.15.0-1039.445.15.0-1040.455.15.0-1042.475.15.0-1043.485.15.0-1044.495.15.0-1045.505.15.0-1047.525.15.0-1048.535.15.0-1049.545.15.0-1050.555.15.0-1051.565.15.0-1052.575.15.0-1053.585.15.0-1055.605.15.0-1056.615.15.0-1057.635.15.0-1060.665.15.0-1061.675.15.0-1062.685.15.0-1063.695.15.0-1064.705.15.0-1065.71	5.15.0-1112.119
`linux-aws-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1 Show 5 moreShow less 5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1	None known
`dtb-aarch64` openSUSE:Leap 16.0	before 6.12.0-160000.28.1	6.12.0-160000.28.1
`kernel-64kb` openSUSE:Leap 16.0	before 6.12.0-160000.28.1	6.12.0-160000.28.1
`kernel-azure` openSUSE:Leap 16.0	before 6.12.0-160000.28.1	6.12.0-160000.28.1
`kernel-default` openSUSE:Leap 16.0	before 6.12.0-160000.28.1	6.12.0-160000.28.1
`kernel-default-base` openSUSE:Leap 16.0	before 6.12.0-160000.27.1.160000.2.8	6.12.0-160000.27.1.160000.2.8
`kernel-docs` openSUSE:Leap 16.0	before 6.12.0-160000.28.1	6.12.0-160000.28.1
`kernel-kvmsmall` openSUSE:Leap 16.0	before 6.12.0-160000.28.1	6.12.0-160000.28.1
`kernel-obs-build` openSUSE:Leap 16.0	before 6.12.0-160000.28.1	6.12.0-160000.28.1
`kernel-obs-qa` openSUSE:Leap 16.0	before 6.12.0-160000.28.1	6.12.0-160000.28.1
`kernel-rt` openSUSE:Leap 16.0	before 6.12.0-160000.28.1	6.12.0-160000.28.1
`kernel-source` openSUSE:Leap 16.0	before 6.12.0-160000.28.1	6.12.0-160000.28.1
`kernel-syms` openSUSE:Leap 16.0	before 6.12.0-160000.28.1	6.12.0-160000.28.1
`kernel-zfcpdump` openSUSE:Leap 16.0	before 6.12.0-160000.28.1	6.12.0-160000.28.1

History

History
Recorded	Changed	Sources
Nov 3, 2026	facts	OSV
Nov 3, 2026	affected	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-23270 is a high vulnerability (CVSS 7.8) in Linux, published March 18, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.13%, the 2nd percentile. Fixed in kernel 5.14.0-611.54.1.el9_7.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 1,428 package rows, 411 versions, 1,965 references and the rest of 17 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 25 source records.