Every CVE Search/ Get API key

CVE-2026-43027

netfilter: nf_conntrack_helper: pass helper to expect cleanup

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_conntrack_helper: pass helper to expect cleanup

nf_conntrack_helper_unregister() calls nf_ct_expect_iterate_destroy() to remove expectations belonging to the helper being unregistered. However, it passes NULL instead of the helper pointer as the data argument, so expect_iter_me() never matches any expectation and all of them survive the cleanup.

After unregister returns, nfnl_cthelper_del() frees the helper object immediately. Subsequent expectation dumps or packet-driven init_conntrack() calls then dereference the freed exp->helper, causing a use-after-free.

Pass the actual helper pointer so expectations referencing it are properly destroyed before the helper object is freed.

BUG: KASAN: slab-use-after-free in string+0x38f/0x430 Read of size 1 at addr ffff888003b14d20 by task poc/103 Call Trace: string+0x38f/0x430 vsnprintf+0x3cc/0x1170 seq_printf+0x17a/0x240 exp_seq_show+0x2e5/0x560 seq_read_iter+0x419/0x1280 proc_reg_read+0x1ac/0x270 vfs_read+0x179/0x930 ksys_read+0xef/0x1c0 Freed by task 103: The buggy address is located 32 bytes inside of freed 192-byte region [ffff888003b14d00, ffff888003b14dc0)

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.13%Up 0.1 points since May 2, 2026
90%50%10%1%

What each source reports

NVD Score used 7.8

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_conntrack_helper: pass helper to expect cleanup

nf_conntrack_helper_unregister() calls nf_ct_expect_iterate_destroy() to remove expectations belonging to the helper being unregistered. However, it passes NULL instead of the helper pointer as the data argument, so expect_iter_me() never matches any expectation and all of them survive the cleanup.

After unregister returns, nfnl_cthelper_del() frees the helper object immediately. Subsequent expectation dumps or packet-driven init_conntrack() calls then dereference the freed exp->helper, causing a use-after-free.

Pass the actual helper pointer so expectations referencing it are properly destroyed before the helper object is freed.

BUG: KASAN: slab-use-after-free in string+0x38f/0x430 Read of size 1 at addr ffff888003b14d20 by task poc/103 Call Trace: string+0x38f/0x430 vsnprintf+0x3cc/0x1170 seq_printf+0x17a/0x240 exp_seq_show+0x2e5/0x560 seq_read_iter+0x419/0x1280 proc_reg_read+0x1ac/0x270 vfs_read+0x179/0x930 ksys_read+0xef/0x1c0 Freed by task 103: The buggy address is located 32 bytes inside of freed 192-byte region [ffff888003b14d00, ffff888003b14dc0)

Record
CVE-2026-43027
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-06
CVE List No score

netfilter: nf_conntrack_helper: pass helper to expect cleanup

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_conntrack_helper: pass helper to expect cleanup

nf_conntrack_helper_unregister() calls nf_ct_expect_iterate_destroy() to remove expectations belonging to the helper being unregistered. However, it passes NULL instead of the helper pointer as the data argument, so expect_iter_me() never matches any expectation and all of them survive the cleanup.

After unregister returns, nfnl_cthelper_del() frees the helper object immediately. Subsequent expectation dumps or packet-driven init_conntrack() calls then dereference the freed exp->helper, causing a use-after-free.

Pass the actual helper pointer so expectations referencing it are properly destroyed before the helper object is freed.

BUG: KASAN: slab-use-after-free in string+0x38f/0x430 Read of size 1 at addr ffff888003b14d20 by task poc/103 Call Trace: string+0x38f/0x430 vsnprintf+0x3cc/0x1170 seq_printf+0x17a/0x240 exp_seq_show+0x2e5/0x560 seq_read_iter+0x419/0x1280 proc_reg_read+0x1ac/0x270 vfs_read+0x179/0x930 ksys_read+0xef/0x1c0 Freed by task 103: The buggy address is located 32 bytes inside of freed 192-byte region [ffff888003b14d00, ffff888003b14dc0)

Record
CVE-2026-43027
Updated
2026-11-06
EUVDEUVD-2026-26626 No score

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_conntrack_helper: pass helper to expect cleanup

nf_conntrack_helper_unregister() calls nf_ct_expect_iterate_destroy() to remove expectations belonging to the helper being unregistered. However, it passes NULL instead of the helper pointer as the data argument, so expect_iter_me() never matches any expectation and all of them survive the cleanup.

After unregister returns, nfnl_cthelper_del() frees the helper object immediately. Subsequent expectation dumps or packet-driven init_conntrack() calls then dereference the freed exp->helper, causing a use-after-free.

Pass the actual helper pointer so expectations referencing it are properly destroyed before the helper object is freed.

BUG: KASAN: slab-use-after-free in string+0x38f/0x430 Read of size 1 at addr ffff888003b14d20 by task poc/103 Call Trace: string+0x38f/0x430 vsnprintf+0x3cc/0x1170 seq_printf+0x17a/0x240 exp_seq_show+0x2e5/0x560 seq_read_iter+0x419/0x1280 proc_reg_read+0x1ac/0x270 vfs_read+0x179/0x930 ksys_read+0xef/0x1c0 Freed by task 103: The buggy address is located 32 bytes inside of freed 192-byte region [ffff888003b14d00, ffff888003b14dc0)

Record
EUVD-2026-26626
Updated
2026-11-06
GitHub AdvisoriesGHSA-f42g-qv35-qm2v 7.8

In the Linux kernel, the following vulnerability has been resolved: netfilter:...

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_conntrack_helper: pass helper to expect cleanup

nf_conntrack_helper_unregister() calls nf_ct_expect_iterate_destroy() to remove expectations belonging to the helper being unregistered. However, it passes NULL instead of the helper pointer as the data argument, so expect_iter_me() never matches any expectation and all of them survive the cleanup.

After unregister returns, nfnl_cthelper_del() frees the helper object immediately. Subsequent expectation dumps or packet-driven init_conntrack() calls then dereference the freed exp->helper, causing a use-after-free.

Pass the actual helper pointer so expectations referencing it are properly destroyed before the helper object is freed.

BUG: KASAN: slab-use-after-free in string+0x38f/0x430 Read of size 1 at addr ffff888003b14d20 by task poc/103 Call Trace: string+0x38f/0x430 vsnprintf+0x3cc/0x1170 seq_printf+0x17a/0x240 exp_seq_show+0x2e5/0x560 seq_read_iter+0x419/0x1280 proc_reg_read+0x1ac/0x270 vfs_read+0x179/0x930 ksys_read+0xef/0x1c0 Freed by task 103: The buggy address is located 32 bytes inside of freed 192-byte region [ffff888003b14d00, ffff888003b14dc0)

Record
GHSA-f42g-qv35-qm2v
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
OSVBELL-CVE-2026-43027 7.8
Record
BELL-CVE-2026-43027
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2026-43027 7.8

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_helper: pass helper to expect cleanup nf_conntrack_helper_unregister() calls nf_ct_expect_iterate_destroy() to remove expectations belonging to the helper being unregistered. However, it passes NULL instead of the helper pointer as the data argument, so expect_iter_me() never matches any expectation and all of them survive the cleanup. After unregister returns, nfnl_cthelper_del() frees the helper object immediately. Subsequent expectation dumps or packet-driven init_conntrack() calls then dereference the freed exp->helper, causing a use-after-free. Pass the actual helper pointer so expectations referencing it are properly destroyed before the helper object is freed. BUG: KASAN: slab-use-after-free in string+0x38f/0x430 Read of size 1 at addr ffff888003b14d20 by task poc/103 Call Trace: string+0x38f/0x430 vsnprintf+0x3cc/0x1170 seq_printf+0x17a/0x240 exp_seq_show+0x2e5/0x560 seq_read_iter+0x419/0x1280 proc_reg_read+0x1ac/0x270 vfs_read+0x179/0x930 ksys_read+0xef/0x1c0 Freed by task 103: The buggy address is located 32 bytes inside of freed 192-byte region [ffff888003b14d00, ffff888003b14dc0)

Record
DEBIAN-CVE-2026-43027
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 48 moreShow less
OSVOESA-2026-2754 9.1

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

fbdev: fix potential buffer overflow in do_register_framebuffer()

The current implementation may lead to buffer overflow when:

  1. Unregistration creates NULL gaps in registered_fb[]
  2. All array slots become occupied despite num_registered_fb < FB_MAX
  3. The registration loop exceeds array bounds

Add boundary check to prevent registered_fb[FB_MAX] access.(CVE-2025-38702)

In the Linux kernel, the following vulnerability has been resolved:

hfs: validate record offset in hfsplus_bmap_alloc

hfsplus_bmap_alloc can trigger a crash if a record offset or length is larger than node_size

[ 15.264282] BUG: KASAN: slab-out-of-bounds in hfsplus_bmap_alloc+0x887/0x8b0 [ 15.265192] Read of size 8 at addr ffff8881085ca188 by task test/183 [ 15.265949] [ 15.266163] CPU: 0 UID: 0 PID: 183 Comm: test Not tainted 6.17.0-rc2-gc17b750b3ad9 #14 PREEMPT(voluntary) [ 15.266165] Hardware name: QEMU Ubuntu 24.04 PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 15.266167] Call Trace: [ 15.266168] <TASK> [ 15.266169] dump_stack_lvl+0x53/0x70 [ 15.266173] print_report+0xd0/0x660 [ 15.266181] kasan_report+0xce/0x100 [ 15.266185] hfsplus_bmap_alloc+0x887/0x8b0 [ 15.266208] hfs_btree_inc_height.isra.0+0xd5/0x7c0 [ 15.266217] hfsplus_brec_insert+0x870/0xb00 [ 15.266222] __hfsplus_ext_write_extent+0x428/0x570 [ 15.266225] __hfsplus_ext_cache_extent+0x5e/0x910 [ 15.266227] hfsplus_ext_read_extent+0x1b2/0x200 [ 15.266233] hfsplus_file_extend+0x5a7/0x1000 [ 15.266237] hfsplus_get_block+0x12b/0x8c0 [ 15.266238] __block_write_begin_int+0x36b/0x12c0 [ 15.266251] block_write_begin+0x77/0x110 [ 15.266252] cont_write_begin+0x428/0x720 [ 15.266259] hfsplus_write_begin+0x51/0x100 [ 15.266262] cont_write_begin+0x272/0x720 [ 15.266270] hfsplus_write_begin+0x51/0x100 [ 15.266274] generic_perform_write+0x321/0x750 [ 15.266285] generic_file_write_iter+0xc3/0x310 [ 15.266289] __kernel_write_iter+0x2fd/0x800 [ 15.266296] dump_user_range+0x2ea/0x910 [ 15.266301] elf_core_dump+0x2a94/0x2ed0 [ 15.266320] vfs_coredump+0x1d85/0x45e0 [ 15.266349] get_signal+0x12e3/0x1990 [ 15.266357] arch_do_signal_or_restart+0x89/0x580 [ 15.266362] irqentry_exit_to_user_mode+0xab/0x110 [ 15.266364] asm_exc_page_fault+0x26/0x30 [ 15.266366] RIP: 0033:0x41bd35 [ 15.266367] Code: bc d1 f3 0f 7f 27 f3 0f 7f 6f 10 f3 0f 7f 77 20 f3 0f 7f 7f 30 49 83 c0 0f 49 29 d0 48 8d 7c 17 31 e9 9f 0b 00 00 66 0f ef c0 <f3> 0f 6f 0e f3 0f 6f 56 10 66 0f 74 c1 66 0f d7 d0 49 83 f8f [ 15.266369] RSP: 002b:00007ffc9e62d078 EFLAGS: 00010283 [ 15.266371] RAX: 00007ffc9e62d100 RBX: 0000000000000000 RCX: 0000000000000000 [ 15.266372] RDX: 00000000000000e0 RSI: 0000000000000000 RDI: 00007ffc9e62d100 [ 15.266373] RBP: 0000400000000040 R08: 00000000000000e0 R09: 0000000000000000 [ 15.266374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 15.266375] R13: 0000000000000000 R14: 0000000000000000 R15: 0000400000000000 [ 15.266376] </TASK>

When calling hfsplus_bmap_alloc to allocate a free node, this function first retrieves the bitmap from header node and map node using node->page together with the offset and length from hfs_brec_lenoff

len = hfs_brec_lenoff(node, 2, &amp;off16);
off = off16;

off += node-&gt;page_offset;
pagep = node-&gt;page + (off &gt;&gt; PAGE_SHIFT);
data = kmap_local_page(*pagep);

However, if the retrieved offset or length is invalid(i.e. exceeds node_size), the code may end up accessing pages outside the allocated range for this node.

This patch adds proper validation of both offset and length before use, preventing out-of-bounds page access. Move is_bnode_offset_valid and check_and_correct_requested_length to hfsplus_fs.h, as they may be required by other…

Record
OESA-2026-2754
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:21556 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:21556
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:21557 7.5

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:21557
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2026:21706 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:21706
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:21745 7.8

Red Hat Security Advisory: kernel-rt security update

Record
RHSA-2026:21745
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:34094 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:34094
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:36767 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:36767
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:39371 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:39371
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:39983 7.8

Red Hat Security Advisory: kernel-rt security update

Record
RHSA-2026:39983
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:40068 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:40068
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:40082 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:40082
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:40760 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:40760
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:47633 7.1

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:47633
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:21556 7.8

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CVE-2025-38653)

  • kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)

  • kernel: nbd: defer config unlock in nbd_genl_connect (CVE-2025-68366)

  • kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724)

  • kernel: iommu: disable SVA when CONFIG_X86 is set (CVE-2025-71089)

  • kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392)

  • kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)

  • kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)

  • kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)

  • kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)

  • kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)

  • kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)

  • kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)

  • kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)

  • kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect() (CVE-2026-43023)

  • kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110)

  • kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)

  • kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)

  • kernel: mm/page_alloc: clear page->private in free_pages_prepare() (CVE-2026-43303)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:21556
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:21557 7.5

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: can: j1939: j1939_session_new(): fix skb reference counting (CVE-2024-56645)

  • kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)

  • kernel: mm: thp: deny THP for files on anonymous inodes (CVE-2026-23375)

  • kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392)

  • kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)

  • kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)

  • kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)

  • kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)

  • kernel: io_uring/rsrc: reject zero-length fixed buffer import (CVE-2026-43006)

  • kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)

  • kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)

  • kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect() (CVE-2026-43023)

  • kernel: netfilter: ctnetlink: ensure safe access to master conntrack (CVE-2026-43116)

  • kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110)

  • kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)

  • kernel: Linux kernel dpaa2-switch: Kernel memory corruption via out-of-bounds write (CVE-2026-43205)

  • kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)

  • kernel: mm/page_alloc: clear page->private in free_pages_prepare() (CVE-2026-43303)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:21557
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:21706 7.8

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)

  • kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)

  • kernel: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CVE-2025-68347)

  • kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116)

  • kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)

  • kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)

  • kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)

  • kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)

  • kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)

  • kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)

  • kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)

  • kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)

  • kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)

  • kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)

  • kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)

  • kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)

  • kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)

  • kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:21706
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:21745 7.8

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)

  • kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)

  • kernel: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CVE-2025-68347)

  • kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116)

  • kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)

  • kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)

  • kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)

  • kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)

  • kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)

  • kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)

  • kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)

  • kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)

  • kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)

  • kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)

  • kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)

  • kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)

  • kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)

  • kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:21745
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2026-43027 7.8

CVE-2026-43027 in linux - Patched by Root

Root has patched CVE-2026-43027 in the linux package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2026-43027
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-UBUNTU-2204-CVE-2026-43027 7.8

CVE-2026-43027 in linux - Patched by Root

Root has patched CVE-2026-43027 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2204-CVE-2026-43027
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVROOT-OS-UBUNTU-2404-CVE-2026-43027 7.8

CVE-2026-43027 in linux - Patched by Root

Root has patched CVE-2026-43027 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2404-CVE-2026-43027
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVUBUNTU-CVE-2026-43027 7.8

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_helper: pass helper to expect cleanup nf_conntrack_helper_unregister() calls nf_ct_expect_iterate_destroy() to remove expectations belonging to the helper being unregistered. However, it passes NULL instead of the helper pointer as the data argument, so expect_iter_me() never matches any expectation and all of them survive the cleanup. After unregister returns, nfnl_cthelper_del() frees the helper object immediately. Subsequent expectation dumps or packet-driven init_conntrack() calls then dereference the freed exp->helper, causing a use-after-free. Pass the actual helper pointer so expectations referencing it are properly destroyed before the helper object is freed. BUG: KASAN: slab-use-after-free in string+0x38f/0x430 Read of size 1 at addr ffff888003b14d20 by task poc/103 Call Trace: string+0x38f/0x430 vsnprintf+0x3cc/0x1170 seq_printf+0x17a/0x240 exp_seq_show+0x2e5/0x560 seq_read_iter+0x419/0x1280 proc_reg_read+0x1ac/0x270 vfs_read+0x179/0x930 ksys_read+0xef/0x1c0 Freed by task 103: The buggy address is located 32 bytes inside of freed 192-byte region [ffff888003b14d00, ffff888003b14dc0)

Record
UBUNTU-CVE-2026-43027
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVALSA-2026:21556 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CVE-2025-38653)
  • kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)
  • kernel: nbd: defer config unlock in nbd_genl_connect (CVE-2025-68366)
  • kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724)
  • kernel: iommu: disable SVA when CONFIG_X86 is set (CVE-2025-71089)
  • kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392)
  • kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)
  • kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)
  • kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)
  • kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)
  • kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)
  • kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)
  • kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)
  • kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)
  • kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect() (CVE-2026-43023)
  • kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110)
  • kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)
  • kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)
  • kernel: mm/page_alloc: clear page->private in free_pages_prepare() (CVE-2026-43303)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:21556
Updated
2026-11-02
OSVALSA-2026:21557 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: can: j1939: j1939_session_new(): fix skb reference counting (CVE-2024-56645)
  • kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)
  • kernel: mm: thp: deny THP for files on anonymous inodes (CVE-2026-23375)
  • kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392)
  • kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)
  • kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)
  • kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)
  • kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)
  • kernel: io_uring/rsrc: reject zero-length fixed buffer import (CVE-2026-43006)
  • kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)
  • kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)
  • kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect() (CVE-2026-43023)
  • kernel: netfilter: ctnetlink: ensure safe access to master conntrack (CVE-2026-43116)
  • kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110)
  • kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)
  • kernel: Linux kernel dpaa2-switch: Kernel memory corruption via out-of-bounds write (CVE-2026-43205)
  • kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)
  • kernel: mm/page_alloc: clear page->private in free_pages_prepare() (CVE-2026-43303)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:21557
Updated
2026-11-02
OSVALSA-2026:21706 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)
  • kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)
  • kernel: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CVE-2025-68347)
  • kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116)
  • kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)
  • kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
  • kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)
  • kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)
  • kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)
  • kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)
  • kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)
  • kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)
  • kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)
  • kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)
  • kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)
  • kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)
  • kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)
  • kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:21706
Updated
2026-11-02
OSVALSA-2026:21745 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)
  • kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)
  • kernel: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CVE-2025-68347)
  • kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116)
  • kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)
  • kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
  • kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)
  • kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)
  • kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)
  • kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)
  • kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)
  • kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)
  • kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)
  • kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)
  • kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)
  • kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)
  • kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)
  • kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:21745
Updated
2026-11-02
OSVCLSA-2026-1779375889 No score

kernel: Fix of 95 CVEs

  • perf/x86/intel/uncore: Fix die ID init and look up bugs {CVE-2026-43344}
  • x86/apic: Disable x2apic on resume if the kernel expects so {CVE-2026-43363}
  • drm/amdgpu: Fix use-after-free race in VM acquire {CVE-2026-43370}
  • dm: remove fake timeout to avoid leak request {CVE-2026-43314}
  • md/bitmap: fix GPF in write_page caused by resize race {CVE-2026-43163}
  • drm: Account property blob allocations to memcg {CVE-2026-43287}
  • drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() {CVE-2026-43206}
  • Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock {CVE-2026-31500}
  • net/sched: Fix backlog accounting in qdisc_dequeue_internal {CVE-2025-39677}
  • l2tp: avoid one data-race in l2tp_tunnel_del_work() {CVE-2026-23120}
  • net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() {CVE-2025-39876}
  • espintcp: fix skb leaks {CVE-2025-38057}
  • cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() {CVE-2025-37829}
  • tipc: fix NULL pointer dereference in tipc_mon_reinit_self() {CVE-2025-37824}
  • KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses {CVE-2025-23141}
  • virtiofs: add filesystem context source name check {CVE-2025-37773}
  • netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets {CVE-2025-22063}
  • ppp: Fix KMSAN uninit-value warning with bpf {CVE-2025-21922}
  • wifi: cfg80211: regulatory: improve invalid hints checking {CVE-2025-21910}
  • wifi: ath11k: fix RCU stall while reaping monitor destination ring {CVE-2024-58097}
  • net/sctp: Prevent autoclose integer overflow in sctp_association_init() {CVE-2024-57938}
  • ubi: fastmap: Fix duplicate slab cache names while attaching {CVE-2024-53172}
  • drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() {CVE-2024-56369}
  • firmware: arm_scpi: Check the DVFS OPP count returned by the firmware {CVE-2024-53157}
  • vsock: Fix sk_error_queue memory leak {CVE-2024-53118}
  • mm: fix NULL pointer dereference in alloc_pages_bulk_noprof {CVE-2024-53113}
  • exec: don't WARN for racy path_noexec check {CVE-2024-50010}
  • drm/amd/display: Initialize get_bytes_per_element's default to 1 {CVE-2024-49892}
  • ppp: do not assume bh is held in ppp_channel_bridge_input() {CVE-2024-49946}
  • drm/amd/display: Skip Recompute DSC Params if no Stream on Link {CVE-2024-47683}
  • x86/sgx: Fix deadlock in SGX NUMA node search {CVE-2024-49856}
  • pktgen: use cpus_read_lock() in pg_net_init() {CVE-2024-46681}
  • nfsd: call cache_put if xdr_reserve_space returns NULL {CVE-2024-47737}
  • uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind {CVE-2024-46739}
  • drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration {CVE-2024-46812}
  • net/mlx5: Fix bridge mode operations when there are no VFs {CVE-2024-46857}
  • Input: MT - limit max slots {CVE-2024-45008}
  • net/mlx5e: SHAMPO, Fix incorrect page release {CVE-2024-46717}
  • netfilter: ctnetlink: use helper function to calculate expect ID {CVE-2024-44944}
  • lib: objagg: Fix general protection fault {CVE-2024-43846}
  • drm/qxl: Add check for drm_cvt_mode {CVE-2024-43829}
  • mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems {CVE-2024-42073}
  • drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes {CVE-2024-42101}
  • RDMA/mlx5: Add check for srq max_sge attribute {CVE-2024-40990}
  • tracing: Build event generation tests only as modules {CVE-2024-41004}
  • KEYS: trusted: Fix memory leak in tpm2_key_encode() {CVE-2024-36967}
  • epoll: be better about file lifetimes {CVE-2024-38580}
  • drm/radeon: fix UBSAN warning in kv_dpm.c {CVE-2024-40988}
  • RDMA/srpt: Add a check for valid 'mad_agent' pointer {CVE-2023-54274}
  • x86/hyperv: Disable IBT when hypercall page lacks ENDBR instruction {CVE-2023-54172}
  • ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() {CVE-2024-26772}
  • iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected {CVE-2024-26891}
  • dm: don't attempt to queue IO under RCU…
Record
CLSA-2026-1779375889
Updated
2026-11-02
OSVCLSA-2026-1780562693 No score

kernel: Fix of 111 CVEs

  • fbcon: Fix OOB access in font allocation {CVE-2025-39967}
  • fbcon: fix integer overflow in fbcon_do_set_font {CVE-2025-39967}
  • macvlan: observe an RCU grace period in macvlan_common_newlink() error path {CVE-2026-23273}
  • macvlan: fix error recovery in macvlan_common_newlink() {CVE-2026-23209}
  • net_sched: sch_sfq: move the limit validation {CVE-2025-37752}
  • bpf: Fix oob access in cgroup local storage {CVE-2025-38502}
  • ftrace: Fix possible use-after-free issue in ftrace_location() {CVE-2024-38588}
  • driver core: enforce device_lock for driver_match_device() {CVE-2026-31688}
  • scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT {CVE-2026-43475}
  • unshare: fix unshare_fs() handling {CVE-2026-43472}
  • netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path {CVE-2026-43451}
  • nvme-pci: Fix race bug in nvme_poll_irqdisable() {CVE-2026-43448}
  • e1000/e1000e: Fix leak in DMA error cleanup {CVE-2026-43445}
  • cgroup: fix race between task migration and iteration {CVE-2026-43439}
  • ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces {CVE-2026-43436}
  • usb: image: mdc800: kill download URB on timeout {CVE-2026-43425}
  • tipc: fix divide-by-zero in tipc_sk_filter_connect() {CVE-2026-43411}
  • nouveau/dpcd: return EBUSY for aux xfer if the device is asleep {CVE-2026-43381}
  • ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() {CVE-2026-43068}
  • netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP {CVE-2026-31424}
  • net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() {CVE-2026-31423}
  • net/sched: cls_flow: fix NULL pointer dereference on shared blocks {CVE-2026-31422}
  • net/sched: cls_fw: fix NULL pointer dereference on shared blocks {CVE-2026-31421}
  • netfilter: ipset: drop logically empty buckets in mtype_del {CVE-2026-31418}
  • netfilter: nfnetlink_log: account for netlink header size {CVE-2026-31416}
  • sunrpc: fix cache_request leak in cache_release {CVE-2026-31400}
  • PM: runtime: Fix a race condition related to device removal {CVE-2026-23452}
  • net: usb: kaweth: validate USB endpoints {CVE-2026-23312}
  • nvdimm/bus: Fix potential use after free in asynchronous initialization {CVE-2026-31399}
  • net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check {CVE-2026-23448}
  • nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set {CVE-2026-43449}
  • netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() {CVE-2026-43453}
  • netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() {CVE-2026-43450}
  • RDMA/umem: Fix double dma_buf_unpin in failure path {CVE-2026-43128}
  • usbip: validate number_of_packets in usbip_pack_ret_submit() {CVE-2026-31607}
  • net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown {CVE-2026-23454}
  • netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() {CVE-2025-38441}
  • nvmet: fix memory leak of bio integrity {CVE-2025-38405}
  • nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails. {CVE-2025-38400}
  • dmaengine: idxd: fix memory leak in error handling path of idxd_alloc {CVE-2025-38015}
  • bonding: check xdp prog when set bond mode {CVE-2025-22105}
  • usb: class: cdc-wdm: fix reordering issue in read code path {CVE-2026-43427}
  • netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD {CVE-2026-31428}
  • netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp {CVE-2026-31427}
  • ipv6: avoid overflows in ip6_datagram_send_ctl() {CVE-2026-31415}
  • net: atm: fix crash due to unvalidated vcc pointer in sigd_send() {CVE-2026-31411}
  • RDMA/umad: Reject negative data_len in ib_umad_write {CVE-2026-23243}
  • perf/x86/intel/uncore: Fix die ID init and look up bugs {CVE-2026-43344}
  • x86/apic: Disable x2apic on resume if the kernel expects so {CVE-2026-43363}
  • dm: remove fake timeout to avoid leak request {CVE-2026-43314}
  • drm: Account property blob allocations to memcg {CVE-2026-43287}
  • HID:…
Record
CLSA-2026-1780562693
Updated
2026-11-02
OSVCLSA-2026-1782145985 No score

kernel: Fix of 62 CVEs

  • libceph: prevent potential out-of-bounds reads in handle_auth_done() {CVE-2026-22984}
  • drm/i915: Fix NULL ptr deref by checking new_crtc_state {CVE-2023-53833}
  • netfilter: nf_tables: release flowtable after rcu grace period on error {CVE-2026-23392}
  • wifi: brcmfmac: validate bsscfg indices in IF events {CVE-2026-43110}
  • xfrm: hold dev ref until after transport_finish NF_HOOK {CVE-2026-31663}
  • mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() {CVE-2026-31586}
  • scsi: sg: Do not sleep in atomic context {CVE-2025-40259}
  • Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} {CVE-2023-53827}
  • drm/i915/gem: add missing boundary check in vm_access {CVE-2023-28410}
  • ASoC: SOF: debug: Fix potential buffer overflow by snprintf() {CVE-2022-50051}
  • tipc: fix use-after-free Read in tipc_named_reinit {CVE-2022-49696}
  • wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration {CVE-2022-49022}
  • ethtool: do not perform operations on net devices being unregistered {CVE-2021-47517}
  • cxgb4: avoid accessing registers when clearing filters {CVE-2021-47138}
  • bpf: Fix ringbuf helper function compatibility {CVE-2021-34866}
  • HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq {CVE-2026-43051}
  • Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold {CVE-2026-31408}
  • net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check {CVE-2026-23448}
  • nbd: defer config unlock in nbd_genl_connect {CVE-2025-68366}
  • asix: fix uninit-value in asix_mdio_read() {CVE-2021-47101}
  • kyber: fix out of bounds access when preempted {CVE-2021-46984}
  • can: bcm: add locking for bcm_op runtime updates {CVE-2025-38004}
  • tls: separate no-async decryption request handling from async {CVE-2024-58240}
  • ftrace: Also allocate and copy hash for reading of filter files {CVE-2025-39689}
  • Make filldir64 verify the directory entry filename is valid {CVE-2019-10220}
  • scsi: qla2xxx: Fix bsg_done() causing double free {CVE-2025-71238}
  • team: fix check for port enabled in team_queue_override_port_prio_changed() {CVE-2025-71091}
  • bonding: limit BOND_MODE_8023AD to Ethernet devices {CVE-2026-23099}
  • Bluetooth: btusb: revert use of devm_kzalloc in btusb {CVE-2025-71082}
  • proc/vmcore: fix clearing user buffer by properly using clear_user() {CVE-2021-47566}
  • nfsd: fix use-after-free due to delegation race {CVE-2021-47506}
  • drm: bridge/panel: Cleanup connector on bridge detach {CVE-2021-47063}
  • usb: class: cdc-wdm: fix reordering issue in read code path {CVE-2026-43427}
  • nfsd: fix heap overflow in NFSv4.0 LOCK replay cache {CVE-2026-31402}
  • ext4: convert inline data to extents when truncate exceeds inline size {CVE-2026-31452}
  • wifi: mac80211: check tdls flag in ieee80211_tdls_oper {CVE-2026-43052}
  • netfilter: nfnetlink_osf: avoid OOB read {CVE-2023-39189}
  • crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id {CVE-2025-68724}
  • ALSA: 6fire: fix use-after-free on disconnect {CVE-2026-31581}
  • Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock {CVE-2026-31500}
  • drm/amdgpu: Fix use-after-free race in VM acquire {CVE-2026-43370}
  • net: use dst_dev_rcu() in sk_setup_caps() {CVE-2025-40170}
  • wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() {CVE-2022-50258}
  • x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer {CVE-2021-47226}
  • kvm: LAPIC: Restore guard to prevent illegal APIC register access {CVE-2021-47255}
  • tunnels: fix kasan splat when generating ipv4 pmtu error {CVE-2023-53600}
  • macvlan: fix error recovery in macvlan_common_newlink() {CVE-2026-23209}
  • ALSA: aloop: Fix racy access at PCM trigger {CVE-2026-23191}
  • RDMA/cxgb4: Do not dma memory off of the stack {CVE-2019-17075}
  • netfilter: nf_conntrack_helper: pass helper to expect cleanup {CVE-2026-43027}
  • KVM: nVMX: unconditionally cancel preemption timer in free_nested (CVE-2019-7221) {CVE-2019-7221}
  • RDMA/umad: Reject negative data_len in…
Record
CLSA-2026-1782145985
Updated
2026-11-02
OSVCLSA-2026-1782146775 No score

kernel: Fix of 58 CVEs

  • libceph: prevent potential out-of-bounds reads in handle_auth_done() {CVE-2026-22984}
  • svcrdma: bound check rq_pages index in inline path {CVE-2025-71068}
  • drm/i915: Fix NULL ptr deref by checking new_crtc_state {CVE-2023-53833}
  • netfilter: nf_tables: release flowtable after rcu grace period on error {CVE-2026-23392}
  • wifi: brcmfmac: validate bsscfg indices in IF events {CVE-2026-43110}
  • xfrm: hold dev ref until after transport_finish NF_HOOK {CVE-2026-31663}
  • mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() {CVE-2026-31586}
  • scsi: sg: Do not sleep in atomic context {CVE-2025-40259}
  • bpf, sockmap: Fix race between element replace and close() {CVE-2024-56664}
  • Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} {CVE-2023-53827}
  • drm/i915/gem: add missing boundary check in vm_access {CVE-2023-28410}
  • ASoC: SOF: debug: Fix potential buffer overflow by snprintf() {CVE-2022-50051}
  • tipc: fix use-after-free Read in tipc_named_reinit {CVE-2022-49696}
  • wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration {CVE-2022-49022}
  • drm/i915/gem: Really move i915_gem_context.link under ref protection {CVE-2022-48662}
  • drm/i915: Release i915_gem_context from a worker {CVE-2022-48662}
  • KVM: x86/mmu: Don't advance iterator after restart due to yielding {CVE-2021-47094}
  • HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq {CVE-2026-43051}
  • Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold {CVE-2026-31408}
  • nbd: defer config unlock in nbd_genl_connect {CVE-2025-68366}
  • netfilter: xt_tcpmss: check remaining length before reading optlen {CVE-2026-43190}
  • media: dvb-net: fix OOB access in ULE extension header tables {CVE-2026-31405}
  • net: sched: sfb: fix null pointer access issue when sfb_init() fails {CVE-2022-50356}
  • skbuff: skb_segment, Call zero copy functions before using skbuff frags {CVE-2023-53354}
  • nfsd: call op_release, even when op_func returns an error {CVE-2023-53241}
  • icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). {CVE-2023-53343}
  • RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device {CVE-2023-53393}
  • scsi: target: iscsi: Fix a race condition between login_work and the login thread {CVE-2022-50350}
  • Make filldir64 verify the directory entry filename is valid {CVE-2019-10220}
  • usb: class: cdc-wdm: fix reordering issue in read code path {CVE-2026-43427}
  • crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id {CVE-2025-68724}
  • nfsd: fix heap overflow in NFSv4.0 LOCK replay cache {CVE-2026-31402}
  • drm/amdgpu: Fix use-after-free race in VM acquire {CVE-2026-43370}
  • net: use dst_dev_rcu() in sk_setup_caps() {CVE-2025-40170}
  • team: fix check for port enabled in team_queue_override_port_prio_changed() {CVE-2025-71091}
  • proc/vmcore: fix clearing user buffer by properly using clear_user() {CVE-2021-47566}
  • cxgb4: avoid accessing registers when clearing filters {CVE-2021-47138}
  • bpf: Fix ringbuf helper function compatibility {CVE-2021-34866}
  • ext4: convert inline data to extents when truncate exceeds inline size {CVE-2026-31452}
  • wifi: mac80211: check tdls flag in ieee80211_tdls_oper {CVE-2026-43052}
  • atm: lec: fix use-after-free in sock_def_readable() {CVE-2026-43050}
  • ext4: block range must be validated before use in ext4_mb_clear_bb() {CVE-2022-50021}
  • bonding: limit BOND_MODE_8023AD to Ethernet devices {CVE-2026-23099}
  • net/sched: cls_u32: use skb_header_pointer_careful() {CVE-2026-23204}
  • scsi: qla2xxx: Fix bsg_done() causing double free {CVE-2025-71238}
  • ice: Fix memory corruption in VF driver {CVE-2022-49722}
  • net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check {CVE-2026-23448}
  • netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() {CVE-2026-43450}
  • tunnels: fix kasan splat when generating ipv4 pmtu error {CVE-2023-53600}
  • Bluetooth: MGMT: validate LTK enc_size on load {CVE-2026-43020}
  • netfilter: nf_conntrack_helper: pass helper to…
Record
CLSA-2026-1782146775
Updated
2026-11-02
OSVCLSA-2026-1782148597 No score

Fix of 33 CVEs

  • CVE-2022-49267
    • mmc: core: use sysfs_emit() instead of sprintf() {CVE-2022-49267}
    • mmc: sdio: Export SDIO revision and info strings to userspace {CVE-2022-49267}
  • CVE-2026-43040
    • net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak {CVE-2026-43040}
  • CVE-2026-43027
    • netfilter: nf_conntrack_helper: pass helper to expect cleanup {CVE-2026-43027}
  • CVE-2025-71091
    • team: fix check for port enabled in team_queue_override_port_prio_changed() {CVE-2025-71091}
  • CVE-2025-71075
    • scsi: aic94xx: fix use-after-free in device removal path {CVE-2025-71075}
  • CVE-2025-38565
    • perf/core: Exit early on perf_mmap() fail {CVE-2025-38565}
  • CVE-2025-38401
    • mtk-sd: Prevent memory corruption from DMA map failure {CVE-2025-38401}
  • CVE-2023-53218
    • rxrpc: Make it so that a waiting process can be aborted {CVE-2023-53218}
  • CVE-2025-38230
    • jfs: validate AG parameters in dbMount() to prevent crashes {CVE-2025-38230}
  • CVE-2023-52867
    • drm/radeon: possible buffer overflow {CVE-2023-52867}
  • CVE-2023-53432
    • firewire: net: fix use after free in fwnet_finish_incoming_packet() {CVE-2023-53432}
  • CVE-2025-39891
    • wifi: mwifiex: Initialize the chan_stats array to zero {CVE-2025-39891}
  • CVE-2025-38666
    • net: appletalk: Fix use-after-free in AARP proxy probe {CVE-2025-38666}
  • CVE-2025-39828
    • atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() {CVE-2025-39828}
  • CVE-2026-43020
    • Bluetooth: MGMT: validate LTK enc_size on load {CVE-2026-43020}
  • CVE-2026-43011
    • net/x25: Fix potential double free of skb {CVE-2026-43011}
  • CVE-2026-31778
    • ALSA: caiaq: fix stack out-of-bounds read in init_card {CVE-2026-31778}
  • CVE-2026-31748
    • comedi: me_daq: Fix potential overrun of firmware buffer {CVE-2026-31748}
  • CVE-2026-31747
    • comedi: me4000: Fix potential overrun of firmware buffer {CVE-2026-31747}
  • CVE-2026-31720
    • usb: gadget: f_uac1_legacy: validate control request size {CVE-2026-31720}
  • CVE-2026-31696
    • rxrpc: Fix missing validation of ticket length in non-XDR key preparsing {CVE-2026-31696}
  • CVE-2026-31659
    • batman-adv: reject oversized global TT response buffers {CVE-2026-31659}
  • CVE-2026-31629
    • nfc: llcp: add missing return after LLCP_CLOSED checks {CVE-2026-31629}
  • CVE-2026-31626
    • staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify() {CVE-2026-31626}
  • CVE-2026-31622
    • NFC: digital: Bounds check NFC-A cascade depth in SDD response handler {CVE-2026-31622}
  • CVE-2026-31602
    • ALSA: ctxfi: Limit PTP to a single page {CVE-2026-31602}
  • CVE-2026-31583
    • media: em28xx: fix use-after-free in em28xx_v4l2_open() {CVE-2026-31583}
  • CVE-2026-31581
    • ALSA: 6fire: fix use-after-free on disconnect {CVE-2026-31581}
  • CVE-2026-31576
    • media: hackrf: fix to not free memory after the device is registered in hackrf_probe() {CVE-2026-31576}
  • CVE-2026-31504
    • net: fix fanout UAF in packet_release() via NETDEV_UP race {CVE-2026-31504}
  • CVE-2026-23388
    • Squashfs: check metadata block offset is within range {CVE-2026-23388}
  • CVE-2026-23372
    • nfc: rawsock: cancel tx_work before socket teardown {CVE-2026-23372}
  • Bump ABI 4.15.0-259
Record
CLSA-2026-1782148597
Updated
2026-11-02
OSVCLSA-2026-1782148735 No score

Fix of 30 CVEs

  • CVE-2026-31602
    • ALSA: ctxfi: Limit PTP to a single page {CVE-2026-31602}
  • CVE-2026-43241
    • ntb: ntb_hw_switchtec: Fix array-index-out-of-bounds access {CVE-2026-43241}
  • CVE-2026-23281
    • wifi: libertas: fix use-after-free in lbs_free_adapter() {CVE-2026-23281}
  • CVE-2025-71116
    • libceph: make decode_pool() more resilient against corrupted osdmaps {CVE-2025-71116}
  • CVE-2022-49892
    • ftrace: Fix use-after-free for dynamic ftrace_ops {CVE-2022-49892}
  • CVE-2022-3625
    • devlink: Fix use-after-free after a failed reload {CVE-2022-3625}
  • CVE-2022-50552
    • blk-mq: use quiesced elevator switch when reinitializing queues {CVE-2022-50552}
  • CVE-2026-31581
    • ALSA: 6fire: fix use-after-free on disconnect {CVE-2026-31581}
  • CVE-2025-68366
    • nbd: defer config unlock in nbd_genl_connect {CVE-2025-68366}
  • CVE-2026-43203
    • atm: fore200e: fix use-after-free in tasklets during device removal {CVE-2026-43203}
  • CVE-2026-23361
    • PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry {CVE-2026-23361}
  • CVE-2025-71082
    • Bluetooth: btusb: revert use of devm_kzalloc in btusb {CVE-2025-71082}
  • CVE-2025-71199
    • iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver {CVE-2025-71199}
  • CVE-2026-31626
    • staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify() {CVE-2026-31626}
  • CVE-2026-43427
    • usb: class: cdc-wdm: fix reordering issue in read code path {CVE-2026-43427}
  • CVE-2025-71136
    • media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() {CVE-2025-71136}
  • CVE-2026-31780
    • wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation {CVE-2026-31780}
  • CVE-2026-43052
    • wifi: mac80211: check tdls flag in ieee80211_tdls_oper {CVE-2026-43052}
  • CVE-2026-43386
    • staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie {CVE-2026-43386}
  • CVE-2026-43370
    • drm/amdgpu: Fix use-after-free race in VM acquire {CVE-2026-43370}
  • CVE-2026-43011
    • net/x25: Fix potential double free of skb {CVE-2026-43011}
  • CVE-2026-43027
    • netfilter: nf_conntrack_helper: pass helper to expect cleanup {CVE-2026-43027}
  • CVE-2026-43020
    • Bluetooth: MGMT: validate LTK enc_size on load {CVE-2026-43020}
  • CVE-2026-31748
    • comedi: me_daq: Fix potential overrun of firmware buffer {CVE-2026-31748}
  • CVE-2026-31747
    • comedi: me4000: Fix potential overrun of firmware buffer {CVE-2026-31747}
  • CVE-2026-31696
    • rxrpc: Fix missing validation of ticket length in non-XDR key preparsing {CVE-2026-31696}
  • CVE-2026-31452
    • ext4: convert inline data to extents when truncate exceeds inline size {CVE-2026-31452}
  • CVE-2026-31399
    • nvdimm/bus: Fix potential use after free in asynchronous initialization {CVE-2026-31399}
  • CVE-2026-43450
    • netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() {CVE-2026-43450}
  • CVE-2024-26988
    • init/main.c: Fix potential static_command_line memory overflow {CVE-2024-26988}
  • Miscellaneous upstream changes
    • ubuntu20: de-symlink debian/changelog to a real copy
  • Bump ABI 5.4.0-232
Record
CLSA-2026-1782148735
Updated
2026-11-02
OSVCLSA-2026-1783336710 No score

kernel-uek: Fix of 10 CVEs

  • KVM: x86: Fix shadow paging use-after-free due to unexpected GFN/role {CVE-2026-46113}
  • net: af_key: zero aligned sockaddr tail in PF_KEY exports {CVE-2026-43088}
  • scsi: aic94xx: fix use-after-free in device removal path {CVE-2025-71075}
  • i2c: piix4: Fix adapter not be removed in piix4_remove() {CVE-2022-49900}
  • Bluetooth: MGMT: validate LTK enc_size on load {CVE-2026-43020}
  • ext4: convert inline data to extents when truncate exceeds inline size {CVE-2026-31452}
  • can: raw: fix ro->uniq use-after-free in raw_rcv() {CVE-2026-31532}
  • ALSA: 6fire: fix use-after-free on disconnect {CVE-2026-31581}
  • ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY {CVE-2026-31597}
  • netfilter: nf_conntrack_helper: pass helper to expect cleanup {CVE-2026-43027}
  • drm/amdgpu: Fix use-after-free race in VM acquire {CVE-2026-43370}
Record
CLSA-2026-1783336710
Updated
2026-11-02
OSVCLSA-2026-1787304608 No score

kernel-uek: Fix of 34 CVEs

  • Rebased onto Oracle UEK base 5.4.17-2136.357.2.el7uek
  • sctp: don't free the ASCONF's own transport in DEL-IP processing {CVE-2026-64564}
  • ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison {CVE-2026-53309}
  • ocfs2/dlm: validate qr_numregions in dlm_match_regions() {CVE-2026-53043}
  • ixgbevf: fix use-after-free in VEPA multicast source pruning {CVE-2026-64113}
  • ipv4: raw: reject IP_HDRINCL packets with ihl < 5 {CVE-2026-64114}
  • NFSv4: include MAY_WRITE in open permission mask for O_TRUNC {CVE-2026-64298}
  • fuse: re-lock request before returning from fuse_ref_folio() {CVE-2026-64266}
  • scsi: isci: Fix use-after-free in device removal path {CVE-2026-64103}
  • crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec {CVE-2026-23060}
  • futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock {CVE-2026-53166}
  • net: af_key: zero aligned sockaddr tail in PF_KEY exports {CVE-2026-43088}
  • scsi: aic94xx: fix use-after-free in device removal path {CVE-2025-71075}
  • i2c: piix4: Fix adapter not be removed in piix4_remove() {CVE-2022-49900}
  • Bluetooth: MGMT: validate LTK enc_size on load {CVE-2026-43020}
  • ext4: convert inline data to extents when truncate exceeds inline size {CVE-2026-31452}
  • can: raw: fix ro->uniq use-after-free in raw_rcv() {CVE-2026-31532}
  • ALSA: 6fire: fix use-after-free on disconnect {CVE-2026-31581}
  • ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY {CVE-2026-31597}
  • netfilter: nf_conntrack_helper: pass helper to expect cleanup {CVE-2026-43027}
  • drm/amdgpu: Fix use-after-free race in VM acquire {CVE-2026-43370}
  • xfrm_user: fix info leak in build_mapping() {CVE-2026-43089}
  • xfs: fix freemap adjustments when adding xattrs to leaf blocks {CVE-2026-43158}
  • libceph: make decode_pool() more resilient against corrupted osdmaps {CVE-2025-71116}
  • e1000: fix OOB in e1000_tbi_should_accept() {CVE-2025-71093}
  • ALSA: usb-audio: Use correct version for UAC3 header validation {CVE-2026-23318}
  • nfnetlink_osf: validate individual option lengths in fingerprints {CVE-2026-23397}
  • Squashfs: check metadata block offset is within range {CVE-2026-23388}
  • net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled {CVE-2026-23381}
  • wifi: mac80211: fix NULL deref in mesh_matches_local() {CVE-2026-23396}
  • icmp: fix NULL pointer dereference in icmp_tag_validation() {CVE-2026-23398}
  • HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them {CVE-2026-23382}
  • net: usb: kalmia: validate USB endpoints {CVE-2026-23365}
  • wifi: radiotap: reject radiotap with unknown bits {CVE-2026-23367}
  • drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() {CVE-2026-23356}
  • batman-adv: reject oversized global TT response buffers {CVE-2026-31659}
  • drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() {CVE-2026-43206}
  • net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak {CVE-2026-43040}
  • ALSA: ctxfi: Limit PTP to a single page {CVE-2026-31602}
  • nvdimm/bus: Fix potential use after free in asynchronous initialization {CVE-2026-31399}
  • usb: class: cdc-wdm: fix reordering issue in read code path {CVE-2026-43427}
  • media: dvb-net: fix OOB access in ULE extension header tables {CVE-2026-31405}
  • sysctl: Fix data races in proc_douintvec(). {CVE-2022-49641}
  • netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() {CVE-2026-43450}
  • ALSA: caiaq: fix stack out-of-bounds read in init_card {CVE-2026-31778}
  • atm: lec: fix use-after-free in sock_def_readable() {CVE-2026-43050}
  • fs: writeback: fix use-after-free in __mark_inode_dirty() {CVE-2025-39866}
  • usb: core: config: Prevent OOB read in SS endpoint companion parsing {CVE-2025-39760}
  • crypto: lzo - Fix compression buffer overrun {CVE-2025-38068}
  • KVM: x86: Reset IRTE to host control if new route isn't postable {CVE-2025-37885}
  • vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint {CVE-2025-22083}
  • mm:…
Record
CLSA-2026-1787304608
Updated
2026-11-02
OSVCLSA-2026-1788449727 No score

Fix of 235 CVEs

  • Bump kernel ABI to 29: ship the ELS kernel as 4.19.0-29-*, distinct from the prior 4.19.0-28.
  • CVE-2021-46984
    • kyber: fix out of bounds access when preempted {CVE-2021-46984}
  • CVE-2021-47049
    • Drivers: hv: vmbus: Use after free in __vmbus_open() {CVE-2021-47049}
  • CVE-2021-47101
    • asix: fix uninit-value in asix_mdio_read() {CVE-2021-47101}
  • CVE-2021-47191
    • scsi: scsi_debug: Fix out-of-bound read in resp_readcap16() {CVE-2021-47191}
  • CVE-2021-47352
    • virtio-net: Add validation for used length {CVE-2021-47352}
  • CVE-2021-47379
    • blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd {CVE-2021-47379}
  • CVE-2021-47391
    • RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests {CVE-2021-47391}
  • CVE-2021-47479
    • staging: rtl8712: fix use-after-free in rtl8712_dl_fw {CVE-2021-47479}
  • CVE-2022-21546
    • scsi: target: Fix WRITE_SAME No Data Buffer crash {CVE-2022-21546}
  • CVE-2022-39189
    • KVM: x86: do not report a vCPU as preempted outside instruction boundaries {CVE-2022-39189}
  • CVE-2022-43945
    • SUNRPC: Fix svcxdr_init_encode's buflen calculation {CVE-2022-43945}
    • NFSD: Cap rsize_bop result based on send buffer size {CVE-2022-43945}
  • CVE-2022-48744
    • net/mlx5e: Avoid field-overflowing memcpy() {CVE-2022-48744}
  • CVE-2022-49026
    • e100: Fix possible use after free in e100_xmit_prepare {CVE-2022-49026}
  • CVE-2022-49720
    • block: Fix handling of offline queues in blk_mq_alloc_request_hctx() {CVE-2022-49720}
  • CVE-2022-49975
    • bpf: Don't redirect packets with invalid pkt_len {CVE-2022-49975}
    • bpf: Move skb->len == 0 checks into __bpf_redirect {CVE-2022-49975}
  • CVE-2022-50066
    • net: atlantic: fix aq_vec index out of range error {CVE-2022-50066}
  • CVE-2022-50103
    • sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed {CVE-2022-50103}
  • CVE-2022-50129
    • RDMA/srpt: Introduce a reference count in struct srpt_device {CVE-2022-50129}
    • RDMA/srpt: Fix a use-after-free {CVE-2022-50129}
  • CVE-2022-50300
    • btrfs: fix extent map use-after-free when handling missing device in read_one_chunk {CVE-2022-50300}
  • CVE-2022-50406
    • iomap: iomap: fix memory corruption when recording errors during writeback {CVE-2022-50406}
  • CVE-2022-50422
    • scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() {CVE-2022-50422}
  • CVE-2022-50552
    • blk-mq: use quiesced elevator switch when reinitializing queues {CVE-2022-50552}
  • CVE-2023-51779
    • Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2023-51779}
  • CVE-2023-52434
    • smb: client: fix potential OOBs in smb2_parse_contexts() {CVE-2023-52434}
  • CVE-2023-52515
    • RDMA/srp: Do not call scsi_done() from srp_abort() {CVE-2023-52515}
  • CVE-2023-52531
    • wifi: iwlwifi: mvm: Fix a memory corruption issue {CVE-2023-52531}
  • CVE-2023-52741
    • cifs: Fix use-after-free in rdata->read_into_pages() {CVE-2023-52741}
  • CVE-2023-53000
    • netlink: prevent potential spectre v1 gadgets {CVE-2023-53000}
  • CVE-2023-53039
    • workqueue: Add resource managed version of delayed work init {CVE-2023-53039}
    • devm-helpers: Fix devm_delayed_work_autocancel() kerneldoc {CVE-2023-53039}
    • devm-helpers: Add resource managed version of work init {CVE-2023-53039}
    • HID: intel-ish-hid: ipc: Fix potential use-after-free in work function {CVE-2023-53039}
    • HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev->devc {CVE-2023-53039}
  • CVE-2023-53111
    • loop: Fix use-after-free issues {CVE-2023-53111}
  • CVE-2023-53254
    • cacheinfo: Fix shared_cpu_map to handle shared caches at different levels…
Record
CLSA-2026-1788449727
Updated
2026-11-02
OSV No score

netfilter: nf_conntrack_helper: pass helper to expect cleanup

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_conntrack_helper: pass helper to expect cleanup

nf_conntrack_helper_unregister() calls nf_ct_expect_iterate_destroy() to remove expectations belonging to the helper being unregistered. However, it passes NULL instead of the helper pointer as the data argument, so expect_iter_me() never matches any expectation and all of them survive the cleanup.

After unregister returns, nfnl_cthelper_del() frees the helper object immediately. Subsequent expectation dumps or packet-driven init_conntrack() calls then dereference the freed exp->helper, causing a use-after-free.

Pass the actual helper pointer so expectations referencing it are properly destroyed before the helper object is freed.

BUG: KASAN: slab-use-after-free in string+0x38f/0x430 Read of size 1 at addr ffff888003b14d20 by task poc/103 Call Trace: string+0x38f/0x430 vsnprintf+0x3cc/0x1170 seq_printf+0x17a/0x240 exp_seq_show+0x2e5/0x560 seq_read_iter+0x419/0x1280 proc_reg_read+0x1ac/0x270 vfs_read+0x179/0x930 ksys_read+0xef/0x1c0 Freed by task 103: The buggy address is located 32 bytes inside of freed 192-byte region [ffff888003b14d00, ffff888003b14dc0)

Record
CVE-2026-43027
Updated
2026-11-02
OSVMGASA-2026-0108 No score

Updated kernel, kmod-virtualbox & kmod-xtables-addons packages fix security vulnerabilities

Upstream kernel version 6.6.137 fixes bugs and vulnerabilities. The kmod-virtualbox & kmod-xtables-addons packages have been updated to work with this new kernel.

Record
MGASA-2026-0108
Updated
2026-11-02
OSVMGASA-2026-0110 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.137 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links.

Record
MGASA-2026-0110
Updated
2026-11-02
OSVopenSUSE-SU-2026:20826-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
  • CVE-2024-14027: xattr: switch to CLASS(fd) (bsc#1259420).
  • CVE-2025-40181: x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP (bsc#1253471).
  • CVE-2025-68265: nvme: fix admin request_queue lifetime (bsc#1255360).
  • CVE-2025-68310: s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (bsc#1255160).
  • CVE-2025-71302: drm/panthor: fix for dma-fence safe access rules (bsc#1264837).
  • CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
  • CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
  • CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
  • CVE-2026-23276: net: add xmit recursion limit to tunnel xmit functions (bsc#1260012).
  • CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
  • CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
  • CVE-2026-23316: net: ipv4: fix ARM64 alignment fault in multipath hash seed (bsc#1260573).
  • CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
  • CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
  • CVE-2026-23346: arm64: io: Rename ioremap_prot() to __ioremap_prot() (bsc#1260529).
  • CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
  • CVE-2026-23354: x86/fred: Correct speculative safety in fred_extint() (bsc#1260801).
  • CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
  • CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
  • CVE-2026-23375: mm: thp: deny THP for files on anonymous inodes (bsc#1260576).
  • CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
  • CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
  • CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
  • CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
  • CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
  • CVE-2026-23417: bpf: Fix constant blinding for PROBE_MEM32 stores (bsc#1261410).
  • CVE-2026-23436: net: add helpers for lookup and walking netdevs under netdev_lock() (bsc#1261617).
  • CVE-2026-23437: net: shaper: protect late read accesses to the hierarchy (bsc#1261635).
  • CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
  • CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
  • CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
  • CVE-2026-23445: igc: fix page fault in XDP TX timestamps handling (bsc#1261702).
  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
  • CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
  • CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
  • CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
  • CVE-2026-23457: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).
  • CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
  • CVE-2026-23468: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (bsc#1261692).
  • CVE-2026-23472: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (bsc#1261636).
  • CVE-2026-23473: io_uring/poll: fix multishot recv missing EOF on…
Record
openSUSE-SU-2026:20826-1
Updated
2026-11-02
OSVSUSE-SU-2026:2111-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2021-47103: inet: fully convert sk->sk_rx_dst to RCU rules (bsc#1221010).
  • CVE-2023-20585: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
  • CVE-2025-54518: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (bsc#1264013).
  • CVE-2026-23239: espintcp: Fix race condition in espintcp_close() (bsc#1259485).
  • CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1259484).
  • CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
  • CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260522).
  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
  • CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
  • CVE-2026-23462: Bluetooth: HIDP: Fix possible UAF (bsc#1261710).
  • CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261638).
  • CVE-2026-31403: NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (bsc#1261796).
  • CVE-2026-31408: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (bsc#1261797).
  • CVE-2026-31436: dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() (bsc#1262602).
  • CVE-2026-31504: net: fix fanout UAF in packet_release() via NETDEV_UP race (bsc#1263085).
  • CVE-2026-31507: net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer (bsc#1263095).
  • CVE-2026-31512: Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() (bsc#1262734).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262758).
  • CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel() (bsc#1263065).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263176).
  • CVE-2026-31588: KVM: x86: Use scratch field in MMIO fragment to hold small write values (bsc#1263165).
  • CVE-2026-31602: ALSA: ctxfi: Limit PTP to a single page (bsc#1263723).
  • CVE-2026-31607: usbip: validate number_of_packets in usbip_pack_ret_submit() (bsc#1263600).
  • CVE-2026-31649: net: stmmac: fix integer underflow in chain mode (bsc#1263582).
  • CVE-2026-31656: drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (bsc#1263170).
  • CVE-2026-31662: tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG (bsc#1263131).
  • CVE-2026-31669: mptcp: fix slab-use-after-free in __inet_lookup_established (bsc#1263141).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263668).
  • CVE-2026-31694: fuse: reject oversized dirents in page cache (bsc#1263901).
  • CVE-2026-31700: net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() (bsc#1263882).
  • CVE-2026-31738: vxlan: validate ND option lengths in vxlan_na_create (bsc#1264059).
  • CVE-2026-31787: xen/privcmd: fix double free via VMA splitting (bsc#1262181).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1263931).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1263933).
  • CVE-2026-43050: atm: lec: fix use-after-free in sock_def_readable() (bsc#1264082).
  • CVE-2026-43110: wifi: brcmfmac: validate bsscfg indices in IF events (bsc#1264482).
  • CVE-2026-43126: ALSA: mixer: oss: Add card disconnect checkpoints (bsc#1264634).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264848).
  • CVE-2026-43214: KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() (bsc#1264651).
  • CVE-2026-43329: netfilter: flowtable: strictly check for maximum number of actions (bsc#1265085).
  • CVE-2026-43334: Bluetooth: SMP: force responder MITM…
Record
SUSE-SU-2026:2111-1
Updated
2026-11-02
OSVSUSE-SU-2026:21834-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
  • CVE-2024-14027: xattr: switch to CLASS(fd) (bsc#1259420).
  • CVE-2025-40181: x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP (bsc#1253471).
  • CVE-2025-68265: nvme: fix admin request_queue lifetime (bsc#1255360).
  • CVE-2025-68310: s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (bsc#1255160).
  • CVE-2025-71302: drm/panthor: fix for dma-fence safe access rules (bsc#1264837).
  • CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
  • CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
  • CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
  • CVE-2026-23276: net: add xmit recursion limit to tunnel xmit functions (bsc#1260012).
  • CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
  • CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
  • CVE-2026-23316: net: ipv4: fix ARM64 alignment fault in multipath hash seed (bsc#1260573).
  • CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
  • CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
  • CVE-2026-23346: arm64: io: Rename ioremap_prot() to __ioremap_prot() (bsc#1260529).
  • CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
  • CVE-2026-23354: x86/fred: Correct speculative safety in fred_extint() (bsc#1260801).
  • CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
  • CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
  • CVE-2026-23375: mm: thp: deny THP for files on anonymous inodes (bsc#1260576).
  • CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
  • CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
  • CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
  • CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
  • CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
  • CVE-2026-23417: bpf: Fix constant blinding for PROBE_MEM32 stores (bsc#1261410).
  • CVE-2026-23436: net: add helpers for lookup and walking netdevs under netdev_lock() (bsc#1261617).
  • CVE-2026-23437: net: shaper: protect late read accesses to the hierarchy (bsc#1261635).
  • CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
  • CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
  • CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
  • CVE-2026-23445: igc: fix page fault in XDP TX timestamps handling (bsc#1261702).
  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
  • CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
  • CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
  • CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
  • CVE-2026-23457: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).
  • CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
  • CVE-2026-23468: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (bsc#1261692).
  • CVE-2026-23472: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (bsc#1261636).
  • CVE-2026-23473: io_uring/poll: fix multishot recv missing EOF on…
Record
SUSE-SU-2026:21834-1
Updated
2026-11-02
OSVSUSE-SU-2026:21841-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
  • CVE-2024-14027: xattr: switch to CLASS(fd) (bsc#1259420).
  • CVE-2025-40181: x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP (bsc#1253471).
  • CVE-2025-68265: nvme: fix admin request_queue lifetime (bsc#1255360).
  • CVE-2025-68310: s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (bsc#1255160).
  • CVE-2025-71302: drm/panthor: fix for dma-fence safe access rules (bsc#1264837).
  • CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
  • CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
  • CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
  • CVE-2026-23276: net: add xmit recursion limit to tunnel xmit functions (bsc#1260012).
  • CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
  • CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
  • CVE-2026-23316: net: ipv4: fix ARM64 alignment fault in multipath hash seed (bsc#1260573).
  • CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
  • CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
  • CVE-2026-23346: arm64: io: Rename ioremap_prot() to __ioremap_prot() (bsc#1260529).
  • CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
  • CVE-2026-23354: x86/fred: Correct speculative safety in fred_extint() (bsc#1260801).
  • CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
  • CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
  • CVE-2026-23375: mm: thp: deny THP for files on anonymous inodes (bsc#1260576).
  • CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
  • CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
  • CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
  • CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
  • CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
  • CVE-2026-23417: bpf: Fix constant blinding for PROBE_MEM32 stores (bsc#1261410).
  • CVE-2026-23436: net: add helpers for lookup and walking netdevs under netdev_lock() (bsc#1261617).
  • CVE-2026-23437: net: shaper: protect late read accesses to the hierarchy (bsc#1261635).
  • CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
  • CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
  • CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
  • CVE-2026-23445: igc: fix page fault in XDP TX timestamps handling (bsc#1261702).
  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
  • CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
  • CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
  • CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
  • CVE-2026-23457: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).
  • CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
  • CVE-2026-23468: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (bsc#1261692).
  • CVE-2026-23472: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (bsc#1261636).
  • CVE-2026-23473: io_uring/poll: fix multishot recv missing EOF on…
Record
SUSE-SU-2026:21841-1
Updated
2026-11-02
OSVSUSE-SU-2026:21845-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
  • CVE-2024-14027: xattr: switch to CLASS(fd) (bsc#1259420).
  • CVE-2025-40181: x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP (bsc#1253471).
  • CVE-2025-68265: nvme: fix admin request_queue lifetime (bsc#1255360).
  • CVE-2025-68310: s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (bsc#1255160).
  • CVE-2025-71302: drm/panthor: fix for dma-fence safe access rules (bsc#1264837).
  • CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
  • CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
  • CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
  • CVE-2026-23276: net: add xmit recursion limit to tunnel xmit functions (bsc#1260012).
  • CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
  • CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
  • CVE-2026-23316: net: ipv4: fix ARM64 alignment fault in multipath hash seed (bsc#1260573).
  • CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
  • CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
  • CVE-2026-23346: arm64: io: Rename ioremap_prot() to __ioremap_prot() (bsc#1260529).
  • CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
  • CVE-2026-23354: x86/fred: Correct speculative safety in fred_extint() (bsc#1260801).
  • CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
  • CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
  • CVE-2026-23375: mm: thp: deny THP for files on anonymous inodes (bsc#1260576).
  • CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
  • CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
  • CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
  • CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
  • CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
  • CVE-2026-23417: bpf: Fix constant blinding for PROBE_MEM32 stores (bsc#1261410).
  • CVE-2026-23436: net: add helpers for lookup and walking netdevs under netdev_lock() (bsc#1261617).
  • CVE-2026-23437: net: shaper: protect late read accesses to the hierarchy (bsc#1261635).
  • CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
  • CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
  • CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
  • CVE-2026-23445: igc: fix page fault in XDP TX timestamps handling (bsc#1261702).
  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
  • CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
  • CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
  • CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
  • CVE-2026-23457: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).
  • CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
  • CVE-2026-23468: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (bsc#1261692).
  • CVE-2026-23472: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (bsc#1261636).
  • CVE-2026-23473: io_uring/poll: fix multishot recv missing EOF on…
Record
SUSE-SU-2026:21845-1
Updated
2026-11-02
OSVSUSE-SU-2026:21860-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
  • CVE-2024-14027: xattr: switch to CLASS(fd) (bsc#1259420).
  • CVE-2025-40181: x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP (bsc#1253471).
  • CVE-2025-68265: nvme: fix admin request_queue lifetime (bsc#1255360).
  • CVE-2025-68310: s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (bsc#1255160).
  • CVE-2025-71302: drm/panthor: fix for dma-fence safe access rules (bsc#1264837).
  • CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
  • CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
  • CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
  • CVE-2026-23276: net: add xmit recursion limit to tunnel xmit functions (bsc#1260012).
  • CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
  • CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
  • CVE-2026-23316: net: ipv4: fix ARM64 alignment fault in multipath hash seed (bsc#1260573).
  • CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
  • CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
  • CVE-2026-23346: arm64: io: Rename ioremap_prot() to __ioremap_prot() (bsc#1260529).
  • CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
  • CVE-2026-23354: x86/fred: Correct speculative safety in fred_extint() (bsc#1260801).
  • CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
  • CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
  • CVE-2026-23375: mm: thp: deny THP for files on anonymous inodes (bsc#1260576).
  • CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
  • CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
  • CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
  • CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
  • CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
  • CVE-2026-23417: bpf: Fix constant blinding for PROBE_MEM32 stores (bsc#1261410).
  • CVE-2026-23436: net: add helpers for lookup and walking netdevs under netdev_lock() (bsc#1261617).
  • CVE-2026-23437: net: shaper: protect late read accesses to the hierarchy (bsc#1261635).
  • CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
  • CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
  • CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
  • CVE-2026-23445: igc: fix page fault in XDP TX timestamps handling (bsc#1261702).
  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
  • CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
  • CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
  • CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
  • CVE-2026-23457: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).
  • CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
  • CVE-2026-23468: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (bsc#1261692).
  • CVE-2026-23472: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (bsc#1261636).
  • CVE-2026-23473: io_uring/poll: fix multishot recv missing EOF on…
Record
SUSE-SU-2026:21860-1
Updated
2026-11-02
OSVSUSE-SU-2026:21876-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-20585: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
  • CVE-2025-71183: btrfs: always detect conflicting inodes when logging inode refs (bsc#1257631).
  • CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
  • CVE-2026-23239: espintcp: Fix race condition in espintcp_close() (bsc#1259485).
  • CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1259484).
  • CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
  • CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
  • CVE-2026-23276: net: move dev_xmit_recursion() helpers to net/core/dev.h (bsc#1260012).
  • CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
  • CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
  • CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
  • CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
  • CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
  • CVE-2026-23346: mm/ioremap: define generic_ioremap_prot() and generic_iounmap() (bsc#1260529).
  • CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
  • CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
  • CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
  • CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
  • CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
  • CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260522).
  • CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
  • CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
  • CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
  • CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
  • CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
  • CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
  • CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
  • CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
  • CVE-2026-23457: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).
  • CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
  • CVE-2026-23461: Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user (bsc#1261707).
  • CVE-2026-23462: Bluetooth: HIDP: Fix possible UAF (bsc#1261710).
  • CVE-2026-23468: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (bsc#1261692).
  • CVE-2026-23472: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (bsc#1261636).
  • CVE-2026-23473: io_uring/poll: fix multishot recv missing EOF on wakeup race (bsc#1261694).
  • CVE-2026-31400: sunrpc: fix cache_request leak in cache_release (bsc#1261645).
  • CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261638).
  • CVE-2026-31403: NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (bsc#1261796).
  • CVE-2026-31404: xfs: avoid dereferencing log items after push callbacks (bsc#1261628).
  • CVE-2026-31407:…
Record
SUSE-SU-2026:21876-1
Updated
2026-11-02
OSVSUSE-SU-2026:21877-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
  • CVE-2025-71183: btrfs: always detect conflicting inodes when logging inode refs (bsc#1257631).
  • CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
  • CVE-2026-23239: espintcp: Fix race condition in espintcp_close() (bsc#1259485).
  • CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1259484).
  • CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
  • CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
  • CVE-2026-23276: net: move dev_xmit_recursion() helpers to net/core/dev.h (bsc#1260012).
  • CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
  • CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
  • CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
  • CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
  • CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
  • CVE-2026-23346: mm/ioremap: define generic_ioremap_prot() and generic_iounmap() (bsc#1260529).
  • CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
  • CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
  • CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
  • CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
  • CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
  • CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260522).
  • CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
  • CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
  • CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
  • CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
  • CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
  • CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
  • CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
  • CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
  • CVE-2026-23457: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).
  • CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
  • CVE-2026-23461: Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user (bsc#1261707).
  • CVE-2026-23462: Bluetooth: HIDP: Fix possible UAF (bsc#1261710).
  • CVE-2026-23468: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (bsc#1261692).
  • CVE-2026-23472: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (bsc#1261636).
  • CVE-2026-23473: io_uring/poll: fix multishot recv missing EOF on wakeup race (bsc#1261694).
  • CVE-2026-31400: sunrpc: fix cache_request leak in cache_release (bsc#1261645).
  • CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261638).
  • CVE-2026-31403: NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (bsc#1261796).
  • CVE-2026-31404: xfs: avoid dereferencing log items after push callbacks (bsc#1261628).
  • CVE-2026-31407:…
Record
SUSE-SU-2026:21877-1
Updated
2026-11-02
OSVSUSE-SU-2026:21916-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-20585: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
  • CVE-2025-71183: btrfs: always detect conflicting inodes when logging inode refs (bsc#1257631).
  • CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
  • CVE-2026-23239: espintcp: Fix race condition in espintcp_close() (bsc#1259485).
  • CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1259484).
  • CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
  • CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
  • CVE-2026-23276: net: move dev_xmit_recursion() helpers to net/core/dev.h (bsc#1260012).
  • CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
  • CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
  • CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
  • CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
  • CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
  • CVE-2026-23346: mm/ioremap: define generic_ioremap_prot() and generic_iounmap() (bsc#1260529).
  • CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
  • CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
  • CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
  • CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
  • CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
  • CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260522).
  • CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
  • CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
  • CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
  • CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
  • CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
  • CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
  • CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
  • CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
  • CVE-2026-23457: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).
  • CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
  • CVE-2026-23461: Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user (bsc#1261707).
  • CVE-2026-23462: Bluetooth: HIDP: Fix possible UAF (bsc#1261710).
  • CVE-2026-23468: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (bsc#1261692).
  • CVE-2026-23472: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (bsc#1261636).
  • CVE-2026-23473: io_uring/poll: fix multishot recv missing EOF on wakeup race (bsc#1261694).
  • CVE-2026-31400: sunrpc: fix cache_request leak in cache_release (bsc#1261645).
  • CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261638).
  • CVE-2026-31403: NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (bsc#1261796).
  • CVE-2026-31404: xfs: avoid dereferencing log items after push callbacks (bsc#1261628).
  • CVE-2026-31407:…
Record
SUSE-SU-2026:21916-1
Updated
2026-11-02
OSVSUSE-SU-2026:21919-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
  • CVE-2025-71183: btrfs: always detect conflicting inodes when logging inode refs (bsc#1257631).
  • CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
  • CVE-2026-23239: espintcp: Fix race condition in espintcp_close() (bsc#1259485).
  • CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1259484).
  • CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
  • CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
  • CVE-2026-23276: net: move dev_xmit_recursion() helpers to net/core/dev.h (bsc#1260012).
  • CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
  • CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
  • CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
  • CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
  • CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
  • CVE-2026-23346: mm/ioremap: define generic_ioremap_prot() and generic_iounmap() (bsc#1260529).
  • CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
  • CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
  • CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
  • CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
  • CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
  • CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260522).
  • CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
  • CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
  • CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
  • CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
  • CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
  • CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
  • CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
  • CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
  • CVE-2026-23457: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).
  • CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
  • CVE-2026-23461: Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user (bsc#1261707).
  • CVE-2026-23462: Bluetooth: HIDP: Fix possible UAF (bsc#1261710).
  • CVE-2026-23468: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (bsc#1261692).
  • CVE-2026-23472: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (bsc#1261636).
  • CVE-2026-23473: io_uring/poll: fix multishot recv missing EOF on wakeup race (bsc#1261694).
  • CVE-2026-31400: sunrpc: fix cache_request leak in cache_release (bsc#1261645).
  • CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261638).
  • CVE-2026-31403: NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (bsc#1261796).
  • CVE-2026-31404: xfs: avoid dereferencing log items after push callbacks (bsc#1261628).
  • CVE-2026-31407:…
Record
SUSE-SU-2026:21919-1
Updated
2026-11-02
OSVSUSE-SU-2026:2195-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
  • CVE-2025-54518: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (bsc#1264013).
  • CVE-2026-23239: espintcp: Fix race condition in espintcp_close() (bsc#1259485).
  • CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1259484).
  • CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
  • CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260522).
  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
  • CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
  • CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
  • CVE-2026-23461: Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user (bsc#1261707).
  • CVE-2026-23462: Bluetooth: HIDP: Fix possible UAF (bsc#1261710).
  • CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261638).
  • CVE-2026-31403: NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (bsc#1261796).
  • CVE-2026-31408: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (bsc#1261797).
  • CVE-2026-31436: dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() (bsc#1262602).
  • CVE-2026-31470: virt: tdx-guest: Fix handling of host controlled 'quote' buffer length (bsc#1262665).
  • CVE-2026-31504: net: fix fanout UAF in packet_release() via NETDEV_UP race (bsc#1263085).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263093).
  • CVE-2026-31507: net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer (bsc#1263095).
  • CVE-2026-31512: Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() (bsc#1262734).
  • CVE-2026-31528: perf: Make sure to use pmu_ctx->pmu for groups (bsc#1263001).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262758).
  • CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel() (bsc#1263065).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263176).
  • CVE-2026-31588: KVM: x86: Use scratch field in MMIO fragment to hold small write values (bsc#1263165).
  • CVE-2026-31602: ALSA: ctxfi: Limit PTP to a single page (bsc#1263723).
  • CVE-2026-31607: usbip: validate number_of_packets in usbip_pack_ret_submit() (bsc#1263600).
  • CVE-2026-31622: NFC: digital: Bounds check NFC-A cascade depth in SDD response handler (bsc#1263797).
  • CVE-2026-31649: net: stmmac: fix integer underflow in chain mode (bsc#1263582).
  • CVE-2026-31656: drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (bsc#1263170).
  • CVE-2026-31662: tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG (bsc#1263131).
  • CVE-2026-31669: mptcp: fix slab-use-after-free in __inet_lookup_established (bsc#1263141).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263668).
  • CVE-2026-31694: fuse: reject oversized dirents in page cache (bsc#1263901).
  • CVE-2026-31700: net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() (bsc#1263882).
  • CVE-2026-31738: vxlan: validate ND option lengths in vxlan_na_create (bsc#1264059).
  • CVE-2026-31787: xen/privcmd: fix double free via VMA splitting (bsc#1262181).
  • CVE-2026-46331: kernel: net/sched: fix pedit partial COW leading to page cache
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1263931).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1263933).
  • CVE-2026-43038: ipv6: icmp: clear skb2->cb…
Record
SUSE-SU-2026:2195-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-64k
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-64k-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-64k-debug
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-64k-debug-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-64k-debug-devel
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-64k-debug-devel-matched
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-64k-debug-modules
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-64k-debug-modules-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-64k-debug-modules-extra
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-64k-devel
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-64k-devel-matched
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-64k-modules
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-64k-modules-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-64k-modules-extra
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-abi-stablelists
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-cross-headers
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-debug
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-debug-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-debug-devel
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-debug-devel-matched
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-debug-modules
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-debug-modules-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-debug-modules-extra
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-debug-uki-virt
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-devel
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-devel-matched
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-doc
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-headers
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-modules
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-modules-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-modules-extra
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-64k
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-64k-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-64k-debug
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-64k-debug-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-64k-debug-devel
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-64k-debug-modules
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-64k-debug-modules-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-64k-debug-modules-extra
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-64k-devel
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-64k-modules
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-64k-modules-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-64k-modules-extra
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-debug
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-debug-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-debug-devel
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-debug-modules
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-debug-modules-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-debug-modules-extra
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-devel
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-modules
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
kernel-rt-modules-core
AlmaLinux:9
From an advisory covering 20 CVEs
 before 5.14.0-687.12.1.el9_8
5.14.0-687.12.1.el9_8
linux-lts
Alpaquita:23
 6.1.167-r0 up to 6.1.168-r0
6.1.168-r0
linux-lts
Alpaquita:25
 6.12.80-r0 up to 6.12.81-r0
6.12.81-r0
linux-lts
Alpaquita:stream
 6.12.92-r1 up to 6.18.35-r1
6.18.35-r1
bpftool
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 7.0.0-284.1101.el9_2.tuxcare.11.els1
7.0.0-284.1101.el9_2.tuxcare.11.els1
kernel
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-64k
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-64k-core
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-64k-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-64k-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-64k-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-64k-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-64k-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-64k-debug-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-64k-debug-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-64k-debug-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-64k-debug-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-64k-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-64k-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-64k-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-64k-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-64k-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-64k-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-64k-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-abi-stablelists
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-core
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-cross-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-debug-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-debug-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-debug-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-debug-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-debug-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-doc
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-ipaclones-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-selftests-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-tools
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-tools-libs
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-tools-libs-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
libbpf
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.11.els1
2:1.0.0-2.el9_2.tuxcare.11.els1
libbpf-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.11.els1
2:1.0.0-2.el9_2.tuxcare.11.els1
libbpf-static
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.11.els1
2:1.0.0-2.el9_2.tuxcare.11.els1
perf
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
python3-perf
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
rtla
TuxCare:AlmaLinux:9.2
From an advisory covering 95 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els1
5.14.0-284.1101.el9_2.tuxcare.11.els1
kernel
TuxCare:AlmaLinux:9.6
From an advisory covering 110 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els3
5.14.0-570.62.1.el9_6.tuxcare.5.els3
kernel-64k
TuxCare:AlmaLinux:9.6
From an advisory covering 110 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els3
5.14.0-570.62.1.el9_6.tuxcare.5.els3
Kernel
Linux
 4.14.0 up to 5.10.253, 5.11.0 up to 5.15.203, 5.16.0 up to 6.1.168, 6.2.0 up to 6.6.134, 6.7.0 up to 6.12.81, 6.13.0 up to 6.18.22, 6.19.0 up to 6.19.12
5.10.2535.15.2036.1.1686.6.1346.12.816.18.226.19.12
linux
Debian:12
 before 6.1.170-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 43 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1
6.1.170-1
linux
Debian:13
 before 6.12.85-1, plus listed versions
6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-1
Show 12 moreShow less
6.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-1~bpo12+1
6.12.85-1
linux
Debian:14
 before 6.19.12-1, plus listed versions
6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1
Show 45 moreShow less
6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp16.14.5-1~exp1
6.19.12-1
kernel
Mageia:9
From an advisory covering 189 CVEs
 before 6.6.137-1.mga9
6.6.137-1.mga9
kmod-virtualbox
Mageia:9
From an advisory covering 189 CVEs
 before 7.1.18-18.mga9
7.1.18-18.mga9
kmod-xtables-addons
Mageia:9
From an advisory covering 189 CVEs
 before 3.24-90.mga9
3.24-90.mga9
kernel-linus
Mageia:9
From an advisory covering 189 CVEs
 before 6.6.137-1.mga9
6.6.137-1.mga9
kernel
openEuler:22.03-LTS-SP4
From an advisory covering 33 CVEs
 before 5.10.0-320.0.0.222.oe2203sp4
5.10.0-320.0.0.222.oe2203sp4
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-debug-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-debug-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debug-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debug-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-doc
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-rt-64k-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-rt-64k-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-rt-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-tools-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-zfcpdump-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-zfcpdump-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
libperf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
perf
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
perf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
python3-perf
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
python3-perf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
rtla
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
rv
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-debug
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-debug-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-debug-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-debug-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-debug-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-64k-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-abi-stablelists
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debug
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debug-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debug-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debug-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debug-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debug-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debug-uki-virt
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:9::baseos
From an advisory covering 20 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel
Rocky Linux:9
From an advisory covering 19 CVEs
 before 0:5.14.0-687.12.1.el9_8
0:5.14.0-687.12.1.el9_8
kernel
Rocky Linux:10
From an advisory covering 18 CVEs
 before 0:6.12.0-211.18.1.el10_2
0:6.12.0-211.18.1.el10_2
kernel
Rocky Linux:8
From an advisory covering 18 CVEs
 before 0:4.18.0-553.126.1.el8_10
0:4.18.0-553.126.1.el8_10
kernel-rt
Rocky Linux:8
From an advisory covering 18 CVEs
 before 0:4.18.0-553.126.1.rt7.467.el8_10
0:4.18.0-553.126.1.rt7.467.el8_10
linux
Root:Debian:11
 before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
rootio-linux
Root:Debian:11
 before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
rootio-linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
rootio-linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
kernel-obs-build
SUSE:Linux Micro Extras 6.2
From an advisory covering 206 CVEs
 before 6.12.0-160000.33.1
6.12.0-160000.33.1
kernel-syms
SUSE:Linux Micro Extras 6.2
From an advisory covering 206 CVEs
 before 6.12.0-160000.33.1
6.12.0-160000.33.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 69 CVEs
 before 6.4.0-150600.23.112.1
6.4.0-150600.23.112.1
kernel-livepatch-SLE15-SP6_Update_26
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 69 CVEs
 before 1-150600.13.3.1
1-150600.13.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP6
From an advisory covering 69 CVEs
 before 6.4.0-150600.23.112.1
6.4.0-150600.23.112.1
kernel-64kb
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 69 CVEs
 before 6.4.0-150600.23.112.1
6.4.0-150600.23.112.1
kernel-default
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 69 CVEs
 before 6.4.0-150600.23.112.1
6.4.0-150600.23.112.1
kernel-default-base
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 69 CVEs
 before 6.4.0-150600.23.112.1.150600.12.52.1
6.4.0-150600.23.112.1.150600.12.52.1
kernel-docs
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 69 CVEs
 before 6.4.0-150600.23.112.1
6.4.0-150600.23.112.1
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 69 CVEs
 before 6.4.0-150600.23.112.1
6.4.0-150600.23.112.1
kernel-source
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 69 CVEs
 before 6.4.0-150600.23.112.1
6.4.0-150600.23.112.1
kernel-syms
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 69 CVEs
 before 6.4.0-150600.23.112.1
6.4.0-150600.23.112.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 69 CVEs
 before 6.4.0-150600.23.112.1
6.4.0-150600.23.112.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 69 CVEs
 before 6.4.0-150600.23.112.1
6.4.0-150600.23.112.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 69 CVEs
 before 6.4.0-150600.23.112.1.150600.12.52.1
6.4.0-150600.23.112.1.150600.12.52.1
kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 69 CVEs
 before 6.4.0-150600.23.112.1
6.4.0-150600.23.112.1
kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 69 CVEs
 before 6.4.0-150600.23.112.1
6.4.0-150600.23.112.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 69 CVEs
 before 6.4.0-150600.23.112.1
6.4.0-150600.23.112.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 69 CVEs
 before 6.4.0-150600.23.112.1
6.4.0-150600.23.112.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 204 CVEs
 before 6.4.0-150700.53.55.1
6.4.0-150700.53.55.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 204 CVEs
 before 6.4.0-150700.53.55.1
6.4.0-150700.53.55.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 204 CVEs
 before 6.4.0-150700.53.55.1.150700.17.33.1
6.4.0-150700.53.55.1.150700.17.33.1
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 204 CVEs
 before 6.4.0-150700.53.55.1
6.4.0-150700.53.55.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 204 CVEs
 before 6.4.0-150700.53.55.1
6.4.0-150700.53.55.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 204 CVEs
 before 6.4.0-150700.53.55.1
6.4.0-150700.53.55.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 204 CVEs
 before 6.4.0-150700.53.55.1
6.4.0-150700.53.55.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 204 CVEs
 before 6.4.0-150700.53.55.1
6.4.0-150700.53.55.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 204 CVEs
 before 6.4.0-150700.53.55.1
6.4.0-150700.53.55.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP7
From an advisory covering 204 CVEs
 before 6.4.0-150700.53.55.1
6.4.0-150700.53.55.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 204 CVEs
 before 6.4.0-150700.53.55.1
6.4.0-150700.53.55.1
kernel-livepatch-SLE15-SP7_Update_15
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 204 CVEs
 before 1-150700.15.3.1
1-150700.15.3.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 204 CVEs
 before 6.4.0-150700.53.55.1
6.4.0-150700.53.55.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP7
From an advisory covering 204 CVEs
 before 6.4.0-150700.53.55.1
6.4.0-150700.53.55.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP7
From an advisory covering 204 CVEs
 before 6.4.0-150700.53.55.1
6.4.0-150700.53.55.1
kernel-livepatch-SLE16-RT_Update_9
SUSE:Linux Micro 6.2
From an advisory covering 20 CVEs
 before 4-160000.1.1
4-160000.1.1
kernel-livepatch-MICRO-6-0_Update_10
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
 before 14-1.1
14-1.1
kernel-livepatch-MICRO-6-0_Update_11
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
 before 13-1.1
13-1.1
kernel-livepatch-MICRO-6-0_Update_12
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
 before 13-1.1
13-1.1
kernel-livepatch-MICRO-6-0_Update_13
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
 before 11-1.1
11-1.1
kernel-livepatch-MICRO-6-0_Update_16
SUSE:Linux Micro 6.1
From an advisory covering 24 CVEs
 before 8-1.1
8-1.1
kernel-livepatch-MICRO-6-0_Update_21
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
 before 3-1.1
3-1.1
kernel-livepatch-MICRO-6-0_Update_8
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
 before 20-1.2
20-1.2
kernel-livepatch-MICRO-6-0_Update_9
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
 before 20-1.2
20-1.2
kernel-livepatch-MICRO-6-0_Update_14
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
 before 9-1.2
9-1.2
kernel-livepatch-MICRO-6-0_Update_17
SUSE:Linux Micro 6.1
From an advisory covering 24 CVEs
 before 7-1.1
7-1.1
kernel-livepatch-MICRO-6-0_Update_18
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
 before 6-1.1
6-1.1
kernel-livepatch-MICRO-6-0_Update_19
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
 before 4-1.1
4-1.1
kernel-livepatch-MICRO-6-0_Update_20
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
 before 3-1.1
3-1.1
kernel-livepatch-MICRO-6-0_Update_22
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
 before 3-1.1
3-1.1
kernel-livepatch-MICRO-6-0-RT_Update_13
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
 before 9-1.1
9-1.1
kernel-livepatch-MICRO-6-0-RT_Update_15
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
 before 8-1.1
8-1.1
kernel-livepatch-MICRO-6-0-RT_Update_18
SUSE:Linux Micro 6.1
From an advisory covering 24 CVEs
 before 7-1.1
7-1.1
kernel-livepatch-MICRO-6-0-RT_Update_19
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
 before 6-1.1
6-1.1
kernel-livepatch-MICRO-6-0-RT_Update_20
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
 before 4-1.1
4-1.1
kernel-livepatch-MICRO-6-0-RT_Update_21
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
 before 3-1.1
3-1.1
linux-azure
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2
Show 45 moreShow less
4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1
 None known
linux-aws-hwe
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1
Show 45 moreShow less
4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1
 None known
linux-azure
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 45 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71
 None known
linux-gcp
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
Show 45 moreShow less
4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1
 None known
linux-hwe
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 45 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1
 None known
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-oracle
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1
Show 45 moreShow less
4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1
 None known
linux
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 45 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107
 None known
linux-aws
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 45 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-aws-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-4.15
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102
Show 45 moreShow less
4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1
Show 45 moreShow less
5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-4.15
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92
Show 45 moreShow less
4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gcp-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 45 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-ibm-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1
Show 45 moreShow less
5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1
 None known
linux-kvm
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8
Show 45 moreShow less
4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13
Show 45 moreShow less
4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-oracle-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1
 None known
linux-raspi-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1
Show 45 moreShow less
5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1
 None known
linux-aws-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24
Show 45 moreShow less
4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93
 None known
linux-azure-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10
Show 45 moreShow less
4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80
 None known
linux-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42
Show 45 moreShow less
4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21
Show 45 moreShow less
4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.794.15.0-2075.804.15.0-2076.814.15.0-2077.83
 None known
linux-aws-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.4
 None known
linux-azure-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.2
 None known
linux-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1011.12
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.1
 None known
linux
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 45 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110
 None known
linux-aws
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5
Show 45 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1112.119~20.04.1, plus listed versions
5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1
Show 45 moreShow less
5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1
5.15.0-1112.119~20.04.1
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8
Show 45 moreShow less
5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
linux-azure-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
 None known
linux-azure-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1117.126~20.04.1, plus listed versions
5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1
Show 45 moreShow less
5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1
5.15.0-1117.126~20.04.1
linux-azure-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
 None known
linux-azure-fde
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
 None known

History

History
RecordedChangedSources
affectedCVE List, EUVD, OSV
affectedOSV
affectedOSV
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-43027 is a high vulnerability (CVSS 7.8) in Linux, published May 1, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.13%, the 2nd percentile. Fixed in linux-lts 6.1.168-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 1,602 package rows, 1,890 versions, 2,826 references and the rest of 18 source descriptions. The JSON record has them. Also not on the record: 99 aliases. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 148 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open