CVE-2025-68183

ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr

Currently when both IMA and EVM are in fix mode, the IMA signature will be reset to IMA hash if a program first stores IMA signature in security.ima and then writes/removes some other security xattr for the file.

For example, on Fedora, after booting the kernel with "ima_appraise=fix evm=fix ima_policy=appraise_tcb" and installing rpm-plugin-ima, installing/reinstalling a package will not make good reference IMA signature generated. Instead IMA hash is generated,

# getfattr -m - -d -e hex /usr/bin/bash
# file: usr/bin/bash
security.ima=0x0404...

This happens because when setting security.selinux, the IMA_DIGSIG flag that had been set early was cleared. As a result, IMA hash is generated when the file is closed.

Similarly, IMA signature can be cleared on file close after removing security xattr like security.evm or setting/removing ACL.

Prevent replacing the IMA file signature with a file hash, by preventing the IMA_DIGSIG flag from being reset.

Here's a minimal C reproducer which sets security.selinux as the last step which can also replaced by removing security.evm or setting ACL,

#include <stdio.h>
#include <sys/xattr.h>
#include <fcntl.h>
#include <unistd.h>
#include <string.h>
#include <stdlib.h>

int main() {
    const char* file_path = "/usr/sbin/test_binary";
    const char* hex_string = "030204d33204490066306402304";
    int length = strlen(hex_string);
    char* ima_attr_value;
    int fd;

    fd = open(file_path, O_WRONLY|O_CREAT|O_EXCL, 0644);
    if (fd == -1) {
        perror("Error opening file");
        return 1;
    }

    ima_attr_value = (char*)malloc(length / 2 );
    for (int i = 0, j = 0; i < length; i += 2, j++) {
        sscanf(hex_string + i, "%2hhx", &ima_attr_value[j]);
    }

    if (fsetxattr(fd, "security.ima", ima_attr_value, length/2, 0) == -1) {
        perror("Error setting extended attribute");
        close(fd);
        return 1;
    }

    const char* selinux_value= "system_u:object_r:bin_t:s0";
    if (fsetxattr(fd, "security.selinux", selinux_value, strlen(selinux_value), 0) == -1) {
        perror("Error setting extended attribute");
        close(fd);
        return 1;
    }

    close(fd);

    return 0;
}

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.15%Up 0.1 points since Dec 17, 2025

What each source reports

CVE List Score used 7.8

ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr

In the Linux kernel, the following vulnerability has been resolved:

ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr

# getfattr -m - -d -e hex /usr/bin/bash
# file: usr/bin/bash
security.ima=0x0404...

This happens because when setting security.selinux, the IMA_DIGSIG flag that had been set early was cleared. As a result, IMA hash is generated when the file is closed.

Similarly, IMA signature can be cleared on file close after removing security xattr like security.evm or setting/removing ACL.

Prevent replacing the IMA file signature with a file hash, by preventing the IMA_DIGSIG flag from being reset.

Here's a minimal C reproducer which sets security.selinux as the last step which can also replaced by removing security.evm or setting ACL,

#include <stdio.h>
#include <sys/xattr.h>
#include <fcntl.h>
#include <unistd.h>
#include <string.h>
#include <stdlib.h>

int main() {
    const char* file_path = "/usr/sbin/test_binary";
    const char* hex_string = "030204d33204490066306402304";
    int length = strlen(hex_string);
    char* ima_attr_value;
    int fd;

    fd = open(file_path, O_WRONLY|O_CREAT|O_EXCL, 0644);
    if (fd == -1) {
        perror("Error opening file");
        return 1;
    }

    ima_attr_value = (char*)malloc(length / 2 );
    for (int i = 0, j = 0; i < length; i += 2, j++) {
        sscanf(hex_string + i, "%2hhx", &ima_attr_value[j]);
    }

    if (fsetxattr(fd, "security.ima", ima_attr_value, length/2, 0) == -1) {
        perror("Error setting extended attribute");
        close(fd);
        return 1;
    }

    const char* selinux_value= "system_u:object_r:bin_t:s0";
    if (fsetxattr(fd, "security.selinux", selinux_value, strlen(selinux_value), 0) == -1) {
        perror("Error setting extended attribute");
        close(fd);
        return 1;
    }

    close(fd);

    return 0;
}

Record: CVE-2025-68183
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

EUVDEUVD-2025-203713 7.8

In the Linux kernel, the following vulnerability has been resolved:

ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr

# getfattr -m - -d -e hex /usr/bin/bash
# file: usr/bin/bash
security.ima=0x0404...

This happens because when setting security.selinux, the IMA_DIGSIG flag that had been set early was cleared. As a result, IMA hash is generated when the file is closed.

Similarly, IMA signature can be cleared on file close after removing security xattr like security.evm or setting/removing ACL.

Prevent replacing the IMA file signature with a file hash, by preventing the IMA_DIGSIG flag from being reset.

Here's a minimal C reproducer which sets security.selinux as the last step which can also replaced by removing security.evm or setting ACL,

#include <stdio.h>
#include <sys/xattr.h>
#include <fcntl.h>
#include <unistd.h>
#include <string.h>
#include <stdlib.h>

int main() {
    const char* file_path = "/usr/sbin/test_binary";
    const char* hex_string = "030204d33204490066306402304";
    int length = strlen(hex_string);
    char* ima_attr_value;
    int fd;

    fd = open(file_path, O_WRONLY|O_CREAT|O_EXCL, 0644);
    if (fd == -1) {
        perror("Error opening file");
        return 1;
    }

    ima_attr_value = (char*)malloc(length / 2 );
    for (int i = 0, j = 0; i < length; i += 2, j++) {
        sscanf(hex_string + i, "%2hhx", &ima_attr_value[j]);
    }

    if (fsetxattr(fd, "security.ima", ima_attr_value, length/2, 0) == -1) {
        perror("Error setting extended attribute");
        close(fd);
        return 1;
    }

    const char* selinux_value= "system_u:object_r:bin_t:s0";
    if (fsetxattr(fd, "security.selinux", selinux_value, strlen(selinux_value), 0) == -1) {
        perror("Error setting extended attribute");
        close(fd);
        return 1;
    }

    close(fd);

    return 0;
}

Record: EUVD-2025-203713
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-w26q-x7h4-9gc5 7.8

In the Linux kernel, the following vulnerability has been resolved: ima: don't clear IMA_DIGSIG...

In the Linux kernel, the following vulnerability has been resolved:

ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr

# getfattr -m - -d -e hex /usr/bin/bash
# file: usr/bin/bash
security.ima=0x0404...

This happens because when setting security.selinux, the IMA_DIGSIG flag that had been set early was cleared. As a result, IMA hash is generated when the file is closed.

Similarly, IMA signature can be cleared on file close after removing security xattr like security.evm or setting/removing ACL.

Prevent replacing the IMA file signature with a file hash, by preventing the IMA_DIGSIG flag from being reset.

Here's a minimal C reproducer which sets security.selinux as the last step which can also replaced by removing security.evm or setting ACL,

#include <stdio.h>
#include <sys/xattr.h>
#include <fcntl.h>
#include <unistd.h>
#include <string.h>
#include <stdlib.h>

int main() {
    const char* file_path = "/usr/sbin/test_binary";
    const char* hex_string = "030204d33204490066306402304";
    int length = strlen(hex_string);
    char* ima_attr_value;
    int fd;

    fd = open(file_path, O_WRONLY|O_CREAT|O_EXCL, 0644);
    if (fd == -1) {
        perror("Error opening file");
        return 1;
    }

    ima_attr_value = (char*)malloc(length / 2 );
    for (int i = 0, j = 0; i < length; i += 2, j++) {
        sscanf(hex_string + i, "%2hhx", &ima_attr_value[j]);
    }

    if (fsetxattr(fd, "security.ima", ima_attr_value, length/2, 0) == -1) {
        perror("Error setting extended attribute");
        close(fd);
        return 1;
    }

    const char* selinux_value= "system_u:object_r:bin_t:s0";
    if (fsetxattr(fd, "security.selinux", selinux_value, strlen(selinux_value), 0) == -1) {
        perror("Error setting extended attribute");
        close(fd);
        return 1;
    }

    close(fd);

    return 0;
}

Record: GHSA-w26q-x7h4-9gc5
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr

# getfattr -m - -d -e hex /usr/bin/bash
# file: usr/bin/bash
security.ima=0x0404...

This happens because when setting security.selinux, the IMA_DIGSIG flag that had been set early was cleared. As a result, IMA hash is generated when the file is closed.

Similarly, IMA signature can be cleared on file close after removing security xattr like security.evm or setting/removing ACL.

Prevent replacing the IMA file signature with a file hash, by preventing the IMA_DIGSIG flag from being reset.

Here's a minimal C reproducer which sets security.selinux as the last step which can also replaced by removing security.evm or setting ACL,

#include <stdio.h>
#include <sys/xattr.h>
#include <fcntl.h>
#include <unistd.h>
#include <string.h>
#include <stdlib.h>

int main() {
    const char* file_path = "/usr/sbin/test_binary";
    const char* hex_string = "030204d33204490066306402304";
    int length = strlen(hex_string);
    char* ima_attr_value;
    int fd;

    fd = open(file_path, O_WRONLY|O_CREAT|O_EXCL, 0644);
    if (fd == -1) {
        perror("Error opening file");
        return 1;
    }

    ima_attr_value = (char*)malloc(length / 2 );
    for (int i = 0, j = 0; i < length; i += 2, j++) {
        sscanf(hex_string + i, "%2hhx", &ima_attr_value[j]);
    }

    if (fsetxattr(fd, "security.ima", ima_attr_value, length/2, 0) == -1) {
        perror("Error setting extended attribute");
        close(fd);
        return 1;
    }

    const char* selinux_value= "system_u:object_r:bin_t:s0";
    if (fsetxattr(fd, "security.selinux", selinux_value, strlen(selinux_value), 0) == -1) {
        perror("Error setting extended attribute");
        close(fd);
        return 1;
    }

    close(fd);

    return 0;
}

Record: CVE-2025-68183
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVBELL-CVE-2025-68183 7.8

Record: BELL-CVE-2025-68183
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-04

OSV 7.8

ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr

In the Linux kernel, the following vulnerability has been resolved:

ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr

# getfattr -m - -d -e hex /usr/bin/bash
# file: usr/bin/bash
security.ima=0x0404...

This happens because when setting security.selinux, the IMA_DIGSIG flag that had been set early was cleared. As a result, IMA hash is generated when the file is closed.

Similarly, IMA signature can be cleared on file close after removing security xattr like security.evm or setting/removing ACL.

Prevent replacing the IMA file signature with a file hash, by preventing the IMA_DIGSIG flag from being reset.

Here's a minimal C reproducer which sets security.selinux as the last step which can also replaced by removing security.evm or setting ACL,

#include <stdio.h>
#include <sys/xattr.h>
#include <fcntl.h>
#include <unistd.h>
#include <string.h>
#include <stdlib.h>

int main() {
    const char* file_path = "/usr/sbin/test_binary";
    const char* hex_string = "030204d33204490066306402304";
    int length = strlen(hex_string);
    char* ima_attr_value;
    int fd;

    fd = open(file_path, O_WRONLY|O_CREAT|O_EXCL, 0644);
    if (fd == -1) {
        perror("Error opening file");
        return 1;
    }

    ima_attr_value = (char*)malloc(length / 2 );
    for (int i = 0, j = 0; i < length; i += 2, j++) {
        sscanf(hex_string + i, "%2hhx", &ima_attr_value[j]);
    }

    if (fsetxattr(fd, "security.ima", ima_attr_value, length/2, 0) == -1) {
        perror("Error setting extended attribute");
        close(fd);
        return 1;
    }

    const char* selinux_value= "system_u:object_r:bin_t:s0";
    if (fsetxattr(fd, "security.selinux", selinux_value, strlen(selinux_value), 0) == -1) {
        perror("Error setting extended attribute");
        close(fd);
        return 1;
    }

    close(fd);

    return 0;
}

Record: CVE-2025-68183
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 48 moreShow less

OSVDEBIAN-CVE-2025-68183 7.8

In the Linux kernel, the following vulnerability has been resolved: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr Currently when both IMA and EVM are in fix mode, the IMA signature will be reset to IMA hash if a program first stores IMA signature in security.ima and then writes/removes some other security xattr for the file. For example, on Fedora, after booting the kernel with "ima_appraise=fix evm=fix ima_policy=appraise_tcb" and installing rpm-plugin-ima, installing/reinstalling a package will not make good reference IMA signature generated. Instead IMA hash is generated, # getfattr -m - -d -e hex /usr/bin/bash # file: usr/bin/bash security.ima=0x0404... This happens because when setting security.selinux, the IMA_DIGSIG flag that had been set early was cleared. As a result, IMA hash is generated when the file is closed. Similarly, IMA signature can be cleared on file close after removing security xattr like security.evm or setting/removing ACL. Prevent replacing the IMA file signature with a file hash, by preventing the IMA_DIGSIG flag from being reset. Here's a minimal C reproducer which sets security.selinux as the last step which can also replaced by removing security.evm or setting ACL, #include <stdio.h> #include <sys/xattr.h> #include <fcntl.h> #include <unistd.h> #include <string.h> #include <stdlib.h> int main() { const char* file_path = "/usr/sbin/test_binary"; const char* hex_string = "030204d33204490066306402304"; int length = strlen(hex_string); char* ima_attr_value; int fd; fd = open(file_path, O_WRONLY|O_CREAT|O_EXCL, 0644); if (fd == -1) { perror("Error opening file"); return 1; } ima_attr_value = (char*)malloc(length / 2 ); for (int i = 0, j = 0; i < length; i += 2, j++) { sscanf(hex_string + i, "%2hhx", &ima_attr_value[j]); } if (fsetxattr(fd, "security.ima", ima_attr_value, length/2, 0) == -1) { perror("Error setting extended attribute"); close(fd); return 1; } const char* selinux_value= "system_u:object_r:bin_t:s0"; if (fsetxattr(fd, "security.selinux", selinux_value, strlen(selinux_value), 0) == -1) { perror("Error setting extended attribute"); close(fd); return 1; } close(fd); return 0; }

Record: DEBIAN-CVE-2025-68183
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2026-2675 9.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

drm/i915/gt: Fix timeline left held on VMA alloc error

The following error has been reported sporadically by CI when a test unbinds the i915 driver on a ring submission platform:

<4> [239.330153] ------------[ cut here ]------------ <4> [239.330166] i915 0000:00:02.0: [drm] drm_WARN_ON(dev_priv->mm.shrink_count) <4> [239.330196] WARNING: CPU: 1 PID: 18570 at drivers/gpu/drm/i915/i915_gem.c:1309 i915_gem_cleanup_early+0x13e/0x150 [i915] ... <4> [239.330640] RIP: 0010:i915_gem_cleanup_early+0x13e/0x150 [i915] ... <4> [239.330942] Call Trace: <4> [239.330944] <TASK> <4> [239.330949] i915_driver_late_release+0x2b/0xa0 [i915] <4> [239.331202] i915_driver_release+0x86/0xa0 [i915] <4> [239.331482] devm_drm_dev_init_release+0x61/0x90 <4> [239.331494] devm_action_release+0x15/0x30 <4> [239.331504] release_nodes+0x3d/0x120 <4> [239.331517] devres_release_all+0x96/0xd0 <4> [239.331533] device_unbind_cleanup+0x12/0x80 <4> [239.331543] device_release_driver_internal+0x23a/0x280 <4> [239.331550] ? bus_find_device+0xa5/0xe0 <4> [239.331563] device_driver_detach+0x14/0x20 ... <4> [357.719679] ---[ end trace 0000000000000000 ]---

If the test also unloads the i915 module then that's followed with:

<3> [357.787478] ============================================================================= <3> [357.788006] BUG i915_vma (Tainted: G U W N ): Objects remaining on __kmem_cache_shutdown() <3> [357.788031] ----------------------------------------------------------------------------- <3> [357.788204] Object 0xffff888109e7f480 @offset=29824 <3> [357.788670] Allocated in i915_vma_instance+0xee/0xc10 [i915] age=292729 cpu=4 pid=2244 <4> [357.788994] i915_vma_instance+0xee/0xc10 [i915] <4> [357.789290] init_status_page+0x7b/0x420 [i915] <4> [357.789532] intel_engines_init+0x1d8/0x980 [i915] <4> [357.789772] intel_gt_init+0x175/0x450 [i915] <4> [357.790014] i915_gem_init+0x113/0x340 [i915] <4> [357.790281] i915_driver_probe+0x847/0xed0 [i915] <4> [357.790504] i915_pci_probe+0xe6/0x220 [i915] ...

Closer analysis of CI results history has revealed a dependency of the error on a few IGT tests, namely:

igt@api_intel_allocator@fork-simple-stress-signal,
igt@api_intel_allocator@two-level-inception-interruptible,
igt@gem_linear_blits@interruptible,
igt@prime_mmap_coherency@ioctl-errors, which invisibly trigger the issue, then exhibited with first driver unbind attempt.

All of the above tests perform actions which are actively interrupted with signals. Further debugging has allowed to narrow that scope down to DRM_IOCTL_I915_GEM_EXECBUFFER2, and ring_context_alloc(), specific to ring submission, in particular.

If successful then that function, or its execlists or GuC submission equivalent, is supposed to be called only once per GEM context engine, followed by raise of a flag that prevents the function from being called again. The function is expected to unwind its internal errors itself, so it may be safely called once more after it returns an error.

In case of ring submission, the function first gets a reference to the engine's legacy timeline and then allocates a VMA. If the VMA allocation fails, e.g. when i915_vma_instance() called from inside is interrupted with a signal, then ring_context_alloc() fails, leaving the timeline held referenced. On next I915_GEM_EXECBUFFER2 IOCTL, another reference to the timeline is got, and only that last one is put on successful completion. As a consequence, the legacy timeline, with its underlying engine status page's VMA object, is still held and not released on driver unbind.

Get the legacy timeline only after successful allocation of the…

Record: OESA-2026-2675
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:21556 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:21556
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:21557 7.5

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:21557
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVRHSA-2026:21706 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:21706
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:21745 7.8

Red Hat Security Advisory: kernel-rt security update

Record: RHSA-2026:21745
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:35904 7.1

Red Hat Security Advisory: kernel-rt security update

Record: RHSA-2026:35904
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2026:36073 7.1

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:36073
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2026:36767 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record: RHSA-2026:36767
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:38902 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record: RHSA-2026:38902
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:39371 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:39371
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:40068 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:40068
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:40760 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:40760
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:47633 7.1

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record: RHSA-2026:47633
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVRLSA-2026:21556 7.8

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CVE-2025-38653)
kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)
kernel: nbd: defer config unlock in nbd_genl_connect (CVE-2025-68366)
kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724)
kernel: iommu: disable SVA when CONFIG_X86 is set (CVE-2025-71089)
kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392)
kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)
kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)
kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)
kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)
kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)
kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)
kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)
kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)
kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect() (CVE-2026-43023)
kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110)
kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)
kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)
kernel: mm/page_alloc: clear page->private in free_pages_prepare() (CVE-2026-43303)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:21556
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:21557 7.5

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: can: j1939: j1939_session_new(): fix skb reference counting (CVE-2024-56645)
kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)
kernel: mm: thp: deny THP for files on anonymous inodes (CVE-2026-23375)
kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392)
kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)
kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)
kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)
kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)
kernel: io_uring/rsrc: reject zero-length fixed buffer import (CVE-2026-43006)
kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)
kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)
kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect() (CVE-2026-43023)
kernel: netfilter: ctnetlink: ensure safe access to master conntrack (CVE-2026-43116)
kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110)
kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)
kernel: Linux kernel dpaa2-switch: Kernel memory corruption via out-of-bounds write (CVE-2026-43205)
kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)
kernel: mm/page_alloc: clear page->private in free_pages_prepare() (CVE-2026-43303)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:21557
CVSS 3.1: 7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:21706 7.8

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)
kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)
kernel: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CVE-2025-68347)
kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116)
kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)
kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)
kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)
kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)
kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)
kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)
kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)
kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)
kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)
kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)
kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)
kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)
kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:21706
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:21745 7.8

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)
kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)
kernel: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CVE-2025-68347)
kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116)
kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)
kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)
kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)
kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)
kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)
kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)
kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)
kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)
kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)
kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)
kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)
kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)
kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:21745
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVROOT-OS-DEBIAN-12-CVE-2025-68183 5.5

CVE-2025-68183 in linux - Patched by Root

Root has patched CVE-2025-68183 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record: ROOT-OS-DEBIAN-12-CVE-2025-68183
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVROOT-OS-UBUNTU-2204-CVE-2025-68183 5.5

CVE-2025-68183 in linux - Patched by Root

Root has patched CVE-2025-68183 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record: ROOT-OS-UBUNTU-2204-CVE-2025-68183
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVROOT-OS-UBUNTU-2404-CVE-2025-68183 5.5

CVE-2025-68183 in linux - Patched by Root

Root has patched CVE-2025-68183 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record: ROOT-OS-UBUNTU-2404-CVE-2025-68183
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2025-68183 7.8

Record: UBUNTU-CVE-2025-68183
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVALSA-2026:21556 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CVE-2025-38653)
kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)
kernel: nbd: defer config unlock in nbd_genl_connect (CVE-2025-68366)
kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724)
kernel: iommu: disable SVA when CONFIG_X86 is set (CVE-2025-71089)
kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392)
kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)
kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)
kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)
kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)
kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)
kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)
kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)
kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)
kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect() (CVE-2026-43023)
kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110)
kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)
kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)
kernel: mm/page_alloc: clear page->private in free_pages_prepare() (CVE-2026-43303)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:21556
Updated: 2026-11-02

OSVALSA-2026:21557 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: can: j1939: j1939_session_new(): fix skb reference counting (CVE-2024-56645)
kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)
kernel: mm: thp: deny THP for files on anonymous inodes (CVE-2026-23375)
kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392)
kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)
kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)
kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)
kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)
kernel: io_uring/rsrc: reject zero-length fixed buffer import (CVE-2026-43006)
kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)
kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)
kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect() (CVE-2026-43023)
kernel: netfilter: ctnetlink: ensure safe access to master conntrack (CVE-2026-43116)
kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110)
kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)
kernel: Linux kernel dpaa2-switch: Kernel memory corruption via out-of-bounds write (CVE-2026-43205)
kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)
kernel: mm/page_alloc: clear page->private in free_pages_prepare() (CVE-2026-43303)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:21557
Updated: 2026-11-02

OSVALSA-2026:21706 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)
kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)
kernel: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CVE-2025-68347)
kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116)
kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)
kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)
kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)
kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)
kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)
kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)
kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)
kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)
kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)
kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)
kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)
kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)
kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:21706
Updated: 2026-11-02

OSVALSA-2026:21745 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)
kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)
kernel: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CVE-2025-68347)
kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116)
kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)
kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)
kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)
kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)
kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)
kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)
kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)
kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)
kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)
kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)
kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)
kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)
kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:21745
Updated: 2026-11-02

OSVCLSA-2026-1782151303 No score

kernel: Fix of 151 CVEs

spi: spi-fsl-lpspi: fix teardown order issue (UAF) {CVE-2026-31485}
Buffer overflow in drivers/xen/sys-hypervisor.c {CVE-2026-31786}
ip6_tunnel: clear skb2->cb[] in ip4ip6_err() {CVE-2026-43037}
net: bonding: fix use-after-free in bond_xmit_broadcast() {CVE-2026-31419}
bonding: do not set usable_slaves for broadcast mode {CVE-2026-31419}
net: bonding: update the slave array for broadcast mode {CVE-2026-31419}
dlm: validate length in dlm_search_rsb_tree {CVE-2026-43125}
net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check {CVE-2026-23448}
net: Fix an unsafe loop on the list {CVE-2024-50024}
sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy {CVE-2025-21636}
wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx {CVE-2023-54300}
wifi: nl80211: reject cooked mode if it is set along with other flags {CVE-2025-21909}
drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream {CVE-2024-49913}
xfrm: validate new SA's prefixlen using SA family when sel.family is unset {CVE-2024-50142}
serial: imx: Introduce timeout when waiting on transmitter empty {CVE-2024-40967}
iommu/amd/iommu_v2: Fix pasid_state refcount dec hit 0 warning on pasid unbind {CVE-2023-53501}
octeontx2-af: Add validation before accessing cgx and lmac {CVE-2023-53654}
sctp: sysctl: rto_min/max: avoid using current->nsproxy {CVE-2025-21639}
net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices {CVE-2023-52984}
sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start {CVE-2024-49944}
netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path {CVE-2026-43451}
thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR {CVE-2022-48703}
x86/mm: Fix pti_clone_pgtable() alignment assumption {CVE-2024-44965}
net: usb: asix_devices: add phy_mask for ax88772 mdio bus {CVE-2025-38725}
ALSA: hda: Do not unset preset when cleaning up codec {CVE-2023-52736}
drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func {CVE-2024-49909}
Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE {CVE-2024-53144}
fuse: Initialize beyond-EOF page contents before setting uptodate {CVE-2024-44947}
sctp: sysctl: udp_port: avoid using current->nsproxy {CVE-2025-21637}
dm stats: check for and propagate alloc_percpu failure {CVE-2023-53044}
netpoll: Fix race condition in netpoll_owner_active {CVE-2024-41005}
tracing: Fix overflow in get_free_elt() {CVE-2024-43890}
mm/slub: avoid accessing metadata when pointer is invalid in object_err() {CVE-2025-39902}
xen/netfront: stop tx queues during live migration {CVE-2022-48969}
Bluetooth: btusb: clamp SCO altsetting table indices {CVE-2026-31497}
ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free {CVE-2025-38105}
can: j1939: make j1939_sk_bind() fail if device is no longer registered {CVE-2025-39925}
nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid() {CVE-2023-52508}
smb: client: Don't log plaintext credentials in cifs_set_cifscreds {CVE-2026-23303}
cifs: Fix integer overflow while processing acdirmax mount option {CVE-2025-21963}
netfilter: nfnetlink_log: account for netlink header size {CVE-2026-31416}
drm/amdgpu/vkms: fix a possible null pointer dereference {CVE-2023-52815}
drm/amd/amdgpu: Check tbo resource pointer {CVE-2024-46807}
bonding: fix null pointer deref in bond_ipsec_offload_ok {CVE-2024-44990}
wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower {CVE-2024-50237}
trace_events_hist: add check for return value of 'create_hist_field' {CVE-2023-53005}
drm/amdkfd: Add sync after creating vram bo {CVE-2023-53009}
bpf: Send signals asynchronously if !preemptible {CVE-2025-21728}
drm/client: fix null pointer dereference in drm_client_modeset_probe {CVE-2024-43894}
ext4: correct grp validation in ext4_mb_good_group {CVE-2023-53861}
RDMA/irdma: Initialize…

Record: CLSA-2026-1782151303
Updated: 2026-11-02

OSVCLSA-2026-1782382498 No score

kernel: Fix of 23 CVEs

net/sched: fix pedit partial COW leading to page cache corruption {CVE-2026-46331}
net: add xmit recursion limit to tunnel xmit functions {CVE-2026-23276}
x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 {CVE-2026-23005}
wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode {CVE-2025-40321}
net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY {CVE-2025-37945}
xfs: delete attr leaf freemap entries when empty {CVE-2026-43158}
ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr {CVE-2025-68183}
crypto: af_alg - Fix incorrect boolean values in af_alg_ctx
scsi: hisi_sas: Grab sas_dev lock when traversing the members of sas_dev.list {CVE-2023-53627}
bonding: annotate data-races around slave->last_rx {CVE-2026-23212}
rxrpc: Fix data-race warning and potential load/store tearing {CVE-2026-23118}
net: phy: register phy led_triggers during probe to avoid AB-BA deadlock {CVE-2026-23368}
tracing: Do not register unsupported perf events {CVE-2025-71125}
ACPICA: Avoid walking the Namespace if start_node is NULL {CVE-2025-71118}
icmp: fix NULL pointer dereference in icmp_tag_validation() {CVE-2026-23398}
nfc: rawsock: cancel tx_work before socket teardown {CVE-2026-23372}
bridge: cfm: Fix race condition in peer_mep deletion {CVE-2026-23393}
batman-adv: reject oversized global TT response buffers {CVE-2026-31659}
NFC: digital: Bounds check NFC-A cascade depth in SDD response handler {CVE-2026-31622}
bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue {CVE-2024-36938}
virtiofs: use pages instead of pointer for kernel direct IO {CVE-2024-53219}
acct: perform last write from workqueue {CVE-2025-21846}
NFSD: fix race between nfsd registration and exports_proc {CVE-2025-38232}
atm: clip: Fix memory leak of struct clip_vcc. {CVE-2025-38546}
efi: Do not import certificates from UEFI Secure Boot for T2 Macs {CVE-2022-49357}

Record: CLSA-2026-1782382498
Updated: 2026-11-02

OSVCLSA-2026-1783790425 No score

kernel: Fix of 41 CVEs

ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr {CVE-2025-68183}
futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock {CVE-2026-53166}
rtmutex: Use waiter::task instead of current in remove_waiter() {CVE-2026-43499}
net: bonding: fix use-after-free in bond_xmit_broadcast() {CVE-2026-31419}
Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold {CVE-2026-31408}
mptcp: fix slab-use-after-free in __inet_lookup_established {CVE-2026-31669}
svcrdma: bound check rq_pages index in inline path {CVE-2025-71068}
ALSA: scarlett2: Fix buffer overflow in config retrieval {CVE-2026-23078}
cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path {CVE-2026-43328}
drm/amd/display: Do not skip unrelated mode changes in DSC validation {CVE-2026-31488}
HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq {CVE-2026-43051}
net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check {CVE-2026-23448}
bpf, sockmap: Fix race between element replace and close() {CVE-2024-56664}
mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() {CVE-2026-31586}
crypto: pcrypt - Fix handling of MAY_BACKLOG requests {CVE-2026-43493}
atm: lec: fix use-after-free in sock_def_readable() {CVE-2026-43050}
driver core: enforce device_lock for driver_match_device() {CVE-2026-31688}
driver core: platform: use generic driver_override infrastructure {CVE-2026-31527}
nfsd: fix heap overflow in NFSv4.0 LOCK replay cache {CVE-2026-31402}
ext4: convert inline data to extents when truncate exceeds inline size {CVE-2026-31452}
usb: class: cdc-wdm: fix reordering issue in read code path {CVE-2026-43427}
xen/privcmd: fix double free via VMA splitting {CVE-2026-31787}
netfilter: nf_tables: release flowtable after rcu grace period on error {CVE-2026-23392}
wifi: mac80211: check tdls flag in ieee80211_tdls_oper {CVE-2026-43052}
netfilter: conntrack: switch to siphash {CVE-2021-3773}
gpiolib: cdev: fix NULL-pointer dereferences {CVE-2022-50453}
tracing: Free buffers when a used dynamic event is removed {CVE-2022-49006}
dlm: validate length in dlm_search_rsb_tree {CVE-2026-43125}
Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock {CVE-2026-31500}
tpm: fix reference counting for struct tpm_chip {CVE-2022-2977}
tracing: Fix wild-memory-access in register_synth_event() {CVE-2022-49799}
nfnetlink_osf: validate individual option lengths in fingerprints {CVE-2026-23397}
ext4: block range must be validated before use in ext4_mb_clear_bb() {CVE-2022-50021}
netfilter: flowtable: strictly check for maximum number of actions {CVE-2026-43329}
crypto: lzo - Fix compression buffer overrun {CVE-2025-38068}
xen: fix buffer overflow in buildid_show() {CVE-2026-31786}
NTB: fix possible name leak in ntb_register_device() {CVE-2023-52652}
ALSA: ctxfi: Fix potential OOB access in audio mixer handling {CVE-2026-23076}
erspan: do not use skb_mac_header() in ndo_start_xmit() {CVE-2023-53053}
net: af_key: zero aligned sockaddr tail in PF_KEY exports {CVE-2026-43088}
ata: libata-transport: fix double ata_host_put() in ata_tport_add() {CVE-2022-49826}

Record: CLSA-2026-1783790425
Updated: 2026-11-02

OSVMGASA-2026-0017 No score

Updated kernel, kmod-virtualbox & kmod-xtables-addons packages fix security vulnerabilities

Upstream kernel version 6.6.120 fixes bugs and vulnerabilities. The kmod-virtualbox & kmod-xtables-addons packages have been updated to work with this new kernel.

Record: MGASA-2026-0017
Updated: 2026-11-02

OSVMGASA-2026-0018 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.120 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links.

Record: MGASA-2026-0018
Updated: 2026-11-02

OSVopenSUSE-SU-2026:20145-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
CVE-2025-39880: ceph: fix race condition validating r_parent before applying state (bsc#1250388).
CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
CVE-2025-40123: bpf: Enforce expected_attach_type for tailcall compatibility (bsc#1253365).
CVE-2025-40130: scsi: ufs: core: Fix data race in CPU latency PM QoS request handling
CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
CVE-2025-40214: af_unix: Initialise scc_index in unix_add_edge() (bsc#1254961).
CVE-2025-40215: xfrm: delete x->tunnel as we delete x (bsc#1254959).
CVE-2025-40218: mm/damon/vaddr: do not repeat pte_offset_map_lock() until success (bsc#1254964).
CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
CVE-2025-40237: fs/notify: call exportfs_encode_fid with s_umount (bsc#1254809).
CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
CVE-2025-40239: net: phy: micrel: always set shared->phydev for LAN8814 (bsc#1254868).
CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
CVE-2025-40246: xfs: fix out of bounds memory read error in symlink repair (bsc#1254861).
CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
CVE-2025-40255: net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower() (bsc#1255156).
CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
CVE-2025-40264: be2net: pass wrb_params in case of OS2BMC (bsc#1254835).
CVE-2025-40268: cifs: client: fix memory leak in smb3_fs_context_parse_param (bsc#1255082).
CVE-2025-40271: fs/proc: fix uaf in proc_readdir_de() (bsc#1255297).
CVE-2025-40274: KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying (bsc#1254830).
CVE-2025-40276: drm/panthor: Flush shmem writes before mapping buffers CPU-uncached (bsc#1254824).
CVE-2025-40278: net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak (bsc#1254825).
CVE-2025-40279: net: sched: act_connmark: initialize struct tc_ife to fix kernel leak (bsc#1254846).
CVE-2025-40280: tipc: Fix use-after-free in tipc_mon_reinit_self() (bsc#1254847).
CVE-2025-40292: virtio-net: fix received length check in big packets (bsc#1255175).
CVE-2025-40293: iommufd: Don't overflow during division for dirty tracking (bsc#1255179).
CVE-2025-40297: net: bridge: fix use-after-free due to MST port state bypass (bsc#1255187).
CVE-2025-40319: bpf: Sync pending IRQ work before freeing ring buffer (bsc#1254794).
CVE-2025-40328: smb: client: fix potential UAF in smb2_close_cached_fid() (bsc#1254624).
CVE-2025-40330: bnxt_en: Shutdown FW…

Record: openSUSE-SU-2026:20145-1
Updated: 2026-11-02

OSVSUSE-SU-2026:0278-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
CVE-2025-40134: dm: fix NULL pointer dereference in __dm_suspend() (bsc#1253386).
CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
CVE-2025-40187: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (bsc#1253647).
CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
CVE-2025-40215: kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959).
CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
CVE-2025-40240: sctp: avoid NULL dereference when chunk data buffer is missing (bsc#1254869).
CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
CVE-2025-40268: cifs: client: fix memory leak in smb3_fs_context_parse_param (bsc#1255082).
CVE-2025-40271: fs/proc: fix uaf in proc_readdir_de() (bsc#1255297).
CVE-2025-40274: KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying (bsc#1254830).
CVE-2025-40278: net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak (bsc#1254825).
CVE-2025-40279: net: sched: act_connmark: initialize struct tc_ife to fix kernel leak (bsc#1254846).
CVE-2025-40280: tipc: Fix use-after-free in tipc_mon_reinit_self() (bsc#1254847).
CVE-2025-40287: exfat: fix improper check of dentry.stream.valid_size (bsc#1255030).
CVE-2025-40289: drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM (bsc#1255042).
CVE-2025-40292: virtio-net: fix received length check in big packets (bsc#1255175).
CVE-2025-40293: iommufd: Don't overflow during division for dirty tracking (bsc#1255179).
CVE-2025-40297: net: bridge: fix use-after-free due to MST port state bypass (bsc#1255187). -…

Record: SUSE-SU-2026:0278-1
Updated: 2026-11-02

OSVSUSE-SU-2026:0281-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
CVE-2025-40134: dm: fix NULL pointer dereference in __dm_suspend() (bsc#1253386).
CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
CVE-2025-40187: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (bsc#1253647).
CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
CVE-2025-40215: kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959).
CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
CVE-2025-40240: sctp: avoid NULL dereference when chunk data buffer is missing (bsc#1254869).
CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
CVE-2025-40268: cifs: client: fix memory leak in smb3_fs_context_parse_param (bsc#1255082).
CVE-2025-40271: fs/proc: fix uaf in proc_readdir_de() (bsc#1255297).
CVE-2025-40274: KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying (bsc#1254830).
CVE-2025-40278: net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak (bsc#1254825).
CVE-2025-40279: net: sched: act_connmark: initialize struct tc_ife to fix kernel leak (bsc#1254846).
CVE-2025-40280: tipc: Fix use-after-free in tipc_mon_reinit_self() (bsc#1254847).
CVE-2025-40287: exfat: fix improper check of dentry.stream.valid_size (bsc#1255030).
CVE-2025-40289: drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM (bsc#1255042).
CVE-2025-40292: virtio-net: fix received length check in big packets (bsc#1255175).
CVE-2025-40293: iommufd: Don't overflow during division for dirty tracking (bsc#1255179).
CVE-2025-40297: net: bridge: fix use-after-free due to MST port state bypass (bsc#1255187). -…

Record: SUSE-SU-2026:0281-1
Updated: 2026-11-02

OSVSUSE-SU-2026:0293-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
CVE-2025-39890: wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event (bsc#1250334).
CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
CVE-2025-40134: dm: fix NULL pointer dereference in __dm_suspend() (bsc#1253386).
CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
CVE-2025-40187: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (bsc#1253647).
CVE-2025-40215: kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959).
CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
CVE-2025-40280: tipc: Fix use-after-free in tipc_mon_reinit_self() (bsc#1254847).
CVE-2025-40297: net: bridge: fix use-after-free due to MST port state bypass (bsc#1255187).
CVE-2025-40328: smb: client: fix potential UAF in smb2_close_cached_fid() (bsc#1254624).
CVE-2025-40331: sctp: Prevent TOCTOU out-of-bounds write (bsc#1254615).
CVE-2025-68259: KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced (bsc#1255199).

The following non security issues were fixed:

ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 (git-fixes).
ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() (git-fixes).
ALSA: dice: fix buffer overflow in detect_stream_formats() (git-fixes).
ALSA: firewire-motu: add bounds check in put_user loop for DSP events (git-fixes).
ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (git-fixes).
ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() (git-fixes).
ALSA: uapi: Fix typo in asound.h comment (git-fixes).
ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 (stable-fixes).
ASoC: Intel: catpt: Fix error path in hw_params() (git-fixes).
ASoC: ak4458: Disable regulator when error happens (git-fixes).
ASoC: ak5558: Disable regulator when error happens (git-fixes).
ASoC: codecs: wcd938x: fix OF node leaks on probe failure (git-fixes).
ASoC: fsl_xcvr: clear the channel status control memory (git-fixes).
ASoC: qcom: q6adm: the the copp device only during last instance (git-fixes).
ASoC: qcom: q6asm-dai: perform correct state check before closing (git-fixes).
ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment…

Record: SUSE-SU-2026:0293-1
Updated: 2026-11-02

OSVSUSE-SU-2026:0315-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
CVE-2025-40134: dm: fix NULL pointer dereference in __dm_suspend() (bsc#1253386).
CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
CVE-2025-40187: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (bsc#1253647).
CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
CVE-2025-40215: kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959).
CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
CVE-2025-40240: sctp: avoid NULL dereference when chunk data buffer is missing (bsc#1254869).
CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
CVE-2025-40268: cifs: client: fix memory leak in smb3_fs_context_parse_param (bsc#1255082).
CVE-2025-40271: fs/proc: fix uaf in proc_readdir_de() (bsc#1255297).
CVE-2025-40274: KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying (bsc#1254830).
CVE-2025-40278: net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak (bsc#1254825).
CVE-2025-40279: net: sched: act_connmark: initialize struct tc_ife to fix kernel leak (bsc#1254846).
CVE-2025-40280: tipc: Fix use-after-free in tipc_mon_reinit_self() (bsc#1254847).
CVE-2025-40287: exfat: fix improper check of dentry.stream.valid_size (bsc#1255030).
CVE-2025-40289: drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM (bsc#1255042).
CVE-2025-40292: virtio-net: fix received length check in big packets (bsc#1255175).
CVE-2025-40293: iommufd: Don't overflow during division for dirty tracking (bsc#1255179).
CVE-2025-40297: net: bridge: fix use-after-free due to MST port state bypass (bsc#1255187). -…

Record: SUSE-SU-2026:0315-1
Updated: 2026-11-02

OSVSUSE-SU-2026:0411-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2022-50630: mm: hugetlb: fix UAF in hugetlb_handle_userfault (bsc#1254785).
CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255594).
CVE-2022-50700: wifi: ath10k: Delay the unmapping of the buffer (bsc#1255576).
CVE-2023-53215: sched/fair: Don't balance task to its current running CPU (bsc#1250397).
CVE-2023-53254: cacheinfo: Fix shared_cpu_map to handle shared caches at different levels (bsc#1249871).
CVE-2023-53781: smc: Fix use-after-free in tcp_write_timer_handler() (bsc#1254751).
CVE-2023-54142: gtp: Fix use-after-free in __gtp_encap_destroy() (bsc#1256095).
CVE-2023-54243: netfilter: ebtables: fix table blob use-after-free (bsc#1255908).
CVE-2024-28956: x86/its: Enumerate Indirect Target Selection (ITS) bug (bsc#1242006).
CVE-2024-36348: x86/bugs: Add a Transient Scheduler Attacks mitigation (bsc#1238896).
CVE-2024-36349: x86/bugs: Add a Transient Scheduler Attacks mitigation (bsc#1238896).
CVE-2024-36350: x86/bugs: Add a Transient Scheduler Attacks mitigation (bsc#1238896).
CVE-2024-36357: x86/bugs: Add a Transient Scheduler Attacks mitigation (bsc#1238896).
CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
CVE-2025-38068: crypto: lzo - Fix compression buffer overrun (bsc#1245210).
CVE-2025-38129: page_pool: fix inconsistency for page_pool_ring_lock() (bsc#1245723).
CVE-2025-38159: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (bsc#1245751).
CVE-2025-38375: virtio-net: ensure the received length does not exceed allocated size (bsc#1247177).
CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
CVE-2025-40019: crypto: essiv - Check ssize for decryption and in-place encryption (bsc#1252678).
CVE-2025-40139: net: ipv4: Consolidate ipv4_mtu and ip_dst_mtu_maybe_forward (bsc#1253409).
CVE-2025-40215: kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959).
CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
CVE-2025-40277: drm/vmwgfx: Validate command header size against (bsc#1254894).
CVE-2025-40280: tipc: Fix use-after-free in tipc_mon_reinit_self() (bsc#1254847).
CVE-2025-40300: Documentation/hw-vuln: Add VMSCAPE documentation (bsc#1247483).
CVE-2025-40331: sctp: Prevent TOCTOU out-of-bounds write (bsc#1254615).
CVE-2025-68183: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (bsc#1255251).
CVE-2025-68284: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (bsc#1255377).
CVE-2025-68285: libceph: fix potential use-after-free in have_mon_and_osd_map() (bsc#1255401).
CVE-2025-68732: gpu: host1x: Fix race in syncpt alloc/free (bsc#1255688).
CVE-2025-68771: ocfs2: fix kernel BUG in ocfs2_find_victim_chain (bsc#1256582).
CVE-2025-68813: ipvs: fix ipv4 null-ptr-deref in route error path (bsc#1256641).
CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256612).
CVE-2025-71116: libceph: make decode_pool() more resilient against corrupted osdmaps (bsc#1256744).
CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256779).

The following non security issues were fixed:

x86/CPU/AMD: Add ZenX generations flags (bsc#1238896).
x86: make page fault handling disable interrupts properly (git-fixes).

Record: SUSE-SU-2026:0411-1
Updated: 2026-11-02

OSVSUSE-SU-2026:0474-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255594).
CVE-2023-54142: gtp: Fix use-after-free in __gtp_encap_destroy() (bsc#1256095).
CVE-2023-54243: netfilter: ebtables: fix table blob use-after-free (bsc#1255908).
CVE-2025-38068: crypto: lzo - Fix compression buffer overrun (bsc#1245210).
CVE-2025-38129: page_pool: fix inconsistency for page_pool_ring_lock() (bsc#1245723).
CVE-2025-38159: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (bsc#1245751).
CVE-2025-38375: virtio-net: ensure the received length does not exceed allocated size (bsc#1247177).
CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
CVE-2025-40300: Documentation/hw-vuln: Add VMSCAPE documentation (bsc#1247483).
CVE-2025-68183: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (bsc#1255251).
CVE-2025-68284: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (bsc#1255377).
CVE-2025-68285: libceph: fix potential use-after-free in have_mon_and_osd_map() (bsc#1255401).
CVE-2025-68312: usbnet: Prevents free active kevent (bsc#1255171).
CVE-2025-68771: ocfs2: fix kernel BUG in ocfs2_find_victim_chain (bsc#1256582).
CVE-2025-68813: ipvs: fix ipv4 null-ptr-deref in route error path (bsc#1256641).
CVE-2025-71085: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (bsc#1256623).
CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256612).
CVE-2025-71112: net: hns3: add VLAN id validation before using (bsc#1256726).
CVE-2025-71116: libceph: make decode_pool() more resilient against corrupted osdmaps (bsc#1256744).
CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256779).
CVE-2026-22999: net/sched: sch_qfq: do not free existing class in qfq_change_class() (bsc#1257236).
CVE-2026-23001: macvlan: fix possible UAF in macvlan_forward_source() (bsc#1257232).

The following non security issues were fixed:

mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (bsc#1253087).
net: hv_netvsc: reject RSS hash key programming without RX indirection table (bsc#1257473).
net: tcp: allow zero-window ACK update the window (bsc#1254767).
net: tcp: send zero-window ACK when no memory (bsc#1254767).
scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
tcp: correct handling of extreme memory squeeze (bsc#1254767).
x86: make page fault handling disable interrupts properly (git-fixes).

Record: SUSE-SU-2026:0474-1
Updated: 2026-11-02

OSVSUSE-SU-2026:0496-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255594).
CVE-2023-54142: gtp: Fix use-after-free in __gtp_encap_destroy() (bsc#1256095).
CVE-2023-54243: netfilter: ebtables: fix table blob use-after-free (bsc#1255908).
CVE-2025-38068: crypto: lzo - Fix compression buffer overrun (bsc#1245210).
CVE-2025-38129: page_pool: fix inconsistency for page_pool_ring_lock() (bsc#1245723).
CVE-2025-38159: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (bsc#1245751).
CVE-2025-38375: virtio-net: ensure the received length does not exceed allocated size (bsc#1247177).
CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
CVE-2025-40300: Documentation/hw-vuln: Add VMSCAPE documentation (bsc#1247483).
CVE-2025-68183: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (bsc#1255251).
CVE-2025-68284: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (bsc#1255377).
CVE-2025-68285: libceph: fix potential use-after-free in have_mon_and_osd_map() (bsc#1255401).
CVE-2025-68312: usbnet: Prevents free active kevent (bsc#1255171).
CVE-2025-68771: ocfs2: fix kernel BUG in ocfs2_find_victim_chain (bsc#1256582).
CVE-2025-68813: ipvs: fix ipv4 null-ptr-deref in route error path (bsc#1256641).
CVE-2025-71085: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (bsc#1256623).
CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256612).
CVE-2025-71112: net: hns3: add VLAN id validation before using (bsc#1256726).
CVE-2025-71116: libceph: make decode_pool() more resilient against corrupted osdmaps (bsc#1256744).
CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256779).
CVE-2026-22999: net/sched: sch_qfq: do not free existing class in qfq_change_class() (bsc#1257236).
CVE-2026-23001: macvlan: fix possible UAF in macvlan_forward_source() (bsc#1257232).
CVE-2023-53215: sched/fair: Don't balance task to its current running CPU (bsc#1250397).
CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).

The following non security issues were fixed:

Revert 'ocfs2: fix kernel BUG in ocfs2_find_victim_chain (bsc#1256582)'.
mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (bsc#1253087 bsc#1254447).
net: hv_netvsc: reject RSS hash key programming without RX indirection table (bsc#1257473).
net: tcp: allow zero-window ACK update the window (bsc#1254767).
net: tcp: send zero-window ACK when no memory (bsc#1254767).
scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
tcp: correct handling of extreme memory squeeze (bsc#1254767).
x86: make page fault handling disable interrupts properly (git-fixes).

Record: SUSE-SU-2026:0496-1
Updated: 2026-11-02

OSVSUSE-SU-2026:0617-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2022-50630: mm: hugetlb: fix UAF in hugetlb_handle_userfault (bsc#1254785).
CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255594).
CVE-2022-50700: wifi: ath10k: Delay the unmapping of the buffer (bsc#1255576).
CVE-2023-53215: sched/fair: Don't balance task to its current running CPU (bsc#1250397).
CVE-2023-53254: cacheinfo: Fix shared_cpu_map to handle shared caches at different levels (bsc#1249871).
CVE-2023-53781: smc: Fix use-after-free in tcp_write_timer_handler() (bsc#1254751).
CVE-2023-54142: gtp: Fix use-after-free in __gtp_encap_destroy() (bsc#1256095).
CVE-2023-54243: netfilter: ebtables: fix table blob use-after-free (bsc#1255908).
CVE-2024-28956: x86/its: Enumerate Indirect Target Selection (ITS) bug (bsc#1242006).
CVE-2024-36348: x86/bugs: Add a Transient Scheduler Attacks mitigation (bsc#1238896).
CVE-2024-36349: x86/bugs: Add a Transient Scheduler Attacks mitigation (bsc#1238896).
CVE-2024-36350: x86/bugs: Add a Transient Scheduler Attacks mitigation (bsc#1238896).
CVE-2024-36357: x86/bugs: Add a Transient Scheduler Attacks mitigation (bsc#1238896).
CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
CVE-2024-46854: net: dpaa: Pad packets to ETH_ZLEN (bsc#1231084).
CVE-2025-21738: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (bsc#1238917).
CVE-2025-38068: crypto: lzo - Fix compression buffer overrun (bsc#1245210).
CVE-2025-38129: page_pool: fix inconsistency for page_pool_ring_lock() (bsc#1245723).
CVE-2025-38159: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (bsc#1245751).
CVE-2025-38375: virtio-net: ensure the received length does not exceed allocated size (bsc#1247177).
CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
CVE-2025-40019: crypto: essiv - Check ssize for decryption and in-place encryption (bsc#1252678).
CVE-2025-40139: net: ipv4: Consolidate ipv4_mtu and ip_dst_mtu_maybe_forward (bsc#1253409).
CVE-2025-40215: kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959).
CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
CVE-2025-40277: drm/vmwgfx: Validate command header size against (bsc#1254894).
CVE-2025-40280: tipc: Fix use-after-free in tipc_mon_reinit_self() (bsc#1254847).
CVE-2025-40300: Documentation/hw-vuln: Add VMSCAPE documentation (bsc#1247483).
CVE-2025-40331: sctp: Prevent TOCTOU out-of-bounds write (bsc#1254615).
CVE-2025-68183: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (bsc#1255251).
CVE-2025-68284: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (bsc#1255377).
CVE-2025-68285: libceph: fix potential use-after-free in have_mon_and_osd_map() (bsc#1255401).
CVE-2025-68312: usbnet: Prevents free active kevent (bsc#1255171).
CVE-2025-68732: gpu: host1x: Fix race in syncpt alloc/free (bsc#1255688).
CVE-2025-68813: ipvs: fix ipv4 null-ptr-deref in route error path (bsc#1256641).
CVE-2025-71085: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (bsc#1256623).
CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256612).
CVE-2025-71112: net: hns3: add VLAN id validation before using (bsc#1256726).
CVE-2025-71116: libceph: make decode_pool() more resilient against corrupted osdmaps (bsc#1256744).
CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256779).
CVE-2026-22999: net/sched: sch_qfq: do not free…

Record: SUSE-SU-2026:0617-1
Updated: 2026-11-02

OSVSUSE-SU-2026:20207-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
CVE-2025-39880: ceph: fix race condition validating r_parent before applying state (bsc#1250388).
CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
CVE-2025-40123: bpf: Enforce expected_attach_type for tailcall compatibility (bsc#1253365).
CVE-2025-40130: scsi: ufs: core: Fix data race in CPU latency PM QoS request handling
CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
CVE-2025-40214: af_unix: Initialise scc_index in unix_add_edge() (bsc#1254961).
CVE-2025-40215: xfrm: delete x->tunnel as we delete x (bsc#1254959).
CVE-2025-40218: mm/damon/vaddr: do not repeat pte_offset_map_lock() until success (bsc#1254964).
CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
CVE-2025-40237: fs/notify: call exportfs_encode_fid with s_umount (bsc#1254809).
CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
CVE-2025-40239: net: phy: micrel: always set shared->phydev for LAN8814 (bsc#1254868).
CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
CVE-2025-40246: xfs: fix out of bounds memory read error in symlink repair (bsc#1254861).
CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
CVE-2025-40255: net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower() (bsc#1255156).
CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
CVE-2025-40264: be2net: pass wrb_params in case of OS2BMC (bsc#1254835).
CVE-2025-40268: cifs: client: fix memory leak in smb3_fs_context_parse_param (bsc#1255082).
CVE-2025-40271: fs/proc: fix uaf in proc_readdir_de() (bsc#1255297).
CVE-2025-40274: KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying (bsc#1254830).
CVE-2025-40276: drm/panthor: Flush shmem writes before mapping buffers CPU-uncached (bsc#1254824).
CVE-2025-40278: net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak (bsc#1254825).
CVE-2025-40279: net: sched: act_connmark: initialize struct tc_ife to fix kernel leak (bsc#1254846).
CVE-2025-40280: tipc: Fix use-after-free in tipc_mon_reinit_self() (bsc#1254847).
CVE-2025-40292: virtio-net: fix received length check in big packets (bsc#1255175).
CVE-2025-40293: iommufd: Don't overflow during division for dirty tracking (bsc#1255179).
CVE-2025-40297: net: bridge: fix use-after-free due to MST port state bypass (bsc#1255187).
CVE-2025-40319: bpf: Sync pending IRQ work before freeing ring buffer (bsc#1254794).
CVE-2025-40328: smb: client: fix potential UAF in smb2_close_cached_fid() (bsc#1254624).
CVE-2025-40330: bnxt_en: Shutdown FW…

Record: SUSE-SU-2026:20207-1
Updated: 2026-11-02

OSVSUSE-SU-2026:20220-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
CVE-2025-39880: ceph: fix race condition validating r_parent before applying state (bsc#1250388).
CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
CVE-2025-40123: bpf: Enforce expected_attach_type for tailcall compatibility (bsc#1253365).
CVE-2025-40130: scsi: ufs: core: Fix data race in CPU latency PM QoS request handling
CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
CVE-2025-40214: af_unix: Initialise scc_index in unix_add_edge() (bsc#1254961).
CVE-2025-40215: xfrm: delete x->tunnel as we delete x (bsc#1254959).
CVE-2025-40218: mm/damon/vaddr: do not repeat pte_offset_map_lock() until success (bsc#1254964).
CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
CVE-2025-40237: fs/notify: call exportfs_encode_fid with s_umount (bsc#1254809).
CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
CVE-2025-40239: net: phy: micrel: always set shared->phydev for LAN8814 (bsc#1254868).
CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
CVE-2025-40246: xfs: fix out of bounds memory read error in symlink repair (bsc#1254861).
CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
CVE-2025-40255: net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower() (bsc#1255156).
CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
CVE-2025-40264: be2net: pass wrb_params in case of OS2BMC (bsc#1254835).
CVE-2025-40268: cifs: client: fix memory leak in smb3_fs_context_parse_param (bsc#1255082).
CVE-2025-40271: fs/proc: fix uaf in proc_readdir_de() (bsc#1255297).
CVE-2025-40274: KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying (bsc#1254830).
CVE-2025-40276: drm/panthor: Flush shmem writes before mapping buffers CPU-uncached (bsc#1254824).
CVE-2025-40278: net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak (bsc#1254825).
CVE-2025-40279: net: sched: act_connmark: initialize struct tc_ife to fix kernel leak (bsc#1254846).
CVE-2025-40280: tipc: Fix use-after-free in tipc_mon_reinit_self() (bsc#1254847).
CVE-2025-40292: virtio-net: fix received length check in big packets (bsc#1255175).
CVE-2025-40293: iommufd: Don't overflow during division for dirty tracking (bsc#1255179).
CVE-2025-40297: net: bridge: fix use-after-free due to MST port state bypass (bsc#1255187).
CVE-2025-40319: bpf: Sync pending IRQ work before freeing ring buffer (bsc#1254794).
CVE-2025-40328: smb: client: fix potential UAF in smb2_close_cached_fid() (bsc#1254624).
CVE-2025-40330: bnxt_en: Shutdown FW…

Record: SUSE-SU-2026:20220-1
Updated: 2026-11-02

OSVSUSE-SU-2026:20228-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
CVE-2025-39880: ceph: fix race condition validating r_parent before applying state (bsc#1250388).
CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
CVE-2025-40123: bpf: Enforce expected_attach_type for tailcall compatibility (bsc#1253365).
CVE-2025-40130: scsi: ufs: core: Fix data race in CPU latency PM QoS request handling
CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
CVE-2025-40214: af_unix: Initialise scc_index in unix_add_edge() (bsc#1254961).
CVE-2025-40215: xfrm: delete x->tunnel as we delete x (bsc#1254959).
CVE-2025-40218: mm/damon/vaddr: do not repeat pte_offset_map_lock() until success (bsc#1254964).
CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
CVE-2025-40237: fs/notify: call exportfs_encode_fid with s_umount (bsc#1254809).
CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
CVE-2025-40239: net: phy: micrel: always set shared->phydev for LAN8814 (bsc#1254868).
CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
CVE-2025-40246: xfs: fix out of bounds memory read error in symlink repair (bsc#1254861).
CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
CVE-2025-40255: net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower() (bsc#1255156).
CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
CVE-2025-40264: be2net: pass wrb_params in case of OS2BMC (bsc#1254835).
CVE-2025-40268: cifs: client: fix memory leak in smb3_fs_context_parse_param (bsc#1255082).
CVE-2025-40271: fs/proc: fix uaf in proc_readdir_de() (bsc#1255297).
CVE-2025-40274: KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying (bsc#1254830).
CVE-2025-40276: drm/panthor: Flush shmem writes before mapping buffers CPU-uncached (bsc#1254824).
CVE-2025-40278: net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak (bsc#1254825).
CVE-2025-40279: net: sched: act_connmark: initialize struct tc_ife to fix kernel leak (bsc#1254846).
CVE-2025-40280: tipc: Fix use-after-free in tipc_mon_reinit_self() (bsc#1254847).
CVE-2025-40292: virtio-net: fix received length check in big packets (bsc#1255175).
CVE-2025-40293: iommufd: Don't overflow during division for dirty tracking (bsc#1255179).
CVE-2025-40297: net: bridge: fix use-after-free due to MST port state bypass (bsc#1255187).
CVE-2025-40319: bpf: Sync pending IRQ work before freeing ring buffer (bsc#1254794).
CVE-2025-40328: smb: client: fix potential UAF in smb2_close_cached_fid() (bsc#1254624).
CVE-2025-40330: bnxt_en: Shutdown FW…

Record: SUSE-SU-2026:20228-1
Updated: 2026-11-02

OSVSUSE-SU-2026:20477-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2023-54013: interconnect: Fix locking for runpm vs reclaim (bsc#1256280).
CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
CVE-2025-39880: libceph: fix invalid accesses to ceph_connection_v1_info (bsc#1250388).
CVE-2025-39890: wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event (bsc#1250334).
CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
CVE-2025-40123: bpf: Enforce expected_attach_type for tailcall compatibility (bsc#1253365).
CVE-2025-40134: dm: fix NULL pointer dereference in __dm_suspend() (bsc#1253386).
CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
CVE-2025-40187: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (bsc#1253647).
CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
CVE-2025-40215: kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959).
CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
CVE-2025-40240: sctp: avoid NULL dereference when chunk data buffer is missing (bsc#1254869).
CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
CVE-2025-40259: scsi: sg: Do not sleep in atomic context (bsc#1254845).
CVE-2025-40261: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (bsc#1254839).
CVE-2025-40264: be2net: pass wrb_params in case of OS2BMC (bsc#1254835).
CVE-2025-40268: cifs: client: fix memory leak in smb3_fs_context_parse_param (bsc#1255082).
CVE-2025-40271: fs/proc: fix uaf in…

Record: SUSE-SU-2026:20477-1
Updated: 2026-11-02

OSVSUSE-SU-2026:20498-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2023-54013: interconnect: Fix locking for runpm vs reclaim (bsc#1256280).
CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
CVE-2025-39880: libceph: fix invalid accesses to ceph_connection_v1_info (bsc#1250388).
CVE-2025-39890: wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event (bsc#1250334).
CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
CVE-2025-40123: bpf: Enforce expected_attach_type for tailcall compatibility (bsc#1253365).
CVE-2025-40134: dm: fix NULL pointer dereference in __dm_suspend() (bsc#1253386).
CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
CVE-2025-40187: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (bsc#1253647).
CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
CVE-2025-40215: kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959).
CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
CVE-2025-40240: sctp: avoid NULL dereference when chunk data buffer is missing (bsc#1254869).
CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
CVE-2025-40259: scsi: sg: Do not sleep in atomic context (bsc#1254845).
CVE-2025-40261: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (bsc#1254839).
CVE-2025-40264: be2net: pass wrb_params in case of OS2BMC (bsc#1254835).
CVE-2025-40268: cifs: client: fix memory leak in smb3_fs_context_parse_param (bsc#1255082).
CVE-2025-40271: fs/proc: fix uaf in…

Record: SUSE-SU-2026:20498-1
Updated: 2026-11-02

OSVSUSE-SU-2026:20564-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
CVE-2025-39880: ceph: fix race condition validating r_parent before applying state (bsc#1250388).
CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
CVE-2025-40123: bpf: Enforce expected_attach_type for tailcall compatibility (bsc#1253365).
CVE-2025-40130: scsi: ufs: core: Fix data race in CPU latency PM QoS request handling
CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
CVE-2025-40214: af_unix: Initialise scc_index in unix_add_edge() (bsc#1254961).
CVE-2025-40215: xfrm: delete x->tunnel as we delete x (bsc#1254959).
CVE-2025-40218: mm/damon/vaddr: do not repeat pte_offset_map_lock() until success (bsc#1254964).
CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
CVE-2025-40237: fs/notify: call exportfs_encode_fid with s_umount (bsc#1254809).
CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
CVE-2025-40239: net: phy: micrel: always set shared->phydev for LAN8814 (bsc#1254868).
CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
CVE-2025-40246: xfs: fix out of bounds memory read error in symlink repair (bsc#1254861).
CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
CVE-2025-40255: net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower() (bsc#1255156).
CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
CVE-2025-40264: be2net: pass wrb_params in case of OS2BMC (bsc#1254835).
CVE-2025-40268: cifs: client: fix memory leak in smb3_fs_context_parse_param (bsc#1255082).
CVE-2025-40271: fs/proc: fix uaf in proc_readdir_de() (bsc#1255297).
CVE-2025-40274: KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying (bsc#1254830).
CVE-2025-40276: drm/panthor: Flush shmem writes before mapping buffers CPU-uncached (bsc#1254824).
CVE-2025-40278: net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak (bsc#1254825).
CVE-2025-40279: net: sched: act_connmark: initialize struct tc_ife to fix kernel leak (bsc#1254846).
CVE-2025-40280: tipc: Fix use-after-free in tipc_mon_reinit_self() (bsc#1254847).
CVE-2025-40292: virtio-net: fix received length check in big packets (bsc#1255175).
CVE-2025-40293: iommufd: Don't overflow during division for dirty tracking (bsc#1255179).
CVE-2025-40297: net: bridge: fix use-after-free due to MST port state bypass (bsc#1255187).
CVE-2025-40319: bpf: Sync pending IRQ work before freeing ring buffer (bsc#1254794).
CVE-2025-40328: smb: client: fix potential UAF in smb2_close_cached_fid() (bsc#1254624).
CVE-2025-40330: bnxt_en: Shutdown FW…

Record: SUSE-SU-2026:20564-1
Updated: 2026-11-02

OSVSUSE-SU-2026:20845-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (bsc#1254992).
CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
CVE-2025-39748: bpf: Forget ranges when refining tnum after JSET (bsc#1249587).
CVE-2025-39880: libceph: fix invalid accesses to ceph_connection_v1_info (bsc#1250388).
CVE-2025-39890: wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event (bsc#1250334).
CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
CVE-2025-40099: cifs: parse_dfs_referrals: prevent oob on malformed input (bsc#1252911).
CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
CVE-2025-40103: smb: client: Fix refcount leak for cifs_sb_tlink (bsc#1252924).
CVE-2025-40123: bpf: Enforce expected_attach_type for tailcall compatibility (bsc#1253365).
CVE-2025-40134: dm: fix NULL pointer dereference in __dm_suspend() (bsc#1253386).
CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
CVE-2025-40187: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (bsc#1253647).
CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
CVE-2025-40192: Revert "ipmi: fix msg stack when IPMI is disconnected" (bsc#1253622).
CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
CVE-2025-40240: sctp: avoid NULL dereference when chunk data buffer is missing (bsc#1254869).
CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer()…

Record: SUSE-SU-2026:20845-1
Updated: 2026-11-02

OSVSUSE-SU-2026:20876-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (bsc#1254992).
CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
CVE-2025-39748: bpf: Forget ranges when refining tnum after JSET (bsc#1249587).
CVE-2025-39880: libceph: fix invalid accesses to ceph_connection_v1_info (bsc#1250388).
CVE-2025-39890: wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event (bsc#1250334).
CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
CVE-2025-40099: cifs: parse_dfs_referrals: prevent oob on malformed input (bsc#1252911).
CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
CVE-2025-40103: smb: client: Fix refcount leak for cifs_sb_tlink (bsc#1252924).
CVE-2025-40123: bpf: Enforce expected_attach_type for tailcall compatibility (bsc#1253365).
CVE-2025-40134: dm: fix NULL pointer dereference in __dm_suspend() (bsc#1253386).
CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
CVE-2025-40187: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (bsc#1253647).
CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
CVE-2025-40192: Revert "ipmi: fix msg stack when IPMI is disconnected" (bsc#1253622).
CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
CVE-2025-40240: sctp: avoid NULL dereference when chunk data buffer is missing (bsc#1254869).
CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer()…

Record: SUSE-SU-2026:20876-1
Updated: 2026-11-02

Affected products

linux

Affected packages

Affected packages
Package	Affected	Fixed
`kernel` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-64k` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-64k-core` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-64k-debug` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-64k-debug-core` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-64k-debug-devel` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-64k-debug-devel-matched` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-64k-debug-modules` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-64k-debug-modules-core` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-64k-debug-modules-extra` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-64k-devel` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-64k-devel-matched` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-64k-modules` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-64k-modules-core` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-64k-modules-extra` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-abi-stablelists` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-core` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-cross-headers` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-debug` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-debug-core` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-debug-devel` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-debug-devel-matched` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-debug-modules` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-debug-modules-core` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-debug-modules-extra` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-debug-uki-virt` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-devel` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-devel-matched` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-doc` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-headers` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-modules` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-modules-core` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-modules-extra` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-rt` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-rt-64k` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-rt-64k-core` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-rt-64k-debug` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-rt-64k-debug-core` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-rt-64k-debug-devel` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-rt-64k-debug-modules` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-rt-64k-debug-modules-core` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-rt-64k-debug-modules-extra` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-rt-64k-devel` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-rt-64k-modules` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-rt-64k-modules-core` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-rt-64k-modules-extra` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-rt-core` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-rt-debug` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-rt-debug-core` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-rt-debug-devel` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`kernel-rt-debug-modules` AlmaLinux:9	before 5.14.0-687.12.1.el9_8	5.14.0-687.12.1.el9_8
`linux-lts` Alpaquita:23	6.1.189-r0 up to 6.1.191-r0	6.1.191-r0
`linux-lts` Alpaquita:25	6.12.57-r0 up to 6.12.58-r0	6.12.58-r0
`linux-lts` Alpaquita:stream	6.12.92-r1 up to 6.18.35-r1	6.18.35-r1
`bpftool` TuxCare:AlmaLinux:9.2	before 7.0.0-284.1101.el9_2.tuxcare.11.els5	7.0.0-284.1101.el9_2.tuxcare.11.els5
`kernel` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-abi-stablelists` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-core` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-cross-headers` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-debug` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-debug-core` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-debug-devel` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-debug-devel-matched` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-debug-modules` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-debug-modules-core` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-debug-modules-extra` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-debug-modules-internal` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-debug-modules-partner` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-debug-uki-virt` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-devel` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-devel-matched` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-doc` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-headers` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-ipaclones-internal` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-modules` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-modules-core` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-modules-extra` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-modules-internal` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-modules-partner` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-selftests-internal` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-tools` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-tools-libs` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-tools-libs-devel` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-uki-virt` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`libbpf` TuxCare:AlmaLinux:9.2	before 2:1.0.0-2.el9_2.tuxcare.11.els5	2:1.0.0-2.el9_2.tuxcare.11.els5
`libbpf-devel` TuxCare:AlmaLinux:9.2	before 2:1.0.0-2.el9_2.tuxcare.11.els5	2:1.0.0-2.el9_2.tuxcare.11.els5
`libbpf-static` TuxCare:AlmaLinux:9.2	before 2:1.0.0-2.el9_2.tuxcare.11.els5	2:1.0.0-2.el9_2.tuxcare.11.els5
`perf` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`python3-perf` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`rtla` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els6	5.14.0-570.62.1.el9_6.tuxcare.5.els6
`kernel-64k` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els6	5.14.0-570.62.1.el9_6.tuxcare.5.els6
`kernel-64k-core` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els6	5.14.0-570.62.1.el9_6.tuxcare.5.els6
`kernel-64k-debug` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els6	5.14.0-570.62.1.el9_6.tuxcare.5.els6
`kernel-64k-debug-core` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els6	5.14.0-570.62.1.el9_6.tuxcare.5.els6
`kernel-64k-debug-devel` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els6	5.14.0-570.62.1.el9_6.tuxcare.5.els6
`kernel-64k-debug-devel-matched` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els6	5.14.0-570.62.1.el9_6.tuxcare.5.els6
`kernel-64k-debug-modules` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els6	5.14.0-570.62.1.el9_6.tuxcare.5.els6
`kernel-64k-debug-modules-core` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els6	5.14.0-570.62.1.el9_6.tuxcare.5.els6
`kernel-64k-debug-modules-extra` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els6	5.14.0-570.62.1.el9_6.tuxcare.5.els6
`kernel-64k-debug-modules-internal` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els6	5.14.0-570.62.1.el9_6.tuxcare.5.els6
`kernel-64k-debug-modules-partner` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els6	5.14.0-570.62.1.el9_6.tuxcare.5.els6
`kernel-64k-devel` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els6	5.14.0-570.62.1.el9_6.tuxcare.5.els6
`kernel-64k-devel-matched` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els6	5.14.0-570.62.1.el9_6.tuxcare.5.els6
`kernel-64k-modules` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.5.els6	5.14.0-570.62.1.el9_6.tuxcare.5.els6
`Kernel` Linux	5.14.0 up to 6.1.191, 6.2.0 up to 6.6.117, 6.7.0 up to 6.12.58, 6.13.0 up to 6.17.8	6.1.1916.6.1176.12.586.17.8
`linux` Debian:12	All versions, plus listed versions 6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1 Show 45 moreShow less 6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.170-16.1.170-26.1.170-36.1.172-16.1.174-16.1.176-16.1.177-16.1.180-16.1.187-16.1.190-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+1	None known
`linux` Debian:13	before 6.12.63-1, plus listed versions 6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-1~bpo12+1	6.12.63-1
`linux` Debian:14	before 6.17.8-1, plus listed versions 6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1 Show 45 moreShow less 6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1	6.17.8-1
`kernel` Mageia:9	before 6.6.120-1.mga9	6.6.120-1.mga9
`kmod-virtualbox` Mageia:9	before 7.1.14-14.mga9	7.1.14-14.mga9
`kmod-xtables-addons` Mageia:9	before 3.24-88.mga9	3.24-88.mga9
`kernel-linus` Mageia:9	before 6.6.120-1.mga9	6.6.120-1.mga9
`kernel` openEuler:24.03-LTS-SP1	before 6.6.0-145.1.15.153.oe2403sp1	6.6.0-145.1.15.153.oe2403sp1
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-64k-debug-devel` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-64k-debug-devel-matched` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-64k-devel` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-64k-devel-matched` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-debug-devel` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-debug-devel-matched` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-devel` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-devel-matched` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-doc` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-rt-64k-debug-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-rt-64k-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-rt-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-tools-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-zfcpdump-devel-matched` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`libperf-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`perf` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`perf-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`python3-perf` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`python3-perf-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`rtla` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`rv` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-64k` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-64k-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-64k-debug` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-64k-debug-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-64k-debug-modules` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-64k-debug-modules-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-64k-debug-modules-extra` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-64k-modules` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-64k-modules-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-64k-modules-extra` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-abi-stablelists` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-debug` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-debug-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel-debug-modules` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel` Rocky Linux:9	before 0:5.14.0-687.12.1.el9_8	0:5.14.0-687.12.1.el9_8
`kernel` Rocky Linux:10	before 0:6.12.0-211.18.1.el10_2	0:6.12.0-211.18.1.el10_2
`kernel` Rocky Linux:8	before 0:4.18.0-553.126.1.el8_10	0:4.18.0-553.126.1.el8_10
`kernel-rt` Rocky Linux:8	before 0:4.18.0-553.126.1.rt7.467.el8_10	0:4.18.0-553.126.1.rt7.467.el8_10
`linux` Root:Debian:12	before 6.1.190-1.aikido.167	6.1.190-1.aikido.167
`rootio-linux` Root:Debian:12	before 6.1.190-1.aikido.167	6.1.190-1.aikido.167
`linux` Root:Ubuntu:22.04	before 5.15.0-202.212.aikido.118	5.15.0-202.212.aikido.118
`rootio-linux` Root:Ubuntu:22.04	before 5.15.0-202.212.aikido.118	5.15.0-202.212.aikido.118
`linux` Root:Ubuntu:24.04	before 6.8.0-147.147.aikido.90	6.8.0-147.147.aikido.90
`rootio-linux` Root:Ubuntu:24.04	before 6.8.0-147.147.aikido.90	6.8.0-147.147.aikido.90
`kernel-livepatch-SLE15-SP7-RT_Update_8` SUSE:Linux Enterprise Live Patching 15 SP7	before 1-150700.1.3.1	1-150700.1.3.1
`kernel-rt` SUSE:Real Time Module 15 SP7	before 6.4.0-150700.7.28.1	6.4.0-150700.7.28.1
`kernel-source-rt` SUSE:Real Time Module 15 SP7	before 6.4.0-150700.7.28.1	6.4.0-150700.7.28.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP7	before 6.4.0-150700.7.28.1	6.4.0-150700.7.28.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7	before 6.4.0-150700.20.24.1	6.4.0-150700.20.24.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7	before 6.4.0-150700.20.24.1	6.4.0-150700.20.24.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7	before 6.4.0-150700.20.24.1	6.4.0-150700.20.24.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP6	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-livepatch-SLE15-SP6_Update_19` SUSE:Linux Enterprise Live Patching 15 SP6	before 1-150600.13.3.1	1-150600.13.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP6	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-64kb` SUSE:Linux Enterprise Server 15 SP6-LTSS	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-default` SUSE:Linux Enterprise Server 15 SP6-LTSS	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-default-base` SUSE:Linux Enterprise Server 15 SP6-LTSS	before 6.4.0-150600.23.84.1.150600.12.38.1	6.4.0-150600.23.84.1.150600.12.38.1
`kernel-docs` SUSE:Linux Enterprise Server 15 SP6-LTSS	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-obs-build` SUSE:Linux Enterprise Server 15 SP6-LTSS	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-source` SUSE:Linux Enterprise Server 15 SP6-LTSS	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-syms` SUSE:Linux Enterprise Server 15 SP6-LTSS	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server 15 SP6-LTSS	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-default` SUSE:Linux Enterprise Server for SAP Applications 15 SP6	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-default-base` SUSE:Linux Enterprise Server for SAP Applications 15 SP6	before 6.4.0-150600.23.84.1.150600.12.38.1	6.4.0-150600.23.84.1.150600.12.38.1
`kernel-docs` SUSE:Linux Enterprise Server for SAP Applications 15 SP6	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-obs-build` SUSE:Linux Enterprise Server for SAP Applications 15 SP6	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-source` SUSE:Linux Enterprise Server for SAP Applications 15 SP6	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP Applications 15 SP6	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`dtb-aarch64` openSUSE:Leap 15.6	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-64kb` openSUSE:Leap 15.6	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-debug` openSUSE:Leap 15.6	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-default` openSUSE:Leap 15.6	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-default-base` openSUSE:Leap 15.6	before 6.4.0-150600.23.84.1.150600.12.38.1	6.4.0-150600.23.84.1.150600.12.38.1
`kernel-docs` openSUSE:Leap 15.6	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-kvmsmall` openSUSE:Leap 15.6	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-obs-build` openSUSE:Leap 15.6	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-obs-qa` openSUSE:Leap 15.6	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-source` openSUSE:Leap 15.6	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-syms` openSUSE:Leap 15.6	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-zfcpdump` openSUSE:Leap 15.6	before 6.4.0-150600.23.84.1	6.4.0-150600.23.84.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 6.4.0-150700.53.28.1	6.4.0-150700.53.28.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 6.4.0-150700.53.28.1	6.4.0-150700.53.28.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 6.4.0-150700.53.28.1.150700.17.19.1	6.4.0-150700.53.28.1.150700.17.19.1
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 6.4.0-150700.53.28.1	6.4.0-150700.53.28.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 6.4.0-150700.53.28.1	6.4.0-150700.53.28.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP7	before 6.4.0-150700.53.28.1	6.4.0-150700.53.28.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP7	before 6.4.0-150700.53.28.1	6.4.0-150700.53.28.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP7	before 6.4.0-150700.53.28.1	6.4.0-150700.53.28.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP7	before 6.4.0-150700.53.28.1	6.4.0-150700.53.28.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP7	before 6.4.0-150700.53.28.1	6.4.0-150700.53.28.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP7	before 6.4.0-150700.53.28.1	6.4.0-150700.53.28.1
`kernel-livepatch-SLE15-SP7_Update_8` SUSE:Linux Enterprise Live Patching 15 SP7	before 1-150700.15.3.1	1-150700.15.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP7	before 6.4.0-150700.53.28.1	6.4.0-150700.53.28.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP7	before 6.4.0-150700.53.28.1	6.4.0-150700.53.28.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.3	before 5.14.21-150400.15.142.1	5.14.21-150400.15.142.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.3	before 5.14.21-150400.15.142.1	5.14.21-150400.15.142.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.4	before 5.14.21-150400.15.142.1	5.14.21-150400.15.142.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.4	before 5.14.21-150400.15.142.1	5.14.21-150400.15.142.1
`kernel-default` SUSE:Linux Enterprise Micro 5.5	before 5.14.21-150500.55.136.1	5.14.21-150500.55.136.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.5	before 5.14.21-150500.55.136.1.150500.6.67.1	5.14.21-150500.55.136.1.150500.6.67.1
`kernel-source` SUSE:Linux Enterprise Micro 5.5	before 5.14.21-150500.55.136.1	5.14.21-150500.55.136.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP5	before 5.14.21-150500.55.136.1	5.14.21-150500.55.136.1
`kernel-livepatch-SLE15-SP5_Update_35` SUSE:Linux Enterprise Live Patching 15 SP5	before 1-150500.11.3.1	1-150500.11.3.1
`kernel-64kb` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS	before 5.14.21-150500.55.136.1	5.14.21-150500.55.136.1
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS	before 5.14.21-150500.55.136.1	5.14.21-150500.55.136.1
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS	before 5.14.21-150500.55.136.1.150500.6.67.1	5.14.21-150500.55.136.1.150500.6.67.1
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-aws-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-aws-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less 5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1	None known
`linux-aws-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1 Show 45 moreShow less 5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1	None known
`linux-aws-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1	None known
`linux-azure-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less 5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2	None known
`linux-azure-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less 5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1	None known
`linux-azure-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1 Show 45 moreShow less 5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1	None known
`linux-azure-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1	None known
`linux-azure-fde` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less 5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1	None known
`linux-azure-fde-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-1019.24~20.04.1.15.15.0-1020.25~20.04.1.15.15.0-1021.26~20.04.1.15.15.0-1029.36~20.04.1.15.15.0-1030.37~20.04.1.1 Show 45 moreShow less 5.15.0-1031.38~20.04.1.15.15.0-1033.40~20.04.1.15.15.0-1034.41~20.04.1.25.15.0-1035.42~20.04.1.15.15.0-1036.43~20.04.1.15.15.0-1037.44~20.04.1.15.15.0-1038.45~20.04.1.15.15.0-1039.46~20.04.1.15.15.0-1040.47~20.04.1.15.15.0-1041.48~20.04.1.15.15.0-1042.49~20.04.1.15.15.0-1043.50~20.04.1.15.15.0-1046.53~20.04.1.15.15.0-1047.54~20.04.1.15.15.0-1049.56~20.04.1.15.15.0-1050.57~20.04.1.15.15.0-1051.59~20.04.1.15.15.0-1052.60~20.04.1.15.15.0-1053.61~20.04.1.15.15.0-1054.62~20.04.1.15.15.0-1056.64~20.04.1.15.15.0-1057.65~20.04.1.15.15.0-1058.66~20.04.2.15.15.0-1059.67~20.04.1.15.15.0-1060.69~20.04.1.15.15.0-1061.70~20.04.1.15.15.0-1063.72~20.04.1.15.15.0-1064.73~20.04.1.15.15.0-1065.74~20.04.1.15.15.0-1067.76~20.04.1.15.15.0-1068.77~20.04.1.15.15.0-1070.79~20.04.1.15.15.0-1071.80~20.04.1.15.15.0-1072.81~20.04.1.15.15.0-1073.82~20.04.1.15.15.0-1074.83~20.04.1.15.15.0-1076.85~20.04.1.15.15.0-1078.87~20.04.1.15.15.0-1081.90~20.04.1.15.15.0-1082.91~20.04.1.15.15.0-1086.95~20.04.1.15.15.0-1087.96~20.04.1.15.15.0-1088.97~20.04.1.15.15.0-1089.98~20.04.1.15.15.0-1091.100~20.04.1.1	None known
`linux-gcp-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less 5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3	None known
`linux-gcp-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less 5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1	None known
`linux-gcp-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2 Show 45 moreShow less 5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.15.15.0-1065.73~20.04.15.15.0-1066.74~20.04.15.15.0-1067.75~20.04.15.15.0-1068.76~20.04.15.15.0-1069.77~20.04.15.15.0-1070.78~20.04.15.15.0-1071.79~20.04.15.15.0-1072.80~20.04.15.15.0-1073.81~20.04.15.15.0-1074.83~20.04.1	None known
`linux-gcp-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41	None known
`linux-gke` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less 5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111	None known
`linux-gke-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less 5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1	None known
`linux-gkeop` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less 5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77	None known
`linux-gkeop-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 40 moreShow less 5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1	None known
`linux-hwe-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less 5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1	None known
`linux-hwe-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less 5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1	None known
`linux-hwe-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 45 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1	None known
`linux-hwe-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less 5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1	None known
`linux-ibm-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1 Show 45 moreShow less 5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.15.15.0-1057.60~20.04.15.15.0-1058.61~20.04.15.15.0-1059.62~20.04.15.15.0-1060.63~20.04.15.15.0-1061.64~20.04.15.15.0-1062.65~20.04.15.15.0-1063.66~20.04.15.15.0-1064.67~20.04.15.15.0-1065.68~20.04.15.15.0-1066.69~20.04.15.15.0-1067.70~20.04.15.15.0-1068.71~20.04.15.15.0-1069.72~20.04.15.15.0-1074.77~20.04.15.15.0-1075.78~20.04.15.15.0-1076.79~20.04.15.15.0-1078.81~20.04.15.15.0-1079.82~20.04.15.15.0-1080.83~20.04.15.15.0-1081.84~20.04.15.15.0-1083.86~20.04.15.15.0-1085.88~20.04.15.15.0-1086.89~20.04.15.15.0-1087.90~20.04.15.15.0-1089.92~20.04.15.15.0-1090.93~20.04.15.15.0-1091.94~20.04.15.15.0-1092.95~20.04.15.15.0-1093.96~20.04.15.15.0-1094.97~20.04.1	None known
`linux-intel-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19	None known
`linux-intel-iotg-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-1003.5~20.04.15.15.0-1008.11~20.04.15.15.0-1010.14~20.04.15.15.0-1015.20~20.04.25.15.0-1016.21~20.04.1 Show 45 moreShow less 5.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1021.26~20.04.15.15.0-1023.28~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1030.35~20.04.15.15.0-1031.36~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1040.46~20.04.15.15.0-1043.49~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1060.66~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.25.15.0-1074.80~20.04.15.15.0-1077.83~20.04.15.15.0-1078.84~20.04.15.15.0-1079.85~20.04.15.15.0-1083.89~20.04.15.15.0-1084.90~20.04.15.15.0-1085.91~20.04.15.15.0-1086.92~20.04.1	None known
`linux-lowlatency-hwe-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 45 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.88~20.04.15.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.95~20.04.15.15.0-87.96~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-110.120~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1	None known
`linux-nvidia-tegra-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-1009.9~20.04.15.15.0-1010.10~20.04.15.15.0-1012.12~20.04.15.15.0-1014.14~20.04.15.15.0-1015.15~20.04.1 Show 37 moreShow less 5.15.0-1016.16~20.04.15.15.0-1017.17~20.04.15.15.0-1018.18~20.04.15.15.0-1019.19~20.04.15.15.0-1020.20~20.04.15.15.0-1022.22~20.04.15.15.0-1025.25~20.04.15.15.0-1027.27~20.04.15.15.0-1030.30~20.04.15.15.0-1032.32~20.04.15.15.0-1039.39~20.04.15.15.0-1040.40~20.04.15.15.0-1041.41~20.04.15.15.0-1042.42~20.04.15.15.0-1043.43~20.04.15.15.0-1044.44~20.04.15.15.0-1045.45~20.04.15.15.0-1046.46~20.04.15.15.0-1047.47~20.04.15.15.0-1048.48~20.04.15.15.0-1049.49~20.04.15.15.0-1050.50~20.04.15.15.0-1051.51~20.04.15.15.0-1052.52~20.04.25.15.0-1053.53~20.04.15.15.0-1055.55~20.04.15.15.0-1057.57~20.04.15.15.0-1058.58~20.04.15.15.0-1060.60~20.04.15.15.0-1061.61~20.04.15.15.0-1063.63~20.04.15.15.0-1064.66~20.04.15.15.0-1065.67~20.04.15.15.0-1066.68~20.04.15.15.0-1067.69~20.04.15.15.0-1068.70~20.04.15.15.0-1070.72~20.04.1	None known
`linux-oem-5.10` Ubuntu:20.04:LTS	All versions, plus listed versions 5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17 Show 21 moreShow less 5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61	None known
`linux-oem-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21 Show 7 moreShow less 5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36	None known
`linux-oem-5.14` Ubuntu:20.04:LTS	All versions, plus listed versions 5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10 Show 30 moreShow less 5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67	None known
`linux-oem-5.6` Ubuntu:20.04:LTS	All versions, plus listed versions 5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13 Show 24 moreShow less 5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60	None known
`linux-oracle-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-oracle-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1 Show 7 moreShow less 5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1	None known
`linux-oracle-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-1007.9~20.04.15.15.0-1013.17~20.04.15.15.0-1016.20~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.1 Show 45 moreShow less 5.15.0-1019.24~20.04.15.15.0-1021.27~20.04.15.15.0-1022.28~20.04.15.15.0-1025.31~20.04.25.15.0-1027.33~20.04.15.15.0-1029.35~20.04.15.15.0-1030.36~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1041.47~20.04.15.15.0-1042.48~20.04.15.15.0-1044.50~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1047.53~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1053.59~20.04.15.15.0-1054.60~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1074.80~20.04.1	None known
`dtb-aarch64` openSUSE:Leap 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-64kb` openSUSE:Leap 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-azure` openSUSE:Leap 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-default` openSUSE:Leap 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-default-base` openSUSE:Leap 16.0	before 6.12.0-160000.9.1.160000.2.6	6.12.0-160000.9.1.160000.2.6
`kernel-docs` openSUSE:Leap 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-kvmsmall` openSUSE:Leap 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-obs-build` openSUSE:Leap 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-obs-qa` openSUSE:Leap 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-rt` openSUSE:Leap 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-source` openSUSE:Leap 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-syms` openSUSE:Leap 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-zfcpdump` openSUSE:Leap 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1

History

History
Recorded	Changed	Sources
Nov 4, 2026	affected	OSV
Nov 3, 2026	facts	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-68183 is a high vulnerability (CVSS 7.8) in Linux, published December 16, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.15%, the 4th percentile. Fixed in kernel 5.14.0-687.12.1.el9_8.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 1,365 package rows, 630 versions, 4,054 references and the rest of 16 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 15 source records.