CVE-2025-40064

smc: Fix use-after-free in __pnet_find_base_ndev().

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

smc: Fix use-after-free in __pnet_find_base_ndev().

syzbot reported use-after-free of net_device in __pnet_find_base_ndev(), which was called during connect(). [0]

smc_pnet_find_ism_resource() fetches sk_dst_get(sk)->dev and passes down to pnet_find_base_ndev(), where RTNL is held. Then, UAF happened at __pnet_find_base_ndev() when the dev is first used.

This means dev had already been freed before acquiring RTNL in pnet_find_base_ndev().

While dev is going away, dst->dev could be swapped with blackhole_netdev, and the dev's refcnt by dst will be released.

We must hold dev's refcnt before calling smc_pnet_find_ism_resource().

Also, smc_pnet_find_roce_resource() has the same problem.

Let's use __sk_dst_get() and dst_dev_rcu() in the two functions.

[0]: BUG: KASAN: use-after-free in __pnet_find_base_ndev+0x1b1/0x1c0 net/smc/smc_pnet.c:926 Read of size 1 at addr ffff888036bac33a by task syz.0.3632/18609

CPU: 1 UID: 0 PID: 18609 Comm: syz.0.3632 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 Call Trace: <TASK> dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report+0xca/0x240 mm/kasan/report.c:482 kasan_report+0x118/0x150 mm/kasan/report.c:595 __pnet_find_base_ndev+0x1b1/0x1c0 net/smc/smc_pnet.c:926 pnet_find_base_ndev net/smc/smc_pnet.c:946 [inline] smc_pnet_find_ism_by_pnetid net/smc/smc_pnet.c:1103 [inline] smc_pnet_find_ism_resource+0xef/0x390 net/smc/smc_pnet.c:1154 smc_find_ism_device net/smc/af_smc.c:1030 [inline] smc_find_proposal_devices net/smc/af_smc.c:1115 [inline] __smc_connect+0x372/0x1890 net/smc/af_smc.c:1545 smc_connect+0x877/0xd90 net/smc/af_smc.c:1715 __sys_connect_file net/socket.c:2086 [inline] __sys_connect+0x313/0x440 net/socket.c:2105 __do_sys_connect net/socket.c:2111 [inline] __se_sys_connect net/socket.c:2108 [inline] __x64_sys_connect+0x7a/0x90 net/socket.c:2108 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f47cbf8eba9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f47ccdb1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a RAX: ffffffffffffffda RBX: 00007f47cc1d5fa0 RCX: 00007f47cbf8eba9 RDX: 0000000000000010 RSI: 0000200000000280 RDI: 000000000000000b RBP: 00007f47cc011e19 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f47cc1d6038 R14: 00007f47cc1d5fa0 R15: 00007ffc512f8aa8 </TASK>

The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888036bacd00 pfn:0x36bac flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) raw: 00fff00000000000 ffffea0001243d08 ffff8880b863fdc0 0000000000000000 raw: ffff888036bacd00 0000000000000000 00000000ffffffff 0000000000000000 page dumped because: kasan: bad access detected page_owner tracks the page as freed page last allocated via order 2, migratetype Unmovable, gfp_mask 0x446dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 16741, tgid 16741 (syz-executor), ts 343313197788, free_ts 380670750466 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x240/0x2a0 mm/page_alloc.c:1851 prep_new_page mm/page_alloc.c:1859 [inline] get_page_from_freelist+0x21e4/0x22c0 mm/page_alloc.c:3858 __alloc_frozen_pages_noprof+0x181/0x370 mm/page_alloc.c:5148 alloc_pages_mpol+0x232/0x4a0 mm/mempolicy.c:2416 ___kmalloc_large_node+0x5f/0x1b0 mm/slub.c:4317 __kmalloc_large_node_noprof+0x18/0x90 mm/slub.c:4348 __do_kmalloc_node mm/slub.c:4364 [inline] __kvmalloc_node ---truncated---

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.15%Up 0.1 points since Oct 28, 2025

What each source reports

CVE List Score used 7.8

smc: Fix use-after-free in __pnet_find_base_ndev().

In the Linux kernel, the following vulnerability has been resolved:

smc: Fix use-after-free in __pnet_find_base_ndev().

syzbot reported use-after-free of net_device in __pnet_find_base_ndev(), which was called during connect(). [0]

smc_pnet_find_ism_resource() fetches sk_dst_get(sk)->dev and passes down to pnet_find_base_ndev(), where RTNL is held. Then, UAF happened at __pnet_find_base_ndev() when the dev is first used.

This means dev had already been freed before acquiring RTNL in pnet_find_base_ndev().

While dev is going away, dst->dev could be swapped with blackhole_netdev, and the dev's refcnt by dst will be released.

We must hold dev's refcnt before calling smc_pnet_find_ism_resource().

Also, smc_pnet_find_roce_resource() has the same problem.

Let's use __sk_dst_get() and dst_dev_rcu() in the two functions.

[0]: BUG: KASAN: use-after-free in __pnet_find_base_ndev+0x1b1/0x1c0 net/smc/smc_pnet.c:926 Read of size 1 at addr ffff888036bac33a by task syz.0.3632/18609

Record: CVE-2025-40064
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

EUVDEUVD-2025-36464 7.8

In the Linux kernel, the following vulnerability has been resolved:

smc: Fix use-after-free in __pnet_find_base_ndev().

syzbot reported use-after-free of net_device in __pnet_find_base_ndev(), which was called during connect(). [0]

smc_pnet_find_ism_resource() fetches sk_dst_get(sk)->dev and passes down to pnet_find_base_ndev(), where RTNL is held. Then, UAF happened at __pnet_find_base_ndev() when the dev is first used.

This means dev had already been freed before acquiring RTNL in pnet_find_base_ndev().

While dev is going away, dst->dev could be swapped with blackhole_netdev, and the dev's refcnt by dst will be released.

We must hold dev's refcnt before calling smc_pnet_find_ism_resource().

Also, smc_pnet_find_roce_resource() has the same problem.

Let's use __sk_dst_get() and dst_dev_rcu() in the two functions.

[0]: BUG: KASAN: use-after-free in __pnet_find_base_ndev+0x1b1/0x1c0 net/smc/smc_pnet.c:926 Read of size 1 at addr ffff888036bac33a by task syz.0.3632/18609

Record: EUVD-2025-36464
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-c442-5cxr-p4xq 7.8

In the Linux kernel, the following vulnerability has been resolved: smc: Fix use-after-free in...

In the Linux kernel, the following vulnerability has been resolved:

smc: Fix use-after-free in __pnet_find_base_ndev().

syzbot reported use-after-free of net_device in __pnet_find_base_ndev(), which was called during connect(). [0]

smc_pnet_find_ism_resource() fetches sk_dst_get(sk)->dev and passes down to pnet_find_base_ndev(), where RTNL is held. Then, UAF happened at __pnet_find_base_ndev() when the dev is first used.

This means dev had already been freed before acquiring RTNL in pnet_find_base_ndev().

While dev is going away, dst->dev could be swapped with blackhole_netdev, and the dev's refcnt by dst will be released.

We must hold dev's refcnt before calling smc_pnet_find_ism_resource().

Also, smc_pnet_find_roce_resource() has the same problem.

Let's use __sk_dst_get() and dst_dev_rcu() in the two functions.

[0]: BUG: KASAN: use-after-free in __pnet_find_base_ndev+0x1b1/0x1c0 net/smc/smc_pnet.c:926 Read of size 1 at addr ffff888036bac33a by task syz.0.3632/18609

Record: GHSA-c442-5cxr-p4xq
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

smc: Fix use-after-free in __pnet_find_base_ndev().

syzbot reported use-after-free of net_device in __pnet_find_base_ndev(), which was called during connect(). [0]

smc_pnet_find_ism_resource() fetches sk_dst_get(sk)->dev and passes down to pnet_find_base_ndev(), where RTNL is held. Then, UAF happened at __pnet_find_base_ndev() when the dev is first used.

This means dev had already been freed before acquiring RTNL in pnet_find_base_ndev().

While dev is going away, dst->dev could be swapped with blackhole_netdev, and the dev's refcnt by dst will be released.

We must hold dev's refcnt before calling smc_pnet_find_ism_resource().

Also, smc_pnet_find_roce_resource() has the same problem.

Let's use __sk_dst_get() and dst_dev_rcu() in the two functions.

[0]: BUG: KASAN: use-after-free in __pnet_find_base_ndev+0x1b1/0x1c0 net/smc/smc_pnet.c:926 Read of size 1 at addr ffff888036bac33a by task syz.0.3632/18609

Record: CVE-2025-40064
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVBELL-CVE-2025-40064 7.8

Record: BELL-CVE-2025-40064
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSV 7.8

smc: Fix use-after-free in __pnet_find_base_ndev().

In the Linux kernel, the following vulnerability has been resolved:

smc: Fix use-after-free in __pnet_find_base_ndev().

syzbot reported use-after-free of net_device in __pnet_find_base_ndev(), which was called during connect(). [0]

smc_pnet_find_ism_resource() fetches sk_dst_get(sk)->dev and passes down to pnet_find_base_ndev(), where RTNL is held. Then, UAF happened at __pnet_find_base_ndev() when the dev is first used.

This means dev had already been freed before acquiring RTNL in pnet_find_base_ndev().

While dev is going away, dst->dev could be swapped with blackhole_netdev, and the dev's refcnt by dst will be released.

We must hold dev's refcnt before calling smc_pnet_find_ism_resource().

Also, smc_pnet_find_roce_resource() has the same problem.

Let's use __sk_dst_get() and dst_dev_rcu() in the two functions.

[0]: BUG: KASAN: use-after-free in __pnet_find_base_ndev+0x1b1/0x1c0 net/smc/smc_pnet.c:926 Read of size 1 at addr ffff888036bac33a by task syz.0.3632/18609

Record: CVE-2025-40064
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 48 moreShow less

OSVDEBIAN-CVE-2025-40064 7.8

In the Linux kernel, the following vulnerability has been resolved: smc: Fix use-after-free in __pnet_find_base_ndev(). syzbot reported use-after-free of net_device in __pnet_find_base_ndev(), which was called during connect(). [0] smc_pnet_find_ism_resource() fetches sk_dst_get(sk)->dev and passes down to pnet_find_base_ndev(), where RTNL is held. Then, UAF happened at __pnet_find_base_ndev() when the dev is first used. This means dev had already been freed before acquiring RTNL in pnet_find_base_ndev(). While dev is going away, dst->dev could be swapped with blackhole_netdev, and the dev's refcnt by dst will be released. We must hold dev's refcnt before calling smc_pnet_find_ism_resource(). Also, smc_pnet_find_roce_resource() has the same problem. Let's use __sk_dst_get() and dst_dev_rcu() in the two functions. [0]: BUG: KASAN: use-after-free in __pnet_find_base_ndev+0x1b1/0x1c0 net/smc/smc_pnet.c:926 Read of size 1 at addr ffff888036bac33a by task syz.0.3632/18609 CPU: 1 UID: 0 PID: 18609 Comm: syz.0.3632 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 Call Trace: <TASK> dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report+0xca/0x240 mm/kasan/report.c:482 kasan_report+0x118/0x150 mm/kasan/report.c:595 __pnet_find_base_ndev+0x1b1/0x1c0 net/smc/smc_pnet.c:926 pnet_find_base_ndev net/smc/smc_pnet.c:946 [inline] smc_pnet_find_ism_by_pnetid net/smc/smc_pnet.c:1103 [inline] smc_pnet_find_ism_resource+0xef/0x390 net/smc/smc_pnet.c:1154 smc_find_ism_device net/smc/af_smc.c:1030 [inline] smc_find_proposal_devices net/smc/af_smc.c:1115 [inline] __smc_connect+0x372/0x1890 net/smc/af_smc.c:1545 smc_connect+0x877/0xd90 net/smc/af_smc.c:1715 __sys_connect_file net/socket.c:2086 [inline] __sys_connect+0x313/0x440 net/socket.c:2105 __do_sys_connect net/socket.c:2111 [inline] __se_sys_connect net/socket.c:2108 [inline] __x64_sys_connect+0x7a/0x90 net/socket.c:2108 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f47cbf8eba9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f47ccdb1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a RAX: ffffffffffffffda RBX: 00007f47cc1d5fa0 RCX: 00007f47cbf8eba9 RDX: 0000000000000010 RSI: 0000200000000280 RDI: 000000000000000b RBP: 00007f47cc011e19 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f47cc1d6038 R14: 00007f47cc1d5fa0 R15: 00007ffc512f8aa8 </TASK> The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888036bacd00 pfn:0x36bac flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) raw: 00fff00000000000 ffffea0001243d08 ffff8880b863fdc0 0000000000000000 raw: ffff888036bacd00 0000000000000000 00000000ffffffff 0000000000000000 page dumped because: kasan: bad access detected page_owner tracks the page as freed page last allocated via order 2, migratetype Unmovable, gfp_mask 0x446dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 16741, tgid 16741 (syz-executor), ts 343313197788, free_ts 380670750466 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x240/0x2a0 mm/page_alloc.c:1851 prep_new_page mm/page_alloc.c:1859 [inline] get_page_from_freelist+0x21e4/0x22c0 mm/page_alloc.c:3858 __alloc_frozen_pages_noprof+0x181/0x370 mm/page_alloc.c:5148 alloc_pages_mpol+0x232/0x4a0 mm/mempolicy.c:2416 ___kmalloc_large_node+0x5f/0x1b0 mm/slub.c:4317 __kmalloc_large_node_noprof+0x18/0x90 mm/slub.c:4348 __do_kmalloc_node mm/slub.c:4364 [inline] __kvmalloc_node ---truncated---

Record: DEBIAN-CVE-2025-40064
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:2721 7.5

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:2721
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2026:2722 7.5

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:2722
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2026:27708 8.7

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record: RHSA-2026:27708
CVSS 3.1: 8.7 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2026:3083 7.3

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:3083
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated: 2026-11-02

OSVRHSA-2026:3110 7.3

Red Hat Security Advisory: kernel-rt security update

Record: RHSA-2026:3110
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated: 2026-11-02

OSVRHSA-2026:4111 7.3

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:4111
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated: 2026-11-02

OSVRHSA-2026:63129 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record: RHSA-2026:63129
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:6954 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:6954
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:9513 7.5

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:9513
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:9514 7.5

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:9514
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:9643 7.5

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:9643
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:2721 7.5

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (CVE-2023-53034)
kernel: Linux kernel erofs: Use-After-Free due to device type mismatch (CVE-2025-38172)
kernel: smc: Fix use-after-free in __pnet_find_base_ndev() (CVE-2025-40064)
kernel: Bluetooth: ISO: Fix possible UAF on iso_conn_free (CVE-2025-40141)
kernel: Linux kernel ALSA USB audio driver: Buffer overflow leading to information disclosure and denial of service (CVE-2025-40269)
kernel: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CVE-2025-68349)
kernel: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CVE-2026-22998)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:2721
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRLSA-2026:2722 7.5

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (CVE-2023-53034)
kernel: smc: Fix use-after-free in __pnet_find_base_ndev() (CVE-2025-40064)
kernel: Linux kernel: Out-of-bounds write in fbdev can lead to privilege escalation, information disclosure, or denial of service. (CVE-2025-40304)
kernel: Linux kernel: Information disclosure and denial of service via out-of-bounds read in font glyph handling (CVE-2025-40322)
kernel: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CVE-2025-68349)
kernel: svcrdma: use rc_pageoff for memcpy byte offset (CVE-2025-68811)
kernel: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CVE-2026-22998)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:2722
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRLSA-2026:63129 8.8

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: smc: Fix use-after-free in __pnet_find_base_ndev() (CVE-2025-40064)
kernel: Linux kernel: Denial of Service due to memory leak in tpm2_load_cmd (CVE-2025-71147)
kernel: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CVE-2026-45970)
kernel: smb/client: fix out-of-bounds read in symlink_data() (CVE-2026-46185)
kernel: Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CVE-2026-53073)
kernel: pNFS: Fix use-after-free in pnfs_update_layout() (CVE-2026-63800)
kernel: nfsd: fix posix_acl leak on SETACL decode failure (CVE-2026-53397)
kernel: exfat: fix potential use-after-free in exfat_find_dir_entry() (CVE-2026-63808)
kernel: nfsd: release layout stid on setlease failure (CVE-2026-53399)
kernel: NFSv4/flexfiles: reject zero filehandle version count (CVE-2026-53392)
kernel: KEYS: fix overflow in keyctl_pkey_params_get_2() (CVE-2026-63824)
kernel: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CVE-2026-53391)
kernel: scsi: target: iscsi: Validate CHAP_R length before base64 decode (CVE-2026-63886)
kernel: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CVE-2026-64002)
kernel: net: mana: validate rx_req_idx to prevent out-of-bounds array access (CVE-2026-64018)
kernel: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CVE-2026-63887)
kernel: smb: client: fix query directory replay double-free (CVE-2026-64387)
kernel: Kernel: Remote out-of-bounds write in RDMA/siw (CVE-2026-64268)
kernel: crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (CVE-2026-64438)
kernel: crypto: qat - validate RSA CRT component lengths (CVE-2026-64304)
kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CVE-2026-64298)
kernel: ALSA: virtio: Validate control metadata from the device (CVE-2026-64490)
kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability (CVE-2026-68480)
kernel: Linux kernel: Arbitrary code execution via userfaultfd shadow stack manipulation (CVE-2026-68166)
kernel: iomap: fix out-of-bounds bitmap_set() with zero-length range (CVE-2026-68145)
kernel: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CVE-2026-72069)
kernel: nvmet-auth: reject short AUTH_RECEIVE buffers (CVE-2026-72130)

Bug Fix(es) and Enhancement(s):

[Rocky Linux 9] TPM becomes completely unresponsive and requires a full reboot to clear [rhel-9.8.z] (JIRA:Rocky Linux-213940)
RT scheduler livelock caused by missing backport of 94894c9c477e [rhel-9.8.z] (JIRA:Rocky Linux-240634)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:63129
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVROOT-OS-DEBIAN-11-CVE-2025-40064 7.1

CVE-2025-40064 in linux - Patched by Root

Root has patched CVE-2025-40064 in the linux package for Root:Debian:11. Multiple fixed versions available.

Record: ROOT-OS-DEBIAN-11-CVE-2025-40064
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVROOT-OS-DEBIAN-12-CVE-2025-40064 7.1

CVE-2025-40064 in linux - Patched by Root

Root has patched CVE-2025-40064 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record: ROOT-OS-DEBIAN-12-CVE-2025-40064
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVROOT-OS-DEBIAN-13-CVE-2025-40064 7.1

CVE-2025-40064 in linux - Patched by Root

Root has patched CVE-2025-40064 in the linux package for Root:Debian:13. Multiple fixed versions available.

Record: ROOT-OS-DEBIAN-13-CVE-2025-40064
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-03

OSVROOT-OS-UBUNTU-2204-CVE-2025-40064 7.1

CVE-2025-40064 in linux - Patched by Root

Root has patched CVE-2025-40064 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record: ROOT-OS-UBUNTU-2204-CVE-2025-40064
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVROOT-OS-UBUNTU-2404-CVE-2025-40064 7.1

CVE-2025-40064 in linux - Patched by Root

Root has patched CVE-2025-40064 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record: ROOT-OS-UBUNTU-2404-CVE-2025-40064
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2025-40064 7.3

Record: UBUNTU-CVE-2025-40064
CVSS 4.0: 7.3 HighCVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVALSA-2026:2721 No score

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (CVE-2023-53034)
kernel: Linux kernel erofs: Use-After-Free due to device type mismatch (CVE-2025-38172)
kernel: smc: Fix use-after-free in __pnet_find_base_ndev() (CVE-2025-40064)
kernel: Bluetooth: ISO: Fix possible UAF on iso_conn_free (CVE-2025-40141)
kernel: Linux kernel ALSA USB audio driver: Buffer overflow leading to information disclosure and denial of service (CVE-2025-40269)
kernel: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CVE-2025-68349)
kernel: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CVE-2026-22998)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:2721
Updated: 2026-11-02

OSVALSA-2026:2722 No score

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (CVE-2023-53034)
kernel: smc: Fix use-after-free in __pnet_find_base_ndev() (CVE-2025-40064)
kernel: Linux kernel: Out-of-bounds write in fbdev can lead to privilege escalation, information disclosure, or denial of service. (CVE-2025-40304)
kernel: Linux kernel: Information disclosure and denial of service via out-of-bounds read in font glyph handling (CVE-2025-40322)
kernel: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CVE-2025-68349)
kernel: svcrdma: use rc_pageoff for memcpy byte offset (CVE-2025-68811)
kernel: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CVE-2026-22998)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:2722
Updated: 2026-11-02

OSVALSA-2026:3083 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: page_pool: Fix use-after-free in page_pool_recycle_in_ring (CVE-2025-38129)
kernel: Linux kernel:A use-after-free in bridge multicast in br_multicast_port_ctx_init (CVE-2025-38248)
kernel: smc: Fix use-after-free in __pnet_find_base_ndev() (CVE-2025-40064)
kernel: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CVE-2025-68800)
kernel: Linux kernel: Use-after-free in teql queueing discipline can lead to privilege escalation (CVE-2026-23074)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:3083
Updated: 2026-11-02

OSVALSA-2026:3110 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

kernel: page_pool: Fix use-after-free in page_pool_recycle_in_ring (CVE-2025-38129)
kernel: Linux kernel:A use-after-free in bridge multicast in br_multicast_port_ctx_init (CVE-2025-38248)
kernel: smc: Fix use-after-free in __pnet_find_base_ndev() (CVE-2025-40064)
kernel: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CVE-2025-68800)
kernel: Linux kernel: Use-after-free in teql queueing discipline can lead to privilege escalation (CVE-2026-23074)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:3110
Updated: 2026-11-02

OSVALSA-2026:63129 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: smc: Fix use-after-free in __pnet_find_base_ndev() (CVE-2025-40064)
kernel: Linux kernel: Denial of Service due to memory leak in tpm2_load_cmd (CVE-2025-71147)
kernel: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CVE-2026-45970)
kernel: smb/client: fix out-of-bounds read in symlink_data() (CVE-2026-46185)
kernel: Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CVE-2026-53073)
kernel: pNFS: Fix use-after-free in pnfs_update_layout() (CVE-2026-63800)
kernel: nfsd: fix posix_acl leak on SETACL decode failure (CVE-2026-53397)
kernel: exfat: fix potential use-after-free in exfat_find_dir_entry() (CVE-2026-63808)
kernel: nfsd: release layout stid on setlease failure (CVE-2026-53399)
kernel: NFSv4/flexfiles: reject zero filehandle version count (CVE-2026-53392)
kernel: KEYS: fix overflow in keyctl_pkey_params_get_2() (CVE-2026-63824)
kernel: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CVE-2026-53391)
kernel: scsi: target: iscsi: Validate CHAP_R length before base64 decode (CVE-2026-63886)
kernel: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CVE-2026-64002)
kernel: net: mana: validate rx_req_idx to prevent out-of-bounds array access (CVE-2026-64018)
kernel: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CVE-2026-63887)
kernel: smb: client: fix query directory replay double-free (CVE-2026-64387)
kernel: Kernel: Remote out-of-bounds write in RDMA/siw (CVE-2026-64268)
kernel: crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (CVE-2026-64438)
kernel: crypto: qat - validate RSA CRT component lengths (CVE-2026-64304)
kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CVE-2026-64298)
kernel: ALSA: virtio: Validate control metadata from the device (CVE-2026-64490)
kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability (CVE-2026-68480)
kernel: Linux kernel: Arbitrary code execution via userfaultfd shadow stack manipulation (CVE-2026-68166)
kernel: iomap: fix out-of-bounds bitmap_set() with zero-length range (CVE-2026-68145)
kernel: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CVE-2026-72069)
kernel: nvmet-auth: reject short AUTH_RECEIVE buffers (CVE-2026-72130)

Bug Fix(es) and Enhancement(s):

[AlmaLinux 9] TPM becomes completely unresponsive and requires a full reboot to clear [almalinux-9.8.z] (JIRA:AlmaLinux-213940)
RT scheduler livelock caused by missing backport of 94894c9c477e [almalinux-9.8.z] (JIRA:AlmaLinux-240634)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:63129
Updated: 2026-11-02

OSVAZL-68897 No score

CVE-2025-40064 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved:

smc: Fix use-after-free in __pnet_find_base_ndev().

syzbot reported use-after-free of net_device in __pnet_find_base_ndev(), which was called during connect(). [0]

smc_pnet_find_ism_resource() fetches sk_dst_get(sk)->dev and passes down to pnet_find_base_ndev(), where RTNL is held. Then, UAF happened at __pnet_find_base_ndev() when the dev is first used.

This means dev had already been freed before acquiring RTNL in pnet_find_base_ndev().

While dev is going away, dst->dev could be swapped with blackhole_netdev, and the dev's refcnt by dst will be released.

We must hold dev's refcnt before calling smc_pnet_find_ism_resource().

Also, smc_pnet_find_roce_resource() has the same problem.

Let's use __sk_dst_get() and dst_dev_rcu() in the two functions.

[0]: BUG: KASAN: use-after-free in __pnet_find_base_ndev+0x1b1/0x1c0 net/smc/smc_pnet.c:926 Read of size 1 at addr ffff888036bac33a by task syz.0.3632/18609

Record: AZL-68897
Updated: 2026-11-02

OSVCLSA-2026-1792982524 No score

Fix of 203 CVEs

CVE-2026-46267
- nfc: hci: shdlc: Stop timers and work before freeing context {CVE-2026-46267}
CVE-2026-53004
- sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks {CVE-2026-53004}
CVE-2026-98716
- KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted {CVE-2026-98716}
CVE-2026-98714
- KVM: SVM: Update control fields on #VMEXIT if and only if VMRUN succeeded {CVE-2026-98714}
CVE-2026-98715
- KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN {CVE-2026-98715}
CVE-2026-98662
- iio: light: gp2ap020a00f: drain irq_work after free_irq {CVE-2026-98662}
CVE-2026-98430
- RDMA/efa: Keep admin queues alive while IRQ is registered {CVE-2026-98430}
CVE-2026-98769
- usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd {CVE-2026-98769}
CVE-2026-98764
- usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC {CVE-2026-98764}
CVE-2026-98763
- usb: core: clear both ep_in and ep_out for non-ep0 control endpoints {CVE-2026-98763}
CVE-2026-46064
- ibmasm: fix heap over-read in ibmasm_send_i2o_message() {CVE-2026-46064}
CVE-2026-98621
- net: gue: reject invalid REMCSUM offsets {CVE-2026-98621}
CVE-2026-98636
- squashfs: Add dictionary size range check to prevent shift-out-of-bounds {CVE-2026-98636}
CVE-2026-98771
- usb: storage: sierra_ms: reject short SWoC info transfers {CVE-2026-98771}
CVE-2026-98772
- USB: serial: fix port tear down use-after-free {CVE-2026-98772}
CVE-2026-53149
- thunderbolt: Bound root directory content to block size {CVE-2026-53149}
CVE-2026-46163
- wifi: b43legacy: enforce bounds check on firmware key index in RX path {CVE-2026-46163}
CVE-2026-52962
- ceph: fix a buffer leak in __ceph_setxattr() {CVE-2026-52962}
CVE-2026-98386
- scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot {CVE-2026-98386}
CVE-2026-45916
- power: supply: sbs-battery: Fix use-after-free in power_supply_changed() {CVE-2026-45916}
CVE-2026-98555
- llc: fix skb UAF and leaks on llc_mac_hdr_init() failure {CVE-2026-98555}
CVE-2023-54243
- netfilter: ebtables: fix table blob use-after-free {CVE-2023-54243}
CVE-2026-53255
- Bluetooth: MGMT: validate advertising TLV before type checks {CVE-2026-53255}
CVE-2026-98409
- watchdog: rtd119x: Avoid division by zero {CVE-2026-98409}
CVE-2026-98598
- ipv6: Prevent rt6_insert_exception() for dying fib6_info. {CVE-2026-98598}
CVE-2026-53392
- NFSv4/flexfiles: reject zero filehandle version count {CVE-2026-53392}
CVE-2026-98422
- wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown {CVE-2026-98422}
CVE-2026-98393
- net: ipv4: Fix UDP length overflow with PMTU discover and big MTU {CVE-2026-98393}
CVE-2026-53129
- fs/mbcache: cancel shrink work before destroying the cache {CVE-2026-53129}
CVE-2023-53794
- cifs: fix session state check in reconnect to avoid use-after-free issue {CVE-2023-53794}
CVE-2026-98494
- net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read {CVE-2026-98494}
CVE-2026-98428
- ALSA: usb: 6fire: Avoid embedded URBs {CVE-2026-98428}
CVE-2026-53157
- net: phonet: free phonet_device after RCU grace period {CVE-2026-53157}
CVE-2026-98709
- wifi: mac80211: count only matching reservations in reserved switch {CVE-2026-98709}
CVE-2026-98614
- sctp: avoid livelock while updating retransmit path {CVE-2026-98614}
CVE-2026-98811
- net/sched: cls_api: reclaim an empty proto on the error path {CVE-2026-98811}
CVE-2026-43042
- mpls: add seqcount to protect the…

Record: CLSA-2026-1792982524
Updated: 2026-11-02

OSVopenSUSE-SU-2025:15702-1 No score

kernel-devel-6.17.7-1.1 on GA media

These are all security issues fixed in the kernel-devel-6.17.7-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2025:15702-1
Updated: 2026-11-02

OSVopenSUSE-SU-2025:20172-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912).
CVE-2025-37916: pds_core: remove write-after-free of client_id (bsc#1243474).
CVE-2025-38084: mm/hugetlb: unshare page tables during VMA split, not before (bsc#1245431 bsc#1245498).
CVE-2025-38085: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (bsc#1245431 bsc#1245499).
CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
CVE-2025-39805: net: macb: fix unregister_netdev call order in macb_remove() (bsc#1249982).
CVE-2025-39819: fs/smb: Fix inconsistent refcnt update (bsc#1250176).
CVE-2025-39822: io_uring/kbuf: fix signedness in this_len calculation (bsc#1250034).
CVE-2025-39831: fbnic: Move phylink resume out of service_task and into open/close (bsc#1249977).
CVE-2025-39859: ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog (bsc#1250252).
CVE-2025-39897: net: xilinx: axienet: Add error handling for RX metadata pointer retrieval (bsc#1250746).
CVE-2025-39917: bpf: Fix out-of-bounds dynptr write in bpf_crypto_crypt (bsc#1250723).
CVE-2025-39944: octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() (bsc#1251120).
CVE-2025-39961: iommu/amd/pgtbl: Fix possible race while increase page table level (bsc#1251817).
CVE-2025-39980: nexthop: Forbid FDB status change while nexthop is in a group (bsc#1252063).
CVE-2025-39990: bpf: Check the helper function is valid in get_helper_proto (bsc#1252054).
CVE-2025-40001: scsi: mvsas: Fix use-after-free bugs in mvs_work_queue (bsc#1252303).
CVE-2025-40003: net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work (bsc#1252301).
CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
CVE-2025-40021: tracing: dynevent: Add a missing lockdown check on dynevent (bsc#1252681).
CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
CVE-2025-40027: net/9p: fix double req put in p9_fd_cancelled (bsc#1252763).
CVE-2025-40031: tee: fix register_shm_helper() (bsc#1252779).
CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
CVE-2025-40038: KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid (bsc#1252817).
CVE-2025-40047: io_uring/waitid: always prune wait queue entry in io_waitid_wait() (bsc#1252790).
CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
CVE-2025-40055: ocfs2: fix double free in user_cluster_connect() (bsc#1252821).
CVE-2025-40059: coresight: Fix incorrect handling for return value of devm_kzalloc (bsc#1252809).
CVE-2025-40064: smc: Fix use-after-free in __pnet_find_base_ndev() (bsc#1252845).
CVE-2025-40070: pps: fix warning in pps_register_cdev when register device fail (bsc#1252836).
CVE-2025-40074: tcp: convert to dev_net_rcu() (bsc#1252794).
CVE-2025-40075: tcp_metrics: use dst_dev_net_rcu() (bsc#1252795).
CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
CVE-2025-40083: net/sched: sch_qfq: Fix null-deref in agg_dequeue (bsc#1252912).
CVE-2025-40086: drm/xe: Don't allow evicting of BOs in same VM in array of VM binds (bsc#1252923).
CVE-2025-40098: ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_get_acpi_mute_state() (bsc#1252917).
CVE-2025-40101: btrfs: fix memory leaks when rejecting a non SINGLE data profile without an RST (bsc#1252901).
CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
CVE-2025-40105: vfs: Don't leak disconnected dentries on umount (bsc#1252928).
CVE-2025-40133: mptcp: Call dst_release() in mptcp_active_enable() (bsc#1253328).
CVE-2025-40134: dm: fix NULL pointer dereference in…

Record: openSUSE-SU-2025:20172-1
Updated: 2026-11-02

OSVopenSUSE-SU-2026:10301-1 No score

kernel-devel-longterm-6.18.16-1.1 on GA media

These are all security issues fixed in the kernel-devel-longterm-6.18.16-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:10301-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4393-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912).
CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251786).
CVE-2025-21710: tcp: correct handling of extreme memory squeeze (bsc#1237888).
CVE-2025-37916: pds_core: remove write-after-free of client_id (bsc#1243474).
CVE-2025-38359: s390/mm: Fix in_atomic() handling in do_secure_storage_access() (bsc#1247076).
CVE-2025-39788: scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE (bsc#1249547).
CVE-2025-39805: net: macb: fix unregister_netdev call order in macb_remove() (bsc#1249982).
CVE-2025-39819: fs/smb: Fix inconsistent refcnt update (bsc#1250176).
CVE-2025-39822: io_uring/kbuf: fix signedness in this_len calculation (bsc#1250034).
CVE-2025-39859: ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog (bsc#1250252).
CVE-2025-39944: octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() (bsc#1251120).
CVE-2025-39980: nexthop: Forbid FDB status change while nexthop is in a group (bsc#1252063).
CVE-2025-40001: scsi: mvsas: Fix use-after-free bugs in mvs_work_queue (bsc#1252303).
CVE-2025-40021: tracing: dynevent: Add a missing lockdown check on dynevent (bsc#1252681).
CVE-2025-40027: net/9p: fix double req put in p9_fd_cancelled (bsc#1252763).
CVE-2025-40030: pinctrl: check the return value of pinmux_ops::get_function_name() (bsc#1252773).
CVE-2025-40038: KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid (bsc#1252817).
CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780).
CVE-2025-40047: io_uring/waitid: always prune wait queue entry in io_waitid_wait() (bsc#1252790).
CVE-2025-40048: uio_hv_generic: Let userspace take care of interrupt mask (bsc#1252862).
CVE-2025-40055: ocfs2: fix double free in user_cluster_connect() (bsc#1252821).
CVE-2025-40059: coresight: Fix incorrect handling for return value of devm_kzalloc (bsc#1252809).
CVE-2025-40064: smc: Fix use-after-free in __pnet_find_base_ndev() (bsc#1252845).
CVE-2025-40070: pps: fix warning in pps_register_cdev when register device fail (bsc#1252836).
CVE-2025-40074: ipv4: start using dst_dev_rcu() (bsc#1252794).
CVE-2025-40075: tcp_metrics: use dst_dev_net_rcu() (bsc#1252795).
CVE-2025-40080: nbd: restrict sockets to TCP and UDP (bsc#1252774).
CVE-2025-40083: net/sched: sch_qfq: Fix null-deref in agg_dequeue (bsc#1252912).
CVE-2025-40086: drm/xe: Don't allow evicting of BOs in same VM in array of VM binds (bsc#1252923).
CVE-2025-40098: ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_get_acpi_mute_state() (bsc#1252917).
CVE-2025-40105: vfs: Don't leak disconnected dentries on umount (bsc#1252928).
CVE-2025-40139: smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set() (bsc#1253409).
CVE-2025-40149: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock() (bsc#1253355).
CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253403).
CVE-2025-40168: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match() (bsc#1253427).
CVE-2025-40169: bpf: Reject negative offsets for ALU ops (bsc#1253416).
CVE-2025-40173: net/ip6_tunnel: Prevent perpetual tunnel growth (bsc#1253421).
CVE-2025-40176: tls: wait for pending async decryptions if tls_strp_msg_hold fails (bsc#1253425).
CVE-2025-40185: ice: ice_adapter: release xa entry on adapter allocation failure (bsc#1253394).
CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253436).

The following non security issues were fixed:

ACPI: CPPC: Check _CPC validity for only the online CPUs (git-fixes).
ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs (git-fixes).
ACPI: CPPC: Perform fast check switch only for online CPUs (git-fixes).
ACPI: PRM:…

Record: SUSE-SU-2025:4393-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4422-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912).
CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251786).
CVE-2025-21710: tcp: correct handling of extreme memory squeeze (bsc#1237888).
CVE-2025-37916: pds_core: remove write-after-free of client_id (bsc#1243474).
CVE-2025-38359: s390/mm: Fix in_atomic() handling in do_secure_storage_access() (bsc#1247076).
CVE-2025-38361: drm/amd/display: Check dce_hwseq before dereferencing it (bsc#1247079).
CVE-2025-39788: scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE (bsc#1249547).
CVE-2025-39805: net: macb: fix unregister_netdev call order in macb_remove() (bsc#1249982).
CVE-2025-39819: fs/smb: Fix inconsistent refcnt update (bsc#1250176).
CVE-2025-39859: ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog (bsc#1250252).
CVE-2025-39944: octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() (bsc#1251120).
CVE-2025-39980: nexthop: Forbid FDB status change while nexthop is in a group (bsc#1252063).
CVE-2025-40001: scsi: mvsas: Fix use-after-free bugs in mvs_work_queue (bsc#1252303).
CVE-2025-40021: tracing: dynevent: Add a missing lockdown check on dynevent (bsc#1252681).
CVE-2025-40027: net/9p: fix double req put in p9_fd_cancelled (bsc#1252763).
CVE-2025-40030: pinctrl: check the return value of pinmux_ops::get_function_name() (bsc#1252773).
CVE-2025-40038: KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid (bsc#1252817).
CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780).
CVE-2025-40048: uio_hv_generic: Let userspace take care of interrupt mask (bsc#1252862).
CVE-2025-40055: ocfs2: fix double free in user_cluster_connect() (bsc#1252821).
CVE-2025-40059: coresight: Fix incorrect handling for return value of devm_kzalloc (bsc#1252809).
CVE-2025-40064: smc: Fix use-after-free in __pnet_find_base_ndev() (bsc#1252845).
CVE-2025-40070: pps: fix warning in pps_register_cdev when register device fail (bsc#1252836).
CVE-2025-40074: ipv4: start using dst_dev_rcu() (bsc#1252794).
CVE-2025-40075: tcp_metrics: use dst_dev_net_rcu() (bsc#1252795).
CVE-2025-40083: net/sched: sch_qfq: Fix null-deref in agg_dequeue (bsc#1252912).
CVE-2025-40098: ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_get_acpi_mute_state() (bsc#1252917).
CVE-2025-40105: vfs: Don't leak disconnected dentries on umount (bsc#1252928).
CVE-2025-40139: smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set() (bsc#1253409).
CVE-2025-40149: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock() (bsc#1253355).
CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253403).
CVE-2025-40168: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match() (bsc#1253427).
CVE-2025-40169: bpf: Reject negative offsets for ALU ops (bsc#1253416).
CVE-2025-40173: net/ip6_tunnel: Prevent perpetual tunnel growth (bsc#1253421).
CVE-2025-40176: tls: wait for pending async decryptions if tls_strp_msg_hold fails (bsc#1253425).
CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253436).

The following non security issues were fixed:

ACPI: CPPC: Check _CPC validity for only the online CPUs (git-fixes).
ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs (git-fixes).
ACPI: CPPC: Perform fast check switch only for online CPUs (git-fixes).
ACPI: PRM: Skip handlers with NULL handler_address or NULL VA (stable-fixes).
ACPI: SBS: Fix present test in acpi_battery_read() (git-fixes).
ACPI: property: Return present device nodes only on fwnode interface (stable-fixes).
ACPI: scan: Add Intel CVS ACPI HIDs to acpi_ignore_dep_ids (stable-fixes).
ACPICA: Update dsmethod.c to get rid of unused variable warning…

Record: SUSE-SU-2025:4422-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4505-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912).
CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251786).
CVE-2025-21710: tcp: correct handling of extreme memory squeeze (bsc#1237888).
CVE-2025-37916: pds_core: remove write-after-free of client_id (bsc#1243474).
CVE-2025-38359: s390/mm: Fix in_atomic() handling in do_secure_storage_access() (bsc#1247076).
CVE-2025-38361: drm/amd/display: Check dce_hwseq before dereferencing it (bsc#1247079).
CVE-2025-39788: scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE (bsc#1249547).
CVE-2025-39805: net: macb: fix unregister_netdev call order in macb_remove() (bsc#1249982).
CVE-2025-39819: fs/smb: Fix inconsistent refcnt update (bsc#1250176).
CVE-2025-39859: ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog (bsc#1250252).
CVE-2025-39944: octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() (bsc#1251120).
CVE-2025-39980: nexthop: Forbid FDB status change while nexthop is in a group (bsc#1252063).
CVE-2025-40001: scsi: mvsas: Fix use-after-free bugs in mvs_work_queue (bsc#1252303).
CVE-2025-40021: tracing: dynevent: Add a missing lockdown check on dynevent (bsc#1252681).
CVE-2025-40027: net/9p: fix double req put in p9_fd_cancelled (bsc#1252763).
CVE-2025-40030: pinctrl: check the return value of pinmux_ops::get_function_name() (bsc#1252773).
CVE-2025-40038: KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid (bsc#1252817).
CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780).
CVE-2025-40048: uio_hv_generic: Let userspace take care of interrupt mask (bsc#1252862).
CVE-2025-40055: ocfs2: fix double free in user_cluster_connect() (bsc#1252821).
CVE-2025-40059: coresight: Fix incorrect handling for return value of devm_kzalloc (bsc#1252809).
CVE-2025-40064: smc: Fix use-after-free in __pnet_find_base_ndev() (bsc#1252845).
CVE-2025-40070: pps: fix warning in pps_register_cdev when register device fail (bsc#1252836).
CVE-2025-40074: ipv4: start using dst_dev_rcu() (bsc#1252794).
CVE-2025-40075: tcp_metrics: use dst_dev_net_rcu() (bsc#1252795).
CVE-2025-40083: net/sched: sch_qfq: Fix null-deref in agg_dequeue (bsc#1252912).
CVE-2025-40098: ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_get_acpi_mute_state() (bsc#1252917).
CVE-2025-40105: vfs: Don't leak disconnected dentries on umount (bsc#1252928).
CVE-2025-40139: smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set() (bsc#1253409).
CVE-2025-40149: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock() (bsc#1253355).
CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253403).
CVE-2025-40168: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match() (bsc#1253427).
CVE-2025-40169: bpf: Reject negative offsets for ALU ops (bsc#1253416).
CVE-2025-40173: net/ip6_tunnel: Prevent perpetual tunnel growth (bsc#1253421).
CVE-2025-40176: tls: wait for pending async decryptions if tls_strp_msg_hold fails (bsc#1253425).
CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253436).

The following non-security bugs were fixed:

ACPI: CPPC: Check _CPC validity for only the online CPUs (git-fixes).
ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs (git-fixes).
ACPI: CPPC: Perform fast check switch only for online CPUs (git-fixes).
ACPI: PRM: Skip handlers with NULL handler_address or NULL VA (stable-fixes).
ACPI: SBS: Fix present test in acpi_battery_read() (git-fixes).
ACPI: property: Return present device nodes only on fwnode interface (stable-fixes).
ACPI: scan: Add Intel CVS ACPI HIDs to acpi_ignore_dep_ids (stable-fixes).
ACPICA: Update dsmethod.c to get rid of unused variable…

Record: SUSE-SU-2025:4505-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4516-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912).
CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251786).
CVE-2025-21710: tcp: correct handling of extreme memory squeeze (bsc#1237888).
CVE-2025-37916: pds_core: remove write-after-free of client_id (bsc#1243474).
CVE-2025-38359: s390/mm: Fix in_atomic() handling in do_secure_storage_access() (bsc#1247076).
CVE-2025-39788: scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE (bsc#1249547).
CVE-2025-39805: net: macb: fix unregister_netdev call order in macb_remove() (bsc#1249982).
CVE-2025-39819: fs/smb: Fix inconsistent refcnt update (bsc#1250176).
CVE-2025-39822: io_uring/kbuf: fix signedness in this_len calculation (bsc#1250034).
CVE-2025-39859: ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog (bsc#1250252).
CVE-2025-39944: octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() (bsc#1251120).
CVE-2025-39980: nexthop: Forbid FDB status change while nexthop is in a group (bsc#1252063).
CVE-2025-40001: scsi: mvsas: Fix use-after-free bugs in mvs_work_queue (bsc#1252303).
CVE-2025-40021: tracing: dynevent: Add a missing lockdown check on dynevent (bsc#1252681).
CVE-2025-40027: net/9p: fix double req put in p9_fd_cancelled (bsc#1252763).
CVE-2025-40030: pinctrl: check the return value of pinmux_ops::get_function_name() (bsc#1252773).
CVE-2025-40038: KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid (bsc#1252817).
CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780).
CVE-2025-40047: io_uring/waitid: always prune wait queue entry in io_waitid_wait() (bsc#1252790).
CVE-2025-40048: uio_hv_generic: Let userspace take care of interrupt mask (bsc#1252862).
CVE-2025-40055: ocfs2: fix double free in user_cluster_connect() (bsc#1252821).
CVE-2025-40059: coresight: Fix incorrect handling for return value of devm_kzalloc (bsc#1252809).
CVE-2025-40064: smc: Fix use-after-free in __pnet_find_base_ndev() (bsc#1252845).
CVE-2025-40070: pps: fix warning in pps_register_cdev when register device fail (bsc#1252836).
CVE-2025-40074: ipv4: start using dst_dev_rcu() (bsc#1252794).
CVE-2025-40075: tcp_metrics: use dst_dev_net_rcu() (bsc#1252795).
CVE-2025-40080: nbd: restrict sockets to TCP and UDP (bsc#1252774).
CVE-2025-40083: net/sched: sch_qfq: Fix null-deref in agg_dequeue (bsc#1252912).
CVE-2025-40086: drm/xe: Don't allow evicting of BOs in same VM in array of VM binds (bsc#1252923).
CVE-2025-40098: ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_get_acpi_mute_state() (bsc#1252917).
CVE-2025-40105: vfs: Don't leak disconnected dentries on umount (bsc#1252928).
CVE-2025-40139: smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set() (bsc#1253409).
CVE-2025-40149: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock() (bsc#1253355).
CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253403).
CVE-2025-40168: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match() (bsc#1253427).
CVE-2025-40169: bpf: Reject negative offsets for ALU ops (bsc#1253416).
CVE-2025-40173: net/ip6_tunnel: Prevent perpetual tunnel growth (bsc#1253421).
CVE-2025-40176: tls: wait for pending async decryptions if tls_strp_msg_hold fails (bsc#1253425).
CVE-2025-40185: ice: ice_adapter: release xa entry on adapter allocation failure (bsc#1253394).
CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253436).
CVE-2025-40206: Add missing bugzilla reference to net fix (bsc#1250237 bsc#1253393).

The following non-security bugs were fixed:

ACPI: CPPC: Check _CPC validity for only the online CPUs (git-fixes).
ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs…

Record: SUSE-SU-2025:4516-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4517-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912).
CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251786).
CVE-2025-21710: tcp: correct handling of extreme memory squeeze (bsc#1237888).
CVE-2025-37916: pds_core: remove write-after-free of client_id (bsc#1243474).
CVE-2025-38359: s390/mm: Fix in_atomic() handling in do_secure_storage_access() (bsc#1247076).
CVE-2025-38360: drm/amd/display: Add more checks for DSC / HUBP ONO guarantees (bsc#1247078).
CVE-2025-38361: drm/amd/display: Check dce_hwseq before dereferencing it (bsc#1247079).
CVE-2025-39788: scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE (bsc#1249547).
CVE-2025-39805: net: macb: fix unregister_netdev call order in macb_remove() (bsc#1249982).
CVE-2025-39819: fs/smb: Fix inconsistent refcnt update (bsc#1250176).
CVE-2025-39822: io_uring/kbuf: fix signedness in this_len calculation (bsc#1250034).
CVE-2025-39859: ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog (bsc#1250252).
CVE-2025-39944: octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() (bsc#1251120).
CVE-2025-39980: nexthop: Forbid FDB status change while nexthop is in a group (bsc#1252063).
CVE-2025-40001: scsi: mvsas: Fix use-after-free bugs in mvs_work_queue (bsc#1252303).
CVE-2025-40021: tracing: dynevent: Add a missing lockdown check on dynevent (bsc#1252681).
CVE-2025-40027: net/9p: fix double req put in p9_fd_cancelled (bsc#1252763).
CVE-2025-40030: pinctrl: check the return value of pinmux_ops::get_function_name() (bsc#1252773).
CVE-2025-40038: KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid (bsc#1252817).
CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780).
CVE-2025-40047: io_uring/waitid: always prune wait queue entry in io_waitid_wait() (bsc#1252790).
CVE-2025-40048: uio_hv_generic: Let userspace take care of interrupt mask (bsc#1252862).
CVE-2025-40055: ocfs2: fix double free in user_cluster_connect() (bsc#1252821).
CVE-2025-40059: coresight: Fix incorrect handling for return value of devm_kzalloc (bsc#1252809).
CVE-2025-40064: smc: Fix use-after-free in __pnet_find_base_ndev() (bsc#1252845).
CVE-2025-40070: pps: fix warning in pps_register_cdev when register device fail (bsc#1252836).
CVE-2025-40074: ipv4: start using dst_dev_rcu() (bsc#1252794).
CVE-2025-40075: tcp_metrics: use dst_dev_net_rcu() (bsc#1252795).
CVE-2025-40083: net/sched: sch_qfq: Fix null-deref in agg_dequeue (bsc#1252912).
CVE-2025-40086: drm/xe: Don't allow evicting of BOs in same VM in array of VM binds (bsc#1252923).
CVE-2025-40098: ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_get_acpi_mute_state() (bsc#1252917).
CVE-2025-40105: vfs: Don't leak disconnected dentries on umount (bsc#1252928).
CVE-2025-40139: smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set() (bsc#1253409).
CVE-2025-40149: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock() (bsc#1253355).
CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253403).
CVE-2025-40168: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match() (bsc#1253427).
CVE-2025-40169: bpf: Reject negative offsets for ALU ops (bsc#1253416).
CVE-2025-40173: net/ip6_tunnel: Prevent perpetual tunnel growth (bsc#1253421).
CVE-2025-40176: tls: wait for pending async decryptions if tls_strp_msg_hold fails (bsc#1253425).
CVE-2025-40185: ice: ice_adapter: release xa entry on adapter allocation failure (bsc#1253394).
CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253436).

The following non-security bugs were fixed:

ACPI: CPPC: Check _CPC validity for only the online CPUs (git-fixes).
ACPI: CPPC: Limit perf ctrs in PCC…

Record: SUSE-SU-2025:4517-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4521-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912).
CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251786).
CVE-2025-21710: tcp: correct handling of extreme memory squeeze (bsc#1237888).
CVE-2025-37916: pds_core: remove write-after-free of client_id (bsc#1243474).
CVE-2025-38359: s390/mm: Fix in_atomic() handling in do_secure_storage_access() (bsc#1247076).
CVE-2025-38361: drm/amd/display: Check dce_hwseq before dereferencing it (bsc#1247079).
CVE-2025-39788: scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE (bsc#1249547).
CVE-2025-39805: net: macb: fix unregister_netdev call order in macb_remove() (bsc#1249982).
CVE-2025-39819: fs/smb: Fix inconsistent refcnt update (bsc#1250176).
CVE-2025-39859: ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog (bsc#1250252).
CVE-2025-39944: octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() (bsc#1251120).
CVE-2025-39980: nexthop: Forbid FDB status change while nexthop is in a group (bsc#1252063).
CVE-2025-40001: scsi: mvsas: Fix use-after-free bugs in mvs_work_queue (bsc#1252303).
CVE-2025-40021: tracing: dynevent: Add a missing lockdown check on dynevent (bsc#1252681).
CVE-2025-40027: net/9p: fix double req put in p9_fd_cancelled (bsc#1252763).
CVE-2025-40030: pinctrl: check the return value of pinmux_ops::get_function_name() (bsc#1252773).
CVE-2025-40038: KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid (bsc#1252817).
CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780).
CVE-2025-40048: uio_hv_generic: Let userspace take care of interrupt mask (bsc#1252862).
CVE-2025-40055: ocfs2: fix double free in user_cluster_connect() (bsc#1252821).
CVE-2025-40059: coresight: Fix incorrect handling for return value of devm_kzalloc (bsc#1252809).
CVE-2025-40064: smc: Fix use-after-free in __pnet_find_base_ndev() (bsc#1252845).
CVE-2025-40070: pps: fix warning in pps_register_cdev when register device fail (bsc#1252836).
CVE-2025-40074: ipv4: start using dst_dev_rcu() (bsc#1252794).
CVE-2025-40075: tcp_metrics: use dst_dev_net_rcu() (bsc#1252795).
CVE-2025-40083: net/sched: sch_qfq: Fix null-deref in agg_dequeue (bsc#1252912).
CVE-2025-40098: ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_get_acpi_mute_state() (bsc#1252917).
CVE-2025-40105: vfs: Don't leak disconnected dentries on umount (bsc#1252928).
CVE-2025-40139: smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set() (bsc#1253409).
CVE-2025-40149: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock() (bsc#1253355).
CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253403).
CVE-2025-40168: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match() (bsc#1253427).
CVE-2025-40169: bpf: Reject negative offsets for ALU ops (bsc#1253416).
CVE-2025-40173: net/ip6_tunnel: Prevent perpetual tunnel growth (bsc#1253421).
CVE-2025-40176: tls: wait for pending async decryptions if tls_strp_msg_hold fails (bsc#1253425).
CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253436).

The following non-security bugs were fixed:

ACPI: CPPC: Check _CPC validity for only the online CPUs (git-fixes).
ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs (git-fixes).
ACPI: CPPC: Perform fast check switch only for online CPUs (git-fixes).
ACPI: PRM: Skip handlers with NULL handler_address or NULL VA (stable-fixes).
ACPI: SBS: Fix present test in acpi_battery_read() (git-fixes).
ACPI: property: Return present device nodes only on fwnode interface (stable-fixes).
ACPI: scan: Add Intel CVS ACPI HIDs to acpi_ignore_dep_ids (stable-fixes).
ACPICA: Update dsmethod.c to get rid of unused variable…

Record: SUSE-SU-2025:4521-1
Updated: 2026-11-02

OSVSUSE-SU-2026:0316-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2022-49604,CVE-2025-40074: ip: Fix data-races around sysctl_ip_fwd_use_pmtu (bsc#1238414 bsc#1252794).
CVE-2022-50527: drm/amdgpu: Fix size validation for non-exclusive domains (v4) (bsc#1251738).
CVE-2022-50625: serial: amba-pl011: avoid SBSA UART accessing DMACR register (bsc#1254559).
CVE-2022-50630: mm: hugetlb: fix UAF in hugetlb_handle_userfault (bsc#1254785).
CVE-2022-50656: nfc: pn533: Clear nfc_target before being used (bsc#1254745).
CVE-2022-50678: wifi: brcmfmac: fix invalid address access when enabling SCAN log level (bsc#1254902).
CVE-2022-50700: wifi: ath10k: Delay the unmapping of the buffer (bsc#1255576).
CVE-2023-53454: HID: multitouch: Correct devm device reference for hidinput input_dev name (bsc#1250759).
CVE-2023-53718: ring-buffer: Do not swap cpu_buffer during resize process (bsc#1252564).
CVE-2023-53748: media: mediatek: vcodec: Fix potential array out-of-bounds in decoder queue_setup (bsc#1254907).
CVE-2023-53765: dm cache: free background tracker's queued work in btracker_destroy (bsc#1254912).
CVE-2023-53781: smc: Fix use-after-free in tcp_write_timer_handler() (bsc#1254751).
CVE-2023-53788: ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set() (bsc#1254917).
CVE-2023-53819: amdgpu: validate offset_in_bo of drm_amdgpu_gem_va (bsc#1254712).
CVE-2023-53850: iavf: use internal state to free traffic IRQs (bsc#1254677).
CVE-2023-54120: Bluetooth: Fix race condition in hidp_session_thread (bsc#1256133).
CVE-2023-54214: Bluetooth: L2CAP: Fix potential user-after-free (bsc#1255954).
CVE-2023-54236: net/net_failover: fix txq exceeding warning (bsc#1255922).
CVE-2023-54286: wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace (bsc#1255803).
CVE-2023-54300: wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx (bsc#1255790).
CVE-2025-38085: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (bsc#1245431 bsc#1245499).
CVE-2025-38336: ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330 (bsc#1246370).
CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
CVE-2025-40035: Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak (bsc#1252866).
CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
CVE-2025-40064: smc: Fix use-after-free in __pnet_find_base_ndev() (bsc#1252845).
CVE-2025-40075: tcp_metrics: use dst_dev_net_rcu() (bsc#1252795).
CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
CVE-2025-40110: drm/vmwgfx: Fix a null-ptr access in the cursor snooper (bsc#1253275).
CVE-2025-40123: bpf: Enforce expected_attach_type for tailcall compatibility (bsc#1253365).
CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
CVE-2025-40139: smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set() (bsc#1253409).
CVE-2025-40149: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock() (bsc#1253355).
CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
CVE-2025-40164: usbnet: Fix using smp_processor_id() in preemptible code warnings (bsc#1253407).
CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
CVE-2025-40168: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match() (bsc#1253427).
CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
CVE-2025-40198: ext4: avoid potential buffer over-read in parse_apply_sb_mount_options() (bsc#1253453). -…

Record: SUSE-SU-2026:0316-1
Updated: 2026-11-02

OSVSUSE-SU-2026:20012-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912).
CVE-2025-37916: pds_core: remove write-after-free of client_id (bsc#1243474).
CVE-2025-38084: mm/hugetlb: unshare page tables during VMA split, not before (bsc#1245431 bsc#1245498).
CVE-2025-38085: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (bsc#1245431 bsc#1245499).
CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
CVE-2025-39805: net: macb: fix unregister_netdev call order in macb_remove() (bsc#1249982).
CVE-2025-39819: fs/smb: Fix inconsistent refcnt update (bsc#1250176).
CVE-2025-39822: io_uring/kbuf: fix signedness in this_len calculation (bsc#1250034).
CVE-2025-39831: fbnic: Move phylink resume out of service_task and into open/close (bsc#1249977).
CVE-2025-39859: ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog (bsc#1250252).
CVE-2025-39897: net: xilinx: axienet: Add error handling for RX metadata pointer retrieval (bsc#1250746).
CVE-2025-39917: bpf: Fix out-of-bounds dynptr write in bpf_crypto_crypt (bsc#1250723).
CVE-2025-39944: octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() (bsc#1251120).
CVE-2025-39961: iommu/amd/pgtbl: Fix possible race while increase page table level (bsc#1251817).
CVE-2025-39980: nexthop: Forbid FDB status change while nexthop is in a group (bsc#1252063).
CVE-2025-39990: bpf: Check the helper function is valid in get_helper_proto (bsc#1252054).
CVE-2025-40001: scsi: mvsas: Fix use-after-free bugs in mvs_work_queue (bsc#1252303).
CVE-2025-40003: net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work (bsc#1252301).
CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
CVE-2025-40021: tracing: dynevent: Add a missing lockdown check on dynevent (bsc#1252681).
CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
CVE-2025-40027: net/9p: fix double req put in p9_fd_cancelled (bsc#1252763).
CVE-2025-40031: tee: fix register_shm_helper() (bsc#1252779).
CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
CVE-2025-40038: KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid (bsc#1252817).
CVE-2025-40047: io_uring/waitid: always prune wait queue entry in io_waitid_wait() (bsc#1252790).
CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
CVE-2025-40055: ocfs2: fix double free in user_cluster_connect() (bsc#1252821).
CVE-2025-40059: coresight: Fix incorrect handling for return value of devm_kzalloc (bsc#1252809).
CVE-2025-40064: smc: Fix use-after-free in __pnet_find_base_ndev() (bsc#1252845).
CVE-2025-40070: pps: fix warning in pps_register_cdev when register device fail (bsc#1252836).
CVE-2025-40074: tcp: convert to dev_net_rcu() (bsc#1252794).
CVE-2025-40075: tcp_metrics: use dst_dev_net_rcu() (bsc#1252795).
CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
CVE-2025-40083: net/sched: sch_qfq: Fix null-deref in agg_dequeue (bsc#1252912).
CVE-2025-40086: drm/xe: Don't allow evicting of BOs in same VM in array of VM binds (bsc#1252923).
CVE-2025-40098: ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_get_acpi_mute_state() (bsc#1252917).
CVE-2025-40101: btrfs: fix memory leaks when rejecting a non SINGLE data profile without an RST (bsc#1252901).
CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
CVE-2025-40105: vfs: Don't leak disconnected dentries on umount (bsc#1252928).
CVE-2025-40133: mptcp: Call dst_release() in mptcp_active_enable() (bsc#1253328).
CVE-2025-40134: dm: fix NULL pointer dereference in…

Record: SUSE-SU-2026:20012-1
Updated: 2026-11-02

OSVSUSE-SU-2026:20015-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912).
CVE-2025-37916: pds_core: remove write-after-free of client_id (bsc#1243474).
CVE-2025-38084: mm/hugetlb: unshare page tables during VMA split, not before (bsc#1245431 bsc#1245498).
CVE-2025-38085: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (bsc#1245431 bsc#1245499).
CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
CVE-2025-39805: net: macb: fix unregister_netdev call order in macb_remove() (bsc#1249982).
CVE-2025-39819: fs/smb: Fix inconsistent refcnt update (bsc#1250176).
CVE-2025-39822: io_uring/kbuf: fix signedness in this_len calculation (bsc#1250034).
CVE-2025-39831: fbnic: Move phylink resume out of service_task and into open/close (bsc#1249977).
CVE-2025-39859: ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog (bsc#1250252).
CVE-2025-39897: net: xilinx: axienet: Add error handling for RX metadata pointer retrieval (bsc#1250746).
CVE-2025-39917: bpf: Fix out-of-bounds dynptr write in bpf_crypto_crypt (bsc#1250723).
CVE-2025-39944: octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() (bsc#1251120).
CVE-2025-39961: iommu/amd/pgtbl: Fix possible race while increase page table level (bsc#1251817).
CVE-2025-39980: nexthop: Forbid FDB status change while nexthop is in a group (bsc#1252063).
CVE-2025-39990: bpf: Check the helper function is valid in get_helper_proto (bsc#1252054).
CVE-2025-40001: scsi: mvsas: Fix use-after-free bugs in mvs_work_queue (bsc#1252303).
CVE-2025-40003: net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work (bsc#1252301).
CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
CVE-2025-40021: tracing: dynevent: Add a missing lockdown check on dynevent (bsc#1252681).
CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
CVE-2025-40027: net/9p: fix double req put in p9_fd_cancelled (bsc#1252763).
CVE-2025-40031: tee: fix register_shm_helper() (bsc#1252779).
CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
CVE-2025-40038: KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid (bsc#1252817).
CVE-2025-40047: io_uring/waitid: always prune wait queue entry in io_waitid_wait() (bsc#1252790).
CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
CVE-2025-40055: ocfs2: fix double free in user_cluster_connect() (bsc#1252821).
CVE-2025-40059: coresight: Fix incorrect handling for return value of devm_kzalloc (bsc#1252809).
CVE-2025-40064: smc: Fix use-after-free in __pnet_find_base_ndev() (bsc#1252845).
CVE-2025-40070: pps: fix warning in pps_register_cdev when register device fail (bsc#1252836).
CVE-2025-40074: tcp: convert to dev_net_rcu() (bsc#1252794).
CVE-2025-40075: tcp_metrics: use dst_dev_net_rcu() (bsc#1252795).
CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
CVE-2025-40083: net/sched: sch_qfq: Fix null-deref in agg_dequeue (bsc#1252912).
CVE-2025-40086: drm/xe: Don't allow evicting of BOs in same VM in array of VM binds (bsc#1252923).
CVE-2025-40098: ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_get_acpi_mute_state() (bsc#1252917).
CVE-2025-40101: btrfs: fix memory leaks when rejecting a non SINGLE data profile without an RST (bsc#1252901).
CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
CVE-2025-40105: vfs: Don't leak disconnected dentries on umount (bsc#1252928).
CVE-2025-40133: mptcp: Call dst_release() in mptcp_active_enable() (bsc#1253328).
CVE-2025-40134: dm: fix NULL pointer dereference in…

Record: SUSE-SU-2026:20015-1
Updated: 2026-11-02

OSVSUSE-SU-2026:20021-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912).
CVE-2025-37916: pds_core: remove write-after-free of client_id (bsc#1243474).
CVE-2025-38084: mm/hugetlb: unshare page tables during VMA split, not before (bsc#1245431 bsc#1245498).
CVE-2025-38085: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (bsc#1245431 bsc#1245499).
CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
CVE-2025-39805: net: macb: fix unregister_netdev call order in macb_remove() (bsc#1249982).
CVE-2025-39819: fs/smb: Fix inconsistent refcnt update (bsc#1250176).
CVE-2025-39822: io_uring/kbuf: fix signedness in this_len calculation (bsc#1250034).
CVE-2025-39831: fbnic: Move phylink resume out of service_task and into open/close (bsc#1249977).
CVE-2025-39859: ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog (bsc#1250252).
CVE-2025-39897: net: xilinx: axienet: Add error handling for RX metadata pointer retrieval (bsc#1250746).
CVE-2025-39917: bpf: Fix out-of-bounds dynptr write in bpf_crypto_crypt (bsc#1250723).
CVE-2025-39944: octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() (bsc#1251120).
CVE-2025-39961: iommu/amd/pgtbl: Fix possible race while increase page table level (bsc#1251817).
CVE-2025-39980: nexthop: Forbid FDB status change while nexthop is in a group (bsc#1252063).
CVE-2025-39990: bpf: Check the helper function is valid in get_helper_proto (bsc#1252054).
CVE-2025-40001: scsi: mvsas: Fix use-after-free bugs in mvs_work_queue (bsc#1252303).
CVE-2025-40003: net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work (bsc#1252301).
CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
CVE-2025-40021: tracing: dynevent: Add a missing lockdown check on dynevent (bsc#1252681).
CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
CVE-2025-40027: net/9p: fix double req put in p9_fd_cancelled (bsc#1252763).
CVE-2025-40031: tee: fix register_shm_helper() (bsc#1252779).
CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
CVE-2025-40038: KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid (bsc#1252817).
CVE-2025-40047: io_uring/waitid: always prune wait queue entry in io_waitid_wait() (bsc#1252790).
CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
CVE-2025-40055: ocfs2: fix double free in user_cluster_connect() (bsc#1252821).
CVE-2025-40059: coresight: Fix incorrect handling for return value of devm_kzalloc (bsc#1252809).
CVE-2025-40064: smc: Fix use-after-free in __pnet_find_base_ndev() (bsc#1252845).
CVE-2025-40070: pps: fix warning in pps_register_cdev when register device fail (bsc#1252836).
CVE-2025-40074: tcp: convert to dev_net_rcu() (bsc#1252794).
CVE-2025-40075: tcp_metrics: use dst_dev_net_rcu() (bsc#1252795).
CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
CVE-2025-40083: net/sched: sch_qfq: Fix null-deref in agg_dequeue (bsc#1252912).
CVE-2025-40086: drm/xe: Don't allow evicting of BOs in same VM in array of VM binds (bsc#1252923).
CVE-2025-40098: ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_get_acpi_mute_state() (bsc#1252917).
CVE-2025-40101: btrfs: fix memory leaks when rejecting a non SINGLE data profile without an RST (bsc#1252901).
CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
CVE-2025-40105: vfs: Don't leak disconnected dentries on umount (bsc#1252928).
CVE-2025-40133: mptcp: Call dst_release() in mptcp_active_enable() (bsc#1253328).
CVE-2025-40134: dm: fix NULL pointer dereference in…

Record: SUSE-SU-2026:20021-1
Updated: 2026-11-02

OSVSUSE-SU-2026:20039-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912).
CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251786).
CVE-2025-21710: tcp: correct handling of extreme memory squeeze (bsc#1237888).
CVE-2025-37916: pds_core: remove write-after-free of client_id (bsc#1243474).
CVE-2025-38359: s390/mm: Fix in_atomic() handling in do_secure_storage_access() (bsc#1247076).
CVE-2025-38361: drm/amd/display: Check dce_hwseq before dereferencing it (bsc#1247079).
CVE-2025-39788: scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE (bsc#1249547).
CVE-2025-39805: net: macb: fix unregister_netdev call order in macb_remove() (bsc#1249982).
CVE-2025-39819: fs/smb: Fix inconsistent refcnt update (bsc#1250176).
CVE-2025-39859: ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog (bsc#1250252).
CVE-2025-39944: octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() (bsc#1251120).
CVE-2025-39980: nexthop: Forbid FDB status change while nexthop is in a group (bsc#1252063).
CVE-2025-40001: scsi: mvsas: Fix use-after-free bugs in mvs_work_queue (bsc#1252303).
CVE-2025-40021: tracing: dynevent: Add a missing lockdown check on dynevent (bsc#1252681).
CVE-2025-40027: net/9p: fix double req put in p9_fd_cancelled (bsc#1252763).
CVE-2025-40030: pinctrl: check the return value of pinmux_ops::get_function_name() (bsc#1252773).
CVE-2025-40038: KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid (bsc#1252817).
CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780).
CVE-2025-40048: uio_hv_generic: Let userspace take care of interrupt mask (bsc#1252862).
CVE-2025-40055: ocfs2: fix double free in user_cluster_connect() (bsc#1252821).
CVE-2025-40059: coresight: Fix incorrect handling for return value of devm_kzalloc (bsc#1252809).
CVE-2025-40064: smc: Fix use-after-free in __pnet_find_base_ndev() (bsc#1252845).
CVE-2025-40070: pps: fix warning in pps_register_cdev when register device fail (bsc#1252836).
CVE-2025-40074: net: dst_cache: annotate data-races around dst_cache->reset_ts (bsc#1252794).
CVE-2025-40075: tcp_metrics: use dst_dev_net_rcu() (bsc#1252795).
CVE-2025-40083: net/sched: sch_qfq: Fix null-deref in agg_dequeue (bsc#1252912).
CVE-2025-40098: ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_get_acpi_mute_state() (bsc#1252917).
CVE-2025-40105: vfs: Don't leak disconnected dentries on umount (bsc#1252928).
CVE-2025-40139: smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set() (bsc#1253409).
CVE-2025-40149: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock() (bsc#1253355).
CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253403).
CVE-2025-40168: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match() (bsc#1253427).
CVE-2025-40169: bpf: Reject negative offsets for ALU ops (bsc#1253416).
CVE-2025-40173: net/ip6_tunnel: Prevent perpetual tunnel growth (bsc#1253421).
CVE-2025-40176: tls: wait for pending async decryptions if tls_strp_msg_hold fails (bsc#1253425).
CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253436).
CVE-2025-40206: Add missing bugzilla reference to net fix (bsc#1250237 bsc#1253393).

The following non-security bugs were fixed:

ACPI: CPPC: Check _CPC validity for only the online CPUs (git-fixes).
ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs (git-fixes).
ACPI: CPPC: Perform fast check switch only for online CPUs (git-fixes).
ACPI: PRM: Skip handlers with NULL handler_address or NULL VA (stable-fixes).
ACPI: SBS: Fix present test in acpi_battery_read() (git-fixes).
ACPI: property: Return present device nodes only on fwnode interface (stable-fixes).
ACPI:…

Record: SUSE-SU-2026:20039-1
Updated: 2026-11-02

OSVSUSE-SU-2026:20059-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912).
CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251786).
CVE-2025-21710: tcp: correct handling of extreme memory squeeze (bsc#1237888).
CVE-2025-37916: pds_core: remove write-after-free of client_id (bsc#1243474).
CVE-2025-38359: s390/mm: Fix in_atomic() handling in do_secure_storage_access() (bsc#1247076).
CVE-2025-38361: drm/amd/display: Check dce_hwseq before dereferencing it (bsc#1247079).
CVE-2025-39788: scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE (bsc#1249547).
CVE-2025-39805: net: macb: fix unregister_netdev call order in macb_remove() (bsc#1249982).
CVE-2025-39819: fs/smb: Fix inconsistent refcnt update (bsc#1250176).
CVE-2025-39859: ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog (bsc#1250252).
CVE-2025-39944: octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() (bsc#1251120).
CVE-2025-39980: nexthop: Forbid FDB status change while nexthop is in a group (bsc#1252063).
CVE-2025-40001: scsi: mvsas: Fix use-after-free bugs in mvs_work_queue (bsc#1252303).
CVE-2025-40021: tracing: dynevent: Add a missing lockdown check on dynevent (bsc#1252681).
CVE-2025-40027: net/9p: fix double req put in p9_fd_cancelled (bsc#1252763).
CVE-2025-40030: pinctrl: check the return value of pinmux_ops::get_function_name() (bsc#1252773).
CVE-2025-40038: KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid (bsc#1252817).
CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780).
CVE-2025-40048: uio_hv_generic: Let userspace take care of interrupt mask (bsc#1252862).
CVE-2025-40055: ocfs2: fix double free in user_cluster_connect() (bsc#1252821).
CVE-2025-40059: coresight: Fix incorrect handling for return value of devm_kzalloc (bsc#1252809).
CVE-2025-40064: smc: Fix use-after-free in __pnet_find_base_ndev() (bsc#1252845).
CVE-2025-40070: pps: fix warning in pps_register_cdev when register device fail (bsc#1252836).
CVE-2025-40074: net: dst_cache: annotate data-races around dst_cache->reset_ts (bsc#1252794).
CVE-2025-40075: tcp_metrics: use dst_dev_net_rcu() (bsc#1252795).
CVE-2025-40083: net/sched: sch_qfq: Fix null-deref in agg_dequeue (bsc#1252912).
CVE-2025-40098: ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_get_acpi_mute_state() (bsc#1252917).
CVE-2025-40105: vfs: Don't leak disconnected dentries on umount (bsc#1252928).
CVE-2025-40139: smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set() (bsc#1253409).
CVE-2025-40149: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock() (bsc#1253355).
CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253403).
CVE-2025-40168: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match() (bsc#1253427).
CVE-2025-40169: bpf: Reject negative offsets for ALU ops (bsc#1253416).
CVE-2025-40173: net/ip6_tunnel: Prevent perpetual tunnel growth (bsc#1253421).
CVE-2025-40176: tls: wait for pending async decryptions if tls_strp_msg_hold fails (bsc#1253425).
CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253436).
CVE-2025-40206: Add missing bugzilla reference to net fix (bsc#1250237 bsc#1253393).

The following non-security bugs were fixed:

ACPI: CPPC: Check _CPC validity for only the online CPUs (git-fixes).
ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs (git-fixes).
ACPI: CPPC: Perform fast check switch only for online CPUs (git-fixes).
ACPI: PRM: Skip handlers with NULL handler_address or NULL VA (stable-fixes).
ACPI: SBS: Fix present test in acpi_battery_read() (git-fixes).
ACPI: property: Return present device nodes only on fwnode interface (stable-fixes).
ACPI:…

Record: SUSE-SU-2026:20059-1
Updated: 2026-11-02

OSVSUSE-SU-2026:20473-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912).
CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251786).
CVE-2025-21710: tcp: correct handling of extreme memory squeeze (bsc#1237888).
CVE-2025-37916: pds_core: remove write-after-free of client_id (bsc#1243474).
CVE-2025-38359: s390/mm: Fix in_atomic() handling in do_secure_storage_access() (bsc#1247076).
CVE-2025-38361: drm/amd/display: Check dce_hwseq before dereferencing it (bsc#1247079).
CVE-2025-39788: scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE (bsc#1249547).
CVE-2025-39805: net: macb: fix unregister_netdev call order in macb_remove() (bsc#1249982).
CVE-2025-39819: fs/smb: Fix inconsistent refcnt update (bsc#1250176).
CVE-2025-39859: ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog (bsc#1250252).
CVE-2025-39944: octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() (bsc#1251120).
CVE-2025-39980: nexthop: Forbid FDB status change while nexthop is in a group (bsc#1252063).
CVE-2025-40001: scsi: mvsas: Fix use-after-free bugs in mvs_work_queue (bsc#1252303).
CVE-2025-40021: tracing: dynevent: Add a missing lockdown check on dynevent (bsc#1252681).
CVE-2025-40027: net/9p: fix double req put in p9_fd_cancelled (bsc#1252763).
CVE-2025-40030: pinctrl: check the return value of pinmux_ops::get_function_name() (bsc#1252773).
CVE-2025-40038: KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid (bsc#1252817).
CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780).
CVE-2025-40048: uio_hv_generic: Let userspace take care of interrupt mask (bsc#1252862).
CVE-2025-40055: ocfs2: fix double free in user_cluster_connect() (bsc#1252821).
CVE-2025-40059: coresight: Fix incorrect handling for return value of devm_kzalloc (bsc#1252809).
CVE-2025-40064: smc: Fix use-after-free in __pnet_find_base_ndev() (bsc#1252845).
CVE-2025-40070: pps: fix warning in pps_register_cdev when register device fail (bsc#1252836).
CVE-2025-40074: ipv4: start using dst_dev_rcu() (bsc#1252794).
CVE-2025-40075: tcp_metrics: use dst_dev_net_rcu() (bsc#1252795).
CVE-2025-40083: net/sched: sch_qfq: Fix null-deref in agg_dequeue (bsc#1252912).
CVE-2025-40098: ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_get_acpi_mute_state() (bsc#1252917).
CVE-2025-40105: vfs: Do not leak disconnected dentries on umount (bsc#1252928).
CVE-2025-40139: smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set() (bsc#1253409).
CVE-2025-40149: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock() (bsc#1253355).
CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253403).
CVE-2025-40168: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match() (bsc#1253427).
CVE-2025-40169: bpf: Reject negative offsets for ALU ops (bsc#1253416).
CVE-2025-40173: net/ip6_tunnel: Prevent perpetual tunnel growth (bsc#1253421).
CVE-2025-40176: tls: wait for pending async decryptions if tls_strp_msg_hold fails (bsc#1253425).
CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253436).
CVE-2025-40206: Add missing bugzilla reference to net fix (bsc#1253393).

The following non-security bugs were fixed:

ACPI: CPPC: Check _CPC validity for only the online CPUs (git-fixes).
ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs (git-fixes).
ACPI: CPPC: Perform fast check switch only for online CPUs (git-fixes).
ACPI: PRM: Skip handlers with NULL handler_address or NULL VA (stable-fixes).
ACPI: SBS: Fix present test in acpi_battery_read() (git-fixes).
ACPI: property: Return present device nodes only on fwnode interface (stable-fixes).
ACPI: scan: Add Intel CVS ACPI HIDs to…

Record: SUSE-SU-2026:20473-1
Updated: 2026-11-02

OSVSUSE-SU-2026:20496-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912).
CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251786).
CVE-2025-21710: tcp: correct handling of extreme memory squeeze (bsc#1237888).
CVE-2025-37916: pds_core: remove write-after-free of client_id (bsc#1243474).
CVE-2025-38359: s390/mm: Fix in_atomic() handling in do_secure_storage_access() (bsc#1247076).
CVE-2025-38361: drm/amd/display: Check dce_hwseq before dereferencing it (bsc#1247079).
CVE-2025-39788: scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE (bsc#1249547).
CVE-2025-39805: net: macb: fix unregister_netdev call order in macb_remove() (bsc#1249982).
CVE-2025-39819: fs/smb: Fix inconsistent refcnt update (bsc#1250176).
CVE-2025-39859: ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog (bsc#1250252).
CVE-2025-39944: octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() (bsc#1251120).
CVE-2025-39980: nexthop: Forbid FDB status change while nexthop is in a group (bsc#1252063).
CVE-2025-40001: scsi: mvsas: Fix use-after-free bugs in mvs_work_queue (bsc#1252303).
CVE-2025-40021: tracing: dynevent: Add a missing lockdown check on dynevent (bsc#1252681).
CVE-2025-40027: net/9p: fix double req put in p9_fd_cancelled (bsc#1252763).
CVE-2025-40030: pinctrl: check the return value of pinmux_ops::get_function_name() (bsc#1252773).
CVE-2025-40038: KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid (bsc#1252817).
CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780).
CVE-2025-40048: uio_hv_generic: Let userspace take care of interrupt mask (bsc#1252862).
CVE-2025-40055: ocfs2: fix double free in user_cluster_connect() (bsc#1252821).
CVE-2025-40059: coresight: Fix incorrect handling for return value of devm_kzalloc (bsc#1252809).
CVE-2025-40064: smc: Fix use-after-free in __pnet_find_base_ndev() (bsc#1252845).
CVE-2025-40070: pps: fix warning in pps_register_cdev when register device fail (bsc#1252836).
CVE-2025-40074: ipv4: start using dst_dev_rcu() (bsc#1252794).
CVE-2025-40075: tcp_metrics: use dst_dev_net_rcu() (bsc#1252795).
CVE-2025-40083: net/sched: sch_qfq: Fix null-deref in agg_dequeue (bsc#1252912).
CVE-2025-40098: ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_get_acpi_mute_state() (bsc#1252917).
CVE-2025-40105: vfs: Do not leak disconnected dentries on umount (bsc#1252928).
CVE-2025-40139: smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set() (bsc#1253409).
CVE-2025-40149: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock() (bsc#1253355).
CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253403).
CVE-2025-40168: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match() (bsc#1253427).
CVE-2025-40169: bpf: Reject negative offsets for ALU ops (bsc#1253416).
CVE-2025-40173: net/ip6_tunnel: Prevent perpetual tunnel growth (bsc#1253421).
CVE-2025-40176: tls: wait for pending async decryptions if tls_strp_msg_hold fails (bsc#1253425).
CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253436).
CVE-2025-40206: Add missing bugzilla reference to net fix (bsc#1253393).

The following non-security bugs were fixed:

ACPI: CPPC: Check _CPC validity for only the online CPUs (git-fixes).
ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs (git-fixes).
ACPI: CPPC: Perform fast check switch only for online CPUs (git-fixes).
ACPI: PRM: Skip handlers with NULL handler_address or NULL VA (stable-fixes).
ACPI: SBS: Fix present test in acpi_battery_read() (git-fixes).
ACPI: property: Return present device nodes only on fwnode interface (stable-fixes).
ACPI: scan: Add Intel CVS ACPI HIDs to…

Record: SUSE-SU-2026:20496-1
Updated: 2026-11-02

OSVSUSE-SU-2026:20562-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912).
CVE-2025-37916: pds_core: remove write-after-free of client_id (bsc#1243474).
CVE-2025-38084: mm/hugetlb: unshare page tables during VMA split, not before (bsc#1245431 bsc#1245498).
CVE-2025-38085: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (bsc#1245431 bsc#1245499).
CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
CVE-2025-39805: net: macb: fix unregister_netdev call order in macb_remove() (bsc#1249982).
CVE-2025-39819: fs/smb: Fix inconsistent refcnt update (bsc#1250176).
CVE-2025-39822: io_uring/kbuf: fix signedness in this_len calculation (bsc#1250034).
CVE-2025-39831: fbnic: Move phylink resume out of service_task and into open/close (bsc#1249977).
CVE-2025-39859: ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog (bsc#1250252).
CVE-2025-39897: net: xilinx: axienet: Add error handling for RX metadata pointer retrieval (bsc#1250746).
CVE-2025-39917: bpf: Fix out-of-bounds dynptr write in bpf_crypto_crypt (bsc#1250723).
CVE-2025-39944: octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() (bsc#1251120).
CVE-2025-39961: iommu/amd/pgtbl: Fix possible race while increase page table level (bsc#1251817).
CVE-2025-39980: nexthop: Forbid FDB status change while nexthop is in a group (bsc#1252063).
CVE-2025-39990: bpf: Check the helper function is valid in get_helper_proto (bsc#1252054).
CVE-2025-40001: scsi: mvsas: Fix use-after-free bugs in mvs_work_queue (bsc#1252303).
CVE-2025-40003: net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work (bsc#1252301).
CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
CVE-2025-40021: tracing: dynevent: Add a missing lockdown check on dynevent (bsc#1252681).
CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
CVE-2025-40027: net/9p: fix double req put in p9_fd_cancelled (bsc#1252763).
CVE-2025-40031: tee: fix register_shm_helper() (bsc#1252779).
CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
CVE-2025-40038: KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid (bsc#1252817).
CVE-2025-40047: io_uring/waitid: always prune wait queue entry in io_waitid_wait() (bsc#1252790).
CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
CVE-2025-40055: ocfs2: fix double free in user_cluster_connect() (bsc#1252821).
CVE-2025-40059: coresight: Fix incorrect handling for return value of devm_kzalloc (bsc#1252809).
CVE-2025-40064: smc: Fix use-after-free in __pnet_find_base_ndev() (bsc#1252845).
CVE-2025-40070: pps: fix warning in pps_register_cdev when register device fail (bsc#1252836).
CVE-2025-40074: tcp: convert to dev_net_rcu() (bsc#1252794).
CVE-2025-40075: tcp_metrics: use dst_dev_net_rcu() (bsc#1252795).
CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
CVE-2025-40083: net/sched: sch_qfq: Fix null-deref in agg_dequeue (bsc#1252912).
CVE-2025-40086: drm/xe: Don't allow evicting of BOs in same VM in array of VM binds (bsc#1252923).
CVE-2025-40098: ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_get_acpi_mute_state() (bsc#1252917).
CVE-2025-40101: btrfs: fix memory leaks when rejecting a non SINGLE data profile without an RST (bsc#1252901).
CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
CVE-2025-40105: vfs: Don't leak disconnected dentries on umount (bsc#1252928).
CVE-2025-40133: mptcp: Call dst_release() in mptcp_active_enable() (bsc#1253328).
CVE-2025-40134: dm: fix NULL pointer dereference in…

Record: SUSE-SU-2026:20562-1
Updated: 2026-11-02

OSVUSN-8029-1 No score

linux, linux-raspi, linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
Nios II architecture;
PA-RISC architecture;
RISC-V architecture;
S390 architecture;
Sun Sparc architecture;
x86 architecture;
Xtensa architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Drivers core;
Network block device driver;
Bluetooth drivers;
Bus devices;
Hardware random number generator core;
Character device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
Device frequency scaling framework;
ARM SCMI message protocol;
GPIO subsystem;
GPU drivers;
Hardware monitoring drivers;
HW tracing;
InfiniBand drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
ISDN/mISDN subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
Fastrpc Driver;
PCI Endpoint Test driver;
VMware Balloon Driver;
MOST (Media Oriented Systems Transport) drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVME drivers;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
Mellanox platform drivers;
x86 platform drivers;
ARM PM domains;
PPS (Pulse Per Second) driver;
PTP clock framework;
PWM drivers;
Remote Processor subsystem;
SCSI subsystem;
SPI subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Userspace I/O drivers;
Cadence USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
vDPA drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EROFS file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
File system notification infrastructure;
NTFS3 file system;
Proc file system;
Diskquota system;
SMB network file system;
BPF subsystem;
Mellanox drivers;
Memory management;
Virtio network driver;
Bluetooth subsystem;
IP tunnels definitions;
io_uring subsystem;
Kernel crash support code;
Perf events;
Kernel futex primitives;
PID allocator;
Scheduler infrastructure;
Syscalls implementation;
Timer subsystem;
Tracing infrastructure;
9P file system network protocol;
Ethernet bridge;
Networking core;
IPv4 networking;
IPv6 networking;
Multipath TCP;
Netfilter;
NFC subsystem;
Network traffic control;
SCTP protocol;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
TLS protocol;
VMware vSockets driver;
eXpress Data Path;
XFRM subsystem;
Integrity Measurement Architecture(IMA) framework;
ALSA framework;
HD-audio driver;
AMD SoC Alsa drivers;
WCD audio codecs;
Intel ASoC drivers;
USB sound devices;
KVM subsystem; (CVE-2025-40001, CVE-2025-40002, CVE-2025-40003, CVE-2025-40004, CVE-2025-40029, CVE-2025-40030, CVE-2025-40031, CVE-2025-40032, CVE-2025-40033, CVE-2025-40034, CVE-2025-40035, CVE-2025-40036, CVE-2025-40037, CVE-2025-40038, CVE-2025-40039, CVE-2025-40040, CVE-2025-40042, CVE-2025-40043, CVE-2025-40044, CVE-2025-40045, CVE-2025-40046, CVE-2025-40047, CVE-2025-40048, CVE-2025-40049, CVE-2025-40050, CVE-2025-40051, CVE-2025-40052, CVE-2025-40053, CVE-2025-40054, CVE-2025-40055, CVE-2025-40056, CVE-2025-40057,…

Record: USN-8029-1
Updated: 2026-11-03

OSVUSN-8029-2 No score

linux-aws, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
Nios II architecture;
PA-RISC architecture;
RISC-V architecture;
S390 architecture;
Sun Sparc architecture;
x86 architecture;
Xtensa architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Drivers core;
Network block device driver;
Bluetooth drivers;
Bus devices;
Hardware random number generator core;
Character device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
Device frequency scaling framework;
ARM SCMI message protocol;
GPIO subsystem;
GPU drivers;
Hardware monitoring drivers;
HW tracing;
InfiniBand drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
ISDN/mISDN subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
Fastrpc Driver;
PCI Endpoint Test driver;
VMware Balloon Driver;
MOST (Media Oriented Systems Transport) drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVME drivers;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
Mellanox platform drivers;
x86 platform drivers;
ARM PM domains;
PPS (Pulse Per Second) driver;
PTP clock framework;
PWM drivers;
Remote Processor subsystem;
SCSI subsystem;
SPI subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Userspace I/O drivers;
Cadence USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
vDPA drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EROFS file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
File system notification infrastructure;
NTFS3 file system;
Proc file system;
Diskquota system;
SMB network file system;
BPF subsystem;
Mellanox drivers;
Memory management;
Virtio network driver;
Bluetooth subsystem;
IP tunnels definitions;
io_uring subsystem;
Kernel crash support code;
Perf events;
Kernel futex primitives;
PID allocator;
Scheduler infrastructure;
Syscalls implementation;
Timer subsystem;
Tracing infrastructure;
9P file system network protocol;
Ethernet bridge;
Networking core;
IPv4 networking;
IPv6 networking;
Multipath TCP;
Netfilter;
NFC subsystem;
Network traffic control;
SCTP protocol;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
TLS protocol;
VMware vSockets driver;
eXpress Data Path;
XFRM subsystem;
Integrity Measurement Architecture(IMA) framework;
ALSA framework;
HD-audio driver;
AMD SoC Alsa drivers;
WCD audio codecs;
Intel ASoC drivers;
USB sound devices;
KVM subsystem; (CVE-2025-40001, CVE-2025-40002, CVE-2025-40003, CVE-2025-40004, CVE-2025-40029, CVE-2025-40030, CVE-2025-40031, CVE-2025-40032, CVE-2025-40033, CVE-2025-40034, CVE-2025-40035, CVE-2025-40036, CVE-2025-40037, CVE-2025-40038, CVE-2025-40039, CVE-2025-40040, CVE-2025-40042, CVE-2025-40043, CVE-2025-40044, CVE-2025-40045, CVE-2025-40046, CVE-2025-40047, CVE-2025-40048, CVE-2025-40049, CVE-2025-40050, CVE-2025-40051, CVE-2025-40052, CVE-2025-40053, CVE-2025-40054, CVE-2025-40055, CVE-2025-40056, CVE-2025-40057,…

Record: USN-8029-2
Updated: 2026-11-03

Affected products

linux

Affected packages

Affected packages
Package	Affected	Fixed
`kernel-abi-stablelists` AlmaLinux:10	before 6.12.0-124.38.1.el10_1	6.12.0-124.38.1.el10_1
`kernel-doc` AlmaLinux:10	before 6.12.0-124.38.1.el10_1	6.12.0-124.38.1.el10_1
`kernel` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-64k` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-64k-core` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-64k-debug` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-64k-debug-core` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-64k-debug-devel` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-64k-debug-devel-matched` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-64k-debug-modules` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-64k-debug-modules-core` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-64k-debug-modules-extra` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-64k-devel` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-64k-devel-matched` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-64k-modules` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-64k-modules-core` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-64k-modules-extra` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-abi-stablelists` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-core` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-cross-headers` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-debug` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-debug-core` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-debug-devel` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-debug-devel-matched` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-debug-modules` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-debug-modules-core` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-debug-modules-extra` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-debug-uki-virt` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-devel` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-devel-matched` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-doc` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-headers` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-modules` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-modules-core` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-modules-extra` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-rt` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-rt-64k` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-rt-64k-core` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-rt-64k-debug` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-rt-64k-debug-core` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-rt-64k-debug-devel` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-rt-64k-debug-modules` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-rt-64k-debug-modules-core` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-rt-64k-debug-modules-extra` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-rt-64k-devel` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-rt-64k-modules` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-rt-64k-modules-core` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-rt-64k-modules-extra` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-rt-core` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-rt-debug` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-rt-debug-core` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-rt-debug-devel` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-rt-debug-modules` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-rt-debug-modules-core` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-rt-debug-modules-extra` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel-rt-devel` AlmaLinux:9	before 5.14.0-611.34.1.el9_7	5.14.0-611.34.1.el9_7
`kernel` Azure Linux:3	before 6.6.157.1-1	6.6.157.1-1
`linux-lts` Alpaquita:23	6.1.182-r0 up to 6.1.189-r0	6.1.189-r0
`linux-lts` Alpaquita:25	6.12.103-r0 up to 6.12.111-r0	6.12.111-r0
`linux-lts` Alpaquita:stream	6.12.92-r1 up to 6.18.35-r1	6.18.35-r1
`linux-buildinfo-5.4.0-243-generic` TuxCare:Ubuntu:20.04	before 5.4.0-243.263+tuxcare.els1	5.4.0-243.263+tuxcare.els1
`linux-buildinfo-5.4.0-243-lowlatency` TuxCare:Ubuntu:20.04	before 5.4.0-243.263+tuxcare.els1	5.4.0-243.263+tuxcare.els1
`linux-cloud-tools-5.4.0-243` TuxCare:Ubuntu:20.04	before 5.4.0-243.263+tuxcare.els1	5.4.0-243.263+tuxcare.els1
`linux-cloud-tools-5.4.0-243-generic` TuxCare:Ubuntu:20.04	before 5.4.0-243.263+tuxcare.els1	5.4.0-243.263+tuxcare.els1
`linux-cloud-tools-5.4.0-243-lowlatency` TuxCare:Ubuntu:20.04	before 5.4.0-243.263+tuxcare.els1	5.4.0-243.263+tuxcare.els1
`linux-cloud-tools-common` TuxCare:Ubuntu:20.04	before 5.4.0-243.263+tuxcare.els1	5.4.0-243.263+tuxcare.els1
`linux-doc` TuxCare:Ubuntu:20.04	before 5.4.0-243.263+tuxcare.els1	5.4.0-243.263+tuxcare.els1
`linux-headers-5.4.0-243` TuxCare:Ubuntu:20.04	before 5.4.0-243.263+tuxcare.els1	5.4.0-243.263+tuxcare.els1
`linux-headers-5.4.0-243-generic` TuxCare:Ubuntu:20.04	before 5.4.0-243.263+tuxcare.els1	5.4.0-243.263+tuxcare.els1
`linux-headers-5.4.0-243-lowlatency` TuxCare:Ubuntu:20.04	before 5.4.0-243.263+tuxcare.els1	5.4.0-243.263+tuxcare.els1
`linux-image-unsigned-5.4.0-243-generic` TuxCare:Ubuntu:20.04	before 5.4.0-243.263+tuxcare.els1	5.4.0-243.263+tuxcare.els1
`linux-image-unsigned-5.4.0-243-lowlatency` TuxCare:Ubuntu:20.04	before 5.4.0-243.263+tuxcare.els1	5.4.0-243.263+tuxcare.els1
`linux-libc-dev` TuxCare:Ubuntu:20.04	before 5.4.0-243.263+tuxcare.els1	5.4.0-243.263+tuxcare.els1
`linux-modules-5.4.0-243-generic` TuxCare:Ubuntu:20.04	before 5.4.0-243.263+tuxcare.els1	5.4.0-243.263+tuxcare.els1
`linux-modules-5.4.0-243-lowlatency` TuxCare:Ubuntu:20.04	before 5.4.0-243.263+tuxcare.els1	5.4.0-243.263+tuxcare.els1
`linux-modules-extra-5.4.0-243-generic` TuxCare:Ubuntu:20.04	before 5.4.0-243.263+tuxcare.els1	5.4.0-243.263+tuxcare.els1
`linux-source-5.4.0` TuxCare:Ubuntu:20.04	before 5.4.0-243.263+tuxcare.els1	5.4.0-243.263+tuxcare.els1
`linux-tools-5.4.0-243` TuxCare:Ubuntu:20.04	before 5.4.0-243.263+tuxcare.els1	5.4.0-243.263+tuxcare.els1
`linux-tools-5.4.0-243-generic` TuxCare:Ubuntu:20.04	before 5.4.0-243.263+tuxcare.els1	5.4.0-243.263+tuxcare.els1
`linux-tools-5.4.0-243-lowlatency` TuxCare:Ubuntu:20.04	before 5.4.0-243.263+tuxcare.els1	5.4.0-243.263+tuxcare.els1
`linux-tools-common` TuxCare:Ubuntu:20.04	before 5.4.0-243.263+tuxcare.els1	5.4.0-243.263+tuxcare.els1
`linux-tools-host` TuxCare:Ubuntu:20.04	before 5.4.0-243.263+tuxcare.els1	5.4.0-243.263+tuxcare.els1
`Kernel` Linux	4.19.0 up to 6.1.187, 6.2.0 up to 6.6.156, 6.7.0 up to 6.12.108, 6.13.0 up to 6.17.3	6.1.1876.6.1566.12.1086.17.3
`linux` Debian:12	before 6.1.187-1, plus listed versions 6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1 Show 45 moreShow less 6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.170-16.1.170-26.1.170-36.1.172-16.1.174-16.1.176-16.1.177-16.1.180-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-1	6.1.187-1
`linux` Debian:13	before 6.12.111-1, plus listed versions 6.12.100-16.12.101-16.12.105-16.12.107-16.12.38-1 Show 30 moreShow less 6.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-1	6.12.111-1
`linux` Debian:14	before 6.17.6-1, plus listed versions 6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1 Show 45 moreShow less 6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1	6.17.6-1
`linux-6.12` Debian:12	before 6.12.111-1~deb12u1, plus listed versions 6.12.100-1~deb12u16.12.101-1~deb12u16.12.107-1~deb12u1	6.12.111-1~deb12u1
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-64k-debug-devel` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-64k-debug-devel-matched` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-64k-debuginfo` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-64k-devel` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-64k-devel-matched` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-debug-debuginfo` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-debug-devel` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-debug-devel-matched` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-debuginfo` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-devel` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-devel-matched` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-doc` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-rt-64k-debug-debuginfo` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-rt-64k-debuginfo` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-rt-debuginfo` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-tools-debuginfo` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-zfcpdump-devel-matched` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`libperf-debuginfo` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`perf` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`perf-debuginfo` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`python3-perf` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`python3-perf-debuginfo` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`rtla` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`rv` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-64k` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-64k-core` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-64k-debug` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-64k-debug-core` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-64k-debug-modules` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-64k-debug-modules-core` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-64k-debug-modules-extra` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-64k-modules` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-64k-modules-core` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-64k-modules-extra` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-abi-stablelists` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-core` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-debug` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-debug-core` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-debug-modules` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-debug-modules-core` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-debug-modules-extra` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-debug-uki-virt` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-modules` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-modules-core` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-modules-extra` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-modules-extra-matched` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel-tools` Red Hat:enterprise_linux:10.1	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel` Rocky Linux:10	before 0:6.12.0-124.38.1.el10_1	0:6.12.0-124.38.1.el10_1
`kernel` Rocky Linux:9	before 0:5.14.0-611.34.1.el9_7	0:5.14.0-611.34.1.el9_7
`kernel` Rocky Linux:9	before 0:5.14.0-687.44.1.el9_8	0:5.14.0-687.44.1.el9_8
`linux` Root:Debian:11	before 5.10.262-1.aikido.113	5.10.262-1.aikido.1135.10.262-1.aikido.114
`rootio-linux` Root:Debian:11	before 5.10.262-1.aikido.113	5.10.262-1.aikido.1135.10.262-1.aikido.114
`linux` Root:Debian:12	before 6.1.190-1.aikido.167	6.1.190-1.aikido.167
`rootio-linux` Root:Debian:12	before 6.1.190-1.aikido.167	6.1.190-1.aikido.167
`linux` Root:Debian:13	before 6.12.115-2.aikido.164	6.12.115-2.aikido.164
`rootio-linux` Root:Debian:13	before 6.12.115-2.aikido.164	6.12.115-2.aikido.164
`linux` Root:Ubuntu:22.04	before 5.15.0-202.212.aikido.118	5.15.0-202.212.aikido.118
`rootio-linux` Root:Ubuntu:22.04	before 5.15.0-202.212.aikido.118	5.15.0-202.212.aikido.118
`linux` Root:Ubuntu:24.04	before 6.8.0-147.147.aikido.90	6.8.0-147.147.aikido.90
`rootio-linux` Root:Ubuntu:24.04	before 6.8.0-147.147.aikido.90	6.8.0-147.147.aikido.90
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 6.4.0-150700.53.25.1	6.4.0-150700.53.25.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 6.4.0-150700.53.25.1	6.4.0-150700.53.25.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 6.4.0-150700.53.25.1.150700.17.17.1	6.4.0-150700.53.25.1.150700.17.17.1
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 6.4.0-150700.53.25.1	6.4.0-150700.53.25.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 6.4.0-150700.53.25.1	6.4.0-150700.53.25.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP7	before 6.4.0-150700.53.25.2	6.4.0-150700.53.25.2
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP7	before 6.4.0-150700.53.25.1	6.4.0-150700.53.25.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP7	before 6.4.0-150700.53.25.1	6.4.0-150700.53.25.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP7	before 6.4.0-150700.53.25.1	6.4.0-150700.53.25.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP7	before 6.4.0-150700.53.25.1	6.4.0-150700.53.25.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP7	before 6.4.0-150700.53.25.1	6.4.0-150700.53.25.1
`kernel-livepatch-SLE15-SP7_Update_7` SUSE:Linux Enterprise Live Patching 15 SP7	before 1-150700.15.3.1	1-150700.15.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP7	before 6.4.0-150700.53.25.1	6.4.0-150700.53.25.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP7	before 6.4.0-150700.53.25.1	6.4.0-150700.53.25.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP6	before 6.4.0-150600.23.81.3	6.4.0-150600.23.81.3
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP6	before 6.4.0-150600.23.81.3	6.4.0-150600.23.81.3
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP6	before 6.4.0-150600.23.81.3.150600.12.36.3	6.4.0-150600.23.81.3.150600.12.36.3
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP6	before 6.4.0-150600.23.81.2	6.4.0-150600.23.81.2
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP6	before 6.4.0-150600.23.81.3	6.4.0-150600.23.81.3
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP6	before 6.4.0-150600.23.81.1	6.4.0-150600.23.81.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP6	before 6.4.0-150600.23.81.3	6.4.0-150600.23.81.3
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP6	before 6.4.0-150600.23.81.2	6.4.0-150600.23.81.2
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP6	before 6.4.0-150600.23.81.1	6.4.0-150600.23.81.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP6	before 6.4.0-150600.23.81.3	6.4.0-150600.23.81.3
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP6	before 6.4.0-150600.23.81.3	6.4.0-150600.23.81.3
`kernel-livepatch-SLE15-SP6_Update_18` SUSE:Linux Enterprise Live Patching 15 SP6	before 1-150600.13.3.3	1-150600.13.3.3
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP6	before 6.4.0-150600.23.81.3	6.4.0-150600.23.81.3
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP6	before 6.4.0-150600.23.81.3	6.4.0-150600.23.81.3
`dtb-aarch64` openSUSE:Leap 15.6	before 6.4.0-150600.23.81.1	6.4.0-150600.23.81.1
`kernel-64kb` openSUSE:Leap 15.6	before 6.4.0-150600.23.81.3	6.4.0-150600.23.81.3
`kernel-debug` openSUSE:Leap 15.6	before 6.4.0-150600.23.81.3	6.4.0-150600.23.81.3
`kernel-default` openSUSE:Leap 15.6	before 6.4.0-150600.23.81.3	6.4.0-150600.23.81.3
`kernel-default-base` openSUSE:Leap 15.6	before 6.4.0-150600.23.81.3.150600.12.36.3	6.4.0-150600.23.81.3.150600.12.36.3
`kernel-docs` openSUSE:Leap 15.6	before 6.4.0-150600.23.81.1	6.4.0-150600.23.81.1
`kernel-kvmsmall` openSUSE:Leap 15.6	before 6.4.0-150600.23.81.3	6.4.0-150600.23.81.3
`kernel-obs-build` openSUSE:Leap 15.6	before 6.4.0-150600.23.81.3	6.4.0-150600.23.81.3
`kernel-obs-qa` openSUSE:Leap 15.6	before 6.4.0-150600.23.81.1	6.4.0-150600.23.81.1
`kernel-source` openSUSE:Leap 15.6	before 6.4.0-150600.23.81.2	6.4.0-150600.23.81.2
`kernel-syms` openSUSE:Leap 15.6	before 6.4.0-150600.23.81.1	6.4.0-150600.23.81.1
`kernel-zfcpdump` openSUSE:Leap 15.6	before 6.4.0-150600.23.81.3	6.4.0-150600.23.81.3
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6	before 6.4.0-150600.8.58.1	6.4.0-150600.8.58.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6	before 6.4.0-150600.8.58.1	6.4.0-150600.8.58.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6	before 6.4.0-150600.8.58.1	6.4.0-150600.8.58.1
`kernel-azure` openSUSE:Leap 15.6	before 6.4.0-150600.8.58.1	6.4.0-150600.8.58.1
`kernel-source-azure` openSUSE:Leap 15.6	before 6.4.0-150600.8.58.1	6.4.0-150600.8.58.1
`kernel-syms-azure` openSUSE:Leap 15.6	before 6.4.0-150600.8.58.1	6.4.0-150600.8.58.1
`kernel-livepatch-SLE15-SP7-RT_Update_7` SUSE:Linux Enterprise Live Patching 15 SP7	before 1-150700.1.3.1	1-150700.1.3.1
`kernel-rt` SUSE:Real Time Module 15 SP7	before 6.4.0-150700.7.25.1	6.4.0-150700.7.25.1
`kernel-source-rt` SUSE:Real Time Module 15 SP7	before 6.4.0-150700.7.25.1	6.4.0-150700.7.25.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP7	before 6.4.0-150700.7.25.1	6.4.0-150700.7.25.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7	before 6.4.0-150700.20.21.1	6.4.0-150700.20.21.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7	before 6.4.0-150700.20.21.1	6.4.0-150700.20.21.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7	before 6.4.0-150700.20.21.1	6.4.0-150700.20.21.1
`kernel-livepatch-SLE15-SP6-RT_Update_18` SUSE:Linux Enterprise Live Patching 15 SP6	before 1-150600.1.3.1	1-150600.1.3.1
`kernel-rt` SUSE:Real Time Module 15 SP6	before 6.4.0-150600.10.61.1	6.4.0-150600.10.61.1
`kernel-rt_debug` SUSE:Real Time Module 15 SP6	before 6.4.0-150600.10.61.1	6.4.0-150600.10.61.1
`kernel-source-rt` SUSE:Real Time Module 15 SP6	before 6.4.0-150600.10.61.1	6.4.0-150600.10.61.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP6	before 6.4.0-150600.10.61.1	6.4.0-150600.10.61.1
`kernel-rt` openSUSE:Leap 15.6	before 6.4.0-150600.10.61.1	6.4.0-150600.10.61.1
`kernel-rt_debug` openSUSE:Leap 15.6	before 6.4.0-150600.10.61.1	6.4.0-150600.10.61.1
`kernel-source-rt` openSUSE:Leap 15.6	before 6.4.0-150600.10.61.1	6.4.0-150600.10.61.1
`kernel-syms-rt` openSUSE:Leap 15.6	before 6.4.0-150600.10.61.1	6.4.0-150600.10.61.1
`kernel-default` SUSE:Linux Enterprise Live Patching 12 SP5	before 4.12.14-122.290.1	4.12.14-122.290.1
`kgraft-patch-SLE12-SP5_Update_76` SUSE:Linux Enterprise Live Patching 12 SP5	before 1-8.7.1	1-8.7.1
`kernel-default` SUSE:Linux Enterprise Server 12 SP5-LTSS	before 4.12.14-122.290.1	4.12.14-122.290.1
`kernel-source` SUSE:Linux Enterprise Server 12 SP5-LTSS	before 4.12.14-122.290.1	4.12.14-122.290.1
`kernel-syms` SUSE:Linux Enterprise Server 12 SP5-LTSS	before 4.12.14-122.290.1	4.12.14-122.290.1
`kernel-default` SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5	before 4.12.14-122.290.1	4.12.14-122.290.1
`kernel-source` SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5	before 4.12.14-122.290.1	4.12.14-122.290.1
`kernel-syms` SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5	before 4.12.14-122.290.1	4.12.14-122.290.1
`kernel-64kb` SUSE:Linux Micro 6.2	before 6.12.0-160000.8.1	6.12.0-160000.8.1
`kernel-default` SUSE:Linux Micro 6.2	before 6.12.0-160000.8.1	6.12.0-160000.8.1
`kernel-default-base` SUSE:Linux Micro 6.2	before 6.12.0-160000.8.1.160000.2.5	6.12.0-160000.8.1.160000.2.5
`kernel-rt` SUSE:Linux Micro 6.2	before 6.12.0-160000.8.1	6.12.0-160000.8.1
`kernel-source` SUSE:Linux Micro 6.2	before 6.12.0-160000.8.1	6.12.0-160000.8.1
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-aws-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2	None known
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1 Show 45 moreShow less 5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1	None known
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gcp-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2	None known
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2 Show 45 moreShow less 5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1	None known
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-ibm-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1 Show 45 moreShow less 5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-oracle-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1	None known
`linux-raspi-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1 Show 45 moreShow less 5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1	None known
`linux` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25 Show 45 moreShow less 5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110	None known
`linux-aws` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5 Show 45 moreShow less 5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78	None known
`linux-aws-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-aws-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less 5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1	None known
`linux-aws-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1 Show 45 moreShow less 5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1	None known
`linux-aws-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1	None known
`linux-azure` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8 Show 45 moreShow less 5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87	None known
`linux-azure-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less 5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2	None known
`linux-azure-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less 5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1	None known
`linux-azure-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1 Show 45 moreShow less 5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1	None known
`linux-azure-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1	None known
`linux-azure-fde` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less 5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1	None known
`linux-azure-fde-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-1019.24~20.04.1.15.15.0-1020.25~20.04.1.15.15.0-1021.26~20.04.1.15.15.0-1029.36~20.04.1.15.15.0-1030.37~20.04.1.1 Show 45 moreShow less 5.15.0-1031.38~20.04.1.15.15.0-1033.40~20.04.1.15.15.0-1034.41~20.04.1.25.15.0-1035.42~20.04.1.15.15.0-1036.43~20.04.1.15.15.0-1037.44~20.04.1.15.15.0-1038.45~20.04.1.15.15.0-1039.46~20.04.1.15.15.0-1040.47~20.04.1.15.15.0-1041.48~20.04.1.15.15.0-1042.49~20.04.1.15.15.0-1043.50~20.04.1.15.15.0-1046.53~20.04.1.15.15.0-1047.54~20.04.1.15.15.0-1049.56~20.04.1.15.15.0-1050.57~20.04.1.15.15.0-1051.59~20.04.1.15.15.0-1052.60~20.04.1.15.15.0-1053.61~20.04.1.15.15.0-1054.62~20.04.1.15.15.0-1056.64~20.04.1.15.15.0-1057.65~20.04.1.15.15.0-1058.66~20.04.2.15.15.0-1059.67~20.04.1.15.15.0-1060.69~20.04.1.15.15.0-1061.70~20.04.1.15.15.0-1063.72~20.04.1.15.15.0-1064.73~20.04.1.15.15.0-1065.74~20.04.1.15.15.0-1067.76~20.04.1.15.15.0-1068.77~20.04.1.15.15.0-1070.79~20.04.1.15.15.0-1071.80~20.04.1.15.15.0-1072.81~20.04.1.15.15.0-1073.82~20.04.1.15.15.0-1074.83~20.04.1.15.15.0-1076.85~20.04.1.15.15.0-1078.87~20.04.1.15.15.0-1081.90~20.04.1.15.15.0-1082.91~20.04.1.15.15.0-1086.95~20.04.1.15.15.0-1087.96~20.04.1.15.15.0-1088.97~20.04.1.15.15.0-1089.98~20.04.1.15.15.0-1091.100~20.04.1.1	None known
`linux-bluefield` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.4.0-1007.105.4.0-1011.145.4.0-1012.155.4.0-1013.165.4.0-1016.19 Show 45 moreShow less 5.4.0-1019.225.4.0-1020.235.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1030.335.4.0-1032.355.4.0-1035.385.4.0-1036.395.4.0-1040.445.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1049.555.4.0-1050.565.4.0-1054.605.4.0-1058.645.4.0-1059.655.4.0-1060.665.4.0-1062.685.4.0-1064.705.4.0-1065.715.4.0-1066.725.4.0-1068.745.4.0-1070.765.4.0-1071.775.4.0-1072.785.4.0-1073.795.4.0-1074.805.4.0-1075.815.4.0-1076.825.4.0-1077.835.4.0-1078.845.4.0-1079.855.4.0-1080.875.4.0-1081.885.4.0-1082.895.4.0-1083.905.4.0-1084.915.4.0-1085.92	None known
`linux-gcp` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7 Show 45 moreShow less 5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1033.355.4.0-1034.375.4.0-1036.395.4.0-1037.405.4.0-1038.415.4.0-1040.435.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1044.475.4.0-1046.495.4.0-1049.535.4.0-1051.555.4.0-1052.565.4.0-1053.575.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1060.645.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1065.695.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1072.775.4.0-1073.785.4.0-1075.80	None known
`linux-gcp-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less 5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3	None known
`linux-gcp-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less 5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1	None known
`linux-gcp-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2 Show 45 moreShow less 5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.15.15.0-1065.73~20.04.15.15.0-1066.74~20.04.15.15.0-1067.75~20.04.15.15.0-1068.76~20.04.15.15.0-1069.77~20.04.15.15.0-1070.78~20.04.15.15.0-1071.79~20.04.15.15.0-1072.80~20.04.15.15.0-1073.81~20.04.15.15.0-1074.83~20.04.1	None known
`linux-gcp-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41	None known
`linux-gke` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less 5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111	None known
`linux-gke-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less 5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1	None known
`linux-gkeop` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less 5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77	None known
`linux-gkeop-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 40 moreShow less 5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1	None known
`linux-hwe-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less 5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1	None known
`linux-hwe-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less 5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1	None known
`linux-hwe-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 45 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1	None known
`linux-hwe-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less 5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1	None known
`linux-ibm` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.4.0-1003.45.4.0-1004.55.4.0-1005.65.4.0-1006.75.4.0-1007.8 Show 45 moreShow less 5.4.0-1008.95.4.0-1010.115.4.0-1012.135.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1017.195.4.0-1018.205.4.0-1019.215.4.0-1020.225.4.0-1021.235.4.0-1023.255.4.0-1026.295.4.0-1028.325.4.0-1029.335.4.0-1031.355.4.0-1032.365.4.0-1033.375.4.0-1034.385.4.0-1036.415.4.0-1037.425.4.0-1040.455.4.0-1041.465.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1048.535.4.0-1049.545.4.0-1050.555.4.0-1051.565.4.0-1052.575.4.0-1053.585.4.0-1054.595.4.0-1056.615.4.0-1057.625.4.0-1058.635.4.0-1059.645.4.0-1060.655.4.0-1061.665.4.0-1063.685.4.0-1064.695.4.0-1065.705.4.0-1066.71	None known
`linux-ibm-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1 Show 45 moreShow less 5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.15.15.0-1057.60~20.04.15.15.0-1058.61~20.04.15.15.0-1059.62~20.04.15.15.0-1060.63~20.04.15.15.0-1061.64~20.04.15.15.0-1062.65~20.04.15.15.0-1063.66~20.04.15.15.0-1064.67~20.04.15.15.0-1065.68~20.04.15.15.0-1066.69~20.04.15.15.0-1067.70~20.04.15.15.0-1068.71~20.04.15.15.0-1069.72~20.04.15.15.0-1074.77~20.04.15.15.0-1075.78~20.04.15.15.0-1076.79~20.04.15.15.0-1078.81~20.04.15.15.0-1079.82~20.04.15.15.0-1080.83~20.04.15.15.0-1081.84~20.04.15.15.0-1083.86~20.04.15.15.0-1085.88~20.04.15.15.0-1086.89~20.04.15.15.0-1087.90~20.04.15.15.0-1089.92~20.04.15.15.0-1090.93~20.04.15.15.0-1091.94~20.04.15.15.0-1092.95~20.04.15.15.0-1093.96~20.04.15.15.0-1094.97~20.04.1	None known
`linux-intel-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19	None known
`linux-intel-iotg-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-1003.5~20.04.15.15.0-1008.11~20.04.15.15.0-1010.14~20.04.15.15.0-1015.20~20.04.25.15.0-1016.21~20.04.1 Show 45 moreShow less 5.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1021.26~20.04.15.15.0-1023.28~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1030.35~20.04.15.15.0-1031.36~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1040.46~20.04.15.15.0-1043.49~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1060.66~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.25.15.0-1074.80~20.04.15.15.0-1077.83~20.04.15.15.0-1078.84~20.04.15.15.0-1079.85~20.04.15.15.0-1083.89~20.04.15.15.0-1084.90~20.04.15.15.0-1085.91~20.04.15.15.0-1086.92~20.04.1	None known
`linux-iot` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.4.0-1001.35.4.0-1004.65.4.0-1005.75.4.0-1006.85.4.0-1009.11 Show 45 moreShow less 5.4.0-1010.125.4.0-1011.135.4.0-1012.145.4.0-1013.155.4.0-1014.165.4.0-1017.185.4.0-1018.195.4.0-1019.205.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1035.365.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1041.425.4.0-1042.435.4.0-1043.445.4.0-1044.455.4.0-1045.465.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1060.635.4.0-1061.645.4.0-1062.65	None known
`kernel-source` openSUSE:Tumbleweed	before 6.17.7-1.1	6.17.7-1.1
`dtb-aarch64` openSUSE:Leap 16.0	before 6.12.0-160000.8.1	6.12.0-160000.8.1
`kernel-64kb` openSUSE:Leap 16.0	before 6.12.0-160000.8.1	6.12.0-160000.8.1
`kernel-default` openSUSE:Leap 16.0	before 6.12.0-160000.8.1	6.12.0-160000.8.1
`kernel-default-base` openSUSE:Leap 16.0	before 6.12.0-160000.8.1.160000.2.5	6.12.0-160000.8.1.160000.2.5
`kernel-docs` openSUSE:Leap 16.0	before 6.12.0-160000.8.1	6.12.0-160000.8.1
`kernel-kvmsmall` openSUSE:Leap 16.0	before 6.12.0-160000.8.1	6.12.0-160000.8.1
`kernel-obs-build` openSUSE:Leap 16.0	before 6.12.0-160000.8.1	6.12.0-160000.8.1
`kernel-obs-qa` openSUSE:Leap 16.0	before 6.12.0-160000.8.1	6.12.0-160000.8.1
`kernel-rt` openSUSE:Leap 16.0	before 6.12.0-160000.8.1	6.12.0-160000.8.1
`kernel-source` openSUSE:Leap 16.0	before 6.12.0-160000.8.1	6.12.0-160000.8.1
`kernel-syms` openSUSE:Leap 16.0	before 6.12.0-160000.8.1	6.12.0-160000.8.1
`kernel-zfcpdump` openSUSE:Leap 16.0	before 6.12.0-160000.8.1	6.12.0-160000.8.1
`kernel-source-longterm` openSUSE:Tumbleweed	before 6.18.16-1.1	6.18.16-1.1

History

History
Recorded	Changed	Sources
Nov 3, 2026	facts	OSV
Nov 3, 2026	affected	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-40064 is a high vulnerability (CVSS 7.8) in Linux, published October 28, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.15%, the 4th percentile. Fixed in kernel-abi-stablelists 6.12.0-124.38.1.el10_1.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 1,194 package rows, 1,049 versions, 2,002 references and the rest of 19 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 4 source records.