CVE-2025-40237

fs/notify: call exportfs_encode_fid with s_umount

5.7 MediumFix available

In the Linux kernel, the following vulnerability has been resolved:

fs/notify: call exportfs_encode_fid with s_umount

Calling intotify_show_fdinfo() on fd watching an overlayfs inode, while the overlayfs is being unmounted, can lead to dereferencing NULL ptr.

This issue was found by syzkaller.

Race Condition Diagram:

Thread 1 Thread 2

generic_shutdown_super() shrink_dcache_for_umount sb->s_root = NULL

                |
                |             vfs_read()
                |              inotify_fdinfo()
                |               * inode get from mark *
                |               show_mark_fhandle(m, inode)
                |                exportfs_encode_fid(inode, ..)
                |                 ovl_encode_fh(inode, ..)
                |                  ovl_check_encode_origin(inode)
                |                   * deref i_sb->s_root *
                |
                |
                v

fsnotify_sb_delete(sb)

Which then leads to:

[ 32.133461] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP DEBUG_PAGEALLOC KASAN NOPTI [ 32.134438] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 32.135032] CPU: 1 UID: 0 PID: 4468 Comm: systemd-coredum Not tainted 6.17.0-rc6 #22 PREEMPT(none)

[ 32.143353] Call Trace: [ 32.143732] ovl_encode_fh+0xd5/0x170 [ 32.144031] exportfs_encode_inode_fh+0x12f/0x300 [ 32.144425] show_mark_fhandle+0xbe/0x1f0 [ 32.145805] inotify_fdinfo+0x226/0x2d0 [ 32.146442] inotify_show_fdinfo+0x1c5/0x350 [ 32.147168] seq_show+0x530/0x6f0 [ 32.147449] seq_read_iter+0x503/0x12a0 [ 32.148419] seq_read+0x31f/0x410 [ 32.150714] vfs_read+0x1f0/0x9e0 [ 32.152297] ksys_read+0x125/0x240

IOW ovl_check_encode_origin derefs inode->i_sb->s_root, after it was set to NULL in the unmount path.

Fix it by protecting calling exportfs_encode_fid() from show_mark_fhandle() with s_umount lock.

This form of fix was suggested by Amir in 1.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

0.20%Up 0.2 points since Dec 5, 2025

What each source reports

OSV Score usedUBUNTU-CVE-2025-40237 5.7

In the Linux kernel, the following vulnerability has been resolved: fs/notify: call exportfs_encode_fid with s_umount Calling intotify_show_fdinfo() on fd watching an overlayfs inode, while the overlayfs is being unmounted, can lead to dereferencing NULL ptr. This issue was found by syzkaller. Race Condition Diagram: Thread 1 Thread 2 -------- -------- generic_shutdown_super() shrink_dcache_for_umount sb->s_root = NULL | | vfs_read() | inotify_fdinfo() | * inode get from mark * | show_mark_fhandle(m, inode) | exportfs_encode_fid(inode, ..) | ovl_encode_fh(inode, ..) | ovl_check_encode_origin(inode) | * deref i_sb->s_root * | | v fsnotify_sb_delete(sb) Which then leads to: [ 32.133461] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP DEBUG_PAGEALLOC KASAN NOPTI [ 32.134438] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 32.135032] CPU: 1 UID: 0 PID: 4468 Comm: systemd-coredum Not tainted 6.17.0-rc6 #22 PREEMPT(none) <snip registers, unreliable trace> [ 32.143353] Call Trace: [ 32.143732] ovl_encode_fh+0xd5/0x170 [ 32.144031] exportfs_encode_inode_fh+0x12f/0x300 [ 32.144425] show_mark_fhandle+0xbe/0x1f0 [ 32.145805] inotify_fdinfo+0x226/0x2d0 [ 32.146442] inotify_show_fdinfo+0x1c5/0x350 [ 32.147168] seq_show+0x530/0x6f0 [ 32.147449] seq_read_iter+0x503/0x12a0 [ 32.148419] seq_read+0x31f/0x410 [ 32.150714] vfs_read+0x1f0/0x9e0 [ 32.152297] ksys_read+0x125/0x240 IOW ovl_check_encode_origin derefs inode->i_sb->s_root, after it was set to NULL in the unmount path. Fix it by protecting calling exportfs_encode_fid() from show_mark_fhandle() with s_umount lock. This form of fix was suggested by Amir in [1]. [1]: https://lore.kernel.org/all/CAOQ4uxhbDwhb+2Brs1UdkoF0a3NSdBAOQPNfEHjahrgoKJpLEw@mail.gmail.com/

Record: UBUNTU-CVE-2025-40237
CVSS 4.0: 5.7 MediumCVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Updated: 2026-11-02

CVE List No score

fs/notify: call exportfs_encode_fid with s_umount

In the Linux kernel, the following vulnerability has been resolved:

fs/notify: call exportfs_encode_fid with s_umount

Calling intotify_show_fdinfo() on fd watching an overlayfs inode, while the overlayfs is being unmounted, can lead to dereferencing NULL ptr.

This issue was found by syzkaller.

Race Condition Diagram:

Thread 1 Thread 2

generic_shutdown_super() shrink_dcache_for_umount sb->s_root = NULL

                |
                |             vfs_read()
                |              inotify_fdinfo()
                |               * inode get from mark *
                |               show_mark_fhandle(m, inode)
                |                exportfs_encode_fid(inode, ..)
                |                 ovl_encode_fh(inode, ..)
                |                  ovl_check_encode_origin(inode)
                |                   * deref i_sb->s_root *
                |
                |
                v

fsnotify_sb_delete(sb)

Which then leads to:

IOW ovl_check_encode_origin derefs inode->i_sb->s_root, after it was set to NULL in the unmount path.

Fix it by protecting calling exportfs_encode_fid() from show_mark_fhandle() with s_umount lock.

This form of fix was suggested by Amir in 1.

Record: CVE-2025-40237
Updated: 2026-11-02

EUVDEUVD-2025-201222 No score

In the Linux kernel, the following vulnerability has been resolved:

fs/notify: call exportfs_encode_fid with s_umount

Calling intotify_show_fdinfo() on fd watching an overlayfs inode, while the overlayfs is being unmounted, can lead to dereferencing NULL ptr.

This issue was found by syzkaller.

Race Condition Diagram:

Thread 1 Thread 2

generic_shutdown_super() shrink_dcache_for_umount sb->s_root = NULL

                |
                |             vfs_read()
                |              inotify_fdinfo()
                |               * inode get from mark *
                |               show_mark_fhandle(m, inode)
                |                exportfs_encode_fid(inode, ..)
                |                 ovl_encode_fh(inode, ..)
                |                  ovl_check_encode_origin(inode)
                |                   * deref i_sb->s_root *
                |
                |
                v

fsnotify_sb_delete(sb)

Which then leads to:

IOW ovl_check_encode_origin derefs inode->i_sb->s_root, after it was set to NULL in the unmount path.

Fix it by protecting calling exportfs_encode_fid() from show_mark_fhandle() with s_umount lock.

This form of fix was suggested by Amir in 1.

Record: EUVD-2025-201222
Updated: 2026-11-02

GitHub AdvisoriesGHSA-rg97-jhp7-4449 No score

In the Linux kernel, the following vulnerability has been resolved: fs/notify: call...

In the Linux kernel, the following vulnerability has been resolved:

fs/notify: call exportfs_encode_fid with s_umount

Calling intotify_show_fdinfo() on fd watching an overlayfs inode, while the overlayfs is being unmounted, can lead to dereferencing NULL ptr.

This issue was found by syzkaller.

Race Condition Diagram:

Thread 1 Thread 2

generic_shutdown_super() shrink_dcache_for_umount sb->s_root = NULL

                |
                |             vfs_read()
                |              inotify_fdinfo()
                |               * inode get from mark *
                |               show_mark_fhandle(m, inode)
                |                exportfs_encode_fid(inode, ..)
                |                 ovl_encode_fh(inode, ..)
                |                  ovl_check_encode_origin(inode)
                |                   * deref i_sb->s_root *
                |
                |
                v

fsnotify_sb_delete(sb)

Which then leads to:

IOW ovl_check_encode_origin derefs inode->i_sb->s_root, after it was set to NULL in the unmount path.

Fix it by protecting calling exportfs_encode_fid() from show_mark_fhandle() with s_umount lock.

This form of fix was suggested by Amir in 1.

Record: GHSA-rg97-jhp7-4449
Updated: 2026-11-02

NVD No score

In the Linux kernel, the following vulnerability has been resolved:

fs/notify: call exportfs_encode_fid with s_umount

Calling intotify_show_fdinfo() on fd watching an overlayfs inode, while the overlayfs is being unmounted, can lead to dereferencing NULL ptr.

This issue was found by syzkaller.

Race Condition Diagram:

Thread 1 Thread 2

generic_shutdown_super() shrink_dcache_for_umount sb->s_root = NULL

                |
                |             vfs_read()
                |              inotify_fdinfo()
                |               * inode get from mark *
                |               show_mark_fhandle(m, inode)
                |                exportfs_encode_fid(inode, ..)
                |                 ovl_encode_fh(inode, ..)
                |                  ovl_check_encode_origin(inode)
                |                   * deref i_sb->s_root *
                |
                |
                v

fsnotify_sb_delete(sb)

Which then leads to:

IOW ovl_check_encode_origin derefs inode->i_sb->s_root, after it was set to NULL in the unmount path.

Fix it by protecting calling exportfs_encode_fid() from show_mark_fhandle() with s_umount lock.

This form of fix was suggested by Amir in 1.

Record: CVE-2025-40237
Updated: 2026-11-02

OSVOESA-2026-1759 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

iommu/s390: Implement blocking domain

This fixes a crash when surprise hot-unplugging a PCI device. This crash happens because during hot-unplug __iommu_group_set_domain_nofail() attaching the default domain fails when the platform no longer recognizes the device as it has already been removed and we end up with a NULL domain pointer and UAF. This is exactly the case referred to in the second comment in __iommu_device_set_domain() and just as stated there if we can instead attach the blocking domain the UAF is prevented as this can handle the already removed device. Implement the blocking domain to use this handling. With this change, the crash is fixed but we still hit a warning attempting to change DMA ownership on a blocked device.(CVE-2024-53232)

In the Linux kernel, the following vulnerability has been resolved:

iommu: Fix two issues in iommu_copy_struct_from_user()

In the review for iommu_copy_struct_to_user() helper, Matt pointed out that a NULL pointer should be rejected prior to dereferencing it: https://lore.kernel.org/all/(CVE-2025-37900)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: Avoid race in open_cached_dir with lease breaks

A pre-existing valid cfid returned from find_or_create_cached_dir might race with a lease break, meaning open_cached_dir doesn't consider it valid, and thinks it's newly-constructed. This leaks a dentry reference if the allocation occurs before the queued lease break work runs.

Avoid the race by extending holding the cfid_list_lock across find_or_create_cached_dir and when the result is checked.(CVE-2025-37954)

In the Linux kernel, the following vulnerability has been resolved:

net_sched: prio: fix a race in prio_tune()

Gerrard Tai reported a race condition in PRIO, whenever SFQ perturb timer fires at the wrong time.

The race is as follows:

This can be abused to underflow a parent's qlen.

Calling qdisc_purge_queue() instead of qdisc_tree_flush_backlog() should fix the race, because all packets will be purged from the qdisc before releasing the lock.(CVE-2025-38083)

In the Linux kernel, the following vulnerability has been resolved:

IB/mlx5: Fix potential deadlock in MR deregistration

The issue arises when kzalloc() is invoked while holding umem_mutex or any other lock acquired under umem_mutex. This is problematic because kzalloc() can trigger fs_reclaim_aqcuire(), which may, in turn, invoke mmu_notifier_invalidate_range_start(). This function can lead to mlx5_ib_invalidate_range(), which attempts to acquire umem_mutex again, resulting in a deadlock.

The problematic flow: CPU0 | CPU1 ---------------------------------------|------------------------------------------------ mlx5_ib_dereg_mr() | → revoke_mr() | → mutex_lock(&umem_odp->umem_mutex) | | mlx5_mkey_cache_init() | → mutex_lock(&dev->cache.rb_lock) | → mlx5r_cache_create_ent_locked() | → kzalloc(GFP_KERNEL) | → fs_reclaim() | → mmu_notifier_invalidate_range_start() | → mlx5_ib_invalidate_range() | → mutex_lock(&umem_odp->umem_mutex) →…

Record: OESA-2026-1759
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 31 moreShow less

OSVOESA-2026-1760 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

iommu/s390: Implement blocking domain

In the Linux kernel, the following vulnerability has been resolved:

iommu: Fix two issues in iommu_copy_struct_from_user()

In the review for iommu_copy_struct_to_user() helper, Matt pointed out that a NULL pointer should be rejected prior to dereferencing it: https://lore.kernel.org/all/(CVE-2025-37900)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: Avoid race in open_cached_dir with lease breaks

Avoid the race by extending holding the cfid_list_lock across find_or_create_cached_dir and when the result is checked.(CVE-2025-37954)

In the Linux kernel, the following vulnerability has been resolved:

net_sched: prio: fix a race in prio_tune()

Gerrard Tai reported a race condition in PRIO, whenever SFQ perturb timer fires at the wrong time.

The race is as follows:

This can be abused to underflow a parent's qlen.

Calling qdisc_purge_queue() instead of qdisc_tree_flush_backlog() should fix the race, because all packets will be purged from the qdisc before releasing the lock.(CVE-2025-38083)

In the Linux kernel, the following vulnerability has been resolved:

IB/mlx5: Fix potential deadlock in MR deregistration

Record: OESA-2026-1760
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2026-1761 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

iommu/s390: Implement blocking domain

In the Linux kernel, the following vulnerability has been resolved:

iommu: Fix two issues in iommu_copy_struct_from_user()

In the review for iommu_copy_struct_to_user() helper, Matt pointed out that a NULL pointer should be rejected prior to dereferencing it: https://lore.kernel.org/all/(CVE-2025-37900)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: Avoid race in open_cached_dir with lease breaks

Avoid the race by extending holding the cfid_list_lock across find_or_create_cached_dir and when the result is checked.(CVE-2025-37954)

In the Linux kernel, the following vulnerability has been resolved:

net_sched: prio: fix a race in prio_tune()

Gerrard Tai reported a race condition in PRIO, whenever SFQ perturb timer fires at the wrong time.

The race is as follows:

This can be abused to underflow a parent's qlen.

Calling qdisc_purge_queue() instead of qdisc_tree_flush_backlog() should fix the race, because all packets will be purged from the qdisc before releasing the lock.(CVE-2025-38083)

In the Linux kernel, the following vulnerability has been resolved:

IB/mlx5: Fix potential deadlock in MR deregistration

Record: OESA-2026-1761
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:45114 7.3

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:45114
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated: 2026-11-02

OSVRHSA-2026:77634 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record: RHSA-2026:77634
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:45114 7.1

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: fs/notify: call exportfs_encode_fid with s_umount (CVE-2025-40237)
kernel: scsi: core: Wake up the error handler when final completions race against each other (CVE-2026-23110)
kernel: rtnetlink: add missing netlink_ns_capable() check for peer netns (CVE-2026-31692)
kernel: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (CVE-2026-46099)
kernel: futex: Drop CLONE_THREAD requirement for private default hash alloc (CVE-2026-52973)
kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059)

Record: RLSA-2026:45114
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVALSA-2026:45114 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: fs/notify: call exportfs_encode_fid with s_umount (CVE-2025-40237)
kernel: scsi: core: Wake up the error handler when final completions race against each other (CVE-2026-23110)
kernel: rtnetlink: add missing netlink_ns_capable() check for peer netns (CVE-2026-31692)
kernel: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (CVE-2026-46099)
kernel: futex: Drop CLONE_THREAD requirement for private default hash alloc (CVE-2026-52973)
kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059)

Record: ALSA-2026:45114
Updated: 2026-11-02

OSVCLSA-2026-1789898700 No score

kernel: Fix of 163 CVEs

drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON() {CVE-2026-68251}
amd/amdkfd: sync all devices to wait all processes being evicted {CVE-2024-36949}
Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted {CVE-2024-36909}
Drivers: hv: vmbus: Track decrypted status in vmbus_gpadl {CVE-2024-36912}
xfs: save ailp before dropping the AIL lock in push callbacks {CVE-2026-31454}
net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak {CVE-2026-43041}
netfilter: nf_conntrack: destroy stale expectfn expectations on unregister {CVE-2026-53349}
cifs: avoid NULL pointer dereference in dbg call {CVE-2025-37844}
fs/notify: call exportfs_encode_fid with s_umount {CVE-2025-40237}
cifs: fix potential oops in cifs_oplock_break {CVE-2023-54258}
pstore/ram: fix buffer overflow in persistent_ram_save_old() {CVE-2026-46253}
Bluetooth: ISO: fix iso_conn related locking and validity issues {CVE-2023-54164}
netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets {CVE-2026-45873}
ext4: always drain queued discard work in ext4_mb_release() {CVE-2026-43065}
ipvs: Defer ip_vs_ftp unregister during netns cleanup {CVE-2025-40018}
Bluetooth: MGMT: Fix memory leak in set_ssp_complete {CVE-2026-23151}
sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto {CVE-2025-40281}
fscache: Use wait_on_bit() to wait for the freeing of relinquished volume {CVE-2023-52982}
libceph: prevent potential out-of-bounds reads in process_message_header() {CVE-2026-43406}
netfilter: nf_tables: reject immediate NF_QUEUE verdict {CVE-2026-43024}
ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() {CVE-2025-68261}
bpf, sockmap: Fix af_unix iter deadlock {CVE-2026-53035}
sctp: stream: fully roll back denied add-stream state {CVE-2026-52929}
netfilter: xt_CT: drop pending enqueued packets on template removal {CVE-2026-23391}
netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() {CVE-2026-23457}
libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() {CVE-2026-43407}
af_unix: read UNIX_DIAG_VFS data under unix_state_lock {CVE-2026-31673}
jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted {CVE-2025-68337}
Bluetooth: Fix NULL pointer deference on eir_get_service_data {CVE-2025-38304}
net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption {CVE-2026-31533}
fsnotify: do not generate ACCESS/MODIFY events on child for special files {CVE-2025-68788}
isofs: validate Rock Ridge CE continuation extent against volume size {CVE-2026-46303}
net: strparser: fix skb_head leak in strp_abort_strp() {CVE-2026-46102}
sctp: fix uninit-value in __sctp_rcv_asconf_lookup() {CVE-2026-53225}
xfs: don't swallow dquot recovery verification errors {CVE-2026-80529}
xfs: dquot recovery does not validate the recovered dquot {CVE-2026-80529}
bpf: tcp: fix double sock release on batch realloc {CVE-2026-64575}
bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch() {CVE-2026-74714}
bpf: tcp: Avoid socket skips and repeats during iteration {CVE-2026-74714}
bpf: tcp: Use bpf_tcp_iter_batch_item for bpf_tcp_iter_state batch items {CVE-2026-74714}
bpf: tcp: Get rid of st_bucket_done {CVE-2026-74714}
bpf: tcp: Make sure iter->batch always contains a full bucket snapshot {CVE-2026-64575}
bpf: tcp: Make mem flags configurable through bpf_iter_tcp_realloc_batch {CVE-2026-74714}
USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343}
NFS: Decrement refcounts if allocating nfs_free_stateid_data fails {CVE-2026-74730}
NFS: Pin the 'struct nfs_server' during a FREE_STATEID call {CVE-2026-74730}
net/atm: fix slab-out-of-bounds read in vcc_setsockopt() {CVE-2026-74689}
net: Make copy_safe_from_sockptr() match documentation {CVE-2026-74689}
net: add copy_safe_from_sockptr() helper {CVE-2026-74689}
xfs: close crash window in attr dabtree…

Record: CLSA-2026-1789898700
Updated: 2026-11-02

OSV No score

fs/notify: call exportfs_encode_fid with s_umount

In the Linux kernel, the following vulnerability has been resolved:

fs/notify: call exportfs_encode_fid with s_umount

Calling intotify_show_fdinfo() on fd watching an overlayfs inode, while the overlayfs is being unmounted, can lead to dereferencing NULL ptr.

This issue was found by syzkaller.

Race Condition Diagram:

Thread 1 Thread 2

generic_shutdown_super() shrink_dcache_for_umount sb->s_root = NULL

                |
                |             vfs_read()
                |              inotify_fdinfo()
                |               * inode get from mark *
                |               show_mark_fhandle(m, inode)
                |                exportfs_encode_fid(inode, ..)
                |                 ovl_encode_fh(inode, ..)
                |                  ovl_check_encode_origin(inode)
                |                   * deref i_sb->s_root *
                |
                |
                v

fsnotify_sb_delete(sb)

Which then leads to:

IOW ovl_check_encode_origin derefs inode->i_sb->s_root, after it was set to NULL in the unmount path.

Fix it by protecting calling exportfs_encode_fid() from show_mark_fhandle() with s_umount lock.

This form of fix was suggested by Amir in 1.

Record: CVE-2025-40237
Updated: 2026-11-02

OSVDEBIAN-CVE-2025-40237 No score

Record: DEBIAN-CVE-2025-40237
Updated: 2026-11-02

OSVopenSUSE-SU-2026:20145-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
CVE-2025-39880: ceph: fix race condition validating r_parent before applying state (bsc#1250388).
CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
CVE-2025-40123: bpf: Enforce expected_attach_type for tailcall compatibility (bsc#1253365).
CVE-2025-40130: scsi: ufs: core: Fix data race in CPU latency PM QoS request handling
CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
CVE-2025-40214: af_unix: Initialise scc_index in unix_add_edge() (bsc#1254961).
CVE-2025-40215: xfrm: delete x->tunnel as we delete x (bsc#1254959).
CVE-2025-40218: mm/damon/vaddr: do not repeat pte_offset_map_lock() until success (bsc#1254964).
CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
CVE-2025-40237: fs/notify: call exportfs_encode_fid with s_umount (bsc#1254809).
CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
CVE-2025-40239: net: phy: micrel: always set shared->phydev for LAN8814 (bsc#1254868).
CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
CVE-2025-40246: xfs: fix out of bounds memory read error in symlink repair (bsc#1254861).
CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
CVE-2025-40255: net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower() (bsc#1255156).
CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
CVE-2025-40264: be2net: pass wrb_params in case of OS2BMC (bsc#1254835).
CVE-2025-40268: cifs: client: fix memory leak in smb3_fs_context_parse_param (bsc#1255082).
CVE-2025-40271: fs/proc: fix uaf in proc_readdir_de() (bsc#1255297).
CVE-2025-40274: KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying (bsc#1254830).
CVE-2025-40276: drm/panthor: Flush shmem writes before mapping buffers CPU-uncached (bsc#1254824).
CVE-2025-40278: net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak (bsc#1254825).
CVE-2025-40279: net: sched: act_connmark: initialize struct tc_ife to fix kernel leak (bsc#1254846).
CVE-2025-40280: tipc: Fix use-after-free in tipc_mon_reinit_self() (bsc#1254847).
CVE-2025-40292: virtio-net: fix received length check in big packets (bsc#1255175).
CVE-2025-40293: iommufd: Don't overflow during division for dirty tracking (bsc#1255179).
CVE-2025-40297: net: bridge: fix use-after-free due to MST port state bypass (bsc#1255187).
CVE-2025-40319: bpf: Sync pending IRQ work before freeing ring buffer (bsc#1254794).
CVE-2025-40328: smb: client: fix potential UAF in smb2_close_cached_fid() (bsc#1254624).
CVE-2025-40330: bnxt_en: Shutdown FW…

Record: openSUSE-SU-2026:20145-1
Updated: 2026-11-02

OSVROOT-OS-UBUNTU-2204-CVE-2025-40237 No score

CVE-2025-40237 in linux - Patched by Root

Root has patched CVE-2025-40237 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record: ROOT-OS-UBUNTU-2204-CVE-2025-40237
Updated: 2026-11-02

OSVROOT-OS-UBUNTU-2404-CVE-2025-40237 No score

CVE-2025-40237 in linux - Patched by Root

Root has patched CVE-2025-40237 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record: ROOT-OS-UBUNTU-2404-CVE-2025-40237
Updated: 2026-11-02

OSVSUSE-SU-2026:20207-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
CVE-2025-39880: ceph: fix race condition validating r_parent before applying state (bsc#1250388).
CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
CVE-2025-40123: bpf: Enforce expected_attach_type for tailcall compatibility (bsc#1253365).
CVE-2025-40130: scsi: ufs: core: Fix data race in CPU latency PM QoS request handling
CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
CVE-2025-40214: af_unix: Initialise scc_index in unix_add_edge() (bsc#1254961).
CVE-2025-40215: xfrm: delete x->tunnel as we delete x (bsc#1254959).
CVE-2025-40218: mm/damon/vaddr: do not repeat pte_offset_map_lock() until success (bsc#1254964).
CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
CVE-2025-40237: fs/notify: call exportfs_encode_fid with s_umount (bsc#1254809).
CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
CVE-2025-40239: net: phy: micrel: always set shared->phydev for LAN8814 (bsc#1254868).
CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
CVE-2025-40246: xfs: fix out of bounds memory read error in symlink repair (bsc#1254861).
CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
CVE-2025-40255: net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower() (bsc#1255156).
CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
CVE-2025-40264: be2net: pass wrb_params in case of OS2BMC (bsc#1254835).
CVE-2025-40268: cifs: client: fix memory leak in smb3_fs_context_parse_param (bsc#1255082).
CVE-2025-40271: fs/proc: fix uaf in proc_readdir_de() (bsc#1255297).
CVE-2025-40274: KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying (bsc#1254830).
CVE-2025-40276: drm/panthor: Flush shmem writes before mapping buffers CPU-uncached (bsc#1254824).
CVE-2025-40278: net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak (bsc#1254825).
CVE-2025-40279: net: sched: act_connmark: initialize struct tc_ife to fix kernel leak (bsc#1254846).
CVE-2025-40280: tipc: Fix use-after-free in tipc_mon_reinit_self() (bsc#1254847).
CVE-2025-40292: virtio-net: fix received length check in big packets (bsc#1255175).
CVE-2025-40293: iommufd: Don't overflow during division for dirty tracking (bsc#1255179).
CVE-2025-40297: net: bridge: fix use-after-free due to MST port state bypass (bsc#1255187).
CVE-2025-40319: bpf: Sync pending IRQ work before freeing ring buffer (bsc#1254794).
CVE-2025-40328: smb: client: fix potential UAF in smb2_close_cached_fid() (bsc#1254624).
CVE-2025-40330: bnxt_en: Shutdown FW…

Record: SUSE-SU-2026:20207-1
Updated: 2026-11-02

OSVSUSE-SU-2026:20220-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
CVE-2025-39880: ceph: fix race condition validating r_parent before applying state (bsc#1250388).
CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
CVE-2025-40123: bpf: Enforce expected_attach_type for tailcall compatibility (bsc#1253365).
CVE-2025-40130: scsi: ufs: core: Fix data race in CPU latency PM QoS request handling
CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
CVE-2025-40214: af_unix: Initialise scc_index in unix_add_edge() (bsc#1254961).
CVE-2025-40215: xfrm: delete x->tunnel as we delete x (bsc#1254959).
CVE-2025-40218: mm/damon/vaddr: do not repeat pte_offset_map_lock() until success (bsc#1254964).
CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
CVE-2025-40237: fs/notify: call exportfs_encode_fid with s_umount (bsc#1254809).
CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
CVE-2025-40239: net: phy: micrel: always set shared->phydev for LAN8814 (bsc#1254868).
CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
CVE-2025-40246: xfs: fix out of bounds memory read error in symlink repair (bsc#1254861).
CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
CVE-2025-40255: net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower() (bsc#1255156).
CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
CVE-2025-40264: be2net: pass wrb_params in case of OS2BMC (bsc#1254835).
CVE-2025-40268: cifs: client: fix memory leak in smb3_fs_context_parse_param (bsc#1255082).
CVE-2025-40271: fs/proc: fix uaf in proc_readdir_de() (bsc#1255297).
CVE-2025-40274: KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying (bsc#1254830).
CVE-2025-40276: drm/panthor: Flush shmem writes before mapping buffers CPU-uncached (bsc#1254824).
CVE-2025-40278: net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak (bsc#1254825).
CVE-2025-40279: net: sched: act_connmark: initialize struct tc_ife to fix kernel leak (bsc#1254846).
CVE-2025-40280: tipc: Fix use-after-free in tipc_mon_reinit_self() (bsc#1254847).
CVE-2025-40292: virtio-net: fix received length check in big packets (bsc#1255175).
CVE-2025-40293: iommufd: Don't overflow during division for dirty tracking (bsc#1255179).
CVE-2025-40297: net: bridge: fix use-after-free due to MST port state bypass (bsc#1255187).
CVE-2025-40319: bpf: Sync pending IRQ work before freeing ring buffer (bsc#1254794).
CVE-2025-40328: smb: client: fix potential UAF in smb2_close_cached_fid() (bsc#1254624).
CVE-2025-40330: bnxt_en: Shutdown FW…

Record: SUSE-SU-2026:20220-1
Updated: 2026-11-02

OSVSUSE-SU-2026:20228-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
CVE-2025-39880: ceph: fix race condition validating r_parent before applying state (bsc#1250388).
CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
CVE-2025-40123: bpf: Enforce expected_attach_type for tailcall compatibility (bsc#1253365).
CVE-2025-40130: scsi: ufs: core: Fix data race in CPU latency PM QoS request handling
CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
CVE-2025-40214: af_unix: Initialise scc_index in unix_add_edge() (bsc#1254961).
CVE-2025-40215: xfrm: delete x->tunnel as we delete x (bsc#1254959).
CVE-2025-40218: mm/damon/vaddr: do not repeat pte_offset_map_lock() until success (bsc#1254964).
CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
CVE-2025-40237: fs/notify: call exportfs_encode_fid with s_umount (bsc#1254809).
CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
CVE-2025-40239: net: phy: micrel: always set shared->phydev for LAN8814 (bsc#1254868).
CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
CVE-2025-40246: xfs: fix out of bounds memory read error in symlink repair (bsc#1254861).
CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
CVE-2025-40255: net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower() (bsc#1255156).
CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
CVE-2025-40264: be2net: pass wrb_params in case of OS2BMC (bsc#1254835).
CVE-2025-40268: cifs: client: fix memory leak in smb3_fs_context_parse_param (bsc#1255082).
CVE-2025-40271: fs/proc: fix uaf in proc_readdir_de() (bsc#1255297).
CVE-2025-40274: KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying (bsc#1254830).
CVE-2025-40276: drm/panthor: Flush shmem writes before mapping buffers CPU-uncached (bsc#1254824).
CVE-2025-40278: net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak (bsc#1254825).
CVE-2025-40279: net: sched: act_connmark: initialize struct tc_ife to fix kernel leak (bsc#1254846).
CVE-2025-40280: tipc: Fix use-after-free in tipc_mon_reinit_self() (bsc#1254847).
CVE-2025-40292: virtio-net: fix received length check in big packets (bsc#1255175).
CVE-2025-40293: iommufd: Don't overflow during division for dirty tracking (bsc#1255179).
CVE-2025-40297: net: bridge: fix use-after-free due to MST port state bypass (bsc#1255187).
CVE-2025-40319: bpf: Sync pending IRQ work before freeing ring buffer (bsc#1254794).
CVE-2025-40328: smb: client: fix potential UAF in smb2_close_cached_fid() (bsc#1254624).
CVE-2025-40330: bnxt_en: Shutdown FW…

Record: SUSE-SU-2026:20228-1
Updated: 2026-11-02

OSVSUSE-SU-2026:20564-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
CVE-2025-39880: ceph: fix race condition validating r_parent before applying state (bsc#1250388).
CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
CVE-2025-40123: bpf: Enforce expected_attach_type for tailcall compatibility (bsc#1253365).
CVE-2025-40130: scsi: ufs: core: Fix data race in CPU latency PM QoS request handling
CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
CVE-2025-40214: af_unix: Initialise scc_index in unix_add_edge() (bsc#1254961).
CVE-2025-40215: xfrm: delete x->tunnel as we delete x (bsc#1254959).
CVE-2025-40218: mm/damon/vaddr: do not repeat pte_offset_map_lock() until success (bsc#1254964).
CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
CVE-2025-40237: fs/notify: call exportfs_encode_fid with s_umount (bsc#1254809).
CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
CVE-2025-40239: net: phy: micrel: always set shared->phydev for LAN8814 (bsc#1254868).
CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
CVE-2025-40246: xfs: fix out of bounds memory read error in symlink repair (bsc#1254861).
CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
CVE-2025-40255: net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower() (bsc#1255156).
CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
CVE-2025-40264: be2net: pass wrb_params in case of OS2BMC (bsc#1254835).
CVE-2025-40268: cifs: client: fix memory leak in smb3_fs_context_parse_param (bsc#1255082).
CVE-2025-40271: fs/proc: fix uaf in proc_readdir_de() (bsc#1255297).
CVE-2025-40274: KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying (bsc#1254830).
CVE-2025-40276: drm/panthor: Flush shmem writes before mapping buffers CPU-uncached (bsc#1254824).
CVE-2025-40278: net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak (bsc#1254825).
CVE-2025-40279: net: sched: act_connmark: initialize struct tc_ife to fix kernel leak (bsc#1254846).
CVE-2025-40280: tipc: Fix use-after-free in tipc_mon_reinit_self() (bsc#1254847).
CVE-2025-40292: virtio-net: fix received length check in big packets (bsc#1255175).
CVE-2025-40293: iommufd: Don't overflow during division for dirty tracking (bsc#1255179).
CVE-2025-40297: net: bridge: fix use-after-free due to MST port state bypass (bsc#1255187).
CVE-2025-40319: bpf: Sync pending IRQ work before freeing ring buffer (bsc#1254794).
CVE-2025-40328: smb: client: fix potential UAF in smb2_close_cached_fid() (bsc#1254624).
CVE-2025-40330: bnxt_en: Shutdown FW…

Record: SUSE-SU-2026:20564-1
Updated: 2026-11-02

OSVUSN-8029-1 No score

linux, linux-raspi, linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
Nios II architecture;
PA-RISC architecture;
RISC-V architecture;
S390 architecture;
Sun Sparc architecture;
x86 architecture;
Xtensa architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Drivers core;
Network block device driver;
Bluetooth drivers;
Bus devices;
Hardware random number generator core;
Character device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
Device frequency scaling framework;
ARM SCMI message protocol;
GPIO subsystem;
GPU drivers;
Hardware monitoring drivers;
HW tracing;
InfiniBand drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
ISDN/mISDN subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
Fastrpc Driver;
PCI Endpoint Test driver;
VMware Balloon Driver;
MOST (Media Oriented Systems Transport) drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVME drivers;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
Mellanox platform drivers;
x86 platform drivers;
ARM PM domains;
PPS (Pulse Per Second) driver;
PTP clock framework;
PWM drivers;
Remote Processor subsystem;
SCSI subsystem;
SPI subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Userspace I/O drivers;
Cadence USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
vDPA drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EROFS file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
File system notification infrastructure;
NTFS3 file system;
Proc file system;
Diskquota system;
SMB network file system;
BPF subsystem;
Mellanox drivers;
Memory management;
Virtio network driver;
Bluetooth subsystem;
IP tunnels definitions;
io_uring subsystem;
Kernel crash support code;
Perf events;
Kernel futex primitives;
PID allocator;
Scheduler infrastructure;
Syscalls implementation;
Timer subsystem;
Tracing infrastructure;
9P file system network protocol;
Ethernet bridge;
Networking core;
IPv4 networking;
IPv6 networking;
Multipath TCP;
Netfilter;
NFC subsystem;
Network traffic control;
SCTP protocol;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
TLS protocol;
VMware vSockets driver;
eXpress Data Path;
XFRM subsystem;
Integrity Measurement Architecture(IMA) framework;
ALSA framework;
HD-audio driver;
AMD SoC Alsa drivers;
WCD audio codecs;
Intel ASoC drivers;
USB sound devices;
KVM subsystem; (CVE-2025-40001, CVE-2025-40002, CVE-2025-40003, CVE-2025-40004, CVE-2025-40029, CVE-2025-40030, CVE-2025-40031, CVE-2025-40032, CVE-2025-40033, CVE-2025-40034, CVE-2025-40035, CVE-2025-40036, CVE-2025-40037, CVE-2025-40038, CVE-2025-40039, CVE-2025-40040, CVE-2025-40042, CVE-2025-40043, CVE-2025-40044, CVE-2025-40045, CVE-2025-40046, CVE-2025-40047, CVE-2025-40048, CVE-2025-40049, CVE-2025-40050, CVE-2025-40051, CVE-2025-40052, CVE-2025-40053, CVE-2025-40054, CVE-2025-40055, CVE-2025-40056, CVE-2025-40057,…

Record: USN-8029-1
Updated: 2026-11-03

OSVUSN-8029-2 No score

linux-aws, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
Nios II architecture;
PA-RISC architecture;
RISC-V architecture;
S390 architecture;
Sun Sparc architecture;
x86 architecture;
Xtensa architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Drivers core;
Network block device driver;
Bluetooth drivers;
Bus devices;
Hardware random number generator core;
Character device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
Device frequency scaling framework;
ARM SCMI message protocol;
GPIO subsystem;
GPU drivers;
Hardware monitoring drivers;
HW tracing;
InfiniBand drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
ISDN/mISDN subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
Fastrpc Driver;
PCI Endpoint Test driver;
VMware Balloon Driver;
MOST (Media Oriented Systems Transport) drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVME drivers;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
Mellanox platform drivers;
x86 platform drivers;
ARM PM domains;
PPS (Pulse Per Second) driver;
PTP clock framework;
PWM drivers;
Remote Processor subsystem;
SCSI subsystem;
SPI subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Userspace I/O drivers;
Cadence USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
vDPA drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EROFS file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
File system notification infrastructure;
NTFS3 file system;
Proc file system;
Diskquota system;
SMB network file system;
BPF subsystem;
Mellanox drivers;
Memory management;
Virtio network driver;
Bluetooth subsystem;
IP tunnels definitions;
io_uring subsystem;
Kernel crash support code;
Perf events;
Kernel futex primitives;
PID allocator;
Scheduler infrastructure;
Syscalls implementation;
Timer subsystem;
Tracing infrastructure;
9P file system network protocol;
Ethernet bridge;
Networking core;
IPv4 networking;
IPv6 networking;
Multipath TCP;
Netfilter;
NFC subsystem;
Network traffic control;
SCTP protocol;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
TLS protocol;
VMware vSockets driver;
eXpress Data Path;
XFRM subsystem;
Integrity Measurement Architecture(IMA) framework;
ALSA framework;
HD-audio driver;
AMD SoC Alsa drivers;
WCD audio codecs;
Intel ASoC drivers;
USB sound devices;
KVM subsystem; (CVE-2025-40001, CVE-2025-40002, CVE-2025-40003, CVE-2025-40004, CVE-2025-40029, CVE-2025-40030, CVE-2025-40031, CVE-2025-40032, CVE-2025-40033, CVE-2025-40034, CVE-2025-40035, CVE-2025-40036, CVE-2025-40037, CVE-2025-40038, CVE-2025-40039, CVE-2025-40040, CVE-2025-40042, CVE-2025-40043, CVE-2025-40044, CVE-2025-40045, CVE-2025-40046, CVE-2025-40047, CVE-2025-40048, CVE-2025-40049, CVE-2025-40050, CVE-2025-40051, CVE-2025-40052, CVE-2025-40053, CVE-2025-40054, CVE-2025-40055, CVE-2025-40056, CVE-2025-40057,…

Record: USN-8029-2
Updated: 2026-11-03

OSVUSN-8029-3 No score

linux-azure vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
Nios II architecture;
PA-RISC architecture;
RISC-V architecture;
S390 architecture;
Sun Sparc architecture;
x86 architecture;
Xtensa architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Drivers core;
Network block device driver;
Bluetooth drivers;
Bus devices;
Hardware random number generator core;
Character device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
Device frequency scaling framework;
ARM SCMI message protocol;
GPIO subsystem;
GPU drivers;
Hardware monitoring drivers;
HW tracing;
InfiniBand drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
ISDN/mISDN subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
Fastrpc Driver;
PCI Endpoint Test driver;
VMware Balloon Driver;
MOST (Media Oriented Systems Transport) drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVME drivers;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
Mellanox platform drivers;
x86 platform drivers;
ARM PM domains;
PPS (Pulse Per Second) driver;
PTP clock framework;
PWM drivers;
Remote Processor subsystem;
SCSI subsystem;
SPI subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Userspace I/O drivers;
Cadence USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
vDPA drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EROFS file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
File system notification infrastructure;
NTFS3 file system;
Proc file system;
Diskquota system;
SMB network file system;
BPF subsystem;
Mellanox drivers;
Memory management;
Virtio network driver;
Bluetooth subsystem;
IP tunnels definitions;
io_uring subsystem;
Kernel crash support code;
Perf events;
Kernel futex primitives;
PID allocator;
Scheduler infrastructure;
Syscalls implementation;
Timer subsystem;
Tracing infrastructure;
9P file system network protocol;
Ethernet bridge;
Networking core;
IPv4 networking;
IPv6 networking;
Multipath TCP;
Netfilter;
NFC subsystem;
Network traffic control;
SCTP protocol;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
TLS protocol;
VMware vSockets driver;
eXpress Data Path;
XFRM subsystem;
Integrity Measurement Architecture(IMA) framework;
ALSA framework;
HD-audio driver;
AMD SoC Alsa drivers;
WCD audio codecs;
Intel ASoC drivers;
USB sound devices;
KVM subsystem; (CVE-2025-40001, CVE-2025-40002, CVE-2025-40003, CVE-2025-40004, CVE-2025-40029, CVE-2025-40030, CVE-2025-40031, CVE-2025-40032, CVE-2025-40033, CVE-2025-40034, CVE-2025-40035, CVE-2025-40036, CVE-2025-40037, CVE-2025-40038, CVE-2025-40039, CVE-2025-40040, CVE-2025-40042, CVE-2025-40043, CVE-2025-40044, CVE-2025-40045, CVE-2025-40046, CVE-2025-40047, CVE-2025-40048, CVE-2025-40049, CVE-2025-40050, CVE-2025-40051, CVE-2025-40052, CVE-2025-40053, CVE-2025-40054, CVE-2025-40055, CVE-2025-40056, CVE-2025-40057,…

Record: USN-8029-3
Updated: 2026-11-03

OSVUSN-8030-1 No score

linux-gcp vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
Nios II architecture;
PA-RISC architecture;
RISC-V architecture;
S390 architecture;
Sun Sparc architecture;
x86 architecture;
Xtensa architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Drivers core;
Network block device driver;
Bluetooth drivers;
Bus devices;
Hardware random number generator core;
Character device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
Device frequency scaling framework;
ARM SCMI message protocol;
GPIO subsystem;
GPU drivers;
Hardware monitoring drivers;
HW tracing;
InfiniBand drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
ISDN/mISDN subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
Fastrpc Driver;
PCI Endpoint Test driver;
VMware Balloon Driver;
MOST (Media Oriented Systems Transport) drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVME drivers;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
Mellanox platform drivers;
x86 platform drivers;
ARM PM domains;
PPS (Pulse Per Second) driver;
PTP clock framework;
PWM drivers;
Remote Processor subsystem;
SCSI subsystem;
SPI subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Userspace I/O drivers;
Cadence USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
vDPA drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EROFS file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
File system notification infrastructure;
NTFS3 file system;
Proc file system;
Diskquota system;
SMB network file system;
BPF subsystem;
Mellanox drivers;
Memory management;
Virtio network driver;
Bluetooth subsystem;
IP tunnels definitions;
io_uring subsystem;
Kernel crash support code;
Perf events;
Kernel futex primitives;
PID allocator;
Scheduler infrastructure;
Syscalls implementation;
Timer subsystem;
Tracing infrastructure;
9P file system network protocol;
Ethernet bridge;
Networking core;
IPv4 networking;
IPv6 networking;
Multipath TCP;
Netfilter;
NFC subsystem;
Network traffic control;
SCTP protocol;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
TLS protocol;
VMware vSockets driver;
eXpress Data Path;
XFRM subsystem;
Integrity Measurement Architecture(IMA) framework;
ALSA framework;
HD-audio driver;
AMD SoC Alsa drivers;
WCD audio codecs;
Intel ASoC drivers;
USB sound devices;
KVM subsystem; (CVE-2025-40001, CVE-2025-40002, CVE-2025-40003, CVE-2025-40004, CVE-2025-40029, CVE-2025-40030, CVE-2025-40031, CVE-2025-40032, CVE-2025-40033, CVE-2025-40034, CVE-2025-40035, CVE-2025-40036, CVE-2025-40037, CVE-2025-40038, CVE-2025-40039, CVE-2025-40040, CVE-2025-40042, CVE-2025-40043, CVE-2025-40044, CVE-2025-40045, CVE-2025-40046, CVE-2025-40047, CVE-2025-40048, CVE-2025-40049, CVE-2025-40050, CVE-2025-40051, CVE-2025-40052, CVE-2025-40053, CVE-2025-40054, CVE-2025-40055, CVE-2025-40056, CVE-2025-40057,…

Record: USN-8030-1
Updated: 2026-11-03

OSVUSN-8048-1 No score

linux-oem-6.17 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
Nios II architecture;
PA-RISC architecture;
RISC-V architecture;
S390 architecture;
Sun Sparc architecture;
x86 architecture;
Xtensa architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Drivers core;
Network block device driver;
Bluetooth drivers;
Bus devices;
Hardware random number generator core;
Character device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
Device frequency scaling framework;
ARM SCMI message protocol;
GPIO subsystem;
GPU drivers;
Hardware monitoring drivers;
HW tracing;
InfiniBand drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
ISDN/mISDN subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
Fastrpc Driver;
PCI Endpoint Test driver;
VMware Balloon Driver;
MOST (Media Oriented Systems Transport) drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVME drivers;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
Mellanox platform drivers;
x86 platform drivers;
ARM PM domains;
PPS (Pulse Per Second) driver;
PTP clock framework;
PWM drivers;
Remote Processor subsystem;
SCSI subsystem;
SPI subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Userspace I/O drivers;
Cadence USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
vDPA drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EROFS file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
File system notification infrastructure;
NTFS3 file system;
Proc file system;
Diskquota system;
SMB network file system;
BPF subsystem;
Mellanox drivers;
Memory management;
Virtio network driver;
Bluetooth subsystem;
IP tunnels definitions;
io_uring subsystem;
Kernel crash support code;
Perf events;
Kernel futex primitives;
PID allocator;
Scheduler infrastructure;
Syscalls implementation;
Timer subsystem;
Tracing infrastructure;
9P file system network protocol;
Ethernet bridge;
Networking core;
IPv4 networking;
IPv6 networking;
Multipath TCP;
Netfilter;
NFC subsystem;
Network traffic control;
SCTP protocol;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
TLS protocol;
VMware vSockets driver;
eXpress Data Path;
XFRM subsystem;
Integrity Measurement Architecture(IMA) framework;
ALSA framework;
HD-audio driver;
AMD SoC Alsa drivers;
WCD audio codecs;
Intel ASoC drivers;
USB sound devices;
KVM subsystem; (CVE-2025-40001, CVE-2025-40002, CVE-2025-40003, CVE-2025-40004, CVE-2025-40029, CVE-2025-40030, CVE-2025-40031, CVE-2025-40032, CVE-2025-40033, CVE-2025-40034, CVE-2025-40035, CVE-2025-40036, CVE-2025-40037, CVE-2025-40038, CVE-2025-40039, CVE-2025-40040, CVE-2025-40041, CVE-2025-40042, CVE-2025-40043, CVE-2025-40044, CVE-2025-40045, CVE-2025-40046, CVE-2025-40047, CVE-2025-40048, CVE-2025-40049, CVE-2025-40050, CVE-2025-40051, CVE-2025-40052, CVE-2025-40053, CVE-2025-40054, CVE-2025-40055, CVE-2025-40056,…

Record: USN-8048-1
Updated: 2026-11-03

OSVUSN-8095-1 No score

linux, linux-aws, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-hwe-6.8, linux-ibm, linux-ibm-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle, linux-oracle-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
Nios II architecture;
PA-RISC architecture;
RISC-V architecture;
S390 architecture;
Sun Sparc architecture;
User-Mode Linux (UML);
x86 architecture;
Xtensa architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
ATM drivers;
Drivers core;
Block device driver;
Network block device driver;
Bluetooth drivers;
Bus devices;
Hardware random number generator core;
Character device driver;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
DMA engine subsystem;
ARM SCMI message protocol;
EFI core;
Intel Stratix 10 firmware drivers;
GPU drivers;
HID subsystem;
CoreSight HW tracing drivers;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
Input Device (Tablet) drivers;
IOMMU subsystem;
ISDN/mISDN subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
Fastrpc Driver;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
Texas Instruments network drivers;
Ethernet team driver;
NVME drivers;
PCI subsystem;
PCCARD (PCMCIA/CardBus) bus subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
ARM PM domains;
PPS (Pulse Per Second) driver;
PTP clock framework;
PWM drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
Texas Instruments SoC drivers;
TCM subsystem;
Trusted Execution Environment drivers;
TTY drivers;
Userspace I/O drivers;
Cadence USB3 driver;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Mass Storage drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
Ceph distributed file system;
File systems infrastructure;
EFI Variable file system;
exFAT file system;
Ext4 file system;
F2FS file system;
FUSE (File system in Userspace);
GFS2 file system;
HFS file system;
HFS+ file system;
HugeTLB file system;
JFS file system;
KERNFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
File system notification infrastructure;
NTFS3 file system;
OCFS2 file system;
OrangeFS file system;
Proc file system;
Diskquota system;
SMB network file system;
SquashFS file system;
UDF file system;
XFS file system;
Asynchronous Transfer Mode (ATM) subsystem;
BPF subsystem;
Mellanox drivers;
NFS page cache wrapper;
Memory management;
Memory Management;
Media input infrastructure;
Bluetooth subsystem;
IP tunnels definitions;
Network traffic control;
Rose network layer;
Network sockets;
io_uring subsystem;
Control group (cgroup);
Kernel crash support code;
Kernel futex primitives;
PID allocator;
Scheduler infrastructure;
Syscalls implementation;
Timer…

Record: USN-8095-1
Updated: 2026-11-03

OSVUSN-8095-2 No score

linux-fips, linux-aws-fips, linux-gcp-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
Nios II architecture;
PA-RISC architecture;
RISC-V architecture;
S390 architecture;
Sun Sparc architecture;
User-Mode Linux (UML);
x86 architecture;
Xtensa architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
ATM drivers;
Drivers core;
Block device driver;
Network block device driver;
Bluetooth drivers;
Bus devices;
Hardware random number generator core;
Character device driver;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
DMA engine subsystem;
ARM SCMI message protocol;
EFI core;
Intel Stratix 10 firmware drivers;
GPU drivers;
HID subsystem;
CoreSight HW tracing drivers;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
Input Device (Tablet) drivers;
IOMMU subsystem;
ISDN/mISDN subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
Fastrpc Driver;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
Texas Instruments network drivers;
Ethernet team driver;
NVME drivers;
PCI subsystem;
PCCARD (PCMCIA/CardBus) bus subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
ARM PM domains;
PPS (Pulse Per Second) driver;
PTP clock framework;
PWM drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
Texas Instruments SoC drivers;
TCM subsystem;
Trusted Execution Environment drivers;
TTY drivers;
Userspace I/O drivers;
Cadence USB3 driver;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Mass Storage drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
Ceph distributed file system;
File systems infrastructure;
EFI Variable file system;
exFAT file system;
Ext4 file system;
F2FS file system;
FUSE (File system in Userspace);
GFS2 file system;
HFS file system;
HFS+ file system;
HugeTLB file system;
JFS file system;
KERNFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
File system notification infrastructure;
NTFS3 file system;
OCFS2 file system;
OrangeFS file system;
Proc file system;
Diskquota system;
SMB network file system;
SquashFS file system;
UDF file system;
XFS file system;
Asynchronous Transfer Mode (ATM) subsystem;
BPF subsystem;
Mellanox drivers;
NFS page cache wrapper;
Memory management;
Memory Management;
Media input infrastructure;
Bluetooth subsystem;
IP tunnels definitions;
Network traffic control;
Rose network layer;
Network sockets;
io_uring subsystem;
Control group (cgroup);
Kernel crash support code;
Kernel futex primitives;
PID allocator;
Scheduler infrastructure;
Syscalls implementation;
Timer…

Record: USN-8095-2
Updated: 2026-11-03

OSVUSN-8095-3 No score

linux-realtime, linux-realtime-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
Nios II architecture;
PA-RISC architecture;
RISC-V architecture;
S390 architecture;
Sun Sparc architecture;
User-Mode Linux (UML);
x86 architecture;
Xtensa architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
ATM drivers;
Drivers core;
Block device driver;
Network block device driver;
Bluetooth drivers;
Bus devices;
Hardware random number generator core;
Character device driver;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
DMA engine subsystem;
ARM SCMI message protocol;
EFI core;
Intel Stratix 10 firmware drivers;
GPU drivers;
HID subsystem;
CoreSight HW tracing drivers;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
Input Device (Tablet) drivers;
IOMMU subsystem;
ISDN/mISDN subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
Fastrpc Driver;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
Texas Instruments network drivers;
Ethernet team driver;
NVME drivers;
PCI subsystem;
PCCARD (PCMCIA/CardBus) bus subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
ARM PM domains;
PPS (Pulse Per Second) driver;
PTP clock framework;
PWM drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
Texas Instruments SoC drivers;
TCM subsystem;
Trusted Execution Environment drivers;
TTY drivers;
Userspace I/O drivers;
Cadence USB3 driver;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Mass Storage drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
Ceph distributed file system;
File systems infrastructure;
EFI Variable file system;
exFAT file system;
Ext4 file system;
F2FS file system;
FUSE (File system in Userspace);
GFS2 file system;
HFS file system;
HFS+ file system;
HugeTLB file system;
JFS file system;
KERNFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
File system notification infrastructure;
NTFS3 file system;
OCFS2 file system;
OrangeFS file system;
Proc file system;
Diskquota system;
SMB network file system;
SquashFS file system;
UDF file system;
XFS file system;
Asynchronous Transfer Mode (ATM) subsystem;
BPF subsystem;
Mellanox drivers;
NFS page cache wrapper;
Memory management;
Memory Management;
Media input infrastructure;
Bluetooth subsystem;
IP tunnels definitions;
Network traffic control;
Rose network layer;
Network sockets;
io_uring subsystem;
Control group (cgroup);
Kernel crash support code;
Kernel futex primitives;
PID allocator;
Scheduler infrastructure;
Syscalls implementation;
Timer…

Record: USN-8095-3
Updated: 2026-11-03

OSVUSN-8095-4 No score

linux-aws-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
Nios II architecture;
PA-RISC architecture;
RISC-V architecture;
S390 architecture;
Sun Sparc architecture;
User-Mode Linux (UML);
x86 architecture;
Xtensa architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
ATM drivers;
Drivers core;
Block device driver;
Network block device driver;
Bluetooth drivers;
Bus devices;
Hardware random number generator core;
Character device driver;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
DMA engine subsystem;
ARM SCMI message protocol;
EFI core;
Intel Stratix 10 firmware drivers;
GPU drivers;
HID subsystem;
CoreSight HW tracing drivers;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
Input Device (Tablet) drivers;
IOMMU subsystem;
ISDN/mISDN subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
Fastrpc Driver;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
Texas Instruments network drivers;
Ethernet team driver;
NVME drivers;
PCI subsystem;
PCCARD (PCMCIA/CardBus) bus subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
ARM PM domains;
PPS (Pulse Per Second) driver;
PTP clock framework;
PWM drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
Texas Instruments SoC drivers;
TCM subsystem;
Trusted Execution Environment drivers;
TTY drivers;
Userspace I/O drivers;
Cadence USB3 driver;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Mass Storage drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
Ceph distributed file system;
File systems infrastructure;
EFI Variable file system;
exFAT file system;
Ext4 file system;
F2FS file system;
FUSE (File system in Userspace);
GFS2 file system;
HFS file system;
HFS+ file system;
HugeTLB file system;
JFS file system;
KERNFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
File system notification infrastructure;
NTFS3 file system;
OCFS2 file system;
OrangeFS file system;
Proc file system;
Diskquota system;
SMB network file system;
SquashFS file system;
UDF file system;
XFS file system;
Asynchronous Transfer Mode (ATM) subsystem;
BPF subsystem;
Mellanox drivers;
NFS page cache wrapper;
Memory management;
Memory Management;
Media input infrastructure;
Bluetooth subsystem;
IP tunnels definitions;
Network traffic control;
Rose network layer;
Network sockets;
io_uring subsystem;
Control group (cgroup);
Kernel crash support code;
Kernel futex primitives;
PID allocator;
Scheduler infrastructure;
Syscalls implementation;
Timer…

Record: USN-8095-4
Updated: 2026-11-03

OSVUSN-8095-5 No score

linux-raspi, linux-raspi-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
Nios II architecture;
PA-RISC architecture;
RISC-V architecture;
S390 architecture;
Sun Sparc architecture;
User-Mode Linux (UML);
x86 architecture;
Xtensa architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
ATM drivers;
Drivers core;
Block device driver;
Network block device driver;
Bluetooth drivers;
Bus devices;
Hardware random number generator core;
Character device driver;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
DMA engine subsystem;
ARM SCMI message protocol;
EFI core;
Intel Stratix 10 firmware drivers;
GPU drivers;
HID subsystem;
CoreSight HW tracing drivers;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
Input Device (Tablet) drivers;
IOMMU subsystem;
ISDN/mISDN subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
Fastrpc Driver;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
Texas Instruments network drivers;
Ethernet team driver;
NVME drivers;
PCI subsystem;
PCCARD (PCMCIA/CardBus) bus subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
ARM PM domains;
PPS (Pulse Per Second) driver;
PTP clock framework;
PWM drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
Texas Instruments SoC drivers;
TCM subsystem;
Trusted Execution Environment drivers;
TTY drivers;
Userspace I/O drivers;
Cadence USB3 driver;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Mass Storage drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
Ceph distributed file system;
File systems infrastructure;
EFI Variable file system;
exFAT file system;
Ext4 file system;
F2FS file system;
FUSE (File system in Userspace);
GFS2 file system;
HFS file system;
HFS+ file system;
HugeTLB file system;
JFS file system;
KERNFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
File system notification infrastructure;
NTFS3 file system;
OCFS2 file system;
OrangeFS file system;
Proc file system;
Diskquota system;
SMB network file system;
SquashFS file system;
UDF file system;
XFS file system;
Asynchronous Transfer Mode (ATM) subsystem;
BPF subsystem;
Mellanox drivers;
NFS page cache wrapper;
Memory management;
Memory Management;
Media input infrastructure;
Bluetooth subsystem;
IP tunnels definitions;
Network traffic control;
Rose network layer;
Network sockets;
io_uring subsystem;
Control group (cgroup);
Kernel crash support code;
Kernel futex primitives;
PID allocator;
Scheduler infrastructure;
Syscalls implementation;
Timer…

Record: USN-8095-5
Updated: 2026-11-03

OSVUSN-8100-1 No score

linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
Nios II architecture;
PA-RISC architecture;
RISC-V architecture;
S390 architecture;
Sun Sparc architecture;
User-Mode Linux (UML);
x86 architecture;
Xtensa architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
ATM drivers;
Drivers core;
Block device driver;
Network block device driver;
Bluetooth drivers;
Bus devices;
Hardware random number generator core;
Character device driver;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
DMA engine subsystem;
ARM SCMI message protocol;
EFI core;
Intel Stratix 10 firmware drivers;
GPU drivers;
HID subsystem;
CoreSight HW tracing drivers;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
Input Device (Tablet) drivers;
IOMMU subsystem;
ISDN/mISDN subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
Fastrpc Driver;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
Texas Instruments network drivers;
Ethernet team driver;
NVME drivers;
PCI subsystem;
PCCARD (PCMCIA/CardBus) bus subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
ARM PM domains;
PPS (Pulse Per Second) driver;
PTP clock framework;
PWM drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
Texas Instruments SoC drivers;
SPI subsystem;
TCM subsystem;
Trusted Execution Environment drivers;
TTY drivers;
Userspace I/O drivers;
Cadence USB3 driver;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Mass Storage drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
Ceph distributed file system;
File systems infrastructure;
EFI Variable file system;
exFAT file system;
Ext4 file system;
F2FS file system;
FUSE (File system in Userspace);
GFS2 file system;
HFS file system;
HFS+ file system;
HugeTLB file system;
JFS file system;
KERNFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
File system notification infrastructure;
NTFS3 file system;
OCFS2 file system;
OrangeFS file system;
Proc file system;
Diskquota system;
SMB network file system;
SquashFS file system;
UDF file system;
XFS file system;
Asynchronous Transfer Mode (ATM) subsystem;
BPF subsystem;
Mellanox drivers;
NFS page cache wrapper;
Memory management;
Memory Management;
Media input infrastructure;
Bluetooth subsystem;
IP tunnels definitions;
Network traffic control;
Rose network layer;
Network sockets;
io_uring subsystem;
Control group (cgroup);
Kernel crash support code;
Kernel futex primitives;
PID allocator;
Scheduler infrastructure;
Syscalls implementation; …

Record: USN-8100-1
Updated: 2026-11-03

OSVUSN-8125-1 No score

linux-azure vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
Nios II architecture;
PA-RISC architecture;
RISC-V architecture;
S390 architecture;
Sun Sparc architecture;
User-Mode Linux (UML);
x86 architecture;
Xtensa architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
ATM drivers;
Drivers core;
Block device driver;
Network block device driver;
Bluetooth drivers;
Bus devices;
Hardware random number generator core;
Character device driver;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
DMA engine subsystem;
ARM SCMI message protocol;
EFI core;
Intel Stratix 10 firmware drivers;
GPU drivers;
HID subsystem;
CoreSight HW tracing drivers;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
Input Device (Tablet) drivers;
IOMMU subsystem;
ISDN/mISDN subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
Fastrpc Driver;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
Texas Instruments network drivers;
Ethernet team driver;
NVME drivers;
PCI subsystem;
PCCARD (PCMCIA/CardBus) bus subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
ARM PM domains;
PPS (Pulse Per Second) driver;
PTP clock framework;
PWM drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
Texas Instruments SoC drivers;
TCM subsystem;
Trusted Execution Environment drivers;
TTY drivers;
Userspace I/O drivers;
Cadence USB3 driver;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Mass Storage drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
Ceph distributed file system;
File systems infrastructure;
EFI Variable file system;
exFAT file system;
Ext4 file system;
F2FS file system;
FUSE (File system in Userspace);
GFS2 file system;
HFS file system;
HFS+ file system;
HugeTLB file system;
JFS file system;
KERNFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
File system notification infrastructure;
NTFS3 file system;
OCFS2 file system;
OrangeFS file system;
Proc file system;
Diskquota system;
SMB network file system;
SquashFS file system;
UDF file system;
XFS file system;
Asynchronous Transfer Mode (ATM) subsystem;
BPF subsystem;
Mellanox drivers;
NFS page cache wrapper;
Memory management;
Memory Management;
Media input infrastructure;
Bluetooth subsystem;
IP tunnels definitions;
Network traffic control;
Rose network layer;
Network sockets;
io_uring subsystem;
Control group (cgroup);
Kernel crash support code;
Kernel futex primitives;
PID allocator;
Scheduler infrastructure;
Syscalls implementation;
Timer…

Record: USN-8125-1
Updated: 2026-11-03

OSVUSN-8126-1 No score

linux-azure-6.8 vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331)

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expose sensitive information. (CVE-2024-36350, CVE-2024-36357)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
Nios II architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
Sun Sparc architecture;
User-Mode Linux (UML);
x86 architecture;
Xtensa architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
ATA over ethernet (AOE) driver;
DRBD Distributed Replicated Block Device drivers;
Block device driver;
Network block device driver;
Ublk userspace block driver;
Bluetooth drivers;
Bus devices;
Hardware random number generator core;
Character device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
EFI core;
Intel Stratix 10 firmware drivers;
FPGA Framework;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
CoreSight HW tracing drivers;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
Input Device (Tablet) drivers;
IOMMU subsystem;
IRQ chip drivers;
ISDN/mISDN subsystem;
Mailbox framework;
MCB driver;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Fastrpc Driver;
Microchip PCI driver;
Intel Management Engine Interface driver;
PCI Endpoint Test driver;
TI TPS6594 PFSM driver;
VMware VMCI Driver;
MMC subsystem;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
Texas Instruments network drivers;
Ethernet team driver;
MediaTek network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
PCI subsystem;
PCCARD (PCMCIA/CardBus) bus subsystem;
Amlogic Meson DDR PMU;
Performance monitor drivers;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
ARM PM domains;
Power supply drivers;
Powercap sysfs driver;
PPS (Pulse Per Second) driver;
PTP clock framework;
PWM drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
Samsung SoC drivers;
Texas Instruments SoC drivers;
SPI subsystem; -…

Record: USN-8126-1
Updated: 2026-11-03

OSVUSN-8165-1 No score

linux-azure-fips vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853, CVE-2026-23268, CVE-2026-23269, CVE-2026-23403, CVE-2026-23404, CVE-2026-23405, CVE-2026-23406, CVE-2026-23407, CVE-2026-23408, CVE-2026-23409, CVE-2026-23410, CVE-2026-23411)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
Nios II architecture;
PA-RISC architecture;
RISC-V architecture;
S390 architecture;
Sun Sparc architecture;
User-Mode Linux (UML);
x86 architecture;
Xtensa architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
ATM drivers;
Drivers core;
Block device driver;
Network block device driver;
Bluetooth drivers;
Bus devices;
Hardware random number generator core;
Character device driver;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
DMA engine subsystem;
ARM SCMI message protocol;
EFI core;
Intel Stratix 10 firmware drivers;
GPU drivers;
HID subsystem;
CoreSight HW tracing drivers;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
Input Device (Tablet) drivers;
IOMMU subsystem;
ISDN/mISDN subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
Fastrpc Driver;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
Texas Instruments network drivers;
Ethernet team driver;
NVME drivers;
PCI subsystem;
PCCARD (PCMCIA/CardBus) bus subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
ARM PM domains;
PPS (Pulse Per Second) driver;
PTP clock framework;
PWM drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
Texas Instruments SoC drivers;
TCM subsystem;
Trusted Execution Environment drivers;
TTY drivers;
Userspace I/O drivers;
Cadence USB3 driver;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Mass Storage drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
Ceph distributed file system;
File systems infrastructure;
EFI Variable file system;
exFAT file system;
Ext4 file system;
F2FS file system;
FUSE (File system in Userspace);
GFS2 file system;
HFS file system;
HFS+ file system;
HugeTLB file system;
JFS file system;
KERNFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
File system notification infrastructure;
NTFS3 file system;
OCFS2 file system;
OrangeFS file system;
Proc file system;
Diskquota system;
SMB network file system;
SquashFS file system;
UDF file system;
XFS file system;
Asynchronous Transfer Mode (ATM) subsystem;
BPF subsystem;
Mellanox drivers;
NFS page cache wrapper;
Memory management;
Memory Management;
Media input infrastructure;
Bluetooth subsystem;
IP tunnels definitions;
Network traffic control;
Rose network layer;
Network sockets;
io_uring subsystem; -…

Record: USN-8165-1
Updated: 2026-11-03

OSVUSN-8261-1 No score

linux-xilinx vulnerabilities

Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issue to cause load malicious CPU microcode causing loss of integrity and confidentiality. (CVE-2024-36347)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
Nios II architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
Sun Sparc architecture;
User-Mode Linux (UML);
x86 architecture;
Xtensa architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
ATM drivers;
Drivers core;
Block device driver;
Network block device driver;
Bluetooth drivers;
Bus devices;
Character device driver;
Hardware random number generator core;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
DMA engine subsystem;
ARM SCMI message protocol;
EFI core;
Intel Stratix 10 firmware drivers;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
CoreSight HW tracing drivers;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
Input Device (Tablet) drivers;
IOMMU subsystem;
IRQ chip drivers;
ISDN/mISDN subsystem;
Macintosh device drivers;
Mailbox framework;
Multiple devices driver;
Media drivers;
Fastrpc Driver;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
Texas Instruments network drivers;
Ethernet team driver;
MediaTek network drivers;
NVME drivers;
PA-RISC drivers;
PCI subsystem;
PCCARD (PCMCIA/CardBus) bus subsystem;
Performance monitor drivers;
Pin controllers subsystem;
Chrome hardware platform drivers;
x86 platform drivers;
ARM PM domains;
PPS (Pulse Per Second) driver;
PTP clock framework;
PWM drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
Texas Instruments SoC drivers;
SPI subsystem;
Media Oriented Systems Transport (MOST) driver;
Realtek RTL8723BS SDIO drivers;
TCM subsystem;
Trusted Execution Environment drivers;
TTY drivers;
Userspace I/O drivers;
Cadence USB3 driver;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Mass Storage drivers;
USB Type-C Connector System Software Interface driver;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
Watchdog drivers;
Xen hypervisor drivers;
AFS file system;
BFS file system;
BTRFS file system;
Ceph distributed file system;
File systems infrastructure;
EFI Variable file system;
exFAT file system;
Ext4 file…

Record: USN-8261-1
Updated: 2026-11-02

Affected products

linux

Affected packages

Affected packages
Package	Affected	Fixed
`kernel` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-64k` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-64k-core` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-64k-debug` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-64k-debug-core` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-64k-debug-devel` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-64k-debug-devel-matched` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-64k-debug-modules` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-64k-debug-modules-core` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-64k-debug-modules-extra` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-64k-devel` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-64k-devel-matched` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-64k-modules` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-64k-modules-core` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-64k-modules-extra` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-abi-stablelists` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-core` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-cross-headers` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-debug` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-debug-core` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-debug-devel` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-debug-devel-matched` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-debug-modules` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-debug-modules-core` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-debug-modules-extra` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-debug-uki-virt` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-devel` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-devel-matched` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-doc` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-headers` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-modules` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-modules-core` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-modules-extra` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-modules-extra-matched` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-rt` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-rt-64k` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-rt-64k-core` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-rt-64k-debug` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-rt-64k-debug-core` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-rt-64k-debug-devel` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-rt-64k-debug-modules` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-rt-64k-debug-modules-core` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-rt-64k-debug-modules-extra` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-rt-64k-devel` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-rt-64k-modules` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-rt-64k-modules-core` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-rt-64k-modules-extra` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-rt-core` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-rt-debug` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-rt-debug-core` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-rt-debug-devel` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-rt-debug-modules` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-rt-debug-modules-core` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-rt-debug-modules-extra` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-rt-devel` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-rt-modules` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-rt-modules-core` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-rt-modules-extra` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-tools` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-tools-libs` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-tools-libs-devel` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-uki-virt` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-uki-virt-addons` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-zfcpdump` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-zfcpdump-core` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-zfcpdump-devel` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-zfcpdump-devel-matched` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-zfcpdump-modules` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-zfcpdump-modules-core` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`kernel-zfcpdump-modules-extra` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`libperf` AlmaLinux:10	before 6.12.0-211.39.1.el10_2	6.12.0-211.39.1.el10_2
`linux-lts` Alpaquita:stream	6.12.92-r1 up to 6.18.35-r1	6.18.35-r1
`bpftool` TuxCare:AlmaLinux:9.2	before 7.0.0-284.1101.el9_2.tuxcare.11.els14	7.0.0-284.1101.el9_2.tuxcare.11.els14
`kernel` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-abi-stablelists` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-core` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-cross-headers` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-debug` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-debug-core` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-debug-devel` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-debug-devel-matched` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-debug-modules` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-debug-modules-core` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-debug-modules-extra` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-debug-modules-internal` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-debug-modules-partner` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-debug-uki-virt` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-devel` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-devel-matched` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-doc` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-headers` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-ipaclones-internal` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-modules` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-modules-core` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-modules-extra` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-modules-internal` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-modules-partner` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-selftests-internal` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-tools` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-tools-libs` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-tools-libs-devel` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-uki-virt` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`libbpf` TuxCare:AlmaLinux:9.2	before 2:1.0.0-2.el9_2.tuxcare.11.els14	2:1.0.0-2.el9_2.tuxcare.11.els14
`libbpf-devel` TuxCare:AlmaLinux:9.2	before 2:1.0.0-2.el9_2.tuxcare.11.els14	2:1.0.0-2.el9_2.tuxcare.11.els14
`libbpf-static` TuxCare:AlmaLinux:9.2	before 2:1.0.0-2.el9_2.tuxcare.11.els14	2:1.0.0-2.el9_2.tuxcare.11.els14
`perf` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`python3-perf` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`rtla` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`Kernel` Linux	before 6.6.73, 6.7.0 up to 6.6.115, 6.13.0 up to 6.17.6	6.6.736.6.1156.12.566.17.6
`linux` Debian:13	before 6.12.57-1, plus listed versions 6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-1~bpo12+1	6.12.57-1
`linux` Debian:14	before 6.17.6-1, plus listed versions 6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1 Show 45 moreShow less 6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1	6.17.6-1
`kernel` openEuler:24.03-LTS	before 6.6.0-144.0.0.127.oe2403	6.6.0-144.0.0.127.oe2403
`kernel` openEuler:24.03-LTS-SP1	before 6.6.0-144.0.0.139.oe2403sp1	6.6.0-144.0.0.139.oe2403sp1
`kernel` openEuler:24.03-LTS-SP2	before 6.6.0-144.0.0.140.oe2403sp2	6.6.0-144.0.0.140.oe2403sp2
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-64k-debug-devel` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-64k-debug-devel-matched` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-64k-debuginfo` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-64k-devel` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-64k-devel-matched` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-debug-debuginfo` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-debug-devel` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-debug-devel-matched` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-debuginfo` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-devel` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-devel-matched` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-doc` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-rt-64k-debug-debuginfo` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-rt-64k-debuginfo` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-rt-debuginfo` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-tools-debuginfo` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-zfcpdump-devel-matched` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`libperf-debuginfo` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`perf` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`perf-debuginfo` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`python3-perf` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`python3-perf-debuginfo` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`rtla` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`rv` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-64k` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-64k-core` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-64k-debug` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-64k-debug-core` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-64k-debug-modules` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-64k-debug-modules-core` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-64k-debug-modules-extra` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-64k-modules` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-64k-modules-core` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-64k-modules-extra` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-abi-stablelists` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-core` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-debug` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-debug-core` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-debug-modules` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-debug-modules-core` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-debug-modules-extra` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-debug-uki-virt` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-modules` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-modules-core` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-modules-extra` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-modules-extra-matched` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-tools` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-tools-libs` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-uki-virt` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-uki-virt-addons` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-zfcpdump` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-zfcpdump-core` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-zfcpdump-modules` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-zfcpdump-modules-core` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-zfcpdump-modules-extra` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-tools-libs-devel` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`libperf` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-rt` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-rt-core` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-rt-debug` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel-rt-debug-core` Red Hat:enterprise_linux:10.2	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`kernel` Rocky Linux:10	before 0:6.12.0-211.39.1.el10_2	0:6.12.0-211.39.1.el10_2
`linux` Root:Ubuntu:22.04	before 5.15.0-202.212.aikido.118	5.15.0-202.212.aikido.118
`rootio-linux` Root:Ubuntu:22.04	before 5.15.0-202.212.aikido.118	5.15.0-202.212.aikido.118
`linux` Root:Ubuntu:24.04	before 6.8.0-147.147.aikido.90	6.8.0-147.147.aikido.90
`rootio-linux` Root:Ubuntu:24.04	before 6.8.0-147.147.aikido.90	6.8.0-147.147.aikido.90
`kernel-64kb` SUSE:Linux Micro 6.2	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-default` SUSE:Linux Micro 6.2	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-default-base` SUSE:Linux Micro 6.2	before 6.12.0-160000.9.1.160000.2.6	6.12.0-160000.9.1.160000.2.6
`kernel-rt` SUSE:Linux Micro 6.2	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-source` SUSE:Linux Micro 6.2	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-64kb` SUSE:Linux Enterprise Server 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-azure` SUSE:Linux Enterprise Server 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-default` SUSE:Linux Enterprise Server 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-default-base` SUSE:Linux Enterprise Server 16.0	before 6.12.0-160000.9.1.160000.2.6	6.12.0-160000.9.1.160000.2.6
`kernel-docs` SUSE:Linux Enterprise Server 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-kvmsmall` SUSE:Linux Enterprise Server 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-obs-qa` SUSE:Linux Enterprise Server 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-source` SUSE:Linux Enterprise Server 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-syms` SUSE:Linux Enterprise Server 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-64kb` SUSE:Linux Enterprise Server for SAP applications 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-azure` SUSE:Linux Enterprise Server for SAP applications 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-default` SUSE:Linux Enterprise Server for SAP applications 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-default-base` SUSE:Linux Enterprise Server for SAP applications 16.0	before 6.12.0-160000.9.1.160000.2.6	6.12.0-160000.9.1.160000.2.6
`kernel-docs` SUSE:Linux Enterprise Server for SAP applications 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-kvmsmall` SUSE:Linux Enterprise Server for SAP applications 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-obs-qa` SUSE:Linux Enterprise Server for SAP applications 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-source` SUSE:Linux Enterprise Server for SAP applications 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP applications 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server for SAP applications 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-obs-build` SUSE:Linux Micro Extras 6.2	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-syms` SUSE:Linux Micro Extras 6.2	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-aws-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-aws-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less 5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1	None known
`linux-aws-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1	None known
`linux-azure-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less 5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2	None known
`linux-azure-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less 5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1	None known
`linux-azure-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1	None known
`linux-azure-fde` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less 5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1	None known
`linux-gcp-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less 5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3	None known
`linux-gcp-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less 5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1	None known
`linux-gcp-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41	None known
`linux-gke` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less 5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111	None known
`linux-gke-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less 5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1	None known
`linux-gkeop` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less 5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77	None known
`linux-gkeop-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 40 moreShow less 5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1	None known
`linux-hwe-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less 5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1	None known
`linux-hwe-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less 5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1	None known
`linux-hwe-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less 5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1	None known
`linux-intel-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19	None known
`linux-oem-5.10` Ubuntu:20.04:LTS	All versions, plus listed versions 5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17 Show 21 moreShow less 5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61	None known
`linux-oem-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21 Show 7 moreShow less 5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36	None known
`linux-oem-5.14` Ubuntu:20.04:LTS	All versions, plus listed versions 5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10 Show 30 moreShow less 5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67	None known
`linux-oem-5.6` Ubuntu:20.04:LTS	All versions, plus listed versions 5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13 Show 24 moreShow less 5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60	None known
`linux-oracle-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-oracle-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1 Show 7 moreShow less 5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1	None known
`linux-oracle-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1	None known
`linux-raspi2` Ubuntu:20.04:LTS	All versions, plus listed versions 5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6	None known
`linux-riscv` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34 Show 7 moreShow less 5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45	None known
`linux-riscv-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1 Show 8 moreShow less 5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35	None known
`linux-riscv-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1 Show 5 moreShow less 5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1	None known
`linux-allwinner-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1	None known
`linux-aws-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1 Show 5 moreShow less 5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1	None known
`linux-aws-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 9 moreShow less 6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1	None known
`linux-aws-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1 Show 9 moreShow less 6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1	None known
`linux-aws-6.8` Ubuntu:22.04:LTS	before 6.8.0-1050.53~22.04.1, plus listed versions 6.8.0-1009.9~22.04.26.8.0-1010.10~22.04.26.8.0-1011.12~22.04.16.8.0-1013.14~22.04.16.8.0-1014.15~22.04.1 Show 27 moreShow less 6.8.0-1015.16~22.04.16.8.0-1016.17~22.04.26.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1023.25~22.04.16.8.0-1024.26~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1035.37~22.04.16.8.0-1036.38~22.04.16.8.0-1039.41~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.44~22.04.16.8.0-1043.45~22.04.16.8.0-1044.46~22.04.16.8.0-1045.47~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.1	6.8.0-1050.53~22.04.1
`linux-azure-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2	None known
`linux-azure-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 8 moreShow less 6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1	None known
`linux-azure-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1 Show 9 moreShow less 6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1	None known
`linux-azure-6.8` Ubuntu:22.04:LTS	before 6.8.0-1051.57~22.04.1, plus listed versions 6.8.0-1008.8~22.04.16.8.0-1009.9~22.04.16.8.0-1010.10~22.04.16.8.0-1012.14~22.04.16.8.0-1013.15~22.04.1 Show 18 moreShow less 6.8.0-1014.16~22.04.16.8.0-1015.17~22.04.26.8.0-1017.20~22.04.16.8.0-1018.21~22.04.16.8.0-1020.23~22.04.16.8.0-1021.25~22.04.16.8.0-1025.30~22.04.16.8.0-1026.31~22.04.16.8.0-1027.32~22.04.16.8.0-1028.33~22.04.16.8.0-1029.34~22.04.16.8.0-1030.35~22.04.16.8.0-1031.36~22.04.16.8.0-1034.39~22.04.16.8.0-1036.42~22.04.16.8.0-1040.46~22.04.16.8.0-1041.47~22.04.16.8.0-1044.50~22.04.1	6.8.0-1051.57~22.04.1
`linux-azure-fde-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1	None known
`linux-azure-fde-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1 Show 5 moreShow less 6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1	None known
`linux-azure-fde-6.8` Ubuntu:22.04:LTS	before 6.8.0-1058.65~22.04.1, plus listed versions 6.8.0-1041.48~22.04.16.8.0-1042.49~22.04.16.8.0-1044.51~22.04.16.8.0-1046.53~22.04.16.8.0-1053.60~22.04.1	6.8.0-1058.65~22.04.1
`linux-gcp-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1020.22~22.04.25.19.0-1021.23~22.04.15.19.0-1022.24~22.04.15.19.0-1024.26~22.04.15.19.0-1025.27~22.04.15.19.0-1026.28~22.04.15.19.0-1027.29~22.04.15.19.0-1030.32~22.04.1	None known
`linux-gcp-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1009.9~22.04.36.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1011.11~22.04.36.2.0-1012.12~22.04.1 Show 7 moreShow less 6.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1016.18~22.04.16.2.0-1017.19~22.04.16.2.0-1018.20~22.04.16.2.0-1019.21~22.04.16.2.0-1021.23~22.04.1	None known
`linux-gcp-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1010.10~22.04.36.5.0-1011.11~22.04.16.5.0-1013.13~22.04.16.5.0-1014.14~22.04.16.5.0-1015.15~22.04.1 Show 8 moreShow less 6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1022.24~22.04.16.5.0-1023.25~22.04.16.5.0-1024.26~22.04.16.5.0-1025.27~22.04.1	None known
`linux-gcp-6.8` Ubuntu:22.04:LTS	before 6.8.0-1052.55~22.04.1, plus listed versions 6.8.0-1010.11~22.04.16.8.0-1011.12~22.04.16.8.0-1012.13~22.04.16.8.0-1013.14~22.04.16.8.0-1014.16~22.04.1 Show 29 moreShow less 6.8.0-1015.17~22.04.16.8.0-1016.18~22.04.16.8.0-1017.19~22.04.16.8.0-1018.20~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1024.26~22.04.16.8.0-1025.27~22.04.16.8.0-1026.28~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1034.36~22.04.26.8.0-1036.38~22.04.16.8.0-1037.39~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.45~22.04.16.8.0-1043.46~22.04.16.8.0-1044.47~22.04.16.8.0-1045.48~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.26.8.0-1048.51~22.04.1	6.8.0-1052.55~22.04.1
`linux-hwe-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-28.29~22.04.15.19.0-32.33~22.04.15.19.0-35.36~22.04.15.19.0-38.39~22.04.15.19.0-40.41~22.04.1 Show 6 moreShow less 5.19.0-41.42~22.04.15.19.0-42.43~22.04.15.19.0-43.44~22.04.15.19.0-45.46~22.04.15.19.0-46.47~22.04.15.19.0-50.50	None known
`linux-hwe-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-25.25~22.04.26.2.0-26.26~22.04.16.2.0-31.31~22.04.16.2.0-32.32~22.04.16.2.0-33.33~22.04.1 Show 5 moreShow less 6.2.0-34.34~22.04.16.2.0-35.35~22.04.16.2.0-36.37~22.04.16.2.0-37.38~22.04.16.2.0-39.40~22.04.1	None known
`linux-hwe-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-14.14~22.04.16.5.0-15.15~22.04.16.5.0-17.17~22.04.16.5.0-18.18~22.04.16.5.0-21.21~22.04.1 Show 8 moreShow less 6.5.0-25.25~22.04.16.5.0-26.26~22.04.16.5.0-27.28~22.04.16.5.0-28.29~22.04.16.5.0-35.35~22.04.16.5.0-41.41~22.04.26.5.0-44.44~22.04.16.5.0-45.45~22.04.1	None known
`linux-hwe-6.8` Ubuntu:22.04:LTS	before 6.8.0-106.106~22.04.1, plus listed versions 6.8.0-38.38~22.04.16.8.0-39.39~22.04.16.8.0-40.40~22.04.36.8.0-45.45~22.04.16.8.0-47.47~22.04.1 Show 23 moreShow less 6.8.0-48.48~22.04.16.8.0-49.49~22.04.16.8.0-50.51~22.04.16.8.0-51.52~22.04.16.8.0-52.53~22.04.16.8.0-57.59~22.04.16.8.0-58.60~22.04.16.8.0-59.61~22.04.16.8.0-60.63~22.04.16.8.0-64.67~22.04.16.8.0-65.68~22.04.16.8.0-78.78~22.04.16.8.0-79.79~22.04.16.8.0-83.83~22.04.16.8.0-84.84~22.04.16.8.0-85.85~22.04.16.8.0-86.87~22.04.16.8.0-87.88~22.04.16.8.0-88.89~22.04.26.8.0-90.91~22.04.16.8.0-94.96~22.04.16.8.0-100.100~22.04.16.8.0-101.101~22.04.1	6.8.0-106.106~22.04.1
`linux-ibm-6.8` Ubuntu:22.04:LTS	before 6.8.0-1049.49~22.04.1, plus listed versions 6.8.0-1008.8~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.16.8.0-1013.13~22.04.1 Show 25 moreShow less 6.8.0-1014.14~22.04.16.8.0-1015.15~22.04.16.8.0-1016.16~22.04.16.8.0-1017.17~22.04.16.8.0-1018.18~22.04.16.8.0-1019.19~22.04.16.8.0-1023.23~22.04.16.8.0-1024.24~22.04.16.8.0-1025.25~22.04.16.8.0-1026.26~22.04.16.8.0-1027.27~22.04.16.8.0-1028.28~22.04.16.8.0-1029.29~22.04.16.8.0-1030.30~22.04.16.8.0-1033.33~22.04.16.8.0-1036.36~22.04.16.8.0-1037.37~22.04.16.8.0-1038.38~22.04.16.8.0-1039.39~22.04.16.8.0-1040.40~22.04.16.8.0-1041.41~22.04.16.8.0-1042.42~22.04.16.8.0-1043.43~22.04.16.8.0-1044.44~22.04.16.8.0-1045.45~22.04.1	6.8.0-1049.49~22.04.1
`linux-intel-iot-realtime` Ubuntu:22.04:LTS	All versions, plus listed versions 5.15.0-1073.75	None known
`linux-lowlatency-hwe-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.1 Show 5 moreShow less 5.19.0-1024.25~22.04.15.19.0-1025.26~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1030.30	None known
`linux-lowlatency-hwe-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1008.8~22.04.16.2.0-1009.9~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.1 Show 5 moreShow less 6.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1	None known
`linux-lowlatency-hwe-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-14.14.1~22.04.16.5.0-15.15.1.1~22.04.16.5.0-17.17.1.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.1 Show 8 moreShow less 6.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.16.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-41.41.1~22.04.16.5.0-42.42.1~22.04.16.5.0-44.44.1~22.04.16.5.0-45.45.1~22.04.1	None known
`dtb-aarch64` openSUSE:Leap 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-64kb` openSUSE:Leap 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-azure` openSUSE:Leap 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-default` openSUSE:Leap 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-default-base` openSUSE:Leap 16.0	before 6.12.0-160000.9.1.160000.2.6	6.12.0-160000.9.1.160000.2.6
`kernel-docs` openSUSE:Leap 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-kvmsmall` openSUSE:Leap 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-obs-build` openSUSE:Leap 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-obs-qa` openSUSE:Leap 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-rt` openSUSE:Leap 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-source` openSUSE:Leap 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-syms` openSUSE:Leap 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1
`kernel-zfcpdump` openSUSE:Leap 16.0	before 6.12.0-160000.9.1	6.12.0-160000.9.1

History

History
Recorded	Changed	Sources
Nov 3, 2026	facts	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-40237 is a medium vulnerability (CVSS 5.7) in Linux, published December 4, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.20%, the 10th percentile. Fixed in kernel 6.12.0-211.39.1.el10_2.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 193 package rows, 56 versions, 2,180 references and the rest of 24 source descriptions. The JSON record has them.